<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1258">
<package pkgid="2f4fdc2e6bdbeaa456d18f1a0fd1aebdd22d1bd637eb0fbf55d666f3ded557608cd9b5f33533b6610f7c9f5bf2b81f8da9c673b88ee2703f3c64a1d0b67a5a2a" name="Mesa-debugsource" arch="aarch64">
  <version epoch="0" ver="23.3.4" rel="slfo.1.1_2.1"/>
  <changelog author="sndirsch@suse.com" date="1700481600">- buildrequire 'pkgconfig(SPIRV-Tools)' also with disabled rusticl
  (new dep since some time)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701432000">- Update to version 23.3.0:
  * It includes NVK, a new reverse-engineered Vulkan driver for
    Nvidia hardware. This driver is still in experimental phase,
    not quite ready for prime time yet, but adventurous users can
    give it a go!
  * New extensions &amp; features (in no particular order):
  - VK_EXT_pipeline_robustness on ANV
  - VK_KHR_maintenance5 on RADV
  - OpenGL ES 3.1 on Asahi
  - GL_ARB_compute_shader on Asahi
  - GL_ARB_shader_atomic_counters on Asahi
  - GL_ARB_shader_image_load_store on Asahi
  - GL_ARB_shader_image_size on Asahi
  - GL_ARB_shader_storage_buffer_object on Asahi
  - GL_ARB_sample_shading on Asahi
  - GL_OES_sample_variables on Asahi
  - GL_OES_shader_multisample_interpolation on Asahi
  - GL_OES_gpu_shader5 on Asahi
  - EGL_ANDROID_blob_cache works when disk caching is disabled
  - VK_KHR_cooperative_matrix on RADV/GFX11+
- Drop patches fixed upstream:
  * U_clover-llvm-move-to-modern-pass-manager.patch
  * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch
- Refresh patches with quilt.
- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- Update to bugfix release 23.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.2.html</changelog>
  <changelog author="sndirsch@suse.com" date="1704974400">-  Update to bugfix release 23.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.3.html</changelog>
  <changelog author="sndirsch@suse.com" date="1705752000">- let Mesa-dri require libvulkan1 to get zink/swrast driver
  fallbacks working (hopefully); probably related:
  https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed1372cda6a7b55d964d</changelog>
  <changelog author="sndirsch@suse.com" date="1705752001">- u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch
  u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch
  python36-buildfix.patch
  * fixes build against python 3.6</changelog>
  <changelog author="sndirsch@suse.com" date="1705752002">- python36-buildfix.patch
  * src/freedreno/registers/gen_header.py: hopefully fixes aarch64
    build</changelog>
  <changelog author="sndirsch@suse.com" date="1705924800">- split python36-buildfix.patch into two patches python36-buildfix1.patch
  and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6
  since on newer python releases than 3.6 it changes behaviour to
  remove required=True option</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- Update to bugfix release 23.3.4
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.4.html</changelog>
  <changelog author="sndirsch@suse.com" date="1752148800">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
</package>
<package pkgid="ee5b355d3109697599e0bd61d979ce6d809c0f5557d9cc511821d82ba7e4828df141789ee60ac9962352447c21fcd7465b9cfa25ab2bf4ba349bcfaba2edfa0b" name="Mesa-dri-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.3.4" rel="slfo.1.1_2.1"/>
  <changelog author="sndirsch@suse.com" date="1700481600">- buildrequire 'pkgconfig(SPIRV-Tools)' also with disabled rusticl
  (new dep since some time)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701432000">- Update to version 23.3.0:
  * It includes NVK, a new reverse-engineered Vulkan driver for
    Nvidia hardware. This driver is still in experimental phase,
    not quite ready for prime time yet, but adventurous users can
    give it a go!
  * New extensions &amp; features (in no particular order):
  - VK_EXT_pipeline_robustness on ANV
  - VK_KHR_maintenance5 on RADV
  - OpenGL ES 3.1 on Asahi
  - GL_ARB_compute_shader on Asahi
  - GL_ARB_shader_atomic_counters on Asahi
  - GL_ARB_shader_image_load_store on Asahi
  - GL_ARB_shader_image_size on Asahi
  - GL_ARB_shader_storage_buffer_object on Asahi
  - GL_ARB_sample_shading on Asahi
  - GL_OES_sample_variables on Asahi
  - GL_OES_shader_multisample_interpolation on Asahi
  - GL_OES_gpu_shader5 on Asahi
  - EGL_ANDROID_blob_cache works when disk caching is disabled
  - VK_KHR_cooperative_matrix on RADV/GFX11+
- Drop patches fixed upstream:
  * U_clover-llvm-move-to-modern-pass-manager.patch
  * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch
- Refresh patches with quilt.
- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- Update to bugfix release 23.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.2.html</changelog>
  <changelog author="sndirsch@suse.com" date="1704974400">-  Update to bugfix release 23.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.3.html</changelog>
  <changelog author="sndirsch@suse.com" date="1705752000">- let Mesa-dri require libvulkan1 to get zink/swrast driver
  fallbacks working (hopefully); probably related:
  https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed1372cda6a7b55d964d</changelog>
  <changelog author="sndirsch@suse.com" date="1705752001">- u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch
  u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch
  python36-buildfix.patch
  * fixes build against python 3.6</changelog>
  <changelog author="sndirsch@suse.com" date="1705752002">- python36-buildfix.patch
  * src/freedreno/registers/gen_header.py: hopefully fixes aarch64
    build</changelog>
  <changelog author="sndirsch@suse.com" date="1705924800">- split python36-buildfix.patch into two patches python36-buildfix1.patch
  and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6
  since on newer python releases than 3.6 it changes behaviour to
  remove required=True option</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- Update to bugfix release 23.3.4
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.4.html</changelog>
  <changelog author="sndirsch@suse.com" date="1752148800">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
</package>
<package pkgid="d1cc22fc2fe55fad74a79db7f9a21746e769af309360e3a662a9c93362fa84461fae2e0a30d21f9e605202af5c257ceea4bb78931a3d57471e4e66d72d7d5cfc" name="Mesa-drivers-debugsource" arch="aarch64">
  <version epoch="0" ver="23.3.4" rel="slfo.1.1_2.1"/>
  <changelog author="sndirsch@suse.com" date="1700481600">- buildrequire 'pkgconfig(SPIRV-Tools)' also with disabled rusticl
  (new dep since some time)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701432000">- Update to version 23.3.0:
  * It includes NVK, a new reverse-engineered Vulkan driver for
    Nvidia hardware. This driver is still in experimental phase,
    not quite ready for prime time yet, but adventurous users can
    give it a go!
  * New extensions &amp; features (in no particular order):
  - VK_EXT_pipeline_robustness on ANV
  - VK_KHR_maintenance5 on RADV
  - OpenGL ES 3.1 on Asahi
  - GL_ARB_compute_shader on Asahi
  - GL_ARB_shader_atomic_counters on Asahi
  - GL_ARB_shader_image_load_store on Asahi
  - GL_ARB_shader_image_size on Asahi
  - GL_ARB_shader_storage_buffer_object on Asahi
  - GL_ARB_sample_shading on Asahi
  - GL_OES_sample_variables on Asahi
  - GL_OES_shader_multisample_interpolation on Asahi
  - GL_OES_gpu_shader5 on Asahi
  - EGL_ANDROID_blob_cache works when disk caching is disabled
  - VK_KHR_cooperative_matrix on RADV/GFX11+
- Drop patches fixed upstream:
  * U_clover-llvm-move-to-modern-pass-manager.patch
  * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch
- Refresh patches with quilt.
- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- Update to bugfix release 23.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.2.html</changelog>
  <changelog author="sndirsch@suse.com" date="1704974400">-  Update to bugfix release 23.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.3.html</changelog>
  <changelog author="sndirsch@suse.com" date="1705752000">- let Mesa-dri require libvulkan1 to get zink/swrast driver
  fallbacks working (hopefully); probably related:
  https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed1372cda6a7b55d964d</changelog>
  <changelog author="sndirsch@suse.com" date="1705752001">- u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch
  u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch
  python36-buildfix.patch
  * fixes build against python 3.6</changelog>
  <changelog author="sndirsch@suse.com" date="1705752002">- python36-buildfix.patch
  * src/freedreno/registers/gen_header.py: hopefully fixes aarch64
    build</changelog>
  <changelog author="sndirsch@suse.com" date="1705924800">- split python36-buildfix.patch into two patches python36-buildfix1.patch
  and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6
  since on newer python releases than 3.6 it changes behaviour to
  remove required=True option</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- Update to bugfix release 23.3.4
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.4.html</changelog>
  <changelog author="sndirsch@suse.com" date="1752148800">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
</package>
<package pkgid="970dc78453152edb46117deb7e6ce5a8573d7b4acffa55c0256f08391bf550880bffc9edc2ee20f04af048178aa1e02f0ef5740bd796eb1312b4fc258b4779b8" name="Mesa-gallium-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.3.4" rel="slfo.1.1_2.1"/>
  <changelog author="sndirsch@suse.com" date="1700481600">- buildrequire 'pkgconfig(SPIRV-Tools)' also with disabled rusticl
  (new dep since some time)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701432000">- Update to version 23.3.0:
  * It includes NVK, a new reverse-engineered Vulkan driver for
    Nvidia hardware. This driver is still in experimental phase,
    not quite ready for prime time yet, but adventurous users can
    give it a go!
  * New extensions &amp; features (in no particular order):
  - VK_EXT_pipeline_robustness on ANV
  - VK_KHR_maintenance5 on RADV
  - OpenGL ES 3.1 on Asahi
  - GL_ARB_compute_shader on Asahi
  - GL_ARB_shader_atomic_counters on Asahi
  - GL_ARB_shader_image_load_store on Asahi
  - GL_ARB_shader_image_size on Asahi
  - GL_ARB_shader_storage_buffer_object on Asahi
  - GL_ARB_sample_shading on Asahi
  - GL_OES_sample_variables on Asahi
  - GL_OES_shader_multisample_interpolation on Asahi
  - GL_OES_gpu_shader5 on Asahi
  - EGL_ANDROID_blob_cache works when disk caching is disabled
  - VK_KHR_cooperative_matrix on RADV/GFX11+
- Drop patches fixed upstream:
  * U_clover-llvm-move-to-modern-pass-manager.patch
  * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch
- Refresh patches with quilt.
- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- Update to bugfix release 23.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.2.html</changelog>
  <changelog author="sndirsch@suse.com" date="1704974400">-  Update to bugfix release 23.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.3.html</changelog>
  <changelog author="sndirsch@suse.com" date="1705752000">- let Mesa-dri require libvulkan1 to get zink/swrast driver
  fallbacks working (hopefully); probably related:
  https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed1372cda6a7b55d964d</changelog>
  <changelog author="sndirsch@suse.com" date="1705752001">- u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch
  u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch
  python36-buildfix.patch
  * fixes build against python 3.6</changelog>
  <changelog author="sndirsch@suse.com" date="1705752002">- python36-buildfix.patch
  * src/freedreno/registers/gen_header.py: hopefully fixes aarch64
    build</changelog>
  <changelog author="sndirsch@suse.com" date="1705924800">- split python36-buildfix.patch into two patches python36-buildfix1.patch
  and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6
  since on newer python releases than 3.6 it changes behaviour to
  remove required=True option</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- Update to bugfix release 23.3.4
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.4.html</changelog>
  <changelog author="sndirsch@suse.com" date="1752148800">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
</package>
<package pkgid="774408b2d111a685a4203d80b762fcfd59d836281ae2231721a069a7a6f00439ff53c22f735b9ebc7ee011950408999001694f203021489eb017814608b9086f" name="Mesa-libEGL1-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.3.4" rel="slfo.1.1_2.1"/>
  <changelog author="sndirsch@suse.com" date="1700481600">- buildrequire 'pkgconfig(SPIRV-Tools)' also with disabled rusticl
  (new dep since some time)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701432000">- Update to version 23.3.0:
  * It includes NVK, a new reverse-engineered Vulkan driver for
    Nvidia hardware. This driver is still in experimental phase,
    not quite ready for prime time yet, but adventurous users can
    give it a go!
  * New extensions &amp; features (in no particular order):
  - VK_EXT_pipeline_robustness on ANV
  - VK_KHR_maintenance5 on RADV
  - OpenGL ES 3.1 on Asahi
  - GL_ARB_compute_shader on Asahi
  - GL_ARB_shader_atomic_counters on Asahi
  - GL_ARB_shader_image_load_store on Asahi
  - GL_ARB_shader_image_size on Asahi
  - GL_ARB_shader_storage_buffer_object on Asahi
  - GL_ARB_sample_shading on Asahi
  - GL_OES_sample_variables on Asahi
  - GL_OES_shader_multisample_interpolation on Asahi
  - GL_OES_gpu_shader5 on Asahi
  - EGL_ANDROID_blob_cache works when disk caching is disabled
  - VK_KHR_cooperative_matrix on RADV/GFX11+
- Drop patches fixed upstream:
  * U_clover-llvm-move-to-modern-pass-manager.patch
  * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch
- Refresh patches with quilt.
- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- Update to bugfix release 23.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.2.html</changelog>
  <changelog author="sndirsch@suse.com" date="1704974400">-  Update to bugfix release 23.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.3.html</changelog>
  <changelog author="sndirsch@suse.com" date="1705752000">- let Mesa-dri require libvulkan1 to get zink/swrast driver
  fallbacks working (hopefully); probably related:
  https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed1372cda6a7b55d964d</changelog>
  <changelog author="sndirsch@suse.com" date="1705752001">- u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch
  u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch
  python36-buildfix.patch
  * fixes build against python 3.6</changelog>
  <changelog author="sndirsch@suse.com" date="1705752002">- python36-buildfix.patch
  * src/freedreno/registers/gen_header.py: hopefully fixes aarch64
    build</changelog>
  <changelog author="sndirsch@suse.com" date="1705924800">- split python36-buildfix.patch into two patches python36-buildfix1.patch
  and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6
  since on newer python releases than 3.6 it changes behaviour to
  remove required=True option</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- Update to bugfix release 23.3.4
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.4.html</changelog>
  <changelog author="sndirsch@suse.com" date="1752148800">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
</package>
<package pkgid="74ba5ef1126635c986ff0b7337c1911356252defb1a03c3d77034b92f413e75db3eb9998cb1c2f3f1c7de16a55d847d310968d4d664a632614df2d513619d256" name="Mesa-libGL1-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.3.4" rel="slfo.1.1_2.1"/>
  <changelog author="sndirsch@suse.com" date="1700481600">- buildrequire 'pkgconfig(SPIRV-Tools)' also with disabled rusticl
  (new dep since some time)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701432000">- Update to version 23.3.0:
  * It includes NVK, a new reverse-engineered Vulkan driver for
    Nvidia hardware. This driver is still in experimental phase,
    not quite ready for prime time yet, but adventurous users can
    give it a go!
  * New extensions &amp; features (in no particular order):
  - VK_EXT_pipeline_robustness on ANV
  - VK_KHR_maintenance5 on RADV
  - OpenGL ES 3.1 on Asahi
  - GL_ARB_compute_shader on Asahi
  - GL_ARB_shader_atomic_counters on Asahi
  - GL_ARB_shader_image_load_store on Asahi
  - GL_ARB_shader_image_size on Asahi
  - GL_ARB_shader_storage_buffer_object on Asahi
  - GL_ARB_sample_shading on Asahi
  - GL_OES_sample_variables on Asahi
  - GL_OES_shader_multisample_interpolation on Asahi
  - GL_OES_gpu_shader5 on Asahi
  - EGL_ANDROID_blob_cache works when disk caching is disabled
  - VK_KHR_cooperative_matrix on RADV/GFX11+
- Drop patches fixed upstream:
  * U_clover-llvm-move-to-modern-pass-manager.patch
  * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch
- Refresh patches with quilt.
- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- Update to bugfix release 23.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.2.html</changelog>
  <changelog author="sndirsch@suse.com" date="1704974400">-  Update to bugfix release 23.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.3.html</changelog>
  <changelog author="sndirsch@suse.com" date="1705752000">- let Mesa-dri require libvulkan1 to get zink/swrast driver
  fallbacks working (hopefully); probably related:
  https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed1372cda6a7b55d964d</changelog>
  <changelog author="sndirsch@suse.com" date="1705752001">- u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch
  u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch
  python36-buildfix.patch
  * fixes build against python 3.6</changelog>
  <changelog author="sndirsch@suse.com" date="1705752002">- python36-buildfix.patch
  * src/freedreno/registers/gen_header.py: hopefully fixes aarch64
    build</changelog>
  <changelog author="sndirsch@suse.com" date="1705924800">- split python36-buildfix.patch into two patches python36-buildfix1.patch
  and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6
  since on newer python releases than 3.6 it changes behaviour to
  remove required=True option</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- Update to bugfix release 23.3.4
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.4.html</changelog>
  <changelog author="sndirsch@suse.com" date="1752148800">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
</package>
<package pkgid="a3f589f4df423613e5dabc64ad81994d64fb3430cc300783c1574ab6249169db981c9303747d861e4857e1f3247ab76f845b85da3bb9f0c68f1a0957a809867d" name="Mesa-libglapi0-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.3.4" rel="slfo.1.1_2.1"/>
  <changelog author="sndirsch@suse.com" date="1700481600">- buildrequire 'pkgconfig(SPIRV-Tools)' also with disabled rusticl
  (new dep since some time)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701432000">- Update to version 23.3.0:
  * It includes NVK, a new reverse-engineered Vulkan driver for
    Nvidia hardware. This driver is still in experimental phase,
    not quite ready for prime time yet, but adventurous users can
    give it a go!
  * New extensions &amp; features (in no particular order):
  - VK_EXT_pipeline_robustness on ANV
  - VK_KHR_maintenance5 on RADV
  - OpenGL ES 3.1 on Asahi
  - GL_ARB_compute_shader on Asahi
  - GL_ARB_shader_atomic_counters on Asahi
  - GL_ARB_shader_image_load_store on Asahi
  - GL_ARB_shader_image_size on Asahi
  - GL_ARB_shader_storage_buffer_object on Asahi
  - GL_ARB_sample_shading on Asahi
  - GL_OES_sample_variables on Asahi
  - GL_OES_shader_multisample_interpolation on Asahi
  - GL_OES_gpu_shader5 on Asahi
  - EGL_ANDROID_blob_cache works when disk caching is disabled
  - VK_KHR_cooperative_matrix on RADV/GFX11+
- Drop patches fixed upstream:
  * U_clover-llvm-move-to-modern-pass-manager.patch
  * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch
- Refresh patches with quilt.
- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- Update to bugfix release 23.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.2.html</changelog>
  <changelog author="sndirsch@suse.com" date="1704974400">-  Update to bugfix release 23.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.3.html</changelog>
  <changelog author="sndirsch@suse.com" date="1705752000">- let Mesa-dri require libvulkan1 to get zink/swrast driver
  fallbacks working (hopefully); probably related:
  https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed1372cda6a7b55d964d</changelog>
  <changelog author="sndirsch@suse.com" date="1705752001">- u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch
  u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch
  python36-buildfix.patch
  * fixes build against python 3.6</changelog>
  <changelog author="sndirsch@suse.com" date="1705752002">- python36-buildfix.patch
  * src/freedreno/registers/gen_header.py: hopefully fixes aarch64
    build</changelog>
  <changelog author="sndirsch@suse.com" date="1705924800">- split python36-buildfix.patch into two patches python36-buildfix1.patch
  and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6
  since on newer python releases than 3.6 it changes behaviour to
  remove required=True option</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- Update to bugfix release 23.3.4
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.4.html</changelog>
  <changelog author="sndirsch@suse.com" date="1752148800">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
</package>
<package pkgid="30af59af86c46831ff53600c68d1d063b0801af27a26b6f68f07d20b0d5b411b0650760adb8e5c7ef8990eb6f523b1980e74446864a24c9d94a1bdff2029c2f2" name="ModemManager-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.20.6" rel="slfo.1.1_1.2"/>
  <changelog author="mardnh@gmx.de" date="1589025600">- Update to version 1.12.10:
  + mmcli:
  - Add missing 'allowed-auth' bearer property in the output.
  - Remove non-existent --list-bearers option from manpage.
  + introspection: Use the correct node name for the ModemManager1
    object.
  + Modem interface: Allow Command() while in Failed state.
  + MBIM: Fix segfault when loading capabilities.
  + Plugins: huawei: updated HCSQ regex to match unquoted response.</changelog>
  <changelog author="pvorel@suse.cz" date="1604318400">- Update to version 1.14.6:
  + Modem interface:
  - Added support for AT-based and/or QMI-based 5G devices
  - Deprecated the MM_MODEM_CAPABILITY_LTE_ADVANCED capability
  + Bearer interface:
  - Added additional 'attempts', 'failed-attempts', 'total-rx-bytes',
    'total-tx-bytes' and 'total-duration' values in the 'Stats' property
    exposed by the Bearer objects.
  + Daemon:
  - Switched to 'STRICT' filter mode by default.
  - Added a new implicit whitelist rules applicable in 'STRICT' filter mode.
  - Updated the probing logic to make sure we don't attempt a re-probe when
    the device is gone.
  - Updated daemon logging.
  + AT:
  - Moved the charset definition logic to the initialization phase instead
    of the enabling phase.
  - Updated manual registration operation
  + QMI:
  - Devices using the LOC service for GNSS will now also setup the list of
    required NMEA traces before starting the engine.
  - Update carrier code if registration changes from one roaming operator
    to another.
  - Explicitly disable autoconnect during modem enabling phase, because it
    interferes with our connection management logic.
  - Fallback to raw-ip if WDA Get Data Format requests arguments, as in most
    new 5G devices.
  - Updated to always use the asynchronous close() operation.
  - Handle disconnection indications during connection attempts.
  + MBIM:
  - Update carrier code if registration changes from one roaming operator to
    another.
  - Implement reset in Intel-based and Qualcomm-based devices.
  - Avoid LTE attach config/status if unsupported.
  - Updated to make sure all allocated QMI CIDs are released during shutdown.
  + SIM interface:
  - Don't allow sending PIN/PUK if not required.
  + 3GPP interface:
  - Fixed manual re-registration to the same operator.
  + CDMA interface:
  - Don't allow multiple concurrent activation attempts.
  - Disallow empty carrier code in automatic activation.
  + Bearer interface:
  - Updated to avoid connection checks or stats updates while disconnecting.
  + libmm-glib:
  - New 'mm_location_gps_nmea_get_traces()' method to retrieve a NULL
    terminated array of strings with all cached NMEA traces.
  - Deprecated the 'mm_location_gps_nmea_build_full()' method.
  + mmcli:
  - Added a new 'any' lookup keyword for the --modem and --sim options, useful
    when the system is only expected to have one single device.
  + Plugins:
  - broadmobi: new plugin, right now just with port type hints for the BM818.
  - foxconn: new plugin to support the T77W968 (both with and without eSIM).
  - dell,dw5821e: added support for the DW5821e with eSIM variant.
  - huawei: don't delay reporting network initiated disconnects.
  - huawei: try to read port type hints from interface descriptions.
  - huawei: avoid using the QCDM port during a voice call.
  - cinterion: skip sim ready check for modules that don't support it.
  - cinterion: implemented radio/band handling for LTE modems.
  - cinterion: added Signal interface support bsaed on AT^SMONI.
  - cinterion: added support for MBIM based devices like the PLS62-W.
  - quectel: updated to detect SIM hot swap via +QUSIM URCs.
  - fibocom: added support for QMI based devices like the FM150.
  - ublox: ignore error when disconnecting last LTE bearer.
  - ublox: implement support to enable and detect +UUDTMF URCs.
  - ublox: added blacklist rules for GPS modules in the plugin itself.
  - sierra: implement manual and automatic CDMA activation.
  - novatel: implement manual and automatic CDMA activation.
  + Build improvements
  + Update dependencies (mbim: &gt;= 1.24.0, qmi: &gt;= 1.26.0)
- Add BuildRequires libxslt-tools (xsltproc required)
- Update config file path: mm-dell-dw5821e-carrier-mapping.conf
  =&gt; mm-foxconn-t77w968-carrier-mapping.conf (see d7d2b910 ("foxconn: new
  plugin to support the T77W968"))</changelog>
  <changelog author="mardnh@gmx.de" date="1607256000">- Update to version 1.14.8:
  + Build:
  - Fixed distcheck with new gtk-doc releases.
  - ModemManager-names.h was being included in the dist tarball,
    but then removed on the 'clean' target. Fix that, by only
    removing it on the 'maintainer-clean' target. Therefore,
    'xsltproc' is now only needed in git builds, not needed when
    building from a dist tarball.
  + QMI:
  - Fix daemon crash when the device is removed during the
    initialization sequence.
  + Several other minor improvements and fixes.
- Drop libxslt-tools BuildRequires: No longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1628942400">- Switch bash completion subpackage to noarch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Update to version 1.18.6:
  + The ModemManager.service file for systemd integration provided
    in the sources is updated as follows:
    ++ 'CAP_NET_ADMIN' is now required in the
    'CapabilityBoundingSet' field.
    ++ 'AF_NETLINK' and 'AF_QIPCRTR' are now required in the
    'RestrictAddressFamilies' field.
  + The LEGACY and PARANOID filter types that were allowed
    options in the '--filter-policy' option in the ModemManager
    daemon were deprecated in version 1.16.0 and have now been
    completely removed, along with the vid:pid blacklist of
    devices and the vid:pid greylist of RS232&lt;-&gt;USB adapters.
  + The ModemManager daemon can run now in a 'quick suspend/resume'
    mode, in which no explicit data disconnection is triggered on
    suspend, and no explicit device re-probing from scratch is
    launched on resume. Instead, the daemon will try to refresh
    the state of all interfaces upon suspend, e.g. to see if the
    module keeps registered to the same operator, to see if it is
    still connected, and so on.
  + core: added support for the new 'WWAN' subsystem in Linux kernel
    5.13, enabling PCIe-only modules.
  + core: The charset conversion methods rework, including the
    avoiding of the iconv()
  + qmi: the logic managing allowed/preferred modes was fixed for
    multimode devices like the MC7304, making sure the acquisition
    order preference always had the same items.
  + serial: when modem is connected with AT+PPP, ignore forced
    disconnections, so that we don't take ownership of the PPP
    port before pppd has released it.
  + foxconn: added support for the T99W175 (SDX55) module,
    including built-in FCC unlock procedure.
  + foxconn: added new MBIM QDU firmware update method.
- Move the dbus-1 system.d file to /usr (bsc#1196170)
- Use source verification
- Update Supplements to new format
- Add BRs needed for new tests:
  * python3-gobject-Gdk
  * python3-dbus-python</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Enable QRTR support
  * Add BR pkgconfig(qrtr-glib)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1659787200">- Update to version 1.18.10:
  + Build: Require libqmi 1.30.8.
  + FCC unlock: Updated SDX55 unlock script to handle the new
    method introduced in the latest firmware releases.
  + Modem interface:
  - Set signal quality to 0% on shutdown.
  - Set signal quality as recent on init.
  + MBIM:
  - Fix task completion when peeking device fails.
  - Fix several GError double-frees.
  + mmcli: Don't print signal quality until modem is enabled.
  + Plugins: foxconn: remove carrier mapping table for T99W175.
  + Several other minor improvements and fixes.
- Changes from version 1.18.8:
  + A new connection status dispatcher setup is provided, where
    users can provide custom scripts that will be called on bearer
    connect/disconnect events. This dispatcher will make the netifd
    integration in openwrt work much better, as we'll be able to
    report network-initiated disconnections cleanly to netifd.
    There are no default connection status dispatcher scripts
    installed, but it's suggested distributions make sure the
    following directories exist:
  - ${sysconfdir}/ModemManager/connection.d/
  - ${libdir}/ModemManager/connection.d/
  + API: Add missing Simple interface definitions in
    ModemManager-names.h.
  + Build:
  - meson:
    . fix daemon enums dependencies.
    . fix port enums includes.
    . fix 'export_packages' in GIR setup.
    . fix simtech plugin module name.
  - systemd: don't run ModemManager in containers.
  + Core:
  - serial: ensure the port object is valid after BUFFER_FULL
    handling.
  - netlink:
    . use unaligned netlink attribute length.
    . only change IFF_UP flag.
  - bearer: match unknown auth to chap in loose comparisons.
  - charsets: return error if UTF-8 validation fails.
  - fcc-unlock: make scripts POSIX shell compatible.
  - modem-helpers:
    . consider minimum ID when choosing best profile.
    . fix reading &lt;Act&gt; given in COPS=? responses.
  - sms: prevent crash if date is out of range.
  - profile-manager: fix copy-paste error on tags for quarks.
  + QMI:
  - Ignore slot status indications until initial status is known.
  - Return error when loading capabilities if none is found.
  + MBIM:
  - Default initial EPS bearer's auth to chap when unknown.
  - Update default error when network error is out of range.
  + mmcli: Fix key length when printing list of items.
  + Plugins:
  - linktop: new port type hints.
  - cinterion: add support for PLSx3w modems.
  - huawei: disable +CPOL based features in Huawei E226.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661601600">- Disable make_check call, tests currently fails due to our switch
  to glib 2.73.2.
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/870
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/601
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/621</changelog>
  <changelog author="luc14n0@opensuse.org" date="1665230400">- Update to version 1.18.12:
  + This release fixes a few very critical issues that happpen when
    using a glib2 newer or equal than 2.73.2, plus numerous fixes
    for the Core, MBIM, QMI, 3GPP profile manager interface, SMS,
    libmm-glib, and mmcli.
  + Plugins:
  - sierra: disable +CPOL in the GL7600.
  - telit: add LE910Cx MBIM composition port hints.
  - telit: add port type hints for LN920 0x1060, 0x1061
    compositions.
  - icera: fix double free on %%IPSYS=? response processing
  - mtk: fix task completion when loading supported modes.
- Add new pkgconfig modules build requirements: gio-2.0, glib-2.0,
  gmodule-2.0, and gobject-2.0.
- Update ModemManager.keyring to the new upstream key:
  A814D09B9C5BC01945A64308AECE0239C6606AD5. Found at
  www.freedesktop.org/software/ModemManager/0xAECE0239C6606AD5.asc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.20.6:
  + build: New build option to allow disabling the installation of
    examples.
  + core:
  - Fix crash when uninhibiting partially removed device.
  - Fix crash when attempting to load an invalid shared utils
    library.
  + mmcli:
  - Allow JSON and key/value output when creating SMS messages.
  - Improved JSON output in network scan results.
  + libmm-glib:
  - Avoid using g_time_zone_new_offset() unless glib &gt;= 2.58.
  - Fix flags to string conversion utils to allow multiple flags.
  + MBIM:
  - Reset cached SIM info when SIM is unlocked.
  - Fix synchronizing the state of the SIM hot swap configured
    flag.
  - Fix bug cleaning up the LTE attach info unsolicited message
    handler.
  - Fallback from QMI UIM service only if unsupported.
  - Add missing support for 'emergency' APN type.
  + QMI:
  - Fix processing and exposing PCOs.
  - Fix power up on modems that don't support power state change
    indications.
  + plugins:
  - telit:
    . add additional support for 5G modems.
    . added port type hints for FN990 0x1070, 0x1071
    compositions.
    . increase allowed initial delay in AT ports.
    . fallback to AT commands if loading revision via MBIM fails.
  - quectel: add support for EC21-EUX usb modules.
  - xmm: fix crash parsing XACT? response.
- Changes from version 1.20.4:
  + build:
  - Don't hardcode building shared libraries, so that meson's
    default_library option can be used properly,
  - po: Added missing Georgian translation in LINGUAS.
  + QMI:
  - Fixed loading NR5G signal info.
  - Fixed memory leaks when processing signal info.
  - Correctly scaled the SNR value reported in NR5G.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  + MBIM:
  - Fixed processing MbimSmsStatusFlag as flags, not as an enum.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  - Chained up device notifications through the MMPortMbim
    object.
  + Messaging: Allowed Delete operation during enabling/disabling.
  + Core: Don't assume port tables always exist so that
    long-standing operations holding an object reference can finish
    cleanly even after the initial object disposal has already been
    run.
  + plugins:
  - quectel: added new firehose/sahara support udev tags in new
    models.
  - broadmobi: added MM_PLUGIN_REQUIRED_QCDM flag.
  - cinterion:
    . added a delay to the ^SWWAN? command.
    . added retry mechanism to the ^SWWAN? command.
- Changes from version 1.20.2:
  + build:
  - Fixed building without MBIM support.
  - Fixed building without tests support.
  - Disabled test interface in base manager if building without
    tests.
  - Updated intel plugin dependencies to require XMM shared
    utils.
  - Fixed templates to make build reproducible.
  + FCC unlock: Updated shell scripts to avoid requiring bash.
  + MBIM:
  - Ignored SIM related indications during a SIM slot switch
    operation.
  - Updated capabilities loading to use Microsoft Extensions if
    available.
  - Updated supported modes loading to use the CustomDataClass
    field contents.
  + SIM: Fixed length when reading GID1/GID2 using AT commands.
  + Several other minor improvements and fixes.
- Changes from version 1.20.0:
  + API:
  - New 'Modem.Sar' interface to allow the host to manage the SAR
    power level.
  - New 'Modem.GetCellInfo()' method, that allows querying
    information about the current serving and neighboring cells.
    Currently including 'cell-type' and 'serving' fields for all
    cell types, plus additional type-specific fields:
    . CDMA: 'nid', 'sid', 'base-station-id', 'ref-pn' and
    'pilot-strength'.
    . GSM: 'operator-id', 'lac', 'ci', 'timing-advance', 'arfcn',
    'base-station-id' and 'rx-level'.
    . UMTS: 'operator-id', 'lac', 'ci', 'frequency-fdd-ul',
    'frequency-fdd-dl', 'frequency-tdd', 'uarfcn', 'psc',
    'rscp', 'ecio' and 'path-loss'.
    . TDSCDMA: 'operator-id', 'lac', 'ci', 'uarfcn',
    'cell-parameter-id', 'timing-advance', 'rscp' and
    'path-loss'.
    . LTE: 'operator-id', 'tac', 'ci', 'physical-ci', 'earfcn',
    'rsrp', 'rsrq' and 'timing-advance'.
    . 5GNR: 'operator-id', 'tac', 'ci', 'physical-ci', 'nrarfcn',
    'rsrp', 'rsrq', 'sinr' and 'timing-advance'.
  - New 'access-type-preference', 'roaming-allowance',
    'profile-name', 'profile-enabled' and 'profile-source'
    fields in the 'Bearer.Properties' property, that can also be
    used in both 'Modem.Simple.Connect()' and
    'Modem.CreateBearer()'.
  - New 'Modem.Modem3gpp.SetPacketServiceState()' method and
    'Modem.Modem3gpp.PacketServiceState' property, which allow
    management the explicit attach or detach to packet service on
    the current registered network.
  - New 'Modem.Modem3gpp.SetNr5gRegistrationSettings()' method
    and 'Modem.Modem3gpp.Nr5gRegistrationSettings' property, to
    allow management of 5G specific settings like 'mico-mode' or
    'drx-cycle'.
  - New 'start-date', 'uplink-speed' and 'downlnk-speed' fields
    in the 'Bearer.Stats' property.
  - New 'Bearer.ReloadStatsSupported' property to indicate
    whether reloading ongoing stats is supported or not.
  - New 'Modem.Modem3gppProfileManager.IndexField' property, to
    indicate which field is to be used as unique index in the
    profile management operations.
  - New 'Sim.SimType', 'Sim.EsimStatus' and 'Sim.Removability'
    properties to improve the management of eSIM related
    operations.
  - New 'Sim.Gid1' and 'Sim.Gid2' properties, which allow
    identifying SIM cards that should have different settings
    applied.
  - New 'Modem.Signal.SetupThresholds() method,
    'Modem.Signal.RssiThreshold' and
    'Modem.Signal.ErrorRateThreshold' to allow configuring
    thresholds so that the modem emits indications whenever the
    signal quality values change based on those thresholds. For
    RSSI a delta amount of dBm can be given, and for error rate
    just a boolean to enable or disable the corresponding event.
  - New 'error-rate' fields in the 'Modem.Signal.Cdma',
    'Modem.Signal.Evdo', 'Modem.Signal.Gsm', 'Modem.Signal.Umts',
    'Modem.Signal.Lte' and 'Modem.Signal.Nr5g' properties.
  + Core:
  - Detecting an eSIM without an active profile in the current
    SIM slot will lead to the modem being in Failed state, in the
    same way as if the slot was for a physical SIM and no SIM was
    inserted.
  - Default amount of AT probing attempts is updated to 6, to
    cope with modems that are slower to boot.
  - New '--test-mbimex-profile-management' option in the daemon,
    to enable support for profile management operations using the
    Microsoft extensions. This is an optional feature because it
    requires using the 'apn-type' field as unique index, which
    not all users of the profile management API may expect.
  - Implemented some initial support to automatically hide
    personal details (e.g. phone numbers, SMS contents...) from
    logs, right now only applicable to QMI and MBIM logs. Updated
    support for this feature will keep on being integrated in
    future 1.20.x updates. The new '--log-personal-info' option
    in the daemon allows to disable this feature completely.
  - Added new filter match option for subsystem vendor id,
    required in several PCI based Qualcomm modules.
  - QCDM port probing will no longer automatically run for all
    plugins, only in those that explicitly require it.
  - Implemented support for suspend/resume detection based on
    ChromeOS' powerd daemon.
  - Added Cat-M and NB-IoT LPWA access technologies.
  + Modem interface: On 3GPP+3GPP2 multimode devices, a missing SIM
    card will now force the modem into Failed state, as if it was a
    3GPP-only device.
  + Simple interface: Explicitly wait for PS domain to be attached
    during a connection attempt.
  + 3GPP interface: Updated to report domain registration changes
    altogether whenever possible (e.g. when using the QMI or MBIM
    protocols).
  + MBIM:
  - Implemented support to use the Microsoft-defined MBIM
    extensions v2 and v3 whenever supported by the device. The
    ModemManager daemon will negotiate which version to use with
    the modem, so that the highest version supported is enabled.
    This negotiation applies to the whole device, so any other
    user of the MBIM device will automatically start using the
    newly agreed version.
  - Implemented current modes switching using MBIMEx v2.0
    extensions.
  - Trigger explicit disconnection if a connection attempt fails.
  - Modem will be flagged as unusable if 10 consecutive MBIM
    requests timeout.
  - Enabled multiplex support for devices in the WWAN subsystem.
  + QMI:
  - Updated logic to by default prefer 'Signal Info' over the
    deprecated 'Signal Strength' operations.
  - Updated logic to by default prefer 'System Info' over the
    deprecated 'Serving System' operations.
  - Updated power state transition logic to ensure the new state
    is reached before returning success to the user.
  - Implemented support for the 'Modem3gppProfileManager.Updated'
    signal using PDC refresh notifications.
  - Modem will be flagged as unusable if 10 consecutive QMI
    requests timeout.
  - Implemented DTMF support.
  - Implemented support for automatic SIM IMSI switch detection
    under certain roaming scenarios.
  - Updated the logic to move the PS domain state to 'registered'
    based on the DSD System Status indications.
  - Updated endpoint type detection logic to be based on the net
    driver.
  - Updated endpoint number selection to be based on the data
    port.
  - Updated connection logic to allocate separate WDS clients per
    endpoint.
  - Added support for PCO reporting.
  + plugins:
  - quectel: Added FCC unlock support for the EM05-G.
  - telit:
    . Band management updated to prefer using QMI whenever
    available, as well as to detect the #BND command format
    automatically.
    . Added support for LPWA modems.
  - fibocom:
    . Implemented optional support to power down and up the modem
    during the update of the initial EPS bearer settings.
    . Implemented initial EPS bearer settings management in the
    MA510.
  - intel: New generic plugin for Intel PCI devices with vid
    0x8086.
  - xmm: Prefer GNSS control ports explicitly tagged via udev
    tags.
  - foxconn: Use the new FOX QMI service to load firmware
    version.
  - cinterion: Added support for PCIe based devices.
- Use ldconfig_scriptlets macro.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add xsltproc and pkgconfig(bash-completion) BuildRequires: New
  dependencies.</changelog>
</package>
<package pkgid="f762528f1f256a364d50fac78d0138d7cfdb1cedce83632b8f3241803d44f87ec1e7abb971bd47bc0ef7133d9d8ea1ede75413d43163703b79fbcb4141c6a85b" name="ModemManager-debugsource" arch="aarch64">
  <version epoch="0" ver="1.20.6" rel="slfo.1.1_1.2"/>
  <changelog author="mardnh@gmx.de" date="1589025600">- Update to version 1.12.10:
  + mmcli:
  - Add missing 'allowed-auth' bearer property in the output.
  - Remove non-existent --list-bearers option from manpage.
  + introspection: Use the correct node name for the ModemManager1
    object.
  + Modem interface: Allow Command() while in Failed state.
  + MBIM: Fix segfault when loading capabilities.
  + Plugins: huawei: updated HCSQ regex to match unquoted response.</changelog>
  <changelog author="pvorel@suse.cz" date="1604318400">- Update to version 1.14.6:
  + Modem interface:
  - Added support for AT-based and/or QMI-based 5G devices
  - Deprecated the MM_MODEM_CAPABILITY_LTE_ADVANCED capability
  + Bearer interface:
  - Added additional 'attempts', 'failed-attempts', 'total-rx-bytes',
    'total-tx-bytes' and 'total-duration' values in the 'Stats' property
    exposed by the Bearer objects.
  + Daemon:
  - Switched to 'STRICT' filter mode by default.
  - Added a new implicit whitelist rules applicable in 'STRICT' filter mode.
  - Updated the probing logic to make sure we don't attempt a re-probe when
    the device is gone.
  - Updated daemon logging.
  + AT:
  - Moved the charset definition logic to the initialization phase instead
    of the enabling phase.
  - Updated manual registration operation
  + QMI:
  - Devices using the LOC service for GNSS will now also setup the list of
    required NMEA traces before starting the engine.
  - Update carrier code if registration changes from one roaming operator
    to another.
  - Explicitly disable autoconnect during modem enabling phase, because it
    interferes with our connection management logic.
  - Fallback to raw-ip if WDA Get Data Format requests arguments, as in most
    new 5G devices.
  - Updated to always use the asynchronous close() operation.
  - Handle disconnection indications during connection attempts.
  + MBIM:
  - Update carrier code if registration changes from one roaming operator to
    another.
  - Implement reset in Intel-based and Qualcomm-based devices.
  - Avoid LTE attach config/status if unsupported.
  - Updated to make sure all allocated QMI CIDs are released during shutdown.
  + SIM interface:
  - Don't allow sending PIN/PUK if not required.
  + 3GPP interface:
  - Fixed manual re-registration to the same operator.
  + CDMA interface:
  - Don't allow multiple concurrent activation attempts.
  - Disallow empty carrier code in automatic activation.
  + Bearer interface:
  - Updated to avoid connection checks or stats updates while disconnecting.
  + libmm-glib:
  - New 'mm_location_gps_nmea_get_traces()' method to retrieve a NULL
    terminated array of strings with all cached NMEA traces.
  - Deprecated the 'mm_location_gps_nmea_build_full()' method.
  + mmcli:
  - Added a new 'any' lookup keyword for the --modem and --sim options, useful
    when the system is only expected to have one single device.
  + Plugins:
  - broadmobi: new plugin, right now just with port type hints for the BM818.
  - foxconn: new plugin to support the T77W968 (both with and without eSIM).
  - dell,dw5821e: added support for the DW5821e with eSIM variant.
  - huawei: don't delay reporting network initiated disconnects.
  - huawei: try to read port type hints from interface descriptions.
  - huawei: avoid using the QCDM port during a voice call.
  - cinterion: skip sim ready check for modules that don't support it.
  - cinterion: implemented radio/band handling for LTE modems.
  - cinterion: added Signal interface support bsaed on AT^SMONI.
  - cinterion: added support for MBIM based devices like the PLS62-W.
  - quectel: updated to detect SIM hot swap via +QUSIM URCs.
  - fibocom: added support for QMI based devices like the FM150.
  - ublox: ignore error when disconnecting last LTE bearer.
  - ublox: implement support to enable and detect +UUDTMF URCs.
  - ublox: added blacklist rules for GPS modules in the plugin itself.
  - sierra: implement manual and automatic CDMA activation.
  - novatel: implement manual and automatic CDMA activation.
  + Build improvements
  + Update dependencies (mbim: &gt;= 1.24.0, qmi: &gt;= 1.26.0)
- Add BuildRequires libxslt-tools (xsltproc required)
- Update config file path: mm-dell-dw5821e-carrier-mapping.conf
  =&gt; mm-foxconn-t77w968-carrier-mapping.conf (see d7d2b910 ("foxconn: new
  plugin to support the T77W968"))</changelog>
  <changelog author="mardnh@gmx.de" date="1607256000">- Update to version 1.14.8:
  + Build:
  - Fixed distcheck with new gtk-doc releases.
  - ModemManager-names.h was being included in the dist tarball,
    but then removed on the 'clean' target. Fix that, by only
    removing it on the 'maintainer-clean' target. Therefore,
    'xsltproc' is now only needed in git builds, not needed when
    building from a dist tarball.
  + QMI:
  - Fix daemon crash when the device is removed during the
    initialization sequence.
  + Several other minor improvements and fixes.
- Drop libxslt-tools BuildRequires: No longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1628942400">- Switch bash completion subpackage to noarch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Update to version 1.18.6:
  + The ModemManager.service file for systemd integration provided
    in the sources is updated as follows:
    ++ 'CAP_NET_ADMIN' is now required in the
    'CapabilityBoundingSet' field.
    ++ 'AF_NETLINK' and 'AF_QIPCRTR' are now required in the
    'RestrictAddressFamilies' field.
  + The LEGACY and PARANOID filter types that were allowed
    options in the '--filter-policy' option in the ModemManager
    daemon were deprecated in version 1.16.0 and have now been
    completely removed, along with the vid:pid blacklist of
    devices and the vid:pid greylist of RS232&lt;-&gt;USB adapters.
  + The ModemManager daemon can run now in a 'quick suspend/resume'
    mode, in which no explicit data disconnection is triggered on
    suspend, and no explicit device re-probing from scratch is
    launched on resume. Instead, the daemon will try to refresh
    the state of all interfaces upon suspend, e.g. to see if the
    module keeps registered to the same operator, to see if it is
    still connected, and so on.
  + core: added support for the new 'WWAN' subsystem in Linux kernel
    5.13, enabling PCIe-only modules.
  + core: The charset conversion methods rework, including the
    avoiding of the iconv()
  + qmi: the logic managing allowed/preferred modes was fixed for
    multimode devices like the MC7304, making sure the acquisition
    order preference always had the same items.
  + serial: when modem is connected with AT+PPP, ignore forced
    disconnections, so that we don't take ownership of the PPP
    port before pppd has released it.
  + foxconn: added support for the T99W175 (SDX55) module,
    including built-in FCC unlock procedure.
  + foxconn: added new MBIM QDU firmware update method.
- Move the dbus-1 system.d file to /usr (bsc#1196170)
- Use source verification
- Update Supplements to new format
- Add BRs needed for new tests:
  * python3-gobject-Gdk
  * python3-dbus-python</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Enable QRTR support
  * Add BR pkgconfig(qrtr-glib)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1659787200">- Update to version 1.18.10:
  + Build: Require libqmi 1.30.8.
  + FCC unlock: Updated SDX55 unlock script to handle the new
    method introduced in the latest firmware releases.
  + Modem interface:
  - Set signal quality to 0% on shutdown.
  - Set signal quality as recent on init.
  + MBIM:
  - Fix task completion when peeking device fails.
  - Fix several GError double-frees.
  + mmcli: Don't print signal quality until modem is enabled.
  + Plugins: foxconn: remove carrier mapping table for T99W175.
  + Several other minor improvements and fixes.
- Changes from version 1.18.8:
  + A new connection status dispatcher setup is provided, where
    users can provide custom scripts that will be called on bearer
    connect/disconnect events. This dispatcher will make the netifd
    integration in openwrt work much better, as we'll be able to
    report network-initiated disconnections cleanly to netifd.
    There are no default connection status dispatcher scripts
    installed, but it's suggested distributions make sure the
    following directories exist:
  - ${sysconfdir}/ModemManager/connection.d/
  - ${libdir}/ModemManager/connection.d/
  + API: Add missing Simple interface definitions in
    ModemManager-names.h.
  + Build:
  - meson:
    . fix daemon enums dependencies.
    . fix port enums includes.
    . fix 'export_packages' in GIR setup.
    . fix simtech plugin module name.
  - systemd: don't run ModemManager in containers.
  + Core:
  - serial: ensure the port object is valid after BUFFER_FULL
    handling.
  - netlink:
    . use unaligned netlink attribute length.
    . only change IFF_UP flag.
  - bearer: match unknown auth to chap in loose comparisons.
  - charsets: return error if UTF-8 validation fails.
  - fcc-unlock: make scripts POSIX shell compatible.
  - modem-helpers:
    . consider minimum ID when choosing best profile.
    . fix reading &lt;Act&gt; given in COPS=? responses.
  - sms: prevent crash if date is out of range.
  - profile-manager: fix copy-paste error on tags for quarks.
  + QMI:
  - Ignore slot status indications until initial status is known.
  - Return error when loading capabilities if none is found.
  + MBIM:
  - Default initial EPS bearer's auth to chap when unknown.
  - Update default error when network error is out of range.
  + mmcli: Fix key length when printing list of items.
  + Plugins:
  - linktop: new port type hints.
  - cinterion: add support for PLSx3w modems.
  - huawei: disable +CPOL based features in Huawei E226.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661601600">- Disable make_check call, tests currently fails due to our switch
  to glib 2.73.2.
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/870
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/601
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/621</changelog>
  <changelog author="luc14n0@opensuse.org" date="1665230400">- Update to version 1.18.12:
  + This release fixes a few very critical issues that happpen when
    using a glib2 newer or equal than 2.73.2, plus numerous fixes
    for the Core, MBIM, QMI, 3GPP profile manager interface, SMS,
    libmm-glib, and mmcli.
  + Plugins:
  - sierra: disable +CPOL in the GL7600.
  - telit: add LE910Cx MBIM composition port hints.
  - telit: add port type hints for LN920 0x1060, 0x1061
    compositions.
  - icera: fix double free on %%IPSYS=? response processing
  - mtk: fix task completion when loading supported modes.
- Add new pkgconfig modules build requirements: gio-2.0, glib-2.0,
  gmodule-2.0, and gobject-2.0.
- Update ModemManager.keyring to the new upstream key:
  A814D09B9C5BC01945A64308AECE0239C6606AD5. Found at
  www.freedesktop.org/software/ModemManager/0xAECE0239C6606AD5.asc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.20.6:
  + build: New build option to allow disabling the installation of
    examples.
  + core:
  - Fix crash when uninhibiting partially removed device.
  - Fix crash when attempting to load an invalid shared utils
    library.
  + mmcli:
  - Allow JSON and key/value output when creating SMS messages.
  - Improved JSON output in network scan results.
  + libmm-glib:
  - Avoid using g_time_zone_new_offset() unless glib &gt;= 2.58.
  - Fix flags to string conversion utils to allow multiple flags.
  + MBIM:
  - Reset cached SIM info when SIM is unlocked.
  - Fix synchronizing the state of the SIM hot swap configured
    flag.
  - Fix bug cleaning up the LTE attach info unsolicited message
    handler.
  - Fallback from QMI UIM service only if unsupported.
  - Add missing support for 'emergency' APN type.
  + QMI:
  - Fix processing and exposing PCOs.
  - Fix power up on modems that don't support power state change
    indications.
  + plugins:
  - telit:
    . add additional support for 5G modems.
    . added port type hints for FN990 0x1070, 0x1071
    compositions.
    . increase allowed initial delay in AT ports.
    . fallback to AT commands if loading revision via MBIM fails.
  - quectel: add support for EC21-EUX usb modules.
  - xmm: fix crash parsing XACT? response.
- Changes from version 1.20.4:
  + build:
  - Don't hardcode building shared libraries, so that meson's
    default_library option can be used properly,
  - po: Added missing Georgian translation in LINGUAS.
  + QMI:
  - Fixed loading NR5G signal info.
  - Fixed memory leaks when processing signal info.
  - Correctly scaled the SNR value reported in NR5G.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  + MBIM:
  - Fixed processing MbimSmsStatusFlag as flags, not as an enum.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  - Chained up device notifications through the MMPortMbim
    object.
  + Messaging: Allowed Delete operation during enabling/disabling.
  + Core: Don't assume port tables always exist so that
    long-standing operations holding an object reference can finish
    cleanly even after the initial object disposal has already been
    run.
  + plugins:
  - quectel: added new firehose/sahara support udev tags in new
    models.
  - broadmobi: added MM_PLUGIN_REQUIRED_QCDM flag.
  - cinterion:
    . added a delay to the ^SWWAN? command.
    . added retry mechanism to the ^SWWAN? command.
- Changes from version 1.20.2:
  + build:
  - Fixed building without MBIM support.
  - Fixed building without tests support.
  - Disabled test interface in base manager if building without
    tests.
  - Updated intel plugin dependencies to require XMM shared
    utils.
  - Fixed templates to make build reproducible.
  + FCC unlock: Updated shell scripts to avoid requiring bash.
  + MBIM:
  - Ignored SIM related indications during a SIM slot switch
    operation.
  - Updated capabilities loading to use Microsoft Extensions if
    available.
  - Updated supported modes loading to use the CustomDataClass
    field contents.
  + SIM: Fixed length when reading GID1/GID2 using AT commands.
  + Several other minor improvements and fixes.
- Changes from version 1.20.0:
  + API:
  - New 'Modem.Sar' interface to allow the host to manage the SAR
    power level.
  - New 'Modem.GetCellInfo()' method, that allows querying
    information about the current serving and neighboring cells.
    Currently including 'cell-type' and 'serving' fields for all
    cell types, plus additional type-specific fields:
    . CDMA: 'nid', 'sid', 'base-station-id', 'ref-pn' and
    'pilot-strength'.
    . GSM: 'operator-id', 'lac', 'ci', 'timing-advance', 'arfcn',
    'base-station-id' and 'rx-level'.
    . UMTS: 'operator-id', 'lac', 'ci', 'frequency-fdd-ul',
    'frequency-fdd-dl', 'frequency-tdd', 'uarfcn', 'psc',
    'rscp', 'ecio' and 'path-loss'.
    . TDSCDMA: 'operator-id', 'lac', 'ci', 'uarfcn',
    'cell-parameter-id', 'timing-advance', 'rscp' and
    'path-loss'.
    . LTE: 'operator-id', 'tac', 'ci', 'physical-ci', 'earfcn',
    'rsrp', 'rsrq' and 'timing-advance'.
    . 5GNR: 'operator-id', 'tac', 'ci', 'physical-ci', 'nrarfcn',
    'rsrp', 'rsrq', 'sinr' and 'timing-advance'.
  - New 'access-type-preference', 'roaming-allowance',
    'profile-name', 'profile-enabled' and 'profile-source'
    fields in the 'Bearer.Properties' property, that can also be
    used in both 'Modem.Simple.Connect()' and
    'Modem.CreateBearer()'.
  - New 'Modem.Modem3gpp.SetPacketServiceState()' method and
    'Modem.Modem3gpp.PacketServiceState' property, which allow
    management the explicit attach or detach to packet service on
    the current registered network.
  - New 'Modem.Modem3gpp.SetNr5gRegistrationSettings()' method
    and 'Modem.Modem3gpp.Nr5gRegistrationSettings' property, to
    allow management of 5G specific settings like 'mico-mode' or
    'drx-cycle'.
  - New 'start-date', 'uplink-speed' and 'downlnk-speed' fields
    in the 'Bearer.Stats' property.
  - New 'Bearer.ReloadStatsSupported' property to indicate
    whether reloading ongoing stats is supported or not.
  - New 'Modem.Modem3gppProfileManager.IndexField' property, to
    indicate which field is to be used as unique index in the
    profile management operations.
  - New 'Sim.SimType', 'Sim.EsimStatus' and 'Sim.Removability'
    properties to improve the management of eSIM related
    operations.
  - New 'Sim.Gid1' and 'Sim.Gid2' properties, which allow
    identifying SIM cards that should have different settings
    applied.
  - New 'Modem.Signal.SetupThresholds() method,
    'Modem.Signal.RssiThreshold' and
    'Modem.Signal.ErrorRateThreshold' to allow configuring
    thresholds so that the modem emits indications whenever the
    signal quality values change based on those thresholds. For
    RSSI a delta amount of dBm can be given, and for error rate
    just a boolean to enable or disable the corresponding event.
  - New 'error-rate' fields in the 'Modem.Signal.Cdma',
    'Modem.Signal.Evdo', 'Modem.Signal.Gsm', 'Modem.Signal.Umts',
    'Modem.Signal.Lte' and 'Modem.Signal.Nr5g' properties.
  + Core:
  - Detecting an eSIM without an active profile in the current
    SIM slot will lead to the modem being in Failed state, in the
    same way as if the slot was for a physical SIM and no SIM was
    inserted.
  - Default amount of AT probing attempts is updated to 6, to
    cope with modems that are slower to boot.
  - New '--test-mbimex-profile-management' option in the daemon,
    to enable support for profile management operations using the
    Microsoft extensions. This is an optional feature because it
    requires using the 'apn-type' field as unique index, which
    not all users of the profile management API may expect.
  - Implemented some initial support to automatically hide
    personal details (e.g. phone numbers, SMS contents...) from
    logs, right now only applicable to QMI and MBIM logs. Updated
    support for this feature will keep on being integrated in
    future 1.20.x updates. The new '--log-personal-info' option
    in the daemon allows to disable this feature completely.
  - Added new filter match option for subsystem vendor id,
    required in several PCI based Qualcomm modules.
  - QCDM port probing will no longer automatically run for all
    plugins, only in those that explicitly require it.
  - Implemented support for suspend/resume detection based on
    ChromeOS' powerd daemon.
  - Added Cat-M and NB-IoT LPWA access technologies.
  + Modem interface: On 3GPP+3GPP2 multimode devices, a missing SIM
    card will now force the modem into Failed state, as if it was a
    3GPP-only device.
  + Simple interface: Explicitly wait for PS domain to be attached
    during a connection attempt.
  + 3GPP interface: Updated to report domain registration changes
    altogether whenever possible (e.g. when using the QMI or MBIM
    protocols).
  + MBIM:
  - Implemented support to use the Microsoft-defined MBIM
    extensions v2 and v3 whenever supported by the device. The
    ModemManager daemon will negotiate which version to use with
    the modem, so that the highest version supported is enabled.
    This negotiation applies to the whole device, so any other
    user of the MBIM device will automatically start using the
    newly agreed version.
  - Implemented current modes switching using MBIMEx v2.0
    extensions.
  - Trigger explicit disconnection if a connection attempt fails.
  - Modem will be flagged as unusable if 10 consecutive MBIM
    requests timeout.
  - Enabled multiplex support for devices in the WWAN subsystem.
  + QMI:
  - Updated logic to by default prefer 'Signal Info' over the
    deprecated 'Signal Strength' operations.
  - Updated logic to by default prefer 'System Info' over the
    deprecated 'Serving System' operations.
  - Updated power state transition logic to ensure the new state
    is reached before returning success to the user.
  - Implemented support for the 'Modem3gppProfileManager.Updated'
    signal using PDC refresh notifications.
  - Modem will be flagged as unusable if 10 consecutive QMI
    requests timeout.
  - Implemented DTMF support.
  - Implemented support for automatic SIM IMSI switch detection
    under certain roaming scenarios.
  - Updated the logic to move the PS domain state to 'registered'
    based on the DSD System Status indications.
  - Updated endpoint type detection logic to be based on the net
    driver.
  - Updated endpoint number selection to be based on the data
    port.
  - Updated connection logic to allocate separate WDS clients per
    endpoint.
  - Added support for PCO reporting.
  + plugins:
  - quectel: Added FCC unlock support for the EM05-G.
  - telit:
    . Band management updated to prefer using QMI whenever
    available, as well as to detect the #BND command format
    automatically.
    . Added support for LPWA modems.
  - fibocom:
    . Implemented optional support to power down and up the modem
    during the update of the initial EPS bearer settings.
    . Implemented initial EPS bearer settings management in the
    MA510.
  - intel: New generic plugin for Intel PCI devices with vid
    0x8086.
  - xmm: Prefer GNSS control ports explicitly tagged via udev
    tags.
  - foxconn: Use the new FOX QMI service to load firmware
    version.
  - cinterion: Added support for PCIe based devices.
- Use ldconfig_scriptlets macro.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add xsltproc and pkgconfig(bash-completion) BuildRequires: New
  dependencies.</changelog>
</package>
<package pkgid="ff2dcc820a87454a663ea0f283c844d5a12f0948717e2919b91c8f831102f5078f64694703072b6ca53591aff730cee5506e72fb5be426788db8fa72d6578c7e" name="NetworkManager-bluetooth-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.42.6" rel="slfo.1.1_2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1671537600">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
</package>
<package pkgid="89542272598f6ffae77a3a98b30090b77b38ff33be96c40d6e0489983e136f04884b986688f3972678aa233632e6236b812ffe705768eb18c53557816fbe25fb" name="NetworkManager-cloud-setup-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.42.6" rel="slfo.1.1_2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1671537600">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
</package>
<package pkgid="cc40bbb974dfdb2b0909942e7088c53ece9e934d515649b9a617dc4abea3555a4baf31a2bcf4121f907b133ed2b21b27b9cb64bd852ef08862f68fd94ad9fc2a" name="NetworkManager-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.42.6" rel="slfo.1.1_2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1671537600">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
</package>
<package pkgid="59e8dd8148508681a7c91308d50124eb6cb7b8bcaee72482a724c6d0bfeda66aec26e3416e89c03feed2ae3e553feb17244c9f97821167408d57702840815113" name="NetworkManager-debugsource" arch="aarch64">
  <version epoch="0" ver="1.42.6" rel="slfo.1.1_2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1671537600">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
</package>
<package pkgid="5b951c371a74da61ce4a6b65b0a3acda47a0a3f8bad77d16b1d5b3f050adac7c88fb3e2680a2db24637c2810fe010fdf971c1965c3b4e6b4862e159961c4f9d2" name="NetworkManager-pppoe-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.42.6" rel="slfo.1.1_2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1671537600">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
</package>
<package pkgid="3d17ead89a052c6c70fa39ac28f130b50e49894fcc79de536bab1a596f89aad5079a14bc80ef8b437bbffdbdba51cd66fbf49eb0b63bcab7232a6056ce29acaf" name="NetworkManager-tui-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.42.6" rel="slfo.1.1_2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1671537600">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
</package>
<package pkgid="f0a9f10421c40e80df027447b089b2df0e92f9effc3ef86822b674982ff72111e103c3169fed61937ddd280bd1ea1a9a4903d8d964c62dc9cf29c6da974427ee" name="NetworkManager-wwan-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.42.6" rel="slfo.1.1_2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1671537600">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
</package>
<package pkgid="021e10e993aa32c42a822a04a9c6af75b24ff39007c183bf0d4d34b253a0c7810b3879f64173242afb0c9175ab46ccccca44f2f9ad240bde5c8b5fc54ac0d88d" name="aaa_base-debuginfo" arch="aarch64">
  <version epoch="0" ver="84.87+git20250903.33e5ba4" rel="slfo.1.1_1.1"/>
  <changelog author="dmueller@suse.com" date="1735819200">- Update to version 84.87+git20250102.c08e614:
  * Load distrobox_profile.sh</changelog>
  <changelog author="ro@suse.com" date="1741867200">- Update to version 84.87+git20250313.e71c2f4:
  * Respect PROFILEREAD/CSHRCREAD at shell switch
  * Modernize specfile
  * Add safety quotes and proper escaping
  * Avoid bashisms in build recipe
  * Add setup-systemd-proxy-env
  * profile.{sh,csh}: Drop useless proxy variables cleanup</changelog>
  <changelog author="ro@suse.com" date="1741867201">- Update to version 84.87+git20250313.4dd1cfd:
  * DIR_COLORS: add backup and temporary file extensions
  * DIR_COLORS: sort audio formats
  * DIR_COLORS: use cyan for audio formats instead of green
  * DIR_COLORS: add 'avif' to image formats
  * DIR_COLORS: add updated and sorted list of archive formats
  * DIR_COLORS: don't colour DOS/Windows executables
  * DIR_COLORS: update existing colours and add missing ones
  * DIR_COLORS: add COLORTERM and 'st' terminal
  * DIR_COLORS: update file description
  * DIR_COLORS: sort TERM entries
  * DIR_COLORS: remove COLOR, OPTIONS and EIGHTBIT</changelog>
  <changelog author="ro@suse.com" date="1744286400">- Update to version 84.87+git20250410.71df276:
  * Modern s390x uses TERM=linux for ttysclp&lt;X&gt;</changelog>
  <changelog author="dimstar@opensuse.org" date="1745582400">- Update to version 84.87+git20250425.1664836:
  * Fix bug boo#1241205 by adding missed endif
  * alias.bash: future-proof egrep/fgrep color aliases</changelog>
  <changelog author="ro@suse.com" date="1745928000">- Update to version 84.87+git20250429.1cad3bc:
  * Remove alias "you" (boo#1242011)</changelog>
  <changelog author="kukuk@suse.com" date="1754049600">- Update to version 84.87+git20250801.b2fa3fe:
  * Allow /etc/locale.conf to have no newline</changelog>
  <changelog author="kukuk@suse.com" date="1754049601">- Update to version 84.87+git20250801.f305627:
  * Remove sysconfig.language [bsc#1247286]</changelog>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
</package>
<package pkgid="941f9d637976b36fcf05190464e8e69a5619ed8b5b6a2ff8a4da3641e48c2d61ff2fe92bb9fcb8500d001fc87f414a394c16fc90411ad3f2e0bd27dac927509c" name="aaa_base-debugsource" arch="aarch64">
  <version epoch="0" ver="84.87+git20250903.33e5ba4" rel="slfo.1.1_1.1"/>
  <changelog author="dmueller@suse.com" date="1735819200">- Update to version 84.87+git20250102.c08e614:
  * Load distrobox_profile.sh</changelog>
  <changelog author="ro@suse.com" date="1741867200">- Update to version 84.87+git20250313.e71c2f4:
  * Respect PROFILEREAD/CSHRCREAD at shell switch
  * Modernize specfile
  * Add safety quotes and proper escaping
  * Avoid bashisms in build recipe
  * Add setup-systemd-proxy-env
  * profile.{sh,csh}: Drop useless proxy variables cleanup</changelog>
  <changelog author="ro@suse.com" date="1741867201">- Update to version 84.87+git20250313.4dd1cfd:
  * DIR_COLORS: add backup and temporary file extensions
  * DIR_COLORS: sort audio formats
  * DIR_COLORS: use cyan for audio formats instead of green
  * DIR_COLORS: add 'avif' to image formats
  * DIR_COLORS: add updated and sorted list of archive formats
  * DIR_COLORS: don't colour DOS/Windows executables
  * DIR_COLORS: update existing colours and add missing ones
  * DIR_COLORS: add COLORTERM and 'st' terminal
  * DIR_COLORS: update file description
  * DIR_COLORS: sort TERM entries
  * DIR_COLORS: remove COLOR, OPTIONS and EIGHTBIT</changelog>
  <changelog author="ro@suse.com" date="1744286400">- Update to version 84.87+git20250410.71df276:
  * Modern s390x uses TERM=linux for ttysclp&lt;X&gt;</changelog>
  <changelog author="dimstar@opensuse.org" date="1745582400">- Update to version 84.87+git20250425.1664836:
  * Fix bug boo#1241205 by adding missed endif
  * alias.bash: future-proof egrep/fgrep color aliases</changelog>
  <changelog author="ro@suse.com" date="1745928000">- Update to version 84.87+git20250429.1cad3bc:
  * Remove alias "you" (boo#1242011)</changelog>
  <changelog author="kukuk@suse.com" date="1754049600">- Update to version 84.87+git20250801.b2fa3fe:
  * Allow /etc/locale.conf to have no newline</changelog>
  <changelog author="kukuk@suse.com" date="1754049601">- Update to version 84.87+git20250801.f305627:
  * Remove sysconfig.language [bsc#1247286]</changelog>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
</package>
<package pkgid="62ba722d6b7ae471024ee1766008851309d746f03a382c5919bebda0f8f5defc7692854ac0dda6cae0ff54d34ca35b70f7abcd7c7af584f2991a8a1e92349b8f" name="accountsservice-debuginfo" arch="aarch64">
  <version epoch="0" ver="22.08.8" rel="slfo.1.1_1.2"/>
  <changelog author="yfjiang@suse.com" date="1586865600">- Apply as-fate318433-prevent-same-account-multi-logins.patch to Leap.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1614686400">- Add accountsservice-fix-gdm-crash.patch: Prevent crash of gdm
  upon service restart when automatic login is enabled
  (glfo#accountsservice/accountsservice#55).</changelog>
  <changelog author="jsegitz@suse.com" date="1627387200">- Added hardening to systemd service(s). Added patch(es):
  * harden_accounts-daemon.service.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1628510400">- Spec layout cleaning up for harden_accounts-daemon.service.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629979200">- Update harden_accounts-daemon.service.patch: Do not proect home
  directories: the accounts daemon is used to create home
  directories upon user creation (boo#1189853).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing the no longer used nor recognized option
  user-heuristics=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch: Fix build
  with meson 0.61.0.</changelog>
  <changelog author="rpm@fthiessen.de" date="1651320000">- Update to version 22.08.8
  + Handle missing admin groups when changing account types
  + Set PrivateTmp to false in the systemd service
  + Add function to set user password expiration policy
- Update to version 22.04.62
  + Updated Swedish translation
  + Updated Indonesian translation
  + Updated German translation
  + Updated slovak translation
  + Update Ukrainian translation
  + Updated Brazilian Portuguese translation
  + act-user: Use stronger hashing methods in make_crypted() if available.
  + act-user-manager: Watch for the daemon going away and coming back
  + user-manager: Update users tables on username changes
  + user: Translate property x-session property name to match the proxy one
  + Check GDBusMessage for INTERACTIVE_AUTHORIZATION flag
  + daemon: Fix error check in save_autologin()
  + Never delete the root filesystem when removing users
  + Remove user heuristics
  + user-classify: Add git to username blacklist
  + daemon: ensure cache files for system users are processed
  + daemon: Don't try to add admin users to non existing groups
  + Move D-Bus conf file to $(datadir)/dbus-1/system.d
- Rebased patches:
  + accountsservice-sysconfig.patch
  + accountsservice-filter-suse-accounts.patch
  + as-fate318433-prevent-same-account-multi-logins.patch
- Drop upstream fixed patches:
  + ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch
  + accountsservice-fix-gdm-crash.patch
  + accountsservice-read-root-user-cache.patch
  + accountsservice-wtmp-io-improvements.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1659096000">- Allow to build without vala support.
- Refresh harden_accounts-daemon.service.patch to not duplicate
  existing entries.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1659355200">- Remove BuildIgnore for rpmlint-mini. This is a violation of the
  security policies applying to SUSE products as it circumvents the
  SUSE security team's control over what enters Factory and what
  not.</changelog>
</package>
<package pkgid="7c95c5b99580c1c3b817573df6192816336244e12b807549374355a8365f8bfb241625ba81b46d9ba4ef97dd0ccd5e6cac7b187a582ecdeeeaeea17f8776ca3a" name="accountsservice-debugsource" arch="aarch64">
  <version epoch="0" ver="22.08.8" rel="slfo.1.1_1.2"/>
  <changelog author="yfjiang@suse.com" date="1586865600">- Apply as-fate318433-prevent-same-account-multi-logins.patch to Leap.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1614686400">- Add accountsservice-fix-gdm-crash.patch: Prevent crash of gdm
  upon service restart when automatic login is enabled
  (glfo#accountsservice/accountsservice#55).</changelog>
  <changelog author="jsegitz@suse.com" date="1627387200">- Added hardening to systemd service(s). Added patch(es):
  * harden_accounts-daemon.service.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1628510400">- Spec layout cleaning up for harden_accounts-daemon.service.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629979200">- Update harden_accounts-daemon.service.patch: Do not proect home
  directories: the accounts daemon is used to create home
  directories upon user creation (boo#1189853).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing the no longer used nor recognized option
  user-heuristics=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch: Fix build
  with meson 0.61.0.</changelog>
  <changelog author="rpm@fthiessen.de" date="1651320000">- Update to version 22.08.8
  + Handle missing admin groups when changing account types
  + Set PrivateTmp to false in the systemd service
  + Add function to set user password expiration policy
- Update to version 22.04.62
  + Updated Swedish translation
  + Updated Indonesian translation
  + Updated German translation
  + Updated slovak translation
  + Update Ukrainian translation
  + Updated Brazilian Portuguese translation
  + act-user: Use stronger hashing methods in make_crypted() if available.
  + act-user-manager: Watch for the daemon going away and coming back
  + user-manager: Update users tables on username changes
  + user: Translate property x-session property name to match the proxy one
  + Check GDBusMessage for INTERACTIVE_AUTHORIZATION flag
  + daemon: Fix error check in save_autologin()
  + Never delete the root filesystem when removing users
  + Remove user heuristics
  + user-classify: Add git to username blacklist
  + daemon: ensure cache files for system users are processed
  + daemon: Don't try to add admin users to non existing groups
  + Move D-Bus conf file to $(datadir)/dbus-1/system.d
- Rebased patches:
  + accountsservice-sysconfig.patch
  + accountsservice-filter-suse-accounts.patch
  + as-fate318433-prevent-same-account-multi-logins.patch
- Drop upstream fixed patches:
  + ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch
  + accountsservice-fix-gdm-crash.patch
  + accountsservice-read-root-user-cache.patch
  + accountsservice-wtmp-io-improvements.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1659096000">- Allow to build without vala support.
- Refresh harden_accounts-daemon.service.patch to not duplicate
  existing entries.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1659355200">- Remove BuildIgnore for rpmlint-mini. This is a violation of the
  security policies applying to SUSE products as it circumvents the
  SUSE security team's control over what enters Factory and what
  not.</changelog>
</package>
<package pkgid="1667928ffb74afc4b32ed04c54f4bde344ad55f073b02016ebdc928d99ec13a79392b7cf15f170c336a355492c575230a21cc07510f5c2540fbe655004667088" name="acl-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.3.1" rel="slfo.1.1_1.3"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- BuildRequires gettext-tools-mini instead of gettext-tools: as
  acl is part of the bootstrap, we want to try to keep the dep
  chain as small as possible.</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- refresh acl-2.2.52-tests.patch to work with perl 5.26</changelog>
  <changelog author="jeffm@suse.com" date="1539259200">- Update to v2.2.53.
- Removed patches:
  * 0001-Install-the-libraries-to-the-appropriate-directory.patch
  * 0001-Use-OS-byteswapping-macros.patch
  * 0002-setfacl.1-fix-typo-inclu-de-include.patch
  * 0003-test-fix-insufficient-quoting-of.patch
  * 0004-Makefile-rename-configure.in-to-configure.ac.patch
  * 0005-Bad-markup-in-acl.5-page.patch
  * 0006-.gitignore-ignore-and-config.h.in.patch
  * 0007-Use-autoreconf-rather-than-autoconf-to-regenerate-th.patch
  * 0008-libacl-Make-sure-that-acl_from_text-always-sets-errn.patch
  * 0009-libacl-fix-SIGSEGV-of-getfacl-e-on-overly-long-group.patch
  * 0010-punt-debian-rpm-packaging-logic.patch
  * 0011-move-gettext-logic-into-misc.h.patch
  * 0012-test-make-running-parallel-out-of-tree-safe.patch
  * 0013-modernize-build-system.patch
  * 0014-po-regenerate-files-after-move.patch
  * 0015-build-drop-aclincludedir-use-pkgincludedir.patch
  * 0016-build-make-use-of-an-aux-dir-to-stow-away-helper-scr.patch
  * 0017-build-ship-a-pkgconfig-file-for-libacl.patch
  * 0018-read_acl_-comments-seq-rename-line-to-lineno.patch
  * 0019-read_acl_-comments-seq-switch-to-next_line.patch
  * 0020-telldir-return-value-and-seekdir-second-parameters-a.patch
  * 0021-mark-libmisc-funcs-as-hidden-so-they-are-not-exporte.patch
  * 0022-add-__acl_-prefixes-to-internal-symbols.patch
  * 0023-cp.test-Check-permissions-of-the-right-file.patch
  * 0024-libacl-acl_set_file-Remove-unnecesary-racy-check.patch
  * 0025-fix-compilation-with-latest-xattr-git.patch
  * 0026-getfacl-Fix-memory-leak.patch
  * 0027-Fix-the-display-block-nesting-in-acl.5.patch
  * 0028-setfacl-man-page-Minor-wording-improvements.patch
  * 0029-getfacl-Fix-minor-resource-leak.patch
  * 0030-Do-not-export-symbols-that-are-not-supposed-to-be-ex.patch
  * 0031-walk_tree-mark-internal-variables-as-static.patch
  * 0032-ignore-configure.lineno.patch
  * acl-2.2.52-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1541678400">- libacl-devel used to require libattr-devel, but that is no longer
  the case, packages that relied on this indirect dependency to
  be present were fixed years ago.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Update boilerplate descriptions for libacl-devel.
- Remove out-of-date comments for libattr.
- Remove old BuildRoot and %defattr tags.
- Move library into the standard library directory.</changelog>
  <changelog author="dmueller@suse.com" date="1598961600">- update url</changelog>
  <changelog author="dimstar@opensuse.org" date="1611662400">- Replace system-user-{bin,daemon} with user({bin,daemon}): be
  resilient to package name changes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1620820800">- Update to version 2.3.1
  * Update German translation
  * getfacl: fix indent in --help output
  * getfacl: Add --one-file-system option, with this option getfacl
    will not cross mount points
  * Fix segfault on allocation failure
  * Avoid SIGSEGV with link-time optimisation enabled
- Use SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- modernize spec-file (move license to licensedir)</changelog>
  <changelog author="mliska@suse.cz" date="1649419200">- Disable -D_FORTIFY_SOURCE=3 for now
  as explained here: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104964</changelog>
</package>
<package pkgid="da4a064677fe42d33144f85bf37ea4f8857699abf6c3b428c84c2a645d94f470081bbfcb4c02c4f517bfa9f9eb9707653812f7a3dc5b73c68cbcdd5948fe9a17" name="acl-debugsource" arch="aarch64">
  <version epoch="0" ver="2.3.1" rel="slfo.1.1_1.3"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- BuildRequires gettext-tools-mini instead of gettext-tools: as
  acl is part of the bootstrap, we want to try to keep the dep
  chain as small as possible.</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- refresh acl-2.2.52-tests.patch to work with perl 5.26</changelog>
  <changelog author="jeffm@suse.com" date="1539259200">- Update to v2.2.53.
- Removed patches:
  * 0001-Install-the-libraries-to-the-appropriate-directory.patch
  * 0001-Use-OS-byteswapping-macros.patch
  * 0002-setfacl.1-fix-typo-inclu-de-include.patch
  * 0003-test-fix-insufficient-quoting-of.patch
  * 0004-Makefile-rename-configure.in-to-configure.ac.patch
  * 0005-Bad-markup-in-acl.5-page.patch
  * 0006-.gitignore-ignore-and-config.h.in.patch
  * 0007-Use-autoreconf-rather-than-autoconf-to-regenerate-th.patch
  * 0008-libacl-Make-sure-that-acl_from_text-always-sets-errn.patch
  * 0009-libacl-fix-SIGSEGV-of-getfacl-e-on-overly-long-group.patch
  * 0010-punt-debian-rpm-packaging-logic.patch
  * 0011-move-gettext-logic-into-misc.h.patch
  * 0012-test-make-running-parallel-out-of-tree-safe.patch
  * 0013-modernize-build-system.patch
  * 0014-po-regenerate-files-after-move.patch
  * 0015-build-drop-aclincludedir-use-pkgincludedir.patch
  * 0016-build-make-use-of-an-aux-dir-to-stow-away-helper-scr.patch
  * 0017-build-ship-a-pkgconfig-file-for-libacl.patch
  * 0018-read_acl_-comments-seq-rename-line-to-lineno.patch
  * 0019-read_acl_-comments-seq-switch-to-next_line.patch
  * 0020-telldir-return-value-and-seekdir-second-parameters-a.patch
  * 0021-mark-libmisc-funcs-as-hidden-so-they-are-not-exporte.patch
  * 0022-add-__acl_-prefixes-to-internal-symbols.patch
  * 0023-cp.test-Check-permissions-of-the-right-file.patch
  * 0024-libacl-acl_set_file-Remove-unnecesary-racy-check.patch
  * 0025-fix-compilation-with-latest-xattr-git.patch
  * 0026-getfacl-Fix-memory-leak.patch
  * 0027-Fix-the-display-block-nesting-in-acl.5.patch
  * 0028-setfacl-man-page-Minor-wording-improvements.patch
  * 0029-getfacl-Fix-minor-resource-leak.patch
  * 0030-Do-not-export-symbols-that-are-not-supposed-to-be-ex.patch
  * 0031-walk_tree-mark-internal-variables-as-static.patch
  * 0032-ignore-configure.lineno.patch
  * acl-2.2.52-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1541678400">- libacl-devel used to require libattr-devel, but that is no longer
  the case, packages that relied on this indirect dependency to
  be present were fixed years ago.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Update boilerplate descriptions for libacl-devel.
- Remove out-of-date comments for libattr.
- Remove old BuildRoot and %defattr tags.
- Move library into the standard library directory.</changelog>
  <changelog author="dmueller@suse.com" date="1598961600">- update url</changelog>
  <changelog author="dimstar@opensuse.org" date="1611662400">- Replace system-user-{bin,daemon} with user({bin,daemon}): be
  resilient to package name changes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1620820800">- Update to version 2.3.1
  * Update German translation
  * getfacl: fix indent in --help output
  * getfacl: Add --one-file-system option, with this option getfacl
    will not cross mount points
  * Fix segfault on allocation failure
  * Avoid SIGSEGV with link-time optimisation enabled
- Use SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- modernize spec-file (move license to licensedir)</changelog>
  <changelog author="mliska@suse.cz" date="1649419200">- Disable -D_FORTIFY_SOURCE=3 for now
  as explained here: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104964</changelog>
</package>
<package pkgid="e2a6d125d271fd6b12f3a365516f4a8aa90881f371bedcf993b45f86ccd32407fe12753790cac86f0156ef738d49d59063c98343fd01d49d25ca921d23115dda" name="acpica-debuginfo" arch="aarch64">
  <version epoch="0" ver="20240321" rel="slfo.1.1_1.3"/>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210604:
  * ACPICA kernel-resident subsystem
  * Cleaned up (delete) the context mutex during local address
    handler object deletion.
  * Fixed a memory leak caused by the _CID repair function.
  * Add support for PlatformRtMechanism OperationRegion handler.
  * Add a new utility function, AcpiUtConvertUuidToString.
  * iASL Compiler/Disassembler and ACPICA tools:
  * Added full support for the PRMT ACPI table
  * Added full support for the BDAT ACPI table.
  * Added full support for the RGRT ACPI table.
  * Added full support for the SVKL ACPI table.
  * Completed full support for the IVRS ACPI table.
  * Added compiler support for IVRS, updated disassembler support
  * Added a new utility, UtIsIdInteger, to determine if a
    HID/CID is an integer or a string.
  * Headers: Added more structs to the CEDT table
  * ACPI 6.4: MADT: added Multiprocessor Wakeup Mailbox Structure.</changelog>
  <changelog author="rpm@fthiessen.de" date="1634644800">- Update to version 20210930
  * ACPICA kernel-resident subsystem:
  * Avoid evaluating methods too early during system resume.
  * Added a new _OSI string, "Windows 2020".
  * iASL Compiler/Disassembler and ACPICA tools:
  * iASL compiler: Updated the check for usage of _CRS, _DIS,
    _PRS, and _SRSobjects
  * iASL table disassembler: Added disassembly support for the
    NHLT ACPI table.
  * Added a new subtable type for ACPI 6.4 SRAT Generic Port Affinity
  * Added the flag for online capable in the MADT, introduced in
    ACPI 6.3.
- Update to version 20210730:
  * iASL Compiler/Disassembler and ACPICA tools:
  * iasl: Check usage of _CRS, _DIS, _PRS, and _SRS objects
  * iASL Table Disassembler/Table compiler: Fix for WPBT table with
    no command-line arguments.
  * Handle the case where the Command-line Arguments table field does
    not exist (zero).
  * Headers: Add new DBG2 Serial Port Subtypes
  * iASL: Add full support for the AEST table (data compiler)
  * Add PRMT module header to facilitate parsing.
  * Table disassembler: Add missing strings to decode subtable types.</changelog>
  <changelog author="dfaggioli@suse.com" date="1644062400">- The package build fine on arches different than x86 and ARM. Drop
  the ExclusiveArch.</changelog>
  <changelog author="dmueller@suse.com" date="1650456000">- update to 20220331:
  For the ASL Sleep() operator, issue a warning if the sleep value is
  greater than 10 Milliseconds. Quick boottime is important, so warn about
  sleeps greater than 10 ms. Distribution Linux kernels reach initrd in 350
  ms, so excessive delays should be called out. 10 ms is chosen randomly,
  but three of such delays would already make up ten percent of the
  boottime.
  Namespace: Avoid attempting to walk the Namespace if the Namespace does
  not exist.
  AML interpreter/iASL compiler: Add new Acpi 6.4 semantics for the
  LoadTable and Load operators. DDB_HANDLE is gone, now loadtable returns a
  pass/fail integer. Now load returns a pass/fail integer, as well as
  storing the return value in an optional 2nd argument.
  Headers: Use uintptr_t and offsetof() in Linux kernel builds. To avoid
  "performing pointer subtraction with a null pointer has undefined
  behavior" compiler warnings, use uintptr_t and offsetof() that are always
  available during Linux kernel builds to define ACPI_UINTPTR_T and the
  ACPI_TO_INTEGER() and ACPI_OFFSET() macros when building the ACPICA code
  in the Linux kernel.
  Added support for the Windows 11 _OSI string ("Windows 2021"). Submitted
  by superm1.
  executer/exsystem: Inform users about ACPI spec violation for the Stall()
  operator. Values greater than 100 microseconds violate the ACPI
  specification, so warn users about it. From the ACPI Specification
  version 6.2 Errata A, 19.6.128 *Stall (Stall for a Short Time)*:
  The implementation of Stall is OS-specific, but must not relinquish
  control of the processor. Because of this, delays longer than 100
  microseconds must use Sleep instead of Stall.
  Data Table Compiler/Disassembler: Add support for the APMT table - ARM
  Performance Monitoring Unit table. Submitted by @bwicaksononv.
  Data Table Compiler/Disassembler: For MADT, add support for the OEM-
  defined subtables (Types 0x80-0x7F).
  Data Table Compiler: Fixed a problem with support for the SDEV table,
  where a subtable Length was not computed correctly.
  Data Table Compiler/Disassembler: Add/fix the CFMWS subtable to the CEDT
  Acpi table support.
  Data Table Compiler/Disassembler: Fix a compile issue with the CEDT and
  add template. Submitted by MasterDrogo.
  Data Table Compiler/Disassembler: NHLT Changes provided by Piotr Maziarz:
  iASL/NHLT: Rename linux specific structures to DeviceInfo to improve
  readability of the code.
  iASL/NHLT: Fix parsing undocumented bytes at the end of Endpoint.
  Undocumented bytes at the end of Endpoint Descriptor can be present
  independently of Linux-specific structures. Their size can also vary.
  iASL/NHLT: Treat TableTerminator as SpecificConfig. SpecificConfig has 4
  bytes of size and then an amount of bytes specified by size. All of the
  terminators that I've seen had a size equal to 4, but theoretically it
  can vary.
  iASL/AcpiExec: Use _exit instead of exit in signal handers (ctrl-C).
  iASL: Remove a remark due to excessive output. Removed a remark for
  duplicate Offset() operators, due to a user complaint.</changelog>
  <changelog author="rpm@fthiessen.de" date="1650542400">- Update bundled wmidump to latest upstream 2021-10-11:
  * Add support for '//' comments
  * Print object_id or notify_id based on ACPI_WMI_EVENT flag
    object_id and notify_id member are in one union. It depends on
    ACPI_WMI_EVENT flag which member is stored in this union.
    So print only one member based on ACPI_WMI_EVENT flag.
- Add comment about origin of the wmidump sources</changelog>
  <changelog author="trenn@suse.de" date="1665748800">- This version includes CEDT table support as requested in feature
  (SLE 15 SP5):
  jsc#PED-201</changelog>
  <changelog author="rpm@fthiessen.de" date="1672142400">- Update to version 20221020:
  * Added support for FFH (Fixed Function Hardware) Operation Region
    special context data.
  * Reverted commit "executer/exsystem: Warn about sleeps greater than 10 ms."
    Due to user complaints about valid sleeps greater than 10ms seen
    in some existing machines -- generating lots of warnings.
  * Do not touch VGA memory when EBDA &lt; 1KiB.
  * Check that EBDA pointer is in valid memory.
  * Completed the existing partial support for the CDAT "table".
  * Updated support for the IORT table - update to version E.e
  * Added CXL 3.0 structures (CXIMS &amp; RDPAS) to the CEDT table
  * iASL: Added CCEL table to both compiler/disassembler.
  * iASL: NHLT table: Fixed compilation of optional undocumented fields
  * iASL: Fix iASL compile error due to ACPI_TDEL_OFFSET.</changelog>
  <changelog author="rpm@fthiessen.de" date="1687348800">- Update to version 20230331
  * Add C Flexible Array support.
  * Add support for 64 bit LoongArch compilation.
  * Add first batch of RISC-V related definitions.
  * hwvalid: Drop port I/O validation.
  * iASL: Added full macro support in the preprocessor.
  * Add support for AMD Secure Processor Table (ASPT) version 1.
  * Add support for Arm's MPAM ACPI table version 2.
  * ACPI 6.5: MADT: add support for trace buffer extension in GICC.
  * Headers: Delete bogus NodeArray array of pointers from AEST table.</changelog>
  <changelog author="trenn@suse.de" date="1707739200">- Update to version 20230628
  * IASL/RHCT: Enable dumping and compiling newly added nodes
  * RHCT: Add flags, CMO and MMU nodes
  * MADT: Add dump and compile support for RISC-V APICs
  * MADT: Add RISC-V external interrupt controllers
  * Add AML_NO_OPERAND_RESOLVE flag to Timer
  * Add a define for size of acpi_srat_generic_affinity DeviceHandle
  * Slightly simplify an error message in acpi_ds_result_push()
  * Add port definitions for CDAT SSLBIS
  * Fix misspelled CDAT DSMAS define
  * Add interrupt command to acpiexec
  * Detect GED device and keep track of _EVT
  * ACPICA: Modify ACPI_STATE_COMMON
  * Manually revert after resolving conflicts PR #757 commit 32d875705c8ee8f99fd8b78dbed48633486a7640
  * fix for conflict macro definition on zephyr interface
  * Fix ACPI_FUNCTION_ENTRY()
  * Revert "Fixes for ACPI_FLEX_ARRAY, to eliminate warnings on MSVC"
  * Revert "Events: Use spaces instead of tabs to fix indentation"
  * Add support for _DSC as per ACPI 6.5
  * exserial.c: replace ternary operator with ACPI_MIN()
  * ACPICA: Modify ACPI_STATE_COMMON
  * Fix GCC 12 dangling-pointer warning
  * build: added module name for zephyr build system
  * Revert "Move ACPI_FUNCTION_ENTRY to function entry"
  * Move ACPI_FUNCTION_ENTRY to function entry
  * iASL/MADT: Add dump and compile support for LoongArch APICs
  * iasl: check Offset before Subtable dereference</changelog>
  <changelog author="trenn@suse.de" date="1711108800">- Use local source, there currently is no fixed tarball URL
- Use AslGbl_Deterministic by default FALSE to not compile in Date/Time
  into ACPI table compilings
- Update to version 20240321
  * Get rid of MSVC warnings that arise actually due to GCC's new dangling pointer warning and also tGCC's blindspot to work with nested named structs/unions resulting in breaking of ACPI event-handling
  * events/evgpeinit: don't forget to increment registered GPE count
  * events/evxfgpe: correctly clear GPE_AUTO_ENABLED in AcpiSetupGpeForWake
  * Fix Capabilities[1024] mess
  * Update actbl2.h to get rid of the MSVC error C2233
  * Fix CXL 3.0 structure (RDPAS) in the CEDT table
  * ACPICA: debugger: check status of AcpiEvaluateObject in AcpiDbWalkForFields
  * SRAT: Add dump and compiler support for RINTC affinity structure
  * SRAT: Add RISC-V RINTC affinity structure
  * Modify ACPI_OBJECT_COMMON_HEADER
  * Fix spelling and typos: Clean up the fix for Issue #900
  * Clean up the fix for Issue #900
  * tests/common: use CopyObject instead of Store for NRMT
  * acgcc: Fix C++ issue with ACPI_FLEX_ARRAY
  * MADT: Add new MADT GICC/GICR/ITS non-coherent flags handling
  * MADT: Add GICC online capable bit handling
  * Fix various spelling mistakes in text files and code comments
  * acpisrc: Add identifiers for the NHLT table
  * NHLT: Reintroduce types the table consists of
  * AdDisassemblerHeader: omit timestamp for deterministic output
  * Fix build indeterminism for asm compiler header.
  * os_specific: zephyr: update AcpiOsGetTimer with arch specific timer
  * osal: zephyr: Fix write access for mapped memory
  * osal: zephyr: Fix AcpiOsPrintf implementation
  * Fix issue #896
  * Attempt 1 to fix issue #900
  * ACPI 6.5: RAS2: Add support for RAS2 table
  * Add port definitions for CDAT SSLBIS
  * dmtbdump2: remove redundant failure check on Status
  * dmtbdump: remove duplicated code for both paths of an if statement
  * NHLT: Drop preliminary support
  * Revert "NHLT: Declare device configuration types"
  * os_specific: zephyr: add generic platform support
  * Fix segfault when error-checking mixed table types
  * actbl1.h: Add EINJ CXL error types
  * Get rid of // style comments
  * NHLT: Declare device configuration types
  * dmtbinfo2.c: RISC-V: Remove redundant Flags print</changelog>
</package>
<package pkgid="2ce0d2fd8de585e0c63808082a08013bb57173724be534e04f6ff03fc7758b34675680c20790610020c42e8eaf68c43255f5cc2ada6211013fa1ccf1738be95b" name="acpica-debugsource" arch="aarch64">
  <version epoch="0" ver="20240321" rel="slfo.1.1_1.3"/>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210604:
  * ACPICA kernel-resident subsystem
  * Cleaned up (delete) the context mutex during local address
    handler object deletion.
  * Fixed a memory leak caused by the _CID repair function.
  * Add support for PlatformRtMechanism OperationRegion handler.
  * Add a new utility function, AcpiUtConvertUuidToString.
  * iASL Compiler/Disassembler and ACPICA tools:
  * Added full support for the PRMT ACPI table
  * Added full support for the BDAT ACPI table.
  * Added full support for the RGRT ACPI table.
  * Added full support for the SVKL ACPI table.
  * Completed full support for the IVRS ACPI table.
  * Added compiler support for IVRS, updated disassembler support
  * Added a new utility, UtIsIdInteger, to determine if a
    HID/CID is an integer or a string.
  * Headers: Added more structs to the CEDT table
  * ACPI 6.4: MADT: added Multiprocessor Wakeup Mailbox Structure.</changelog>
  <changelog author="rpm@fthiessen.de" date="1634644800">- Update to version 20210930
  * ACPICA kernel-resident subsystem:
  * Avoid evaluating methods too early during system resume.
  * Added a new _OSI string, "Windows 2020".
  * iASL Compiler/Disassembler and ACPICA tools:
  * iASL compiler: Updated the check for usage of _CRS, _DIS,
    _PRS, and _SRSobjects
  * iASL table disassembler: Added disassembly support for the
    NHLT ACPI table.
  * Added a new subtable type for ACPI 6.4 SRAT Generic Port Affinity
  * Added the flag for online capable in the MADT, introduced in
    ACPI 6.3.
- Update to version 20210730:
  * iASL Compiler/Disassembler and ACPICA tools:
  * iasl: Check usage of _CRS, _DIS, _PRS, and _SRS objects
  * iASL Table Disassembler/Table compiler: Fix for WPBT table with
    no command-line arguments.
  * Handle the case where the Command-line Arguments table field does
    not exist (zero).
  * Headers: Add new DBG2 Serial Port Subtypes
  * iASL: Add full support for the AEST table (data compiler)
  * Add PRMT module header to facilitate parsing.
  * Table disassembler: Add missing strings to decode subtable types.</changelog>
  <changelog author="dfaggioli@suse.com" date="1644062400">- The package build fine on arches different than x86 and ARM. Drop
  the ExclusiveArch.</changelog>
  <changelog author="dmueller@suse.com" date="1650456000">- update to 20220331:
  For the ASL Sleep() operator, issue a warning if the sleep value is
  greater than 10 Milliseconds. Quick boottime is important, so warn about
  sleeps greater than 10 ms. Distribution Linux kernels reach initrd in 350
  ms, so excessive delays should be called out. 10 ms is chosen randomly,
  but three of such delays would already make up ten percent of the
  boottime.
  Namespace: Avoid attempting to walk the Namespace if the Namespace does
  not exist.
  AML interpreter/iASL compiler: Add new Acpi 6.4 semantics for the
  LoadTable and Load operators. DDB_HANDLE is gone, now loadtable returns a
  pass/fail integer. Now load returns a pass/fail integer, as well as
  storing the return value in an optional 2nd argument.
  Headers: Use uintptr_t and offsetof() in Linux kernel builds. To avoid
  "performing pointer subtraction with a null pointer has undefined
  behavior" compiler warnings, use uintptr_t and offsetof() that are always
  available during Linux kernel builds to define ACPI_UINTPTR_T and the
  ACPI_TO_INTEGER() and ACPI_OFFSET() macros when building the ACPICA code
  in the Linux kernel.
  Added support for the Windows 11 _OSI string ("Windows 2021"). Submitted
  by superm1.
  executer/exsystem: Inform users about ACPI spec violation for the Stall()
  operator. Values greater than 100 microseconds violate the ACPI
  specification, so warn users about it. From the ACPI Specification
  version 6.2 Errata A, 19.6.128 *Stall (Stall for a Short Time)*:
  The implementation of Stall is OS-specific, but must not relinquish
  control of the processor. Because of this, delays longer than 100
  microseconds must use Sleep instead of Stall.
  Data Table Compiler/Disassembler: Add support for the APMT table - ARM
  Performance Monitoring Unit table. Submitted by @bwicaksononv.
  Data Table Compiler/Disassembler: For MADT, add support for the OEM-
  defined subtables (Types 0x80-0x7F).
  Data Table Compiler: Fixed a problem with support for the SDEV table,
  where a subtable Length was not computed correctly.
  Data Table Compiler/Disassembler: Add/fix the CFMWS subtable to the CEDT
  Acpi table support.
  Data Table Compiler/Disassembler: Fix a compile issue with the CEDT and
  add template. Submitted by MasterDrogo.
  Data Table Compiler/Disassembler: NHLT Changes provided by Piotr Maziarz:
  iASL/NHLT: Rename linux specific structures to DeviceInfo to improve
  readability of the code.
  iASL/NHLT: Fix parsing undocumented bytes at the end of Endpoint.
  Undocumented bytes at the end of Endpoint Descriptor can be present
  independently of Linux-specific structures. Their size can also vary.
  iASL/NHLT: Treat TableTerminator as SpecificConfig. SpecificConfig has 4
  bytes of size and then an amount of bytes specified by size. All of the
  terminators that I've seen had a size equal to 4, but theoretically it
  can vary.
  iASL/AcpiExec: Use _exit instead of exit in signal handers (ctrl-C).
  iASL: Remove a remark due to excessive output. Removed a remark for
  duplicate Offset() operators, due to a user complaint.</changelog>
  <changelog author="rpm@fthiessen.de" date="1650542400">- Update bundled wmidump to latest upstream 2021-10-11:
  * Add support for '//' comments
  * Print object_id or notify_id based on ACPI_WMI_EVENT flag
    object_id and notify_id member are in one union. It depends on
    ACPI_WMI_EVENT flag which member is stored in this union.
    So print only one member based on ACPI_WMI_EVENT flag.
- Add comment about origin of the wmidump sources</changelog>
  <changelog author="trenn@suse.de" date="1665748800">- This version includes CEDT table support as requested in feature
  (SLE 15 SP5):
  jsc#PED-201</changelog>
  <changelog author="rpm@fthiessen.de" date="1672142400">- Update to version 20221020:
  * Added support for FFH (Fixed Function Hardware) Operation Region
    special context data.
  * Reverted commit "executer/exsystem: Warn about sleeps greater than 10 ms."
    Due to user complaints about valid sleeps greater than 10ms seen
    in some existing machines -- generating lots of warnings.
  * Do not touch VGA memory when EBDA &lt; 1KiB.
  * Check that EBDA pointer is in valid memory.
  * Completed the existing partial support for the CDAT "table".
  * Updated support for the IORT table - update to version E.e
  * Added CXL 3.0 structures (CXIMS &amp; RDPAS) to the CEDT table
  * iASL: Added CCEL table to both compiler/disassembler.
  * iASL: NHLT table: Fixed compilation of optional undocumented fields
  * iASL: Fix iASL compile error due to ACPI_TDEL_OFFSET.</changelog>
  <changelog author="rpm@fthiessen.de" date="1687348800">- Update to version 20230331
  * Add C Flexible Array support.
  * Add support for 64 bit LoongArch compilation.
  * Add first batch of RISC-V related definitions.
  * hwvalid: Drop port I/O validation.
  * iASL: Added full macro support in the preprocessor.
  * Add support for AMD Secure Processor Table (ASPT) version 1.
  * Add support for Arm's MPAM ACPI table version 2.
  * ACPI 6.5: MADT: add support for trace buffer extension in GICC.
  * Headers: Delete bogus NodeArray array of pointers from AEST table.</changelog>
  <changelog author="trenn@suse.de" date="1707739200">- Update to version 20230628
  * IASL/RHCT: Enable dumping and compiling newly added nodes
  * RHCT: Add flags, CMO and MMU nodes
  * MADT: Add dump and compile support for RISC-V APICs
  * MADT: Add RISC-V external interrupt controllers
  * Add AML_NO_OPERAND_RESOLVE flag to Timer
  * Add a define for size of acpi_srat_generic_affinity DeviceHandle
  * Slightly simplify an error message in acpi_ds_result_push()
  * Add port definitions for CDAT SSLBIS
  * Fix misspelled CDAT DSMAS define
  * Add interrupt command to acpiexec
  * Detect GED device and keep track of _EVT
  * ACPICA: Modify ACPI_STATE_COMMON
  * Manually revert after resolving conflicts PR #757 commit 32d875705c8ee8f99fd8b78dbed48633486a7640
  * fix for conflict macro definition on zephyr interface
  * Fix ACPI_FUNCTION_ENTRY()
  * Revert "Fixes for ACPI_FLEX_ARRAY, to eliminate warnings on MSVC"
  * Revert "Events: Use spaces instead of tabs to fix indentation"
  * Add support for _DSC as per ACPI 6.5
  * exserial.c: replace ternary operator with ACPI_MIN()
  * ACPICA: Modify ACPI_STATE_COMMON
  * Fix GCC 12 dangling-pointer warning
  * build: added module name for zephyr build system
  * Revert "Move ACPI_FUNCTION_ENTRY to function entry"
  * Move ACPI_FUNCTION_ENTRY to function entry
  * iASL/MADT: Add dump and compile support for LoongArch APICs
  * iasl: check Offset before Subtable dereference</changelog>
  <changelog author="trenn@suse.de" date="1711108800">- Use local source, there currently is no fixed tarball URL
- Use AslGbl_Deterministic by default FALSE to not compile in Date/Time
  into ACPI table compilings
- Update to version 20240321
  * Get rid of MSVC warnings that arise actually due to GCC's new dangling pointer warning and also tGCC's blindspot to work with nested named structs/unions resulting in breaking of ACPI event-handling
  * events/evgpeinit: don't forget to increment registered GPE count
  * events/evxfgpe: correctly clear GPE_AUTO_ENABLED in AcpiSetupGpeForWake
  * Fix Capabilities[1024] mess
  * Update actbl2.h to get rid of the MSVC error C2233
  * Fix CXL 3.0 structure (RDPAS) in the CEDT table
  * ACPICA: debugger: check status of AcpiEvaluateObject in AcpiDbWalkForFields
  * SRAT: Add dump and compiler support for RINTC affinity structure
  * SRAT: Add RISC-V RINTC affinity structure
  * Modify ACPI_OBJECT_COMMON_HEADER
  * Fix spelling and typos: Clean up the fix for Issue #900
  * Clean up the fix for Issue #900
  * tests/common: use CopyObject instead of Store for NRMT
  * acgcc: Fix C++ issue with ACPI_FLEX_ARRAY
  * MADT: Add new MADT GICC/GICR/ITS non-coherent flags handling
  * MADT: Add GICC online capable bit handling
  * Fix various spelling mistakes in text files and code comments
  * acpisrc: Add identifiers for the NHLT table
  * NHLT: Reintroduce types the table consists of
  * AdDisassemblerHeader: omit timestamp for deterministic output
  * Fix build indeterminism for asm compiler header.
  * os_specific: zephyr: update AcpiOsGetTimer with arch specific timer
  * osal: zephyr: Fix write access for mapped memory
  * osal: zephyr: Fix AcpiOsPrintf implementation
  * Fix issue #896
  * Attempt 1 to fix issue #900
  * ACPI 6.5: RAS2: Add support for RAS2 table
  * Add port definitions for CDAT SSLBIS
  * dmtbdump2: remove redundant failure check on Status
  * dmtbdump: remove duplicated code for both paths of an if statement
  * NHLT: Drop preliminary support
  * Revert "NHLT: Declare device configuration types"
  * os_specific: zephyr: add generic platform support
  * Fix segfault when error-checking mixed table types
  * actbl1.h: Add EINJ CXL error types
  * Get rid of // style comments
  * NHLT: Declare device configuration types
  * dmtbinfo2.c: RISC-V: Remove redundant Flags print</changelog>
</package>
<package pkgid="29184890186289d853a63da74646355ee18b601ef4a08b7a04a225083de30bf21517466fadd9fdc081078b9c4eaca3436d65117c5a0d07cfe7f0ecf526194385" name="adcli-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.9.2" rel="slfo.1.1_1.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build.</changelog>
  <changelog author="idonmez@suse.com" date="1538395200">- Run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1538481600">- Make doc noarch and stop requiring packages that are not
  technically needed.</changelog>
  <changelog author="scabrero@suse.de" date="1574251200">- Update to version 0.9.0+git.0.1b15280:
  * Release version 0.9.0
  * doc: add missing samba_data_tool_path.xml(.in) to EXTRA_DIST
  * doc: explain how to force password reset
  * Do not use arcfour-hmac-md5 when discovering the salt
  * Fix for issue found by Coverity
  * adenroll: use only enctypes permitted by Kerberos config
  * adenroll: add adcli_enroll_get_permitted_keytab_enctypes with tests
  * adconn: add adcli_conn_set_krb5_context
  * adenroll: make sure only allowed enctypes are used in FIPS mode
  * tools: computer - remove errx from parse_option</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616414400">- update to 0.9.1:
  * tools: add show-computer command
  * add description option to join and update
  * Use GSS-SPNEGO if available
  * add option use-ldaps
  * tools: disable SSSD's locator plugin
  * doc: explain required AD permissions
  * computer: add create-msa sub-command
  * Add account-disable option
  * fix coredump in discovery (boo#1183870)
- use upstream bootstrapped tarball
- add upstream signing key and validate source signature
- use strict build
- run tests</changelog>
  <changelog author="scabrero@suse.de" date="1628856000">- Fix build with glibc 2.34; (bsc#1189080); Add patch
  0001-configure-check-for-ns_get16-and-ns_get32-as-well.patch</changelog>
  <changelog author="elimat@opensuse.org" date="1672315200">- Update to 0.9.2:
  * adenroll: set password via LDAP instead Kerberos
  * disco: fall back to LDAPS if CLDAP ping was not successful
  * tools: replace getpass()
  * adenroll: write SID before secret to Samba's db
  * doc: add clarification to add-member command on doc/adcli.xml
  * tools: Set umask before calling mkdtemp()
  * Avoid undefined behaviour in short option parsing
  * library: include endian.h for le32toh
  * man: Fix typos and use consistent upper case for some keywords
  * doc: avoid gnu-make specific usage of $&lt;
  * configure: check for ns_get16 and ns_get32 as well
  * Add setattr and delattr options
  * entry: add passwd-user sub-command
  * Add dont-expire-password option
  * build: add --with-vendor-error-message configure option
- Remove patch fixed upstream: 0001-configure-check-for-ns_get16-and-ns_get32-as-well.patch
- Update signing key for source validation</changelog>
</package>
<package pkgid="fcd52453844679309735ba8e7426f2b7700b2c62c72495eb6f80ee6d7847ec75e2db46687f58bfa070538f2d9d70c460f2b8ce471e022c88b227a3a0cc60252f" name="adcli-debugsource" arch="aarch64">
  <version epoch="0" ver="0.9.2" rel="slfo.1.1_1.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build.</changelog>
  <changelog author="idonmez@suse.com" date="1538395200">- Run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1538481600">- Make doc noarch and stop requiring packages that are not
  technically needed.</changelog>
  <changelog author="scabrero@suse.de" date="1574251200">- Update to version 0.9.0+git.0.1b15280:
  * Release version 0.9.0
  * doc: add missing samba_data_tool_path.xml(.in) to EXTRA_DIST
  * doc: explain how to force password reset
  * Do not use arcfour-hmac-md5 when discovering the salt
  * Fix for issue found by Coverity
  * adenroll: use only enctypes permitted by Kerberos config
  * adenroll: add adcli_enroll_get_permitted_keytab_enctypes with tests
  * adconn: add adcli_conn_set_krb5_context
  * adenroll: make sure only allowed enctypes are used in FIPS mode
  * tools: computer - remove errx from parse_option</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616414400">- update to 0.9.1:
  * tools: add show-computer command
  * add description option to join and update
  * Use GSS-SPNEGO if available
  * add option use-ldaps
  * tools: disable SSSD's locator plugin
  * doc: explain required AD permissions
  * computer: add create-msa sub-command
  * Add account-disable option
  * fix coredump in discovery (boo#1183870)
- use upstream bootstrapped tarball
- add upstream signing key and validate source signature
- use strict build
- run tests</changelog>
  <changelog author="scabrero@suse.de" date="1628856000">- Fix build with glibc 2.34; (bsc#1189080); Add patch
  0001-configure-check-for-ns_get16-and-ns_get32-as-well.patch</changelog>
  <changelog author="elimat@opensuse.org" date="1672315200">- Update to 0.9.2:
  * adenroll: set password via LDAP instead Kerberos
  * disco: fall back to LDAPS if CLDAP ping was not successful
  * tools: replace getpass()
  * adenroll: write SID before secret to Samba's db
  * doc: add clarification to add-member command on doc/adcli.xml
  * tools: Set umask before calling mkdtemp()
  * Avoid undefined behaviour in short option parsing
  * library: include endian.h for le32toh
  * man: Fix typos and use consistent upper case for some keywords
  * doc: avoid gnu-make specific usage of $&lt;
  * configure: check for ns_get16 and ns_get32 as well
  * Add setattr and delattr options
  * entry: add passwd-user sub-command
  * Add dont-expire-password option
  * build: add --with-vendor-error-message configure option
- Remove patch fixed upstream: 0001-configure-check-for-ns_get16-and-ns_get32-as-well.patch
- Update signing key for source validation</changelog>
</package>
<package pkgid="da2ae13c63fbf046c2318039845c72eb634567d61d9a108cafa8867cd107b32ef7109bb9ff4468d8a3103687b186dc950da2fdae4932622a006aa0c962c06c45" name="afterburn-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="slfo.1.1_1.1"/>
  <changelog author="rrahl0@proton.me" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="rrahl0@opensuse.org" date="1722859200">- enable upstream tests</changelog>
  <changelog author="rrahl0@opensuse.org" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
</package>
<package pkgid="c3be0afe26f24f53d332a16574359ffd30d0f1d1b29f5e1bc696caf0d69ab73e3584f21ff7af269c80930cd3776ca5129f5fa5bc9773a902de0a4519975418f2" name="afterburn-debugsource" arch="aarch64">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="slfo.1.1_1.1"/>
  <changelog author="rrahl0@proton.me" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="rrahl0@opensuse.org" date="1722859200">- enable upstream tests</changelog>
  <changelog author="rrahl0@opensuse.org" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
</package>
<package pkgid="f1b86336949bf7304233a5e1ce21710ff1eddd834e53f313d51896f1ca502a2e0512e1957a6f382ad81c0ab827dc8fbfbd07f97e926a55fe4040dd5ef9ecaad6" name="aide-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.18.6" rel="slfo.1.1_2.1"/>
  <changelog author="schubi@suse.de" date="1636027200">- Added aide.service and aide.timer in order to run
  aide periodically in the background via systemd timer.
- aide-systemd.patch: hook in new manpages</changelog>
  <changelog author="info@paolostivanin.com" date="1648555200">- Update to 0.17.4:
  * fix CVE-2021-45417: precalculate buffer size in base64 functions (bsc#1194735)</changelog>
  <changelog author="paolo.perego@suse.com" date="1677153600">- Update to 0.18
- Rename aide-0.17.3-as-needed.patch to and rebase aide-0.18-as-needed.patch
- Added autoconf and autoconf-archive as building dependencies due to an error
  when reconfiguring the source
- Rebase aide-xattr-in-libc.patch</changelog>
  <changelog author="dmueller@suse.com" date="1679054400">- update to 0.18.1:
  * Fix handling of empty growing files
  * Fix segfault when using --dry-init
  * Update README
- switch to pcre2</changelog>
  <changelog author="andrea.manzini@suse.com" date="1685966400">- Update to 0.18.3:
  * Handle readlink() errors
- Update to 0.18.2:
  * Add warning if rules contain not compiled-in attributes
  * Add missing lock for tree operations during file system scan</changelog>
  <changelog author="andrea.manzini@suse.com" date="1685966401">- switched service macros from %systemd_* to %service_*
  according to documentation at https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Registering_unit_files_in_install_scripts</changelog>
  <changelog author="info@paolostivanin.com" date="1688126400">- Update to 0.18.4:
  * Fix handling of extended attributes on symlinks
  * Add missing ')' to log message
  * Fix static linking of the aide binary
  * Don't require database_out for --dry-init
  * Remove strerror() calls from thread log messages</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 0.18.5:
  * Fix child directory processing on equal match</changelog>
  <changelog author="info@paolostivanin.com" date="1691064000">- Update to 0.18.6:
  * Fix double free() during report generation
  * Improve handling of ACL errors</changelog>
  <changelog author="abergmann@suse.com" date="1755000000">- Security update:
  * null pointer dereference after reading incorrectly encoded xattr
    attributes from database (local DoS) (bsc#1247885, CVE-2025-54409).
    Add: aide-0.18_cve-2025-54409_xattr.patch
  * improper output neutralization (potential AIDE detection bypass)
    (bsc#1247884, CVE-2025-54389).
    Add: aide-0.18_cve-2025-54389_control_chars.patch</changelog>
</package>
<package pkgid="442d3a879c26aab10b0902414d5f0945437f8313be1c8cea725918dbe442fcd6dc3ccbb8dff2af8d748cda2b2be30b1ccaff3acd3cdc881654efffa2ea28208c" name="aide-debugsource" arch="aarch64">
  <version epoch="0" ver="0.18.6" rel="slfo.1.1_2.1"/>
  <changelog author="schubi@suse.de" date="1636027200">- Added aide.service and aide.timer in order to run
  aide periodically in the background via systemd timer.
- aide-systemd.patch: hook in new manpages</changelog>
  <changelog author="info@paolostivanin.com" date="1648555200">- Update to 0.17.4:
  * fix CVE-2021-45417: precalculate buffer size in base64 functions (bsc#1194735)</changelog>
  <changelog author="paolo.perego@suse.com" date="1677153600">- Update to 0.18
- Rename aide-0.17.3-as-needed.patch to and rebase aide-0.18-as-needed.patch
- Added autoconf and autoconf-archive as building dependencies due to an error
  when reconfiguring the source
- Rebase aide-xattr-in-libc.patch</changelog>
  <changelog author="dmueller@suse.com" date="1679054400">- update to 0.18.1:
  * Fix handling of empty growing files
  * Fix segfault when using --dry-init
  * Update README
- switch to pcre2</changelog>
  <changelog author="andrea.manzini@suse.com" date="1685966400">- Update to 0.18.3:
  * Handle readlink() errors
- Update to 0.18.2:
  * Add warning if rules contain not compiled-in attributes
  * Add missing lock for tree operations during file system scan</changelog>
  <changelog author="andrea.manzini@suse.com" date="1685966401">- switched service macros from %systemd_* to %service_*
  according to documentation at https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Registering_unit_files_in_install_scripts</changelog>
  <changelog author="info@paolostivanin.com" date="1688126400">- Update to 0.18.4:
  * Fix handling of extended attributes on symlinks
  * Add missing ')' to log message
  * Fix static linking of the aide binary
  * Don't require database_out for --dry-init
  * Remove strerror() calls from thread log messages</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 0.18.5:
  * Fix child directory processing on equal match</changelog>
  <changelog author="info@paolostivanin.com" date="1691064000">- Update to 0.18.6:
  * Fix double free() during report generation
  * Improve handling of ACL errors</changelog>
  <changelog author="abergmann@suse.com" date="1755000000">- Security update:
  * null pointer dereference after reading incorrectly encoded xattr
    attributes from database (local DoS) (bsc#1247885, CVE-2025-54409).
    Add: aide-0.18_cve-2025-54409_xattr.patch
  * improper output neutralization (potential AIDE detection bypass)
    (bsc#1247884, CVE-2025-54389).
    Add: aide-0.18_cve-2025-54389_control_chars.patch</changelog>
</package>
<package pkgid="f80e68a7f6b668b6d37d8a58dde1ac7d605040427e0176162aeb52ee51413ba5bef11959f4156fb21c3d3d847decbb4a08faf8f012931c8fe5e4f3579db50891" name="alsa-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.10" rel="slfo.1.1_1.2"/>
  <changelog author="tiwai@suse.com" date="1654516800">- Backport upstream fixes for 32bit inode and ELD parsing:
  0001-conf-Use-ino64_t-to-save-and-compare-inode-numbers.patch
  0002-control-eld-fix-the-decoding-for-older-hw.patch</changelog>
  <changelog author="tiwai@suse.com" date="1655726400">- Update to version 1.2.7.1: minor bug fixes, including the previous
  patches.  For details, see
    https://www.alsa-project.org/wiki/Changes_v1.2.7_v1.2.7.1#alsa-lib
- Drop obsoleted patches:
  0001-conf-Use-ino64_t-to-save-and-compare-inode-numbers.patch
  0002-control-eld-fix-the-decoding-for-older-hw.patch</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Update to version 1.2.7.2: minor updates, including fixes for PCM
  share plugin, rawmidi and UCM</changelog>
  <changelog author="tiwai@suse.com" date="1666699200">- Update to version 1.2.8 (jsc#PED-850):
  add FreeBSD/NetBD/OpenBSD build support, fixes in control namehint,
  various PCM plugins and UCM.  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.7.2_v1.2.8
- Add keyring</changelog>
  <changelog author="tiwai@suse.com" date="1683547200">- Update to version 1.2.9:
  * Versioned symbol updates
  * Various fixes for building on *BSD and Android
  * Fixes and enhancements of auto silencing and playback drain
  * Add SND_CTL_EINTR open mode at PCM
  * Avoid endless loop in snd_pcm_sw_params_default()
  * Fixes in PCM rate, route/softvol plugins
  * Fixes in topology API parser, cleanups
  * Enhancements in latency test program
  * Minor code cleanup and memory leak fixes in UCM API
  * emu10k1 config cleanup
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.8_v1.2.9#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1693828800">- Update to version 1.2.10 (jsc#PED-6566):
  * MIDI 2.0 feature support
  * build fixes for various platforms
  * various documentation fixes
  * misc topology fixes
  * ucm fixes and cleanups
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-lib
- Took upstream fix for possible build errors:
  0001-control.h-Fix-ump-header-file-detection.patch</changelog>
  <changelog author="tiwai@suse.com" date="1694260800">- Upstream fix backport:
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
- Upstream fix for PCM segfault regression (bsc#1215167):
  0003-pcm-Fix-segfault-with-32bit-libs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
</package>
<package pkgid="fe9f27ccb8b87f0b59e592a958b549957f90171b92812a6063dac6f03876fe22d66e2b2216bde677055081dcfb4725f3c0594427cb424813b054d3ebb98a46ae" name="alts-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2+30.a5431e9" rel="slfo.1.1_1.3"/>
  <changelog author="adam.majer@suse.de" date="1623240000">- Version v1.0.0:
  * Prefix symbols with libalts_ to avoid symbol clashes
  * Add symbol visibility and versioning
  * Decamelize public symbols and rename</changelog>
  <changelog author="adam.majer@suse.de" date="1624276800">- Update to version v1.1:
  * docs: Add broken manpage
  * tests: unit tests configs
  * tests: fix memory leak during tests
  * list_binaries: initialize pointer that is later used in free
  * libalts_exec_default() sets errno on not found</changelog>
  <changelog author="adam.majer@suse.de" date="1631534400">- Update to version v1.2:
  * Add config option=KeepArgv0 to keep original argument during
    exec() call</changelog>
  <changelog author="jengelh@inai.de" date="1631620800">- Use noun phrase for the summary; fix grammar in description.</changelog>
  <changelog author="adam.majer@suse.de" date="1631620801">- Update to version v1.2+3.b848aad:
  * tests: fix array overrun in unit tests</changelog>
  <changelog author="dmueller@suse.com" date="1668427200">- switch to a manual service rather than a buildtime tar service
  which introduces a bootstrap cycle between python and tar_scm</changelog>
  <changelog author="bogdan.lezhepekov@suse.com" date="1682424000">- Update to version v1.2+30.a5431e9: (bsc#1191692)
  * Change license to less restrictive Apache 2.0
  * doc: fixing a few typos
  * Adds option to display target executable only
  * Makefiles and cmake: rework for reproducible build
  * Improve Makefile
  * libalts_exec_default: fix memory leak on error condition
  * libalts_write_binary_configured_priority_to_file: fix memory leak
  * saveConfigData(): fix file descriptor leak in while loop error case
  * loadConfigData(): use goto exit label to prevent file descriptor leaks
  * libalts_load_available_binaries: use goto err: label to fix leaks
  * loadAlternativeForBinary: goto-assisted error handling to avoid leaks
  * checkGroupConsistencies(): explicitly ignore unused `flags`
  * lib: refactor error handling of findAltConfig()
  * utils: fix possible memory leaks on error conditions
  * docs: fix some typos and grammar
  * Update README.md
  * lib: generally open[at] with O_CLOEXEC
  * Fix logic in options parser
  * Add basic Makefile for buidling without cmake
  * Added description for options=KeepArgv0
  * cmake: Express the dependency on CUnit correctly for building tests
  * cmake: Build and install CMake and PkgConfig files
  * cmake: Fix setup of shared linker flags
  * config.h: Fix the version to match the current latest tag</changelog>
</package>
<package pkgid="d7f154297521ab09edf181b5568b67a44ecebf267ff72bc9dd50b43aa8babb184f9c1912ae0871e2e6aa07c71628bc490ce951f4c0124b3a220903b60ff70b54" name="argon2-debugsource" arch="aarch64">
  <version epoch="0" ver="20190702" rel="slfo.1.1_1.2"/>
  <changelog author="idonmez@suse.com" date="1482235200">- Initial release</changelog>
  <changelog author="hpj@urpla.net" date="1485604800">- make sure to call cc with -pthread option (implies -lpthread)
- run test suite</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- moved argon2-specs.pdf to doc subpackage
- added packaging of man page</changelog>
  <changelog author="meissner@suse.com" date="1492516800">- ship libargon2.pc (bsc#1034441)</changelog>
  <changelog author="lnussel@suse.de" date="1515499200">- Update to version 0.0+git20171227.670229c:
  * Added ABI version number
  * AVX2/AVX-512F optimizations of BLAMKA
  * Set Argon2 version number from the command line
  * New bindings
  * Minor bug and warning fixes (no security issue)
- use _service file</changelog>
  <changelog author="jengelh@inai.de" date="1515499201">- Update description.</changelog>
  <changelog author="lnussel@suse.de" date="1517313600">- add baselibs.conf as cryptsetup also has 32bit variants</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1589284800">- Update to version 0.0+git20190520.62358ba (boo#1170512):
  * Fix the Makefile to install libargon2.pc.
  * Wait for already running threads if a thread creation failed.
  * Added Argon2 Erlang binding.
  * Additional JVM bindings (Jargon2).</changelog>
  <changelog author="rpm@fthiessen.de" date="1650715200">- Fix version of package: 20171227 is the upstream version number
  of the package
- Replaced optflags.patch with adjust-makefile.patch, the
  patch will now also allow to set the file permissions of installed
  libraries. This fixes the rpmlint error: shared-library-not-executable</changelog>
  <changelog author="meissner@suse.com" date="1651060800">- use a source url</changelog>
</package>
<package pkgid="95e4cf10052f46eb85719fa7fc2ebbe1bee09a071876c7bd96b4b5612b309ef4bcb77518c7f689e6d70d45457d24d06f002e2fbc9a1ada37d684da9932dcff80" name="at-spi2-core-debugsource" arch="aarch64">
  <version epoch="0" ver="2.50.0" rel="slfo.1.1_1.2"/>
  <changelog author="mgorse@suse.com" date="1683806400">- Update to version 2.48.2:
  + Fixed a regression in 2.48.1 where the bus launcher would fail
    if dbus-broker was configured at build time but not installed
    on the system.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685275200">- Update to version 2.48.3:
  + Fix the build when dbus-broker is not set to be used by
    default.
  + Fix a couple of use after frees when finalizing devices.
  + atk-adaptor: Fix handling of sockets in impl_GetChildren.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689681600">- Update to version 2.49.1:
  + TableCell.xml: Add Get{Column,Row}HeaderCells methods.
  + atspi_accessible_get_localized_role_name: Use internal names
    when possible.
  + Add a non-recursive function to clear a single object's cache.
  + Code clean-ups.</changelog>
  <changelog author="yfjiang@suse.com" date="1691064000">- Support build environments like SLE 15 SP5 and Leap 15.5 which
  had %{_distconfdir) not defined yet.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.48.4:
  + Add atspi_get_version() to return the runtime version of the
    AT-SPI library.
  + collection:
  - Fix match testing for attributes.
  - Avoid locking up if an object has a very large child count.
  + Fix possible NULL pointer dereference when deregistering an
    event listener.
  + Various fixes for the new key grabbing API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.49.90:
  + Fix a test failure/timeout.
  + Add atspi_get_version() to return the runtime version of the
    library.
  + Collection: fix match testing for attributes.
  + Fix a NULL pointer dereference when deregistering an event
    listener that doesn't include a detail.
  + Fix the documentation for interfaces in collection match rules.
  + Add an AtspiLive enum to specify the politeness level for live
    regions, and document that this should be used for Announcement
    signals. Also add a notification signal in atk to replace the
    announcement signal that lacks the politeness information.
  + Add an asynchronous version of atspi_generate_mouse_event.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.49.91:
  + collection: Avoid locking up if an object has a very large
    child count.
  + Fix possible NULL pointer dereference when deregistering an
    event listener.
  + Various fixes for the new key grabbing API.
  + Don't wait for a reply when registering or deregistering
    keystroke listeners.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.50.0:
  + Fix at-spi2-atk test when running under a non-English locale.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695038400">- Adjust %fdupes parameter value to %{buildroot}%{_datadir}, one of
  the parent directories of the former parameter, to symlink other
  duplicate files under the datadir.</changelog>
  <changelog author="yfjiang@suse.com" date="1705233600">- Provide and obsolete more packages from old atk and at-spi2-atk:
  atk-devel, at-spi2-atk-devel and at-spi2-atk-common.</changelog>
</package>
<package pkgid="580294724d33710622e50294384838a9e2a9f56e2b55cf32dc658f47590a8153aa03c8e0ad2b95ca76e9d9301b234ff13e1a4e04959d2884557c5d5817005ec3" name="attr-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.5.1" rel="slfo.1.1_1.3"/>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg-offline from bootstrap packages</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- remove man5/attr.5, it is now part of man-pages
  http://lwn.net/Articles/643559/</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Remove obsolete Obsolete lines
- Drop static subpackage, nothing in TW depends on it Deb/RH do not
  provide it either
- Rely on simple upstream make install target
- Run tests
- Update to 2.4.48:
  * Provide default xattr.conf
  * Update buildsystem to reflect current autotools state
  * Small test updates
  * Remove various deprecated sections like attr/attr.h
- Update keyring, Mike Frysinger released this version
- Add patch to have tests working with newer perls:
  * 0001-attr-2.4.48-test-suite-perl.patch</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Replace unspecific boilerplate summary from years ago.</changelog>
  <changelog author="schwab@suse.de" date="1536148800">- Add libattr-devel-static subpackage</changelog>
  <changelog author="dmueller@suse.com" date="1536667200">- update description for libattr-devel-static to make it less
  boilerplate</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.5.1:
  * Fix libtool library versioning regression
  * Update po files and German translation
  * getfattr: Add --one-file-system option
  * Move struct stat into struct walk_tree_args
  * Move list of open directories into struct walk_tree_args
  * Move walk_tree_rec arguments into a separate struct
  * xattr.conf: Indicate afs metadata xattrs should be skipped when copying
  * Fix typos in manual pages
  * getfattr.1: by default only user namespace attributes are dumped
  * Enable large-file support on systems that do not enable it by default
  * test: escape left brace in a regex in test/run
- drop 0001-attr-2.4.48-test-suite-perl.patch (upstream)</changelog>
</package>
<package pkgid="2ab7245c02ac340a8a9313bf04b420bef4afdd6957025a4d759824b99791ba209be966a466c95894912c8c4668ddae99fa74e86f0bec9b8ed0ee6d9ce4cfa478" name="attr-debugsource" arch="aarch64">
  <version epoch="0" ver="2.5.1" rel="slfo.1.1_1.3"/>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg-offline from bootstrap packages</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- remove man5/attr.5, it is now part of man-pages
  http://lwn.net/Articles/643559/</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Remove obsolete Obsolete lines
- Drop static subpackage, nothing in TW depends on it Deb/RH do not
  provide it either
- Rely on simple upstream make install target
- Run tests
- Update to 2.4.48:
  * Provide default xattr.conf
  * Update buildsystem to reflect current autotools state
  * Small test updates
  * Remove various deprecated sections like attr/attr.h
- Update keyring, Mike Frysinger released this version
- Add patch to have tests working with newer perls:
  * 0001-attr-2.4.48-test-suite-perl.patch</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Replace unspecific boilerplate summary from years ago.</changelog>
  <changelog author="schwab@suse.de" date="1536148800">- Add libattr-devel-static subpackage</changelog>
  <changelog author="dmueller@suse.com" date="1536667200">- update description for libattr-devel-static to make it less
  boilerplate</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.5.1:
  * Fix libtool library versioning regression
  * Update po files and German translation
  * getfattr: Add --one-file-system option
  * Move struct stat into struct walk_tree_args
  * Move list of open directories into struct walk_tree_args
  * Move walk_tree_rec arguments into a separate struct
  * xattr.conf: Indicate afs metadata xattrs should be skipped when copying
  * Fix typos in manual pages
  * getfattr.1: by default only user namespace attributes are dumped
  * Enable large-file support on systems that do not enable it by default
  * test: escape left brace in a regex in test/run
- drop 0001-attr-2.4.48-test-suite-perl.patch (upstream)</changelog>
</package>
<package pkgid="5e308df879f5fc7dd39d369e575f7d3f171aabc531771a1179af7e950fd01cab2b388e8e876ad9fd1c5011896c592412a3eccb6e70d43e9964b4ce6c64bf88fa" name="audit-audispd-plugins-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.1" rel="slfo.1.1_2.1"/>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1671105600">- Enable build for ARM (32-bit)
- Update to version 3.0.9:
  * In auditd, release the async flush lock on stop
  * Don't allow auditd to log directly into /var/log when log_group is non-zero
  * Cleanup krb5 memory leaks on error paths
  * Update auditd.cron to use auditctl --signal
  * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
  * In auparse, special case kernel module name interpretation
  * If overflow_action is ignore, don't treat as an error
  (3.0.8)
  * Add gcc function attributes for access and allocation
  * Add some more man pages (MIZUTA Takeshi)
  * In auditd, change the reinitializing of the plugin queue
  * Fix path normalization in auparse (Sergio Correia)
  * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
  * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
  * Drop ProtectHome from auditd.service as it interferes with rules
  (3.0.7)
  * Add support for the OPENAT2 record type (Richard Guy Briggs)
  * In auditd, close the logging file descriptor when logging is suspended
  * Update the capabilities lookup table to match 5.16 kernel
  * Improve interpretation of renamat &amp; faccessat family of syscalls
  * Update syscall table for the 5.16 kernel
  * Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
  * audit-allow-manual-stop.patch
  * audit-ausearch-do-not-require-tclass.patch
  * audit-no-gss.patch
  * enable-stop-rules.patch
  * fix-hardened-service.patch
  * harden_auditd.service.patch
- Remove patches (fixed by version update):
  * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1757073600">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="a7fb65c92f6552d6fae5ef2b4e10ecea4e5bae6bb9569e61af860895b5743dfa1eebe63a09bb009f92b3c3e59dcb7d37664bae90294360d79202a5bea29c417e" name="audit-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.1" rel="slfo.1.1_2.1"/>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1671105600">- Enable build for ARM (32-bit)
- Update to version 3.0.9:
  * In auditd, release the async flush lock on stop
  * Don't allow auditd to log directly into /var/log when log_group is non-zero
  * Cleanup krb5 memory leaks on error paths
  * Update auditd.cron to use auditctl --signal
  * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
  * In auparse, special case kernel module name interpretation
  * If overflow_action is ignore, don't treat as an error
  (3.0.8)
  * Add gcc function attributes for access and allocation
  * Add some more man pages (MIZUTA Takeshi)
  * In auditd, change the reinitializing of the plugin queue
  * Fix path normalization in auparse (Sergio Correia)
  * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
  * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
  * Drop ProtectHome from auditd.service as it interferes with rules
  (3.0.7)
  * Add support for the OPENAT2 record type (Richard Guy Briggs)
  * In auditd, close the logging file descriptor when logging is suspended
  * Update the capabilities lookup table to match 5.16 kernel
  * Improve interpretation of renamat &amp; faccessat family of syscalls
  * Update syscall table for the 5.16 kernel
  * Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
  * audit-allow-manual-stop.patch
  * audit-ausearch-do-not-require-tclass.patch
  * audit-no-gss.patch
  * enable-stop-rules.patch
  * fix-hardened-service.patch
  * harden_auditd.service.patch
- Remove patches (fixed by version update):
  * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1757073600">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="544301f905271187c7516638eb60bf17d8667ddd97a5f03f45436dc55963c9b96175d76aebd6d40556c9c9ff34ec82c8ff92aa5d1dd5b6889497893850241d50" name="audit-debugsource" arch="aarch64">
  <version epoch="0" ver="3.1.1" rel="slfo.1.1_2.1"/>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1671105600">- Enable build for ARM (32-bit)
- Update to version 3.0.9:
  * In auditd, release the async flush lock on stop
  * Don't allow auditd to log directly into /var/log when log_group is non-zero
  * Cleanup krb5 memory leaks on error paths
  * Update auditd.cron to use auditctl --signal
  * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
  * In auparse, special case kernel module name interpretation
  * If overflow_action is ignore, don't treat as an error
  (3.0.8)
  * Add gcc function attributes for access and allocation
  * Add some more man pages (MIZUTA Takeshi)
  * In auditd, change the reinitializing of the plugin queue
  * Fix path normalization in auparse (Sergio Correia)
  * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
  * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
  * Drop ProtectHome from auditd.service as it interferes with rules
  (3.0.7)
  * Add support for the OPENAT2 record type (Richard Guy Briggs)
  * In auditd, close the logging file descriptor when logging is suspended
  * Update the capabilities lookup table to match 5.16 kernel
  * Improve interpretation of renamat &amp; faccessat family of syscalls
  * Update syscall table for the 5.16 kernel
  * Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
  * audit-allow-manual-stop.patch
  * audit-ausearch-do-not-require-tclass.patch
  * audit-no-gss.patch
  * enable-stop-rules.patch
  * fix-hardened-service.patch
  * harden_auditd.service.patch
- Remove patches (fixed by version update):
  * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
</package>
<package pkgid="0dc04bf0355ccf49d94cd0e22e2bf9aedbda032ca69b9a2602a9cdfcd1f2ea8ac2149b26dc2ebec4307bd4b707f4e16e23e84189da25b36b4e432fe91e729338" name="audit-secondary-debugsource" arch="aarch64">
  <version epoch="0" ver="3.1.1" rel="slfo.1.1_2.1"/>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1671105600">- Enable build for ARM (32-bit)
- Update to version 3.0.9:
  * In auditd, release the async flush lock on stop
  * Don't allow auditd to log directly into /var/log when log_group is non-zero
  * Cleanup krb5 memory leaks on error paths
  * Update auditd.cron to use auditctl --signal
  * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
  * In auparse, special case kernel module name interpretation
  * If overflow_action is ignore, don't treat as an error
  (3.0.8)
  * Add gcc function attributes for access and allocation
  * Add some more man pages (MIZUTA Takeshi)
  * In auditd, change the reinitializing of the plugin queue
  * Fix path normalization in auparse (Sergio Correia)
  * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
  * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
  * Drop ProtectHome from auditd.service as it interferes with rules
  (3.0.7)
  * Add support for the OPENAT2 record type (Richard Guy Briggs)
  * In auditd, close the logging file descriptor when logging is suspended
  * Update the capabilities lookup table to match 5.16 kernel
  * Improve interpretation of renamat &amp; faccessat family of syscalls
  * Update syscall table for the 5.16 kernel
  * Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
  * audit-allow-manual-stop.patch
  * audit-ausearch-do-not-require-tclass.patch
  * audit-no-gss.patch
  * enable-stop-rules.patch
  * fix-hardened-service.patch
  * harden_auditd.service.patch
- Remove patches (fixed by version update):
  * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1757073600">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="fefc69f429604c117e78282123ceddc1be6fef5ef1cd7a6806bf18a279e89cf45a33542143df7f52536cb92c2697c3eff534556e388e748467efdcb444d1b899" name="augeas-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="e618d9b4cb979cd856dc786253bff082954d34a4c495e5297527c6efd59d3cf15f9178e5033fe7e8850b21e556dde8329053124e93487ffee096a25abf10f5fb" name="augeas-debugsource" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="473b14b127f37b97dee509e1a59a070d960f060f68c1cab2e00d3f92248077314f376ba05d5749595ae2b0c5cecaf1f9a4d8f552356efffcad1bd65d36e5f56e" name="avahi-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8" rel="slfo.1.1_4.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="ffe13110d2f4e4dd36462a35095da12e89a651d15fd60a9864c8540a6bf2b66ae68bf2800bd5890c43fa408650b93c840245d6ac7702b607763fc9cce5597ae9" name="avahi-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8" rel="slfo.1.1_4.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="7e91a67b4b86bf1e09116e0533a0ae6124bae0beeea1449ec78562882b6b9a14c294a4588d79cfa88c7b0dc9d61d29508e1c193f6c20d5a550c11f142d70f556" name="babeltrace-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.8" rel="slfo.1.1_1.2"/>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 1.5.3 for SLE15 (bsc#1055683)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509710400">- Disable static library build.
- Enable Python 3 bindings build.
- Remove explicit glib2-devel requirement for the devel package: is
  autodetected already.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 1.5.4:
  * Use signed accessors for clock offsets.
  * Fix a signedness error in python complements.
  * Handle packet_seek errors.
  * Prevent calling adding the same trace recursively.
  * Make sure we have all the metadata streams before adding new
    traces.
  * Add missing debugging information in the live plugin.
  * Set stream id in HUP case.
  * Use list rather than ptr array for trace streams.
  * Fix a leak of streams.
  * Handle 0 session case in ask new streams.
  * Break loop on getting metadata error.
  * Return error on ask_new_stream when should quit.
  * Don't access missing ctf trace when getting metadata.
  * Fix lttng-live discarded event count after inactivity.
  * Fix timegm compat on Solaris.
  * Fix Python bindings when building with PIE hardening.
  * lttng-live: Print discarded event and packet lost warnings on
    stderr.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 1.5.5:
  * Propagate error from packet_seek in case of truncated packet.
  * Fix: report truncated files while reading.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 1.5.6:
  * Fix: remove left-over debug logging statement.
  * Use trace-&gt;trace_id in check to remove trace from bt_ctx.
  * Fix: missing initializer braces warning.
  * Fix: zero out URL parsing array before use and ensure proper
    error reporting.</changelog>
  <changelog author="azouhr@opensuse.org" date="1563192000">- add s390x in ExclusiveArch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 1.5.8 (changes since 1.5.6):
  * Cleanup: bitfields: streamline use of underscores.
  * Fix: bitfield: shift undefined/implementation defined
    behaviours.
  * Fix: array and sequence field's 'elems' members can be left NULL.
  * Fix: invalid alignment of enumeration fields.
  * Fix: lttng-live format: do not error out on empty streams
    hang up.
  * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
  * Fix: lib/iterator.c: unbalanced ctx put (leak).
  * Fix: lttng-live: lttng_live_open_trace_read memory leak.
  * Fix: trace-collection: trace clock use after free.
  * Fix: lttng-live: use-after-free in get_next_index().
  * Do not use diagnostic pragma when GCC version is lower than
    4.6.0.
  * Missing define when not building with gcc.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="schwab@suse.de" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
  <changelog author="dmueller@suse.com" date="1639396800">- reenable babeltrace on armv6/v7 (switch to excludearch)</changelog>
</package>
<package pkgid="44b5148dafcfa23638f9ee29447e579681ac358551508afaca2ec7ea232f4b209c38a8252946eb32b39b8706fa2ca188b84b8a0adc83ee3958693a7a57c432b8" name="babeltrace-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.8" rel="slfo.1.1_1.2"/>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 1.5.3 for SLE15 (bsc#1055683)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509710400">- Disable static library build.
- Enable Python 3 bindings build.
- Remove explicit glib2-devel requirement for the devel package: is
  autodetected already.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 1.5.4:
  * Use signed accessors for clock offsets.
  * Fix a signedness error in python complements.
  * Handle packet_seek errors.
  * Prevent calling adding the same trace recursively.
  * Make sure we have all the metadata streams before adding new
    traces.
  * Add missing debugging information in the live plugin.
  * Set stream id in HUP case.
  * Use list rather than ptr array for trace streams.
  * Fix a leak of streams.
  * Handle 0 session case in ask new streams.
  * Break loop on getting metadata error.
  * Return error on ask_new_stream when should quit.
  * Don't access missing ctf trace when getting metadata.
  * Fix lttng-live discarded event count after inactivity.
  * Fix timegm compat on Solaris.
  * Fix Python bindings when building with PIE hardening.
  * lttng-live: Print discarded event and packet lost warnings on
    stderr.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 1.5.5:
  * Propagate error from packet_seek in case of truncated packet.
  * Fix: report truncated files while reading.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 1.5.6:
  * Fix: remove left-over debug logging statement.
  * Use trace-&gt;trace_id in check to remove trace from bt_ctx.
  * Fix: missing initializer braces warning.
  * Fix: zero out URL parsing array before use and ensure proper
    error reporting.</changelog>
  <changelog author="azouhr@opensuse.org" date="1563192000">- add s390x in ExclusiveArch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 1.5.8 (changes since 1.5.6):
  * Cleanup: bitfields: streamline use of underscores.
  * Fix: bitfield: shift undefined/implementation defined
    behaviours.
  * Fix: array and sequence field's 'elems' members can be left NULL.
  * Fix: invalid alignment of enumeration fields.
  * Fix: lttng-live format: do not error out on empty streams
    hang up.
  * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
  * Fix: lib/iterator.c: unbalanced ctx put (leak).
  * Fix: lttng-live: lttng_live_open_trace_read memory leak.
  * Fix: trace-collection: trace clock use after free.
  * Fix: lttng-live: use-after-free in get_next_index().
  * Do not use diagnostic pragma when GCC version is lower than
    4.6.0.
  * Missing define when not building with gcc.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="schwab@suse.de" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
  <changelog author="dmueller@suse.com" date="1639396800">- reenable babeltrace on armv6/v7 (switch to excludearch)</changelog>
</package>
<package pkgid="7d22b6c767a5964049ebedc74b178cf44340ed67ddd3d800d4a545f5730471bf2ce7fadcdb6535e119ee51dadb3197f9f90d2ad93e3cae3d4127b0b339034471" name="bash-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.2.15" rel="slfo.1.1_1.6"/>
  <changelog author="werner@suse.de" date="1664280000">- Update to final bash 5.2
  a. When replacing a history entry, make sure the existing entry has a non-NULL
    timestamp before copying it; it may have been added by the application, not
    the history library.</changelog>
  <changelog author="werner@suse.de" date="1665057600">- Add upstream patches
  * bash52-001
    Expanding unset arrays in an arithmetic context can cause a
    segmentation fault.
  * bash52-002
    Starting bash with an invalid locale specification for
    LC_ALL/LANG/LC_CTYPE can cause the shell to crash.
- Do not run checks in parallel as it eats memory, a lot of memory
- Disable alternate array implementation as it eats a lot of memory</changelog>
  <changelog author="schwab@suse.de" date="1665576000">- Remove backup of patched tests</changelog>
  <changelog author="schwab@suse.de" date="1665576001">- Don't strip binaries
- Work around a signal mask issue with qemu linux-user emulation</changelog>
  <changelog author="werner@suse.de" date="1666267200">- Explicit require versioned libreadline8 as we face new ABI
  functions used by the bash (boo#1204336)</changelog>
  <changelog author="werner@suse.de" date="1667390400">- Set DEFAULT_LOADABLE_BUILTINS_PATH to get BASH_LOADABLES_PATH
  correct (boo#1204567)</changelog>
  <changelog author="werner@suse.de" date="1667995200">- Add upstream patches
  * bash52-003
    Command substitutions need to preserve newlines instead of replacing them
    with semicolons, especially in the presence of multiple here-documents.
  * bash52-004
    Bash needs to keep better track of nested brace expansions to avoid problems
    with quoting and POSIX semantics.
  * bash52-005
    Null pattern substitution replacement strings can cause a crash.
  * bash52-006
    In interactive shells, interrupting the shell while entering a command
    substitution can inhibit alias expansion.
  * bash52-007
    This patch fixes several problems with alias expansion inside command
    substitutions when in POSIX mode.
  * bash52-008
    Array subscript expansion can inappropriately quote brackets if the expression
    contains &lt; or &gt;.
  * bash52-009
    Bash arithmetic expansion should allow `@' and `*' to be used as associative
    array keys in expressions.</changelog>
  <changelog author="werner@suse.de" date="1669636800">- Add upstream patches
  * bash52-010
    Bash-5.2 checks the first 128 characters of an executable file that execve()
    refuses to execute to see whether it's a binary file before trying to
    execute it as a shell script. This defeats some previously-supported use
    cases like "self-executing" jar files or "self-uncompressing" scripts.
  * bash52-011
    Using timeouts and readline editing with the `read' builtin (read -e -t) can
    leave the readline timeout enabled, potentially resulting in an erroneous
    timeout on the next call.
  * bash52-012
    When running in bash compatibility mode, nested command substitutions can
    leave the `extglob' option enabled.</changelog>
  <changelog author="werner@suse.de" date="1671019200">- Add upstream patches
  * bash52-013
    Bash can leak memory when referencing a non-existent associative
    array element.
  * bash52-014
    Bash defers processing additional terminating signals when running
    the EXIT trap while exiting due to a terminating signal.  This
    patch allows the new terminating signal to kill the shell immediately.
  * bash52-015
    There are several cases where bash is too aggressive when optimizing
    out forks in subshells. For example, `eval' and traps should never
    be optimized.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="880b03402810a0964643527dadc4bca28a3b44899f9838c868caded0ab8ad05d6a9a47cfcd76d80ea3f907224b870f8e030be726b3e1902694f1d0caf838c4d6" name="bash-debugsource" arch="aarch64">
  <version epoch="0" ver="5.2.15" rel="slfo.1.1_1.6"/>
  <changelog author="werner@suse.de" date="1664280000">- Update to final bash 5.2
  a. When replacing a history entry, make sure the existing entry has a non-NULL
    timestamp before copying it; it may have been added by the application, not
    the history library.</changelog>
  <changelog author="werner@suse.de" date="1665057600">- Add upstream patches
  * bash52-001
    Expanding unset arrays in an arithmetic context can cause a
    segmentation fault.
  * bash52-002
    Starting bash with an invalid locale specification for
    LC_ALL/LANG/LC_CTYPE can cause the shell to crash.
- Do not run checks in parallel as it eats memory, a lot of memory
- Disable alternate array implementation as it eats a lot of memory</changelog>
  <changelog author="schwab@suse.de" date="1665576000">- Remove backup of patched tests</changelog>
  <changelog author="schwab@suse.de" date="1665576001">- Don't strip binaries
- Work around a signal mask issue with qemu linux-user emulation</changelog>
  <changelog author="werner@suse.de" date="1666267200">- Explicit require versioned libreadline8 as we face new ABI
  functions used by the bash (boo#1204336)</changelog>
  <changelog author="werner@suse.de" date="1667390400">- Set DEFAULT_LOADABLE_BUILTINS_PATH to get BASH_LOADABLES_PATH
  correct (boo#1204567)</changelog>
  <changelog author="werner@suse.de" date="1667995200">- Add upstream patches
  * bash52-003
    Command substitutions need to preserve newlines instead of replacing them
    with semicolons, especially in the presence of multiple here-documents.
  * bash52-004
    Bash needs to keep better track of nested brace expansions to avoid problems
    with quoting and POSIX semantics.
  * bash52-005
    Null pattern substitution replacement strings can cause a crash.
  * bash52-006
    In interactive shells, interrupting the shell while entering a command
    substitution can inhibit alias expansion.
  * bash52-007
    This patch fixes several problems with alias expansion inside command
    substitutions when in POSIX mode.
  * bash52-008
    Array subscript expansion can inappropriately quote brackets if the expression
    contains &lt; or &gt;.
  * bash52-009
    Bash arithmetic expansion should allow `@' and `*' to be used as associative
    array keys in expressions.</changelog>
  <changelog author="werner@suse.de" date="1669636800">- Add upstream patches
  * bash52-010
    Bash-5.2 checks the first 128 characters of an executable file that execve()
    refuses to execute to see whether it's a binary file before trying to
    execute it as a shell script. This defeats some previously-supported use
    cases like "self-executing" jar files or "self-uncompressing" scripts.
  * bash52-011
    Using timeouts and readline editing with the `read' builtin (read -e -t) can
    leave the readline timeout enabled, potentially resulting in an erroneous
    timeout on the next call.
  * bash52-012
    When running in bash compatibility mode, nested command substitutions can
    leave the `extglob' option enabled.</changelog>
  <changelog author="werner@suse.de" date="1671019200">- Add upstream patches
  * bash52-013
    Bash can leak memory when referencing a non-existent associative
    array element.
  * bash52-014
    Bash defers processing additional terminating signals when running
    the EXIT trap while exiting due to a terminating signal.  This
    patch allows the new terminating signal to kill the shell immediately.
  * bash52-015
    There are several cases where bash is too aggressive when optimizing
    out forks in subshells. For example, `eval' and traps should never
    be optimized.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="27b3f9c94d15174e85f0717c7eab3fe700716848c7c89035654127b1c50efb5a2335095e365f4e66b3713ec90f7604bc5d2a74c27c265a7d8e33e9c3db65b91e" name="bc-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.07.1" rel="slfo.1.1_1.3"/>
  <changelog author="schwab@suse.de" date="1198756800">- Fix last change.
- Fix detection of empty opt_expression in the parser.</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338465600">- update to upstream alpha 1.06.95 (2006-09-05), in use in other
  major distros for quite a long time (Debian, Fedora, Ubuntu, ...)
- add patches from Fedora
- automake dependency removed</changelog>
  <changelog author="idonmez@suse.com" date="1347883200">- Add BuildRequires on makeinfo to fix Factory build</changelog>
  <changelog author="tchvatal@suse.com" date="1417176000">- Clean up with spec-cleaner
- Add ncurses-devel as it is inherited from readline
- Explicitely pass without-libedit if we decide to switch for
  it at some point</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Update url
- Correct info files scriplets and dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Update to version 1.07.1:
  * Fixed ibase extension causing problems for read()
  * Fixed parallel make problem.
  * Fixed dc "Q" comanmd bug.
- Changes for version 1.07:
  * Added void functions.
  * fixes bug in load_code introduced by mathlib string storage in 1.06.
  * fix to get long options working.
  * signal code clean-up.
  * fixed a bug in the AVL tree routines.
  * fixed math library to work properly when called with ibase not 10.
  * fixed a symbol table bug when using more than 32 names.
  * removed a double free.
  * Added base 17 to 36 for ibase.
  * Fixed some memory leaks.
  * Various small tweaks and doc bug fixes.
- Drop no longer needed patches:
  * bc-1.06.95-memleak.patch
  * bc-1.06.95-matlib.patch
  * bc-1.06.95-sigintmasking.patch
- Refresh bc-1.06-dc_ibase.patch
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- added patches
  Correct return value after 'q' [bsc#1129038]
  + bc-dc-correct-return-value.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566993600">- Use %license instead of %doc [bsc#1082318]
- Cleanup %doc section</changelog>
  <changelog author="pgajdos@suse.com" date="1602763200">- fix [bsc#1177579] -- wrong clamping of hexadecimal digits in dc
- deleted patches
  - bc-1.06-dc_ibase.patch (upstreamed)</changelog>
</package>
<package pkgid="9f20c74766361274583b2471f52f0eb634350608fb37dbd013530489c82a1c4098ddcffb398f4780b6a26f27c9ad887158d6ead70101b3dcf20ed1f8011350d9" name="bc-debugsource" arch="aarch64">
  <version epoch="0" ver="1.07.1" rel="slfo.1.1_1.3"/>
  <changelog author="schwab@suse.de" date="1198756800">- Fix last change.
- Fix detection of empty opt_expression in the parser.</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338465600">- update to upstream alpha 1.06.95 (2006-09-05), in use in other
  major distros for quite a long time (Debian, Fedora, Ubuntu, ...)
- add patches from Fedora
- automake dependency removed</changelog>
  <changelog author="idonmez@suse.com" date="1347883200">- Add BuildRequires on makeinfo to fix Factory build</changelog>
  <changelog author="tchvatal@suse.com" date="1417176000">- Clean up with spec-cleaner
- Add ncurses-devel as it is inherited from readline
- Explicitely pass without-libedit if we decide to switch for
  it at some point</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Update url
- Correct info files scriplets and dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Update to version 1.07.1:
  * Fixed ibase extension causing problems for read()
  * Fixed parallel make problem.
  * Fixed dc "Q" comanmd bug.
- Changes for version 1.07:
  * Added void functions.
  * fixes bug in load_code introduced by mathlib string storage in 1.06.
  * fix to get long options working.
  * signal code clean-up.
  * fixed a bug in the AVL tree routines.
  * fixed math library to work properly when called with ibase not 10.
  * fixed a symbol table bug when using more than 32 names.
  * removed a double free.
  * Added base 17 to 36 for ibase.
  * Fixed some memory leaks.
  * Various small tweaks and doc bug fixes.
- Drop no longer needed patches:
  * bc-1.06.95-memleak.patch
  * bc-1.06.95-matlib.patch
  * bc-1.06.95-sigintmasking.patch
- Refresh bc-1.06-dc_ibase.patch
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- added patches
  Correct return value after 'q' [bsc#1129038]
  + bc-dc-correct-return-value.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566993600">- Use %license instead of %doc [bsc#1082318]
- Cleanup %doc section</changelog>
  <changelog author="pgajdos@suse.com" date="1602763200">- fix [bsc#1177579] -- wrong clamping of hexadecimal digits in dc
- deleted patches
  - bc-1.06-dc_ibase.patch (upstreamed)</changelog>
</package>
<package pkgid="54e3280412aa2a593a81a322003f6f0305f13815b5c823e0916c9fcd74f1c007436acaf9999871fb996c7d4da794281bc9cfcc396575c7d3e85de2d8834eac3e" name="bcache-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1+git37.a5e3753" rel="slfo.1.1_1.2"/>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="jengelh@inai.de" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="jengelh@inai.de" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="colyli@suse.com" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="colyli@suse.com" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="colyli@suse.com" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
  <changelog author="colyli@suse.com" date="1677758400">- bcache-tools: improve is_zoned_device() (bsc#1208425)
  0029-bcache-tools-improve-is_zoned_device.patch</changelog>
  <changelog author="jengelh@inai.de" date="1699531200">- Update to snapshot 1.1+git37.a5e3753
  * support ``bcache show -d`` for nvdimm-meta device
- Abolish /usr/bin/env [boo#1216370]
- Delete (merged):
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch
  0002-bcache-tools-add-is_zoned_device.patch
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
  0012-bcache-tools-Fix-potential-coredump-issues.patch
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
  0016-bcache-tools-add-bcache-status.patch
  0017-bcache-tools-add-man-page-bcache-status.8.patch
  0018-Makefile-install-bcache-status.patch
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
  0022-bcache-tools-check-incompatible-feature-set.patch
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch
  0029-bcache-tools-improve-is_zoned_device.patch</changelog>
</package>
<package pkgid="6a03b3c5ec97aa2cdef79afaf0ccd2fa5f551db56a7850a04cc1862718dbe82ce1df4491a09cefd92740869cf4115ba1ec83f714e769782a66b16e987955f3a9" name="bcache-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1+git37.a5e3753" rel="slfo.1.1_1.2"/>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="jengelh@inai.de" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="jengelh@inai.de" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="colyli@suse.com" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="colyli@suse.com" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="colyli@suse.com" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
  <changelog author="colyli@suse.com" date="1677758400">- bcache-tools: improve is_zoned_device() (bsc#1208425)
  0029-bcache-tools-improve-is_zoned_device.patch</changelog>
  <changelog author="jengelh@inai.de" date="1699531200">- Update to snapshot 1.1+git37.a5e3753
  * support ``bcache show -d`` for nvdimm-meta device
- Abolish /usr/bin/env [boo#1216370]
- Delete (merged):
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch
  0002-bcache-tools-add-is_zoned_device.patch
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
  0012-bcache-tools-Fix-potential-coredump-issues.patch
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
  0016-bcache-tools-add-bcache-status.patch
  0017-bcache-tools-add-man-page-bcache-status.8.patch
  0018-Makefile-install-bcache-status.patch
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
  0022-bcache-tools-check-incompatible-feature-set.patch
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch
  0029-bcache-tools-improve-is_zoned_device.patch</changelog>
</package>
<package pkgid="26631199310663519017ab2321e12d2d52dd24ea5d6e96a0fc9b49802be2a19fa85e5bc84b650c10e8cada88a0072d409431d768c150d718e0ec6f2c7f76efc3" name="blog-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.27" rel="slfo.1.1_1.2"/>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1688990400">- Fix big endian cast problems to be able to read commands
  and ansers (blogctl) as well as passphrases (blogd)</changelog>
</package>
<package pkgid="4640a4acaa7a0a1990b12ff28c75f31c9cad4ccfb59f434101baf0f65aa50b0c358826cd82cab524c8958a92fe926b97c94e79f9ac83ef1cc299d49c95384249" name="blog-debugsource" arch="aarch64">
  <version epoch="0" ver="2.27" rel="slfo.1.1_1.2"/>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1688990400">- Fix big endian cast problems to be able to read commands
  and ansers (blogctl) as well as passphrases (blogd)</changelog>
</package>
<package pkgid="e5e8bb779338d4afdcecc2aec1c5336588cf21f181333b4a413ea4f1d144fd03d863b328d8744f3a8a42022ca9c4999033e0abcb81a73d497cf0727b5ccade1b" name="bluez-debugsource" arch="aarch64">
  <version epoch="0" ver="5.70" rel="slfo.1.1_2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1668600000">- update to 5.66:
  * Fix issue with A2DP and transport connection collisions.
  * Fix issue with allowing application specific error codes.
  * Fix issue with not setting initiator flag correctly.
  * Fix issue with HoG Report MAP size handling.
  * Add initial support for Basic Audio Profile.
  * Add initial support for Volume Control Profile.
- remove RPi-Move-the-43xx-firmware-into-lib-firmware.patch (does
  not apply anymore), replace with CPPFLAGS define</changelog>
  <changelog author="tjyrinki@suse.com" date="1691668800">- update to 5.68
  * Fix issue with A2DP and handling of Transport.Acquire.
  * Fix issue with BAP and initiating QoS and Enable procedures.
  * Fix issue with BAP and detaching streams when PAC is removed.
  * Fix issue with BAP and reading all instances of PAC.
  * Fix issue with BAP and not being able to reconfigure.
  * Fix issue with BAP and transport configuration changes.
  * Fix issue with BAP and handling unexpected disconnect.
  * Fix issue with GATT and not removing pending services.
  * Fix issue with GATT and client ready handling.
  * Fix issue with handling fallback to transient hostname.
  * Add support for SecureConnections configuration option.
  * Add support for Mesh Remove Provisioning.
  * Add support for Mesh Private Beacons.
- Remove patches that are not needed with the new upstream.</changelog>
  <changelog author="jlee@suse.com" date="1691755200">- 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch be
  removed by Timo Jyrinki when updating to 5.68. I saw some reasons:
  - Upstream didn't take this patch:
    https://www.spinics.net/lists/linux-bluetooth/msg40136.html
  - Fedora also marked this patch in bluez.spec since bluez-5.68-2.fc39
    https://src.fedoraproject.org/rpms/bluez/blob/2b133d795f4f823c8b22ef5a07569792ad7ce6aa/f/bluez.spec
  We didn't put any bug number of this patch when it be introduced
  to bluez.spec since Nov 23, 2021. So, let's remove this patch unless
  upstream or Fedora add it back.</changelog>
  <changelog author="jlee@suse.com" date="1692100800">- For pushing bluez 5.68 to 15-SP6 (bluez-5.65), sync change log:
  (jsc#PED-5599)
  - The avrcp-Fix-crash-while-handling-unsupported-events.patch
    be merged to bluez-5.67 since 2023. (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1692187200">- For pushing bluez 5.68 to 15-SP6 (bluez-5.65), sync change log:
  (jsc#PED-5599)
  - RPi-Move-the-43xx-firmware-into-lib-firmware.patch be removed
    by Stefan Seyfried since updating to bluez-5.66. (bsc#995059)(bsc#1094902)
    Because the header file has "#ifndef FIRMWARE_DIR...#define FIRMWARE_DIR /etc/firmare"
    instead of patching. So we just supply FIRMWARE_DIR on compiler's
    command line in bluez.spec:
    export CPPFLAGS="$CPPFLAGS -DFIRMWARE_DIR='\"/lib/firmware\"'</changelog>
  <changelog author="gmbr3@opensuse.org" date="1692446400">- Use %_firmwaredir</changelog>
  <changelog author="tjyrinki@suse.com" date="1693310400">- update to 5.69
  * Fix issue with BAP enabling state correctly when resuming.
  * Fix issue with detaching source ASEs only after Stop Ready.
  * Fix issue with handling VCP audio location and descriptor.
  * Fix issue with generating IRK for adapter with privacy enabled.
  * Add support for BAP broadcast sink.
- Add three new man pages</changelog>
  <changelog author="jlee@suse.com" date="1696420800">- Moved btmgmt to main rpm of bluez. (jsc#PED-6216)</changelog>
  <changelog author="dmueller@suse.com" date="1699272000">- update to 5.70:
  * Fix issue with not sending GATT confirmations.
  * Fix issue with not handling initiator properly.
  * Fix issue with not checking PBAP counter length.
  * Add support for MICP profile and MICS service.
- add Fix-.device_probe-failing-if-SDP-record-is-not.patch to fix
  regression when pairing game controllers</changelog>
  <changelog author="jlee@suse.com" date="1757332800">- Add input.conf-Change-default-of-ClassicBondedOnly.patch
  to change default of ClassicBondedOnly in input.conf.
    25a471a83e02 input.conf: Change default of ClassicBondedOnly
  (bsc#1217877, CVE-2023-45866)
- Fixed the date in bluez.changes:
  - Mon Sep2y 09:36:31 CEST 2008 - seife@suse.de
    +Mon Sep 29 09:36:31 CEST 2008 - seife@suse.de</changelog>
</package>
<package pkgid="9ca9f24e18d886024197691c44e5522c347cf21fda200d4b0efd5e1da7ad18c010fd966ff22c5747516173157f3c73dccade753cc31d52871c1e419304e86877" name="boost-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.84.0" rel="slfo.1.1_1.4"/>
  <changelog author="adam.majer@suse.de" date="1661169600">- ppc64le: added some new math libraries (bsc#1202594)</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="aschnell@suse.com" date="1671019200">- update to 1.81.0
  * new libraries:
    + URL - URL Library
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_81_0.html</changelog>
  <changelog author="dmueller@suse.com" date="1674907200">- add boost-phoenix-revert-std-tuple-support.patch to fix
  libetonyek and others build that use boost::phoenix</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="aschnell@suse.com" date="1681992000">- update to 1.82.0
  * new libraries:
    + MySQL - MySQL Header-only Library.
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_82_0.html</changelog>
  <changelog author="aschnell@suse.com" date="1693915200">- update to 1.83.0
  * new libraries:
    + Compat - Header-only Library.
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_83_0.html
- dynamic_linking.patch: updated
- boost-mpi-noreturn.patch: added</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698148800">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698321600">- Fix build for gnu-mpich-hpc broken by previous update</changelog>
  <changelog author="aschnell@suse.com" date="1702555200">- update to 1.84.0
  * new libraries:
    + Cobalt (single-threaded asynchronicity framework)
    + Redis (implements protocol RESP3)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_84_0.html
- drop boost-phoenix-revert-std-tuple-support.patch (upstream)
- drop boost-mpi-noreturn.patch (upstream)</changelog>
</package>
<package pkgid="ff46efe94bf748971ed0ca75e9db03e55de780d86ef68976c714a79446e4f8cca3a30c71eb8407b33a51ec031d2bb1b5105c06b49e768f9e63eb1ae3895f7084" name="brotli-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1544788800">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="sflees@suse.de" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andythe_great@pm.me" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="jengelh@inai.de" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="meissner@suse.com" date="1677326400">- add 32bit devel package for Wine development.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="jengelh@inai.de" date="1693483200">- Update to release 1.1
  * CLI: added a --dictionary option
- Reomve 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="dmueller@suse.com" date="1697544000">- build with optflags again</changelog>
</package>
<package pkgid="8f3b35ddee15ed0a2608c659ff015d02dd952a2475deaa1e49c824d7882b30d21f74ecbb46a549665db08f36118dfe1f079f415cf9f0a2d50f91667a726ff225" name="btrfsprogs-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.8.1" rel="slfo.1.1_1.2"/>
  <changelog author="dsterba@suse.cz" date="1693224000">- update to 6.3.3:
  * add btrfs-find-root to btrfs.box
  * replace: properly enqueue if there's another replace running
  * other:
  * CI updates, more tests enabled, code coverage, badges
  * documentation updates
  * build warning fixes</changelog>
  <changelog author="dsterba@suse.cz" date="1693569600">- update to 6.5:
  * crc32c implementation speedup (3x)
  * btrfstune:
  * be more strict about option combinations and refuse changing
    features from incompatible groups
  * metadata_uuid changes fixes
  * libbtrfs: fix ABI breakage introduced in 6.3.1, revert struct subvol_info
    and subvol_uuid_search changes (bsc#1212217)
  * CI updates
  * pull request build tests enabled
  * published static binaries built with backward compatibility (-march=x86-64)
  * other
  * documentation updates
  * new and updated tests
  * experimental feature updates (json, list-chunks, checksum switch)
  * code refactoring
  * remove btrfs-fragments</changelog>
  <changelog author="dsterba@suse.cz" date="1694606400">- update to 6.5.1:
  * build fixes:
  * crc32c if PIE or relro is enabled
  * detect if PCLMUL feature is recognized by compiler and also detect that
    at runtime
  * check: verify metadata item level when skinny-metadata is enabled
  * other: minor build and docs updates
  * spec: remove xmlto dependency, docs built by sphinx</changelog>
  <changelog author="dsterba@suse.cz" date="1698062400">- update to 6.5.3
  * mkfs:
  * add short aliases for -O specification, block-group-tree (bgt),
    free-space-tree (fst), raid-stripe-tree (rst)
  * don't try to resize the image (namely when backed by file) when --rootdir
    contains sparse file larger than the image
  * also copy xattr/permissions/ugid/timestamps of the top --rootdir directory
  * add new option --device-uuid to let user specify exact uuid of the
    device item (only for single device filesystems)
  * check:
  * on zoned devices, use correct super block offsets when repairing
  * check inline extent refs order
  * subvolume create: add new option --parent to create missing path
    components of the given path (like mkdir -p)
  * rescue clear-ino-cache: new command moved from 'btrfs check' implementing
    the same as option --clear-ino-cache (to be deprecated and removed in the
    future)
  * dump-tree: allow '-' in tree identifier names for option -t
  * btrfstune:
  * drop short option and add long option to enable squota
  * tune space reservation and batch size for block-group-tree conversion
  * scrub status: print correct value of "Bytes scrubbed" for unfinished runs
  * qgroup show: fix crash when attempting to print path of stale qgroups
  * experimental features:
  * move build of raid-stripe-tree out for testing but it's still considered
    experimental
  * other:
  * shell completion updates
  * sync raid-stripe-tree code with kernel
  * build fixes
  * new and updated tests
- update to 6.5.2
  * new feature support:
  * raid-stripe-tree, new tree to track extent mapping for raid profiles,
    allows raid1*, raid0 and raid10 on zoned devices (kernel 6.7)
  * simple quotas, simplified accounting that does not track exclusive and
    shared extents (kernel 6.7)
  * mkfs with duplicate UUID on a single device, temp-fsid (kernel 6.7)
  * metadata_uuid: enhanced capabilities to repair partially updated fsid on
    multiple devices
  * other:
  * updated tests and CI
  * sync sources with kernel</changelog>
  <changelog author="dsterba@suse.cz" date="1700049600">- update to 6.6.2
  * squota: change key number of EXTENT_OWNER_REF_KEY, sync with kernel 6.7-rc1
  * property set/get: completely skip char devices, trying to set properties
    and open /dev/watchdog* causes a reboot
  * other: build warnings, test updates, documentation updates
- update to 6.6.1
  * fix device scanning ioctl definition, accidental change to the 'forget' ioctl
    that breaks mounting multi-device filesystems
- update to 6.6
  * new global option --dry-run, now implemented for 'subvolume delete'
  * fi defrag: new option --step to defragment files in steps, report progress
  * balance: removed support for obsolete short syntax 'btrfs balance /path'
  * mkfs: print zone count for each device in the overview
  * check:
  * verify inline ref ordering
  * deprecate --clear-space-cache, moved to the 'rescue' group
  * rescue clear-space-cache: new command moved from 'btrfs check' implementing
    the same as option --clear-space-cache (to be deprecated and removed in the
    future)
  * dump-tree: output sequence number for inline refs
  * fixes:
  * fi resize: fallback to lowest devid when 1 does not exist, previously the
    command would fail with "No such device"
  * fi usage: fix "devices 0 != 1" message and broken output on multi-device
    filesystem
  * open files in non-blocking mode when reading fsid, this could hang when
    trying to open fifo files or some special character devices, was observed
    with 'prop set/get'
  * experimental:
  * mkfs: parametric zone size for emulated zoned mode
  * other:
  * cleanups refactoring
  * new and updated tests
  * CI updates
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1706184000">- update to 6.7
  * mkfs: make 4k sectorsize default, recommended minimum kernel for that is
    6.1 and requires subpage support on architectures with page size &gt; 4k
  * subvolume create: return correct error code when a target already exists
  * tree-checker: dump tree block on error (btrfs-convert, ...)
  * scrub limit: fix reporting of a limit set while there's none
  * fi usage: fix reporting of unallocated data or raid56 profile without root
    privs due to lack of that information
  * convert:
  * align data block group lengths to 64K
  * fix conversion of a large filesystem when there are partial inode items
    present due to caching
  * other:
  * build fixes
  * updated documentation
  * new and updated tests
- update to 6.6.3
  * subvol create: accept multiple arguments
  * subvol delete: print the subvolume id in the output
  * subvol sync: check if the filesystems is still writeable so it does not
    wait indefinitely
  * device delete: add a timeout and warning when deleting multiple devices
  * scrub status: report limit if set in sysfs/../scrub_speed_max
  * scrub limit: new command to show or set the per-device scrub limits
  * scrub start: report the limit if set
  * build:
  * fix CPU feature detection on aarch64
  * support Botan and OpenSSL (3.2+) as crypto backends
  * other:
  * documentation updates, RTD config update
  * new and updated tests
  * CI updates</changelog>
  <changelog author="dsterba@suse.cz" date="1707998400">- update to 6.7.1
  * convert: raid-stripe-tree can be now enabled for the target filesystem
  * mkfs:
  * handle lifetime of open file descriptors so it does not trigger udev
    that could miss to create the UUID symlinks in /dev
  * update warning when CPU page size does not match sector size
  * merge features in summary, no more distinction of incompat and runtime
    to match the semantics of option -O
  * fi show: fix recognizing raw device mapper paths
  * other:
  * documentation updates, fix links to labels in included directories</changelog>
  <changelog author="dsterba@suse.cz" date="1711454400">- update to 6.8
  * fix --enqueue option timeout handling
  * subvolume: remove support for undocumented options -c and -x,
    functionality disabled in kernel
  * libbtrfsutil:
  * version 0.1.3, backward compabile
  * add aliases for all existing functions with unified naming scheme
  * updated header defintions for recently added kernel features
  * send: v3 supported in experimental mode
  * other:
  * docs: manual page references, graphs, enhancements, clarifications
  * error handling fixes
  * cleanups and refactoring</changelog>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
</package>
<package pkgid="5ccc0b6e2fcc568bceefb37f75cb99b0425289edc206b22ebf5e612d069d4d1c657add8ab948768dd0624bc8ba02a44335afc58f8292a99073f9022a4e6bc86e" name="btrfsprogs-debugsource" arch="aarch64">
  <version epoch="0" ver="6.8.1" rel="slfo.1.1_1.2"/>
  <changelog author="dsterba@suse.cz" date="1693224000">- update to 6.3.3:
  * add btrfs-find-root to btrfs.box
  * replace: properly enqueue if there's another replace running
  * other:
  * CI updates, more tests enabled, code coverage, badges
  * documentation updates
  * build warning fixes</changelog>
  <changelog author="dsterba@suse.cz" date="1693569600">- update to 6.5:
  * crc32c implementation speedup (3x)
  * btrfstune:
  * be more strict about option combinations and refuse changing
    features from incompatible groups
  * metadata_uuid changes fixes
  * libbtrfs: fix ABI breakage introduced in 6.3.1, revert struct subvol_info
    and subvol_uuid_search changes (bsc#1212217)
  * CI updates
  * pull request build tests enabled
  * published static binaries built with backward compatibility (-march=x86-64)
  * other
  * documentation updates
  * new and updated tests
  * experimental feature updates (json, list-chunks, checksum switch)
  * code refactoring
  * remove btrfs-fragments</changelog>
  <changelog author="dsterba@suse.cz" date="1694606400">- update to 6.5.1:
  * build fixes:
  * crc32c if PIE or relro is enabled
  * detect if PCLMUL feature is recognized by compiler and also detect that
    at runtime
  * check: verify metadata item level when skinny-metadata is enabled
  * other: minor build and docs updates
  * spec: remove xmlto dependency, docs built by sphinx</changelog>
  <changelog author="dsterba@suse.cz" date="1698062400">- update to 6.5.3
  * mkfs:
  * add short aliases for -O specification, block-group-tree (bgt),
    free-space-tree (fst), raid-stripe-tree (rst)
  * don't try to resize the image (namely when backed by file) when --rootdir
    contains sparse file larger than the image
  * also copy xattr/permissions/ugid/timestamps of the top --rootdir directory
  * add new option --device-uuid to let user specify exact uuid of the
    device item (only for single device filesystems)
  * check:
  * on zoned devices, use correct super block offsets when repairing
  * check inline extent refs order
  * subvolume create: add new option --parent to create missing path
    components of the given path (like mkdir -p)
  * rescue clear-ino-cache: new command moved from 'btrfs check' implementing
    the same as option --clear-ino-cache (to be deprecated and removed in the
    future)
  * dump-tree: allow '-' in tree identifier names for option -t
  * btrfstune:
  * drop short option and add long option to enable squota
  * tune space reservation and batch size for block-group-tree conversion
  * scrub status: print correct value of "Bytes scrubbed" for unfinished runs
  * qgroup show: fix crash when attempting to print path of stale qgroups
  * experimental features:
  * move build of raid-stripe-tree out for testing but it's still considered
    experimental
  * other:
  * shell completion updates
  * sync raid-stripe-tree code with kernel
  * build fixes
  * new and updated tests
- update to 6.5.2
  * new feature support:
  * raid-stripe-tree, new tree to track extent mapping for raid profiles,
    allows raid1*, raid0 and raid10 on zoned devices (kernel 6.7)
  * simple quotas, simplified accounting that does not track exclusive and
    shared extents (kernel 6.7)
  * mkfs with duplicate UUID on a single device, temp-fsid (kernel 6.7)
  * metadata_uuid: enhanced capabilities to repair partially updated fsid on
    multiple devices
  * other:
  * updated tests and CI
  * sync sources with kernel</changelog>
  <changelog author="dsterba@suse.cz" date="1700049600">- update to 6.6.2
  * squota: change key number of EXTENT_OWNER_REF_KEY, sync with kernel 6.7-rc1
  * property set/get: completely skip char devices, trying to set properties
    and open /dev/watchdog* causes a reboot
  * other: build warnings, test updates, documentation updates
- update to 6.6.1
  * fix device scanning ioctl definition, accidental change to the 'forget' ioctl
    that breaks mounting multi-device filesystems
- update to 6.6
  * new global option --dry-run, now implemented for 'subvolume delete'
  * fi defrag: new option --step to defragment files in steps, report progress
  * balance: removed support for obsolete short syntax 'btrfs balance /path'
  * mkfs: print zone count for each device in the overview
  * check:
  * verify inline ref ordering
  * deprecate --clear-space-cache, moved to the 'rescue' group
  * rescue clear-space-cache: new command moved from 'btrfs check' implementing
    the same as option --clear-space-cache (to be deprecated and removed in the
    future)
  * dump-tree: output sequence number for inline refs
  * fixes:
  * fi resize: fallback to lowest devid when 1 does not exist, previously the
    command would fail with "No such device"
  * fi usage: fix "devices 0 != 1" message and broken output on multi-device
    filesystem
  * open files in non-blocking mode when reading fsid, this could hang when
    trying to open fifo files or some special character devices, was observed
    with 'prop set/get'
  * experimental:
  * mkfs: parametric zone size for emulated zoned mode
  * other:
  * cleanups refactoring
  * new and updated tests
  * CI updates
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1706184000">- update to 6.7
  * mkfs: make 4k sectorsize default, recommended minimum kernel for that is
    6.1 and requires subpage support on architectures with page size &gt; 4k
  * subvolume create: return correct error code when a target already exists
  * tree-checker: dump tree block on error (btrfs-convert, ...)
  * scrub limit: fix reporting of a limit set while there's none
  * fi usage: fix reporting of unallocated data or raid56 profile without root
    privs due to lack of that information
  * convert:
  * align data block group lengths to 64K
  * fix conversion of a large filesystem when there are partial inode items
    present due to caching
  * other:
  * build fixes
  * updated documentation
  * new and updated tests
- update to 6.6.3
  * subvol create: accept multiple arguments
  * subvol delete: print the subvolume id in the output
  * subvol sync: check if the filesystems is still writeable so it does not
    wait indefinitely
  * device delete: add a timeout and warning when deleting multiple devices
  * scrub status: report limit if set in sysfs/../scrub_speed_max
  * scrub limit: new command to show or set the per-device scrub limits
  * scrub start: report the limit if set
  * build:
  * fix CPU feature detection on aarch64
  * support Botan and OpenSSL (3.2+) as crypto backends
  * other:
  * documentation updates, RTD config update
  * new and updated tests
  * CI updates</changelog>
  <changelog author="dsterba@suse.cz" date="1707998400">- update to 6.7.1
  * convert: raid-stripe-tree can be now enabled for the target filesystem
  * mkfs:
  * handle lifetime of open file descriptors so it does not trigger udev
    that could miss to create the UUID symlinks in /dev
  * update warning when CPU page size does not match sector size
  * merge features in summary, no more distinction of incompat and runtime
    to match the semantics of option -O
  * fi show: fix recognizing raw device mapper paths
  * other:
  * documentation updates, fix links to labels in included directories</changelog>
  <changelog author="dsterba@suse.cz" date="1711454400">- update to 6.8
  * fix --enqueue option timeout handling
  * subvolume: remove support for undocumented options -c and -x,
    functionality disabled in kernel
  * libbtrfsutil:
  * version 0.1.3, backward compabile
  * add aliases for all existing functions with unified naming scheme
  * updated header defintions for recently added kernel features
  * send: v3 supported in experimental mode
  * other:
  * docs: manual page references, graphs, enhancements, clarifications
  * error handling fixes
  * cleanups and refactoring</changelog>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
</package>
<package pkgid="0713be443e835520de3c335523cb2bb1de7cd2164af365d6e16069d61d40946d14beec3438858ac768efc66ea5e18c85d8764d8d7ac8fc622172b16600f8afcc" name="buildkit-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.12.5" rel="slfo.1.1_1.2"/>
  <changelog author="rbrown@suse.com" date="1637755200">- Initial Packaging</changelog>
  <changelog author="dmueller@suse.com" date="1675166400">- update to 0.11.2:
  * Update containerd patches to fix regression in handling push errors
  * Multiple fixes for History API #3530
  * Fix issue with parallel build requests using local cache imports #3493
  * Builtin Dockerfile frontend has been updated to 1.5.1, fixing possible
    panic in certain warning condition #3505
  * Fix possible hang when closing down the SSH forwarding socket in v0.11.0
  * Fix typo in an environment variable used to configure OpenTelemetry
    endpoints #3508
  * Builtin Dockerfile frontend has been updated to v1.5.0
    https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.5.0
  * BuildKit and compatible frontends can now produce SBOM (Software Bill of
    Materials) attestations for the build results to show the dependencies
    of the build. These attestations can be added to images and locally
    exported files. Using Dockerfiles, SBOM information can be configured to
    be produced also based on files in intermediate build stages or build
    context, or run processes that manually define the SBOM dependencies.
    When exporting an image, layer mapping is also produced that allows
    tracing a SBOM package to a specific build step. #3258 #3290 #3249 #2983
    [#3358] #3312 #3407 #3408 #3410 #3414 #3422
  * BuildKit can now produce a Provenance attestation for the build result
    in SLSA format. Provenance attestations describe how a build was
    produced, and what sources/parameters were used. In addition to fields
    part of the SLSA specification, Buildkit's provenance also exports
    BuildKit-specific metadata like LLB steps with their source- and layer
    mapping. Provenance attestation will capture all the build sources
    visible to BuildKit, for example, not only the Git repository where the
    project's source is coming from but also the digests of all the
    container images used during the build. #3240 #3428 #3428 #3462
  * BuildKit now supports reproducible builds by setting `SOURCE_DATE_EPOCH`
    build argument or `source-date-epoch` exporter attribute. This
    deterministic date will be used in image metadata instead of the current
    time. #2918 #3262 #3152 Read documentation
  * OCI annotations can now be set to build results exported as images or
    OCI layouts. Annotations can be set on both image manifests and indexes,
    as well as descriptors to them. #3283 #3061 #2975 #2879 Read
    documentation
  * New Build History API allows listening to events about builds starting
    and completing, and streaming progress of active builds. New commands
    `buildctl debug monitor`, `buildctl debug logs` and `buildctl debug get`
    have been added to use this API. Build records also keep OpenTelemetry
    traces, provenance attestations, and image manifests if they were
    created by the build. #3294 #3339 #3440
  * Build results exported with image, local or tar exporters now support
    attestations. In addition to builtin SBOM and Provenance attestations,
    frontends can produce custom attestations in in-toto format #3197 #3070
    [#3129] #3073 #3063 #2935 #3289 #3389 #3321 #3342 #3461 Read documentation
  * New Source type `oci-layout://` allows builds to import images from OCI
    directory structure on the client side. This allows using local versions
    of the image. #3112 #3300 #3122 #3034 #2971 #2827 #3397
  * Build requests now support sending a Source policy definition. A policy
    can be used to deny access to specific sources (e.g. images or URLs) or
    only allow access to specific image namespaces. Policies can also be
    used to modify sources when they are requested by the build, for
    example, pin a tag requested by the build to a specific digest even if
    it has already changed in the registry. #3332
  * New remote cache backend: Azure Blob Storage #3010
  * New remote cache backend: S3 #2824 #3065
  * BuildKit now supports Nydus compression type #2581
  * OCI exporter now supports attribute `tar=false` to export OCI layout
    into a directory instead of downloading a tarball. #3162
  * Setting multiple cache exporters for a single build is now supported
    [#3024] #3271
  * Cache exporters can now be configured to ignore exporting errors #3430
  * Remote cache import/export to client-side local files now supports tag
    parameter for scoping cache #3111
  * CNI network namespaces are now provisioned from a pool for increased
    performance #3107
  * New Info service has been added to control API for asking BuildKit
    daemon's version #2725
  * Gateway API now has a new `Evaluate` method to control the lazy solve
    behavior #3137
  * Allow mounting secrets with empty contents #3081
  * New RemoveMountStubsRecursive option has been added to LLB ExecOp to
    control the cleanup behavior of mounts. By default, empty mount stubs
    are now cleaned up recursively in new frontends. #3314
  * LLB Image source now allows pulling partial layer chains from image
  * Allow hostname to be set by network provider (K8S_POD_NAME) #3044
  * Improve handling and logging of API health checks #2998
  * RegistryToken auth from Docker config is now allowed as authentication
    input #2868
  * Image exporter with containerd worker now allows skipping adding image
    to containerd image store with `store=false`. If not set then images
    stored images are now guaranteed to be unlazied and unpacked. #2800
  * `buildctl` now loads Github runtime environment when using GHA remote
    cache #2707
  * Support for `conflist` when configuring CNI networking #3029
  * Platform info has been added to the build result descriptor metadata
  * Allow sourcemaps to link single LLB vertex to multiple source locations
  * Support for SSH connection helper #2843
  * Empty stub paths created by mount points when build container runs are
    now cleaned up and do not remain in the final image. #3307 #3149
  * Improve performance on BoltDB commits #3261
  * Indentation of some of the image manifests has been fixed to use double
    spaces #3259
  * Fix caching checksum error on copying files with custom UID/GID #3295
  * Fix cases where copy operation left behind nondeterministic timestamps
    for better support for reproducible builds #3298
  * Fix SSH forwarding incompatibility with OpenSSH &gt;= 8.9 #3274
  * Stargz has been updated to v0.13.0 #3280
  * Embedded QEMU emulators have been updated to v7.1.0 with new patches for
    path handling. #3386
  * Fix unpacking images with no layers #3251
  * Fix possible nil pointer exception in LLB bridge #3233 #3169 #3066
  * Fix cleanup of containerd tasks if a start fails #3253
  * Fix handling Windows paths in content checksums #3227
  * Fix possible missing newline in progress output #3072
  * Fix possible early EOF on SSH forwarding #3431
  * Fix possible panic in concurrent OpenTelemetry access #3058
  * Previously deprecated old cache options have been removed #2982
  * Daemonless script has been updated to handle already stopped process
    [#3005]
  * Fix closing session if shared by multiple clients #2995
  * `buildctl du` command now supports JSON formatting #2992
  * Registry push errors now show additional context #2981
  * Improve default description of FileOp vertexes #2932
  * Make sure progress from exporting is properly keyed on parallel requests
  * Terminal colors are now configurable #2954
  * Build errors now always print stacktraces to daemon logs in debug mode
- switch packaging to zstd
- include ldflags to set the version number in the binaries correctly</changelog>
  <changelog author="elimat@opensuse.org" date="1690977600">- Update to version 0.12.1:
  * executor: fix resource sampler goroutine leak
  * [v0.11] make tracing socket forward error non-fatal
  * integration: missing env var to check feature compat
  * test: update pinned busybox image to 1.36
  * test: update pinned alpine image to 3.18
  * vendor: github.com/docker/docker 8e51b8b59cb8 (master, v25.0.0-dev)
  * executor/resource: stub out NewSysSampler on Windows
  * vendor: github.com/docker/cli v24.0.4
  * testutil: move CheckContainerdVersion to a separate package
  * llbsolver: fix policy rule ordering
  * filesync: fix backward compatibility with encoding + and %
  * hack: allow to set GO_VERSION during tests
  * test: always disable tls for dockerd worker
  * buildctl: set max backoff delay to 1 second
  * contenthash: data race
  * filesync: escape special query characters
  * applier: add hack to support docker zstd layers
  * Fix various nits
  * pullprogress data race
  * use sampler lock instead
  * Fix ResolveImageConfig to evaluate source policy
  * sampler data race fix
  * update cgroup parent test to work with cgroupns
  * Revert "specify a `ResponseHeaderTimeout` value"
  * oci: make sure cgroupns is enabled if supported
  * bash lint fix
  * rename BUILDFLAGS to GOBUILDFLAGS
  * allow ENOTSUP for PSI cgroup files
  * containerimage: use platform matcher to detect platform to unpack
  * exporter: silently skip unpacking unknown reference
  * improve error handling in ReadFile
  * dockerfile: arg for controlling go build flags
  * dockerfile: arg to enable go race detection
  * Add support for health start interval
  * Re-vendor moby/moby
  * filesync: mark if options have been encoded to detect old versions
  * dockerfile: heredoc should use 0644 permissions
  * docs: update README to reference OpenTelemetry instead of OpenTracing
  * gateway: restore original filename in ReadFile error message
  * Dockerfile: update containerd to v1.7.2
  * Use system.ToSlash() instead of filepath.ToSlash()
  * Revert most changes to client/llb
  * Remove Architecture
  * Default to linux in client
  * Ensure we use proper path separators
  * Set default platform
  * Add nil pointer check in dispatchWorkdir
  * Remove nil pointer check and extra NormalizePath
  * Rename variable, remove superfluous check
  * Use current OS as a default
  * Handle file paths base on target platform
  * exporter: unlazy references in parallel
  * exporter: simplify unlazy references to reduce duplication
  * exporter: allow unpack on multi-platform images
  * tests: add unpack to scratch export test
  * overlay: set whiteout timestamps to 1970-01-01 (not to SOURCE_DATE_EPOCH)
  * dockerfile: graduate `ADD --checksum=&lt;checksum&gt;` from labs
  * dockerfile: graduate `ADD &lt;git ref&gt;` from labs
  * dockerfile: mod-outdated target to check modules updates
  * dockerfile: use xx in dnsname stage
  * dockerfile: install musl-dev to fix compilation issue
  * dockerfile: update Alpine to 3.18
  * vendor: update fsutil to 36ef4d8
  * export(local): split opt
  * buildctl: Provide --wait option
  * containerimage: support SOURCE_DATE_EPOCH for CreatedAt
  * move flightcontrol to use generics
  * containerimage: keep layer labels for exported images
  * shell: start shell from cmd, not entrypoint
  * sbom: propogate image-resolve-mode for generator image
  * client: add extra debug to tests
  * handle missing provenance for non-evaluated result
  * tests: add provenance test for duplicate platform
  * tests: add provenance test for when context directory does not exist
  * forward: make BridgeClient public for lint
  * gateway: enable named contexts for gateway frontend
  * vendor: update vt100 with resize panic fix
  * docs: dockerfile: remove "known issues" related to AuFS
  * docs: add running instruction to CONTRIBUTING.md
  * tests: add worker close method to interface
  * add and check for gateway.exec.secretenv cap
  * move Secretenv from Meta to InitMessage
  * support passing SecretEnv to gateway containers
  * Add comment, update from review
  * Fix issue with digest merge (inconsistent graph state)
  * docs: add helper commands section to CONTRIBUTING.md
  * docs: update CONTRIBUTING.md whitespace formatting
  * integration: fix not deleting dockerd workdir
  * remove uses of deprecated ResolverOptions.Client
  * filesync: fix handling non-ascii in file paths
  * tests: add test for unicode filenames
  * Adding more docs to client/llb
  * Add special case for rw bind mounts
  * vendor: github.com/docker/cli v24.0.2
  * vendor: github.com/docker/docker v24.0.2
  * progressui: fix index printing on partial rows
  * gateway: wrap ExecProcessServer Send calls with a mutex
  * resources: make maxsamples configurable
  * llbsolver: add systemusage samples to provenance attestation
  * resources: store sys cpu usage per step
  * resources: add sampler for periodic stat reads
  * resources: CNI network usage sampling support
  * resources: add build step resource tracking via cgroups
  * solver: lock before using actives
  * Emulate "bind" mounts using the bind filter
  * Fix mount layers on host
  * llbsolver: set temporary lease in Commit context
  * Update containerd dependency
  * exporter: Add exptypes with Common exporter keys
  * exporter/image/exptypes: Make strongly typed
  * solver: move AddBuildConfig into llbsolver package
  * tests: add test to check url format for image loaded from oci layout
  * solver: mark locally loaded images as such
  * solver: merge local and remote images into single list
  * purl: allow RefToPURL to take a type parameter
  * tests: don't use purl code to test itself
  * Use linux as a default for inputOS
  * Add path handling functions
  * response to comments
  * containerimage: Export option keys
  * vendor: update spdx/tools-golang to v0.5.1
  * exporter: remove non dist options from tar exporter
  * exporter: move fs opt parsing to method
  * tests: fixup attestation tar to not panic when file not found
  * git: set umask without reexec
  * add language property for sourcemap
  * dockerfile/docs: add set -ex to heredoc #3870
  * authprovider: fix a bug where registry-1.docker.io auth was always a cache miss
  * response to comments
  * tracing: fix buildx tracing delegation
  * Update continuity and fsutil
  * cache: add a few more fields to ref trace logs.
  * vendor: github.com/containerd/go-runc v1.1.0
  * provenance: fix possible empty digest access
  * vendor: fix broken vendoring
  * dockerfile: bump up nerdctl to v1.4.0
  * bump nydus-snapshotter dependence to v0.8.2
  * vendor: github.com/docker/cli v24.0.1
  * vendor: github.com/docker/docker v24.0.1
  * vendor: github.com/containerd/containerd v1.7.1
  * vendor: github.com/Microsoft/hcsshim v0.10.0-rc.8
  * vendor: github.com/Microsoft/go-winio v0.6.1
  * vendor: golang.org/x/sys v0.7.0
  * vendor: github.com/containerd/typeurl/v2 v2.1.1
  * chore: bump spdx tools
  * Fix typo in attestation-storage.md
  * vendor: github.com/docker/cli v24.0.0
  * vendor: github.com/docker/docker v24.0.0
  * vendor: github.com/opencontainers/runc v1.1.7
  * vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.2
  * vendor: github.com/klauspost/compress v1.16.3
  * Dockerfile: CONTAINERD_VERSION=v1.7.1
  * Dockerfile: CONTAINERD_ALT_VERSION_16=v1.6.21
  * Dockerfile: RUNC_VERSION=v1.1.7
  * session: avoid logging healthcheck error on canceled connection
  * session: fix run and close synchronization
  * testutil: update ReadImages to fallback to reading manifest
  * Add trace logs for cache leaks.
  * Add some doc strings for LLB functions
  * attestations: move containerd media type warnings
  * update generated proto files
  * attestations: replace intoto media type with vendored const
  * nydus: bump nydus versions in Dockerfile and doc
  * feedback changes for moby/buildkit #2251
  * testutil: expose underlying docker address for supported workers
  * testutil: expose integration workers as public
  * remove type aliases for leasemanager/contentstore
  * llbsolver: move history blobs to a separate namespace
  * build(deps): bump github.com/docker/distribution
  * added import/export support for OCI compatible image manifest version of cache manifest (opt-in on export, inferred on import) moby/buildkit #2251
  * llb: carry platform from inputs for merge/diff
  * llb: don't include platform in fileop
  * control: fix possible deadlock on network error
  * exporter/containerimage: remove redundant type for var declaration
  * Fix not to set the value on empty vertex
  * Fix to import as digest
  * cache: always release ref when getting size in usage.
  * Drop unneeded variable
  * ssh: add fallback to ensure conn is closed in all cases.
  * vendor: github.com/opencontainers/image-spec v1.1.0-rc3
  * vendor: github.com/docker/cli v23.0.5
  * vendor: github.com/docker/docker v23.0.5
  * nydus: update nydus-snapshotter dependency to v0.8.0
  * progressui: fix possible zero prefix numbers in logs
  * llbsolver: send active event only to current client
  * llbsolver: send delete status event
  * llbsolver: filter out records marked deleted from list responses
  * Add Windows service support
  * docs: fixup build repro doc with updated policy format
  * test: use appropriate snapshotter service to walk snapshots
  * overlay: use function to check for overlay-based mounts
  * Update uses of Image platform fields in OCI image-spec
  * allow setting user agent products
  * Bump up golangci-lint to v1.52.2
  * chore: tidy up duplicated imports
  * solver: Release unused refs in LoadWithParents
  * Avoid panic on parallel walking on DefinitionOp
  * solver: skip sbom post processor if result is nil
  * vendor: github.com/docker/docker v23.0.4
  * vendor: github.com/docker/cli v23.0.4
  * vendor: golang.org/x/time v0.3.0
  * vendor: github.com/docker/cli v23.0.2
  * vendor: github.com/docker/docker v23.0.2
  * test: don't hang if a process doesn't run
  * ci: put worker name first for better UX in actions
  * go.mod: remove github.com/kr/pretty
  * Revert "Problem: can't use anonymous S3 credentials"
  * go.mod: bump up runc to v1.1.6
  * go.mod: Bump up stargz-snapshotter to v0.14.3
  * dockerfile: bump up stargz-snapshotter to v0.14.3
  * dockerfile: bump up runc to v1.1.6
  * buildkitd: add grpc reflection
  * Bump up nerdctl to 1.3.0
  * Bump up containerd 1.6.20
  * Fix gzip decoding of HTTP sources.
  * ci: update runner os to ubuntu 22.04
  * Fix bearer token expiration check (fixes #3779)
  * docs: update buildkitd.toml with new field info
  * buildkitd: allow durations for gc config
  * buildkitd: allow multiple units for gc config
  * dockerui: expose context detection functions as public
  * Prevent overflow of runc exit code.
  * Upgrade to latest go-runc.
  * runc worker: fix sigkill handling
  * Dockerfile: RUNC_VERSION=v1.1.5
  * client: add client opts to enable system certificates
  * Make ClientOpts type safe
  * build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
  * fileop: create new fileOpSolver instance per Exec call
  * Provide CacheManager to Controller instead of CacheKeyManager.
  * http: ensure HEAD and GET requests have same headers
  * docs: add auto-generated sections to buildctl.md
  * client: allow grpc dial option passthrough
  * cni: simplify netns creation
  * add Bass to list of LLB languages
  * llbsolver: fix sorting of history records
  * llbsolver: Fix performance of recomputeDigests
  * solve: use comparables instead of reflection in result struct
  * vendor: github.com/docker/cli v23.0.1
  * vendor: github.com/docker/docker v23.0.1
  * client: create oci-layout file in StoreIndex
  * ci: output annotations for failures
  * test: set mod vendor
  * test: use gotestsum to generate reports
  * fix gateway exec tty cleanup on context.Canceled
  * fix process termination handling for runc exec
  * Register builds before recording build history
  * docs(dockerfile): minimal Dockerfile version support for chmod
  * Update builder.md to document newly supported --chmod features in both ADD and COPY statements.
  * use bklog.G(ctx) instead of logrus directly
  * integration: missing mergeDiff compat check
  * chore: `translateLegacySolveRequest` does not need to return error checking.
  * integration: split feature compat check for subtests
  * integration: missing feature compat check for cache
  * dockerfile: fix reproducible digest test for non-amd64
  * integration: add FeatureMergeDiff compat
  * integration: add FeatureCacheBackend* compat
  * integration: enforce features compat through env vars
  * ci: upstream docs conformance validation
  * dockerfile(docs): fix liquid syntax
  * Problem: can't use anonymous S3 credentials
  * hack: remove build_ci_first_pass script
  * hack: binaries and cross bake targets
  * go.mod: update to go 1.20
  * Dockerfile: CONTAINERD_VERSION=v1.7.0
  * go.mod: github.com/containerd/containerd v1.7.0
  * Add Namespace to list of buildkit users.
  * remove buildinfo
  * buildinfo: add BUILDKIT_BUILDINFO build arg
  * buildinfo: mark as deprecated
  * docs: deprecated features page
  * rootless: guide for Bottlerocket OS (`sysctl -w user.max_user_namespaces=N`)
  * rootless: fix up unprivileged mount opts
  * Dockerfile: CONTAINERD_VERSION=v1.7.0-rc.3, CONTAINERD_ALT_VERSION_16=v1.6.19
  * go.mod: github.com/containerd/containerd v1.7.0-rc.3
  * version: add "v" prefix to version for tagging convention consistency
  * remove context name validation from kubepod connhelper
  * gateway: add hostname option to NewContainer API
  * fix error message typo
  * provenance: ensure URLs are redacted before written
  * test/client: Close buildkit client
  * docs: missing security policy markdown file
  * diffapply: do chown before xattrs
  * Add test for merge of files with capabilities.
  * fix a possible panic on cache
  * Update cmd/buildkitd/main_windows.go
  * ci(validate): use bake
  * hack: shfmt bake target
  * hack: generated-files bake target
  * hack: doctoc bake target
  * hack: lint bake target
  * hack: authors Dockerfile and bake target
  * hack: bake definition with vendor targets
  * Fix buildkitd panic when frontend input is nil.
  * ci: trigger workflows on push to release branches
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * ci: create GitHub Release for frontend as well
  * ci: make release depends on image job
  * lint: fix issues with go 1.20
  * remove deprecated golangci-lint linters
  * update golangci-lint to v1.51.1
  * update to go 1.20
  * Allow DefinitionOp to track sources
  * specify a `ResponseHeaderTimeout` value
  * Ensures that the primary GID is also included in the additional GIDs
  * ci: fix missing TESTFLAGS env var in test-os workflow
  * Dockerfile: update containerd to v1.7.0-beta.4, v1.6.18
  * go.mod: github.com/containerd/containerd v1.7.0-beta.4
  * ci: update softprops/action-gh-release to v0.1.15
  * ci: remove unused vars in dockerd workflow
  * ci: split cross job
  * Dockerfile: remove binaries-linux-helper stage
  * ci: rename unclear env vars
  * readme: fix and update badges
  * ci: rename build workflow to buildkit
  * ci: reusable test workflow
  * ci: move test-os to a dedicated workflow
  * ci: move frontend integration tests and build to a dedicated workflow
  * stargz-snapshotter: graduate from experimental
  * Bump up stargz-snapshotter to v0.14.1
  * set osversion in index descriptor from base image
  * progress: solve status description
  * ci: update buildx to latest
  * Dockerfile: update xx to 1.2.1
  * integration: make sure registry directory exists
  * gha: avoid range requests with too big offset
  * ci: merge test-nydus job in test one
  * ci: remove branch restriction on pull request event
  * client: add tests for layerID in comment field
  * exporter: fix sbom supplement core detection
  * exporter: fix supplement sboms on empty scratch layer
  * exporter: fix file layer finder whiteout detection
  * exporter: canonicalize sbom file paths during search
  * Add platform tracing socket paths and mounts
  * integration: log dockerd cmd
  * integration: set custom flags for dockerd worker
  * remotecache: proper exporter naming for gha, s3 and azblob
  * remotecache: explicit names for registry and local
  * exporter: use compression.ParseAttributes func
  * remotecache: mutualize compression parsing attrs
  * lex: add support for optional colon in variable expansion
  * test: rework TestProcessWithMatches to use a matrix
  * dockerfile: update to use dockerui pkg
  * dockerui: separate docker frontend params to reusable package
  * cache: add fallback for snapshotID
  * exporter: remove wrappers for oci data types
  * vendor: github.com/docker/cli v23.0.0
  * vendor: github.com/docker/docker v23.0.0
  * hack: do not cache some stages on release
  * hack: do not set attest flags when exporting to docker
  * git: override the locale to ensure consistent output
  * fix support for empty git ref with subdir
  * gitutil: use subtests
  * source: more tests cases for git identifier
  * source: use subtests cases for git identifier
  * otel: bump dependencies to v1.11.2/v0.37.0
  * hack: treat unset variables as an error
  * frontend: fix typo in release script
  * ci: create matrix for building frontend image
  * inline cache: fix blob indexes by uncompressed digest
  * Skip configuring cache exporter if it is nil.
  * docs: update syntax for labs channel in examples
  * integration: remove wrong compat condition
  * integration: fix compat check for CNI DNS test
  * cache: don’t link blobonly based on chainid
  * do not mount secrets that are optional and missing from solve opts
  * SOURCE_DATE_EPOCH: drop timezone
  * sbom: create tmp directory for scanner image
  * progress: keep color enabled with NO_COLOR empty
  * hack: remove azblob_test
  * integration: basic azblob cache test
  * test: add proxy build args when existed
  * vendor: github.com/docker/cli v23.0.0-rc.3
  * vendor: github.com/docker/docker v23.0.0-rc.3
  * vendor: golang.org/x/net v0.5.0
  * vendor: golang.org/x/text v0.6.0
  * vendor: golang.org/x/sys v0.4.0
  * Dockerfile: CNI plugins v1.2.0
  * Dockerfile: CONTAINERD_VERSION=v1.7.0-beta.3, CONTAINERD_ALT_VERSION_16=v1.6.16
  * Fix tracing listener on Windows
  * go.mod: github.com/containerd/containerd v1.7.0-beta.3
  * control: send current timestamp header with event streams
  * vendor: update containerd to v1.6.16-0.1709cfe273d9
  * buildctl: add ref-file to get history record for a build
  * client: make sure ref is configurable for the history API
  * history: save completed steps with cache stats
  * history: fix exporter key not being passed
  * history: fix logs and traces are saving on canceled builds
  * hack: add correct entrypoint to shell script
  * ci: use moby/buildkit:latest in build action
  * dockerfile: add testReproSourceDateEpoch
  * Fix cache cannot reuse lazy layers
  * Correct manifests_prefix documentation for S3 cache
  * Use golang.org/x/sys/windows instead of syscall
  * dockerfile: release frontend for i386 platform
  * Add get-user-info utility
  * optimize --dry-run flag
  * fix(tracing): spelling of OTEL_TRACES_EXPORTER value
  * Propagate sshforward send side connection close
  * buildctl: add `buildctl debug histories, buildctl prune-histories`
  * dockerfile: fix panic on warnings with multi-platform
  * vendor: github.com/docker/cli v23.0.0-rc.2
  * vendor: github.com/docker/docker v23.0.0-rc.2
  * vendor: github.com/containerd/containerd v1.6.15
  * cache: add registry.insecure option to registry exporter
  * Make local cache non-lazy
  * docs/build-repro.md: add the SOURCE_DATE_EPOCH section
  * docs: clarified build argument example by changing the variable name
  * azblob cache: account_name attribute
  * docs: master -&gt; 0.11
  * ci: fix dockerd workflow with latest changes from moby
  * integration: set mirrors and entitlements with dockerd worker
  * github: update CI to buildkit version
  * exporter: ensure spdx order prioritizes primary sbom
  * hack: remove s3_test
  * integration: basic s3 cache test
  * integration: add runCmd and randomString utils
  * integration: expose backend logs in sandbox interface
  * azblob_test: pin busybox to avoid "Illegal instruction" error
  * docs: add nerdctl container buildkitd address docs
  * feat: add namespace support for nerdctl container
  * ci: add ci to check README toc
  * testutil: pin busybox and alpine used in releases
  * exporter: allow configuring inline attestations for image exporters
  * exporter: force enabling inline attestations for image export
  * docs: change semicolons to double ampersands
  * llbsolver: fix panic when requesting provenance on nil result
  * vendor: update fsutil to fb43384
  * attestation: only supplement file data for the core scan
  * docs: add index page for attestations
  * docs: move attestation docs to dedicated directory
  * docs: rename slsa.md to slsa-provenance.md
  * docs: tidy up json examples for slsa definitions
  * docs: add cross-linking between slsa pages
  * Flakiness in azblob test job
  * vendor: update spdx/tools-golang to d6f58551be3f
  * feat: add nerdctl-container support for client
  * docs: slsa review updates
  * docs: moved slsa definitions to a separate page
  * docs: slsa editorial fixes
  * docs: add filename to provenance attestation
  * docs: update hermetic field after it was moved in implementation
  * docs: update provenance docs
  * docs: add slsa provenance documentation
  * progress: fix clean context cancelling
  * fix: updated_at -&gt; updated-at
  * Solve panic due to concurrent access to ExportSpans
  * feat: allow ignoring remote cache-export error if failing
  * add cache stats to the build history API
  * vendor: github.com/docker/cli v23.0.0-rc.1
  * vendor: github.com/docker/docker v23.0.0-rc.1
  * vendor: github.com/containerd/containerd v1.6.14
  * frontend: fix testMultiStageImplicitFrom to account for busybox changes
  * sshforward: skip conn close on stream CloseSend.
  * chore: update buildkitd.toml docs with mirror path example
  * feat: handle mirror url with path
  * provenance: fix the order of the build steps
  * provenance: move hermetic field into a correct struct
  * add possibility to override filename for provenance
  * Fix typo in CapExecMountBindReadWriteNoOutput.
  * Use SkipOutput instead of -1 for output indexes to clarify semantics.
  * fix indentation for in-toto and traces
  * attestation: forbid provenance attestations from frontend
  * attestation: validate attestations before unbundling as well
  * exporter: make attestation validation public
  * result: change reason types to strings
  * attestations: ignore spdx parse errors
  * attestations: propogate metadata through unbundling
  * gateway: add addition check to prevent content func from being forwarded
  * ociindex: add utility method for getting a single manifest from the index
  * ociindex: refactor to hide implementation internally
  * cache: test gha cache exporter
  * containerdexecutor: add network namespace callback
  * frontend/dockerfile: BFlags.Parse(): use strings.Cut()
  * frontend/dockerfile: parseExtraHosts(): use strings.Cut()
  * frontend/dockerfile: parseMount() use strings.Cut(), and some minor cleanup
  * frontend/dockerfile: move check for cache-sharing
  * frontend/dockerfile: provide suggestions for mount share mode
  * frontend/dockerfile: define types for enums
  * frontend/dockerfile/shell: use strings.Equalfold
  * frontend/dockerfile/parser: remove redundant concat
  * frontend/dockerfile: parseBuildStageName(): pre-compile regex
  * frontend/dockerfile: remove isSSHMountsSupported, isSecretMountsSupported
  * docs: Enable rootless for stargz-snapshotter
  * executor/oci: GetResolvConf(): simplify handling of resolv.conf
- fix rpmlint errors
  * systemd units should not have execute permissions
  * add missing %service_add_pre for the systemd units</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1701691200">- Update to version 0.12.4:
  * Fix possible concurrent map access on remote cache export
  * Fix hang on debug server listener
  * Fix possible deadlock in History API under high number of parallel builds
  * Fix possible panic on handling deleted records in History API
  * Fix possible data corruption in zstd library
- Update to version 0.12.3:
  * Fix possible duplicate source files in provenance attestation for chained builds
  * Fix possible negative step time in progressbar for step shared with other build request
  * Fix properly closing history and cache DB on shutdown to avoid corruption
  * Fix incorrect error handling for invalid HTTP source URLs
  * Fix fallback cases for ambiguous insecure configuration provided for registry used as push target.
  * Fix possible data race with parallel image config resolves
  * Fix regression in v0.12 for clients waiting on buildkitd to become available
  * Fix Cgroup NS handling for hosts supporting only CgroupV1
- Update to version 0.12.2:
  * Fix possible discarded network error when exporting result to client
  * Avoid unnecessary memory allocations when writing build progress</changelog>
  <changelog author="dcermak@suse.com" date="1706788800">- Update to version 0.12.5:
  * update runc to v1.1.12
  * exec: add extra validation for submount sources (fixes CVE-2024-23651, bsc#1219267)
  * oci: fix error handling on submount calls
  * executor: recheck mount stub path within root after container run (fixes CVE-2024-23652, bsc#1219268)
  * llbsolver: make sure interactive container API validates entitlements (fixes CVE-2024-23653, bsc#1219438)
  * gateway: pass executor with build and not access worker directly
  * pb: add extra validation to protobuf types
  * sourcepolicy: add validations for nil values
  * exporter: add validation for platforms key value
  * exporter: add validation for invalid platorm
  * exporter: validate null config metadata from gateway
  * ci: disable push if not upstream repo
  * hack: use git context only for upstream repo
  * hack/test: allow ALPINE_VERSION to be set from env
  * hack: align syntax
  * vendor: github.com/cyphar/filepath-securejoin v0.2.4
  * tracing: allow the `Resource` to be set externally</changelog>
</package>
<package pkgid="b7d1663abe7fd3eb7d894785eab67581c7a913791eaf6dcbd68926f77ce90913500ee33bda2d7fb47bfa8b0cd31b41d35a8deb0103d9cb0cf0b89fb63c724851" name="bzip2-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="slfo.1.1_1.4"/>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534852800">- Replace the URL. The bzip.org owner changed [bsc#1104445].
- Remove the URL from the 'Source' line. The 1.0.6 version is not
  available.
- Run spec-cleaner.</changelog>
  <changelog author="kstreitova@suse.com" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561636800">- Update to version 1.0.7:
  * Fix undefined behavior in the macros SET_BH, CLEAR_BH, &amp;
    ISSET_BH.
  * bzip2: Fix return value when combining --test,-t and -q.
  * bzip2recover: Fix buffer overflow for large argv[0].
  * bzip2recover: Fix use after free issue with outFile
    (CVE-2016-3189).
  * Make sure nSelectors is not out of range (CVE-2019-12900
    bsc#1139083)
- Drop patches fixed upstream:
  * bzip2-unsafe_strcpy.patch.
  * bzip2-1.0.6-CVE-2016-3189.patch.
- Refresh patches with quilt.</changelog>
  <changelog author="mpluskal@suse.com" date="1561723200">- Update bug reference
- Fix downloaded patches</changelog>
  <changelog author="kstreitova@suse.com" date="1563796800">- Update to version 1.0.8:
  * Accept as many selectors as the file format allows.
    This relaxes the fix for CVE-2019-12900 from 1.0.7
    so that bzip2 allows decompression of bz2 files that
    use (too) many selectors again.
  * Fix handling of large (&gt; 4GB) files on Windows.
  * Cleanup of bzdiff and bzgrep scripts so they don't use
    any bash extensions and handle multiple archives correctly.
- remove (applied upstream)
  * bzip2-1.0.6-fix-bashisms.patch
  * bzip2-1.0.6-bzgrep_return_value.patch
- use a new Source url</changelog>
  <changelog author="suse+build@de-korte.org" date="1572436800">- Use correct version in autotools patchset
  M bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static)
- Use %autosetup (rediff bzip2-1.0.6.2-autoconfiscated.patch to p1)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Port rpmlintrc format to rpmlint 2.x.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
</package>
<package pkgid="04d8a6803fe681243f1e2ef71b4d49d90261b13dc4821803f59327bd3367377021cb8bf78fd7e460f11d0eb7ef47fdab35c444b7eb23b2e1520b4b539312854c" name="c-ares-debugsource" arch="aarch64">
  <version epoch="0" ver="1.27.0" rel="slfo.1.1_1.2"/>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
  <changelog author="adam.majer@suse.de" date="1696939200">- Update to version 1.20.1
  * Remove bin/acountry from built tools as nerd.dk is gone
  * Default per-query timeout has been reduced to 2s with a 3x retry count
  * rand: add support for getrandom()
  Bug fixes:
  * TCP back to back queries were broken
  * Ensure queries for ares_getaddrinfo() are not requeued during
    destruction
  * ares_getaddrinfo() should not retry other address classes if
    one address class has already been returned
  * Avoid production ill-formed result when qualifying a name
    with the root domain
  * Fix missing prefix for CMake generated libcares.pc
  * DNS server ports can now be read from system configuration
    instead of defaulting to port 53, aka openBSD resolv.conf format
  * Replace usages of sprintf with snprintf</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1698494400">- update to 1.21.0:
  * Replace multiple DNS hand-made parsers with new memory-safe DNS
    message parser
  * developer visible changes and bug fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1701432000">- Update to version 1.23
  Features:
    Introduce optional (but on by default) thread-safety for the c-ares library. This has no API nor ABI implications.
    resolv.conf in modern systems uses attempts and timeouts options instead of the old retrans and retry options.
    Query caching support based on TTL of responses. Can be enabled via ares_init_options() with ARES_OPT_QUERY_CACHE.
  Bugfixes:
    ares_init_options() for ARES_OPT_UDP_PORT and ARES_OPT_TCP_PORT accept theport in host byte order, but it was reading it as network byte order. Regression introduced in 1.20.0.
    ares_init_options() for ARES_FLAG_NOSEARCH was not being honored forares_getaddrinfo() or ares_gethostbyname(). Regression introduced in 1.16.0.
    Autotools MacOS and iOS version check was failing
    Environment variables passed to c-ares are meant to be an override for system configuration. Regression introduced in 1.22.0.
    Spelling fixes as detected by codespell.
    The timeout returned by ares_timeout() was truncated to milliseconds butvalidated to microseconds which could cause a user to attempt to process timeouts prior to the timeout actually expiring.
    CMake was not honoring CXXFLAGS passed in via the environment which couldcause compile and link errors with distribution hardening flags during packaging.
    Fix Windows UWP and Cygwin compilation.
    ares_set_servers_*() for legacy reasons needs to accept an empty server listand zero out all servers. This results in an inoperable channel and thus is only used in simulation testing, but we don't want to break users. Regression introduced in 1.21.0.
  Changes in version 1.22.1
  Bugfixes:
    Fix /etc/hosts processing performance with all entries using same IPaddress. Large hosts files using the same IP address for all entries could use exponential time.
    Fix typos in manpages
    Fix OpenWatcom building
  Changes in version 1.22.0
  Features:
    ares_reinit() is now implemented to re-read any system configuration and immediately apply to an existing ares channel
    The adig command line program has been rewritten and its format now more closely matches that of BIND's dig utility
    The new DNS message parser and writer functions have now been made public
    RFC9460 HTTPS and SVCB records are now supported
    RFC6698 TLSA records are now supported
    The server list is now internally dynamic and can be changed without impacting existing queries
    Hosts file processing is now cached until the file is detected to be changed to speed up repetitive lookups of large hosts files
  Changes:
    Internally all DNS messages are now written using the new DNS writing functions
    EDNS is now enabled by default
    Internal cleanups in function prototypes
  Bugfixes:
    Randomize retry penalties to prevent thundering herd issues when dns servers throttle requests
    Fix Windows build error for missing if_indextoname()</changelog>
  <changelog author="adam.majer@suse.de" date="1704196800">- Update to version 1.24
  Features:
  * Add support for IPv6 link-local DNS servers. Nameserver formats
    can now accept the 0face suffix, and a new ares_get_servers_csv()
    function was added to return servers that can contain the link-local
    interface name.
  Changes:
  * Unbundle GoogleTest for test cases. Package maintainers will now
    need torequire GoogleTest (GMock) as a build dependency if
    building tests. New GoogleTest versions require C++14 or later.
  * Replace nameserver parsing code to use new memory-safe functions.
  * Replace the sortlist parser with new memory-safe functions.
  * Various warning fixes and dead code removal.
  Bugfixes:
  * Old Linux versions require POSIX_C_SOURCE or _GNU_SOURCE to
  compile with thread safety support
  * A non-responsive DNS server that caused timeouts wouldn't
  increment thefailure count, this would lead to other servers
  not being tried. Regression introduced in 1.22.0
  * Some projects that depend on c-ares expect invalid parameter
  option valuespassed into ares_init_options() to simply be
  ignored. This behavior has been restored
  * getrandom() can fail if the kernel doesn't support
  the syscall, fall back to another random source
  * ares_cancel() when performing ares_gethostbyname() or
  ares_getaddrinfo()with AF_UNSPEC, if called after one address
  class was returned but before the other address class, it
  would return ARES_SUCCESS rather than ARES_ECANCELLED
- disable-live-tests.patch: dropped, not needed</changelog>
  <changelog author="adam.majer@suse.de" date="1704715200">- Update to version 1.25
  Changes:
  o Rewrite ares_strsplit() as a wrapper for ares__buf_split() for memory
  safety reasons.
  o The ahost utility now uses ares_getaddrinfo() and returns both IPv4 and
  IPv6 addresses by default.
  Bug Fixes:
  o Tests: Live reverse lookups for Google's public DNS servers no longer
  return results, replace with CloudFlare pubic DNS servers.
  o Connection failures should increment the server failure count first or a
  retry might be enqueued to the same server
  o On systems that don't implement the ability to enumerate network interfaces
  the stubs used the wrong prototype.
  o Fix minor warnings and documentation typos
  o Fix support for older GoogleTest versions
  o getrandom() may require sys/random.h on some systems.
  o Fix building tests with symbol hiding enabled.
- 0001-Use-RPM-compiler-options.patch: dropped, obsolete</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1706961600">- c-ares 1.26.0:
  * Event Thread support. Integrators are no longer required to
    monitor the file descriptors registered by c-ares for events
    and call ares_process() when enabling the event thread feature
    via ARES_OPT_EVENT_THREAD passed to ares_init_options().
  * Added flags to are_dns_parse() to force RAW packet parsing
  * Mark ares_fds() as deprecated
  * Bug fixes
- move tests into a build flavor to avoid gtest/gmock build loop</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480000">- Ensure multibuild flavors result in different src names.</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- c-ares 1.27.0
  Security:
  * Moderate. CVE-2024-25629. Reading malformatted /etc/resolv.conf,
    /etc/nsswitch.conf or the HOSTALIASES file could result in a crash.
    GHSA-mg26-v6qh-x48q (CVE-2024-25629, bsc#1220279)
  Features:
  * New function ares_queue_active_queries() to retrieve number of in-flight
    queries. PR #712
  * New function ares_queue_wait_empty() to wait for the number of in-flight
    queries to reach zero. PR #710
  * New ARES_FLAG_NO_DEFLT_SVR for ares_init_options() to return a failure if
    no DNS servers can be found rather than attempting to use 127.0.0.1. This
    also introduces a new ares status code of ARES_ENOSERVER. PR #713
  Changes:
  * EDNS Packet size should be 1232 as per DNS Flag Day. PR #705
  Bugfixes:
  * Fix warning due to ignoring return code of write(). PR #709
  * CMake: don't override target output locations if not top-level. Issue #708
  * Fix building c-ares without thread support. PR #700</changelog>
</package>
<package pkgid="e1ab6b64b523593ece5a680bb89b51f17b17c34be3b85e2860761dab0f153392ce16eb7b8055ba670e42f851c74606acaea45714e8e4d911b87f409f476f3311" name="cairo-debugsource" arch="aarch64">
  <version epoch="0" ver="1.17.8" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
</package>
<package pkgid="47ba0d09a30bb2c60eb8e9e7abc663077446bf29fa7f1630f7d357cd19ff9e1aa26990f8e4b7ccd45d3dcd8c27bcc09b0ac5896983f83d3671602546402c8fa9" name="canutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="2023.03" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1535198400">- Rename canutils-linuxcan to canutils</changelog>
  <changelog author="jengelh@inai.de" date="1566820800">- Add 0001-fix-include-to-find-SIOCGSTAMP-with-latest-kernel.patch
  to unbreak build with modern linux-glibc-devel.</changelog>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1598270400">- Update to version v2020.04.02
  * jcat: provide errqueue support
  * jcat: add repeat support
  * Add uds output functionality
  * cangw: add new command line option -X to handle CAN FD rules
  * cangw: add CAN FD support
- Drop 0001-fix-include-to-find-SIOCGSTAMP-with-latest-kernel.patch</changelog>
  <changelog author="jengelh@inai.de" date="1598961600">- Update to version 2020.04.02.g119 (ea844bdc5e)
  * Rename jcat et al to j1939cat
  * j1939cat: add broadcast support</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to snapshot 2020.04.02.g192 (4573e852f9)
  * isotpsend: add support for blocking write flag
  * add cansequence tool</changelog>
  <changelog author="jengelh@inai.de" date="1605614400">- Update to release 2020.11.0
  * No further changes to prior snapshot, just version bump.</changelog>
  <changelog author="jengelh@inai.de" date="1606737600">- Add "can-utils" provides, add documentation.</changelog>
  <changelog author="jengelh@inai.de" date="1609243200">- Update to release 2020.12.0
  * candump: Enable zero relative timestamps to be used in
    log files.
  * "-tz" and "-ta" are now valid options for the logfile format.</changelog>
  <changelog author="jengelh@inai.de" date="1629374400">- Update to release 2021.08.0
  * Support for new kernel features:
  * Add len8_dlc support for Classical CAN frames (Linux v5.11+)
  * Add ISOTP SF_BROADCAST support (Linux v5.11+)</changelog>
  <changelog author="jengelh@inai.de" date="1678881600">- Update to release 2023.03
  * cangen: add support for SO_TXTIME
  * canfdtest: Add extended frame format / message length / FD /
    BRS support
  * can-calc-bit-timing: add support for calculation of CAN-FD
    bit timings
  * cangen: new generation mode - partially randomized payload
    (-D)
  * cansniffer: add CAN FD support</changelog>
</package>
<package pkgid="8433272948c4fac0c775d19e48ade19137bd3546243d66dc17fbe45e97bd07f3c1efc5d9f71e4befd77243ed4b9a54e1e50a2cd1a3b9d78d63c1e5544a69c4ae" name="canutils-debugsource" arch="aarch64">
  <version epoch="0" ver="2023.03" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1535198400">- Rename canutils-linuxcan to canutils</changelog>
  <changelog author="jengelh@inai.de" date="1566820800">- Add 0001-fix-include-to-find-SIOCGSTAMP-with-latest-kernel.patch
  to unbreak build with modern linux-glibc-devel.</changelog>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1598270400">- Update to version v2020.04.02
  * jcat: provide errqueue support
  * jcat: add repeat support
  * Add uds output functionality
  * cangw: add new command line option -X to handle CAN FD rules
  * cangw: add CAN FD support
- Drop 0001-fix-include-to-find-SIOCGSTAMP-with-latest-kernel.patch</changelog>
  <changelog author="jengelh@inai.de" date="1598961600">- Update to version 2020.04.02.g119 (ea844bdc5e)
  * Rename jcat et al to j1939cat
  * j1939cat: add broadcast support</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to snapshot 2020.04.02.g192 (4573e852f9)
  * isotpsend: add support for blocking write flag
  * add cansequence tool</changelog>
  <changelog author="jengelh@inai.de" date="1605614400">- Update to release 2020.11.0
  * No further changes to prior snapshot, just version bump.</changelog>
  <changelog author="jengelh@inai.de" date="1606737600">- Add "can-utils" provides, add documentation.</changelog>
  <changelog author="jengelh@inai.de" date="1609243200">- Update to release 2020.12.0
  * candump: Enable zero relative timestamps to be used in
    log files.
  * "-tz" and "-ta" are now valid options for the logfile format.</changelog>
  <changelog author="jengelh@inai.de" date="1629374400">- Update to release 2021.08.0
  * Support for new kernel features:
  * Add len8_dlc support for Classical CAN frames (Linux v5.11+)
  * Add ISOTP SF_BROADCAST support (Linux v5.11+)</changelog>
  <changelog author="jengelh@inai.de" date="1678881600">- Update to release 2023.03
  * cangen: add support for SO_TXTIME
  * canfdtest: Add extended frame format / message length / FD /
    BRS support
  * can-calc-bit-timing: add support for calculation of CAN-FD
    bit timings
  * cangen: new generation mode - partially randomized payload
    (-D)
  * cansniffer: add CAN FD support</changelog>
</package>
<package pkgid="9b93c5064fbbd49a8f09628a7a7d502eefae18a96bd55c40fc0810fd7eb8a53a476f2292844461712562db237a8181e43bf8a04c75b1f2ad6e4f672b22b9ac79" name="capstone-debugsource" arch="aarch64">
  <version epoch="0" ver="4.0.2" rel="slfo.1.1_2.1"/>
  <changelog author="mardnh@gmx.de" date="1514462400">- Specfile cleanup</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1518436800">- Correct the license tag, Capstone is BSD-3-Clause
- Provide python3 bindings
- Rename bindings subpackage to docs, it does not contain any
  bindings but documentation
- Package some more documentation
- Build with %{optflags}</changelog>
  <changelog author="afaerber@suse.de" date="1523793600">- Update to 3.0.5-rc2
  * Package cstool
- Adopt %license</changelog>
  <changelog author="brogers@suse.com" date="1534334400">- Update to 3.0.5
  * build static library (but still don't install), since build
  explicitly links cstool against it</changelog>
  <changelog author="aloisio@gmx.com" date="1586433600">- Update to version 4.0.1
  [ Core ]
  * Fix some issues for packaging (Debian, Gentoo).
  * Better support for building with Mingw.
  * cstool has new option -s to turn on skipdata mode.
  * cstool -v now report build settings of the core.
  * Add suite/capstone_get_setup.c so users can integrate with
    their own code
  * to retrieve Capstone settings at build time.
  [ Arm ]
  * Fix 4.0 regression: the tbh [r0, r1, lsl #1] instruction
    sets the operand.shift.value back again.
  * Remove ARM_REG_PC group for BX instruction.
  [ X86 ]
  * Fix: endbr32 and endbr64 instructions are now properly
    decoded in both CS_MODE_32 and CS_MODE_64.
  [ M680X ]
  * Fix some issues reported by clang-analyzer.
  [ Python ]
  * Fix skipdata setup.
  * Add getter/setter for skipdata_mnem, skipdata_callback.
  version 4.0:
  [ Core ]
  * New APIs: cs_regs_access()
  * Add new options for cs_option(): CS_OPT_MNEMONIC &amp;
    CS_OPT_UNSIGNED &amp; CS_OPT_SYNTAX_MASM.
  * Various updates &amp; bugfixes for all architectures.
  * Add 4 new architectures: EVM, M68K, M680X &amp; TMS320C64x.
  * Add new group types: CS_GRP_PRIVILEGE &amp;
    CS_GRP_BRANCH_RELATIVE.
  * Add new error types: CS_ERR_X86_MASM.
  [ X86 ]
  * Add XOP code condition type in x86_xop_cc.
  * Add some info on encoding to cs_x86 in cs_x86_encoding.
  * Add register flags update in cs_x86.{eflags, fpu_flags}
  * Change cs_x86.disp type from int32_t to int64_t.
  * Add new groups: X86_GRP_VM &amp; X86_GRP_FPU.
  * Lots of new instructions (AVX)
  [ ARM64 ]
  * Add instruction ARM64_INS_NEGS &amp; ARM64_INS_NGCS.
  [ Mips ]
  * Add mode CS_MODE_MIPS2.
  [ PPC ]
  * Change cs_ppc_op.imm type from int32_t to int64_t.
  * Add new groups: PPC_GRP_ICBT, PPC_GRP_P8ALTIVEC,
    PPC_GRP_P8VECTOR &amp; PPC_GRP_QPX.
  * Lots of new instructions (QPX among them)
  [ Sparc ]
  * Change cs_sparc_op.imm type from int32_t to int64_t.
  [ Binding ]
  * New bindings: PowerShell &amp; VB6
- Bumped sover to 4
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1590408000">- Rename -docs subpackage to -doc to follow openSUSE practices.
- Descriptions: say what the package is, not what it wants to be.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 4.0.2
  Windows kernel-mode driver support
  - Add armv8, ppc32 &amp; thumbv8 modes
  - Print instruction ID
  - Support CS_OPT_UNSIGNED for ATT syntax
  - Fix operand size for some instructions
  - Fix LOCK prefixes
  - Recognize xacquire/xrelease prefix
  - Fix call/jmp access mode of mem operand
  - Add ENDBR32, ENDBR64 to reduce mode
  - Other minor fixes
  - Support CS_OPT_UNSIGNED
  - Fix register access flags for memory instructions
  - Fix UMOV vess
  - Update writeback for STR_POST_REG
  - Store correct register value in op.reg_pair
  - BDZLA is absolute branch
  - Fix truncated 64bit imm operand
  - Fix base/index printing
  - Fix skipdata struct being destroyed
  - Add __repr__ for capstone.CsInsn
  - Fix Java bindings to use pointers instead of longs
  - Fix x86_op record</changelog>
  <changelog author="mwilck@suse.com" date="1672747200">- Enable static library, and add libcapstone-devel-static subpackage
  (this is helpful for qemu-linux-user)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766145600">- Fix bsc#1255310 (CVE-2025-68114)
  Patch added:
  * fix-buffer-overflow-2c7797.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1766491200">- fix bsc#1255309 (CVE-2025-67873)
  Patch added:
  * fix-unchecked-lenght-cbef76.patch</changelog>
</package>
<package pkgid="b09c9b71c04805eba256acd260b4e2dca797123c96d1b6ec3a2b0ff05deade631146df9de23ddc977a271b21688b994dedfc29f6eafbaaa6ec7aaa6dce4bd815" name="catatonit-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="slfo.1.1_1.3"/>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="3b0be92d0d0f1def14fde76e8d61b751a23cd7eb190325ab0cab79e375ec3b14b29bc140d87482e7678a68fbe6a51842adec85b90d781ca08301313f8ffa741e" name="catatonit-debugsource" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="slfo.1.1_1.3"/>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="f5bbab163b0532646810cf99f5d0bbed57532645c2c610f55efae6b029127dbf2db35b6b1bc457e3b9cb1e28408c503f49baf85e1f6fdbcb713808d2e2b0e423" name="cdparanoia-debugsource" arch="aarch64">
  <version epoch="0" ver="3.10.2" rel="slfo.1.1_1.2"/>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fixes: use %configure macro, set bindir and include
  dir explicitly when installing</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1342353600">- own directories for japanese man pages, no need to buildrequire man
  for that</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1369137600">- add config-guess-sub-update.diff:
  * configure.guess/sub update for aarch64 support</changelog>
  <changelog author="tchvatal@suse.com" date="1382616000">- Redo the buildsystem to use only shared libs and allow parallel
  building to have it faster in obs.
  * removed patches:
  - cdparanoia-III-dt_needed.patch
  - cdparanoia-large-pic.diff
  * added patches:
  - 010_build_system.patch
  - 050_all_build_only_shared_libraries.patch</changelog>
  <changelog author="schwab@suse.de" date="1523966400">- config-guess-sub-update.diff: update for RISC-V support</changelog>
  <changelog author="adam.majer@suse.de" date="1524052800">- Adjust licenses to be installed with %license not %doc
- libraries are covered by LGPL-2.1-or-greater and the command-line
  tool is GPL-2.0-or-greater</changelog>
  <changelog author="tchvatal@suse.com" date="1524052801">- Do not bother to talk about it being beta release as we
  are shipping this since 2008</changelog>
  <changelog author="jengelh@inai.de" date="1524052802">- Update descriptions.</changelog>
</package>
<package pkgid="23bf1605725edc356f6381a8dc5202aed9178b31a1b7a52e9ea3de170cec7d203610674dc562a83f28765e70275d6565c50bfdc39a1b0cef473925eb64f51293" name="ceph-debugsource" arch="aarch64">
  <version epoch="0" ver="16.2.14.66+g7aa6ce9419f" rel="slfo.1.1_1.6"/>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
  <changelog author="ana.guerrero@suse.com" date="1692187200">- restrict to older Cython</changelog>
  <changelog author="tserong@suse.com" date="1694433600">- Update to 16.2.14-66-g7aa6ce9419f:
  + (bsc#1207765) rgw/rados: check_quota() uses real bucket owner
  + (bsc#1212559) pacific: os/bluestore: cumulative bluefs backport
    This notably includes:
  * os/bluestore: BlueFS fine grain locking
  * os/bluestore/bluefs: Fix improper vselector tracking in _flush_special()
  * os/bluestore: enable 4K allocation unit for BlueFS
  * os/bluestore/bluefs: Fix sync compactionA
  + (bsc#1213217) ceph.spec.in: Require fmt-devel &lt; 10
  + ceph.spec.in: enable build on riscv64 for openSUSE Factory
  + ceph.spec.in: Require Cython &gt;= 0.29 but &lt; 3
  + cephadm: update to the latest container images:
  * registry.suse.com/ses/7.1/ceph/prometheus-server:2.37.6
  * registry.suse.com/ses/7.1/ceph/prometheus-node-exporter:1.5.0
  * registry.suse.com/ses/7.1/ceph/grafana:8.5.22
  * registry.suse.com/ses/7.1/ceph/haproxy:2.0.31
- Drop ceph-test.changes (no longer necessary since using _multibuild)</changelog>
  <changelog author="dimstar@opensuse.org" date="1702987200">- Add ceph-cmake-3.28.patch: Fix build with cmake 3.28 and no git
  command found (https://github.com/ceph/ceph/pull/54963,
  boo#1218111).</changelog>
</package>
<package pkgid="ed5a255f5a2ccd21ff814c590291e2efe21e5f1cf1559cfdd6be5196622abe7e8c58d10cc72f8fa13879ded1f79f67a6fe36a12c7217c8a3aa6255421dc9be7c" name="checkpolicy-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="jsegitz@suse.com" date="1541592000">- Source URL was invalid (bsc#1115052)</changelog>
  <changelog author="jengelh@inai.de" date="1541937600">- Enable parallel build. Remove ineffective LDFLAGS="$RPM_LD_FLAGS"
  (RPM_LD_FLAGS is always empty).</changelog>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Add option to sort contexts when creating a binary policy
  * Update manpage
  * check the result value of hashtable_search
  * destroy the class datum if it fails to initialize
  * remove extraneous policy build noise</changelog>
  <changelog author="jsegitz@suse.de" date="1579089600">- Add extern_te_assert_t.patch to mark te_assert_t as extern.
  Prevents build failures on gcc10 (bsc#1160259)</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * add flag to enable policy optimization
  * allow to write policy to stdout
  * remove a redundant if-condition</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * checkpolicy treats invalid characters as an error - might break rare use
    cases (intentionally)
  * Drop extern_te_assert_t.patch, is upstream</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * Fix a memleak and an integer overflow</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * When reading a binary policy by checkpolicy, do not automatically change the version
    to the max policy version supported by libsepol or, if specified, the value given
    using the "-c" flag.
  * Updated documentation
  * Prints the reason why opening a source policy file failed</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * warn on bogus IP address or netmask in nodecon statement
  * allow wildcard permissions in constraints
  * mention class name on invalid permission</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * error out if required permission would exceed limit
  * Improve error message for type bounds
- Added additional developer key (Jason Zaman)</changelog>
</package>
<package pkgid="f84040c099f034537b25de314897a7ddf4ebea88cd1d5c94598a914e824bc1a4e9725e5be2d2221bf10e28bc777dcedafb5002f7d2d27efa59dc34620b962401" name="checkpolicy-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="jsegitz@suse.com" date="1541592000">- Source URL was invalid (bsc#1115052)</changelog>
  <changelog author="jengelh@inai.de" date="1541937600">- Enable parallel build. Remove ineffective LDFLAGS="$RPM_LD_FLAGS"
  (RPM_LD_FLAGS is always empty).</changelog>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Add option to sort contexts when creating a binary policy
  * Update manpage
  * check the result value of hashtable_search
  * destroy the class datum if it fails to initialize
  * remove extraneous policy build noise</changelog>
  <changelog author="jsegitz@suse.de" date="1579089600">- Add extern_te_assert_t.patch to mark te_assert_t as extern.
  Prevents build failures on gcc10 (bsc#1160259)</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * add flag to enable policy optimization
  * allow to write policy to stdout
  * remove a redundant if-condition</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * checkpolicy treats invalid characters as an error - might break rare use
    cases (intentionally)
  * Drop extern_te_assert_t.patch, is upstream</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * Fix a memleak and an integer overflow</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * When reading a binary policy by checkpolicy, do not automatically change the version
    to the max policy version supported by libsepol or, if specified, the value given
    using the "-c" flag.
  * Updated documentation
  * Prints the reason why opening a source policy file failed</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * warn on bogus IP address or netmask in nodecon statement
  * allow wildcard permissions in constraints
  * mention class name on invalid permission</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * error out if required permission would exceed limit
  * Improve error message for type bounds
- Added additional developer key (Jason Zaman)</changelog>
</package>
<package pkgid="fdc40b8c58e987b420a18c78cc01b8c6c4ff8fe50948c548a9527d0ab346d3666c27198766fa2f8310fdfcfec61c86b6ae1b8467c299fe673de149ce00bcfee8" name="chkstat-debuginfo" arch="aarch64">
  <version epoch="0" ver="1600_20240206" rel="slfo.1.1_1.5"/>
  <changelog author="dmueller@suse.com" date="1663761600">- skip tests on qemu user builds</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1671537600">- Update to version 20221220:
  * profiles: remove outdated kdesud, apptainer entries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1676635200">- Update to version 20230217:
  * shadow: newgidmap,newuidmap: use capabilities (bsc#1208309)
  * profiles: whitelist kismet capabilities (bsc#1200954) (#171)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1682337600">- Update to version 20230424:
  * profiles: remove dead opiepasswd entry
    (opie was removed via OBS sr#1065964).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1684238400">- Update to version 20230516:
  * common permissions: add icingaweb2 setgid directory (bsc#1211314)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1685707200">- Update to version 20230602:
  * profiles: remove dropped pppoe-wrapper</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701086400">- Remove dependency on /usr/bin/python3, making scripts to depends on
  the real python3 binary, not the link. bsc#1212476</changelog>
  <changelog author="dimstar@opensuse.org" date="1706616000">- Create directory /usr/share/permissions/permissions.d for packages
  to place their drop-ins.</changelog>
  <changelog author="paolo.perego@suse.com" date="1707220800">- Update to version 20240206:
  * Whitelisting libgtop_server2 (bsc#1218921)
  * Removing bogus whitespaces
  * chkstat: harmonize and transform to a more compact coding and doc style
  * gitignore: also ignore hidden ctags
  * build: Create /usr/share/permissions/permissions.d for packagers
  * profiles: drop /usr/sbin/lockdev which is no longer packaged in Factory
  * profiles: drop /etc/ftpusers which is no longer shipped in netcfg</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1707220801">- Drop superfluous mkdir /usr/share/permissions/permissions.d
  This is now created by the Makefile. See also
  commit 5900bc1ffe6275298ded3c96dee03a5c98e4db1c</changelog>
</package>
<package pkgid="0028fa1a0403303ce433aeeb34bb63533678d6bcdd4a81658f89a33481562154e93d8f28354fe59f39032225e1586652a105303289e92c343a0c6b44de4bda71" name="chrony-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.8" rel="slfo.1.1_1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="max@suse.com" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="max@suse.com" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="max@suse.com" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
</package>
<package pkgid="01a7dbdeccd96a362a15b4ca06248108fa3e385de48063506717fdd8fb4a9a02bb4d6ed73078d74ad092234dcf0986da871a7cd94faa17a7b705fe5fc97d9463" name="chrony-debugsource" arch="aarch64">
  <version epoch="0" ver="4.8" rel="slfo.1.1_1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="max@suse.com" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="max@suse.com" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="max@suse.com" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
</package>
<package pkgid="10a1b0b4eb4830b50ffbd7fb127bc9c99a2bd4269e14e436aedaf22caf91fa93a42266dd8c8bc1adebf088088d846439bf0b8a028734f153c8806fb9875870e6" name="cifs-utils-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.0" rel="slfo.1.1_2.1"/>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="lnussel@suse.com" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts (bsc#1235788);</changelog>
</package>
<package pkgid="1ea96734e9c0ffca33ac03c329f392e71d45cf397d891f123b65d4386d25ebc268f9569e06449da83e31df76bf2432ae807374a2dde9712226d3b83958f7e317" name="cifs-utils-debugsource" arch="aarch64">
  <version epoch="0" ver="7.0" rel="slfo.1.1_2.1"/>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="lnussel@suse.com" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts (bsc#1235788);</changelog>
</package>
<package pkgid="ce721880bc67d28ddcad3734fb92ca89652959344244886c0f2ec3ed2d80bdd1b7465b7c93bc32a68b3a8f9adf32e0d5823aec3569c45099f82daa1024fa4c29" name="cni-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.2" rel="slfo.1.1_1.2"/>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 0.8.0:
  * Specification and Conventions changes
    + docs: add ips and mac to well-known capabilities
    + add interface name validation
    + Add GUID to well known Capabilities
    + Add DeviceID attribute to RuntimeConfig
    + Typo fixes for infiniband GUID
    + Fix linting issues in docs, add headers to json example, update errors into table
  * Documentation changes
    + Update cnitool docs
    + Remove extra ',' chars which makes conflist examples invalid.
  * libcni changes
    + Remove Result.String method
    + libcni: add config caching [v2]
    + clean up : fix staticcheck warnings
    + libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir
    + skel: clean up errors in skel and add some well-known error codes
    + libcni: find plugin in exec
    + validate containerID and networkName
    + skel: remove needless functions and types
    + libcni: also cache IfName
    + libcni: fix cache file 'result' key name
    + Bump Go version to 1.13
    + When CNI version isn't supplied in config, use default.
    + intercept netplugin std error
    + invoke: capture and return stderr if plugin exits unexpectedly
    + Retry exec commands on text file busy</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615896000">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream release with go.mod
  * Drop BuildRequires: golang-packaging not currently using macros
  * Add BuildRequires: golang(API) &gt;= 1.13 recommended dependency expression</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- use buildmode=pie (cnitool is installed into sbindir)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1622462400">- Update to version 0.8.1:
  * This is a security release that fixes a single bug: bsc#1181961 aka CVE-2021-20206
  - Tighten up plugin-finding logic (#811).</changelog>
  <changelog author="idesmi@protonmail.com" date="1648296000">- Update to version v1.0.1:
  * Rewritten spec
    + non-List configurations are removed
    + the version field in the interfaces array was redundant and
    is removed
  * libcni improvements
- Employ RPM macros.go where feasible
- Use vendor tarball
- Remove ./build.sh</changelog>
  <changelog author="andrea.manzini@suse.com" date="1668081600">- Update to version 1.1.2:
  * spec: fix format
  * libcni: handle empty version when parsing version
  * [exec-plugins]: support plugin lists
  This is a minor update to the CNI libraries and tooling.
  This does not bump the protocol / spec version, which remains at v1.0.0</changelog>
  <changelog author="andrea.manzini@suse.com" date="1672315200">- Update to version 1.1.2:
  * Fix successfully unmarshalled nil raw result
  * spec: fix format
  * invoke: if Result CNIVersion is empty use netconf CNIVersion
  * cnitool: address golint error
  * libcni: handle empty version when parsing version
  * Switch to ginkgo/v2
  * add security heading to README
  * Maintainers: add Mike Zappa
  * introduce hybridnet to thrid-party plugins
  * Fix incorrect pointer inputs to `json.Unmarshal`
  * fix version of cni v0.8.1 does not have a directory of github.com/containernetworking/cni/pkg/types/100 refer to https://github.com/containernetworking/cni/tree/v0.8.1/pkg/types
  * Spec: Container runtime shall tear down namespaces
  * Update README.md
  * Updated README.md to include Netlox loxilight CNI
  * documentation: update Multus link in README.md to point to the k8snetworkplumbingwg repository
  * [exec-plugins]: support plugin lists
  * skel: remove superfluous err nil check in (*dispatcher).pluginMain
  * Remove Gabe Rosenhouse as maintainer
  * skel: print out CNI versions supported in help text.</changelog>
  <changelog author="andrea.manzini@suse.com" date="1672401600">- added patch 0001-fix-upstream-CVE-2021-38561.patch for [bsc#1206711]</changelog>
  <changelog author="dcermak@suse.com" date="1696852800">- Bump BuildRequired golang version to &gt;= 1.21, fixes bsc#1216006</changelog>
</package>
<package pkgid="d56b389f3023c46864dce04078256161001cac91d2010a29a2ee67b172e1219176ee1eb0bc06ecdb5234065ef0e0d0ec688aaccb0309728349b03f9121afd0f9" name="cni-plugin-dnsname-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="slfo.1.1_1.2"/>
  <changelog author="rhafer@suse.com" date="1601380800">- Initial release v1.0.0</changelog>
  <changelog author="rhafer@suse.com" date="1602072000">- remove empty scriptlets
- Adjust build flags to create PIE binary</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.1.1:
  * Bump to v1.1.1
  * use tabs not spaces
  * Bump to v1.1
  * pass aliases to dns masq
  * Cirrus: Use images from automation_images
  * correct fedora package name in documentation
  * clarify where to report issues
  * change references from libpod to podman</changelog>
  <changelog author="ralf@h4kamp.de" date="1637323200">- Update to version 1.3.0:
  * Bump to v1.3.0
  * Output version information when called directly
  * Do not error on del command
  * Cirrus: Remove unused $DEST_BRANCH definition
  * Cleanup dangling config files
  * Update F34beta -&gt; F34 and U2010 -&gt; U2104
  * Cirrus: Add modern get_ci_vm support
  * Cirrus: Update to F34beta VM image
  * Bump to v1.2.0
  * return dnsmasq errors
  * Update podman readme
  * Add dns search domain to cni result
  * Add AppArmor instruction in the Podman readme
  * fix typo in README_PODMAN
  * Added missing comma in README_PODMAN.md
  * Cirrus: Update to F33 and U2010
  * Improve documentation of use with Podman
  * bump go-iptables version
- Fix build on SLE and Leap</changelog>
  <changelog author="idesmi@protonmail.com" date="1648209600">- Update to version 1.3.1:
  * Don't use LDFLAGS: made `dnsname` unable to build in some
    packaging systems (not ours).</changelog>
</package>
<package pkgid="b9e9e0a591c00ecd24354b4c5de154cbfc291f6853cbcff71f3edd36590bbb0f7000f4c6b250c3ffc3b32ddbdc884e41589c749900b8c3c95bb63608f5537cf1" name="cni-plugins-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="slfo.1.1_1.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- Update to version 0.8.7:
  * Fix race condition in GetCurrentNS
  * lo: CNI_IFNAME is no longer ignored
  * cni: bump to 0.8.0
  * Bump Go version to 1.13 and 1.14
  * Add contact info
  * Update firewall README.md CNI-ADMIN
  * firewall: fix some typos in docs
  * portmap DEL noop if no portMappings present
  * flannel: remove net conf file after DEL succeed</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version v1.3.0:
  * [sbr]: Ignore LinkNotFoundError during cmdDel
  * build(deps): bump github.com/Microsoft/hcsshim from 0.9.8 to 0.9.9
  * Bump to golang 1.20 to pick up go1.19.6 / go1.20.1 CVE fixes
  * Fix ValidateExpectedRoute with non default routes and nil GW
  * tuning: fix cmdCheck when using IFNAME
  * bridge, del: timeout after 55 secs of trying to list rules
  * bridge, spoofcheck: only read the prerouting chain on CNI delete
  * build: consume specific tables/chains via go-nft
  * bridge: add vlan trunk support
  * enable govet and unparam linters
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * Add parameter to disable default vlan
  * bridge, spoof check: remove drop rule index
  * go.mod: bump all deps
  * linter: fix ginkgolinter errors
  * Fix wastedassign linter errors
  * build(deps): bump actions/stale from 7 to 8
  * Fix revive linter errors
  * build(deps): bump actions/setup-go from 3 to 4
  * enable durationcheck,  predeclared, unconvert, unused and wastedassign linters
  * remove govet and gofmt from test_linux.sh
  * enable ginkgolinter linter
  * enable revive linter
  * enable gocritic linter
  * enable gosimple linter
  * enable  nonamedreturns linter
  * enable ineffassign linter
  * enable contextcheck linter
  * enable staticcheck linter
  * ci(lint): setup golangci-lint
  * ci(lint): setup yamllint linter Signed-off-by: Matthieu MOREL &lt;matthieu.morel35@gmail.com&gt;
  * Fix overwritten error var in getMTUByName
  * Update tests to utilize ginkgo/v2
  * Update ginkgo to v2 in go.mod, go.sum, vendor
  * Tap plugin
  * build(deps): bump github.com/onsi/gomega from 1.24.2 to 1.26.0
  * build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0
  * Only check ipv6 when an IPv6 is configured
  * Add support for in-container master for macvlans
  * Add support for in-container master for ipvlan
  * Add support for in-container master for vlans
  * bridge: re-fetch mac address
  * Update Allocate method to reuse lease if present
  * build(deps): bump github.com/safchain/ethtool to v0.2.0
  * build(deps): bump golang.org/x/sys from 0.3.0 to 0.4.0
  * Add IPv6 support for AddDefaultRoute
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.2
  * build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.5.0
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * build(deps): bump alpine in /.github/actions/retest-action
  * build(deps): bump github.com/godbus/dbus/v5 from 5.0.4 to 5.1.0
  * build(deps): bump github.com/vishvananda/netlink
  * build(deps): bump github.com/alexflint/go-filemutex from 1.1.0 to 1.2.0
  * build(deps): bump github.com/Microsoft/hcsshim from 0.8.20 to 0.9.6
  * build(deps): bump github.com/onsi/gomega from 1.15.0 to 1.24.2
  * Update dependabot.yml
  * build(deps): bump actions/checkout from 2 to 3
  * build(deps): bump actions/stale from 4 to 7
  * build(deps): bump actions/setup-go from 2 to 3
  * Update dependabot.yml
  * Update dependabot.yml
  * ci(deps): setup dependabot
  * Fix tuning path validation
  * Update email to gmail
  * Update portmap test's iptables error check
  * Remove references to io/ioutil package
  * fix bug on getting NextIP of addresses with first byte 0
  * Fix path substitution to enable setting sysctls on vlan interfaces
  * support masquerade all config
  * host-local: remove unused Release(ip) from type Store interface
  * Cleanup Socket and Pidfile on exit
  * dummy: Create a Dummy CNI plugin that creates a virtual interface.
  * Use the same options for acquiring, renewing lease
  * bridge: update vlanFiltering variable to make code more readable
  * ci: only rerun failed jobs on `/retest`
  * build: support riscv64
  * Check for duplicated sysctl keys
  * Update github.com/vishvananda/netlink to v1.2.0-beta
  * bridge: support IPAM DNS settings
  * Bump to go 1.18
  * V2 API support for win-overlay CNI
  * bug: return errors when iptables and ip6tables are unusable
  * github: ignore issues with "keep" label from stale closing
  * Make description for `static` plugin more exact
  * workflow: add something to auto-close stale PRs
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * Add sysctl allowlist</changelog>
  <changelog author="dcermak@suse.com" date="1696852800">- Bump BuildRequired golang version to &gt;= 1.21, fixes bsc#1216006</changelog>
</package>
<package pkgid="6be67f2a832b0bdcb9de51efd8ea664f00778186803f84f94c9a294afcbf1f4a4b35c65cad1bd34ccb0df9873e15f6ec1864b2ae08fe391a74916150d72616fc" name="cockpit-bridge-debuginfo" arch="aarch64">
  <version epoch="0" ver="322" rel="slfo.1.1_2.1"/>
  <changelog author="pallaswept@proton.me" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="herbert@graeber-clan.de" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1723118400">- revert load pam_oath, because it enforces the file for otp secrets to exist,
  will try again once pam_oath can have that optional</changelog>
  <changelog author="luna.dragon@suse.com" date="1723464000">- new version 322:
  * shell: Deprecate host switcher
  * files: Permissions column in details view
- suse_docs.patch: refreshed
  For details, see https://cockpit-project.org/blog/cockpit-322.html</changelog>
  <changelog author="alice.brooks@suse.com" date="1724155200">- add 0005-cockpit-ws-user-remove-default-deps.patch (bsc#1229146)</changelog>
  <changelog author="adam.majer@suse.de" date="1724155201">- remove requires on pam_oath completely. It will be re-introduced
  later when it works with optional enrollment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726660800">- support optional TOTP for authentication, requires pam_oath</changelog>
  <changelog author="alice.brooks@suse.com" date="1727697600">- add 0006-totp-motd.patch for guidance to enabling totp to the mtod</changelog>
  <changelog author="alice.brooks@suse.com" date="1728475200">- suse_docs.patch: update documentation to point at new links (bsc#1226050)
- remove_rh_links.patch: remove additional hardcoded RH refs (bsc#1221336)
- hide-pcp.patch: correct patch to properly disable pcp on micro
  (bsc#1226049)
- suse-microos-branding.patch: use suse ID as branding instead of sle-micro
  (bsc#1227441)</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="10fb70729a0c90476b49e2c2749a4ce73e077805d71dc5ba5ed78f492a651c3dbb43d81385d834db979da109bb11c7cd99b679bdf3edc2d60c74692e00915207" name="cockpit-debuginfo" arch="aarch64">
  <version epoch="0" ver="322" rel="slfo.1.1_2.1"/>
  <changelog author="pallaswept@proton.me" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="herbert@graeber-clan.de" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1723118400">- revert load pam_oath, because it enforces the file for otp secrets to exist,
  will try again once pam_oath can have that optional</changelog>
  <changelog author="luna.dragon@suse.com" date="1723464000">- new version 322:
  * shell: Deprecate host switcher
  * files: Permissions column in details view
- suse_docs.patch: refreshed
  For details, see https://cockpit-project.org/blog/cockpit-322.html</changelog>
  <changelog author="alice.brooks@suse.com" date="1724155200">- add 0005-cockpit-ws-user-remove-default-deps.patch (bsc#1229146)</changelog>
  <changelog author="adam.majer@suse.de" date="1724155201">- remove requires on pam_oath completely. It will be re-introduced
  later when it works with optional enrollment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726660800">- support optional TOTP for authentication, requires pam_oath</changelog>
  <changelog author="alice.brooks@suse.com" date="1727697600">- add 0006-totp-motd.patch for guidance to enabling totp to the mtod</changelog>
  <changelog author="alice.brooks@suse.com" date="1728475200">- suse_docs.patch: update documentation to point at new links (bsc#1226050)
- remove_rh_links.patch: remove additional hardcoded RH refs (bsc#1221336)
- hide-pcp.patch: correct patch to properly disable pcp on micro
  (bsc#1226049)
- suse-microos-branding.patch: use suse ID as branding instead of sle-micro
  (bsc#1227441)</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="df2a4b9ecf925fbb81a0bf0402c0a3e48b35f360cd58dee86a1ad0a9ba912e2c19b394ba7d751ecc6502ce42a19a07baf958b6bfc44781a6b3cb2aaad3907d94" name="cockpit-debugsource" arch="aarch64">
  <version epoch="0" ver="322" rel="slfo.1.1_2.1"/>
  <changelog author="pallaswept@proton.me" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="herbert@graeber-clan.de" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1723118400">- revert load pam_oath, because it enforces the file for otp secrets to exist,
  will try again once pam_oath can have that optional</changelog>
  <changelog author="luna.dragon@suse.com" date="1723464000">- new version 322:
  * shell: Deprecate host switcher
  * files: Permissions column in details view
- suse_docs.patch: refreshed
  For details, see https://cockpit-project.org/blog/cockpit-322.html</changelog>
  <changelog author="alice.brooks@suse.com" date="1724155200">- add 0005-cockpit-ws-user-remove-default-deps.patch (bsc#1229146)</changelog>
  <changelog author="adam.majer@suse.de" date="1724155201">- remove requires on pam_oath completely. It will be re-introduced
  later when it works with optional enrollment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726660800">- support optional TOTP for authentication, requires pam_oath</changelog>
  <changelog author="alice.brooks@suse.com" date="1727697600">- add 0006-totp-motd.patch for guidance to enabling totp to the mtod</changelog>
  <changelog author="alice.brooks@suse.com" date="1728475200">- suse_docs.patch: update documentation to point at new links (bsc#1226050)
- remove_rh_links.patch: remove additional hardcoded RH refs (bsc#1221336)
- hide-pcp.patch: correct patch to properly disable pcp on micro
  (bsc#1226049)
- suse-microos-branding.patch: use suse ID as branding instead of sle-micro
  (bsc#1227441)</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="ad42cf6257bc0e9af5637ac57a328bb6e36a06df438d4c413ef64b9cbc36d4044fabec826fe9cdc2e82de0a7a0229ab186d36d63e3eb6afb825f11c47074897c" name="cockpit-ws-debuginfo" arch="aarch64">
  <version epoch="0" ver="322" rel="slfo.1.1_2.1"/>
  <changelog author="pallaswept@proton.me" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="herbert@graeber-clan.de" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1723118400">- revert load pam_oath, because it enforces the file for otp secrets to exist,
  will try again once pam_oath can have that optional</changelog>
  <changelog author="luna.dragon@suse.com" date="1723464000">- new version 322:
  * shell: Deprecate host switcher
  * files: Permissions column in details view
- suse_docs.patch: refreshed
  For details, see https://cockpit-project.org/blog/cockpit-322.html</changelog>
  <changelog author="alice.brooks@suse.com" date="1724155200">- add 0005-cockpit-ws-user-remove-default-deps.patch (bsc#1229146)</changelog>
  <changelog author="adam.majer@suse.de" date="1724155201">- remove requires on pam_oath completely. It will be re-introduced
  later when it works with optional enrollment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726660800">- support optional TOTP for authentication, requires pam_oath</changelog>
  <changelog author="alice.brooks@suse.com" date="1727697600">- add 0006-totp-motd.patch for guidance to enabling totp to the mtod</changelog>
  <changelog author="alice.brooks@suse.com" date="1728475200">- suse_docs.patch: update documentation to point at new links (bsc#1226050)
- remove_rh_links.patch: remove additional hardcoded RH refs (bsc#1221336)
- hide-pcp.patch: correct patch to properly disable pcp on micro
  (bsc#1226049)
- suse-microos-branding.patch: use suse ID as branding instead of sle-micro
  (bsc#1227441)</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="418cc9215ffbcf69418ca3453391f43af15cdc302827191927f014e23ffeb2135574e995173f5f0c728a0640aa1bf2686c12ee1d3cc6b5a15f70c942a28ae535" name="colord-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="slfo.1.1_2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1648209600">- Update to version 1.4.6:
  + Add missing copyright notices.
  + Add Spyder X entry.
  + Document where to send patches.
  + Don't use exact floating point comparisons.
  + Drop option for removed reverse engineering tools.
  + Drop references to hughski.com.
  + Fix a small memory leak in sqlite3_exec().
  + Fix typo in device-removed signal documentation.
  + Make introspection optional in meson.
- Drop -Dreverse=false meson parameter: no longer supported.
- Fix a few rpmlint warnings:
  + Do not self-obsolete shared-color-profiles by providing the
    symbol with a version.
  + Call +%tmpfiles_create %{_tmpfilesdir}/colord.conf in %post.
  + Package /usr/share/bash-completion/completions/colormgr with
    mode 644: the files are not executed, but sourced.
  + Own %{_localstatedir}/lib/colord/icc (ghost): this directory is
    generated by %tmpfiles_create.</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak on db
  open failure (boo#1202802 CVE-2021-42523).</changelog>
  <changelog author="mgorse@suse.com" date="1759492800">- Rework colord-CVE-2021-42523.patch based on what is now upstream.
  The original fix was wrong and did not properly free the error,
  resulting in a crash (bsc#1250750).</changelog>
</package>
<package pkgid="741416d620490700eab08a5b5c29565e825c2b7b174edcc7a4620fc7eaa310c36cdc0f417a051d603a79a8e6e042f99e7725c581c8da66bf55fb6b6d1b3f108b" name="compat-usrmerge-debugsource" arch="aarch64">
  <version epoch="0" ver="84.87" rel="slfo.1.1_1.5"/>
  <changelog author="lnussel@suse.de" date="1616673600">- catch boolean deps</changelog>
  <changelog author="obs@haasn.xyz" date="1622548800">- add fallback for filesystems without renameat2 (boo#1186637)</changelog>
  <changelog author="lnussel@suse.com" date="1622635200">- exit early if one of the affected directories has mountpoint
  beneath it</changelog>
  <changelog author="lnussel@suse.com" date="1623067200">- fix conversion with split /usr (boo#1186781)</changelog>
  <changelog author="fvogt@suse.com" date="1623153600">- Avoid dependency on mountpoint from util-linux
- Also check for availability of find</changelog>
  <changelog author="lnussel@suse.de" date="1623153601">- early exit in case of overlayfs (boo#1187027)</changelog>
  <changelog author="lnussel@suse.de" date="1623758400">- another fix for split /usr to avoid running out of space (boo#1186781)
- unsafe fallback also for ENOSYS on renameat2 as seen on WSL</changelog>
  <changelog author="lnussel@suse.de" date="1630065600">- statically link xmv to avoid glibc 2.34 dependency
  (__libc_start_main@GLIBC_2.34)
- turn on filetriggers in main package. Needed for single transaction upgrades
  (boo#1189788)</changelog>
  <changelog author="lnussel@suse.de" date="1630065601">- exit file triggers early if alread usrmerged</changelog>
  <changelog author="lnussel@suse.de" date="1633608000">- Fix logic for detecting conflicts with directories (boo#1191111)</changelog>
</package>
<package pkgid="083c65a2bce78bbdaf0fb82543b0c6fd785f1a81e44e3b9b002d11a844eb0fbf623fa8b25872e0a09602859e9beb4478a0347b53f608655d7f969e1f195b3afc" name="compat-usrmerge-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="84.87" rel="slfo.1.1_1.5"/>
  <changelog author="lnussel@suse.de" date="1616673600">- catch boolean deps</changelog>
  <changelog author="obs@haasn.xyz" date="1622548800">- add fallback for filesystems without renameat2 (boo#1186637)</changelog>
  <changelog author="lnussel@suse.com" date="1622635200">- exit early if one of the affected directories has mountpoint
  beneath it</changelog>
  <changelog author="lnussel@suse.com" date="1623067200">- fix conversion with split /usr (boo#1186781)</changelog>
  <changelog author="fvogt@suse.com" date="1623153600">- Avoid dependency on mountpoint from util-linux
- Also check for availability of find</changelog>
  <changelog author="lnussel@suse.de" date="1623153601">- early exit in case of overlayfs (boo#1187027)</changelog>
  <changelog author="lnussel@suse.de" date="1623758400">- another fix for split /usr to avoid running out of space (boo#1186781)
- unsafe fallback also for ENOSYS on renameat2 as seen on WSL</changelog>
  <changelog author="lnussel@suse.de" date="1630065600">- statically link xmv to avoid glibc 2.34 dependency
  (__libc_start_main@GLIBC_2.34)
- turn on filetriggers in main package. Needed for single transaction upgrades
  (boo#1189788)</changelog>
  <changelog author="lnussel@suse.de" date="1630065601">- exit file triggers early if alread usrmerged</changelog>
  <changelog author="lnussel@suse.de" date="1633608000">- Fix logic for detecting conflicts with directories (boo#1191111)</changelog>
</package>
<package pkgid="f27e3a401088f203c69dec6e105b6cf7a22420b0c30269723e26e2f4a198ab6d57a345eb6296574a6234e0424ba538d6a81c564515def16ad50ffd4a01ef672e" name="conmon-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.10" rel="slfo.1.1_1.2"/>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="7102eecd358c1c0099835b89df670003fd325333105268aca62cb085f19d16148c1e6fa38c8e9c470495a6120845d1b713f68c3c7b4a06a6723d0db89f1881bc" name="conntrack-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.8" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.4.4
  * conntrackd: add systemd support
  * conntrack: support delete by label
  * conntrack: add support for netmask filtering
  * conntrack: add support for CIDR notation
  * conntrack: Add missing tables "dying" and "unconfirmed"
  to usage output.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.4.6
  * conntrackd: fix UDP IPv6 destination address not being usable
  * conntrack: Allow protocol number zero
  * conntrackd: cthelper: Add new SLP helper
- Drop conntrackd-Use-strdup-in-lexer.patch,
  conntrackd-use-strncpy-to-unix-path.patch,
  conntrackd-cthelper-Add-new-SLP-helper.patch,
  conntrackd-use-correct-max-unix-path-length.patch (merged)
- Drop require on systemd, since it can run in a namespace without.</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Modified:
  * conntrackd.service</changelog>
  <changelog author="jengelh@inai.de" date="1665057600">- Update to release 1.4.7
  * Changes to the "conntrack" program:
  * "clash_resolve" and "chaintoolong" stats counters
  * Defaults to the `unspec` family if the `-f` flag is absent,
    so as to improve support for dual-stack setups.
  * Support filtering events by IP address family.
  * Support flushing per IP address family.
  * Added the `save` output format representing data in conntrack
    parameters, and support for loading such files back.
  * Remove the `-o userspace` flag and always tag user space
    triggered events.
  * Introduce the `-A` flags, a variant of `-I` which does not
    fail if the entry exists already.</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 1.4.8
  * Fix spurious EOPNOSUPP and ENOBUFS errors with -U/--update
    command.
  * Fix spurious ENOENT -D/--delete.</changelog>
</package>
<package pkgid="3c484c9e22701e3b44cb40d3b59e187ec58e9c8cddc8d1778bb05ad93a13616e89e5e6e5375a609419dbfcd07bcd5cfae4ee45e862cdfa9b7775be74d8cb4c2b" name="conntrack-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.8" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.4.4
  * conntrackd: add systemd support
  * conntrack: support delete by label
  * conntrack: add support for netmask filtering
  * conntrack: add support for CIDR notation
  * conntrack: Add missing tables "dying" and "unconfirmed"
  to usage output.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.4.6
  * conntrackd: fix UDP IPv6 destination address not being usable
  * conntrack: Allow protocol number zero
  * conntrackd: cthelper: Add new SLP helper
- Drop conntrackd-Use-strdup-in-lexer.patch,
  conntrackd-use-strncpy-to-unix-path.patch,
  conntrackd-cthelper-Add-new-SLP-helper.patch,
  conntrackd-use-correct-max-unix-path-length.patch (merged)
- Drop require on systemd, since it can run in a namespace without.</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Modified:
  * conntrackd.service</changelog>
  <changelog author="jengelh@inai.de" date="1665057600">- Update to release 1.4.7
  * Changes to the "conntrack" program:
  * "clash_resolve" and "chaintoolong" stats counters
  * Defaults to the `unspec` family if the `-f` flag is absent,
    so as to improve support for dual-stack setups.
  * Support filtering events by IP address family.
  * Support flushing per IP address family.
  * Added the `save` output format representing data in conntrack
    parameters, and support for loading such files back.
  * Remove the `-o userspace` flag and always tag user space
    triggered events.
  * Introduce the `-A` flags, a variant of `-I` which does not
    fail if the entry exists already.</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 1.4.8
  * Fix spurious EOPNOSUPP and ENOBUFS errors with -U/--update
    command.
  * Fix spurious ENOENT -D/--delete.</changelog>
</package>
<package pkgid="af1302bdbd55fbf209f86d87a25d12b5a8e46e96afc31a7df9f1547bc430e52b367c13b7faff0f104f3682bf965daa51442784748ba7668c75eb51127f8a7fe1" name="coolkey-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
  <changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
  <changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1500638400">- Add nssdb installation scripts.
- Run spec-cleaner.
- Drop coolkey-1.1.0-evoandooo.patch: The patch does nothing now.
  Evolution and LibreOffice changed over time. They moved its
  directories and they don't use secmod.db any more.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Remove vision statement and development methods from description.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- light modernization of the spec file
- avoid bashism in post scripts (bsc#1195391)</changelog>
</package>
<package pkgid="dd7127d216e9b3085e9f47ec7cd2e269ae611e459a6bd3c118e2b1ea228805344bdde66897eb91e8c39dab0c4412e464700621e18aaf6438394a94f65ac7a094" name="coolkey-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
  <changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
  <changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1500638400">- Add nssdb installation scripts.
- Run spec-cleaner.
- Drop coolkey-1.1.0-evoandooo.patch: The patch does nothing now.
  Evolution and LibreOffice changed over time. They moved its
  directories and they don't use secmod.db any more.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Remove vision statement and development methods from description.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- light modernization of the spec file
- avoid bashism in post scripts (bsc#1195391)</changelog>
</package>
<package pkgid="9f5fdaf3b97af2c621ec42e7d3718341b1977b63f92b449ff67ae0d95fbaad26318b343d19829a41e177825eef4f7a3ef04ef507cc7d790927c653c8584d6d23" name="coreutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.4" rel="slfo.1.1_2.1"/>
  <changelog author="coolo@suse.com" date="1659960000">- Remove python2 from buildrequires - appears to be a left over</changelog>
  <changelog author="dmueller@suse.com" date="1660046400">- refresh coreutils-i18n.patch from Fedora to make expand and unexpand
  more similar</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1664193600">- coreutils-tests-workaround-make-fdleak.patch: Add patch to work around
  a GNU make bug which leaks file descriptors when using the jobserver;
  this makes some tests fail.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="dmueller@suse.com" date="1679400000">- update to 9.2:
  * cksum now accepts the --base64 (-b) option to print
    base64-encoded checksums.  It also accepts/checks such
    checksums.
  * cksum now accepts the --raw option to output a raw binary
    checksum.  No file name or other information is output in
    this mode.
  * cp, mv, and install now accept the --debug option to
    print details on how a file is being copied.
  * factor now accepts the --exponents (-h) option to print
    factors in the form p^e, rather than repeating the prime p, e
    times.
  * ls now supports the --time=modification option, to explicitly
    select the default mtime timestamp for display and sorting.
  * mv now supports the --no-copy option, which causes it to fail
    when asked to move a file to a different file system.
  * split now accepts options like '-n SIZE' that exceed machine
    integer range, when they can be implemented as if they were
    infinity.
  * split -n now accepts piped input even when not in round-robin
    mode, by first copying input to a temporary file to determine its
    size.
  * wc now accepts the --total={auto,never,always,only} option
    to give explicit control over when the total is output.
  * 'cp --reflink=always A B' no longer leaves behind a newly
    created empty file B merely because copy-on-write clones are not
    supported.
  * 'cp -n' and 'mv -n' now exit with nonzero status if they skip
    their action because the destination exists, and likewise for 'cp
  - i', 'ln -i', and 'mv -i' when the user declines.  (POSIX
    specifies this for 'cp -i' and 'mv -i'.)
  * cp, mv, and install again read in multiples of the reported
    block size, to support unusual devices that may have this
    constraint.
  * du --apparent now counts apparent sizes only of regular files
    and symbolic links.  POSIX does not specify the meaning of
    apparent sizes (i.e., st_size) for other file types, and
    counting those sizes could cause confusing and unwanted size
    mismatches.
  * 'ls -v' and 'sort -V' go back to sorting ".0" before ".A",
    reverting to the behavior in coreutils-9.0 and earlier.
    This behavior is now documented.
  * ls --color now matches a file extension case sensitively
    if there are different sequences defined for separate cases.
  * printf unicode \uNNNN, \UNNNNNNNN syntax, now supports all
    valid unicode code points.  Previously is was restricted to
    the C universal character subset, which restricted most points &lt;=
    0x9F.
  * runcon now exits with status 125 for internal errors.
    Previously upon internal errors it would exit with status 1,
    which was less distinguishable
    from errors from the invoked command.
  * 'split -n N' now splits more evenly when the input size is
    not a multiple of N, by creating N output files whose sizes
    differ by at most 1 byte.  Formerly, it did this only when
    the input size was less than N.
  * 'stat -c %s' now prints sizes as unsigned, consistent with
    'ls'.
  * a long list of bugfixes, see included NEWS file for details
- drop gnulib-simple-backup-fix.patch (upstream)
- drop coreutils-tests-workaround-make-fdleak.patch (obsolete)</changelog>
  <changelog author="dmueller@suse.com" date="1680782400">- add fix-reflink-fallback.patch (bsc#1210033)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1681992000">- update to 9.3:
  Bug fixes:
  * cp --reflink=auto (the default), mv, and install
    will again fall back to a standard copy in more cases.
    Previously copies could fail with permission errors on
    more restricted systems like android or containers etc.
    [bug introduced in coreutils-9.2]
  * cp --recursive --backup will again operate correctly.
    Previousy it may have issued "File exists" errors when
    it failed to appropriately rename files being replaced.
    [bug introduced in coreutils-9.2]
  * date --file and dircolors will now diagnose a failure to read a file.
    Previously they would have silently ignored the failure.
    [This bug was present in "the beginning".]
  * md5sum --check again correctly prints the status of each file checked.
    Previously the status for files was printed as 'OK' once any file had passed.
    This also applies to cksum, sha*sum, and b2sum.
    [bug introduced in coreutils-9.2]
  * wc will now diagnose if any total counts have overflowed.
    [This bug was present in "the beginning".]
  * `wc -c` will again correctly update the read offset of inputs.
    Previously it deduced the size of inputs while leaving the offset unchanged.
    [bug introduced in coreutils-8.27]
  * Coreutils programs no longer fail for timestamps past the year 2038
    on obsolete configurations with 32-bit signed time_t, because the
    build procedure now rejects these configurations.
    [This bug was present in "the beginning".]
  Changes in behavior:
  * 'cp -n' and 'mv -n' now issue an error diagnostic if skipping a file,
    to correspond with -n inducing a nonzero exit status as of coreutils 9.2.
    Similarly 'cp -v' and 'mv -v' will output a message for each file skipped
    due to -n, -i, or -u.
  New features:
  * cp and mv now support --update=none to always skip existing files
    in the destination, while not affecting the exit status.
    This is equivalent to the --no-clobber behavior from before v9.2.
- drop fix-reflink-fallback.patch (upstream).</changelog>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.4.sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="94dff4def8a80e276891f3e7faa89f9d238cca0904698792e2919de2d79864c2f9ba7453e7e74979bf07f823071271885d92c021a19827a9c978dc551bd67407" name="coreutils-debugsource" arch="aarch64">
  <version epoch="0" ver="9.4" rel="slfo.1.1_2.1"/>
  <changelog author="coolo@suse.com" date="1659960000">- Remove python2 from buildrequires - appears to be a left over</changelog>
  <changelog author="dmueller@suse.com" date="1660046400">- refresh coreutils-i18n.patch from Fedora to make expand and unexpand
  more similar</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1664193600">- coreutils-tests-workaround-make-fdleak.patch: Add patch to work around
  a GNU make bug which leaks file descriptors when using the jobserver;
  this makes some tests fail.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="dmueller@suse.com" date="1679400000">- update to 9.2:
  * cksum now accepts the --base64 (-b) option to print
    base64-encoded checksums.  It also accepts/checks such
    checksums.
  * cksum now accepts the --raw option to output a raw binary
    checksum.  No file name or other information is output in
    this mode.
  * cp, mv, and install now accept the --debug option to
    print details on how a file is being copied.
  * factor now accepts the --exponents (-h) option to print
    factors in the form p^e, rather than repeating the prime p, e
    times.
  * ls now supports the --time=modification option, to explicitly
    select the default mtime timestamp for display and sorting.
  * mv now supports the --no-copy option, which causes it to fail
    when asked to move a file to a different file system.
  * split now accepts options like '-n SIZE' that exceed machine
    integer range, when they can be implemented as if they were
    infinity.
  * split -n now accepts piped input even when not in round-robin
    mode, by first copying input to a temporary file to determine its
    size.
  * wc now accepts the --total={auto,never,always,only} option
    to give explicit control over when the total is output.
  * 'cp --reflink=always A B' no longer leaves behind a newly
    created empty file B merely because copy-on-write clones are not
    supported.
  * 'cp -n' and 'mv -n' now exit with nonzero status if they skip
    their action because the destination exists, and likewise for 'cp
  - i', 'ln -i', and 'mv -i' when the user declines.  (POSIX
    specifies this for 'cp -i' and 'mv -i'.)
  * cp, mv, and install again read in multiples of the reported
    block size, to support unusual devices that may have this
    constraint.
  * du --apparent now counts apparent sizes only of regular files
    and symbolic links.  POSIX does not specify the meaning of
    apparent sizes (i.e., st_size) for other file types, and
    counting those sizes could cause confusing and unwanted size
    mismatches.
  * 'ls -v' and 'sort -V' go back to sorting ".0" before ".A",
    reverting to the behavior in coreutils-9.0 and earlier.
    This behavior is now documented.
  * ls --color now matches a file extension case sensitively
    if there are different sequences defined for separate cases.
  * printf unicode \uNNNN, \UNNNNNNNN syntax, now supports all
    valid unicode code points.  Previously is was restricted to
    the C universal character subset, which restricted most points &lt;=
    0x9F.
  * runcon now exits with status 125 for internal errors.
    Previously upon internal errors it would exit with status 1,
    which was less distinguishable
    from errors from the invoked command.
  * 'split -n N' now splits more evenly when the input size is
    not a multiple of N, by creating N output files whose sizes
    differ by at most 1 byte.  Formerly, it did this only when
    the input size was less than N.
  * 'stat -c %s' now prints sizes as unsigned, consistent with
    'ls'.
  * a long list of bugfixes, see included NEWS file for details
- drop gnulib-simple-backup-fix.patch (upstream)
- drop coreutils-tests-workaround-make-fdleak.patch (obsolete)</changelog>
  <changelog author="dmueller@suse.com" date="1680782400">- add fix-reflink-fallback.patch (bsc#1210033)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1681992000">- update to 9.3:
  Bug fixes:
  * cp --reflink=auto (the default), mv, and install
    will again fall back to a standard copy in more cases.
    Previously copies could fail with permission errors on
    more restricted systems like android or containers etc.
    [bug introduced in coreutils-9.2]
  * cp --recursive --backup will again operate correctly.
    Previousy it may have issued "File exists" errors when
    it failed to appropriately rename files being replaced.
    [bug introduced in coreutils-9.2]
  * date --file and dircolors will now diagnose a failure to read a file.
    Previously they would have silently ignored the failure.
    [This bug was present in "the beginning".]
  * md5sum --check again correctly prints the status of each file checked.
    Previously the status for files was printed as 'OK' once any file had passed.
    This also applies to cksum, sha*sum, and b2sum.
    [bug introduced in coreutils-9.2]
  * wc will now diagnose if any total counts have overflowed.
    [This bug was present in "the beginning".]
  * `wc -c` will again correctly update the read offset of inputs.
    Previously it deduced the size of inputs while leaving the offset unchanged.
    [bug introduced in coreutils-8.27]
  * Coreutils programs no longer fail for timestamps past the year 2038
    on obsolete configurations with 32-bit signed time_t, because the
    build procedure now rejects these configurations.
    [This bug was present in "the beginning".]
  Changes in behavior:
  * 'cp -n' and 'mv -n' now issue an error diagnostic if skipping a file,
    to correspond with -n inducing a nonzero exit status as of coreutils 9.2.
    Similarly 'cp -v' and 'mv -v' will output a message for each file skipped
    due to -n, -i, or -u.
  New features:
  * cp and mv now support --update=none to always skip existing files
    in the destination, while not affecting the exit status.
    This is equivalent to the --no-clobber behavior from before v9.2.
- drop fix-reflink-fallback.patch (upstream).</changelog>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.4.sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="a6f400b4e949742a66f899dd8b4e00640457ffeb9676030022d8f39ebd355e2c82b20aa4004d6a68da6040bdeca9987fe78ebd3ab1b62fa9900ef66493aae133" name="coreutils-systemd-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.4" rel="slfo.1.1_2.1"/>
  <changelog author="coolo@suse.com" date="1659960000">- Remove python2 from buildrequires - appears to be a left over</changelog>
  <changelog author="dmueller@suse.com" date="1660046400">- refresh coreutils-i18n.patch from Fedora to make expand and unexpand
  more similar</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1664193600">- coreutils-tests-workaround-make-fdleak.patch: Add patch to work around
  a GNU make bug which leaks file descriptors when using the jobserver;
  this makes some tests fail.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="dmueller@suse.com" date="1679400000">- update to 9.2:
  * cksum now accepts the --base64 (-b) option to print
    base64-encoded checksums.  It also accepts/checks such
    checksums.
  * cksum now accepts the --raw option to output a raw binary
    checksum.  No file name or other information is output in
    this mode.
  * cp, mv, and install now accept the --debug option to
    print details on how a file is being copied.
  * factor now accepts the --exponents (-h) option to print
    factors in the form p^e, rather than repeating the prime p, e
    times.
  * ls now supports the --time=modification option, to explicitly
    select the default mtime timestamp for display and sorting.
  * mv now supports the --no-copy option, which causes it to fail
    when asked to move a file to a different file system.
  * split now accepts options like '-n SIZE' that exceed machine
    integer range, when they can be implemented as if they were
    infinity.
  * split -n now accepts piped input even when not in round-robin
    mode, by first copying input to a temporary file to determine its
    size.
  * wc now accepts the --total={auto,never,always,only} option
    to give explicit control over when the total is output.
  * 'cp --reflink=always A B' no longer leaves behind a newly
    created empty file B merely because copy-on-write clones are not
    supported.
  * 'cp -n' and 'mv -n' now exit with nonzero status if they skip
    their action because the destination exists, and likewise for 'cp
  - i', 'ln -i', and 'mv -i' when the user declines.  (POSIX
    specifies this for 'cp -i' and 'mv -i'.)
  * cp, mv, and install again read in multiples of the reported
    block size, to support unusual devices that may have this
    constraint.
  * du --apparent now counts apparent sizes only of regular files
    and symbolic links.  POSIX does not specify the meaning of
    apparent sizes (i.e., st_size) for other file types, and
    counting those sizes could cause confusing and unwanted size
    mismatches.
  * 'ls -v' and 'sort -V' go back to sorting ".0" before ".A",
    reverting to the behavior in coreutils-9.0 and earlier.
    This behavior is now documented.
  * ls --color now matches a file extension case sensitively
    if there are different sequences defined for separate cases.
  * printf unicode \uNNNN, \UNNNNNNNN syntax, now supports all
    valid unicode code points.  Previously is was restricted to
    the C universal character subset, which restricted most points &lt;=
    0x9F.
  * runcon now exits with status 125 for internal errors.
    Previously upon internal errors it would exit with status 1,
    which was less distinguishable
    from errors from the invoked command.
  * 'split -n N' now splits more evenly when the input size is
    not a multiple of N, by creating N output files whose sizes
    differ by at most 1 byte.  Formerly, it did this only when
    the input size was less than N.
  * 'stat -c %s' now prints sizes as unsigned, consistent with
    'ls'.
  * a long list of bugfixes, see included NEWS file for details
- drop gnulib-simple-backup-fix.patch (upstream)
- drop coreutils-tests-workaround-make-fdleak.patch (obsolete)</changelog>
  <changelog author="dmueller@suse.com" date="1680782400">- add fix-reflink-fallback.patch (bsc#1210033)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1681992000">- update to 9.3:
  Bug fixes:
  * cp --reflink=auto (the default), mv, and install
    will again fall back to a standard copy in more cases.
    Previously copies could fail with permission errors on
    more restricted systems like android or containers etc.
    [bug introduced in coreutils-9.2]
  * cp --recursive --backup will again operate correctly.
    Previousy it may have issued "File exists" errors when
    it failed to appropriately rename files being replaced.
    [bug introduced in coreutils-9.2]
  * date --file and dircolors will now diagnose a failure to read a file.
    Previously they would have silently ignored the failure.
    [This bug was present in "the beginning".]
  * md5sum --check again correctly prints the status of each file checked.
    Previously the status for files was printed as 'OK' once any file had passed.
    This also applies to cksum, sha*sum, and b2sum.
    [bug introduced in coreutils-9.2]
  * wc will now diagnose if any total counts have overflowed.
    [This bug was present in "the beginning".]
  * `wc -c` will again correctly update the read offset of inputs.
    Previously it deduced the size of inputs while leaving the offset unchanged.
    [bug introduced in coreutils-8.27]
  * Coreutils programs no longer fail for timestamps past the year 2038
    on obsolete configurations with 32-bit signed time_t, because the
    build procedure now rejects these configurations.
    [This bug was present in "the beginning".]
  Changes in behavior:
  * 'cp -n' and 'mv -n' now issue an error diagnostic if skipping a file,
    to correspond with -n inducing a nonzero exit status as of coreutils 9.2.
    Similarly 'cp -v' and 'mv -v' will output a message for each file skipped
    due to -n, -i, or -u.
  New features:
  * cp and mv now support --update=none to always skip existing files
    in the destination, while not affecting the exit status.
    This is equivalent to the --no-clobber behavior from before v9.2.
- drop fix-reflink-fallback.patch (upstream).</changelog>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.4.sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="42ec94ee55939b9583643f2fd3bd53b34ab6e6dbb645a1ac12ce322d919cb21be1badd56a635e219db96999ab8e582010902173b8be4fc7cd56fc8f83fe18f18" name="coreutils-systemd-debugsource" arch="aarch64">
  <version epoch="0" ver="9.4" rel="slfo.1.1_2.1"/>
  <changelog author="coolo@suse.com" date="1659960000">- Remove python2 from buildrequires - appears to be a left over</changelog>
  <changelog author="dmueller@suse.com" date="1660046400">- refresh coreutils-i18n.patch from Fedora to make expand and unexpand
  more similar</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1664193600">- coreutils-tests-workaround-make-fdleak.patch: Add patch to work around
  a GNU make bug which leaks file descriptors when using the jobserver;
  this makes some tests fail.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="dmueller@suse.com" date="1679400000">- update to 9.2:
  * cksum now accepts the --base64 (-b) option to print
    base64-encoded checksums.  It also accepts/checks such
    checksums.
  * cksum now accepts the --raw option to output a raw binary
    checksum.  No file name or other information is output in
    this mode.
  * cp, mv, and install now accept the --debug option to
    print details on how a file is being copied.
  * factor now accepts the --exponents (-h) option to print
    factors in the form p^e, rather than repeating the prime p, e
    times.
  * ls now supports the --time=modification option, to explicitly
    select the default mtime timestamp for display and sorting.
  * mv now supports the --no-copy option, which causes it to fail
    when asked to move a file to a different file system.
  * split now accepts options like '-n SIZE' that exceed machine
    integer range, when they can be implemented as if they were
    infinity.
  * split -n now accepts piped input even when not in round-robin
    mode, by first copying input to a temporary file to determine its
    size.
  * wc now accepts the --total={auto,never,always,only} option
    to give explicit control over when the total is output.
  * 'cp --reflink=always A B' no longer leaves behind a newly
    created empty file B merely because copy-on-write clones are not
    supported.
  * 'cp -n' and 'mv -n' now exit with nonzero status if they skip
    their action because the destination exists, and likewise for 'cp
  - i', 'ln -i', and 'mv -i' when the user declines.  (POSIX
    specifies this for 'cp -i' and 'mv -i'.)
  * cp, mv, and install again read in multiples of the reported
    block size, to support unusual devices that may have this
    constraint.
  * du --apparent now counts apparent sizes only of regular files
    and symbolic links.  POSIX does not specify the meaning of
    apparent sizes (i.e., st_size) for other file types, and
    counting those sizes could cause confusing and unwanted size
    mismatches.
  * 'ls -v' and 'sort -V' go back to sorting ".0" before ".A",
    reverting to the behavior in coreutils-9.0 and earlier.
    This behavior is now documented.
  * ls --color now matches a file extension case sensitively
    if there are different sequences defined for separate cases.
  * printf unicode \uNNNN, \UNNNNNNNN syntax, now supports all
    valid unicode code points.  Previously is was restricted to
    the C universal character subset, which restricted most points &lt;=
    0x9F.
  * runcon now exits with status 125 for internal errors.
    Previously upon internal errors it would exit with status 1,
    which was less distinguishable
    from errors from the invoked command.
  * 'split -n N' now splits more evenly when the input size is
    not a multiple of N, by creating N output files whose sizes
    differ by at most 1 byte.  Formerly, it did this only when
    the input size was less than N.
  * 'stat -c %s' now prints sizes as unsigned, consistent with
    'ls'.
  * a long list of bugfixes, see included NEWS file for details
- drop gnulib-simple-backup-fix.patch (upstream)
- drop coreutils-tests-workaround-make-fdleak.patch (obsolete)</changelog>
  <changelog author="dmueller@suse.com" date="1680782400">- add fix-reflink-fallback.patch (bsc#1210033)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1681992000">- update to 9.3:
  Bug fixes:
  * cp --reflink=auto (the default), mv, and install
    will again fall back to a standard copy in more cases.
    Previously copies could fail with permission errors on
    more restricted systems like android or containers etc.
    [bug introduced in coreutils-9.2]
  * cp --recursive --backup will again operate correctly.
    Previousy it may have issued "File exists" errors when
    it failed to appropriately rename files being replaced.
    [bug introduced in coreutils-9.2]
  * date --file and dircolors will now diagnose a failure to read a file.
    Previously they would have silently ignored the failure.
    [This bug was present in "the beginning".]
  * md5sum --check again correctly prints the status of each file checked.
    Previously the status for files was printed as 'OK' once any file had passed.
    This also applies to cksum, sha*sum, and b2sum.
    [bug introduced in coreutils-9.2]
  * wc will now diagnose if any total counts have overflowed.
    [This bug was present in "the beginning".]
  * `wc -c` will again correctly update the read offset of inputs.
    Previously it deduced the size of inputs while leaving the offset unchanged.
    [bug introduced in coreutils-8.27]
  * Coreutils programs no longer fail for timestamps past the year 2038
    on obsolete configurations with 32-bit signed time_t, because the
    build procedure now rejects these configurations.
    [This bug was present in "the beginning".]
  Changes in behavior:
  * 'cp -n' and 'mv -n' now issue an error diagnostic if skipping a file,
    to correspond with -n inducing a nonzero exit status as of coreutils 9.2.
    Similarly 'cp -v' and 'mv -v' will output a message for each file skipped
    due to -n, -i, or -u.
  New features:
  * cp and mv now support --update=none to always skip existing files
    in the destination, while not affecting the exit status.
    This is equivalent to the --no-clobber behavior from before v9.2.
- drop fix-reflink-fallback.patch (upstream).</changelog>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.4.sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="111a29bc663beccfab6b7c710d855aa8e3337105d7231c50b4108312f908682831694149d6a7ac677d860a2daf054a72a0e94c85739f13232d8a6d2bb108918d" name="cpio-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.15" rel="slfo.1.1_2.4"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687521600">- Update to 2.14:
  * New option --ignore-dirnlink
    Valid in copy-out mode, it instructs cpio to ignore the actual number of
    links reported for each directory member and always store 2 instead.
  * Changes in --reproducible option
    The --reproducible option implies --ignore-dirlink.  In other words, it is
    equivalent to --ignore-devno --ignore-dirnlink --renumber-inodes.
  * Use GNU ls algorithm for deciding timestamp format in -tv mode
  * Fix cpio header verification.
  * Fix handling of device numbers on copy out.
  * Fix calculation of CRC in copy-out mode.
  * Rewrite the fix for CVE-2015-1197
  * Fix combination of --create --append --directory.
  * Fix appending to archives bigger than 2G.
- Refresh patches:
  * cpio-open_nonblock.patch
  * cpio-dev_number.patch
  * cpio-default_tape_dev.patch
  * cpio-pattern-file-sigsegv.patch
- Remove patches:
  * cpio-revert-CVE-2015-1197-fix.patch
  * fix-CVE-2021-38185.patch
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch
- Fix CVE-2023-7207, path traversal vulnerability, bsc#1218571</changelog>
  <changelog author="danilo.spinella@suse.com" date="1688990400">- Backport upstream fix for --no-absolute-filenames --make-directories
  * fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707134400">- Update to 2.15:
  * Fix the operation of --no-absolute-filenames --make-directories.
  * Restore access and modification times of symlinks in copy-in and
    copy-pass modes.
- Remove fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708948800">- Use %autopatch instead of deprecated %patchN.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1712318400">- Fix build with gcc14, bsc#1221712
  * fix-gcc14.patch</changelog>
</package>
<package pkgid="fb0685d4f0d3af9850cc2e26d0029f67d0650b2517525ce95ac20fd43f24b62d711d47b104aa3a73b14b48d486fe7a4951dd583864b04ea90e8b3b12da9100f8" name="cpio-debugsource" arch="aarch64">
  <version epoch="0" ver="2.15" rel="slfo.1.1_2.4"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687521600">- Update to 2.14:
  * New option --ignore-dirnlink
    Valid in copy-out mode, it instructs cpio to ignore the actual number of
    links reported for each directory member and always store 2 instead.
  * Changes in --reproducible option
    The --reproducible option implies --ignore-dirlink.  In other words, it is
    equivalent to --ignore-devno --ignore-dirnlink --renumber-inodes.
  * Use GNU ls algorithm for deciding timestamp format in -tv mode
  * Fix cpio header verification.
  * Fix handling of device numbers on copy out.
  * Fix calculation of CRC in copy-out mode.
  * Rewrite the fix for CVE-2015-1197
  * Fix combination of --create --append --directory.
  * Fix appending to archives bigger than 2G.
- Refresh patches:
  * cpio-open_nonblock.patch
  * cpio-dev_number.patch
  * cpio-default_tape_dev.patch
  * cpio-pattern-file-sigsegv.patch
- Remove patches:
  * cpio-revert-CVE-2015-1197-fix.patch
  * fix-CVE-2021-38185.patch
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch
- Fix CVE-2023-7207, path traversal vulnerability, bsc#1218571</changelog>
  <changelog author="danilo.spinella@suse.com" date="1688990400">- Backport upstream fix for --no-absolute-filenames --make-directories
  * fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707134400">- Update to 2.15:
  * Fix the operation of --no-absolute-filenames --make-directories.
  * Restore access and modification times of symlinks in copy-in and
    copy-pass modes.
- Remove fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708948800">- Use %autopatch instead of deprecated %patchN.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1712318400">- Fix build with gcc14, bsc#1221712
  * fix-gcc14.patch</changelog>
</package>
<package pkgid="df53c9843cd7d1a525c873d2308e1aca8732c166c6f87e37c20f62f9c1c38534f827c34b310f37e7361395304085fba36593ad67a900581ca95acc538eabacb5" name="cpupower-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="slfo.1.1_1.2"/>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Change to building the package from kernel-source based on
  how the perf package works
- Removed patches:
  * turbostat_makefile_fix_asm_header.patch
  * remove_bits_h.patch
  * x86_perf_makefile_fix_asm_header.patch
- Remove all tarballs and git script
- Use %lang_package
- Correct ix86 to %ix86</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- add rebuild subpackage to trigger rebuild on kernel updates</changelog>
  <changelog author="trenn@suse.de" date="1657022400">- Remove powercap capabilities to patch againt latest kernel sources
  - &gt; still keep the patches, will be removed after trying to get this
    mainline
- Add netlink (libnl-devel) requires</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
</package>
<package pkgid="a1f74b3d4e719863e43d5a84a0cbff3d2f24b34545d7c80f4e88e92baba9fe851184fc94ca4a3153c990563265a25f450f15260a844c4445bfa6395df92a03b6" name="cpupower-debugsource" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="slfo.1.1_1.2"/>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Change to building the package from kernel-source based on
  how the perf package works
- Removed patches:
  * turbostat_makefile_fix_asm_header.patch
  * remove_bits_h.patch
  * x86_perf_makefile_fix_asm_header.patch
- Remove all tarballs and git script
- Use %lang_package
- Correct ix86 to %ix86</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- add rebuild subpackage to trigger rebuild on kernel updates</changelog>
  <changelog author="trenn@suse.de" date="1657022400">- Remove powercap capabilities to patch againt latest kernel sources
  - &gt; still keep the patches, will be removed after trying to get this
    mainline
- Add netlink (libnl-devel) requires</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
</package>
<package pkgid="5ecafd91f60c751888943b2e7dce27d566db956608878ea64e032d89ab20507847b8eb07a8a7e5a3fbb46c13e64f9d767956c0e412a0345173f9339eeb8dd721" name="cracklib-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.11" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="jengelh@inai.de" date="1628683200">- Drop --with-pic, as it has no effect with --disable-static.</changelog>
  <changelog author="pgajdos@suse.com" date="1636027200">- %check: really test the package [bsc#1191736]</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 2.9.8:
  * rules: Drop using register keyword
  * add exec perms
  * translation updates
  * Use what's in the build environment and use a current autoconf
  * util/Makefile.am: fix link with lintl
  * Force grep to treat the input as text when formatting word files</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- version update to 2.9.11
  * Merge fedora patches and man pages
  * Fix missing files in dist tarball, other automake fixes (Leandro Nini)
  * Fix error handling during build of dictionary (yixiangzhike)
  * Fix to localization support (A. Wilcox, nekopsykose)
  * Fix to test utilities (Alexander Kanavin)
  * Translation updates from weblate
  * python: adjust include path for builddir by @thesamesam in #61
  * Make buffer static and avoid returning stack-allocated memory by @drfiemost in #63
- modified patches
  % 0002-cracklib-2.9.2-visibility.patch (refreshed)</changelog>
</package>
<package pkgid="3ff3606055ce9d61e502d86c80c3d043753f81f6fbe2db4274a7cf26091aa4924f2d664b57c504593a3b298fa0262211b6718ff1ab39d28f470b7c4e1bd45a0b" name="cracklib-debugsource" arch="aarch64">
  <version epoch="0" ver="2.9.11" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="jengelh@inai.de" date="1628683200">- Drop --with-pic, as it has no effect with --disable-static.</changelog>
  <changelog author="pgajdos@suse.com" date="1636027200">- %check: really test the package [bsc#1191736]</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 2.9.8:
  * rules: Drop using register keyword
  * add exec perms
  * translation updates
  * Use what's in the build environment and use a current autoconf
  * util/Makefile.am: fix link with lintl
  * Force grep to treat the input as text when formatting word files</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- version update to 2.9.11
  * Merge fedora patches and man pages
  * Fix missing files in dist tarball, other automake fixes (Leandro Nini)
  * Fix error handling during build of dictionary (yixiangzhike)
  * Fix to localization support (A. Wilcox, nekopsykose)
  * Fix to test utilities (Alexander Kanavin)
  * Translation updates from weblate
  * python: adjust include path for builddir by @thesamesam in #61
  * Make buffer static and avoid returning stack-allocated memory by @drfiemost in #63
- modified patches
  % 0002-cracklib-2.9.2-visibility.patch (refreshed)</changelog>
</package>
<package pkgid="820d4fe2444356b2e3249c6bc67128b07483a7e8ffb7d1e03fa471969cb225291f2990f2c1eb680a4be4485fd624ce0d81c4230fbcba8ff9e84ea1026f58fee5" name="cryptsetup-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.1" rel="slfo.1.1_1.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="lnussel@suse.de" date="1661169600">- cryptsetup 2.5.0:
  * Split manual pages into per-action pages and use AsciiDoc format.
  * Remove cryptsetup-reencrypt tool from the project and move reencryption
    to already existing "cryptsetup reencrypt" command.
    If you need to emulate the old cryptsetup-reencrypt binary, use simple
    wrappers script running "exec cryptsetup reencrypt $@".
  * LUKS2: implement --decryption option that allows LUKS removal.
  * Fix decryption operation with --active-name option and restrict
    it to be used only with LUKS2.
  * Do not refresh reencryption digest when not needed.
    This should speed up the reencryption resume process.
  * Store proper resilience data in LUKS2 reencrypt initialization.
    Resuming reencryption now does not require specification of resilience
    type parameters if these are the same as during initialization.
  * Properly wipe the unused area after reencryption with datashift in
    the forward direction.
  * Check datashift value against larger sector size.
    For example, it could cause an issue if misaligned 4K sector appears
    during decryption.
  * Do not allow sector size increase reencryption in offline mode.
  * Do not allow dangerous sector size change during reencryption.
  * Ask the user for confirmation before resuming reencryption.
  * Do not resume reencryption with conflicting parameters.
  * Add --force-offline-reencrypt option.
  * Do not allow nested encryption in LUKS reencrypt.
  * Support all options allowed with luksFormat with encrypt action.
  * Add resize action to integritysetup.
  * Remove obsolete dracut plugin reencryption example.
  * Fix possible keyslot area size overflow during conversion to LUKS2.
  * Allow use of --header option for cryptsetup close.
  * Fix activation of LUKS2 device with integrity and detached header.
  * Add ZEROOUT IOCTL support for crypt_wipe API call.
  * VERITY: set loopback sector size according to dm-verity block sizes.
  * veritysetup: dump device sizes.
  * LUKS2 token: prefer token PIN query before passphrase in some cases.
    When a user provides --token-type or specific --token-id, a token PIN
    query is preferred to a passphrase query.
  * LUKS2 token: allow tokens to be replaced with --token-replace option
    for cryptsetup token command.
  * LUKS2 token: do not continue operation when interrupted in PIN prompt.
  * Add --progress-json parameter to utilities.
  * Add support for --key-slot option in luksResume action.
- move man pages to separate subpackage
- drop backports handling</changelog>
  <changelog author="luca.boccassi@gmail.com" date="1663070400">- Add virtual provides for 'integritysetup' and 'veritysetup' to match
  package names provided by Fedora/RHEL, to allow the same set of
  dependencies to be used across all RPM distributions.</changelog>
  <changelog author="info@paolostivanin.com" date="1669636800">- cryptsetup 2.6.0:
  * Introduce support for handling macOS FileVault2 devices (FVAULT2).
  * libcryptsetup: no longer use global memory locking through mlockall()
  * libcryptsetup: process priority is increased only for key derivation
    (PBKDF) calls.
  * Add new LUKS keyslot context handling functions and API.
  * The volume key may now be extracted using a passphrase, keyfile, or
    token. For LUKS devices, it also returns the volume key after
    a successful crypt_format call.
  * Fix --disable-luks2-reencryption configuration option.
  * cryptsetup: Print a better error message and warning if the format
    produces an image without space available for data.
  * Print error if anti-forensic LUKS2 hash setting is not available.
    If the specified hash was not available, activation quietly failed.
  * Fix internal crypt segment compare routine if the user
    specified cipher in kernel format (capi: prefix).
  * cryptsetup: Add token unassign action.
    This action allows removing token binding on specific keyslot.
  * veritysetup: add support for --use-tasklets option.
    This option sets try_verify_in_tasklet kernel dm-verity option
    (available since Linux kernel 6.0) to allow some performance
    improvement on specific systems.
  * Provide pkgconfig Require.private settings.
    While we do not completely provide static build on udev systems,
    it helps produce statically linked binaries in certain situations.
  * Always update automake library files if autogen.sh is run.
    For several releases, we distributed older automake scripts by mistake.
  * reencryption: Fix user defined moved segment size in LUKS2 decryption.
    The --hotzone-size argument was ignored in cases where the actual data
    size was less than the original LUKS2 data offset.
  * Delegate FIPS mode detection to configured crypto backend.
    System FIPS mode check no longer depends on /etc/system-fips file.
  * Update documentation, including FAQ and man pages.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- cryptsetup 2.6.1
  * bitlk: Fixes for BitLocker-compatible on-disk metadata parser
  * Fix possible iteration overflow in OpenSSL2 PBKDF2 crypto
    backend
  * portability and compilation fixes
  * verity: Fix possible hash offset setting overflow.
  * bitlk: Fix use of startup BEK key on big-endian platforms.
  * Do not initiate encryption (reencryption command) when the
    header and data devices are the same. If data device reduction
    is not requsted, this leads to data corruption since LUKS
    metadata was written over the data device.
  * Fix possible memory leak if crypt_load() fails.
  * Always use passphrases with a minimal 8 chars length for
    benchmarking, as used in some implementation of FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1686744000">- FIPS: Remove not needed libcryptsetup12-hmac package that contains
  the HMAC checksums for integrity checking for FIPS. [bsc#1185116]
  * Remove the cryptsetup-rpmlintrc file.
  * Remove not needed fipscheck dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1686744001">- Enable running the regression test suite.
- Force a regeneration of the man pages from AsciiDoc.
- Add LUKS1 and LUKS2 On-Disk Format Specification pdfs to doc.</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="61f249808ad92daab95384e9784541a935d6aca667e617b064483112564e0d0c997f93143ac9b1c20fb0f5f486bd4c0bf36ab5860cd15e914582715a04cb8e4b" name="cryptsetup-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.1" rel="slfo.1.1_1.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="lnussel@suse.de" date="1661169600">- cryptsetup 2.5.0:
  * Split manual pages into per-action pages and use AsciiDoc format.
  * Remove cryptsetup-reencrypt tool from the project and move reencryption
    to already existing "cryptsetup reencrypt" command.
    If you need to emulate the old cryptsetup-reencrypt binary, use simple
    wrappers script running "exec cryptsetup reencrypt $@".
  * LUKS2: implement --decryption option that allows LUKS removal.
  * Fix decryption operation with --active-name option and restrict
    it to be used only with LUKS2.
  * Do not refresh reencryption digest when not needed.
    This should speed up the reencryption resume process.
  * Store proper resilience data in LUKS2 reencrypt initialization.
    Resuming reencryption now does not require specification of resilience
    type parameters if these are the same as during initialization.
  * Properly wipe the unused area after reencryption with datashift in
    the forward direction.
  * Check datashift value against larger sector size.
    For example, it could cause an issue if misaligned 4K sector appears
    during decryption.
  * Do not allow sector size increase reencryption in offline mode.
  * Do not allow dangerous sector size change during reencryption.
  * Ask the user for confirmation before resuming reencryption.
  * Do not resume reencryption with conflicting parameters.
  * Add --force-offline-reencrypt option.
  * Do not allow nested encryption in LUKS reencrypt.
  * Support all options allowed with luksFormat with encrypt action.
  * Add resize action to integritysetup.
  * Remove obsolete dracut plugin reencryption example.
  * Fix possible keyslot area size overflow during conversion to LUKS2.
  * Allow use of --header option for cryptsetup close.
  * Fix activation of LUKS2 device with integrity and detached header.
  * Add ZEROOUT IOCTL support for crypt_wipe API call.
  * VERITY: set loopback sector size according to dm-verity block sizes.
  * veritysetup: dump device sizes.
  * LUKS2 token: prefer token PIN query before passphrase in some cases.
    When a user provides --token-type or specific --token-id, a token PIN
    query is preferred to a passphrase query.
  * LUKS2 token: allow tokens to be replaced with --token-replace option
    for cryptsetup token command.
  * LUKS2 token: do not continue operation when interrupted in PIN prompt.
  * Add --progress-json parameter to utilities.
  * Add support for --key-slot option in luksResume action.
- move man pages to separate subpackage
- drop backports handling</changelog>
  <changelog author="luca.boccassi@gmail.com" date="1663070400">- Add virtual provides for 'integritysetup' and 'veritysetup' to match
  package names provided by Fedora/RHEL, to allow the same set of
  dependencies to be used across all RPM distributions.</changelog>
  <changelog author="info@paolostivanin.com" date="1669636800">- cryptsetup 2.6.0:
  * Introduce support for handling macOS FileVault2 devices (FVAULT2).
  * libcryptsetup: no longer use global memory locking through mlockall()
  * libcryptsetup: process priority is increased only for key derivation
    (PBKDF) calls.
  * Add new LUKS keyslot context handling functions and API.
  * The volume key may now be extracted using a passphrase, keyfile, or
    token. For LUKS devices, it also returns the volume key after
    a successful crypt_format call.
  * Fix --disable-luks2-reencryption configuration option.
  * cryptsetup: Print a better error message and warning if the format
    produces an image without space available for data.
  * Print error if anti-forensic LUKS2 hash setting is not available.
    If the specified hash was not available, activation quietly failed.
  * Fix internal crypt segment compare routine if the user
    specified cipher in kernel format (capi: prefix).
  * cryptsetup: Add token unassign action.
    This action allows removing token binding on specific keyslot.
  * veritysetup: add support for --use-tasklets option.
    This option sets try_verify_in_tasklet kernel dm-verity option
    (available since Linux kernel 6.0) to allow some performance
    improvement on specific systems.
  * Provide pkgconfig Require.private settings.
    While we do not completely provide static build on udev systems,
    it helps produce statically linked binaries in certain situations.
  * Always update automake library files if autogen.sh is run.
    For several releases, we distributed older automake scripts by mistake.
  * reencryption: Fix user defined moved segment size in LUKS2 decryption.
    The --hotzone-size argument was ignored in cases where the actual data
    size was less than the original LUKS2 data offset.
  * Delegate FIPS mode detection to configured crypto backend.
    System FIPS mode check no longer depends on /etc/system-fips file.
  * Update documentation, including FAQ and man pages.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- cryptsetup 2.6.1
  * bitlk: Fixes for BitLocker-compatible on-disk metadata parser
  * Fix possible iteration overflow in OpenSSL2 PBKDF2 crypto
    backend
  * portability and compilation fixes
  * verity: Fix possible hash offset setting overflow.
  * bitlk: Fix use of startup BEK key on big-endian platforms.
  * Do not initiate encryption (reencryption command) when the
    header and data devices are the same. If data device reduction
    is not requsted, this leads to data corruption since LUKS
    metadata was written over the data device.
  * Fix possible memory leak if crypt_load() fails.
  * Always use passphrases with a minimal 8 chars length for
    benchmarking, as used in some implementation of FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1686744000">- FIPS: Remove not needed libcryptsetup12-hmac package that contains
  the HMAC checksums for integrity checking for FIPS. [bsc#1185116]
  * Remove the cryptsetup-rpmlintrc file.
  * Remove not needed fipscheck dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1686744001">- Enable running the regression test suite.
- Force a regeneration of the man pages from AsciiDoc.
- Add LUKS1 and LUKS2 On-Disk Format Specification pdfs to doc.</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="b28fe64717bb2527e6b74a0da770c07e71206c52f3d31dd7683c1e16b530a76da7dec0506e1bffca8832335482f64f7d8d63a7d65661218718e17c551f93aa9d" name="cups-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.16" rel="slfo.1.1_1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
</package>
<package pkgid="2d3c9532f5c99263319e118d7c2a9dabd15f4bdadfcbeeba8e5003eb6daaf8b8e7197b37adb1f56162f2b617da2446e65226f9e404e8c6e9c10421fdd300f018" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.14.1" rel="slfo.1.1_6.1"/>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * Add patches:
  - curl-CVE-2026-1965.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="1bf7acd5f3ab73b98010b28418d71350e3eea67317c5730bf40e6d9ec3ecc33ba08787495f0ad0a50e4c5669986ba0118c1f4d9dcbf137d2e212d7ff63b31020" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="8.14.1" rel="slfo.1.1_6.1"/>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * Add patches:
  - curl-CVE-2026-1965.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="cfab625240b761837b68d32f67af039719f8142e3afe076f1c1acf2e89a84c29015efb5dd4705dbd85b45e7508dd2af1bb12a8204dff3b43a27e4f2d6938ab03" name="cyrus-sasl-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.28" rel="slfo.1.1_1.2"/>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="465cff68da603ba2e8aad666dc827a672856cf0e73546a81fd5e94bfa5c4892f5205fffc16c9c5e599bcd425a66ccfe24a2ae93cc32ed1343cd2e247cb0c77cf" name="cyrus-sasl-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1.28" rel="slfo.1.1_1.2"/>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="77f107c9bd71fd0f4d0f69e1b651572c15577c93bfa5d835b0c54b8934f7182dfe71d97927bd057358e031fd211f40047bc08f8b97b1a3216e83276ef48a5bfd" name="cyrus-sasl-digestmd5-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.28" rel="slfo.1.1_1.2"/>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="3cb8e4a8ea69016d01d7b710f7fba4a301d5b777bbb56ed38fa993b2d8a25228fb5e61071251e7891610377c282e278e216d794a295e72ef59981971d5a116c7" name="cyrus-sasl-gssapi-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.28" rel="slfo.1.1_1.2"/>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="354fdc932c635750eaafe7533ee97bb9c245b6cf0aabda367c36b4630d7561312f29e1eb286a9c6ec088061862c0502cfa888c28083c04c7a6b089bee3c0e040" name="dbus-1-daemon-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.10" rel="slfo.1.1_1.2"/>
  <changelog author="sflees@suse.de" date="1653566400">- The great dbus package split of 22, in preperation for replacing
  dbus-daemon with dbus-broker currently there is no functional
  difference that will change later, this follows a similar setup
  to RedHat and Debian.
  * dbus-daemon is now in its own separate package
  * Create a dbus-1-common package with all the files and config
    that are shared between the dbus-daemon and dbus-broker
    implementations.
  * Create a dbus-1-tools package with the tools eventually we will
    likely want to move to only recommending this package Redhat and
    Debian have both already gone down this path.</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- version provides
- add split provides
- remove unused/obsolete pre_checkin.sh</changelog>
  <changelog author="dmueller@suse.com" date="1665662400">- Disable asserts (bsc#1087072)</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 1.14.4 (bsc#1204111, CVE-2022-42010,
    bsc#1204112, CVE-2022-42011,
    bsc#1204113, CVE-2022-42012):
  This is a security update for the dbus 1.14.x stable branch, fixing
  denial-of-service issues (CVE-2022-42010, -42011, -42012) and applying
  security hardening (dbus#416).
  Behaviour changes:
  * On Linux, dbus-daemon and other uses of DBusServer now create a
    path-based Unix socket, unix:path=..., when asked to listen on a
    unix:tmpdir=... address. This makes unix:tmpdir=... equivalent to
    unix:dir=... on all platforms.
    Previous versions would have created an abstract socket, unix:abstract=...,
    in this situation.
    This change primarily affects the well-known session bus when run via
    dbus-launch(1) or dbus-run-session(1). The user bus, enabled by configuring
    dbus with --enable-user-session and running it on a systemd system,
    already used path-based Unix sockets and is unaffected by this change.
    This behaviour change prevents a sandbox escape via the session bus socket
    in sandboxing frameworks that can share the network namespace with the host
    system, such as Flatpak.
    This change might cause a regression in situations where the abstract socket
    is intentionally shared between the host system and a chroot or container,
    such as some use-cases of schroot(1). That regression can be resolved by
    using a bind-mount to share either the D-Bus socket, or the whole /tmp
    directory, with the chroot or container.
    (dbus#416, Simon McVittie)
  * Denial of service fixes:
  - Evgeny Vereshchagin discovered several ways in which an authenticated
    local attacker could cause a crash (denial of service) in
    dbus-daemon --system or a custom DBusServer. In uncommon configurations
    these could potentially be carried out by an authenticated remote attacker.
  - An invalid array of fixed-length elements where the length of the array
    is not a multiple of the length of the element would cause an assertion
    failure in debug builds or an out-of-bounds read in production builds.
    This was a regression in version 1.3.0.
    (dbus#413, CVE-2022-42011; Simon McVittie)
  - A syntactically invalid type signature with incorrectly nested parentheses
    and curly brackets would cause an assertion failure in debug builds.
    Similar messages could potentially result in a crash or incorrect message
    processing in a production build, although we are not aware of a practical
    example. (dbus#418, CVE-2022-42010; Simon McVittie)
  - A message in non-native endianness with out-of-band Unix file descriptors
    would cause a use-after-free and possible memory corruption in production
    builds, or an assertion failure in debug builds. This was a regression in
    version 1.3.0. (dbus#417, CVE-2022-42012; Simon McVittie)
  - Preserve errno on failure to open /proc/self/oom_score_adj
    (dbus!285, Gentoo#834725; Mike Gilbert)
  - On Linux, don't log warnings if oom_score_adj is read-only but does not
    need to be changed (dbus!291, Simon McVittie)
  - Slightly improve error-handling for inotify
    (dbus!235, Simon McVittie)
  - Don't crash if dbus-daemon is asked to watch more than 128 directories
    for changes (dbus!302, Jan Tojnar)</changelog>
  <changelog author="dmueller@suse.com" date="1675944000">- update to 1.14.6:
  * Fix an incorrect assertion that could be used to crash
    dbus-daemon or other users of DBusServer prior to
    authentication, if libdbus was compiled with assertions
    enabled.
    We recommend that production builds of dbus, for example in
    OS distributions, should be compiled with checks but
    without assertions.
  * When connected to a dbus-broker, stop dbus-monitor from
    incorrectly replying to Peer method calls that were sent to the
    dbus-broker with a NULL destination
  * Fix out-of-bounds varargs read in the dbus-daemon's config-
    parser.  This is not attacker-triggerable and appears to be
    harmless in practice, but is technically undefined behaviour
    and is detected as such by AddressSanitizer.
  * Avoid a data race in multi-threaded use of DBusCounter
  * Fix a crash with some glibc versions when non-auditable
    SELinux events are logged (dbus!386, Jeremi Piotrowski)
  * If dbus_message_demarshal() runs out of memory while
    validating a message, report it as NoMemory rather than
    InvalidArgs (dbus#420, Simon McVittie)
  * Use C11 _Alignof if available, for better standards-
    compliance
  * Stop including an outdated copy of pkg.m4 in the git tree
  * Documentation:
  * Fix the test-apparmor-activation test after dbus#416
  * Internal changes:
  * Fix CI builds with recent git versions (dbus#447, Simon
    McVittie)
- switch to using multibuild</changelog>
  <changelog author="dimstar@opensuse.org" date="1676030400">- Fix multibuild: do not mention main flavor in multibuild, as it
  is implicit built.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1676808000">- Packaging changes:
  * Move missed scriptlets and links for dbus.socket to common
  * Move sysusers and tmpfiles scriptlets, and ghost files to
    common
  * Move dbus-launch man page to correct package</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
</package>
<package pkgid="52ffd17d5f2d94480102a3adf119f2b8ee1d662b805e88784b4262fcc97d64f7198a2a95137c33173857f97930b60ccd47345a9565e6b50b877ca0cdc48c7696" name="dbus-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.10" rel="slfo.1.1_1.2"/>
  <changelog author="sflees@suse.de" date="1653566400">- The great dbus package split of 22, in preperation for replacing
  dbus-daemon with dbus-broker currently there is no functional
  difference that will change later, this follows a similar setup
  to RedHat and Debian.
  * dbus-daemon is now in its own separate package
  * Create a dbus-1-common package with all the files and config
    that are shared between the dbus-daemon and dbus-broker
    implementations.
  * Create a dbus-1-tools package with the tools eventually we will
    likely want to move to only recommending this package Redhat and
    Debian have both already gone down this path.</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- version provides
- add split provides
- remove unused/obsolete pre_checkin.sh</changelog>
  <changelog author="dmueller@suse.com" date="1665662400">- Disable asserts (bsc#1087072)</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 1.14.4 (bsc#1204111, CVE-2022-42010,
    bsc#1204112, CVE-2022-42011,
    bsc#1204113, CVE-2022-42012):
  This is a security update for the dbus 1.14.x stable branch, fixing
  denial-of-service issues (CVE-2022-42010, -42011, -42012) and applying
  security hardening (dbus#416).
  Behaviour changes:
  * On Linux, dbus-daemon and other uses of DBusServer now create a
    path-based Unix socket, unix:path=..., when asked to listen on a
    unix:tmpdir=... address. This makes unix:tmpdir=... equivalent to
    unix:dir=... on all platforms.
    Previous versions would have created an abstract socket, unix:abstract=...,
    in this situation.
    This change primarily affects the well-known session bus when run via
    dbus-launch(1) or dbus-run-session(1). The user bus, enabled by configuring
    dbus with --enable-user-session and running it on a systemd system,
    already used path-based Unix sockets and is unaffected by this change.
    This behaviour change prevents a sandbox escape via the session bus socket
    in sandboxing frameworks that can share the network namespace with the host
    system, such as Flatpak.
    This change might cause a regression in situations where the abstract socket
    is intentionally shared between the host system and a chroot or container,
    such as some use-cases of schroot(1). That regression can be resolved by
    using a bind-mount to share either the D-Bus socket, or the whole /tmp
    directory, with the chroot or container.
    (dbus#416, Simon McVittie)
  * Denial of service fixes:
  - Evgeny Vereshchagin discovered several ways in which an authenticated
    local attacker could cause a crash (denial of service) in
    dbus-daemon --system or a custom DBusServer. In uncommon configurations
    these could potentially be carried out by an authenticated remote attacker.
  - An invalid array of fixed-length elements where the length of the array
    is not a multiple of the length of the element would cause an assertion
    failure in debug builds or an out-of-bounds read in production builds.
    This was a regression in version 1.3.0.
    (dbus#413, CVE-2022-42011; Simon McVittie)
  - A syntactically invalid type signature with incorrectly nested parentheses
    and curly brackets would cause an assertion failure in debug builds.
    Similar messages could potentially result in a crash or incorrect message
    processing in a production build, although we are not aware of a practical
    example. (dbus#418, CVE-2022-42010; Simon McVittie)
  - A message in non-native endianness with out-of-band Unix file descriptors
    would cause a use-after-free and possible memory corruption in production
    builds, or an assertion failure in debug builds. This was a regression in
    version 1.3.0. (dbus#417, CVE-2022-42012; Simon McVittie)
  - Preserve errno on failure to open /proc/self/oom_score_adj
    (dbus!285, Gentoo#834725; Mike Gilbert)
  - On Linux, don't log warnings if oom_score_adj is read-only but does not
    need to be changed (dbus!291, Simon McVittie)
  - Slightly improve error-handling for inotify
    (dbus!235, Simon McVittie)
  - Don't crash if dbus-daemon is asked to watch more than 128 directories
    for changes (dbus!302, Jan Tojnar)</changelog>
  <changelog author="dmueller@suse.com" date="1675944000">- update to 1.14.6:
  * Fix an incorrect assertion that could be used to crash
    dbus-daemon or other users of DBusServer prior to
    authentication, if libdbus was compiled with assertions
    enabled.
    We recommend that production builds of dbus, for example in
    OS distributions, should be compiled with checks but
    without assertions.
  * When connected to a dbus-broker, stop dbus-monitor from
    incorrectly replying to Peer method calls that were sent to the
    dbus-broker with a NULL destination
  * Fix out-of-bounds varargs read in the dbus-daemon's config-
    parser.  This is not attacker-triggerable and appears to be
    harmless in practice, but is technically undefined behaviour
    and is detected as such by AddressSanitizer.
  * Avoid a data race in multi-threaded use of DBusCounter
  * Fix a crash with some glibc versions when non-auditable
    SELinux events are logged (dbus!386, Jeremi Piotrowski)
  * If dbus_message_demarshal() runs out of memory while
    validating a message, report it as NoMemory rather than
    InvalidArgs (dbus#420, Simon McVittie)
  * Use C11 _Alignof if available, for better standards-
    compliance
  * Stop including an outdated copy of pkg.m4 in the git tree
  * Documentation:
  * Fix the test-apparmor-activation test after dbus#416
  * Internal changes:
  * Fix CI builds with recent git versions (dbus#447, Simon
    McVittie)
- switch to using multibuild</changelog>
  <changelog author="dimstar@opensuse.org" date="1676030400">- Fix multibuild: do not mention main flavor in multibuild, as it
  is implicit built.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1676808000">- Packaging changes:
  * Move missed scriptlets and links for dbus.socket to common
  * Move sysusers and tmpfiles scriptlets, and ghost files to
    common
  * Move dbus-launch man page to correct package</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
</package>
<package pkgid="5f01960177a46d7135b0d8f01ba2feed778ca2725519318a32e7d5525ec73afc4dd355003ad46bf2e4f4991111c4c17d2e2541dadd1e90c52dfb6a656778d571" name="dbus-1-debugsource" arch="aarch64">
  <version epoch="0" ver="1.14.10" rel="slfo.1.1_1.2"/>
  <changelog author="sflees@suse.de" date="1653566400">- The great dbus package split of 22, in preperation for replacing
  dbus-daemon with dbus-broker currently there is no functional
  difference that will change later, this follows a similar setup
  to RedHat and Debian.
  * dbus-daemon is now in its own separate package
  * Create a dbus-1-common package with all the files and config
    that are shared between the dbus-daemon and dbus-broker
    implementations.
  * Create a dbus-1-tools package with the tools eventually we will
    likely want to move to only recommending this package Redhat and
    Debian have both already gone down this path.</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- version provides
- add split provides
- remove unused/obsolete pre_checkin.sh</changelog>
  <changelog author="dmueller@suse.com" date="1665662400">- Disable asserts (bsc#1087072)</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 1.14.4 (bsc#1204111, CVE-2022-42010,
    bsc#1204112, CVE-2022-42011,
    bsc#1204113, CVE-2022-42012):
  This is a security update for the dbus 1.14.x stable branch, fixing
  denial-of-service issues (CVE-2022-42010, -42011, -42012) and applying
  security hardening (dbus#416).
  Behaviour changes:
  * On Linux, dbus-daemon and other uses of DBusServer now create a
    path-based Unix socket, unix:path=..., when asked to listen on a
    unix:tmpdir=... address. This makes unix:tmpdir=... equivalent to
    unix:dir=... on all platforms.
    Previous versions would have created an abstract socket, unix:abstract=...,
    in this situation.
    This change primarily affects the well-known session bus when run via
    dbus-launch(1) or dbus-run-session(1). The user bus, enabled by configuring
    dbus with --enable-user-session and running it on a systemd system,
    already used path-based Unix sockets and is unaffected by this change.
    This behaviour change prevents a sandbox escape via the session bus socket
    in sandboxing frameworks that can share the network namespace with the host
    system, such as Flatpak.
    This change might cause a regression in situations where the abstract socket
    is intentionally shared between the host system and a chroot or container,
    such as some use-cases of schroot(1). That regression can be resolved by
    using a bind-mount to share either the D-Bus socket, or the whole /tmp
    directory, with the chroot or container.
    (dbus#416, Simon McVittie)
  * Denial of service fixes:
  - Evgeny Vereshchagin discovered several ways in which an authenticated
    local attacker could cause a crash (denial of service) in
    dbus-daemon --system or a custom DBusServer. In uncommon configurations
    these could potentially be carried out by an authenticated remote attacker.
  - An invalid array of fixed-length elements where the length of the array
    is not a multiple of the length of the element would cause an assertion
    failure in debug builds or an out-of-bounds read in production builds.
    This was a regression in version 1.3.0.
    (dbus#413, CVE-2022-42011; Simon McVittie)
  - A syntactically invalid type signature with incorrectly nested parentheses
    and curly brackets would cause an assertion failure in debug builds.
    Similar messages could potentially result in a crash or incorrect message
    processing in a production build, although we are not aware of a practical
    example. (dbus#418, CVE-2022-42010; Simon McVittie)
  - A message in non-native endianness with out-of-band Unix file descriptors
    would cause a use-after-free and possible memory corruption in production
    builds, or an assertion failure in debug builds. This was a regression in
    version 1.3.0. (dbus#417, CVE-2022-42012; Simon McVittie)
  - Preserve errno on failure to open /proc/self/oom_score_adj
    (dbus!285, Gentoo#834725; Mike Gilbert)
  - On Linux, don't log warnings if oom_score_adj is read-only but does not
    need to be changed (dbus!291, Simon McVittie)
  - Slightly improve error-handling for inotify
    (dbus!235, Simon McVittie)
  - Don't crash if dbus-daemon is asked to watch more than 128 directories
    for changes (dbus!302, Jan Tojnar)</changelog>
  <changelog author="dmueller@suse.com" date="1675944000">- update to 1.14.6:
  * Fix an incorrect assertion that could be used to crash
    dbus-daemon or other users of DBusServer prior to
    authentication, if libdbus was compiled with assertions
    enabled.
    We recommend that production builds of dbus, for example in
    OS distributions, should be compiled with checks but
    without assertions.
  * When connected to a dbus-broker, stop dbus-monitor from
    incorrectly replying to Peer method calls that were sent to the
    dbus-broker with a NULL destination
  * Fix out-of-bounds varargs read in the dbus-daemon's config-
    parser.  This is not attacker-triggerable and appears to be
    harmless in practice, but is technically undefined behaviour
    and is detected as such by AddressSanitizer.
  * Avoid a data race in multi-threaded use of DBusCounter
  * Fix a crash with some glibc versions when non-auditable
    SELinux events are logged (dbus!386, Jeremi Piotrowski)
  * If dbus_message_demarshal() runs out of memory while
    validating a message, report it as NoMemory rather than
    InvalidArgs (dbus#420, Simon McVittie)
  * Use C11 _Alignof if available, for better standards-
    compliance
  * Stop including an outdated copy of pkg.m4 in the git tree
  * Documentation:
  * Fix the test-apparmor-activation test after dbus#416
  * Internal changes:
  * Fix CI builds with recent git versions (dbus#447, Simon
    McVittie)
- switch to using multibuild</changelog>
  <changelog author="dimstar@opensuse.org" date="1676030400">- Fix multibuild: do not mention main flavor in multibuild, as it
  is implicit built.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1676808000">- Packaging changes:
  * Move missed scriptlets and links for dbus.socket to common
  * Move sysusers and tmpfiles scriptlets, and ghost files to
    common
  * Move dbus-launch man page to correct package</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
</package>
<package pkgid="f2aa648a302bd38f65f2125575b308c9eaa02c83ef4c6b504e1aeb3f4630fceb40d55d33931b111f7db79b89d0fef121f48ec69319b53e7e6ceab2a526ecb378" name="dbus-1-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.10" rel="slfo.1.1_1.2"/>
  <changelog author="sflees@suse.de" date="1653566400">- The great dbus package split of 22, in preperation for replacing
  dbus-daemon with dbus-broker currently there is no functional
  difference that will change later, this follows a similar setup
  to RedHat and Debian.
  * dbus-daemon is now in its own separate package
  * Create a dbus-1-common package with all the files and config
    that are shared between the dbus-daemon and dbus-broker
    implementations.
  * Create a dbus-1-tools package with the tools eventually we will
    likely want to move to only recommending this package Redhat and
    Debian have both already gone down this path.</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- version provides
- add split provides
- remove unused/obsolete pre_checkin.sh</changelog>
  <changelog author="dmueller@suse.com" date="1665662400">- Disable asserts (bsc#1087072)</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 1.14.4 (bsc#1204111, CVE-2022-42010,
    bsc#1204112, CVE-2022-42011,
    bsc#1204113, CVE-2022-42012):
  This is a security update for the dbus 1.14.x stable branch, fixing
  denial-of-service issues (CVE-2022-42010, -42011, -42012) and applying
  security hardening (dbus#416).
  Behaviour changes:
  * On Linux, dbus-daemon and other uses of DBusServer now create a
    path-based Unix socket, unix:path=..., when asked to listen on a
    unix:tmpdir=... address. This makes unix:tmpdir=... equivalent to
    unix:dir=... on all platforms.
    Previous versions would have created an abstract socket, unix:abstract=...,
    in this situation.
    This change primarily affects the well-known session bus when run via
    dbus-launch(1) or dbus-run-session(1). The user bus, enabled by configuring
    dbus with --enable-user-session and running it on a systemd system,
    already used path-based Unix sockets and is unaffected by this change.
    This behaviour change prevents a sandbox escape via the session bus socket
    in sandboxing frameworks that can share the network namespace with the host
    system, such as Flatpak.
    This change might cause a regression in situations where the abstract socket
    is intentionally shared between the host system and a chroot or container,
    such as some use-cases of schroot(1). That regression can be resolved by
    using a bind-mount to share either the D-Bus socket, or the whole /tmp
    directory, with the chroot or container.
    (dbus#416, Simon McVittie)
  * Denial of service fixes:
  - Evgeny Vereshchagin discovered several ways in which an authenticated
    local attacker could cause a crash (denial of service) in
    dbus-daemon --system or a custom DBusServer. In uncommon configurations
    these could potentially be carried out by an authenticated remote attacker.
  - An invalid array of fixed-length elements where the length of the array
    is not a multiple of the length of the element would cause an assertion
    failure in debug builds or an out-of-bounds read in production builds.
    This was a regression in version 1.3.0.
    (dbus#413, CVE-2022-42011; Simon McVittie)
  - A syntactically invalid type signature with incorrectly nested parentheses
    and curly brackets would cause an assertion failure in debug builds.
    Similar messages could potentially result in a crash or incorrect message
    processing in a production build, although we are not aware of a practical
    example. (dbus#418, CVE-2022-42010; Simon McVittie)
  - A message in non-native endianness with out-of-band Unix file descriptors
    would cause a use-after-free and possible memory corruption in production
    builds, or an assertion failure in debug builds. This was a regression in
    version 1.3.0. (dbus#417, CVE-2022-42012; Simon McVittie)
  - Preserve errno on failure to open /proc/self/oom_score_adj
    (dbus!285, Gentoo#834725; Mike Gilbert)
  - On Linux, don't log warnings if oom_score_adj is read-only but does not
    need to be changed (dbus!291, Simon McVittie)
  - Slightly improve error-handling for inotify
    (dbus!235, Simon McVittie)
  - Don't crash if dbus-daemon is asked to watch more than 128 directories
    for changes (dbus!302, Jan Tojnar)</changelog>
  <changelog author="dmueller@suse.com" date="1675944000">- update to 1.14.6:
  * Fix an incorrect assertion that could be used to crash
    dbus-daemon or other users of DBusServer prior to
    authentication, if libdbus was compiled with assertions
    enabled.
    We recommend that production builds of dbus, for example in
    OS distributions, should be compiled with checks but
    without assertions.
  * When connected to a dbus-broker, stop dbus-monitor from
    incorrectly replying to Peer method calls that were sent to the
    dbus-broker with a NULL destination
  * Fix out-of-bounds varargs read in the dbus-daemon's config-
    parser.  This is not attacker-triggerable and appears to be
    harmless in practice, but is technically undefined behaviour
    and is detected as such by AddressSanitizer.
  * Avoid a data race in multi-threaded use of DBusCounter
  * Fix a crash with some glibc versions when non-auditable
    SELinux events are logged (dbus!386, Jeremi Piotrowski)
  * If dbus_message_demarshal() runs out of memory while
    validating a message, report it as NoMemory rather than
    InvalidArgs (dbus#420, Simon McVittie)
  * Use C11 _Alignof if available, for better standards-
    compliance
  * Stop including an outdated copy of pkg.m4 in the git tree
  * Documentation:
  * Fix the test-apparmor-activation test after dbus#416
  * Internal changes:
  * Fix CI builds with recent git versions (dbus#447, Simon
    McVittie)
- switch to using multibuild</changelog>
  <changelog author="dimstar@opensuse.org" date="1676030400">- Fix multibuild: do not mention main flavor in multibuild, as it
  is implicit built.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1676808000">- Packaging changes:
  * Move missed scriptlets and links for dbus.socket to common
  * Move sysusers and tmpfiles scriptlets, and ghost files to
    common
  * Move dbus-launch man page to correct package</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
</package>
<package pkgid="f777f783b3157f575989e00cb89eac2ec153e99763b59d44eb98dc7bf295a808b272d698487be545d9eada132a9675eccc495953c4ea0cc7701373377671bb6a" name="device-mapper-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="slfo.1.1_1.3"/>
  <changelog author="heming.zhao@suse.com" date="1648641600">-  lvm2-monitor.service reported warning messages for udev didn't finish to set up device database (bsc#1197183)
  + 0025-vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Update lvm2 from LVM2.2.03.15 to LVM2.2.03.16
  * ** WHATS_NEW for 2.03.16 ***
  Version 2.03.16 - 18th May 2022
  ===============================
    Fix segfault when handling selection with historical LVs.
    Add support --vdosettings with lvcreate, lvconvert, lvchange.
    Filtering multipath devices respects blacklist setting from multipath configuration.
    lvmdevices support for removing by device id using --deviceidtype and --deldev.
    Display writecache block size with lvs -o writecache_block_size.
    Improve cachesettings description in man lvmcache.
    Fix lossing of delete message on thin-pool extension.
- Drop patches that have been merged into upstream
  - 0001-post-release.patch
  - 0002-asan-fix-some-reports-from-libasan.patch
  - 0003-make-generate.patch
  - 0004-tests-udev-pvscan-vgchange-fix-service-wait.patch
  - 0005-devices-file-do-not-clear-PVID-of-unread-devices.patch
  - 0006-tests-skip-vgchange-pvs-online.sh-on-rhel5.patch
  - 0007-dev_manager-fix-dm_task_get_device_list.patch
  - 0008-dev_manager-failing-status-is-not-internal-error.patch
  - 0009-clang-add-extra-check.patch
  - 0010-clang-possible-better-compilation-with-musl-c.patch
  - 0011-dev_manager-do-not-query-for-open_count.patch
  - 0012-dev_manager-use-list-info-for-preset-devs.patch
  - 0013-man-lvmcache-add-more-writecache-cachesettings-info.patch
  - 0014-man-update-cachesettings-option-description.patch
  - 0015-man-lvmcache-mention-writecache-memory-usage.patch
  - 0016-writecache-display-block-size-from-lvs.patch
  - 0017-devices-simplify-dev_cache_get_by_devt.patch
  - 0018-devices-drop-incorrect-paths-from-aliases-list.patch
  - 0019-devices-initial-use-of-existing-option.patch
  - 0020-devices-fix-dev_name-assumptions.patch
  - 0021-devices-use-dev-cache-aliases-handling-from-label-sc.patch
  - 0022-devices-only-close-PVs-on-LVs-when-scan_lvs-is-enabl.patch
  - 0023-writecache-check-memory-usage.patch
  - 0024-pvscan-don-t-use-udev-for-external-device-info.patch
  - 0025-vgchange-monitor-don-t-use-udev-info.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new man: lvm_import_vdo.8 dmfilemapd.8
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
- lvm.conf
  - align upstream style, comment out default values</changelog>
  <changelog author="heming.zhao@suse.com" date="1663761600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667476800">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695038400">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * ** WHATS_NEW from 2.03.17 to 2.03.22 ***
  version 2.03.22 - 02nd August 2023
  ==================================
    Fix pv_major/pv_minor report field types so they are integers, not strings.
    Add lvmdevices --delnotfound to delete entries for missing devices.
    Always use cachepool name for metadata backup LV for lvconvert --repair.
    Make metadata backup LVs read-only after pool's lvconvert --repair.
    Improve VDO and Thin support with lvmlockd.
    Handle 'lvextend --usepolicies' for pools for all activation variants.
    Fix memleak in vgchange autoactivation setup.
    Update py-compile building script.
    Support conversion from thick to fully provisioned thin LV.
    Cache/Thin-pool can use error and zero volumes for testing.
    Individual thin volume can be cached, but cannot take snapshot.
    Better internal support for handling error and zero target (for testing).
    Resize COW above trimmed maximal size is does not return error.
    Support parsing of vdo geometry format version 4.
    Add lvm.conf thin_restore and cache_restore settings.
    Handle multiple mounts while resizing volume with a FS.
    Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
    Enhance lvm_import_vdo and use snapshot when converting VDO volume.
    Fix parsing of VDO metadata.
    Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
    Allow snapshots of raid+integrity LV.
    Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  version 2.03.21 - 21st April 2023
  =================================
    Fix activation of vdo-pool for with 0 length headers (converted pools).
    Avoid printing internal init messages when creation integration devices.
    Allow (write)cache over raid+integrity LV.
  version 2.03.20 - 21st March 2023
  =================================
    Fix segfault if using -S|--select with log/report_command_log=1 setting.
    Configure now fails when requested lvmlockd dependencies are missing.
    Add some configure Gentoo enhancements for static builds.
  version 2.03.19 - 21st February 2023
  ====================================
    Configure supports --with-systemd-run executed from udev rules.
    Enhancement for build with MuslC systemd and non-bash system shells (dash).
    Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
    Ensure udev is processing origin LV before its thick snapshots LVs.
    Fix and improve runtime memory size detection for VDO volumes.
  version 2.03.18 - 22nd December 2022
  ====================================
    Fix issues reported by coverity scan.
    Fix warning for thin pool overprovisioning on lvextend (2.03.17).
    Add support for writecache metadata_only and pause_writeback settings.
    Fix missing error messages in lvmdbusd.
  Version 2.03.17 - 10th November 2022
  ====================================
    Add new options (--fs, --fsmode) for FS handling when resizing LVs.
    Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
    Fix lv_active field type to binary so --select and --binary applies properly.
    Switch to use mallinfo2 and use it only with glibc.
    Error out in lvm shell if using a cmd argument not supported in the shell.
    Fix lvm shell's lastlog command to report previous pre-command failures.
    Extend VDO and VDOPOOL without flushing and locking fs.
    Add --valuesonly option to lvmconfig to print only values without keys.
    Updates configure with recent autoconf tooling.
    Fix lvconvert --test --type vdo-pool execution.
    Add json_std output format for more JSON standard compliant version of output.
    Fix vdo_slab_size_mb value for converted VDO volume.
    Fix many corner cases in device_id, including handling of S/N duplicates.
    Fix various issues in lvmdbusd.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="75936dc72e19238d3838db2152ea102fb2113060ccc45a6918df0e9b784d94b1da21c084014c5f937f342ab2e31b85589a25ff4caa5bfcae4ef4d9c21c69f2a2" name="dhcp-client-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.4.2.P1" rel="slfo.1.1_1.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="4048aaafe8017e0cb2b8be7f0813ab45b9a5cf85247d74e4bd2000768d3f07a9c6c5100f2e6c0892064455e2a4fbc78dc5d0f690c21210b90741a3147d8ead94" name="dhcp-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.4.2.P1" rel="slfo.1.1_1.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="e7f22af2794a88ae07dbc76a5d1aa8ca2dcfddd11dbbb09d5ff6440a13fbbea928164ce31b49fd9d9364c83d327e415c6ae6771228a0997b813cf19875df366d" name="dhcp-debugsource" arch="aarch64">
  <version epoch="0" ver="4.4.2.P1" rel="slfo.1.1_1.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="295a153de1b7edab1d6ff413ca3d14a55659d58a274df07cff49ce8c4c1a371279fe3e309f058f98be70e065a9c7dd1824442ce7610c333e1fd1f97fd12ec28e" name="dialog-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
  <changelog author="sbrabec@suse.com" date="1541592000">- Fix mangled Hindi translation (bsc#1115005).</changelog>
  <changelog author="werner@suse.de" date="1550059200">- Update to version 1.3-20190211
  + modify to work with ncurses' threaded-library, which does not allow
    assignment to LINES/COLS (report by Marcus Roeckrath).
  + correct clearing after text in progressbox from 2018/06/21 changes
    for resizing (reports by David Boyd, Alan Somers).
  + improved configure macros CF_GNU_SOURCE, CF_POSIX_C_SOURCE,
    CF_XOPEN_SOURCE
  + update config.guess, config.sub
- Includes also version 1.3-20181107
  + convert ja.po to UTF-8 for consistency (suggested by Stanislav
    Brabec).
  + repair mis-encoded hi.po (report/analysis by Stanislav Brabec).
- Includes also version 1.3-20181022
  + improved configure macros CF_CC_ENV_FLAGS, CF_LD_RPATH_OPT,
    CF_LIBRARY_PATH, CF_SHARED_OPTS, CF_WITH_MAN2HTML,
    CF_WITH_VERSIONED_SYMS from ncurses
  + add ast.po, from
    http://translationproject.org/latest/dialog/
- Includes also version 1.3-20180621
  + improve file-offset computation in textbox.c (Werner Fink).
  + fix an overlooked case with real_auto_size() to maximize when
    height or width is given as -1.
  + build-fixes for configure options "--disable-Xdialog2" and
    "--disable-form"
  + add traces for each widget to show its parameters.
  + modify color scheme for mixedgauge to use the dialog window colors,
    like the captions.
  + fix a too-small malloc in the mixedgauge widget.
  + fix a use-after-free in dlg_remove_callback().
  + improve handling of SIGWINCH for several widgets (Debian #865840).
    + menubox, the point of the Debian report was that it would be nice
    to increase the window size if the terminal size increases.  Did
    that as a special case less problematic than decreasing the
    terminal size.  Added samples/menubox11 to demonstrate by
    comparison with menubox10 a problem with debconf which puts extra
    newlines in the caption that interfere with autowrap.
    + progressbox and derived prgbox, programbox, now handle resizing.
    + yesno, window was cleared
  + add dlg_ttysize() to support new options, allowing scripts to obtain
    some text-formatting details without initializing the terminal.
  + add options --print-text-only, and --print-text-size for scripts that
    adjust the widget size according to how the captions are formatted.
  + improve dialog.pl:
    + add demo.pl, to demonstrate the functions
    + quote/escape string parameters passed to dialog.
    + ensure all "integer" parameters are really integers.
    + use actual screensize for list captions rather than assuming 24
    lines.
  + when trimming blanks, treat unconverted tabs the same as spaces.
  + correct parameter to test when trimming blanks from the script,
    e.g., with "--trim" (report by Jarno Suni).
  + improve documentation of the various whitespace-filtering options,
    to show which take precedence (Debian #867536, cf: Debian #102942).
  + modify msgbox.c, yesno.c to bind SCROLLKEY_BINDINGS before
    TRAVERSE_BINDINGS so that up/down arrow will by default scroll the
    message up/down rather than be aliases for tab-traversal (report by
    Fredrik Kers).
  + modify dump_one_binding() to show when a binding is overridden.
  + improve format of trace-file, making comment-syntax consistent,
    as well as showing argv-splitting as a series of comments.
  + modify dlg_string_to_argv() to change the quoting behavior to be
    more consistent with shell behavior (patch by Denilson Sa Maia).
  + modify dlg_getc() to return ESC when a timeout expires, notifying
    callers that a quit occurred rather than exiting the application
    (suggested by Rodrigo Freitas).
  + modify handle_inputs() to ensure cursor-visibility is restored when
    there is no input character available (report by Guillaume Vareille).
  + improve comment in manual page regarding which widgets can use the
    "--help-button" (prompted by discussion with Csanyi Pal).
  + add a check for valid object pointer in tailbox's main loop since
    the getc-callback may have been freed within ui_getc.c (report by
    "David").
  + improved configure macros for ncurses: CF_GNU_SOURCE, CF_SHARED_OPTS,
    CF_CURSES_LIBS, CF_CURSES_FUNCS, CF_NCURSES_CONFIG
  + improved configure script checks for groff vs man2html:
    CF_PROG_GROFF and CF_WITH_MAN2HTML
  + build-fix from lynx for AM_WITH_NLS configure macro
  + update config.guess, config.sub
- Remove fix for Hindi translation as now upstream
- Remove patch textbox-file_size.patch now upstream
- Remove dialog.ko.po.bz2 as ko.po now upstream
- Modify patch dialog-1.2-20121230.dif</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="werner@suse.de" date="1616068800">- Update to version 1.3-20210306
  + add several usage-messages to dialog.pot
  + improve configure-check for ld searchpath on HP-UX and Solaris.
  + fix a few cppcheck warnings
  + updated eo.po, fi.po, pt.po, sq.po, sv.po, ru.po, uk.po, zh_CN.po
    from http://translationproject.org/latest/dialog/
  + updated dialog.pot
  + add option --no-hot-list, to allow suppressing the hotkey feature
    from lists.
  + increase minimum height of inputbox to avoid input field overlapping
    with the button-box (report by Victor Ananjevsky).
  + modify options-parsing to permit a "no" on any boolean option and
    deprecating the "no" options without a "-" , e.g., generalizing on
    "--nook" equivalence to "--no-ok".
  + minor spelling fixes, per codespell
  + update configure macros, for quoting/escaping fixes per shellcheck
  + update config.guess, config.sub
  + modify configure script's compiler check to work around Xcode's
    useless aliases for standard C.
  + enable keep-tite feature for NetBSD 8 and up; earlier releases would
    dump core.
  &gt; new features/fixes (Glenn Herteg)
  + add option "--cursor-off-label"
  + add option "--erase-on-exit"
  + fix errata in manpage.
  + fix logic: dlg_button_to_char() would return wrong value if no
    uppercase was found
  + add DIALOG_TIMEOUT to sample scripts, and use report-button more
    consistently to handle unexpected exit-status values.
  + add dlg_getenv_num() and dlg_getenv_str().
  + add DLG_EXIT_TIMEOUT to allow scripts to exit on an expired timeout
    with an exit-status different from DLG_EXIT_ERROR or DLG_EXIT_ESC
    (patch by Norbert Koch).
  + modify dlg_ok_label() and dlg_ok_labels() to ignore --no-ok if all
    buttons would be omitted.
  + add/use dlg_der_window() to account for derived windows just like
    subwindows, to fix regression in dlg_getc() in fselect/dselect
    widget.
  + modify several widgets to make their handling of --no-ok consistent
    with the majority of the widgets: editbox.c, menubox.c, msgbox.c,
    rangebox.c, textbox.c, timebox.c
  + add ^D as binding for new virtual key DLGK_LEAVE, which will close
    the current dialog by activating the currently-selected button.
  + improve manual-page description of --no-ok option (reports by
    Hans Mueller, Gil Delescluse).
  + modify configure script to make Solaris -R rpath feature work
  + fix regression in dlg_getc() caused by not taking into account
    subwindows used for input (report by Michael Wihl).
  + add validity-checks for window pointer (report/testcase by Michael
    Wihl).
  + improve configure macros:
    CF_CLANG_COMPILER: apply compiler-flags needed for test.
    CF_WITH_SCREEN_PDCURSES: use this to reduce X11-checks.
  + amend initialization for dlg_getc to fix regression in pause widget
    from 2020/03/27 changes (reports by Aidan Tessier, Norbert Koch,
    Josmar Pierri).
  + improve configure macros:
    CF_CLANG_COMPILER: split-out check for -Qunused-arguments to ensure
    that clang supports it.  IBM xlclang does not.
    CF_MIXEDCASE_FILENAMES: when cross-compiling to darwin (macOS),
    assume the filesystem doesn't support mixed-case
  + modify init_dialog's initialization of tab_len and aspect_ratio to
    avoid overwriting initialization done in process_common_options
    (report/patch by Rainer Weikusat, Debian #970508).
  + fix out-of-order description for --tailbox vs --rangebox in manpage
    (report by Glenn Herteg).
  + updated configure-macros: compiler-warnings and shared-library
    options.  Changed configure --with-warnings to --enable-warnings for
    consistency.
  + update config.guess
  + updated sq.po from http://translationproject.org/latest/dialog/
  + add clarification in manual page to show when the single/double
    quotes may be needed (prompted by discussion with Danilo G Baio).
  + fix an extra ".exe" in makefile.in which prevented Cygwin build.
  + fix most cppcheck warnings
  + tailbox/tailboxbg's exit-button now works with mouse-clicks
  + fix repainting while resizing for the editbox widget.
  + add configure-check for curses_exit() from ncurses 6.2
  + fix a few memory leaks in fselect.c, mixedgauge.c when resizing.
  + fix inconsistency in dlg_string_to_argv() which made the checklist9
    example not work.
  + add empty-string check in dlg_print_listitem() to avoid indexing past
    the end of the array of character-offsets.
  + improve handling of KEY_RESIZE by repainting the backtitle after
    clearing the screen (integrated patch by Rainer Weikusat, Debian
    [#954185]).
  + improve logic for wtimeout() calls which are used to set temporary
    non-blocking reads (prompted by patch by Rainer Weikusat, Debian
    [#954220]).
  + add "make check" rule.
  + updated configure-macros.
  + updated configure-macros, to work around ncurses vs xcode's c99 -W
  + update config.guess
  + updated configure-macros.
  + update config.guess
  + correct rc-file lookup of "default" color (report by Grady Martin,
    cf: 2019/09/24).
  + fix several issues in the sample scripts reported by shellcheck.
  + fix a few spelling errors reported by codespell (report by Jens
    Schleusener).
  + correct check for return-value of isblank(), which is not necessarily
    0/1 (report/patch by Paul Cercueil, Peter Korsgaard, cf: 2018/05/31).
  + amend change for parsing command-options before calling init_dialog,
    to handle --no-shadow, etc., which are initialized in init_dialog
    (report by Paul Cercueil, cf: 2018/06/21).
  + add dlg_trace_va_msg to manpage, symbol files.
  + improve layout of several widgets' data area when maximizing.
  + modify dselect/fselect to work with autosizing (Debian #915949).
  + add error messages from dlg_exiterr() to trace file.
  + improve manual page description of escaping in key-bindings.
  + modify inputmenu to recognize the "Cancel" button and keys bound to
    that feature while editing a renamed menu item.
  + revert one change, in form.c to the --last-key feature (Debian
    [#942025]).
  + correct ordering of libraries in configure-script, which appended
    in a case where it should have prepended.
  + update config.guess, config.sub
  + improve dialog-config script's filtering of -L options using the
    linker default directories.
  + improve dialog-config script, adding a -L option corresponding to
    the configure --libdir option if it would be a duplicate (report by
    Andrew Kosteltsev).
  + build-fix for configure --disable-trace
  + updated pt.po from http://translationproject.org/latest/dialog/
  + allow for underline- and reverse-video flags in the ".rc" file
    (integrated patch by Richard Robbins).
  + amend change to --last-key feature to eliminate an unnecessary
    separator (report by Gabriele Balducci).
  + extend --last-key feature to the remaining widgets which have
    ok/cancel buttons, and add logic to map keys which happen to be
    bound to ok/extra/cancel/help to simulate a button-press on the
    corresponding button (report by "sgewrk").
  + further fixes for dialog-config.in (report by Andrew Kosteltsev).
  + modify dialog-config.in so that setting prefix or exec-prefix to
    a given value with --prefix=VALUE or --exec-prefix=VALUE has the
    expected result of changing bindir, etc.
  + correct substitution for $LIBS value in dialog-config.in (report by
    Andrew Kosteltsev).
  + modify dlg_will_resize() and dlg_result_key() functions to reduce
    the chance that dialog exits on a SIGWINCH (Debian #930775).
  + make test-package for the development headers/library
  + add --libs-only-L, etc., to dialog-config script (prompted by
    discussion with Andrew Kosteltsev).
  + fix a memory leak in gauge widget (Andrew Kosteltsev).
  + minor fix for CF_GCC_WARNINGS
  + update config.guess, config.sub
- Modify patch dialog-1.2-20121230.dif
- This update fixes boo#1183668</changelog>
  <changelog author="dimstar@opensuse.org" date="1623844800">- Update to version 1.3-20210530:
  + amend adjustment to inputbox height so the autosized dimensions
    match  older versions (boo#1184503).
  + improve configure checks, to reduce warnings during those checks
  + updated translations.
- Changes from version 1.3-20210509:
  + improve configure checks, e.g., for libtool version
- Changes from version 1.3-20210324:
  + add configure option --enable-stdnoreturn to build when C11
    _Noreturn feature is enabled in recent ncurses development.
- Changes from version 1.3-20210319:
  Updated translations.</changelog>
</package>
<package pkgid="c7d4e5a7fe83efb97992f8e4259ab22aeb71129df6aef2d9d600a242dc0d71e7cf3864f350da8440338d6fe7200db71cd3571d939f9afe2bb432c6d6e97a2385" name="dialog-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
  <changelog author="sbrabec@suse.com" date="1541592000">- Fix mangled Hindi translation (bsc#1115005).</changelog>
  <changelog author="werner@suse.de" date="1550059200">- Update to version 1.3-20190211
  + modify to work with ncurses' threaded-library, which does not allow
    assignment to LINES/COLS (report by Marcus Roeckrath).
  + correct clearing after text in progressbox from 2018/06/21 changes
    for resizing (reports by David Boyd, Alan Somers).
  + improved configure macros CF_GNU_SOURCE, CF_POSIX_C_SOURCE,
    CF_XOPEN_SOURCE
  + update config.guess, config.sub
- Includes also version 1.3-20181107
  + convert ja.po to UTF-8 for consistency (suggested by Stanislav
    Brabec).
  + repair mis-encoded hi.po (report/analysis by Stanislav Brabec).
- Includes also version 1.3-20181022
  + improved configure macros CF_CC_ENV_FLAGS, CF_LD_RPATH_OPT,
    CF_LIBRARY_PATH, CF_SHARED_OPTS, CF_WITH_MAN2HTML,
    CF_WITH_VERSIONED_SYMS from ncurses
  + add ast.po, from
    http://translationproject.org/latest/dialog/
- Includes also version 1.3-20180621
  + improve file-offset computation in textbox.c (Werner Fink).
  + fix an overlooked case with real_auto_size() to maximize when
    height or width is given as -1.
  + build-fixes for configure options "--disable-Xdialog2" and
    "--disable-form"
  + add traces for each widget to show its parameters.
  + modify color scheme for mixedgauge to use the dialog window colors,
    like the captions.
  + fix a too-small malloc in the mixedgauge widget.
  + fix a use-after-free in dlg_remove_callback().
  + improve handling of SIGWINCH for several widgets (Debian #865840).
    + menubox, the point of the Debian report was that it would be nice
    to increase the window size if the terminal size increases.  Did
    that as a special case less problematic than decreasing the
    terminal size.  Added samples/menubox11 to demonstrate by
    comparison with menubox10 a problem with debconf which puts extra
    newlines in the caption that interfere with autowrap.
    + progressbox and derived prgbox, programbox, now handle resizing.
    + yesno, window was cleared
  + add dlg_ttysize() to support new options, allowing scripts to obtain
    some text-formatting details without initializing the terminal.
  + add options --print-text-only, and --print-text-size for scripts that
    adjust the widget size according to how the captions are formatted.
  + improve dialog.pl:
    + add demo.pl, to demonstrate the functions
    + quote/escape string parameters passed to dialog.
    + ensure all "integer" parameters are really integers.
    + use actual screensize for list captions rather than assuming 24
    lines.
  + when trimming blanks, treat unconverted tabs the same as spaces.
  + correct parameter to test when trimming blanks from the script,
    e.g., with "--trim" (report by Jarno Suni).
  + improve documentation of the various whitespace-filtering options,
    to show which take precedence (Debian #867536, cf: Debian #102942).
  + modify msgbox.c, yesno.c to bind SCROLLKEY_BINDINGS before
    TRAVERSE_BINDINGS so that up/down arrow will by default scroll the
    message up/down rather than be aliases for tab-traversal (report by
    Fredrik Kers).
  + modify dump_one_binding() to show when a binding is overridden.
  + improve format of trace-file, making comment-syntax consistent,
    as well as showing argv-splitting as a series of comments.
  + modify dlg_string_to_argv() to change the quoting behavior to be
    more consistent with shell behavior (patch by Denilson Sa Maia).
  + modify dlg_getc() to return ESC when a timeout expires, notifying
    callers that a quit occurred rather than exiting the application
    (suggested by Rodrigo Freitas).
  + modify handle_inputs() to ensure cursor-visibility is restored when
    there is no input character available (report by Guillaume Vareille).
  + improve comment in manual page regarding which widgets can use the
    "--help-button" (prompted by discussion with Csanyi Pal).
  + add a check for valid object pointer in tailbox's main loop since
    the getc-callback may have been freed within ui_getc.c (report by
    "David").
  + improved configure macros for ncurses: CF_GNU_SOURCE, CF_SHARED_OPTS,
    CF_CURSES_LIBS, CF_CURSES_FUNCS, CF_NCURSES_CONFIG
  + improved configure script checks for groff vs man2html:
    CF_PROG_GROFF and CF_WITH_MAN2HTML
  + build-fix from lynx for AM_WITH_NLS configure macro
  + update config.guess, config.sub
- Remove fix for Hindi translation as now upstream
- Remove patch textbox-file_size.patch now upstream
- Remove dialog.ko.po.bz2 as ko.po now upstream
- Modify patch dialog-1.2-20121230.dif</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="werner@suse.de" date="1616068800">- Update to version 1.3-20210306
  + add several usage-messages to dialog.pot
  + improve configure-check for ld searchpath on HP-UX and Solaris.
  + fix a few cppcheck warnings
  + updated eo.po, fi.po, pt.po, sq.po, sv.po, ru.po, uk.po, zh_CN.po
    from http://translationproject.org/latest/dialog/
  + updated dialog.pot
  + add option --no-hot-list, to allow suppressing the hotkey feature
    from lists.
  + increase minimum height of inputbox to avoid input field overlapping
    with the button-box (report by Victor Ananjevsky).
  + modify options-parsing to permit a "no" on any boolean option and
    deprecating the "no" options without a "-" , e.g., generalizing on
    "--nook" equivalence to "--no-ok".
  + minor spelling fixes, per codespell
  + update configure macros, for quoting/escaping fixes per shellcheck
  + update config.guess, config.sub
  + modify configure script's compiler check to work around Xcode's
    useless aliases for standard C.
  + enable keep-tite feature for NetBSD 8 and up; earlier releases would
    dump core.
  &gt; new features/fixes (Glenn Herteg)
  + add option "--cursor-off-label"
  + add option "--erase-on-exit"
  + fix errata in manpage.
  + fix logic: dlg_button_to_char() would return wrong value if no
    uppercase was found
  + add DIALOG_TIMEOUT to sample scripts, and use report-button more
    consistently to handle unexpected exit-status values.
  + add dlg_getenv_num() and dlg_getenv_str().
  + add DLG_EXIT_TIMEOUT to allow scripts to exit on an expired timeout
    with an exit-status different from DLG_EXIT_ERROR or DLG_EXIT_ESC
    (patch by Norbert Koch).
  + modify dlg_ok_label() and dlg_ok_labels() to ignore --no-ok if all
    buttons would be omitted.
  + add/use dlg_der_window() to account for derived windows just like
    subwindows, to fix regression in dlg_getc() in fselect/dselect
    widget.
  + modify several widgets to make their handling of --no-ok consistent
    with the majority of the widgets: editbox.c, menubox.c, msgbox.c,
    rangebox.c, textbox.c, timebox.c
  + add ^D as binding for new virtual key DLGK_LEAVE, which will close
    the current dialog by activating the currently-selected button.
  + improve manual-page description of --no-ok option (reports by
    Hans Mueller, Gil Delescluse).
  + modify configure script to make Solaris -R rpath feature work
  + fix regression in dlg_getc() caused by not taking into account
    subwindows used for input (report by Michael Wihl).
  + add validity-checks for window pointer (report/testcase by Michael
    Wihl).
  + improve configure macros:
    CF_CLANG_COMPILER: apply compiler-flags needed for test.
    CF_WITH_SCREEN_PDCURSES: use this to reduce X11-checks.
  + amend initialization for dlg_getc to fix regression in pause widget
    from 2020/03/27 changes (reports by Aidan Tessier, Norbert Koch,
    Josmar Pierri).
  + improve configure macros:
    CF_CLANG_COMPILER: split-out check for -Qunused-arguments to ensure
    that clang supports it.  IBM xlclang does not.
    CF_MIXEDCASE_FILENAMES: when cross-compiling to darwin (macOS),
    assume the filesystem doesn't support mixed-case
  + modify init_dialog's initialization of tab_len and aspect_ratio to
    avoid overwriting initialization done in process_common_options
    (report/patch by Rainer Weikusat, Debian #970508).
  + fix out-of-order description for --tailbox vs --rangebox in manpage
    (report by Glenn Herteg).
  + updated configure-macros: compiler-warnings and shared-library
    options.  Changed configure --with-warnings to --enable-warnings for
    consistency.
  + update config.guess
  + updated sq.po from http://translationproject.org/latest/dialog/
  + add clarification in manual page to show when the single/double
    quotes may be needed (prompted by discussion with Danilo G Baio).
  + fix an extra ".exe" in makefile.in which prevented Cygwin build.
  + fix most cppcheck warnings
  + tailbox/tailboxbg's exit-button now works with mouse-clicks
  + fix repainting while resizing for the editbox widget.
  + add configure-check for curses_exit() from ncurses 6.2
  + fix a few memory leaks in fselect.c, mixedgauge.c when resizing.
  + fix inconsistency in dlg_string_to_argv() which made the checklist9
    example not work.
  + add empty-string check in dlg_print_listitem() to avoid indexing past
    the end of the array of character-offsets.
  + improve handling of KEY_RESIZE by repainting the backtitle after
    clearing the screen (integrated patch by Rainer Weikusat, Debian
    [#954185]).
  + improve logic for wtimeout() calls which are used to set temporary
    non-blocking reads (prompted by patch by Rainer Weikusat, Debian
    [#954220]).
  + add "make check" rule.
  + updated configure-macros.
  + updated configure-macros, to work around ncurses vs xcode's c99 -W
  + update config.guess
  + updated configure-macros.
  + update config.guess
  + correct rc-file lookup of "default" color (report by Grady Martin,
    cf: 2019/09/24).
  + fix several issues in the sample scripts reported by shellcheck.
  + fix a few spelling errors reported by codespell (report by Jens
    Schleusener).
  + correct check for return-value of isblank(), which is not necessarily
    0/1 (report/patch by Paul Cercueil, Peter Korsgaard, cf: 2018/05/31).
  + amend change for parsing command-options before calling init_dialog,
    to handle --no-shadow, etc., which are initialized in init_dialog
    (report by Paul Cercueil, cf: 2018/06/21).
  + add dlg_trace_va_msg to manpage, symbol files.
  + improve layout of several widgets' data area when maximizing.
  + modify dselect/fselect to work with autosizing (Debian #915949).
  + add error messages from dlg_exiterr() to trace file.
  + improve manual page description of escaping in key-bindings.
  + modify inputmenu to recognize the "Cancel" button and keys bound to
    that feature while editing a renamed menu item.
  + revert one change, in form.c to the --last-key feature (Debian
    [#942025]).
  + correct ordering of libraries in configure-script, which appended
    in a case where it should have prepended.
  + update config.guess, config.sub
  + improve dialog-config script's filtering of -L options using the
    linker default directories.
  + improve dialog-config script, adding a -L option corresponding to
    the configure --libdir option if it would be a duplicate (report by
    Andrew Kosteltsev).
  + build-fix for configure --disable-trace
  + updated pt.po from http://translationproject.org/latest/dialog/
  + allow for underline- and reverse-video flags in the ".rc" file
    (integrated patch by Richard Robbins).
  + amend change to --last-key feature to eliminate an unnecessary
    separator (report by Gabriele Balducci).
  + extend --last-key feature to the remaining widgets which have
    ok/cancel buttons, and add logic to map keys which happen to be
    bound to ok/extra/cancel/help to simulate a button-press on the
    corresponding button (report by "sgewrk").
  + further fixes for dialog-config.in (report by Andrew Kosteltsev).
  + modify dialog-config.in so that setting prefix or exec-prefix to
    a given value with --prefix=VALUE or --exec-prefix=VALUE has the
    expected result of changing bindir, etc.
  + correct substitution for $LIBS value in dialog-config.in (report by
    Andrew Kosteltsev).
  + modify dlg_will_resize() and dlg_result_key() functions to reduce
    the chance that dialog exits on a SIGWINCH (Debian #930775).
  + make test-package for the development headers/library
  + add --libs-only-L, etc., to dialog-config script (prompted by
    discussion with Andrew Kosteltsev).
  + fix a memory leak in gauge widget (Andrew Kosteltsev).
  + minor fix for CF_GCC_WARNINGS
  + update config.guess, config.sub
- Modify patch dialog-1.2-20121230.dif
- This update fixes boo#1183668</changelog>
  <changelog author="dimstar@opensuse.org" date="1623844800">- Update to version 1.3-20210530:
  + amend adjustment to inputbox height so the autosized dimensions
    match  older versions (boo#1184503).
  + improve configure checks, to reduce warnings during those checks
  + updated translations.
- Changes from version 1.3-20210509:
  + improve configure checks, e.g., for libtool version
- Changes from version 1.3-20210324:
  + add configure option --enable-stdnoreturn to build when C11
    _Noreturn feature is enabled in recent ncurses development.
- Changes from version 1.3-20210319:
  Updated translations.</changelog>
</package>
<package pkgid="544022211a71e24f3f789302fabb009bcaec55f3d277ccb81cb8adc4cec4a8220e5eb88b058a7d0e7599e97f900f5cd2a3b316a38800d0fe3644ff74aa63dd84" name="diffutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10" rel="slfo.1.1_1.3"/>
  <changelog author="mpluskal@suse.com" date="1546603200">- Update to version 3.7:
  * bugfix - diff --strip-trailing-cr with a single CR byte in one
    input file would provoke an uninitialized memory read
  * diff --color now produces output compatible with less -R.
- Small packaging cleanups:
  * PIE is now default for whole distribution
  * xz is not needed as build dependency anymore</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1562328000">- ignore make check error for diff --color as tracked by
  https://debbugs.gnu.org/cgi/bugreport.cgi?bug=36488</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: avoid false-positive
  error in gnulib tests 'test-perror2' and 'test-strerror_r',
  visible on armv7l.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- gnulib-c-stack.patch: c-stack: stop using SIGSTKSZ</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1628337600">- diffutils 3.8:
  * diff no longer treats a closed stdin as representing an absent
    file in usage like 'diff --new-file - foo &lt;&amp;-'
  * diff and related programs no longer get confused if stdin,
    stdout, or stderr are closed
  * cmp, diff and sdiff no longer treat negative command-line
    option-arguments as if they were large positive numbers
- drop gnulib-test-avoid-FP-perror-strerror.patch, upstream
- drop gnulib-c-stack.patch, equivalent change in c-stack
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="schwab@suse.de" date="1632139200">- Skip stack overflow tests under qemu emulation (bsc#1190046)</changelog>
  <changelog author="schwab@suse.de" date="1663156800">- Skip gnulib test test-free under qemu emulation (bsc#1202260)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1673870400">- diffutils 3.9:
  * fixes for other platforms</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1684756800">- diffutils 3.10:
  * cmp/diff can again work with file dates past Y2K38
  * diff -D no longer fails to output #ifndef lines</changelog>
</package>
<package pkgid="801b1a1a8ac139e5a47d89beee55f151f92ca1698e204b5dc554d5094246aa2fe6c8efe5210eed39a7cc56ac11d5cf168dbef65f5a1c857eac85159e8d444e2b" name="diffutils-debugsource" arch="aarch64">
  <version epoch="0" ver="3.10" rel="slfo.1.1_1.3"/>
  <changelog author="mpluskal@suse.com" date="1546603200">- Update to version 3.7:
  * bugfix - diff --strip-trailing-cr with a single CR byte in one
    input file would provoke an uninitialized memory read
  * diff --color now produces output compatible with less -R.
- Small packaging cleanups:
  * PIE is now default for whole distribution
  * xz is not needed as build dependency anymore</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1562328000">- ignore make check error for diff --color as tracked by
  https://debbugs.gnu.org/cgi/bugreport.cgi?bug=36488</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: avoid false-positive
  error in gnulib tests 'test-perror2' and 'test-strerror_r',
  visible on armv7l.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- gnulib-c-stack.patch: c-stack: stop using SIGSTKSZ</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1628337600">- diffutils 3.8:
  * diff no longer treats a closed stdin as representing an absent
    file in usage like 'diff --new-file - foo &lt;&amp;-'
  * diff and related programs no longer get confused if stdin,
    stdout, or stderr are closed
  * cmp, diff and sdiff no longer treat negative command-line
    option-arguments as if they were large positive numbers
- drop gnulib-test-avoid-FP-perror-strerror.patch, upstream
- drop gnulib-c-stack.patch, equivalent change in c-stack
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="schwab@suse.de" date="1632139200">- Skip stack overflow tests under qemu emulation (bsc#1190046)</changelog>
  <changelog author="schwab@suse.de" date="1663156800">- Skip gnulib test test-free under qemu emulation (bsc#1202260)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1673870400">- diffutils 3.9:
  * fixes for other platforms</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1684756800">- diffutils 3.10:
  * cmp/diff can again work with file dates past Y2K38
  * diff -D no longer fails to output #ifndef lines</changelog>
</package>
<package pkgid="ddffe027ff54bc222a47ebf4e24b74e23929d3227d11632a7495351c4638af6cf554f21487168476db2ce603fe6867dedeb074db6e422dd6a23798c798d37885" name="ding-libs-debugsource" arch="aarch64">
  <version epoch="0" ver="0.6.2" rel="slfo.1.1_1.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="80c7308d55b1583c8ae1544a10beaab1c1cebcf41dc451f56e9d1a8ac4fbaa24d50508e7abd51163a4914780c2a736aedfe813a0345335ebe601559293e38236" name="dmidecode-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="jdelvare@suse.de" date="1571832000">1 recommended fixe from upstream:
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.
  Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533).</changelog>
  <changelog author="jdelvare@suse.de" date="1587470400">3 recommended fixes from upstream:
- dmidecode-print-type-33-name-unconditionally.patch: Print type 33
  name unconditionally.
- dmidecode-dont-choke-on-invalid-processor-voltage.patch: Don't
  choke on invalid processor voltage.
- dmidecode-fix-the-alignment-of-type-25-name.patch: Fix the
  alignment of type 25 name.
  Build fix:
- dmidecode-allow-overriding-build-settings-from-env.patch: Fix the
  build system so that the compilation flags passed by OBS are
  added to the ones dmidecode needs, instead of overriding them
  entirely.
- dmidecode.spec: Pass the CFLAGS through the environment, instead
  of as a parameter.</changelog>
  <changelog author="jdelvare@suse.de" date="1602676800">- Update to upstream version 3.3:
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Add bios-revision, firmware-revision and system-sku-number to -s option.
  * Use the most appropriate unit for cache size.
  * Decode system slot base bus width and peers.
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-allow-overriding-build-settings-from-env.patch,
    dmidecode-dont-choke-on-invalid-processor-voltage.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-fix-the-alignment-of-type-25-name.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch, and
    dmidecode-print-type-33-name-unconditionally.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1611316800">2 recommended fixes from upstream:
- dmidecode-fix-the-condition-error-in-ascii_filter.patch:
  dmidecode: Fix the condition error in ascii_filter.
- dmidecode-fix-crash-with-u-option.patch: dmidecode: Fix crash
  with -u option.</changelog>
  <changelog author="jdelvare@suse.de" date="1656331200">- Update to upstream version 3.4:
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-fix-crash-with-u-option.patch and
    dmidecode-fix-the-condition-error-in-ascii_filter.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1662724800">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1678968000">- Update to upstream version 3.5:
  * Decode HPE OEM records 216, 224, 230, 238 and 242.
  * Fortify entry point length checks.
  * Add a --no-quirks option.
  * Drop the CPUID exception list.
  * Do not let --dump-bin overwrite an existing file.
  * Ensure /dev/mem is a character device file.
  * Obsoletes news-fix-typo.patch and
    dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1679313600">- arm-use-alignment-workaround.patch: Fix the massive build
  warnings on armv7l.</changelog>
  <changelog author="jdelvare@suse.de" date="1680523200">- dmioem-hpe-oem-record-237-firmware-change.patch: Fix the decoding
  of the last field of HPE OEM record type 237 (DIMM Vendor
  Information).</changelog>
  <changelog author="jdelvare@suse.de" date="1682596800">Fix a potential regression:
- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes.</changelog>
</package>
<package pkgid="3b457984f7172927647809098143916571ceb4f4946e4d51d6a30bdd49780e85610ed03a20bf6b129b0da8f2abc76385a84e0e0ecc9565c7d17e24dee4467ea3" name="dmidecode-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="jdelvare@suse.de" date="1571832000">1 recommended fixe from upstream:
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.
  Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533).</changelog>
  <changelog author="jdelvare@suse.de" date="1587470400">3 recommended fixes from upstream:
- dmidecode-print-type-33-name-unconditionally.patch: Print type 33
  name unconditionally.
- dmidecode-dont-choke-on-invalid-processor-voltage.patch: Don't
  choke on invalid processor voltage.
- dmidecode-fix-the-alignment-of-type-25-name.patch: Fix the
  alignment of type 25 name.
  Build fix:
- dmidecode-allow-overriding-build-settings-from-env.patch: Fix the
  build system so that the compilation flags passed by OBS are
  added to the ones dmidecode needs, instead of overriding them
  entirely.
- dmidecode.spec: Pass the CFLAGS through the environment, instead
  of as a parameter.</changelog>
  <changelog author="jdelvare@suse.de" date="1602676800">- Update to upstream version 3.3:
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Add bios-revision, firmware-revision and system-sku-number to -s option.
  * Use the most appropriate unit for cache size.
  * Decode system slot base bus width and peers.
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-allow-overriding-build-settings-from-env.patch,
    dmidecode-dont-choke-on-invalid-processor-voltage.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-fix-the-alignment-of-type-25-name.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch, and
    dmidecode-print-type-33-name-unconditionally.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1611316800">2 recommended fixes from upstream:
- dmidecode-fix-the-condition-error-in-ascii_filter.patch:
  dmidecode: Fix the condition error in ascii_filter.
- dmidecode-fix-crash-with-u-option.patch: dmidecode: Fix crash
  with -u option.</changelog>
  <changelog author="jdelvare@suse.de" date="1656331200">- Update to upstream version 3.4:
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-fix-crash-with-u-option.patch and
    dmidecode-fix-the-condition-error-in-ascii_filter.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1662724800">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1678968000">- Update to upstream version 3.5:
  * Decode HPE OEM records 216, 224, 230, 238 and 242.
  * Fortify entry point length checks.
  * Add a --no-quirks option.
  * Drop the CPUID exception list.
  * Do not let --dump-bin overwrite an existing file.
  * Ensure /dev/mem is a character device file.
  * Obsoletes news-fix-typo.patch and
    dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1679313600">- arm-use-alignment-workaround.patch: Fix the massive build
  warnings on armv7l.</changelog>
  <changelog author="jdelvare@suse.de" date="1680523200">- dmioem-hpe-oem-record-237-firmware-change.patch: Fix the decoding
  of the last field of HPE OEM record type 237 (DIMM Vendor
  Information).</changelog>
  <changelog author="jdelvare@suse.de" date="1682596800">Fix a potential regression:
- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes.</changelog>
</package>
<package pkgid="1ce3f061a487e536fadb558c4fd30a53cba838842e13bf4467ac83ca0cf822f22920ff7f4b2e028f966963c4d9571777925542e92ee843a97629ce8c78a4d372" name="dnsmasq-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.90" rel="slfo.1.1_1.2"/>
  <changelog author="max@suse.com" date="1649160000">- bsc#1197872, CVE-2022-0934, dnsmasq-CVE-2022-0934.patch:
  Heap use after free in dhcp6_no_relay</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Move the dbus-1 system.d file to /usr (bsc#1200344)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1662724800">- Ensure the dnsmasq user's group is used
- Remove nogroup requirement</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 2.87 (bsc#1197872, CVE-2022-0934):
  * Allow arbitrary prefix lengths in --rev-server and
  - -domain=....,local
  * Replace --address=/#/..... functionality which got
    missed in the 2.86 domain search rewrite.
  * Add --nftset option, like --ipset but for the newer nftables.
  * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6
    addresses from DNS answers.
  * Fix crash doing netbooting when --port is set to zero
    to disable the DNS server. Thanks to Drexl Johannes
    for the bug report.
  * Generalise --dhcp-relay. Sending via broadcast/multicast is
    now supported for both IPv4 and IPv6 and the configuration
    syntax made easier (but backwards compatible).
  * Add snooping of IPv6 prefix-delegations to the DHCP-relay system.
  * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated
    as hex, the pattern must consist of only hex digits AND contain
    at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped
    over a pattern consisting of a decimal number which was interpreted
    surprisingly.
  * Include client address in TFTP file-not-found error reports.
    Thanks to Stefan Rink for the initial patch, which has been
    re-worked by me (srk). All bugs mine.
  * Note in manpage the change in behaviour of -address. This behaviour
    actually changed in v2.86, but was undocumented there. From 2.86 on,
    (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other
    types of query will be sent upstream. Pre 2.86, that would catch the
    whole example.com domain and queries for other types would get
    a local NODATA answer. The pre-2.86 behaviour is still available,
    by configuring --address=/example.com/1.2.3.4 --local=/example.com/
  * Fix problem with binding DHCP sockets to an individual interface.
    Despite the fact that the system call tales the interface _name_ as
    a parameter, it actually, binds the socket to interface _index_.
    Deleting the interface and creating a new one with the same name
    leaves the socket bound to the old index. (Creating new sockets
    always allocates a fresh index, they are not reused). We now
    take this behaviour into account and keep up with changing indexes.
  * Add --conf-script configuration option.
  * Enhance --domain to accept, for instance,
  - -domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain
    which relects the interface they are attached to in a way which
    doesn't require hard-coding addresses. Thanks to Sten Spans for
    the idea.
  * Fix write-after-free error in DHCPv6 server code.
    CVE-2022-0934 refers.
  * Add the ability to specify destination port in
    DHCP-relay mode. This change also removes a previous bug
    where --dhcp-alternate-port would affect the port used
    to relay _to_ as well as the port being listened on.
    The new feature allows configuration to provide bug-for-bug
    compatibility, if required. Thanks to Damian Kaczkowski
    for the feature suggestion.
  * Bound the value of UDP packet size in the EDNS0 header of
    forwarded queries to the configured or default value of
    edns-packet-max. There's no point letting a client set a larger
    value if we're unable to return the answer. Thanks to Bertie
    Taylor for pointing out the problem and supplying the patch.
- drop dnsmasq-CVE-2022-0934.patch, dnsmasq-resolv-conf.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.88:
  * Fix bug in --dynamic-host when an interface has /16 IPv4
  * address.
  * Add --fast-dns-retry option. This gives dnsmasq the ability
    to originate retries for upstream DNS queries itself, rather
    than relying on the downstream client. This is most useful
    when doing DNSSEC over unreliable upstream networks. It comes
    with some cost in memory usage and network bandwidth.
  * Add --use-stale-cache option. When set, if a DNS name exists
    in the cache, but its time-to-live has expired, dnsmasq will
    return the data anyway.
  * handle removal of whole files or entries within files.</changelog>
  <changelog author="info@paolostivanin.com" date="1675684800">- update to 2.89:
  * Fix bug introduced in 2.88 (commit fe91134b) which can result
    in corruption of the DNS cache internal data structures and
    logging of "cache internal error". This has only been seen
    in one place in the wild, and it took considerable effort
    to even generate a test case to reproduce it, but there's
    no way to be sure it won't strike, and the effect is to break
    the cache badly. Installations with DNSSEC enabled are more
    likely to see the problem, but not running DNSSEC does not
    guarantee that it won't happen. Thanks to Timo van Roermund
    for reporting the bug and for his great efforts in chasing
    it down. (boo#1207174)
- remove no longer needed rpmlintrc filters</changelog>
  <changelog author="max@suse.com" date="1682424000">- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch:
  default maximum EDNS.0 UDP packet size should be 1232</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Correct rundir from /var/run to /run for pid file</changelog>
  <changelog author="kukuk@suse.com" date="1697198400">- SLP got dropped, remove config (bsc#1214884)</changelog>
  <changelog author="max@suse.com" date="1707912000">- update to 2.90:
  * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826:
    Denial Of Service while trying to validate specially crafted
    DNSSEC responses
  * CVE-2023-49441, bsc#1226091: integer overflow via forward_query
  * Fix reversion in --rev-server introduced in 2.88 which caused
    breakage if the prefix length is not exactly divisible by 8
    (IPv4) or 4 (IPv6).
  * Fix possible SEGV when there server(s) for a particular domain
    are configured, but no server which is not qualified for a
    particular domain.
  * Set the default maximum DNS UDP packet sice to 1232.
    Obsoletes: dnsmasq-CVE-2023-28450.patch
  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better
    control over which inetrfaces are providing DHCP service.
  * Fix issue with stale caching
  * Add configurable caching for arbitrary RR-types.
  * Add --filter-rr option, to filter arbitrary RR-types.</changelog>
</package>
<package pkgid="dcebe12501092de8023d345204aaa5b1a3592f0307194e843eeb35df90a5323822aed61bd83be9a640444b73785b0f7454a14008cb6a53a6c5dd8f6cc883bdac" name="dnsmasq-debugsource" arch="aarch64">
  <version epoch="0" ver="2.90" rel="slfo.1.1_1.2"/>
  <changelog author="max@suse.com" date="1649160000">- bsc#1197872, CVE-2022-0934, dnsmasq-CVE-2022-0934.patch:
  Heap use after free in dhcp6_no_relay</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Move the dbus-1 system.d file to /usr (bsc#1200344)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1662724800">- Ensure the dnsmasq user's group is used
- Remove nogroup requirement</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 2.87 (bsc#1197872, CVE-2022-0934):
  * Allow arbitrary prefix lengths in --rev-server and
  - -domain=....,local
  * Replace --address=/#/..... functionality which got
    missed in the 2.86 domain search rewrite.
  * Add --nftset option, like --ipset but for the newer nftables.
  * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6
    addresses from DNS answers.
  * Fix crash doing netbooting when --port is set to zero
    to disable the DNS server. Thanks to Drexl Johannes
    for the bug report.
  * Generalise --dhcp-relay. Sending via broadcast/multicast is
    now supported for both IPv4 and IPv6 and the configuration
    syntax made easier (but backwards compatible).
  * Add snooping of IPv6 prefix-delegations to the DHCP-relay system.
  * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated
    as hex, the pattern must consist of only hex digits AND contain
    at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped
    over a pattern consisting of a decimal number which was interpreted
    surprisingly.
  * Include client address in TFTP file-not-found error reports.
    Thanks to Stefan Rink for the initial patch, which has been
    re-worked by me (srk). All bugs mine.
  * Note in manpage the change in behaviour of -address. This behaviour
    actually changed in v2.86, but was undocumented there. From 2.86 on,
    (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other
    types of query will be sent upstream. Pre 2.86, that would catch the
    whole example.com domain and queries for other types would get
    a local NODATA answer. The pre-2.86 behaviour is still available,
    by configuring --address=/example.com/1.2.3.4 --local=/example.com/
  * Fix problem with binding DHCP sockets to an individual interface.
    Despite the fact that the system call tales the interface _name_ as
    a parameter, it actually, binds the socket to interface _index_.
    Deleting the interface and creating a new one with the same name
    leaves the socket bound to the old index. (Creating new sockets
    always allocates a fresh index, they are not reused). We now
    take this behaviour into account and keep up with changing indexes.
  * Add --conf-script configuration option.
  * Enhance --domain to accept, for instance,
  - -domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain
    which relects the interface they are attached to in a way which
    doesn't require hard-coding addresses. Thanks to Sten Spans for
    the idea.
  * Fix write-after-free error in DHCPv6 server code.
    CVE-2022-0934 refers.
  * Add the ability to specify destination port in
    DHCP-relay mode. This change also removes a previous bug
    where --dhcp-alternate-port would affect the port used
    to relay _to_ as well as the port being listened on.
    The new feature allows configuration to provide bug-for-bug
    compatibility, if required. Thanks to Damian Kaczkowski
    for the feature suggestion.
  * Bound the value of UDP packet size in the EDNS0 header of
    forwarded queries to the configured or default value of
    edns-packet-max. There's no point letting a client set a larger
    value if we're unable to return the answer. Thanks to Bertie
    Taylor for pointing out the problem and supplying the patch.
- drop dnsmasq-CVE-2022-0934.patch, dnsmasq-resolv-conf.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.88:
  * Fix bug in --dynamic-host when an interface has /16 IPv4
  * address.
  * Add --fast-dns-retry option. This gives dnsmasq the ability
    to originate retries for upstream DNS queries itself, rather
    than relying on the downstream client. This is most useful
    when doing DNSSEC over unreliable upstream networks. It comes
    with some cost in memory usage and network bandwidth.
  * Add --use-stale-cache option. When set, if a DNS name exists
    in the cache, but its time-to-live has expired, dnsmasq will
    return the data anyway.
  * handle removal of whole files or entries within files.</changelog>
  <changelog author="info@paolostivanin.com" date="1675684800">- update to 2.89:
  * Fix bug introduced in 2.88 (commit fe91134b) which can result
    in corruption of the DNS cache internal data structures and
    logging of "cache internal error". This has only been seen
    in one place in the wild, and it took considerable effort
    to even generate a test case to reproduce it, but there's
    no way to be sure it won't strike, and the effect is to break
    the cache badly. Installations with DNSSEC enabled are more
    likely to see the problem, but not running DNSSEC does not
    guarantee that it won't happen. Thanks to Timo van Roermund
    for reporting the bug and for his great efforts in chasing
    it down. (boo#1207174)
- remove no longer needed rpmlintrc filters</changelog>
  <changelog author="max@suse.com" date="1682424000">- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch:
  default maximum EDNS.0 UDP packet size should be 1232</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Correct rundir from /var/run to /run for pid file</changelog>
  <changelog author="kukuk@suse.com" date="1697198400">- SLP got dropped, remove config (bsc#1214884)</changelog>
  <changelog author="max@suse.com" date="1707912000">- update to 2.90:
  * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826:
    Denial Of Service while trying to validate specially crafted
    DNSSEC responses
  * CVE-2023-49441, bsc#1226091: integer overflow via forward_query
  * Fix reversion in --rev-server introduced in 2.88 which caused
    breakage if the prefix length is not exactly divisible by 8
    (IPv4) or 4 (IPv6).
  * Fix possible SEGV when there server(s) for a particular domain
    are configured, but no server which is not qualified for a
    particular domain.
  * Set the default maximum DNS UDP packet sice to 1232.
    Obsoletes: dnsmasq-CVE-2023-28450.patch
  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better
    control over which inetrfaces are providing DHCP service.
  * Fix issue with stale caching
  * Add configurable caching for arbitrary RR-types.
  * Add --filter-rr option, to filter arbitrary RR-types.</changelog>
</package>
<package pkgid="60e15b4dd557e5dc0a1e92a268e65399fdff0a545f3a74f05e8e8e9d2ea324bbd2b4a7a34a7e91260e5e91ad83d1f64ca9c81a1725c91ffbd3c1468f10175217" name="docker-buildx-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.29.0" rel="slfo.1.1_8.1"/>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="0acc63cb9d864387f6c07d683e76d9390897de48e4a985b2a7fd6467e62ea057d84c93dffee8bcb52818ae7b154ffd2882b3720c661692f0511c82dad43ab8a7" name="docker-debuginfo" arch="aarch64">
  <version epoch="0" ver="28.5.1_ce" rel="slfo.1.1_8.1"/>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="73f7c735cc4899f8a4b0487d3ef98b2b87255b70ebe6a0beb6b65cc82d7650cfe321f4e4fce97bae939aa708c82a47fdeddf313708fc148edd184b0ca766c0ce" name="dosfstools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="lnussel@suse.de" date="1605009600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="mcepl@cepl.eu" date="1610712000">- Update to version 4.1+git.1610658652.9443732 (bsc#1172863):
  * testsuite: Add mkfs test for 600MB large 4K disk
  * mkfs.fat: Do not show verbose messages not relevant to selected FAT size
  * mkfs.fat: Fix text of verbose messages
  * mkfs.fat: Fix limits for number of clusters
  * mkfs.fat: Fix calculation of FAT32 cluster size on non 512 bytes sector disks
  * mkfs.fat: Fix printing number of sectors
  * mkfs.fat: Align total number of sectors to be multiple of sectors per track
  * testsuite: Add referenceFAT32mbr test data to dist_check_DATA
  * manpages: Escape dot in fsck.fat manpage at the beginning of the line
  * fsck.fat: properly check for valid "." and ".." entries</changelog>
  <changelog author="dmueller@suse.com" date="1612267200">- update to 4.2:
  * mkfs.fat: Allow to specify disk geometry via new -g option
  * fsck.fat: Add code for fixing first FAT cluster
  * fatlabel: Do not call parts of fsck repair procedure
  * Update warning message about lowercase labels
  * mkfs.fat: Read geom_start from sysfs
  * Add missing files into distribution tarball
- BREAKING CHANGES (boo#1188401):
  After fixing of bsc#1172863 in the last update, mkfs started to
  create different images than before. Applications that depend on
  exact FAT file format (e. g. embedded systems) may be broken in
  two ways:
  * The introduction of the alignment may create smaller images
    than before, with a different positions of important image
    elements. It can break existing software that expect images in
    doststools &lt;= 4.1 style.
    To work around these problems, use "-a" command line argument.
  * The new image may contain a different geometry values. Geometry
    sensitive applications expecting doststools &lt;= 4.1 style images
    can fails to accept different geometry values.
    There is no direct work around for this problem. But you can
    take the old image, use "file -s $IMAGE", check its
    "sectors/track" and "heads", and use them in the newly
    introduced "-g" command line argument.</changelog>
  <changelog author="dimstar@opensuse.org" date="1643889600">- Drop vim BuildRequires: the test suite passes without it present.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="6e2f2f83e3396a9c36abcdb90e6461f0b576f26fa13ede735324d21b2c514377f9afa316249e18e7161836a113d410ef15dcd16a0bed6a866abad1b3f5a7d2cb" name="dosfstools-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="lnussel@suse.de" date="1605009600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="mcepl@cepl.eu" date="1610712000">- Update to version 4.1+git.1610658652.9443732 (bsc#1172863):
  * testsuite: Add mkfs test for 600MB large 4K disk
  * mkfs.fat: Do not show verbose messages not relevant to selected FAT size
  * mkfs.fat: Fix text of verbose messages
  * mkfs.fat: Fix limits for number of clusters
  * mkfs.fat: Fix calculation of FAT32 cluster size on non 512 bytes sector disks
  * mkfs.fat: Fix printing number of sectors
  * mkfs.fat: Align total number of sectors to be multiple of sectors per track
  * testsuite: Add referenceFAT32mbr test data to dist_check_DATA
  * manpages: Escape dot in fsck.fat manpage at the beginning of the line
  * fsck.fat: properly check for valid "." and ".." entries</changelog>
  <changelog author="dmueller@suse.com" date="1612267200">- update to 4.2:
  * mkfs.fat: Allow to specify disk geometry via new -g option
  * fsck.fat: Add code for fixing first FAT cluster
  * fatlabel: Do not call parts of fsck repair procedure
  * Update warning message about lowercase labels
  * mkfs.fat: Read geom_start from sysfs
  * Add missing files into distribution tarball
- BREAKING CHANGES (boo#1188401):
  After fixing of bsc#1172863 in the last update, mkfs started to
  create different images than before. Applications that depend on
  exact FAT file format (e. g. embedded systems) may be broken in
  two ways:
  * The introduction of the alignment may create smaller images
    than before, with a different positions of important image
    elements. It can break existing software that expect images in
    doststools &lt;= 4.1 style.
    To work around these problems, use "-a" command line argument.
  * The new image may contain a different geometry values. Geometry
    sensitive applications expecting doststools &lt;= 4.1 style images
    can fails to accept different geometry values.
    There is no direct work around for this problem. But you can
    take the old image, use "file -s $IMAGE", check its
    "sectors/track" and "heads", and use them in the newly
    introduced "-g" command line argument.</changelog>
  <changelog author="dimstar@opensuse.org" date="1643889600">- Drop vim BuildRequires: the test suite passes without it present.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="58bac71284d067ce9712a1d0f5c816331079ca35d6a3b10498901bbab88e7dfd3522c3a83b2a840ad254836e779224e48f8739d5d9d0b1b22fe218ae2ae05cf5" name="dpdk-debuginfo" arch="aarch64">
  <version epoch="0" ver="22.11.10" rel="slfo.1.1_1.1"/>
  <changelog author="sweiberg@suse.com" date="1635163200">- - Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch
- rename
  dpdk-fallthrough-comment-fixes.patch
  to
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1645876800">- Update to LTS version 21.11.
  21.11 should be supported for at least two years, the new major
  ABI version is 22. New Features:
  * General
  * hugetlbfs subdirectories
  * AddressSanitizer (ASan) integration for debug
  * mempool flag for non-IO usages
  * device class for DMA accelerators and drivers for
  * HiSilicon, Intel DSA, Intel IOAT, Marvell CNXK and NXP DPAA
  * device class for GPU devices and driver for NVIDIA CUDA
  * Toeplitz hash using Galois Fields New Instructions (GFNI)
  * Networking
  * MTU handling rework
  * get all MAC addresses of a port
  * RSS based on L3/L4 checksum fields
  * flow match on L2TPv2 and PPP
  * flow flex parser for custom header
  * control delivery of HW Rx metadata
  * transfer flows API rework
  * shared Rx queue
  * driver for NXP ENETFEC
  * vDPA driver for Xilinx devices
  * virtio RSS
  * vhost power monitor wakeup
  * testpmd multi-process
  * pcapng library and dumpcap tool
  * API/ABI
  * API namespace improvements and cleanups
  * API internals hidden
  * flags check for future ABI compatibility
  * More details in the release notes:
    https://doc.dpdk.org/guides/rel_notes/release_21_11.html
- Update to LTS version 20.11.0, new features:
  * General
  * mbuf dynamic area increased from 16 to 36 bytes
  * ring zero cop
  * SIMD bitwidth limit API
  * moved igb_uio to dpdk-kmods/linux
  * removed Python 2 support
  * removed Make support, meson + pkg-config files are
    now used to build applications
  * Networking
  * FEC AP
  * Rx buffer split
  * thread safety in flow API
  * shared action in flow API
  * flow sampling and mirroring
  * tunnel offload API
  * multi-port hairpin
  * Solarflare EF100 architecture
  * Wangxun txgbe driver
  * vhost-vDPA backend in virtio-user
  * removed vhost dequeue zero-copy
  * removed legacy ethdev filtering
  * SWX pipeline aligned with P4
  * Baseband
  * Intel ACC100 driver
  * Cryptography
  * raw datapath API
  * Broadcom BCMFS symmetric crypto driver
  * RegEx
  * Marvell OCTEON TX2 regex driver
  * Others
  * Intel DLB/DLB2 drivers
  * Intel DSA support in IOAT driver
  * Full changes and more details in the release notes:
    https://doc.dpdk.org/guides/rel_notes/release_20_11.html
- Rebased 0002-SLE15-SP3-compatibility-patch-for-kni.patch
- Drop outdated 0001-fix-cpu-compatibility.patch
- Drop outdated 0003-dpdk-fallthrough-comment-fixes.patch
- Added 0001-build-try-to-get-kernel-version-from-kernel-source.patch
  Allow host system to have a different kernel than the target
  system, fixes kernel module installation path for such case.
  Submitted upstream 2022-02-26
- Added fix-buildsystem-python36.patch for Leap as the buildsystem
  uses python syntax introduced with python37, but Leap still
  sticks with 3.6, so this backports it for the old python version.</changelog>
  <changelog author="rpm@fthiessen.de" date="1651060800">- Update to version 21.11.1
  * acl: add missing C++ guards
  * app/compress-perf: Various bug fixes
  * app/dumpcap: check for failure to set promiscuous
  * app/fib: fix division by zero
  * app/pdump: abort on multi-core capture limit
  * app/regex: fix number of matches
  * app/testpmd: Various bug fixes
  * baseband/acc100: avoid out-of-bounds access
  * bpf: add missing C++ guards
  * bus/pci: assign driver pointer before mapping
  * common/cnxk: Various bug fixes
  * common/mlx5: Various bug fixes
  * common/sfc_efx/base: fix recirculation ID set in outer rules
  * compressdev: fix missing space in log macro
  * eal/linux:
  * fix device monitor stop return
  * fix illegal memory access in uevent handler
  * log hugepage create errors with filename
  * Full change log can be found online:
    http://doc.dpdk.org/guides-21.11/rel_notes/release_21_11.html#fixes
- Rebased 0001-build-try-to-get-kernel-version-from-kernel-source.patch
- Dropped upstream fixed fix-buildsystem-python36.patch
- fixes CVE-2022-0669 [bsc#1198964], CVE-2021-3839 [bsc#1198963</changelog>
  <changelog author="jslaby@suse.cz" date="1653480000">- add kni-fix-build-with-Linux-5.18.patch to fix build with kernel
  5.18</changelog>
  <changelog author="dmueller@suse.com" date="1655812800">- also strip meson generated runpaths when installing examples
  manually (bsc#1200620)</changelog>
  <changelog author="bwiedemann@suse.com" date="1677067200">- Cleanup Sphinx build leftovers for reproducible builds</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1680696000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
    http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
  0001-build-try-to-get-kernel-version-from-kernel-source.patch
  kni-fix-build-with-Linux-5.18.patch
  * Added Patches:
    0001-fix-cpu-compatibility.patch
  * Rebased patches:
    0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1682510400">- add 0001-kni-fix-build-with-Linux-6.3.patch to fix build against
  kernel 6.3.</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1763380800">- Upstream bugfix update:
  - Version 22.11.10
  - net/mlx5: fix out-of-order completions in ordinary Rx burst
    (CVE-2025-23259, bsc#1254161)
  - Version 22.11.9
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id24
  - Version 22.11.8
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id21
  - Version 22.11.7
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id18
  - Remove included fix dpdk-CVE-2024-11614.patch
  - Version 22.11.6
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id15
  - Version 22.11.5
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id12
  - Version 22.11.4
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id8
  - Version 22.11.3
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id4
    Remove included fixes:
  - 0001-kni-fix-build-with-Linux-6.3.patch
  - Version 22.11.2
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id2
- Fix [bsc#1214724], SUSE provided DPDK modules taint the kernel as unsupported
  + Add kernel support flag for rte_kni.ko</changelog>
</package>
<package pkgid="897c52a21a9746d7d395c2a66e29f5250c012c5d693396fd57ea6ddb67eac251d4de90ec0047ea9753a79967a7557e913694a37138268d0d44051d9e42f9ab81" name="dpdk-debugsource" arch="aarch64">
  <version epoch="0" ver="22.11.10" rel="slfo.1.1_1.1"/>
  <changelog author="sweiberg@suse.com" date="1635163200">- - Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch
- rename
  dpdk-fallthrough-comment-fixes.patch
  to
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1645876800">- Update to LTS version 21.11.
  21.11 should be supported for at least two years, the new major
  ABI version is 22. New Features:
  * General
  * hugetlbfs subdirectories
  * AddressSanitizer (ASan) integration for debug
  * mempool flag for non-IO usages
  * device class for DMA accelerators and drivers for
  * HiSilicon, Intel DSA, Intel IOAT, Marvell CNXK and NXP DPAA
  * device class for GPU devices and driver for NVIDIA CUDA
  * Toeplitz hash using Galois Fields New Instructions (GFNI)
  * Networking
  * MTU handling rework
  * get all MAC addresses of a port
  * RSS based on L3/L4 checksum fields
  * flow match on L2TPv2 and PPP
  * flow flex parser for custom header
  * control delivery of HW Rx metadata
  * transfer flows API rework
  * shared Rx queue
  * driver for NXP ENETFEC
  * vDPA driver for Xilinx devices
  * virtio RSS
  * vhost power monitor wakeup
  * testpmd multi-process
  * pcapng library and dumpcap tool
  * API/ABI
  * API namespace improvements and cleanups
  * API internals hidden
  * flags check for future ABI compatibility
  * More details in the release notes:
    https://doc.dpdk.org/guides/rel_notes/release_21_11.html
- Update to LTS version 20.11.0, new features:
  * General
  * mbuf dynamic area increased from 16 to 36 bytes
  * ring zero cop
  * SIMD bitwidth limit API
  * moved igb_uio to dpdk-kmods/linux
  * removed Python 2 support
  * removed Make support, meson + pkg-config files are
    now used to build applications
  * Networking
  * FEC AP
  * Rx buffer split
  * thread safety in flow API
  * shared action in flow API
  * flow sampling and mirroring
  * tunnel offload API
  * multi-port hairpin
  * Solarflare EF100 architecture
  * Wangxun txgbe driver
  * vhost-vDPA backend in virtio-user
  * removed vhost dequeue zero-copy
  * removed legacy ethdev filtering
  * SWX pipeline aligned with P4
  * Baseband
  * Intel ACC100 driver
  * Cryptography
  * raw datapath API
  * Broadcom BCMFS symmetric crypto driver
  * RegEx
  * Marvell OCTEON TX2 regex driver
  * Others
  * Intel DLB/DLB2 drivers
  * Intel DSA support in IOAT driver
  * Full changes and more details in the release notes:
    https://doc.dpdk.org/guides/rel_notes/release_20_11.html
- Rebased 0002-SLE15-SP3-compatibility-patch-for-kni.patch
- Drop outdated 0001-fix-cpu-compatibility.patch
- Drop outdated 0003-dpdk-fallthrough-comment-fixes.patch
- Added 0001-build-try-to-get-kernel-version-from-kernel-source.patch
  Allow host system to have a different kernel than the target
  system, fixes kernel module installation path for such case.
  Submitted upstream 2022-02-26
- Added fix-buildsystem-python36.patch for Leap as the buildsystem
  uses python syntax introduced with python37, but Leap still
  sticks with 3.6, so this backports it for the old python version.</changelog>
  <changelog author="rpm@fthiessen.de" date="1651060800">- Update to version 21.11.1
  * acl: add missing C++ guards
  * app/compress-perf: Various bug fixes
  * app/dumpcap: check for failure to set promiscuous
  * app/fib: fix division by zero
  * app/pdump: abort on multi-core capture limit
  * app/regex: fix number of matches
  * app/testpmd: Various bug fixes
  * baseband/acc100: avoid out-of-bounds access
  * bpf: add missing C++ guards
  * bus/pci: assign driver pointer before mapping
  * common/cnxk: Various bug fixes
  * common/mlx5: Various bug fixes
  * common/sfc_efx/base: fix recirculation ID set in outer rules
  * compressdev: fix missing space in log macro
  * eal/linux:
  * fix device monitor stop return
  * fix illegal memory access in uevent handler
  * log hugepage create errors with filename
  * Full change log can be found online:
    http://doc.dpdk.org/guides-21.11/rel_notes/release_21_11.html#fixes
- Rebased 0001-build-try-to-get-kernel-version-from-kernel-source.patch
- Dropped upstream fixed fix-buildsystem-python36.patch
- fixes CVE-2022-0669 [bsc#1198964], CVE-2021-3839 [bsc#1198963</changelog>
  <changelog author="jslaby@suse.cz" date="1653480000">- add kni-fix-build-with-Linux-5.18.patch to fix build with kernel
  5.18</changelog>
  <changelog author="dmueller@suse.com" date="1655812800">- also strip meson generated runpaths when installing examples
  manually (bsc#1200620)</changelog>
  <changelog author="bwiedemann@suse.com" date="1677067200">- Cleanup Sphinx build leftovers for reproducible builds</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1680696000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
    http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
  0001-build-try-to-get-kernel-version-from-kernel-source.patch
  kni-fix-build-with-Linux-5.18.patch
  * Added Patches:
    0001-fix-cpu-compatibility.patch
  * Rebased patches:
    0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1682510400">- add 0001-kni-fix-build-with-Linux-6.3.patch to fix build against
  kernel 6.3.</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1763380800">- Upstream bugfix update:
  - Version 22.11.10
  - net/mlx5: fix out-of-order completions in ordinary Rx burst
    (CVE-2025-23259, bsc#1254161)
  - Version 22.11.9
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id24
  - Version 22.11.8
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id21
  - Version 22.11.7
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id18
  - Remove included fix dpdk-CVE-2024-11614.patch
  - Version 22.11.6
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id15
  - Version 22.11.5
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id12
  - Version 22.11.4
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id8
  - Version 22.11.3
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id4
    Remove included fixes:
  - 0001-kni-fix-build-with-Linux-6.3.patch
  - Version 22.11.2
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id2
- Fix [bsc#1214724], SUSE provided DPDK modules taint the kernel as unsupported
  + Add kernel support flag for rte_kni.ko</changelog>
</package>
<package pkgid="b0dba348e29be222e6a9516c8749e338164eec28258a338e3f0fde903fd5a40d7da7a2166bc29eb8c96553e77695dcfb4a18e34dafb7373ada37fece4d4794ca" name="dracut-debuginfo" arch="aarch64">
  <version epoch="0" ver="059+suse.641.g906a3d31" rel="slfo.1.1_1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.586.ge0294756:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * feat(ifcfg): minimize s390-specific network configuration aspects
  * refactor(ifcfg): delete code duplication using iface_get_subchannels()
  * fix(znet): append to udev rules so each rd.znet_ifname is effective
  * feat(qeth_rules): remove qeth handling consolidated in 95znet
  * docs(dracut.cmdline): generalize description of rd.znet
  * feat(znet): use zdev for consolidated device configuration
  * feat(dasd): minimize dasd handling consolidated in s390-tools
  * feat(dasd_mod): minimize dasd handling consolidated in s390-tools
  * feat(dasd_rules): remove dasd handling consolidated in s390-tools
  * feat(zfcp): minimize zfcp handling consolidated in s390-tools
  * feat(zfcp_rules): remove zfcp handling consolidated in s390-tools
  * refactor(cms): remove now unnecessary inclusion of full s390utils-base
  * refactor(cms): use consolidated network config with zdev from s390-tools
  * refactor(cms): use consolidated dasd config with zdev from s390-tools
  * refactor(cms): use consolidated zfcp config with zdev from s390-tools
  * refactor(cms): use zdev to simplify handling CMSDASD=... boot option
  * fix(github): update format of labeler
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.598.g824fcff4:
  * fix(dracut): ldd output borked with `--sysroot` (bsc#1228659)
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(dracut-functions.sh): only return block devices from get_persistent_dev
  * fix(convertfs): shellcheck
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.607.g2d95edb5:
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly
  Fixes for bsc#1230354:
  * feat(systemd): always install libsystemd libraries
  * fix(dracut): do not add all lib subdirs to `LD_LIBRARY_PATH` with `--sysroot`</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.610.g850d981a:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1740139200">- Update to version 059+suse.617.gb2c1d974:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.623.gf9a73df5:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.631.ga638ed12:
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions
  * fix(dracut.spec): move znet to the main package (bsc#1239632)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.637.g85a5109c:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.639.g19f24feb:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1762257600">- Update to version 059+suse.641.g906a3d31:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
</package>
<package pkgid="085cfd47715473098ceeaab1cde0a44abad7052e8cce4aa5dc3060ecca1e601764e17b92fac629c2e780dfb8c1a68e40424b3634dfa6124cef19ca3847906870" name="dracut-debugsource" arch="aarch64">
  <version epoch="0" ver="059+suse.641.g906a3d31" rel="slfo.1.1_1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.586.ge0294756:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * feat(ifcfg): minimize s390-specific network configuration aspects
  * refactor(ifcfg): delete code duplication using iface_get_subchannels()
  * fix(znet): append to udev rules so each rd.znet_ifname is effective
  * feat(qeth_rules): remove qeth handling consolidated in 95znet
  * docs(dracut.cmdline): generalize description of rd.znet
  * feat(znet): use zdev for consolidated device configuration
  * feat(dasd): minimize dasd handling consolidated in s390-tools
  * feat(dasd_mod): minimize dasd handling consolidated in s390-tools
  * feat(dasd_rules): remove dasd handling consolidated in s390-tools
  * feat(zfcp): minimize zfcp handling consolidated in s390-tools
  * feat(zfcp_rules): remove zfcp handling consolidated in s390-tools
  * refactor(cms): remove now unnecessary inclusion of full s390utils-base
  * refactor(cms): use consolidated network config with zdev from s390-tools
  * refactor(cms): use consolidated dasd config with zdev from s390-tools
  * refactor(cms): use consolidated zfcp config with zdev from s390-tools
  * refactor(cms): use zdev to simplify handling CMSDASD=... boot option
  * fix(github): update format of labeler
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.598.g824fcff4:
  * fix(dracut): ldd output borked with `--sysroot` (bsc#1228659)
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(dracut-functions.sh): only return block devices from get_persistent_dev
  * fix(convertfs): shellcheck
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.607.g2d95edb5:
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly
  Fixes for bsc#1230354:
  * feat(systemd): always install libsystemd libraries
  * fix(dracut): do not add all lib subdirs to `LD_LIBRARY_PATH` with `--sysroot`</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.610.g850d981a:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1740139200">- Update to version 059+suse.617.gb2c1d974:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.623.gf9a73df5:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.631.ga638ed12:
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions
  * fix(dracut.spec): move znet to the main package (bsc#1239632)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.637.g85a5109c:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.639.g19f24feb:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1762257600">- Update to version 059+suse.641.g906a3d31:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
</package>
<package pkgid="35c2d8de160d86ae80881c02c159b284083be5c83ee801d379d1afcb58fd8a66a399e869b331aefb735246fb6b8b562230c2acdfa84d44c16909161c7f8607e2" name="drbd-debugsource" arch="aarch64">
  <version epoch="0" ver="9.1.16" rel="slfo.1.1_1.5"/>
  <changelog author="heming.zhao@suse.com" date="1661256000">- drbd: build error against kernel v5.19 (bsc#1202600)
  - add patch:
    + bsc-1202600_01-remove-QUEUE_FLAG_DISCARD.patch
    + bsc-1202600_02-dax-introduce-DAX_RECOVERY_WRITE-dax-access-mode.patch
    + bsc-1202600_03-block-decouple-REQ_OP_SECURE_ERASE-from-REQ_OP_DISCA.patch
    + bsc-1202600_04-remove-assign_p_sizes_qlim.patch
  - For rpmbuild warning, modify symlink /usr/sbin/rcdrbd to relative path
    + drbd.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1666440000">- drbd: build error against kernel v6.0.2 (bsc#1204596)
  - add patch:
    + bsc-1204596_01-block-remove-blk_cleanup_disk.patch
    + bsc-1204596_02-drbd-stop-using-bdevname-in-drbd_report_io_error.patch</changelog>
  <changelog author="lnussel@suse.de" date="1670241600">- BuildRequire %kernel_module_package_buildreqs (boo#1205149)</changelog>
  <changelog author="heming.zhao@suse.com" date="1672920000">- drbd: fix build error against kernel v6.1.1 (bsc#1206791)
  * update bsc-1201335_06-bdi.patch commit log (no code change)
    + bsc-1201335_06-bdi.patch
  * update bsc-1202600_02-dax-introduce-DAX_RECOVERY_WRITE-dax-access-mode.patch (no code change)
    + bsc-1202600_02-dax-introduce-DAX_RECOVERY_WRITE-dax-access-mode.patch
  * using upstream patch to replace exist patch
  - bsc-1204596_02-drbd-stop-using-bdevname-in-drbd_report_io_error.patch
    + bsc-1204596_02-drbd-remove-usage-of-bdevname.patch
  * add new patches
    + bsc-1206791-01-drbd-add-comments-explaining-removal-of-bdi-congesti.patch
    + bsc-1206791-02-drbd-fix-static-analysis-warnings.patch
    + bsc-1206791-03-drbd-fix-warning-about-initializing-multiple-struct-.patch
    + bsc-1206791-04-blk_queue_split__no_present.patch
    + bsc-1206791-05-prandom_u32_max.patch
    + bsc-1206791-06-write_zeroes__no_capable.patch
    + bsc-1206791-07-drbd-fix-use-after-free-bugs-in-get_initial_state.patch
    + bsc-1206791-08-lib-lru_cache-Fixed-array-overflow-caused-by-incorre.patch
    + bsc-1206791-09-pmem-use-fs_dax_get_by_bdev-instead-of-dax_get_by_ho.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1673006400">- remove useless patch, dax_get_by_host() was replaced by fs_dax_get_by_bdev()
  * bsc-1192929_06-dax_support.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1678536000">- drbd: fix build error against kernel v6.2.1 (bsc#1209168)
  * update patch
    + bsc-1206791-05-prandom_u32_max.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1693828800">- Update DRBD version from 9.0.30+ to 9.1.16 (PED-6362)
  * 9.1.16 (api:genl2/proto:86-121/transport:18)
  * shorten times DRBD keeps IRQs on one CPU disabled. Could lead
    to connection interruption under specific conditions
  * fix a corner case where resync did not start after resync-pause
    state flapped
  * fix online adding of volumes/minors to an already connected resource
  * fix a possible split-brain situation with quorum enabled with
    ping-timeout set to (unusual) high value
  * fix a locking problem that could lead to kernel OOPS
  * ensure resync can continue (bitmap-based) after interruption
    also when it started as a full-resync first
  * correctly handle meta-data when forgetting diskless peers
  * fix a possibility of getting a split-brain although quorum enabled
  * correctly propagate UUIDs after resync following a resize operation.
    Consequence could be a full resync instead of a bitmap-based one
  * fix a rare race condition that can cause a drbd device to end up
    with WFBitMapS/Established replication states
  * 9.1.15 (api:genl2/proto:86-121/transport:18)
  * fix how flush requests are marked when submitted to the Linux IO
    stack on the secondary node
  * when establishing a connection failed with a two-pc timeout, a
    receiver thread deadlocked, causing drbdsetup calls to block on
    that resource (difficult to trigger)
  * fixed a NULL-ptr deref (a OOPS) caused by a rare race condition
    while taking a resource down
  * fix a possible hard kernel-lockup, can only be triggerd when a
    CPU-mask is configured
  * updated kernel compatibility to at least Linux head and also fixed
    a bug in the compat checks/rules that caused OOPSes of the previous
    drbd releases when compiled with Linux-6.2 (or on RHEL 9.2 kernel).
  * fix an aspect of the data-generation (UUID) handling where DRBD
    failed to do a resync when a diskless node in the remaining
    partition promotes and demotes while a diskful node is isolated
  * fix an aspect of the data-generation (UUID) handling where DRBD
    considered a node to have unrelated data; this bug was triggered by
    a sequence involving removing two nodes from a cluster and readding
    one with the "day-0" UUIDs.
  * do not block specific state changes (promote, demote, attach, and
    detach) when only some nodes add a new minor
  * 9.1.14 (api:genl2/proto:86-121/transport:18)
  * fix a race with concurrent promotion and demotion, which can
    lead to an unexpected "split-brain" later on
  * fix a specific case where promotion was allowed where it should not
  * fix a race condition between auto-promote and a second two-phase
    commit that can lead to a DRBD thread locking up in an endless loop
  * fix several bugs with "resync-after":
  - missing resync-resume when minor numbers run in opposite
    direction as the resync-after dependencies
  - a race that might lead to an OOPS in add_timer()
  * fix an OOPS when reading from in_flight_summary in debugfs
  * fix a race that might lead to an endless loop of printing
    "postponing start_resync" while starting a resync
  * fix diskless node with a diskfull with a 4KiB backend
  * simplify remembering two-pc parents, maybe fixing a one-time-seen bug
  * derive abort_local_transaction timeout from ping-timeout
  * 9.1.13 (api:genl2/proto:86-121/transport:18)
  * when calculating if a partition has quorum, take into account if
    the missing nodes might have quorum
  * fix forget-peer for diskless peers
  * clear the resync_again counter upon disconnect
  * also call the unfence handler when no resync happens
  * do not set bitmap bits when attaching to an up-to-date disk (late)
  * work on bringing the out-of-tree DRBD9 closer to DRBD in the upstream
    kernel; Use lru_cahche.ko from the installed kernel whenever possible
  * 9.1.12 (api:genl2/proto:86-121/transport:18)
  * fix a race that could result in connection attempts getting aborted
    with the message "sock_recvmsg returned -11"
  * rate limit messages in case the peer can not write the backing storage
    and it does not finish the necessary state transitions
  * reduced the receive timeout during connecting to the intended 5 seconds
    (ten times ping-ack timeout)
  * losing the connection at a specific point in time during establishing
    a connection could cause a transition to StandAlone; fixed that, so
    that it keeps trying to connect
  * fix a race that could lead to a fence-peer handler being called
    unexpectedly when the fencing policy is changed at the moment before
    promoting
  * 9.1.11 (api:genl2/proto:86-121/transport:18)
  * The change introduced with 9.1.10 created another problem that might
    lead to premature request completion (kernel crash); reverted that
    change and fix it in another way
  * 9.1.10 (api:genl2/proto:86-121/transport:18)
  * fix a regression introduced with 9.1.9; using protocol A on SMP
    with heavy IO can might cause kernel crash
  * 9.1.9 (api:genl2/proto:86-121/transport:18)
  * fix a mistake in the compat generation code; it broke DRBD on
    partitions on kernel older than linux 5.10 (this was introduced
    with drbd-9.1.8; not affected: logical volumes)
  * fix for a bug (introduced with drbd-9.0.0), that caused possible
    inconsistencies in the mirror when using the 'resync-after' option
  * fix a bug that could cause a request to get stuck after an unlucky
    timing with a loss of connection
  * close a very small timing window between connect and promote that
    could lead to the new-current-uuid not being transmitted to the
    concurrently connecting peer, which might lead to denied connections
    later on
  * fix a recently introduced OOPS when adding new volumes to a
    connected resource
  * fix online attach when the connection to a 3rd node is down
  * 9.1.8 (api:genl2/proto:86-121/transport:18)
  * restore protocol compatibility with drbd-8.4
  * detect peers that died silently when starting a two-phase-commit
  * correctly abort two-phase-commits when a connection breaks between
    phases 1 and 2
  * allow re-connect to a node that was forced into secondary role and
    where an opener is still present from the last time it was primary
  * fix a race condition that allowed to configure two peers with the
    same node id
  * ensure that an open() call fails within the auto-promote timeout
    if it can not succeed
  * build fixes for RHEL9
  * following upstream changes to DRBD up to Linux 5.17 and updated compat
  * 9.1.7 (api:genl2/proto:110-121/transport:18)
  * avoid deadlock upon trying to down an io-frozen DRBD device that
    has a file system mounted
  * fix DRBD to not send too large resync requests at multiples of 8TiB
  * fix for a "forgotten" resync after IO was suspended due to lack of quorum
  * refactored IO suspend/resume fixing several bugs; the worst one could
    lead to premature request completion
  * disable discards on diskless if diskful peers do not support it
  * make demote to secondary a two-phase state transition; that guarantees that
    after demotion, DRBD will not write to any meta-data in the cluster
  * enable "--force primary" in for no-quorum situations
  * allow graceful recovery of primary lacking quorum and therefore
    have forzen IO requests; that includes "--force secondary"
  * following upstream changes to DRBD up to Linux 5.15 and updated compat
  * 9.1.6 (api:genl2/proto:110-121/transport:17)
  * fix IO to internal meta-data for backing device larger than 128TB
  * fix resending requests towards diskless peers, this is relevant when
    fencing is enabled, but the connection is re-established before fencing
    succeeds; when the bug triggered it lead to "stuck" requests
  * remove lockless buffer pages handling; it still contained very hard to
    trigger bugs
  * make sure DRBD's resync does not cause unnecessary allocation in
    a thinly provisioned backing device on a resync target node
  * avoid unnecessary resync (or split-brain) due to a wrongly generated
    new current UUID when an already IO frozen DBRD gets new writes
  * small fix to autopromote, when an application tries a read-only open
    before it does a read-write open immediately after the peer primary
    vanished ungracefully
  * split out the secure boot key into a package on its own, that is
    necessary to allow installation of multiple drbd kernel module packages
  * Support for building containers for flacar linux
  * 9.1.5 (api:genl2/proto:110-121/transport:17)
  * merged all changes from drbd-9.0.32
  - fix a read-access-after-free, that could cause an OOPs; triggers with
    an unusual configuration with a secondary having a smaller AL than
    the primary or a diskless primary and heavy IO
  - avoid a livelock that can cause long IO delays during resync on a
    primary resync-target node
  - following upstream changes to DRBD up to Linux 5.14 and updated compat
    (including RHEL9-beta)
  - fix module override for Oracle-Linux
  * fixed a locking regression of the 9.1 branch, only relevant in
    the moment a local backing device delivers an IO error to drbd
  * removed compat support for kernel older than Linux-3.10 (RHEL7)
  * code cleanups and refactoring
  * 9.1.4 (api:genl2/proto:110-121/transport:17)
  * merged all changes from drbd-9.0.31
  * enabled dynamic debug on some additional log messages
  * remove (broken) write conflict resolution, replace it with warning
    about the fact
  * debugfs entry for the interval tree
  * 9.1.3 (api:genl2/proto:110-120/transport:17)
  * merged all fixes from drbd-9.0.30-0rc1
  * fix a corner-case NULL deref in the lockless buffer pages handling; the
    regression was introduced with 9.1.0 (released Feb 2021); To my knowledge
    it took 6 months until someone triggered it for the first time
  * fix sending a P_PEERS_IN_SYNC packet into a fresh connection (before
    handshake packets); this problem was introduced when the drbd-8.x
    compatibility code was removed
  * remove sending a DRBD-barrier packet when processing a REQ_PREFLUSH
    request, that improves IO-depth and improves performance with that
  * 9.1.2 (api:genl2/proto:110-120/transport:17)
  * merged all fixes from drbd-9.0.29; other than that no changes in this branch
  * 9.1.1 (api:genl2/proto:110-119/transport:17)
  * fix a temporal deadlock you could trigger when you exercise promotion races
    and mix some read-only openers into the test case
  * fix for bitmap-copy operation in a very specific and unlikely case where
    two nodes do a bitmap-based resync due to disk-states
  * fix size negotiation when combining nodes of different CPU architectures
    that have different page sizes
  * fix a very rare race where DRBD reported wrong magic in a header
    packet right after reconnecting
  * fix a case where DRBD ends up reporting unrelated data; it affected
    thinly allocated resources with a diskless node in a recreate from day0
    event
  * changes to socket buffer sizes get applied to established connections immediately;
    before it was applied after a re-connect
  * add exists events for path objects
  * fix a merge-mistake that broke compatibility with 5.10 kernels
  * 9.1.0 (api:genl2/proto:110-119/transport:16)
  * was forked off from drbd 9.0.19
  * has all changes up to 9.0.28-1
  * locking in the IO-submit code path was considerably improved,
    allowing multiple CPU to submit in parallel
  * rename patch
  - fix-resync-finished-with-syncs-have-bits-set.patch
    + bsc-1025089_fix-resync-finished-with-syncs-have-bits-set.patch
  * remove patches which are already included in upstream code:
  - bsc-1192929_01-make_block_holder_optional.patch
  - bsc-1192929_02-move_kvmalloc_related_to_slab.patch
  - bsc-1192929_03-polling_to_bio_base.patch
  - bsc-1192929_04-pass_gend_to_blk_queue_update_readahead.patch
  - bsc-1192929_07-add_disk_error_handle.patch
  - bsc-1192929_08-have_void_drbd_submit_bio.patch
  - bsc-1192929_09-remove_bdgrab.patch
  - bsc-1201335_01-compat-test-and-cocci-patch-for-bdi-in-gendisk.patch
  - bsc-1201335_02-compat-only-apply-bdi-pointer-patch-if-bdi-is-in-req.patch
  - bsc-1201335_03-genhd.patch
  - bsc-1201335_04-bio_alloc_bioset.patch
  - bsc-1201335_05-bio_alloc.patch
  - bsc-1201335_06-bdi.patch
  - bsc-1201335_07-write-same.patch
  - bsc-1201335_08-bio_clone_fast.patch
  - bsc-1202600_01-remove-QUEUE_FLAG_DISCARD.patch
  - bsc-1202600_02-dax-introduce-DAX_RECOVERY_WRITE-dax-access-mode.patch
  - bsc-1202600_03-block-decouple-REQ_OP_SECURE_ERASE-from-REQ_OP_DISCA.patch
  - bsc-1202600_04-remove-assign_p_sizes_qlim.patch
  - bsc-1204596_01-block-remove-blk_cleanup_disk.patch
  - bsc-1204596_02-drbd-remove-usage-of-bdevname.patch
  - bsc-1206791-01-drbd-add-comments-explaining-removal-of-bdi-congesti.patch
  - bsc-1206791-02-drbd-fix-static-analysis-warnings.patch
  - bsc-1206791-03-drbd-fix-warning-about-initializing-multiple-struct-.patch
  - bsc-1206791-04-blk_queue_split__no_present.patch
  - bsc-1206791-05-prandom_u32_max.patch
  - bsc-1206791-06-write_zeroes__no_capable.patch
  - bsc-1206791-07-drbd-fix-use-after-free-bugs-in-get_initial_state.patch
  - bsc-1206791-08-lib-lru_cache-Fixed-array-overflow-caused-by-incorre.patch
  - bsc-1206791-09-pmem-use-fs_dax_get_by_bdev-instead-of-dax_get_by_ho.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1698753600">- drbd failed to build after 15sp6/dolomit updated kernel (bsc#1216666)
  * Add patch
    + 0008-compat-block-introduce-holder-ops.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1699444800">- drbd failed to build after 15sp6/dolomit updated kernel (bsc#1216666)
  * Add patch
    + bsc-1216666-compat-sock-Remove-sendpage-in-favour-of-sendmsg-MSG.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1704888000">- drbd fails to build with the latest 6.4 kernel of the week (bsc#1218658)
  * Add patch
    + 0006-drbd-log-numeric-value-of-drbd_state_rv-as-well-as-s.patch
    + 0011-compat-block-pass-a-gendisk-to-open.patch
    + 0013-drbd-remove-unused-extern-for-conn_try_outdate_peer.patch
    + 0014-drbd-include-source-of-state-change-in-log.patch
    + 0015-compat-block-use-the-holder-as-indication-for-exclus.patch
    + 0018-drbd-rework-autopromote.patch
    + 0019-compat-block-remove-the-unused-mode-argument-to-rele.patch
    + 0022-compat-block-replace-fmode_t-with-a-block-specific-t.patch
    + 0023-compat-genetlink-remove-userhdr-from-struct-genl_inf.patch</changelog>
</package>
<package pkgid="91fc4bf1ca625f988c3960043f08af1da1d07e65abd0d900aee16f41e7ef9f856a009ac760e104e1dc82796667682bec63b59bc8e5554e7a9dfe993b0e3dd6e6" name="drbd-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.1.16_k6.4.0_19" rel="slfo.1.1_1.5"/>
  <changelog author="heming.zhao@suse.com" date="1661256000">- drbd: build error against kernel v5.19 (bsc#1202600)
  - add patch:
    + bsc-1202600_01-remove-QUEUE_FLAG_DISCARD.patch
    + bsc-1202600_02-dax-introduce-DAX_RECOVERY_WRITE-dax-access-mode.patch
    + bsc-1202600_03-block-decouple-REQ_OP_SECURE_ERASE-from-REQ_OP_DISCA.patch
    + bsc-1202600_04-remove-assign_p_sizes_qlim.patch
  - For rpmbuild warning, modify symlink /usr/sbin/rcdrbd to relative path
    + drbd.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1666440000">- drbd: build error against kernel v6.0.2 (bsc#1204596)
  - add patch:
    + bsc-1204596_01-block-remove-blk_cleanup_disk.patch
    + bsc-1204596_02-drbd-stop-using-bdevname-in-drbd_report_io_error.patch</changelog>
  <changelog author="lnussel@suse.de" date="1670241600">- BuildRequire %kernel_module_package_buildreqs (boo#1205149)</changelog>
  <changelog author="heming.zhao@suse.com" date="1672920000">- drbd: fix build error against kernel v6.1.1 (bsc#1206791)
  * update bsc-1201335_06-bdi.patch commit log (no code change)
    + bsc-1201335_06-bdi.patch
  * update bsc-1202600_02-dax-introduce-DAX_RECOVERY_WRITE-dax-access-mode.patch (no code change)
    + bsc-1202600_02-dax-introduce-DAX_RECOVERY_WRITE-dax-access-mode.patch
  * using upstream patch to replace exist patch
  - bsc-1204596_02-drbd-stop-using-bdevname-in-drbd_report_io_error.patch
    + bsc-1204596_02-drbd-remove-usage-of-bdevname.patch
  * add new patches
    + bsc-1206791-01-drbd-add-comments-explaining-removal-of-bdi-congesti.patch
    + bsc-1206791-02-drbd-fix-static-analysis-warnings.patch
    + bsc-1206791-03-drbd-fix-warning-about-initializing-multiple-struct-.patch
    + bsc-1206791-04-blk_queue_split__no_present.patch
    + bsc-1206791-05-prandom_u32_max.patch
    + bsc-1206791-06-write_zeroes__no_capable.patch
    + bsc-1206791-07-drbd-fix-use-after-free-bugs-in-get_initial_state.patch
    + bsc-1206791-08-lib-lru_cache-Fixed-array-overflow-caused-by-incorre.patch
    + bsc-1206791-09-pmem-use-fs_dax_get_by_bdev-instead-of-dax_get_by_ho.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1673006400">- remove useless patch, dax_get_by_host() was replaced by fs_dax_get_by_bdev()
  * bsc-1192929_06-dax_support.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1678536000">- drbd: fix build error against kernel v6.2.1 (bsc#1209168)
  * update patch
    + bsc-1206791-05-prandom_u32_max.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1693828800">- Update DRBD version from 9.0.30+ to 9.1.16 (PED-6362)
  * 9.1.16 (api:genl2/proto:86-121/transport:18)
  * shorten times DRBD keeps IRQs on one CPU disabled. Could lead
    to connection interruption under specific conditions
  * fix a corner case where resync did not start after resync-pause
    state flapped
  * fix online adding of volumes/minors to an already connected resource
  * fix a possible split-brain situation with quorum enabled with
    ping-timeout set to (unusual) high value
  * fix a locking problem that could lead to kernel OOPS
  * ensure resync can continue (bitmap-based) after interruption
    also when it started as a full-resync first
  * correctly handle meta-data when forgetting diskless peers
  * fix a possibility of getting a split-brain although quorum enabled
  * correctly propagate UUIDs after resync following a resize operation.
    Consequence could be a full resync instead of a bitmap-based one
  * fix a rare race condition that can cause a drbd device to end up
    with WFBitMapS/Established replication states
  * 9.1.15 (api:genl2/proto:86-121/transport:18)
  * fix how flush requests are marked when submitted to the Linux IO
    stack on the secondary node
  * when establishing a connection failed with a two-pc timeout, a
    receiver thread deadlocked, causing drbdsetup calls to block on
    that resource (difficult to trigger)
  * fixed a NULL-ptr deref (a OOPS) caused by a rare race condition
    while taking a resource down
  * fix a possible hard kernel-lockup, can only be triggerd when a
    CPU-mask is configured
  * updated kernel compatibility to at least Linux head and also fixed
    a bug in the compat checks/rules that caused OOPSes of the previous
    drbd releases when compiled with Linux-6.2 (or on RHEL 9.2 kernel).
  * fix an aspect of the data-generation (UUID) handling where DRBD
    failed to do a resync when a diskless node in the remaining
    partition promotes and demotes while a diskful node is isolated
  * fix an aspect of the data-generation (UUID) handling where DRBD
    considered a node to have unrelated data; this bug was triggered by
    a sequence involving removing two nodes from a cluster and readding
    one with the "day-0" UUIDs.
  * do not block specific state changes (promote, demote, attach, and
    detach) when only some nodes add a new minor
  * 9.1.14 (api:genl2/proto:86-121/transport:18)
  * fix a race with concurrent promotion and demotion, which can
    lead to an unexpected "split-brain" later on
  * fix a specific case where promotion was allowed where it should not
  * fix a race condition between auto-promote and a second two-phase
    commit that can lead to a DRBD thread locking up in an endless loop
  * fix several bugs with "resync-after":
  - missing resync-resume when minor numbers run in opposite
    direction as the resync-after dependencies
  - a race that might lead to an OOPS in add_timer()
  * fix an OOPS when reading from in_flight_summary in debugfs
  * fix a race that might lead to an endless loop of printing
    "postponing start_resync" while starting a resync
  * fix diskless node with a diskfull with a 4KiB backend
  * simplify remembering two-pc parents, maybe fixing a one-time-seen bug
  * derive abort_local_transaction timeout from ping-timeout
  * 9.1.13 (api:genl2/proto:86-121/transport:18)
  * when calculating if a partition has quorum, take into account if
    the missing nodes might have quorum
  * fix forget-peer for diskless peers
  * clear the resync_again counter upon disconnect
  * also call the unfence handler when no resync happens
  * do not set bitmap bits when attaching to an up-to-date disk (late)
  * work on bringing the out-of-tree DRBD9 closer to DRBD in the upstream
    kernel; Use lru_cahche.ko from the installed kernel whenever possible
  * 9.1.12 (api:genl2/proto:86-121/transport:18)
  * fix a race that could result in connection attempts getting aborted
    with the message "sock_recvmsg returned -11"
  * rate limit messages in case the peer can not write the backing storage
    and it does not finish the necessary state transitions
  * reduced the receive timeout during connecting to the intended 5 seconds
    (ten times ping-ack timeout)
  * losing the connection at a specific point in time during establishing
    a connection could cause a transition to StandAlone; fixed that, so
    that it keeps trying to connect
  * fix a race that could lead to a fence-peer handler being called
    unexpectedly when the fencing policy is changed at the moment before
    promoting
  * 9.1.11 (api:genl2/proto:86-121/transport:18)
  * The change introduced with 9.1.10 created another problem that might
    lead to premature request completion (kernel crash); reverted that
    change and fix it in another way
  * 9.1.10 (api:genl2/proto:86-121/transport:18)
  * fix a regression introduced with 9.1.9; using protocol A on SMP
    with heavy IO can might cause kernel crash
  * 9.1.9 (api:genl2/proto:86-121/transport:18)
  * fix a mistake in the compat generation code; it broke DRBD on
    partitions on kernel older than linux 5.10 (this was introduced
    with drbd-9.1.8; not affected: logical volumes)
  * fix for a bug (introduced with drbd-9.0.0), that caused possible
    inconsistencies in the mirror when using the 'resync-after' option
  * fix a bug that could cause a request to get stuck after an unlucky
    timing with a loss of connection
  * close a very small timing window between connect and promote that
    could lead to the new-current-uuid not being transmitted to the
    concurrently connecting peer, which might lead to denied connections
    later on
  * fix a recently introduced OOPS when adding new volumes to a
    connected resource
  * fix online attach when the connection to a 3rd node is down
  * 9.1.8 (api:genl2/proto:86-121/transport:18)
  * restore protocol compatibility with drbd-8.4
  * detect peers that died silently when starting a two-phase-commit
  * correctly abort two-phase-commits when a connection breaks between
    phases 1 and 2
  * allow re-connect to a node that was forced into secondary role and
    where an opener is still present from the last time it was primary
  * fix a race condition that allowed to configure two peers with the
    same node id
  * ensure that an open() call fails within the auto-promote timeout
    if it can not succeed
  * build fixes for RHEL9
  * following upstream changes to DRBD up to Linux 5.17 and updated compat
  * 9.1.7 (api:genl2/proto:110-121/transport:18)
  * avoid deadlock upon trying to down an io-frozen DRBD device that
    has a file system mounted
  * fix DRBD to not send too large resync requests at multiples of 8TiB
  * fix for a "forgotten" resync after IO was suspended due to lack of quorum
  * refactored IO suspend/resume fixing several bugs; the worst one could
    lead to premature request completion
  * disable discards on diskless if diskful peers do not support it
  * make demote to secondary a two-phase state transition; that guarantees that
    after demotion, DRBD will not write to any meta-data in the cluster
  * enable "--force primary" in for no-quorum situations
  * allow graceful recovery of primary lacking quorum and therefore
    have forzen IO requests; that includes "--force secondary"
  * following upstream changes to DRBD up to Linux 5.15 and updated compat
  * 9.1.6 (api:genl2/proto:110-121/transport:17)
  * fix IO to internal meta-data for backing device larger than 128TB
  * fix resending requests towards diskless peers, this is relevant when
    fencing is enabled, but the connection is re-established before fencing
    succeeds; when the bug triggered it lead to "stuck" requests
  * remove lockless buffer pages handling; it still contained very hard to
    trigger bugs
  * make sure DRBD's resync does not cause unnecessary allocation in
    a thinly provisioned backing device on a resync target node
  * avoid unnecessary resync (or split-brain) due to a wrongly generated
    new current UUID when an already IO frozen DBRD gets new writes
  * small fix to autopromote, when an application tries a read-only open
    before it does a read-write open immediately after the peer primary
    vanished ungracefully
  * split out the secure boot key into a package on its own, that is
    necessary to allow installation of multiple drbd kernel module packages
  * Support for building containers for flacar linux
  * 9.1.5 (api:genl2/proto:110-121/transport:17)
  * merged all changes from drbd-9.0.32
  - fix a read-access-after-free, that could cause an OOPs; triggers with
    an unusual configuration with a secondary having a smaller AL than
    the primary or a diskless primary and heavy IO
  - avoid a livelock that can cause long IO delays during resync on a
    primary resync-target node
  - following upstream changes to DRBD up to Linux 5.14 and updated compat
    (including RHEL9-beta)
  - fix module override for Oracle-Linux
  * fixed a locking regression of the 9.1 branch, only relevant in
    the moment a local backing device delivers an IO error to drbd
  * removed compat support for kernel older than Linux-3.10 (RHEL7)
  * code cleanups and refactoring
  * 9.1.4 (api:genl2/proto:110-121/transport:17)
  * merged all changes from drbd-9.0.31
  * enabled dynamic debug on some additional log messages
  * remove (broken) write conflict resolution, replace it with warning
    about the fact
  * debugfs entry for the interval tree
  * 9.1.3 (api:genl2/proto:110-120/transport:17)
  * merged all fixes from drbd-9.0.30-0rc1
  * fix a corner-case NULL deref in the lockless buffer pages handling; the
    regression was introduced with 9.1.0 (released Feb 2021); To my knowledge
    it took 6 months until someone triggered it for the first time
  * fix sending a P_PEERS_IN_SYNC packet into a fresh connection (before
    handshake packets); this problem was introduced when the drbd-8.x
    compatibility code was removed
  * remove sending a DRBD-barrier packet when processing a REQ_PREFLUSH
    request, that improves IO-depth and improves performance with that
  * 9.1.2 (api:genl2/proto:110-120/transport:17)
  * merged all fixes from drbd-9.0.29; other than that no changes in this branch
  * 9.1.1 (api:genl2/proto:110-119/transport:17)
  * fix a temporal deadlock you could trigger when you exercise promotion races
    and mix some read-only openers into the test case
  * fix for bitmap-copy operation in a very specific and unlikely case where
    two nodes do a bitmap-based resync due to disk-states
  * fix size negotiation when combining nodes of different CPU architectures
    that have different page sizes
  * fix a very rare race where DRBD reported wrong magic in a header
    packet right after reconnecting
  * fix a case where DRBD ends up reporting unrelated data; it affected
    thinly allocated resources with a diskless node in a recreate from day0
    event
  * changes to socket buffer sizes get applied to established connections immediately;
    before it was applied after a re-connect
  * add exists events for path objects
  * fix a merge-mistake that broke compatibility with 5.10 kernels
  * 9.1.0 (api:genl2/proto:110-119/transport:16)
  * was forked off from drbd 9.0.19
  * has all changes up to 9.0.28-1
  * locking in the IO-submit code path was considerably improved,
    allowing multiple CPU to submit in parallel
  * rename patch
  - fix-resync-finished-with-syncs-have-bits-set.patch
    + bsc-1025089_fix-resync-finished-with-syncs-have-bits-set.patch
  * remove patches which are already included in upstream code:
  - bsc-1192929_01-make_block_holder_optional.patch
  - bsc-1192929_02-move_kvmalloc_related_to_slab.patch
  - bsc-1192929_03-polling_to_bio_base.patch
  - bsc-1192929_04-pass_gend_to_blk_queue_update_readahead.patch
  - bsc-1192929_07-add_disk_error_handle.patch
  - bsc-1192929_08-have_void_drbd_submit_bio.patch
  - bsc-1192929_09-remove_bdgrab.patch
  - bsc-1201335_01-compat-test-and-cocci-patch-for-bdi-in-gendisk.patch
  - bsc-1201335_02-compat-only-apply-bdi-pointer-patch-if-bdi-is-in-req.patch
  - bsc-1201335_03-genhd.patch
  - bsc-1201335_04-bio_alloc_bioset.patch
  - bsc-1201335_05-bio_alloc.patch
  - bsc-1201335_06-bdi.patch
  - bsc-1201335_07-write-same.patch
  - bsc-1201335_08-bio_clone_fast.patch
  - bsc-1202600_01-remove-QUEUE_FLAG_DISCARD.patch
  - bsc-1202600_02-dax-introduce-DAX_RECOVERY_WRITE-dax-access-mode.patch
  - bsc-1202600_03-block-decouple-REQ_OP_SECURE_ERASE-from-REQ_OP_DISCA.patch
  - bsc-1202600_04-remove-assign_p_sizes_qlim.patch
  - bsc-1204596_01-block-remove-blk_cleanup_disk.patch
  - bsc-1204596_02-drbd-remove-usage-of-bdevname.patch
  - bsc-1206791-01-drbd-add-comments-explaining-removal-of-bdi-congesti.patch
  - bsc-1206791-02-drbd-fix-static-analysis-warnings.patch
  - bsc-1206791-03-drbd-fix-warning-about-initializing-multiple-struct-.patch
  - bsc-1206791-04-blk_queue_split__no_present.patch
  - bsc-1206791-05-prandom_u32_max.patch
  - bsc-1206791-06-write_zeroes__no_capable.patch
  - bsc-1206791-07-drbd-fix-use-after-free-bugs-in-get_initial_state.patch
  - bsc-1206791-08-lib-lru_cache-Fixed-array-overflow-caused-by-incorre.patch
  - bsc-1206791-09-pmem-use-fs_dax_get_by_bdev-instead-of-dax_get_by_ho.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1698753600">- drbd failed to build after 15sp6/dolomit updated kernel (bsc#1216666)
  * Add patch
    + 0008-compat-block-introduce-holder-ops.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1699444800">- drbd failed to build after 15sp6/dolomit updated kernel (bsc#1216666)
  * Add patch
    + bsc-1216666-compat-sock-Remove-sendpage-in-favour-of-sendmsg-MSG.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1704888000">- drbd fails to build with the latest 6.4 kernel of the week (bsc#1218658)
  * Add patch
    + 0006-drbd-log-numeric-value-of-drbd_state_rv-as-well-as-s.patch
    + 0011-compat-block-pass-a-gendisk-to-open.patch
    + 0013-drbd-remove-unused-extern-for-conn_try_outdate_peer.patch
    + 0014-drbd-include-source-of-state-change-in-log.patch
    + 0015-compat-block-use-the-holder-as-indication-for-exclus.patch
    + 0018-drbd-rework-autopromote.patch
    + 0019-compat-block-remove-the-unused-mode-argument-to-rele.patch
    + 0022-compat-block-replace-fmode_t-with-a-block-specific-t.patch
    + 0023-compat-genetlink-remove-userhdr-from-struct-genl_inf.patch</changelog>
</package>
<package pkgid="1526850d23e1af9cd6397fd05524dcb34477566798d7f5682d0975f9cd0312b8d1b1b177c07926fc583045723c48dd54072f8f30b984c3e6f6b86b45a15d171b" name="drbd-utils-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.25.0" rel="slfo.1.1_1.3"/>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1685534400">- Update url and remove download url for tarball, not valid anymore.</changelog>
  <changelog author="heming.zhao@suse.com" date="1693224000">- Update to 9.25.0 (jsc#PED-6362)
  * drbdsetup,v9,show: fix meta disk format for json
  * drbdmeta: {hex,}dump superblock
  * drbdmon: major rewrite
  * build: gcc v12 cleanups
  * misc: put locks into separate dir
  * selinux: add fowner fsetsid, they dropped a global noaudit rule
  * v9: Support user-defined block-size
  * doc,v9: improvements all over the place
  * drbdadm,v9: implement drbdadm role &lt;res:peer&gt;
  * drbdadm,v9: pass --verbose/--statistics to drbdsetup status
  * drbd{adm,meta}: add repair-md subcommand
  * drbdadm,v9,resync-after: fix too strict check
  * drbdadm,v9,floating: fixup fake uname for 9.2.x strict_names=1
  * drbdadm,v9,parser: fixup globs, also rm GNU libc specific extensions
  * drbdadm,v9,parser: allow via outside-address for NATed peers
  * parser,v9: deprecate named connections
  * drbd-selinux: add sub package, minor packaging/spec changes
  * drbdadm: allow files from expanded glob to vanish
  * drbdadm,v9: fix potential segfault in postparse
  * drbdadm,v9: fix sh-ip when set on connection/path
  * drbdmeta: fix apply-al for bitmap sizes &gt; 4GiB
  * drbd-service-shim.sh: add secondary --force
  * ocf: fix for dropped --peer option
  * drbdsetup,v9: show susupend reason in json output
  * drbdsetup,v9: add secondary --force
  * drbdsetup,v9: fix *susp_str() for events2 diff mode
  * drdbdadm,v9: fix sh-resource
  * drdbdadm,v9: rm --peer=connect_to_host
  * ocf: deal with situation where PM node name and actual node name do not
  match
  * notify.sh: deal with unset DRBD_PEER env variable
  * crm-fence-peer: fix timeout with Pacemaker 2.0.5
  * drbdmeta: don't wait for confirmation if not a TTY
  * drbdadm,v9: Pass '--force' to certain drbdmeta commands
  * drbdmeta: do init in chunks; allow different methods
  * build: various minor fixes (udev detection, POSIX,
  compiler flags, allow doc building with asciidoctor,...)
  * drbd.ocf: fix type (relevant for certain pcs versions)
  * crm-fence-peer: fix timeout with Pacemaker 2.1
  * v9,proxy: allow multiple sharing a proxy node
  * v9,drbdsetup: quote resource name in "show"
  * build: allow building for RHEL9.0, minor cleanups
  * reactor/systemd: allow proper actions (e.g., reboot) if
  demotion fails.
- introduce new systemd service:
  drbd-demote-or-escalate@.service
- remove v83 v84 binaries (incompatible with kmp)
- drop patches which are already included in latest code:
  - 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  - 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch
- add upstream patch:
  + 0001-drbdadm-v9-do-not-segfault-when-re-configuring-proxy.patch
  + 0002-user-drbrdmon-add-missing-stdint.h-includes.patch
  + 0003-Introduce-default_types.h-header.patch
- change patch name:
  - 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch
  + bsc-1032142_Disable-quorum-in-default-configuration.patch
- rebase patch:
  + pie-fix.patch
  + rpmlint-build-error.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="glass.su@suse.com" date="1710763200">- drbd failover timeout because of "fence-peer helper broken" (bsc#1219263)
  * bsc-1219263_crm-fence-peer.9.sh-fix-parsing-in_ccm-crmd-fields-o.patch
  * bsc-1219263_crm-fence-peer.9.sh-use-join-of-node_state-to-judge-.patch</changelog>
</package>
<package pkgid="8b01f893765a2f1d8c45b48ccfc72dccb3caad3f94776998f56b001854fe98a654699c586e887454d462c6577b2ea72cd5e7b29a3ef48d9ac22c3688b9a32104" name="drbd-utils-debugsource" arch="aarch64">
  <version epoch="0" ver="9.25.0" rel="slfo.1.1_1.3"/>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1685534400">- Update url and remove download url for tarball, not valid anymore.</changelog>
  <changelog author="heming.zhao@suse.com" date="1693224000">- Update to 9.25.0 (jsc#PED-6362)
  * drbdsetup,v9,show: fix meta disk format for json
  * drbdmeta: {hex,}dump superblock
  * drbdmon: major rewrite
  * build: gcc v12 cleanups
  * misc: put locks into separate dir
  * selinux: add fowner fsetsid, they dropped a global noaudit rule
  * v9: Support user-defined block-size
  * doc,v9: improvements all over the place
  * drbdadm,v9: implement drbdadm role &lt;res:peer&gt;
  * drbdadm,v9: pass --verbose/--statistics to drbdsetup status
  * drbd{adm,meta}: add repair-md subcommand
  * drbdadm,v9,resync-after: fix too strict check
  * drbdadm,v9,floating: fixup fake uname for 9.2.x strict_names=1
  * drbdadm,v9,parser: fixup globs, also rm GNU libc specific extensions
  * drbdadm,v9,parser: allow via outside-address for NATed peers
  * parser,v9: deprecate named connections
  * drbd-selinux: add sub package, minor packaging/spec changes
  * drbdadm: allow files from expanded glob to vanish
  * drbdadm,v9: fix potential segfault in postparse
  * drbdadm,v9: fix sh-ip when set on connection/path
  * drbdmeta: fix apply-al for bitmap sizes &gt; 4GiB
  * drbd-service-shim.sh: add secondary --force
  * ocf: fix for dropped --peer option
  * drbdsetup,v9: show susupend reason in json output
  * drbdsetup,v9: add secondary --force
  * drbdsetup,v9: fix *susp_str() for events2 diff mode
  * drdbdadm,v9: fix sh-resource
  * drdbdadm,v9: rm --peer=connect_to_host
  * ocf: deal with situation where PM node name and actual node name do not
  match
  * notify.sh: deal with unset DRBD_PEER env variable
  * crm-fence-peer: fix timeout with Pacemaker 2.0.5
  * drbdmeta: don't wait for confirmation if not a TTY
  * drbdadm,v9: Pass '--force' to certain drbdmeta commands
  * drbdmeta: do init in chunks; allow different methods
  * build: various minor fixes (udev detection, POSIX,
  compiler flags, allow doc building with asciidoctor,...)
  * drbd.ocf: fix type (relevant for certain pcs versions)
  * crm-fence-peer: fix timeout with Pacemaker 2.1
  * v9,proxy: allow multiple sharing a proxy node
  * v9,drbdsetup: quote resource name in "show"
  * build: allow building for RHEL9.0, minor cleanups
  * reactor/systemd: allow proper actions (e.g., reboot) if
  demotion fails.
- introduce new systemd service:
  drbd-demote-or-escalate@.service
- remove v83 v84 binaries (incompatible with kmp)
- drop patches which are already included in latest code:
  - 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  - 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch
- add upstream patch:
  + 0001-drbdadm-v9-do-not-segfault-when-re-configuring-proxy.patch
  + 0002-user-drbrdmon-add-missing-stdint.h-includes.patch
  + 0003-Introduce-default_types.h-header.patch
- change patch name:
  - 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch
  + bsc-1032142_Disable-quorum-in-default-configuration.patch
- rebase patch:
  + pie-fix.patch
  + rpmlint-build-error.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="glass.su@suse.com" date="1710763200">- drbd failover timeout because of "fence-peer helper broken" (bsc#1219263)
  * bsc-1219263_crm-fence-peer.9.sh-fix-parsing-in_ccm-crmd-fields-o.patch
  * bsc-1219263_crm-fence-peer.9.sh-use-join-of-node_state-to-judge-.patch</changelog>
</package>
<package pkgid="c09618941655954efa31082b5ae41df77a7c562ef2f205b34b50a78d5ad17dce28575083009484a2fe165e14ed8752b891fac850a9fd5b5313200688cdfb984e" name="dtc-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="slfo.1.1_1.2"/>
  <changelog author="dmueller@suse.com" date="1572436800">- update to 1.5.1:
  * Numerous assorted bugfixes
  * Add a new fdt_create_with_flags() function, and a
    FDT_CREATE_FLAG_NO_NAME_DEDUP flag which improves speed at the
    cost of tree size by not deduplicating property names in the
    strings section
  * Run tests against shared library, so it will catch the common
    mistake of not adding new symbols to the versioning script
  * Add a number of missing symbols to versioning script
  * Use Python3 by default for pylibfdt
  * New fdt_append_addrrange() function in libfdt
- remove dtc-license.patch (upstream)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1572436801">- Enable python3 binding in python3-libfdt</changelog>
  <changelog author="dmueller@suse.com" date="1572436802">- switch to building python3 bindings using setuptools to avoid
  patching</changelog>
  <changelog author="mliska@suse.cz" date="1575806400">- Use %make_build and recpect %optflags.</changelog>
  <changelog author="dmueller@suse.com" date="1579003200">- add dtc-no-common-conflict.patch (bsc#1160388)</changelog>
  <changelog author="info@paolostivanin.com" date="1583841600">- Update to 1.6.0 (no changelog)
- Removed dtc-no-common-conflict.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- explicitly pass -pie in CFLAGS, since the build system explicitly passes
  - fPIC, which breaks our gcc-PIE profile. This makes all packaged binaries
  PIE-executables (bsc#1184122).</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 1.6.1:
  * A number of bugfixes
  * Fix many warnings with -Wsign-compare
  * Add compilation with meson (not used by default so far)
  * Yet another revamp of how we handle unaligned accesses
  * Added a number of extra checks for common tree errors
  * Checks for interrupt providers
  * i2c reg properties
  * Tighten checking of gpio properties
  * Reduce dependencies when building libfdt only
  * Allow libfdt.h header to be used from C++ more easily
  * Accept .dtbo extension for overlays
  * Update valid node and property characters to match current devicetree spec
  * Add several checks for root node sanity in fdt_check_full()
  * Somewhat more robust type labelling for the benefit of yaml output</changelog>
  <changelog author="schwab@suse.de" date="1664193600">- makefile-bison-rule.patch: Makefile: fix infinite recursion by dropping
  non-existent `%.output`</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682424000">- update to 1.7.0:
  * dtc
  * Fix -Oasm output on PA-RISC by avoiding ';' separators
  * Put symbolic label references in -Odts output when possible
  * Add label relative path references
  * Don't incorrectly attempt to create fixups for reference to path
    in overlays
  * Warning rather than hard error if integer expression results are
    truncated due to cell size
  * libfdt
  * Add fdt_get_property_by_offset_w() function
  * pylibfdt
  * Fixed to work with Python 3.10
  * A number of extra methods
  * Fix out of tree build
  * fdtget
  * Add raw bytes output mode
  * General
  * Fixes for mixed-signedness comparison warnings
  * Assorted other warning fixes
  * Assorted updates to checks
  * Assorted bugfixes
  * Fix scripts to work with dash as well as bash
  * Allow static builds
  * Formalize Signed-off-by usage
- Update dtc.keyring
- Drop upstream patch:
  * makefile-bison-rule.patch</changelog>
</package>
<package pkgid="428afbf5a773f12be7df08b1285e7df3670c8744fc2da97ba996c1ceee9c327d052f06132c600b4ca41b6b1c9bbc0546a430dad1233398b90f0ea3b98a6e4384" name="duktape-debugsource" arch="aarch64">
  <version epoch="0" ver="2.7.0" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 2.7.0:
  * Fix memory unsafe behavior when valstack size limit hit in
    call setup
  * Fix a realloc() memory leak triggered when (1) previous
    allocation exists, (2) new realloc size is 0, (3) GC is
    triggered before first realloc() attempt
  * Fix void pointer arithmetic in duk_alloc_pool.c, caused
    problems with MSVC
  * Fix broken bytecode dump on big endian architectures
  * Fix DUK_USE_GET_RANDOM_DOUBLE() argument handling
  * Use yaml.safe_load() instead of yaml.load() in Py2 tooling
  * Dist makefile and pkg-config improvements
  * Fix Makefile.jsoncbor build
  * Reformat source with clang-format-12
- Bump sover define following upstream changes.
- Rebase duktape-link-m.patch with quilt.
- Drop pc.in file, no longer needed.
- Pass the needed prefixes etc to make_build and make_install.
- Use ldconfig_scriptlets macro.</changelog>
</package>
<package pkgid="de1c8242c1918ace68c5e3449b02ca7600799154b530a70b896643704475d2a9754ed695472661fd9267732bbe8f194445f9b5dad56cfea50434e7d092de4f26" name="e2fsprogs-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.47.0" rel="slfo.1.1_1.2"/>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
</package>
<package pkgid="cceec8153d6c96bd23cff081d0bfc73c4842fc49c90009ffcbe027e86f67142b4518e490dd1453829c414aceadfa2baad7216376490e596288319d650eb2761c" name="e2fsprogs-debugsource" arch="aarch64">
  <version epoch="0" ver="1.47.0" rel="slfo.1.1_1.2"/>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
</package>
<package pkgid="2b86062e136888309bf8a5848f7a51f419325cbad1fe1484d0bcc5ee62f14143d9f70507460fa557b99200517e5b0b10435d9e277cf6834845bcb420e3ae26d9" name="ebtables-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 2.0.11
  * Add --noflush command line support for ebtables-restore
  * Do not print IPv6 mask if it is all ones
  * Allow RETURN target rules in user defined chains
  * ebt_ip: add support for matching ICMP type and code
  * ebt_ip: add support for matching IGMP type
  * extensions: Add string filter to ebtables
  * Print IPv6 prefixes in CIDR notation
  * extensions: Add AUDIT target
  * Fix incorrect IPv6 prefix formatting
- Drop ebtables-v2.0.8-makefile.diff (no longer needed)
- Drop ebtables-v2.0.8-initscript.diff, include-linux-if.patch
  (not applicable)
- Drop ebtables-v2.0.10-4-audit.patch,
  0001-fix-compilation-warning.patch,
  0001-Use-flock-for-concurrent-option.patch,
  0002-Fix-locking-if-LOCKDIR-does-not-exist.patch (merged)</changelog>
  <changelog author="kstreitova@suse.com" date="1575979200">- add ebtables.keyring as a Source</changelog>
  <changelog author="kstreitova@suse.com" date="1578657600">- rename /usr/lib/ebtables helper file to /usr/lib/ebtables-helper
  otherwise it conflicts with /usr/lib/ebtables library directory
  on 32-bit systems [bsc#1159769]</changelog>
  <changelog author="kukuk@suse.com" date="1588161600">- Use /bin/sh for ebtables.systemd
- Don't hard require systemd, we don't need that in a container</changelog>
  <changelog author="kukuk@suse.com" date="1588680000">- Revert last /bin/bash -&gt; /bin/sh change</changelog>
  <changelog author="kstreitova@suse.com" date="1598961600">- replace /usr/lib with /usr/libexec in .service files to follow
  %_libexecdir macro changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1599048000">- Have the source .service file hold a placeholder for LIBEXECDIR,
  which we replace during build/install phase, allowing the package
  to be used no matter what value %{_libexecdir} has.</changelog>
  <changelog author="schubi@suse.de" date="1629460800">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * ebtables.service</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636632000">- Add build dependency on libalternatives
- Run spec-cleaner</changelog>
</package>
<package pkgid="25a4c441835dad7c8d42d707d54173658347b87b1058faeea226d643669a025044dc4c5677f466ce854558f03ca4191081af73cfb373a350075af6558911cb1d" name="ebtables-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 2.0.11
  * Add --noflush command line support for ebtables-restore
  * Do not print IPv6 mask if it is all ones
  * Allow RETURN target rules in user defined chains
  * ebt_ip: add support for matching ICMP type and code
  * ebt_ip: add support for matching IGMP type
  * extensions: Add string filter to ebtables
  * Print IPv6 prefixes in CIDR notation
  * extensions: Add AUDIT target
  * Fix incorrect IPv6 prefix formatting
- Drop ebtables-v2.0.8-makefile.diff (no longer needed)
- Drop ebtables-v2.0.8-initscript.diff, include-linux-if.patch
  (not applicable)
- Drop ebtables-v2.0.10-4-audit.patch,
  0001-fix-compilation-warning.patch,
  0001-Use-flock-for-concurrent-option.patch,
  0002-Fix-locking-if-LOCKDIR-does-not-exist.patch (merged)</changelog>
  <changelog author="kstreitova@suse.com" date="1575979200">- add ebtables.keyring as a Source</changelog>
  <changelog author="kstreitova@suse.com" date="1578657600">- rename /usr/lib/ebtables helper file to /usr/lib/ebtables-helper
  otherwise it conflicts with /usr/lib/ebtables library directory
  on 32-bit systems [bsc#1159769]</changelog>
  <changelog author="kukuk@suse.com" date="1588161600">- Use /bin/sh for ebtables.systemd
- Don't hard require systemd, we don't need that in a container</changelog>
  <changelog author="kukuk@suse.com" date="1588680000">- Revert last /bin/bash -&gt; /bin/sh change</changelog>
  <changelog author="kstreitova@suse.com" date="1598961600">- replace /usr/lib with /usr/libexec in .service files to follow
  %_libexecdir macro changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1599048000">- Have the source .service file hold a placeholder for LIBEXECDIR,
  which we replace during build/install phase, allowing the package
  to be used no matter what value %{_libexecdir} has.</changelog>
  <changelog author="schubi@suse.de" date="1629460800">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * ebtables.service</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636632000">- Add build dependency on libalternatives
- Run spec-cleaner</changelog>
</package>
<package pkgid="b29f5406ebeea227e1ccd41c9fa70cb38d23e28decb0059517004ca2e31e70a69c4a2792b1402a795d808ef6e8e01fa77c2d0a9b950f949484fda3c6ff8140a7" name="efibootmgr-debuginfo" arch="aarch64">
  <version epoch="0" ver="18" rel="slfo.1.1_1.2"/>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
  <changelog author="glin@suse.com" date="1671537600">- Update to v18
  * fixed the simple run example
  * Restore activation error message in efibootmgr
  * remove-dupes: update error message
  * Fix typo in manual page
  * README: Note efivarfs as the current required kernel module
  * Fix possible read out of bounds in ucs2_to_utf8
  * Add code of conduct
  * Fix help messages
  * Add option for insertion location of new entries
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="69212ec71cb2e4756790708721cd291f2f3bb104663debc15612103f8afbc5e55ac765e9f850028c232648d4aebddaafd5e9bcb2c905b1ac3be19a182c695c61" name="efibootmgr-debugsource" arch="aarch64">
  <version epoch="0" ver="18" rel="slfo.1.1_1.2"/>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
  <changelog author="glin@suse.com" date="1671537600">- Update to v18
  * fixed the simple run example
  * Restore activation error message in efibootmgr
  * remove-dupes: update error message
  * Fix typo in manual page
  * README: Note efivarfs as the current required kernel module
  * Fix possible read out of bounds in ucs2_to_utf8
  * Add code of conduct
  * Fix help messages
  * Add option for insertion location of new entries
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="2a0ef8fefef763dade38236196c5964035574bb1abf07c0a7f3c29e6c9554c69256fcf07e57446de2fb09234bb95831958a2aeded41499fe3d5e8bfc6b0c222e" name="efivar-debugsource" arch="aarch64">
  <version epoch="0" ver="38" rel="slfo.1.1_1.2"/>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="glin@suse.com" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="glin@suse.com" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="mliska@suse.cz" date="1597406400">- Do not partition LTO as we may reach new GAS error:
  Error: invalid attempt to declare external version
  name as default in symbol `efi_set_variable@@LIBEFIVAR_0.24'</changelog>
  <changelog author="glin@suse.com" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault in non-EFI systems (bsc#1175989)</changelog>
  <changelog author="glin@suse.com" date="1623844800">- Add efivar-bsc1187386-fix-emmc-parsing.patch to fix the eMMC
  sysfs parsing (bsc#1187386)
- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
  <changelog author="glin@suse.com" date="1660132800">- Add efivar-bsc1202209-fix-glibc-2.36-build.patch to fix the build
  error against glibc 2.36 (bsc#1202209)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1671624000">- Update spec file to current standards</changelog>
  <changelog author="glin@suse.com" date="1676030400">- Update to 38
  + Rework some makefile bits to make overriding some options
    simpler
  + Handle /sys/devices/virtual/{nvme-fabrics,nvme-subsystem}
    devices
  + guids.S: Include &lt;cet.h&gt; when CET is enabled
  + Fix /sys/block sysfs parsing for eMMC-s
  + Properly check mmap return error
  + Fix s{yt,ty}le typo in efi_get_variable(3)
  + Handle NULL set_variable()
  + Fix parsing for nvme-subsystem devices
  + Attempt to fix the identified thread safety bugs
  + Make thread-test depend on libefivar.so
  + Upstream a local patch from rawhide
  + Fix conversion from UTF8 to UCS2
  + efivar: make docs match current code for 'efivar -A'
  + Add code of conduct
  + Misc minor fixes
  + Add efi_time_t declarations and helper functions
  + More misc fixes
  + Coverity fixes 20211208
  + Fix linux virtual root device parsing
  + efivar.spec.in: fix license to be valid SPDX
  + Add efisecdb tooling
  + Fix linker string comparison for dash
- Add efivar-bsc1206388-revamp-efi_well_known-variable-handling.patch
  to remove the ld script hack for efi_well_known_* variables
  that caused build failure with LTO (bsc#1206388)
- Add mandoc to BuildRequires to build efisecdb man page
- Add efivar-adjust-dependency.patch to avoid 'make install' from
  building the binaries again
- Add efivar-filter-gcc-march.patch to drop '-march=native' from
  HOST_CPPFLAGS for ppc64le and riscv64 due to the absence of the
  gcc parameter
- Refresh libefiboot-export-disk_get_partition_info.patch
  + Cast (uint8_t *) signature to (partition_signature_t *)
  + Update src/libefiboot.map.in
- Remove upstreamed patches
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
  + efivar-bsc1127544-fix-ucs2len.patch
  + efivar-bsc1175989-handle-NULL-set-variable.patch
  + efivar-bsc1181967-fix-nvme-parsing.patch
  + efivar-bsc1187386-fix-emmc-parsing.patch
  + efivar-fix-efidp_ipv4_addr-fields-assignment.patch
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch</changelog>
</package>
<package pkgid="74fa5ce801b3dd6e350dc45cb66d0926d1f5f9d6594c5f33091af290171a04cd6e96b680842afedf57c215afc8d61ae442f62e93991124e6be2a2d3ffc15cc77" name="elfutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.189" rel="slfo.1.1_1.5"/>
  <changelog author="mliska@suse.cz" date="1650974400">- Update to version 0.187:
  * debuginfod: Support -C option for connection thread pooling.
  * debuginfod-client: Negative cache file are now zero sized instead of
    no-permission files.
  * addr2line: The -A, --absolute option, which shows file names including
    the full compilation directory is now the default.  To get the
    old behavior use the new option --relative.
  * readelf, elflint: Recognize FDO Packaging Metadata ELF notes
  * libdw, debuginfo-client: Load libcurl lazily only when files need to
    be fetched remotely. libcurl is now never
    loaded when DEBUGINFOD_URLS is unset. And when
    DEBUGINFOD_URLS is set, libcurl is only loaded
    when the debuginfod_begin function is called.</changelog>
  <changelog author="mliska@suse.cz" date="1665748800">- Add RISC-V specific patches:
  * 0001-libelf-Sync-elf.h-from-glibc.patch
  * 0002-backends-Handle-new-RISC-V-specific-definitions.patch
  * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch
  * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch
  * 0005-backends-Add-RISC-V-object-attribute-printing.patch</changelog>
  <changelog author="mliska@suse.cz" date="1667822400">- Update to version 0.188:
  * readelf: Add -D, --use-dynamic option.
  * debuginfod-client: Add $DEBUGINFOD_HEADERS_FILE setting to supply
    outgoing debuginfod_find_section.
  * debuginfod: Add --disable-source-scan option.
  * libdwfl: Add new function dwfl_get_debuginfod_client.
    Add new function dwfl_frame_reg.
    Add new function dwfl_report_offline_memory.
- Remove upstreamed patches:
  * 0001-libelf-Sync-elf.h-from-glibc.patch
  * 0002-backends-Handle-new-RISC-V-specific-definitions.patch
  * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch
  * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch
  * PR29474-debuginfod.patch
  * config-Move-the-2-dev-null-inside-the-sh-c-quotes-fo.patch
  * support-nullglob-in-profile.-.in-files.patch</changelog>
  <changelog author="dmueller@suse.com" date="1667995200">- align patches section
- remove date/time handling weirdness, elfutils does no longer
  use __DATE__ or __TIME__ (as proven by the newly added -Werror=date-time)</changelog>
  <changelog author="mliska@suse.cz" date="1676376000">- Add support-DW_TAG_unspecified_type.patch that fixes PR30047.</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Fix build with libcurl version 7.88.0 for various deprecated
  constants. Add patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch</changelog>
  <changelog author="mliska@suse.cz" date="1677153600">- Disable a false-positive -Werror=use-after-free warning.</changelog>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="de262ee67e29628fa75f1972f621f166f8726d064844acc85f098415be4ab2320efc8f621080a3336dae8f2bd2f168ff3b2a337299a3eac9ffd501f4fb1c274f" name="elfutils-debugsource" arch="aarch64">
  <version epoch="0" ver="0.189" rel="slfo.1.1_1.5"/>
  <changelog author="mliska@suse.cz" date="1650974400">- Update to version 0.187:
  * debuginfod: Support -C option for connection thread pooling.
  * debuginfod-client: Negative cache file are now zero sized instead of
    no-permission files.
  * addr2line: The -A, --absolute option, which shows file names including
    the full compilation directory is now the default.  To get the
    old behavior use the new option --relative.
  * readelf, elflint: Recognize FDO Packaging Metadata ELF notes
  * libdw, debuginfo-client: Load libcurl lazily only when files need to
    be fetched remotely. libcurl is now never
    loaded when DEBUGINFOD_URLS is unset. And when
    DEBUGINFOD_URLS is set, libcurl is only loaded
    when the debuginfod_begin function is called.</changelog>
  <changelog author="mliska@suse.cz" date="1665748800">- Add RISC-V specific patches:
  * 0001-libelf-Sync-elf.h-from-glibc.patch
  * 0002-backends-Handle-new-RISC-V-specific-definitions.patch
  * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch
  * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch
  * 0005-backends-Add-RISC-V-object-attribute-printing.patch</changelog>
  <changelog author="mliska@suse.cz" date="1667822400">- Update to version 0.188:
  * readelf: Add -D, --use-dynamic option.
  * debuginfod-client: Add $DEBUGINFOD_HEADERS_FILE setting to supply
    outgoing debuginfod_find_section.
  * debuginfod: Add --disable-source-scan option.
  * libdwfl: Add new function dwfl_get_debuginfod_client.
    Add new function dwfl_frame_reg.
    Add new function dwfl_report_offline_memory.
- Remove upstreamed patches:
  * 0001-libelf-Sync-elf.h-from-glibc.patch
  * 0002-backends-Handle-new-RISC-V-specific-definitions.patch
  * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch
  * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch
  * PR29474-debuginfod.patch
  * config-Move-the-2-dev-null-inside-the-sh-c-quotes-fo.patch
  * support-nullglob-in-profile.-.in-files.patch</changelog>
  <changelog author="dmueller@suse.com" date="1667995200">- align patches section
- remove date/time handling weirdness, elfutils does no longer
  use __DATE__ or __TIME__ (as proven by the newly added -Werror=date-time)</changelog>
  <changelog author="mliska@suse.cz" date="1676376000">- Add support-DW_TAG_unspecified_type.patch that fixes PR30047.</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Fix build with libcurl version 7.88.0 for various deprecated
  constants. Add patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch</changelog>
  <changelog author="mliska@suse.cz" date="1677153600">- Disable a false-positive -Werror=use-after-free warning.</changelog>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="b60ffe3d430f4e1854b559c787d47600ca700d6a48ad69b8d8a5ee6cb4b9abae0c141287273da2c348d555c56a329bbfc7d39fa5306edeb47280765a3ca160ef" name="ethtool-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.5" rel="slfo.1.1_1.2"/>
  <changelog author="mkubecek@suse.cz" date="1655121600">- update to upstream release 5.18
  * Feature: get/set cqe size (-g and -G)
  * Fix: fix typo in man page
  * Fix: fix help text alignment
  * Fix: improve attribute label (--show-fec)</changelog>
  <changelog author="mkubecek@suse.cz" date="1661083200">- update to upstream release 5.19
  * Feature: get/set tx push (-g and -G)
  * Feature: register dump support for TI CPSW
  * Feature: register dump support for lan743x chipset
  * Fix: fix missing sff-8472 output in netlink path
  * Fix: fix EEPROM byte write</changelog>
  <changelog author="mkubecek@suse.cz" date="1665403200">- update to upstream release 6.0
  * Fix: advertisement modes autoselection by lanes (-s)</changelog>
  <changelog author="mkubecek@suse.cz" date="1671451200">- update to upstream release 6.1
  * Feature: update link mode tables
  * Feature: register dump for NXP ENETC driver (-d)
  * Feature: report TCP header-data split (-g)
  * Feature: support new message types in pretty print
  * Fix: man page syntax fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1676980800">- update to upstream release 6.2
  * Feature: link down event statistics (no option)
  * Feature: JSON output for coalesce (-c)
  * Feature: new link modes (no option)
  * Feature: JSON output for ring (-g)
  * Feature: netlink handler for RSS get (-x)
  * Fix: fix boolean value output in JSON output
- enforce "-std=c11" on SLE &lt;= 12 where the default is older</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677844800">- Split bash-completion to separate sub-package</changelog>
  <changelog author="mkubecek@suse.cz" date="1683547200">- update to upstream release 6.3
  * Feature: PLCA support (--[gs]et-plca-cfg, --get-plca-status)
  * Feature: MAC Merge layer support (--show-mm, --set-mm)
  * Feature: pass source of statistics for port stats
  * Feature: get/set rx push in ringparams (-g and -G)
  * Feature: coalesce tx aggregation parameters (-c and -C)
  * Feature: PSE and PD devices (--show-pse, --set-pse)
  * Fix: minor fixes of help text (--help)
  * Fix: fix build on systems with older system headers
  * Fix: fix netlink support when PLCA is not present (no option)
  * Fix: fixes for issues found with gcc13 -fanalyzer
  * Fix: fix return code in rxclass_rule_ins (-N)
  * Fix: more robust argc/argv handling</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212800">- make ethtool-bash-completion noarch</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212801">- update to upstream release 6.4
  * Feature: get/set Tx push buffer length (-G)
  * Feature: sff-8636 and cmis: report LOL / LOS / Tx Fault (-m)
  * Fix: fix duplex setting parser (-s)
  * Misc: check and require C11 language standard
  * Misc: clean up obsolete pre-build checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1694520000">- update to upstream release 6.5
  * Feature: register dump for hns3 driver (-d)
  * Fix: fix fallback to ioctl for sset (-s)
  * Fix: fix empty slot search in rmgr (-N)</changelog>
</package>
<package pkgid="799919eeb10a912a642e0b92e096714ca2f9f981e26f153ed48db9f1196b3a5f66c36ffa10429d301baae59b053c8f6127ba8f99d5c77902092c6c311578dd34" name="ethtool-debugsource" arch="aarch64">
  <version epoch="0" ver="6.5" rel="slfo.1.1_1.2"/>
  <changelog author="mkubecek@suse.cz" date="1655121600">- update to upstream release 5.18
  * Feature: get/set cqe size (-g and -G)
  * Fix: fix typo in man page
  * Fix: fix help text alignment
  * Fix: improve attribute label (--show-fec)</changelog>
  <changelog author="mkubecek@suse.cz" date="1661083200">- update to upstream release 5.19
  * Feature: get/set tx push (-g and -G)
  * Feature: register dump support for TI CPSW
  * Feature: register dump support for lan743x chipset
  * Fix: fix missing sff-8472 output in netlink path
  * Fix: fix EEPROM byte write</changelog>
  <changelog author="mkubecek@suse.cz" date="1665403200">- update to upstream release 6.0
  * Fix: advertisement modes autoselection by lanes (-s)</changelog>
  <changelog author="mkubecek@suse.cz" date="1671451200">- update to upstream release 6.1
  * Feature: update link mode tables
  * Feature: register dump for NXP ENETC driver (-d)
  * Feature: report TCP header-data split (-g)
  * Feature: support new message types in pretty print
  * Fix: man page syntax fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1676980800">- update to upstream release 6.2
  * Feature: link down event statistics (no option)
  * Feature: JSON output for coalesce (-c)
  * Feature: new link modes (no option)
  * Feature: JSON output for ring (-g)
  * Feature: netlink handler for RSS get (-x)
  * Fix: fix boolean value output in JSON output
- enforce "-std=c11" on SLE &lt;= 12 where the default is older</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677844800">- Split bash-completion to separate sub-package</changelog>
  <changelog author="mkubecek@suse.cz" date="1683547200">- update to upstream release 6.3
  * Feature: PLCA support (--[gs]et-plca-cfg, --get-plca-status)
  * Feature: MAC Merge layer support (--show-mm, --set-mm)
  * Feature: pass source of statistics for port stats
  * Feature: get/set rx push in ringparams (-g and -G)
  * Feature: coalesce tx aggregation parameters (-c and -C)
  * Feature: PSE and PD devices (--show-pse, --set-pse)
  * Fix: minor fixes of help text (--help)
  * Fix: fix build on systems with older system headers
  * Fix: fix netlink support when PLCA is not present (no option)
  * Fix: fixes for issues found with gcc13 -fanalyzer
  * Fix: fix return code in rxclass_rule_ins (-N)
  * Fix: more robust argc/argv handling</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212800">- make ethtool-bash-completion noarch</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212801">- update to upstream release 6.4
  * Feature: get/set Tx push buffer length (-G)
  * Feature: sff-8636 and cmis: report LOL / LOS / Tx Fault (-m)
  * Fix: fix duplex setting parser (-s)
  * Misc: check and require C11 language standard
  * Misc: clean up obsolete pre-build checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1694520000">- update to upstream release 6.5
  * Feature: register dump for hns3 driver (-d)
  * Fix: fix fallback to ioctl for sset (-s)
  * Fix: fix empty slot search in rmgr (-N)</changelog>
</package>
<package pkgid="04189419d0cd612ae5e95365a9d665f784fbf007552d446b028f714e7648039db1e3bd853d2a0667f309fb5bfa5ac9886076e3551c6cca781920a49f4c02c33a" name="expat-debugsource" arch="aarch64">
  <version epoch="0" ver="2.7.1" rel="slfo.1.1_4.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLFO-1.1
- deleted patches
  - expat-CVE-2024-45490.patch (upstreamed)
  - expat-CVE-2024-45491.patch (upstreamed)
  - expat-CVE-2024-45492.patch (upstreamed)
  - expat-CVE-2024-28757.patch (upstreamed)
  - expat-CVE-2024-50602.patch (upstreamed)
  - expat-fix-minicheck.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
</package>
<package pkgid="3affce72318afab7b40343ddfeda935ff00c2c3087b8969f768817418ead14c079e3302db21e48a2016905a626ce009fdcaa13d1907a764d65a5c4d67a5b7369" name="fcoe-utils-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.34" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dimstar@opensuse.org" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="lduncan@suse.com" date="1585915200">- Change use of "ifconfig" to "ip", since ifconfig is no
  longer around (bsc#1073886), adding:
  * fcoe-utils-stop-using-ifconfig.patch</changelog>
  <changelog author="lduncan@suse.com" date="1591704000">- Updated with latest upstream v1.0.33 from v1.0.32:
  * Added "-Wextra" and enabled "-Werror" for compiling
  * Ignore auto-generated files
  * Update systemd service files (several updates)
  * A bunch of gcc-10-related fixes, such as marking unused
    arguments, fixing strncpy()s, string truncation/overflow
  * better error handling/retry for link issues (like EBUSY)
  * replace use of "ifconfig" with "ip" in debug scripts
  * fix long-standing issue with netlink buffer resizing
  * move bash completions to proper system directory
  This replaces fcoe-utils-v1.0.32.tar.xz with
  fcoe-utils-v1.0.33.tar.xz, and it does away with the
  following patches, since they are all fixed upstream:
  * 0003-systemctl-cannot-start-fcoemon.socket.patch
  * 0004-fcoemon-Correctly-handle-options-in-the-service-file.patch
  * 0005-fcoe.service-Add-foreground-to-prevent-fcoemon-to-be.patch
  * 0006-fipvlan-fixup-return-value-on-error.patch
  * 0008-Use-correct-socket-for-fcoemon.socket.patch
  * 0012-fcoemon-Retry-fcm_link_getlink-on-EBUSY.patch
  * fcoe-utils-1.0.29-make.patch
  * fcoe-utils-stop-using-ifconfig.patch
  And the following patch was removed because we can
  successfully compile with "-Werror" now:
  * 0009-disable-Werror-building.patch</changelog>
  <changelog author="lduncan@suse.com" date="1594814400">- Handle NIC names longer than 7 characters for the output of
  "fcoeadm -s" output (bsc#1010047), adding patch:
  * Handle-NIC-names-longer-than-7-characters.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1597924800">- Add patch to fix build on architectures where char is
  unsigned (%arm, aarch64):
  * fcoe-utils-fix-arm.patch</changelog>
  <changelog author="lduncan@suse.com" date="1616673600">- Update to version 1.0.34 (fixing bsc#1182804), which replaces the
  source tarball, and removes these two patches, which are fixed
  upstream:
  * Handle-NIC-names-longer-than-7-characters.patch
  * fcoe-utils-fix-arm.patch
  Change summary:
    Chris Leech (6):
  21 string-op truncation, format truncation, and format overflow errors
  use of uninitialized values detected during LTO
  Revert "Make gcc compiler happy about ifname string truncation."
  fix VLAN device name overflow check
  fix regressions caused by safe_makepath change in libopenfcoe.c
  minor fcoeadm output issues
    Guillaume Gardet (1):
  char can be unsigned on arm, so set signed explicitly as the check expects it can be negative
    Lee Duncan (6):
  Handle NIC names longer than 7 characters.
  Change debug-&gt;log message if daemon running
  Remove references to open-fcoe.org
  Fix two gcc-11 compiler warnings.
  Remove comment that doesn't match code.
  Preparing for version v1.0.34
    Lily Nie (1):
  fix one bug introduced by commit b06c3df
    Nitin U. Yewale (1):
  Exit fcoemon command if fcoemon daemon is already running.</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_fcoe.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="lduncan@suse.com" date="1643284800">- Added upstream commit to fix gcc12 warning/errors:
  * fcoe-utils-Fix-GCC-12-warning.patch</changelog>
</package>
<package pkgid="17443a9833954f68907bb985bf66c34aa8a6d13a96a10c79c8528e36a523ad1c24bc4e20fbd12b0217c5c5f7c70df09bf059e1a3bc5f5fb823907130d09e5d9f" name="fcoe-utils-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.34" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dimstar@opensuse.org" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="lduncan@suse.com" date="1585915200">- Change use of "ifconfig" to "ip", since ifconfig is no
  longer around (bsc#1073886), adding:
  * fcoe-utils-stop-using-ifconfig.patch</changelog>
  <changelog author="lduncan@suse.com" date="1591704000">- Updated with latest upstream v1.0.33 from v1.0.32:
  * Added "-Wextra" and enabled "-Werror" for compiling
  * Ignore auto-generated files
  * Update systemd service files (several updates)
  * A bunch of gcc-10-related fixes, such as marking unused
    arguments, fixing strncpy()s, string truncation/overflow
  * better error handling/retry for link issues (like EBUSY)
  * replace use of "ifconfig" with "ip" in debug scripts
  * fix long-standing issue with netlink buffer resizing
  * move bash completions to proper system directory
  This replaces fcoe-utils-v1.0.32.tar.xz with
  fcoe-utils-v1.0.33.tar.xz, and it does away with the
  following patches, since they are all fixed upstream:
  * 0003-systemctl-cannot-start-fcoemon.socket.patch
  * 0004-fcoemon-Correctly-handle-options-in-the-service-file.patch
  * 0005-fcoe.service-Add-foreground-to-prevent-fcoemon-to-be.patch
  * 0006-fipvlan-fixup-return-value-on-error.patch
  * 0008-Use-correct-socket-for-fcoemon.socket.patch
  * 0012-fcoemon-Retry-fcm_link_getlink-on-EBUSY.patch
  * fcoe-utils-1.0.29-make.patch
  * fcoe-utils-stop-using-ifconfig.patch
  And the following patch was removed because we can
  successfully compile with "-Werror" now:
  * 0009-disable-Werror-building.patch</changelog>
  <changelog author="lduncan@suse.com" date="1594814400">- Handle NIC names longer than 7 characters for the output of
  "fcoeadm -s" output (bsc#1010047), adding patch:
  * Handle-NIC-names-longer-than-7-characters.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1597924800">- Add patch to fix build on architectures where char is
  unsigned (%arm, aarch64):
  * fcoe-utils-fix-arm.patch</changelog>
  <changelog author="lduncan@suse.com" date="1616673600">- Update to version 1.0.34 (fixing bsc#1182804), which replaces the
  source tarball, and removes these two patches, which are fixed
  upstream:
  * Handle-NIC-names-longer-than-7-characters.patch
  * fcoe-utils-fix-arm.patch
  Change summary:
    Chris Leech (6):
  21 string-op truncation, format truncation, and format overflow errors
  use of uninitialized values detected during LTO
  Revert "Make gcc compiler happy about ifname string truncation."
  fix VLAN device name overflow check
  fix regressions caused by safe_makepath change in libopenfcoe.c
  minor fcoeadm output issues
    Guillaume Gardet (1):
  char can be unsigned on arm, so set signed explicitly as the check expects it can be negative
    Lee Duncan (6):
  Handle NIC names longer than 7 characters.
  Change debug-&gt;log message if daemon running
  Remove references to open-fcoe.org
  Fix two gcc-11 compiler warnings.
  Remove comment that doesn't match code.
  Preparing for version v1.0.34
    Lily Nie (1):
  fix one bug introduced by commit b06c3df
    Nitin U. Yewale (1):
  Exit fcoemon command if fcoemon daemon is already running.</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_fcoe.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="lduncan@suse.com" date="1643284800">- Added upstream commit to fix gcc12 warning/errors:
  * fcoe-utils-Fix-GCC-12-warning.patch</changelog>
</package>
<package pkgid="686c34a0015d0b67f25ce3bca35a43fff13fe3d68bda595523b4ba9456ffa27ff4fb2bd54a6351362c7507794cace5207373626e138a81d7896049f00a9bdb29" name="fde-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.7.3" rel="slfo.1.1_6.1"/>
  <changelog author="glin@suse.com" date="1741694400">- Add fde-tools-bsc1238593-firstboot-more-bootloader-functions.patch
  to define non-expanded functions for the firstboot script
  (bsc#1238593)</changelog>
  <changelog author="glin@suse.com" date="1747224000">- Add fde-tools-bsc1243166-firstboot-disable-tpm2-when-sb-is-off.patch
  to not skip the encryption process when Secure Boot is off
  (bsc#1243166)</changelog>
  <changelog author="glin@suse.com" date="1747310400">- Update to version 0.7.3
  + Detect the supported RSA key size
  + Take snapshot when signing
  + Switch to "--target-platform" when available
  + Allow RPM_MACRO_DIR to be defined during build time
  + Fix naming and disable ccid
  + tpm: fix tpm-present with the newer pcr-oracle
  + firstboot: make "Pass phrase" mandatory
  + firstboot: disable FDE/TPM2 when secure boot is off
  + Conditional helper
  + firstboot: replace the key file path in crypttab
  + firstboot: add more alias bootloader functions
  + firstboot: detect the early reencryption
- Refresh fde-tools-firstboot-alp-snapshot.patch
- Drop merged patches
  + fde-tools-bsc1213945-set-rsa-key-size.patch
  + fde-tools-bsc1223771-firstboot-make-Pass-phrase-mandatory.patch
  + fde-tools-bsc1223002-firstboot-disable-ccid.patch
  + fde-tools-bsc1218181-replace-crypttab-key-path.patch
  + fde-tools-bsc1220160-conditional-requires.patch
  + fde-tools-change-rpm-macro-dir.patch
  + fde-tools-bsc1243166-firstboot-disable-tpm2-when-sb-is-off.patch
  + fde-tools-bsc1222970-firstboot-replace-ALP.patch
  + fde-tools-bsc1218390-fix-tpm-present-with-the-newer-pcr-oracle.patch
  + fde-tools-bsc1238593-firstboot-more-bootloader-functions.patch
  + fde-tools-bsc1218390-Switch-to-target-platform-when-available.patch</changelog>
  <changelog author="glin@suse.com" date="1749124800">- Add fde-tools-bsc1243877-firstboot-remove-key-conf.patch to
  remove the dracut conf for the key file to avoid the error from
  dracut (bsc#1243877)</changelog>
  <changelog author="glin@suse.com" date="1749643200">- Add fde-tools-bsc1244323-firstboot-fix-lsinitrd.patch to fix the
  empty LUKS header checksum from lsinitrd (bsc#1244323)</changelog>
  <changelog author="glin@suse.com" date="1753185600">- Add fde-tools-bsc1246464-use-default-uefi-boot-path.patch to
  use the default EFI boot path if there is no FILE compoment in
  in the boot entry (bsc#1246464)</changelog>
  <changelog author="glin@suse.com" date="1753790400">- Add the missing /var/log/fde (bsc#1247228)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1764849600">- Build with distro flags</changelog>
  <changelog author="glin@suse.com" date="1767182400">- Add fde-tools.conf to create /var/log/fde with tmpfiles.d
  (jsc#PED-14754)</changelog>
  <changelog author="glin@suse.com" date="1769774400">- Add fde-tools-bsc1248516-tpm-Support-persistent-SRK.patch to
  support persistent SRK (bsc#1248516)</changelog>
</package>
<package pkgid="65f54b55a60502df88af191b42714c5aff426fdf9687a040618b2307b4ff39f2aa37676a3903a7efcc10d45124665a4ba4d79c0e3ba6d6a90ca175c28b35ad20" name="fde-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="0.7.3" rel="slfo.1.1_6.1"/>
  <changelog author="glin@suse.com" date="1741694400">- Add fde-tools-bsc1238593-firstboot-more-bootloader-functions.patch
  to define non-expanded functions for the firstboot script
  (bsc#1238593)</changelog>
  <changelog author="glin@suse.com" date="1747224000">- Add fde-tools-bsc1243166-firstboot-disable-tpm2-when-sb-is-off.patch
  to not skip the encryption process when Secure Boot is off
  (bsc#1243166)</changelog>
  <changelog author="glin@suse.com" date="1747310400">- Update to version 0.7.3
  + Detect the supported RSA key size
  + Take snapshot when signing
  + Switch to "--target-platform" when available
  + Allow RPM_MACRO_DIR to be defined during build time
  + Fix naming and disable ccid
  + tpm: fix tpm-present with the newer pcr-oracle
  + firstboot: make "Pass phrase" mandatory
  + firstboot: disable FDE/TPM2 when secure boot is off
  + Conditional helper
  + firstboot: replace the key file path in crypttab
  + firstboot: add more alias bootloader functions
  + firstboot: detect the early reencryption
- Refresh fde-tools-firstboot-alp-snapshot.patch
- Drop merged patches
  + fde-tools-bsc1213945-set-rsa-key-size.patch
  + fde-tools-bsc1223771-firstboot-make-Pass-phrase-mandatory.patch
  + fde-tools-bsc1223002-firstboot-disable-ccid.patch
  + fde-tools-bsc1218181-replace-crypttab-key-path.patch
  + fde-tools-bsc1220160-conditional-requires.patch
  + fde-tools-change-rpm-macro-dir.patch
  + fde-tools-bsc1243166-firstboot-disable-tpm2-when-sb-is-off.patch
  + fde-tools-bsc1222970-firstboot-replace-ALP.patch
  + fde-tools-bsc1218390-fix-tpm-present-with-the-newer-pcr-oracle.patch
  + fde-tools-bsc1238593-firstboot-more-bootloader-functions.patch
  + fde-tools-bsc1218390-Switch-to-target-platform-when-available.patch</changelog>
  <changelog author="glin@suse.com" date="1749124800">- Add fde-tools-bsc1243877-firstboot-remove-key-conf.patch to
  remove the dracut conf for the key file to avoid the error from
  dracut (bsc#1243877)</changelog>
  <changelog author="glin@suse.com" date="1749643200">- Add fde-tools-bsc1244323-firstboot-fix-lsinitrd.patch to fix the
  empty LUKS header checksum from lsinitrd (bsc#1244323)</changelog>
  <changelog author="glin@suse.com" date="1753185600">- Add fde-tools-bsc1246464-use-default-uefi-boot-path.patch to
  use the default EFI boot path if there is no FILE compoment in
  in the boot entry (bsc#1246464)</changelog>
  <changelog author="glin@suse.com" date="1753790400">- Add the missing /var/log/fde (bsc#1247228)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1764849600">- Build with distro flags</changelog>
  <changelog author="glin@suse.com" date="1767182400">- Add fde-tools.conf to create /var/log/fde with tmpfiles.d
  (jsc#PED-14754)</changelog>
  <changelog author="glin@suse.com" date="1769774400">- Add fde-tools-bsc1248516-tpm-Support-persistent-SRK.patch to
  support persistent SRK (bsc#1248516)</changelog>
</package>
<package pkgid="bfb88e043f012fec8b72d1d243212bce799ff1078c68e792153b33a0c016d273d7ac46009a9757b5f7d669c57d0e450a745bd1bba783b4103ede85a3b49f2ff4" name="fdo-client-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.4+git20221209.c8ef757" rel="slfo.1.1_1.3"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1677758400">- Update to version 1.0.0+git20171208.5da1bad:
  * Use secure functions where appropriate
  * Added extern definition
  * Fix Klocwork Errors
  * Fix output
  * Fix Core Dump in Unit Test
  * Add Makefile
  * publish unit tests
  * strpcpu_s: remove unsed redundant variable overlap_bumper
  * Update LICENSE&amp;COPYING.txt</changelog>
  <changelog author="schubi@suse.com" date="1677758401">- Update to version 1.1.4+git20221209.c8ef757:
  * Readme update (#210)
  * Updating the readme with openssl 1.1.1s (#209)
  * Fix TO when IP/RV is empty string (#208)
  * * Replaced unsafe string function (#207)
  * Increase max message buffer size to 64000 (#205)
  * Update Curl version as 7.86 in Readme (#206)
  * Readme updates (#204)
  * Minimal logs by default (compile time) (#203)
  * Revert openssl3 (#201)
  * Update HTTPS connection to use TLS 1.2 (#196)
  * Openssl 3 porting (#194)
  * Add curl support for HTTP connection (#195)
  * Update NOTICE file (#192)
  * Add CURL support for HTTPS connection (#188)
  * Readme update for installing safestringlib (#191)
  * Updating the readme with openssl 1.1.1q (#187)
  * switch to host.docker.internal (#185)
  * Fix to enable compilation of CSDK in ubuntu 22 (#183)
  * Fix TO when IP is NULL (#184)
  * Update EAT-UEID value as per FIDO working draft specification (#180)
  * Revert "Update EAT-UEID value as per FIDO working draft specification (#178)" (#179)
  * Update EAT-UEID value as per FIDO working draft specification (#178)
  * Updating comments in fdonet.c (#177)
  * Upgrade OpenSSL toolkit version to 1.1.1n (#176)
  * Documentation updates (#175)
  * Add a note regarding fdosys issue (#174)
  * Update Jenkinsfile to copy PRI artifacts from master (#173)
  * Merging 1.1 dev branch to master. (#172)
  * Fix multiple owner support for CSDK devices. (#167)
  * Fix: fdo_sys:exec_cb/exec not working after initial fdo_sys:exec (#166)
  * Add implementation for fdo_sys keep-alive (#165)
  * Fix an issue with keeping in-memory Mfg PublicKey hash (#164)
  * Update/Tweak Device Status and Cred management (#163)
  * Updating EAT IANA numbers as per spec ERRATA (#160)
  * Updating Device ServiceInfo framework to handle writes (#162)
  * Add TPM support on RHEL (#161)
  * Update README for RHEL support (#159)
  * Remove disclaimer from README (#158)</changelog>
  <changelog author="schubi@suse.com" date="1699876800">- Remove build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build using RPM 4.19: builddir does contain the extracted
  tartball, but can also contain special directories used by RPM,
  resolving in globbing to behave differently.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1707825600">- Remove the hardcoded libopenssl-1_1-devel and replace it with
  libopenssl-devel (bsc#1219879).</changelog>
</package>
<package pkgid="3e19104f873f1dfd7cef5fc99211b0e733f3e4cae1e534b864d87dcf0410e0860b143eab71cfbd4c8823d7bef0436cbc831ab1350df3312a6dd2c337b1042b53" name="file-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.44" rel="slfo.1.1_1.4"/>
  <changelog author="werner@suse.de" date="1650974400">- Try to solve 32bit import dependency problems (boo#1198788)</changelog>
  <changelog author="werner@suse.de" date="1655121600">- Update to 5.42:
  * PR/348: add missing cases to prevent file from aborting on
    random magic files.
  * PR/351: octalify filenames when not raw before printing.
  * fix regex cacheing bug (Dirk Mueller)
  * merge file_regcomp and file_regerror() to simplify the code
    and reduce memory requirements for storing regexes (Dirk Mueller)
  * cache regex (Dirk Mueller)
  * detect filesystem full by flushing output (Dirk Mueller)
  * implement running decompressor programs using
    posix_spawnp(2) instead of vfork(2)
  * Add support for msdos dates and times
  * use the system byte swapping functions if available (Werner Fink)
- Port patches
  * file-5.17-option.dif
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.19-zip2.0.dif
  * file-5.28-btrfs-image.dif
  * file-secure_getenv.patch
- Remove patches now upstream
  * file-5.23-endian.patch
  * file-5.41-cache-regexps-locale-restore.patch
  * file-5.41-cache-regexps.patch
- Port and rename patch file-5.41.dif which is now file-5.42.dif</changelog>
  <changelog author="werner@suse.de" date="1657713600">- Add upstream patch to fix boo#1201350
  * file-boo1201350.patch which combines the commits
    c80065fe6900be5e794941e29b32440e9969b1c3
    7e59d34206d7c962e093d4239e5367a2cd8b7623
    f042050f59bfc037677871c4d1037c33273f5213
    d471022b2772071877895759f209f2c346757a4c
    441ac2b15508909e82ad467960df4ac0adf9644c</changelog>
  <changelog author="gmbr3@opensuse.org" date="1661428800">- Move magic files to /usr/share/file from /usr/share/misc, and
  then create symlinks from /usr/share/misc back to /usr/share/file
  as per FHS 3.0</changelog>
  <changelog author="dmueller@suse.com" date="1663070400">- update to 5.43:
  * Add octal indirect magic
  * avoid infinite loop in non-wide code
  * Obey MAGIC_CONTINUE with multiple magic files
  * Fix bug with large flist
  * PR/364: Detect non-nul-terminated core filenames from QEMU
  * PR/359: Add support for http://ndjson.org/
  * PR/362: Fix wide printing
  * PR/358: Fix width for -f -
- drop file-boo1201350.patch (upstream)</changelog>
  <changelog author="werner@suse.de" date="1663156800">- Add patch file-zstd.patch from upstream mailing list
  * Add zstd decompression support
- Run also upstream standard checks</changelog>
  <changelog author="werner@suse.de" date="1673265600">- Modifying patches
  * file-5.22-elf.dif
  * file-5.19-printf.dif
  * file-5.19-zip2.0.dif
  * file-5.19-biorad.dif
  * file-secure_getenv.patch
  * file-5.28-btrfs-image.dif
- Remove patch file-zstd.patch now upstream
- Port patch file-5.42.dif and rename it to file-5.44.dif
- Update to 5.44:
  * Handle nan's so that we don't get internal floating point exceptions
    when they are enabled (Vincent Mihalkovic)
  * PR/397: Restore the ability to process files from stdin immediately.
  * fixed various clustefuzz issues
  * Fix error detection for decompression code (Vincent Mihalkovic)
  * Add MAGIC_NO_COMPRESS_FORK and use it to produce a more
    meaningful error message if we are sandboxing.
  * Add built-in lzip decompression support (Michal Gorny)
  * Add built-in zstd decompression support (Martin Rodriguez Reboredo)</changelog>
  <changelog author="werner@suse.de" date="1673352000">- Use [Pp]atch0 explicit to avoid warning as python.magic build time</changelog>
  <changelog author="werner@suse.de" date="1673438400">- Add patch dc71304b.patch
  * Handle script executable Zip archives</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="62b1fe6620dc8cb39d80e741cb3fc8844a397b10401cb9692360981427a7c2936b0a6a3946cc29c5e518dad5e2d6229725f611248b339c38fee7424b57f9729b" name="file-debugsource" arch="aarch64">
  <version epoch="0" ver="5.44" rel="slfo.1.1_1.4"/>
  <changelog author="werner@suse.de" date="1650974400">- Try to solve 32bit import dependency problems (boo#1198788)</changelog>
  <changelog author="werner@suse.de" date="1655121600">- Update to 5.42:
  * PR/348: add missing cases to prevent file from aborting on
    random magic files.
  * PR/351: octalify filenames when not raw before printing.
  * fix regex cacheing bug (Dirk Mueller)
  * merge file_regcomp and file_regerror() to simplify the code
    and reduce memory requirements for storing regexes (Dirk Mueller)
  * cache regex (Dirk Mueller)
  * detect filesystem full by flushing output (Dirk Mueller)
  * implement running decompressor programs using
    posix_spawnp(2) instead of vfork(2)
  * Add support for msdos dates and times
  * use the system byte swapping functions if available (Werner Fink)
- Port patches
  * file-5.17-option.dif
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.19-zip2.0.dif
  * file-5.28-btrfs-image.dif
  * file-secure_getenv.patch
- Remove patches now upstream
  * file-5.23-endian.patch
  * file-5.41-cache-regexps-locale-restore.patch
  * file-5.41-cache-regexps.patch
- Port and rename patch file-5.41.dif which is now file-5.42.dif</changelog>
  <changelog author="werner@suse.de" date="1657713600">- Add upstream patch to fix boo#1201350
  * file-boo1201350.patch which combines the commits
    c80065fe6900be5e794941e29b32440e9969b1c3
    7e59d34206d7c962e093d4239e5367a2cd8b7623
    f042050f59bfc037677871c4d1037c33273f5213
    d471022b2772071877895759f209f2c346757a4c
    441ac2b15508909e82ad467960df4ac0adf9644c</changelog>
  <changelog author="gmbr3@opensuse.org" date="1661428800">- Move magic files to /usr/share/file from /usr/share/misc, and
  then create symlinks from /usr/share/misc back to /usr/share/file
  as per FHS 3.0</changelog>
  <changelog author="dmueller@suse.com" date="1663070400">- update to 5.43:
  * Add octal indirect magic
  * avoid infinite loop in non-wide code
  * Obey MAGIC_CONTINUE with multiple magic files
  * Fix bug with large flist
  * PR/364: Detect non-nul-terminated core filenames from QEMU
  * PR/359: Add support for http://ndjson.org/
  * PR/362: Fix wide printing
  * PR/358: Fix width for -f -
- drop file-boo1201350.patch (upstream)</changelog>
  <changelog author="werner@suse.de" date="1663156800">- Add patch file-zstd.patch from upstream mailing list
  * Add zstd decompression support
- Run also upstream standard checks</changelog>
  <changelog author="werner@suse.de" date="1673265600">- Modifying patches
  * file-5.22-elf.dif
  * file-5.19-printf.dif
  * file-5.19-zip2.0.dif
  * file-5.19-biorad.dif
  * file-secure_getenv.patch
  * file-5.28-btrfs-image.dif
- Remove patch file-zstd.patch now upstream
- Port patch file-5.42.dif and rename it to file-5.44.dif
- Update to 5.44:
  * Handle nan's so that we don't get internal floating point exceptions
    when they are enabled (Vincent Mihalkovic)
  * PR/397: Restore the ability to process files from stdin immediately.
  * fixed various clustefuzz issues
  * Fix error detection for decompression code (Vincent Mihalkovic)
  * Add MAGIC_NO_COMPRESS_FORK and use it to produce a more
    meaningful error message if we are sandboxing.
  * Add built-in lzip decompression support (Michal Gorny)
  * Add built-in zstd decompression support (Martin Rodriguez Reboredo)</changelog>
  <changelog author="werner@suse.de" date="1673352000">- Use [Pp]atch0 explicit to avoid warning as python.magic build time</changelog>
  <changelog author="werner@suse.de" date="1673438400">- Add patch dc71304b.patch
  * Handle script executable Zip archives</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="629b2d10c4230fba927cbecb7eeb363db87d9039f81fc450e180397f868498ac8386eddcf6536f57e4e6cb0510e20dcd8b5bdac60cbb9296e09883e00cdc43bb" name="fillup-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.42" rel="slfo.1.1_2.2"/>
  <changelog author="dimstar@opensuse.org" date="1414756800">- Keep /bin/fillup as a symlink in the package: there are hundreds
  of RPMs out there referencing it in the %post scriptlets, when
  any of the %*fillup* macros was used. Even updating the macro
  will not make the existing RPMs magically be fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1415016000">- Also return back the /bin/fillup provides line</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- fillup-fno-common.patch: fix compilation on Tumbleweed
  (boo#1160871)</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1651060800">- use https as url</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- Makefile is not parallel-safe</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dmueller@suse.com" date="1705492800">- remove bin symlink for non-suse distributions</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="f4074048901e09fa905b9f4b1d9055051bcd9b90dc7e03e26f725349e38ddf4a6b3d9b2cbf6f19699284ff1d0d10225a24435b3c1146fda079ded87b25445141" name="fillup-debugsource" arch="aarch64">
  <version epoch="0" ver="1.42" rel="slfo.1.1_2.2"/>
  <changelog author="dimstar@opensuse.org" date="1414756800">- Keep /bin/fillup as a symlink in the package: there are hundreds
  of RPMs out there referencing it in the %post scriptlets, when
  any of the %*fillup* macros was used. Even updating the macro
  will not make the existing RPMs magically be fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1415016000">- Also return back the /bin/fillup provides line</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- fillup-fno-common.patch: fix compilation on Tumbleweed
  (boo#1160871)</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1651060800">- use https as url</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- Makefile is not parallel-safe</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dmueller@suse.com" date="1705492800">- remove bin symlink for non-suse distributions</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="5dc096eec191f3eba88f4545fce5818a3f9748a12bfa146f7e1f7109e749f2bea92a75882527d7435007fe4cc916686c7710e0729ee10c6b0b59c86726a06940" name="findutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.9.0" rel="slfo.1.1_2.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1597147200">- findutils.keyring: Update GPG keys of Bob Proulx.
  Prompted by an error of 'osc service localrun download_files'.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598788800">- findutils-gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- findutils.spec: Reference the patch.
- disable-null-ptr-test.patch: Refresh with -p0.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1610193600">- Update to 4.8.0.
  Announcement: https://savannah.gnu.org/forum/forum.php?forum_id=9914
- findutils.spec:
  - Source0: Fix download URL: remove "pub/".
  - %check: Output the content of all test-suite files in case of errors.
- Remove now-upstream patches:
  - disable-null-ptr-test.patch
  - findutils-gnulib-disable-test-float.patch
  - findutils-gnulib-test-avoid-FP-perror-strerror.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610193601">- update upstream signing key
- remove deprecated texinfo packaging macros
- run spec-cleaner</changelog>
  <changelog author="christian.voegl@suse.com" date="1618833600">- Use new Group Release Keyring</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1633348800">- gnulib-port-year2038-to-glibc-2.34.patch: Add patch to avoid
  build failure regarding 64-bit time_t on i586 with glibc-2.34.
- findutils.spec: Reference it, and add BR:automake and run 'autoreconf'.
  While at it, remove obsolete condition for suse_version 1100.
- findutils-xautofs.patch: Refresh.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1643803200">- Update to 4.9.0.
  Announcement: https://savannah.gnu.org/forum/forum.php?forum_id=10108
- gnulib-port-year2038-to-glibc-2.34.patch: Remove now-upstream patch.
- findutils.spec: Update version and remove above patch.
- findutils-xautofs.patch: Refresh.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pgajdos@suse.com" date="1738670400">- do not crash when file system loop was encountered [bsc#1231472]
- added patches
  fix https://git.savannah.gnu.org/cgit/findutils.git/commit/?id=e5d6eb919b9
  + findutils-avoid-crash-system-loop.patch
- modified patches
  % findutils-xautofs.patch (p1)</changelog>
</package>
<package pkgid="7b81199616eda946b91b58443571963101b3374df71bafd6d39393093eadd056ca45cf7e27cfcf549e3cb7ac82b629e10b77442ac24873eae8ed71aef63ef040" name="findutils-debugsource" arch="aarch64">
  <version epoch="0" ver="4.9.0" rel="slfo.1.1_2.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1597147200">- findutils.keyring: Update GPG keys of Bob Proulx.
  Prompted by an error of 'osc service localrun download_files'.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598788800">- findutils-gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- findutils.spec: Reference the patch.
- disable-null-ptr-test.patch: Refresh with -p0.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1610193600">- Update to 4.8.0.
  Announcement: https://savannah.gnu.org/forum/forum.php?forum_id=9914
- findutils.spec:
  - Source0: Fix download URL: remove "pub/".
  - %check: Output the content of all test-suite files in case of errors.
- Remove now-upstream patches:
  - disable-null-ptr-test.patch
  - findutils-gnulib-disable-test-float.patch
  - findutils-gnulib-test-avoid-FP-perror-strerror.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610193601">- update upstream signing key
- remove deprecated texinfo packaging macros
- run spec-cleaner</changelog>
  <changelog author="christian.voegl@suse.com" date="1618833600">- Use new Group Release Keyring</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1633348800">- gnulib-port-year2038-to-glibc-2.34.patch: Add patch to avoid
  build failure regarding 64-bit time_t on i586 with glibc-2.34.
- findutils.spec: Reference it, and add BR:automake and run 'autoreconf'.
  While at it, remove obsolete condition for suse_version 1100.
- findutils-xautofs.patch: Refresh.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1643803200">- Update to 4.9.0.
  Announcement: https://savannah.gnu.org/forum/forum.php?forum_id=10108
- gnulib-port-year2038-to-glibc-2.34.patch: Remove now-upstream patch.
- findutils.spec: Update version and remove above patch.
- findutils-xautofs.patch: Refresh.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pgajdos@suse.com" date="1738670400">- do not crash when file system loop was encountered [bsc#1231472]
- added patches
  fix https://git.savannah.gnu.org/cgit/findutils.git/commit/?id=e5d6eb919b9
  + findutils-avoid-crash-system-loop.patch
- modified patches
  % findutils-xautofs.patch (p1)</changelog>
</package>
<package pkgid="60f33e6009bf6836fc56ae25e68b50246b9958bf1b1a8908f53c306b43a17e0b141b1d06a0708b45e1072888a6341198b311eb33c1107d70a6ed780cc1dbe5ed" name="flashrom-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="slfo.1.1_1.2"/>
  <changelog author="glin@suse.com" date="1469534400">- Update to 0.9.9
  * Enable the dediprog module by default, add support for Dediprog
    SF600 and the new communication protocol of the SF100 with
    newer firmware
  * Add support to update the firmware of Promise UltraATA
    controllers
  * Support new programers: WCH CH341A, VIA VT8251
  * Support new chips:
    + ESI ES25P40, ES25P80, ES25P16
    + GigaDevice GD25VQ41B, GD25Q128C, GD25VQ21B, GD25VQ40C,
    GD25VQ80C and GD25VQ16C, GD25LQ40, GD25LQ80, GD25LQ16,
    GD25LQ64(B), GD25LQ128
    + PMC Pm25LQ020, Pm25LQ040, Pm25LQ080, Pm25LQ016, Pm25LQ032C
    + Sanyo LE25FU406C/LE25U40CMC
    + SST SST25WF020A, SST25WF040B, SST25WF080B
    + Winbond W29C512A/W29EE512
  * Allow to link flashrom statically (with make CONFIG_STATIC=yes)
  * Ease debugging of build problems with libraries
  * Ignore 0x00 as a flash chip manufacturer ID in the generic
    match to avoid ambiguous messages
  * Various improvements for serprog-based programmers
  * Add support for libftdi1
  * Add infrastructure for libusb1 and use it for new programmers
  * Rigorously check integrity of I/O stream data
  * Add make parameters for easier disabling/enabling of various
    classes of programmers</changelog>
  <changelog author="agraf@suse.com" date="1493208000">- Enable build for ARM</changelog>
  <changelog author="mardnh@gmx.de" date="1514980800">- Update to version 1.0
  * Support layouts for read and erase commands
  * New command line switch --noverify-all (-N) allows flashing of
    individual regions without reading the whole flash chip
    (particular useful with locked down Intel ME firmware)
  * New command line switch --ifd to read the layout from an
    Intel Firmware Descriptor on flash
  * We got rid of the delay-loop calibration (if the OS provides an
    accurate timer through clock_gettime())
  * Reading speed of USB programmers should have increased (reading
    bigger chunks at once, we reduce the overhead)
  * Support Intel 100 series PCHs (Sunrise Point, coupled with
    Skylake and Kaby Lake) and C620 series PCHs (Lewisburg paired
    with Workstation/Server versions of the former)
  * New programmers
    + Intel 100 series / C620 series PCHs
    + Intel I210 NICs (EEPROM and SPI)
    + AMD Merlin Falcon (FP4)
  * New chips
    + W25Q128.W
- Specfile cleanup
- Verify source signature</changelog>
  <changelog author="mardnh@gmx.de" date="1554033600">- Update to version 1.0.1
  * linux_spi: Reduce maximum read chunksize
  * Hardcode default spispeed of 2MHz
    Default speed of kernel drivers isn't always sane (any more).
  * Fix dmi_match string for ThinkPad X201
  * verification with sparse layouts
  * Fix erasing of unaligned regions</changelog>
  <changelog author="mardnh@gmx.de" date="1561291200">- Update to version 1.1
  New major user-visible features
  * 4-byte address support for many SPI programmers
  * New option to use a reference file for flash contents
    (--flash-contents)
  * Layout support for coreboot's FMAP format (--fmap, --fmap-file)
  * BAUD rate selection for Buspirate SPI
  * Support for the ENE Embedded Debug Interface (EDI), probably
    our first non-jedec SPI target
  * On Intel ME enabled systems, internal flashing is allowed by
    default
  New programmers
  * ENE Embedded Debug Interface EDI
  * Linux' MTD interface
  * Digilent SPI for the iCEblink40 development board
  * Developerbox/CP2104 bit banging
  * J-Link SPI
  * Dediprog firmwares &gt;= 7.2.30
  * Dediprog SF200
  * Intel Kabylake PCHs
  Support for lots of new chips</changelog>
  <changelog author="mardnh@gmx.de" date="1582200000">- Update to version 1.2
  - Meson support
  - Layout improvements/fixes and many, many code cleanups.
  - New chips: MX25U25635F, MX25L51245G, GD25Q256D, M95M02-A125,
    N25Q/MT25Q variants, W25Q128JW_DTR, AT25SF321, S25FL512S
  - New programmers: National Instruments USB-845x, Tin Can Tools
    Flyswatter/Flyswatter 2, STLINK V3, more Intel PCHs (Apollo
    Lake, Cannon Lake variants, Ice Lake U)
  - Reduced dependency on libusb0
  - Syntax: Added --flash-name and --flash-size arguments to print
    information about the flash chip</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606478400">- Fix build on aarch64 with upstream patch:
  * fix_aarch64.patch</changelog>
  <changelog author="schwab@suse.de" date="1631188800">- Enable build on riscv64
- Drop requires on dmidecode, no longer needed</changelog>
  <changelog author="mgorse@suse.com" date="1658664000">- Switch to meson
- Add flashrom-install-man-file.patch: install the man file when
  using meson.
- Add flashrom-j-link-spi.patch: Add missing meson option for
  J-Link SPI.
- Drop fix_aarch64.patch: no longer relevant.
- Package the library and headers.</changelog>
  <changelog author="adam@mizerski.pl" date="1695384000">- Update to 1.3.0
  - See changelog at https://www.flashrom.org/Flashrom/1.3
- Removed patches (merged upstream):
  - flashrom-install-man-file.patch
  - flashrom-j-link-spi.patch</changelog>
</package>
<package pkgid="349668e93e3e32eb73eedf7ee34828ec59a54f762c4d8f8a6688db8e361f642601dc0402588b6298c601e449c466db8377f61cdc68745ea9f662ccd62ccd0e78" name="fmt-debugsource" arch="aarch64">
  <version epoch="0" ver="9.1.0" rel="slfo.1.1_1.2"/>
  <changelog author="aloisio@gmx.com" date="1604491200">- Update to version 7.1.2
  * Fixed floating point formatting with large precision</changelog>
  <changelog author="aloisio@gmx.com" date="1606305600">- Update to version 7.1.3
  * Fixed handling of buffer boundaries in format_to_n
  * Fixed linkage errors when linking with a shared library
  * Reintroduced ostream support to range formatters
  * Worked around an issue with mixing std versions in gcc</changelog>
  <changelog author="aloisio@gmx.com" date="1624276800">- Update to version 8.0.0
  * Enabled compile-time format string check by default.
  * Added compile-time formatting.
  * Optimized handling of format specifiers during format string
    compilation.
  * Added the ``_cf`` user-defined literal to represent a
    compiled format string. It can be used instead of the
    ``FMT_COMPILE`` macro.
  * Format string compilation now requires ``format`` functions
    of ``formatter`` specializations for user-defined types to
    be ``const``.
  * Added UDL-based named argument support to format string
    compilation.
  * Added format string compilation support to ``fmt::print``.
  * Added initial support for compiling {fmt} as a C++20 module.
  * Made symbols private by default reducing shared library size
  * Optimized includes making the result of preprocessing
    ``fmt/format.h``.
  * Added support of ranges with non-const ``begin`` / ``end``
  * Added support of ``std::byte`` and other formattable types
    to ``fmt::join``.
  * Implemented the default format for
    ``std::chrono::system_clock``.
  * Made more chrono specifiers locale independent by default.
    Use the ``'L'`` specifier to get localized formatting.
  * Improved locale handling in chrono formatting.
  * Deprecated ``fmt/locale.h`` moving the formatting functions
    that take a locale to ``fmt/format.h`` (``char``) and
    ``fmt/xchar`` (other overloads). This doesn't introduce a
    dependency on ``&lt;locale&gt;`` so there is virtually no compile
    time effect.
  * Made parameter order in ``vformat_to`` consistent with
    ``format_to``.
  * Added support for time points with arbitrary durations.
  * Formatting floating-point numbers no longer produces
    trailing zeros by default.
    for consistency with ``std::format``.
  * Dropped a limit on the number of elements in a range and
    replaced ``{}`` with ``[]`` as range delimiters for
    consistency with Python's ``str.format``.
  * The ``'L'`` specifier for locale-specific numeric formatting
    can now be combined with presentation specifiers as in
    ``std::format``.
  * Made the ``0`` specifier ignored for infinity and NaN.
  * Made the hexfloat formatting use the right alignment by
    default.
  * Removed the deprecated numeric alignment (``'='``). Use the
    ``'0'`` specifier instead.
  * Removed the deprecated ``fmt/posix.h`` header that has been
    replaced with ``fmt/os.h``.
  * Removed the deprecated ``format_to_n_context``,
    ``format_to_n_args`` and ``make_format_to_n_args``. They
    have been replaced with ``format_context``, ``format_args`
    and ``make_format_args`` respectively.
  * Moved ``wchar_t``-specific functions and types to
    ``fmt/wchar.h``. You can define
    ``FMT_DEPRECATED_INCLUDE_WCHAR`` to automatically include
    ``fmt/wchar.h`` from ``fmt/format.h`` but this will be
    disabled in the next major release.
  * Fixed handling of the ``'+'`` specifier in localized
    formatting.
  * Added support for the ``'s'`` format specifier that gives
    textual representation of ``bool``.
  * Made ``fmt::ptr`` work with function pointers.
  * Fixed ``fmt::formatted_size`` with format string compilation
  * Fixed handling of empty format strings during format string
    compilation.
  * Fixed handling of enums in ``fmt::to_string``.
  * Improved width computation.
  * The experimental fast output stream (``fmt::ostream``) is
    now truncated by default for consistency with ``fopen``.
  * Fixed moving of ``fmt::ostream`` that holds buffered data
  * Replaced the ``fmt::system_error`` exception with a function
    of the same name that constructs ``std::system_error``.
  * Replaced the ``fmt::windows_error`` exception with a
    function of the same name that constructs
    ``std::system_error`` with the category returned by
    ``fmt::system_category()``.
  * Replaced ``fmt::error_code`` with ``std::error_code`` and
    made it formattable.
  * Added speech synthesis support.
  * Made ``format_to`` work with a memory buffer that has a
    custom allocator.
  * Added ``Allocator::max_size`` support to
    ``basic_memory_buffer``.
  * Added wide string support to ``fmt::join``
  * Made iterators passed to ``formatter`` specializations via a
    format context satisfy C++20 ``std::output_iterator``
    requirements.
  * Optimized the ``printf`` implementation.
  * Improved detection of ``constexpr`` ``char_traits``.
  * Fixed exception propagation from iterators.
  * Improved ``strftime`` error handling.
  * Stopped using deprecated GCC UDL template extension.
  * Added ``fmt/args.h`` to the install target.
  * Error messages are now passed to assert when exceptions are
    disabled.
  * Added the ``FMT_MASTER_PROJECT`` CMake option to control
    build and install targets when {fmt} is included via
    ``add_subdirectory``.
  * Improved build configuration.
  * Fixed various warnings and compilation issues.
  * Improved documentation.
  * Continuous integration and test improvements.
- Bump soversion to 8</changelog>
  <changelog author="aloisio@gmx.com" date="1625313600">- Update to version 8.0.1
  * Fixed the version number in the inline namespace.
  * Added a missing presentation type check for std::string.
  * Fixed a linkage error when mixing code built with clang and
    gcc.
  * Fixed documentation issues.
  * Removed dead code in FP formatter.
  * Fixed various warnings and compilation issues.</changelog>
  <changelog author="aloisio@gmx.com" date="1641211200">- Update to version 8.1.0
  * Optimized chrono formatting.
    + Processing of some specifiers such as %z and %Y is now up
    to 10-20 times faster, for example on GCC 11 with
    libstdc++.
  * Implemented subsecond formatting for chrono durations.
  * Fixed handling of precision 0 when formatting chrono
    durations.
  * Fixed an overflow on invalid inputs in the tm formatter.
  * Added fmt::group_digits that formats integers with a
    non-localized digit separator (comma) for groups of three
    digits.
  * Added support for faint, conceal, reverse and blink text
    styles.
  * Added experimental support for compile-time floating point
    formatting.
  * Added UDL-based named argument support to compile-time
    format string checks.
  * Implemented escaping of string range elements.
  * Switched to JSON-like representation of maps and sets for
    consistency with Python's str.format.
  * Extended fmt::join to support C++20-only ranges.
  * Optimized handling of non-const-iterable ranges and
    implemented initial support for non-const-formattable types.
  * Disabled implicit conversions of scoped enums to integers
    that was accidentally introduced in earlier versions.
  * Deprecated implicit conversion of [const] signed char* and
    [const] unsigned char* to C strings.
  * Deprecated _format, a legacy UDL-based format API.
  * Marked format, formatted_size and to_string as [[nodiscard]].
  * Added missing diagnostic when trying to format function and
    member pointers as well as objects convertible to pointers
    which is explicitly disallowed.
  * Optimized writing to a contiguous buffer with format_to_n.
  * Optimized writing to non-char buffers.
  * Decimal point is now localized when using the L specifier.
  * Improved floating point formatter implementation.
  * Fixed handling of very large precision in fixed format.
  * Made a table of cached powers used in FP formatting static.
  * Resolved a lookup ambiguity with C++20 format-related
    functions due to ADL.
  * Removed unnecessary inline namespace qualification.
  * Implemented argument forwarding in format_to_n.
  * Fixed handling of implicit conversions in fmt::to_string and
    format string compilation.
  * Changed the default access mode of files created by
    fmt::output_file to -rw-r--r-- for consistency with fopen.
  * Make fmt::ostream::flush public.
  * Improved C++14/17 attribute detection.
  * Improved documentation.
  * Improved fuzzers and added a fuzzer for chrono timepoint
    formatting.
  * Added the FMT_SYSTEM_HEADERS CMake option setting which
    marks {fmt}'s headers as system. It can be used to suppress
    warnings.
  * Added the Bazel build system support.
  * Improved build configuration and tests.
  * Fixed various warnings and compilation issues.</changelog>
  <changelog author="aloisio@gmx.com" date="1641556800">- Update to version 8.1.1
  * Restored ABI compatibility with version 8.0.x
  * Fixed chrono formatting on big-endian systems</changelog>
  <changelog author="jengelh@inai.de" date="1651320000">- Replace obsolete macro %make_jobs by %cmake_build</changelog>
  <changelog author="jengelh@inai.de" date="1657022400">- Update to release 9
  * Switched to the internal floating point formatter for all
    decimal presentation formats. In particular this results in
    consistent rounding on all platforms and removing the
    s[n]printf fallback for decimal FP formatting.
  * Compile-time floating point formatting no longer requires the
    header-only mode.
  * Disabled automatic std::ostream insertion operator
    (operator&lt;&lt;) discovery when fmt/ostream.h is included to
    prevent ODR violations. You can get the old behavior by
    defining FMT_DEPRECATED_OSTREAM.
  * Added fmt::ostream_formatter that can be used to write
    formatter specializations that perform formatting via
    std::ostream.
  * Added the fmt::streamed function that takes an object and
    formats it via std::ostream.
  * Added experimental std::variant formatting support.
  * Added experimental std::filesystem::path formatting support.
  * Added a std::thread::id formatter to fmt/std.h.
  * Added support for nested specifiers to range formatting.
- Add 0001-Fix-large-shift-in-uint128_fallback.patch
  0002-Use-FMT_USE_FLOAT128-instead-of-__SIZEOF_FLOAT128__.patch
  0001-Make-sure-the-correct-fmod-overload-is-called.patch</changelog>
  <changelog author="jengelh@inai.de" date="1661688000">- Update to release 9.1
  * fmt::formatted_size now works at compile time
  * Fixed handling of invalid UTF-8 (#3038)
  * Improved Unicode support in ostream overloads of print
  * Added support for wide streams to fmt::streamed
  * Added the n specifier that disables the output of delimiters
  when formatting ranges (#2981)
- Delete 0001-Fix-large-shift-in-uint128_fallback.patch
  0002-Use-FMT_USE_FLOAT128-instead-of-__SIZEOF_FLOAT128__.patch
  0001-Make-sure-the-correct-fmod-overload-is-called.patch (merged)</changelog>
  <changelog author="mliska@suse.cz" date="1678449600">- Use -ffloat-store as a fix for excessive precision provided
  by X87 on i686 target (https://github.com/fmtlib/fmt/issues/3337).</changelog>
</package>
<package pkgid="6e81c82991321b2cfc1e0c66c33416a82dbda4e4e5b63c456fca349288512e205e740f3f86c063a2becd9474a5b69374ae2301f46f158838106fe261d675cf25" name="fontconfig-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1540987200">- Update to 2.13.1:
  * conf.d: Drop aliases for (URW)++ fonts
  * variable fonts support
  * Use uuid-based cache filename if uuid is assigned to dirs
  * Add new API to find out a font from current search path
  * Add FONTCONFIG_SYSROOT environment variable
  * [varfonts] Add FC_FONT_VARIATIONS
  * [varfonts] Add FC_VARIABLE
  * Add Simplified Chinese translations
  * Fix memory leaks, double frees etc.
  * See README for details
- Drop fontconfig-remove-debug-output.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Package AUTHORS, ChangeLog and README via standard doc macro.</changelog>
  <changelog author="ecsos@opensuse.org" date="1547294400">- Fix self obsoletion ipa-fonts-config and IPA-fonts-config.
- Fix build error in Leap 42.3.
- Fix location of fontconfig-devel.* doc-files.</changelog>
  <changelog author="jengelh@inai.de" date="1547294401">- Implement shared library packaging guideline
- Split documentation to soothe rpmlint's
  "W: package-with-huge-docs 86%"</changelog>
  <changelog author="badshah400@gmail.com" date="1549713600">- Add fontconfig-do-not-remove-UUID-file.patch: Removing .uuid
  files caused frequent rescanning of all system fonts causing
  intermittent CPU usage surges, for example, when browsing using
  firefox; patch taken from upstream commit (boo#1124816,
  https://gitlab.freedesktop.org/fontconfig/fontconfig/merge_requests/8).</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- adding bug reference to this changelog [bsc#1172301]</changelog>
  <changelog author="dmueller@suse.com" date="1650024000">- update to 2.14.0:
  * Fix endianness on generating MD5 cache name
  * Fix a typo in the description of FcWeightFromOpenTypeDouble
  * fc-validate: returns an error code when missing some glyphs
  * Fallback uuid-based name to read a cache if no MD5-based cache
  * fc-cache: Show font directories to generate cache with -v
  * Replace UUID file mechanism with per-directory 'map' attribute [v2]
  * memleak fixes
- drop fontconfig-do-not-remove-UUID-file.patch (obsolete)
- add skip-network-test.patch</changelog>
  <changelog author="sflees@suse.de" date="1651147200">- Seems we now need python3 for building</changelog>
  <changelog author="dmueller@suse.com" date="1667908800">- update to 2.14.1:
  * Bump the cache version to 8 in doc/fontconfig-user.sgm
  * Enable 10-sub-pixel-rgb.conf by default
  * build fixes and translation updates
  * Avoid misuse of ctype</changelog>
  <changelog author="dmueller@suse.com" date="1674907200">- update to 2.14.2:
  * Adjust indentation between programlisting in fontconfig-user.sgml
  * Add some missing constant names for weight
  * Report more detailed logs instead of assertion
  * Fix a typo in description for HAVE_STDATOMIC_PRIMITIVES
  * Ignore LC_CTYPE if set to "UTF-8"
  * add --with-default-sub-pixel-rendering option
  * Add FC_DESKTOP_NAME property</changelog>
</package>
<package pkgid="a5b4fcf3d978bbc8586a2ee92dca242381ff6757e7c9fb8c0185a9a65bb21e6a0d72f277ac82f7fb17df56b7a98a8c4c29383db4406b93d8a7b15a64f9180c78" name="fontconfig-debugsource" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1540987200">- Update to 2.13.1:
  * conf.d: Drop aliases for (URW)++ fonts
  * variable fonts support
  * Use uuid-based cache filename if uuid is assigned to dirs
  * Add new API to find out a font from current search path
  * Add FONTCONFIG_SYSROOT environment variable
  * [varfonts] Add FC_FONT_VARIATIONS
  * [varfonts] Add FC_VARIABLE
  * Add Simplified Chinese translations
  * Fix memory leaks, double frees etc.
  * See README for details
- Drop fontconfig-remove-debug-output.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Package AUTHORS, ChangeLog and README via standard doc macro.</changelog>
  <changelog author="ecsos@opensuse.org" date="1547294400">- Fix self obsoletion ipa-fonts-config and IPA-fonts-config.
- Fix build error in Leap 42.3.
- Fix location of fontconfig-devel.* doc-files.</changelog>
  <changelog author="jengelh@inai.de" date="1547294401">- Implement shared library packaging guideline
- Split documentation to soothe rpmlint's
  "W: package-with-huge-docs 86%"</changelog>
  <changelog author="badshah400@gmail.com" date="1549713600">- Add fontconfig-do-not-remove-UUID-file.patch: Removing .uuid
  files caused frequent rescanning of all system fonts causing
  intermittent CPU usage surges, for example, when browsing using
  firefox; patch taken from upstream commit (boo#1124816,
  https://gitlab.freedesktop.org/fontconfig/fontconfig/merge_requests/8).</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- adding bug reference to this changelog [bsc#1172301]</changelog>
  <changelog author="dmueller@suse.com" date="1650024000">- update to 2.14.0:
  * Fix endianness on generating MD5 cache name
  * Fix a typo in the description of FcWeightFromOpenTypeDouble
  * fc-validate: returns an error code when missing some glyphs
  * Fallback uuid-based name to read a cache if no MD5-based cache
  * fc-cache: Show font directories to generate cache with -v
  * Replace UUID file mechanism with per-directory 'map' attribute [v2]
  * memleak fixes
- drop fontconfig-do-not-remove-UUID-file.patch (obsolete)
- add skip-network-test.patch</changelog>
  <changelog author="sflees@suse.de" date="1651147200">- Seems we now need python3 for building</changelog>
  <changelog author="dmueller@suse.com" date="1667908800">- update to 2.14.1:
  * Bump the cache version to 8 in doc/fontconfig-user.sgm
  * Enable 10-sub-pixel-rgb.conf by default
  * build fixes and translation updates
  * Avoid misuse of ctype</changelog>
  <changelog author="dmueller@suse.com" date="1674907200">- update to 2.14.2:
  * Adjust indentation between programlisting in fontconfig-user.sgml
  * Add some missing constant names for weight
  * Report more detailed logs instead of assertion
  * Fix a typo in description for HAVE_STDATOMIC_PRIMITIVES
  * Ignore LC_CTYPE if set to "UTF-8"
  * add --with-default-sub-pixel-rendering option
  * Add FC_DESKTOP_NAME property</changelog>
</package>
<package pkgid="67c89f2145a5dac5a7554f06afdb8ee94e6e327508293c8662b097473b5b2945b41198bc113c5c66fbd453987709d7b1bc33ad2fe68cadcab737773ce204b469" name="freeipmi-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.14" rel="slfo.1.1_1.2"/>
  <changelog author="kkaempf@suse.com" date="1599393600">- Update to 1.6.6
  o In libfreeipmi, fix segfault in SPMI parsing leading to immediate
    failures on some hardware across all tools.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- freeipmi 1.6.7:
  * Do not require IPMI access when running ipmi-fru with the
  - -fru-file option
  * Minor documentation updates
- the following fixes were upstreamed:
  * Fix default permissions of various config and system files,
    drop 1103311-service-files-mode.patch</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Fix: W: name-repeated-in-summary C FreeIPMI
- Fix: freeipmi-bmc-watchdog.x86_64:
  W: non-etc-or-var-file-marked-as-conffile /usr/share/fillup-templates/sysconfig.bmc-watchdog
  Declaring fillup files as conffile is not needed
- freeipmi 1.6.8
  * Fix incorrect sensor read corner case on BMCs that use non-default LUNs (LP#1926299).
  * Remove hard coded paths from system config files (i.e. mostly files
    in /etc).  Have paths updated based on options to configure.</changelog>
  <changelog author="kkaempf@suse.com" date="1642680000">- freeipmi 1.6.9
  * Support --with-systemconfigdir build option.
  * Fix build issue on musl where putmsg/getmsg are not available.
  * Fix build issue when inb/outb are not available on some systems.
  * Fix static build issues with gcrypt.
  * Add conserver documentation in faq.
  * Minor documentation updates.</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- Remove obsolete ExclusiveArch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676635200">- freeipmi 1.6.10
  * Support IPv6 Lan configuration in ipmi-config
    IPv6 configuration is supported in the new Lan6_Conf section
- add upstream signing key and source signature</changelog>
  <changelog author="kkaempf@suse.com" date="1686571200">- freeipmi 1.6.11
  * Fix double free corner case in ipmiseld.
  * Support ISO 8601 date inputs to date range options in ipmi-sel.
  * Support Xilinx OEM FRU records.
  * Fix corner case in libipmimonitoring, support sensor if units
    is "RPM per minute", but just return "RPM" as the units.
  * Fix portability compilation on cygwin.
  * Fix typo in fiid template field that could lead to packet
    interpretation errors.</changelog>
  <changelog author="kkaempf@suse.com" date="1706529600">- freeipmi 1.6.14
  * Fix build issue common to non-x86 systems.
- freeipmi 1.6.13
  * Fix build issues on systems where inb/outb are declared with inline
    assembly.
  * Add additional sensor/event interpretations.
- freeipmi 1.6.12
  * Use poll() over select() to avoid fd limit in openipmi driver.
  * Fix potential portability problems on systems without cbrt().
  * Minor documentation updates.</changelog>
  <changelog author="kkaempf@suse.com" date="1709812800">- fix gcc-14 build: gcc-14.patch (bsc#1220476)</changelog>
  <changelog author="kkaempf@suse.com" date="1717416000">- use %autosetup
- apply patches with -p1</changelog>
</package>
<package pkgid="1d995a1a4d0b2f4d1575661181c302fad4cbf093575226adde1ad108dea8d9b2c06c912afda552f6654521065adff7e19d1936cc1e8e26a2820f0b60e17633fc" name="freetype2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="slfo.1.1_1.1"/>
  <changelog author="meissner@suse.com" date="1677758400">- add devel requires to devel-32bit for brotli and bzip2 (indirect
  for Wine)</changelog>
  <changelog author="dmueller@suse.com" date="1678276800">- update to 2.13.0:
  * The 'COLR' v1 API is now considered as stable.
    https://learn.microsoft.com/en-us/typography/opentype/spec/colr
  * For  OpenType  Variable Fonts,  `avar`  table  format 2.0  is  now
    supported.  The code was contributed by Behdad Esfahbod.
    Note that this is an extension supported on recent Apple platforms
    and by HarfBuzz, but not yet in the OpenType standard!  See
    https://github.com/harfbuzz/boring-expansion-spec/blob/main/avar2.md
    for the specification.  To deactivate it, define the configuration
    macro 'TT_CONFIG_OPTION_NO_BORING_EXPANSION'.
  * A new API  `FT_GlyphSlot_Slant` to slant a glyph by  a given angle
    has been added.   Note that this function is  part of `ftsynth.h`,
    which is still considered to be in alpha stage.
  * TrueType interpreter version 38  (also known as 'Infinality') that
    was first introduced about 10 years  ago in FreeType 2.4.11 is now
    deprecated and slated to be removed in the next version.  TrueType
    interpreter version 40 has been FreeType's default version for six
    years now and provides an excellent alternative.  This is the last
    FreeType     version     with    TT_INTERPRETER_VERSION_38     and
    TT_INTERPRETER_VERSION_40 treated differently.
  * The  only  referenced  but never  documented  configuration  macro
    `FT_CONFIG_OPTION_NO_GLYPH_NAMES` has been removed.
  * To  avoid  reserved identifiers  that  are  globally defined,  the
    auto-hinter  debugging   macros  (which  are  only   available  if
    `FT_DEBUG_AUTOFIT` is defined)
    ```
    _af_debug_disable_horz_hints
    _af_debug_disable_vert_hints
    _af_debug_disable_blue_hints
    _af_debug_hints
    ```
    have been renamed to
    ```
    af_debug_disable_horz_hints_
    af_debug_disable_vert_hints_
    af_debug_disable_blue_hints_
    af_debug_hints_
    ```</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to FTL and GPL-2.0-only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1685016000">- Do not limit ftdump conflict to &lt; version-release, but only to
  version. Ftdump is built in a second build flavor and as such the
  release counters are not guaranteed to be in sync.</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 2.13.1:
  * New function  `FT_Get_Default_Named_Instance` to get the
    index of the default named instance of an OpenType Variation
    Font. A new load flag `FT_LOAD_NO_SVG` to make FreeType ignore
    glyphs in an 'SVG ' table.
  * New function  `FT_GlyphSlot_AdjustWeight` to adjust
    the glyph weight either  horizontally or  vertically.
    This is part of the `ftsynth.h` header file
  * TrueType interpreter  version 38 (also known  as
    'Infinality') has been deactivated; the value  of
    `TT_INTERPRETER_VERSION_38` is now the same as
    `TT_INTERPRETER_VERSION_40`.
  * Switching named instances on and  off in Variation Fonts
    was buggy if the design coordinates didn't change.
- drop enable-infinality-subpixel-hinting.patch (obsolete, infinality
  is deactivated)</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Update to version 2.13.2:
  - Better support for CFF2 variation fonts.
  - TrueType interpreter  version 38 (also known  as 'Infinality')
    has been removed.
  - Improved OpenVMS support.</changelog>
  <changelog author="dmueller@suse.com" date="1740484800">- update to 2.13.3:
  * Some  fields in the `FT_Outline` structure have been changed
    from signed to unsigned type, which better reflects the actual
    usage. It is also an additional means to protect against
    malformed input.
  * Rare double-free crashes in the cache subsystem have been fixed.
  * Excessive stack allocation in the autohinter has been fixed.
  * The B/W  rasterizer has received a major upkeep that results in
    large performance improvements.  The rendering speed has
    increased and even doubled for very complex glyphs.</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- package FTL.TXT and GPLv2.TXT [bsc#1252148]</changelog>
  <changelog author="dmueller@suse.com" date="1763380800">- update to 2.14.1:
  * The auto-hinter got new abilities. It can now better separate
    diacritic glyphs from base glyphs at small sizes  by
    artificially moving  diacritics up (or  down) if necessary
  * Tilde accent  glyphs get vertically stretched at small sizes so
    that they don't degenerate to horizontal lines.
  * Diacritics directly attached to a base glyph (like the ogonek in
    character 'ę') no longer distort the shape of the base glyph
  * The TrueType  instruction interpreter  was optimized to
    produce a 15% gain in the glyph loading speed.
  * Handling of Variation Fonts is now considerably faster
  * TrueType and CFF glyph loading speed has been improved by 5-10%
    on modern 64-bit platforms  as  a result of better handling of
    fixed-point multiplication.
  * The BDF driver now loads fonts 75% faster.</changelog>
  <changelog author="fstrba@suse.com" date="1772539200">- update to 2.14.2
- Important changes
  * Several changes related to LCD filtering are implemented to
    achieve better performance and encourage sound practices.
    + Instead of blanket LCD filtering over the entire bitmap, it
    is now applied only to non-zero spans using direct rendering.
    This speeds up the ClearType-like rendering by more than 40%
    at sizes above 32 ppem.
    + Setting the filter weights with FT_Face_Properties is no
    longer supported. The default and light filters are optimized
    to work with any face.
    + The legacy libXft LCD filter algorithm is no longer provided.
- Important bug fixes
  * A bunch of potential security problems have been found
    (bsc#1259118, CVE-2026-23865). All users should update.
  * The italic angle in `PS_FontInfo` is now stored as a fixed-point
    value in degrees for all Type 1 fonts and their derivatives,
    consistent with CFF fonts and common practices. The broken
    underline position and thickness values are fixed for CFF fonts.
- Miscellaneous
  * The `x` field in the `FT_Span` structure is now unsigned.
  * Demo program `ftgrid` got an option `-m` to select a start
    character to display.
  * Similarly, demo program `ftmulti` got an option `-m` to select a
    text string for rendering.
  * Option `-d` in the demo program `ttdebug` is now called `-a`,
    expecting a comma-separated list of axis values.  The user
    interface is also slightly improved.
  * The `ftinspect` demo program can now be compiled with Qt6, too.</changelog>
</package>
<package pkgid="ae5d8004899919fd743984438e019fa90450b3e504c7be09785fdba85244f343c5aab7ee775315b923785cba53f6be593a4ffc4a714cb192aafc4f2405b2c227" name="fribidi-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.13" rel="slfo.1.1_1.2"/>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="dmueller@suse.com" date="1636804800">- update to 1.0.11:
  * Updated Unicode tables to version 14.
  * Skip isolates in fribidi_get_par_direction().
  * Various fuzzing fixes.
  * Various build fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 1.0.12:
  * Various fuzzing fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- update to 1.0.13:
  * Adding missing man pages to the tar release file.</changelog>
</package>
<package pkgid="59324957e5581c47d5219588e4350c7cdb75107bbca2c02f738ec8b88c53a5c4259824838d762d4df0acfd3b64dd898ca35664ddb76e9259dc77f9e5904e053a" name="fuse-debugsource" arch="aarch64">
  <version epoch="0" ver="2.9.9" rel="slfo.1.1_1.2"/>
  <changelog author="avindra@opensuse.org" date="1532779200">- fuse 2.9.8
  * SECURITY UPDATE: In previous versions of libfuse it was possible
    to for unprivileged users to specify the allow_other option even
    when this was forbidden in /etc/fuse.conf. The vulnerability is
    present only on systems where SELinux is active (including in
    permissive mode).
  * libfuse no longer segfaults when fuse_interrupted() is called
    outside the event loop.
  * The fusermount binary has been hardened in several ways to
    reduce potential attack surface. Most importantly, mountpoints
    and mount options must now match a hard-coded whitelist. It is
    expected that this whitelist covers all regular use-cases.
- cleanup with spec-cleaner
- update wiki urls to new location</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133101).</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.9.9:
  * Added OpenAFS to whitelist (so users can now mount FUSE filesystems on mountpoints within OpenAFS filesystems).
  * Added a test of seekdir to test_syscalls.
  * Fixed readdir bug when non-zero offsets are given to filler and the
  filesystem client, after reading a whole directory, re-reads it from a
  non-zero offset e. g. by calling seekdir followed by readdir.</changelog>
  <changelog author="lnussel@suse.de" date="1605009600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Modernize some older specfile constructs. Rediff patch4 as -p1.
- Update descriptions.</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133101) and use -ffat-lto-objects.</changelog>
  <changelog author="jengelh@inai.de" date="1629720000">- Add closefrom.patch [boo#1189086]</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="420db4d0594173fc75c521d92d07fea590dfda5899dc1f0219832b8b0a3f632711870917793e7949a5490302dba449657cf3709dc24d1822e848abf7aae2a0ac" name="fuse-overlayfs-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.12" rel="slfo.1.1_1.3"/>
  <changelog author="sgrunert@suse.com" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="sgrunert@suse.com" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
  <changelog author="idonmez@suse.com" date="1613995200">- Update to version 1.4.0
  * add squash_to_uid and squash_to_gid
  * add squash_to_root mount option.
  * honor option "volatile".
  * when writing mode to xattr, create files with mode 0755.
  * support ID mapping when using xattr permissions.
  * allow opening not accessible but still referenced files.
  * invalidate directory cache on create/rename.
  * fix segfault if no mountpoint specified
  * fix file_exists_at musl compatibility
  * introduce extended attribute to override gid/uid/mode.
  * support writing uid/gid/mode to an extended attribute.
  * fix a memory leak, where inodes are maintained in memory
    even if not needed.</changelog>
  <changelog author="kkaempf@suse.com" date="1632830400">- Update to version 1.7.1
  * set FUSE_CAP_POSIX_ACL only when it is supported by FUSE.
  * treat statx failure with EINVAL as ENOSYS, so that the fallback
    is attempted.
- Update to version 1.7.0
  * fix read xattrs for device files
  * don't create whiteout files in opaque dirs.
  * fix reading files when running with euid != 0.
  * enable POSIX ACLs.
- Update to version 1.6.0
  * fix an invalid access when filtering internal xattrs that could
    deal to a segfault.
- Update to version 1.5.0
  * honor FUSE_OVERLAYFS_DISABLE_OVL_WHITEOUT also for renames
  * use strncpy instead of strcpy
  * fix renameat2(RENAME_NOREPLACE) on older kernels that lack
    device whiteouts for unprivileged users.
  * fix creating a symlink on top of a removed file.
  * fix copyup of xattrs longer than 256 bytes.</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 1.10:
  * main: use /proc/self/fd to read xattrs.
  * main: inherit ACLs for new files/dirs.
  * main: fix passing noatime.
  * main: add checks for valid /proc mount.
  * main: fix copy_file_range for deleted files.
  * main: fix creating links of just deleted files.
  * main: fix setting attributes on file without permissions.
  * main: ignore EOVERFLOW when copying xattrs.
  * main: set the correct value for RENAME_NOREPLACE when it is not already
    defined in the system headers.
  * main: create source whiteout only when needed
  * main: fix missing source whiteout when destination is whiteout
  * main: fix lookup if underlying path is a symlink, but a directory on a
    upper directory.
  * main: fix race when looking up an inode that was renamed.
  * main: fix type used for ioctl.
  * main: honor user.overlay. xattrs.  Native overlay uses user.overlay to
    store the overlay metadata instead of trusted.overlay.
  * main: add a mount flag to disable ACLs.</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- update to 1.12:
  * change license to GPL-2.0-or-later.
  * main: if a lower layer doesn't support ACLs do not enable
    them.</changelog>
</package>
<package pkgid="15b6d39a67ed1f7d5820fc5bcb9621bae1e595de9ac82e54e67ce83641c561c4fe8e8c2e475e9482fffa05f83d5c3caaa74df7af27f70dc6a9a9abd68605c0f4" name="fuse-overlayfs-debugsource" arch="aarch64">
  <version epoch="0" ver="1.12" rel="slfo.1.1_1.3"/>
  <changelog author="sgrunert@suse.com" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="sgrunert@suse.com" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
  <changelog author="idonmez@suse.com" date="1613995200">- Update to version 1.4.0
  * add squash_to_uid and squash_to_gid
  * add squash_to_root mount option.
  * honor option "volatile".
  * when writing mode to xattr, create files with mode 0755.
  * support ID mapping when using xattr permissions.
  * allow opening not accessible but still referenced files.
  * invalidate directory cache on create/rename.
  * fix segfault if no mountpoint specified
  * fix file_exists_at musl compatibility
  * introduce extended attribute to override gid/uid/mode.
  * support writing uid/gid/mode to an extended attribute.
  * fix a memory leak, where inodes are maintained in memory
    even if not needed.</changelog>
  <changelog author="kkaempf@suse.com" date="1632830400">- Update to version 1.7.1
  * set FUSE_CAP_POSIX_ACL only when it is supported by FUSE.
  * treat statx failure with EINVAL as ENOSYS, so that the fallback
    is attempted.
- Update to version 1.7.0
  * fix read xattrs for device files
  * don't create whiteout files in opaque dirs.
  * fix reading files when running with euid != 0.
  * enable POSIX ACLs.
- Update to version 1.6.0
  * fix an invalid access when filtering internal xattrs that could
    deal to a segfault.
- Update to version 1.5.0
  * honor FUSE_OVERLAYFS_DISABLE_OVL_WHITEOUT also for renames
  * use strncpy instead of strcpy
  * fix renameat2(RENAME_NOREPLACE) on older kernels that lack
    device whiteouts for unprivileged users.
  * fix creating a symlink on top of a removed file.
  * fix copyup of xattrs longer than 256 bytes.</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 1.10:
  * main: use /proc/self/fd to read xattrs.
  * main: inherit ACLs for new files/dirs.
  * main: fix passing noatime.
  * main: add checks for valid /proc mount.
  * main: fix copy_file_range for deleted files.
  * main: fix creating links of just deleted files.
  * main: fix setting attributes on file without permissions.
  * main: ignore EOVERFLOW when copying xattrs.
  * main: set the correct value for RENAME_NOREPLACE when it is not already
    defined in the system headers.
  * main: create source whiteout only when needed
  * main: fix missing source whiteout when destination is whiteout
  * main: fix lookup if underlying path is a symlink, but a directory on a
    upper directory.
  * main: fix race when looking up an inode that was renamed.
  * main: fix type used for ioctl.
  * main: honor user.overlay. xattrs.  Native overlay uses user.overlay to
    store the overlay metadata instead of trusted.overlay.
  * main: add a mount flag to disable ACLs.</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- update to 1.12:
  * change license to GPL-2.0-or-later.
  * main: if a lower layer doesn't support ACLs do not enable
    them.</changelog>
</package>
<package pkgid="0f9df63ede2fb2c4b074a7230ec911910f3f728163d3a9c91f2cbbc04cde25a2f7921709be0a832824585fe1c57b5110298599e2c7c564899d9c572b5ec4f185" name="fuse3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.16.2" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1662638400">- Update to release 3.12.0
  * The max_idle_threads parameter has been deprecated in favor
    of the new max_threads* parameter
  * struct fuse_loop_config is now private and has to be
    constructed using fuse_loop_cfg_create()
  * fuse_session_loop_mt() now accepts struct fuse_loop_config *
    as NULL pointer.
  * fuse_parse_cmdline() now accepts a max_threads option.</changelog>
  <changelog author="jengelh@inai.de" date="1673611200">- Update to release 3.13
  * There is a new low-level API function fuse_session_custom_io
    that allows to implement a daemon with a custom io. This can
    be used to create a daemon that can process incoming FUSE
    requests to other destinations than /dev/fuse.
  * A deadlock when resolving paths in the high-level API has
    been fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1675684800">- Update to release 3.13.1
  * Fixed an issue that resulted in errors when attempting to
    compile against installed libfuse headers (because libc
    symbol versioning support was not detected correctly in this
    case).
- Add 0001-Split-config.h-into-private-and-public-config.patch
  to fix doubly-defined macros and build failure elsewhere.</changelog>
  <changelog author="jengelh@inai.de" date="1676635200">- Update to release 3.14
  * Split config.h into private and public config
- Delete 0001-Split-config.h-into-private-and-public-config.patch
  (merged).</changelog>
  <changelog author="jengelh@inai.de" date="1679832000">- Update to release 3.14.1
  * The extended attribute name passed to the setxattr() handler
    is no longer truncated at the beginning.
  * The additional setattr() flags introduced in 3.14 are no
    longer available for now. They will hopefully be reintroduced
    in the next release.</changelog>
  <changelog author="jsrain@suse.com" date="1684411200">- update the license tag matching the code (LGPL-2.1-only and
  GPL-2.0-only)</changelog>
  <changelog author="jengelh@inai.de" date="1686312000">- Update to release 3.15.0
  * Improved support for some less common systems (32-bit,
    alternative libcs)
  * Unsupported mount options are no longer silently accepted.
  * auto_unmount is now compatible with allow_other.</changelog>
  <changelog author="jengelh@inai.de" date="1688558400">- Update to release 3.15.1
  * Reduce default write size by half</changelog>
  <changelog author="jengelh@inai.de" date="1691496000">- Update to release 3.16.1
  * Readdir kernel cache can be enabled from high-level API.</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 3.16.2
  * Various minor bugfixes and improvements.</changelog>
</package>
<package pkgid="6be0a640b346fa0c4bbe0ce9fadb8fbc8d596c216c4e062a81fef4afdf8786ebdd17c7b5c6c0a09055dd7693d50c30ea11e53a02fb988bfaa4fd21dae8b1f99a" name="fwupd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.9.16" rel="slfo.1.1_1.2"/>
  <changelog author="info@paolostivanin.com" date="1701691200">- Update to version 1.9.10:
  + This release adds the following features:
  - Add support for not_hardware requirements
  - Add support for loongarch64
  - Add support for per-release priority attributes
  - Make USB claim retry count configurable across devices
  + This release fixes the following bugs:
  - Compare the HID report value when checking for duplicates
  - Consider the component priority when installing composite updates
  - Deploy the CCGX firmware correctly the first time
  - Do not export the 'main-system-firmware' and 'cpu' GUIDs
  - Enforce fwupd version requirements client side
  - Fix Genesys 'failed to get static tool info from device' error
  - Fix potential 'dereference before null check' in ccmx-dmc
  - Fix the 'already registered private FuMmDevice flag with value' warning
  - Fix the 'assertion backend_id != NULL failed' runtime warning
  - Fix Wacom USB device emulation by recording the composite phases
  - Generate generic request message text where possible
  - Hide HTTP passwords in fwupd debugging logs
  - Let the client know what interaction is expected
  - Make all critical warnings into backtraces for non-release builds
  - Never obsolete the wrong HSI attribute
  - Never show a HSI index that is impossible
  - Only apply fastboot plugin to modem devices supporting fastboot
  - Only send interactive requests when the sender is alive
  - Remove the now-obsolete Synaptics MST cascade device scanning
  - Replace the Redfish KCS user if required
  - Restrict mediatek-scaler devices on specific hardware only
  - Skip any recovery partitions when detecting ESP</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1704369600">- Update to version 1.9.11:
  + This release adds the following features:
  - Allow exporting 'offline' reports for manual upload
  + This release fixes the following bugs:
  - Add some recovery partition names to ignore for ESP selection
  - Check for CET and SMAP on non-Intel x86 processors too
  - Correctly mark the CPU as supported in the HSI tests
  - Do not fail on probing downstream Synaptics MST ports
  - Do not offer to change BIOS settings that are already set
  - Do not prefer msftdata when choosing the default ESP
  - Do not show spurious device request flags
  - Fix a missing build dependency to fwupdplugin-self-test
  - Fix a segfault when using zlib-ng instead of zlib
  - Fix updating Jabra 410, 510, 710 and 810 devices
  - Match more community-supported branches
  - Remove the Intel SPIBAR proxy support as the mtd module works
  - Show a better error when the ESP is missing
  - Show an error if the post-update version does not match exactly
  - Speed up Synaptics MST device enumeration
  + This release adds support for the following hardware:
  - Algoltek USB devices
  - Luxshare Quad USB4 Dock</changelog>
  <changelog author="dennis.tseng@suse.com" date="1705147200">- Fix build failure on s390x and ppc64le
  + This release modifies spec file
  - add s390x and ppc64le into default 'with efi_fw_update'
    so that old dbxtool version can be obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1706097600">- Update to version 1.9.12:
  + This release adds the following features:
  - Add remote modification support to fwupdtool
  - Add support for more modify-config options
  - Generate HTML pages for all man pages
  + This release fixes the following bugs:
  - Assume the legacy LVFS::UpdateRequestId tag is non-generic
  - Avoid crashing the daemon if not using udisks
  - Correctly mark the CPU as supported
  - Correctly match invalid EFI partitions
  - Do not change the device status until the action has
    completed
  - Do not require systemd for fwupdtool modify-config
  - Enable access to the home interface for snap
  - Fix an assertion when enabling lvfs-testing for the first
    time
  - Fix a possible crash in fwupdtool build-cabinet
  - Handle systems with more than one ccp device
  - Only check AMD CPUs for SHSTK, not IBT
  - Only write the mutable fwupd.conf with the current values
  - Re-evaluate supported every time pci-psp attributes are
    refreshed
  - Show "CET OS support" on AMD systems too
  + This release adds support for the following hardware:
  - AVer CAM340plus
  - AVer VB342 Pro
  - More Algoltek devices</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Update to version 1.9.13:
  + This release adds the following features:
  - Add a timer inhibit if the daemon took a long time to
    startup.
  - Add a concept of 'Test Mode' rather than enabling specific
    plugins.
  - Do not idle-quit the daemon if there is a connected D-Bus
    client.
  + This release fixes the following bugs:
  - Allow plugins to opt-out of the child-device first depsolve.
  - Allow setting multiple flags in LVFS::DeviceFlags.
  - Do not migrate config comments for removed keys.
  - Do not request the Advantech BMC to reboot.
  - Do not warn the user about ESP when using MBR.
  - Fix a critical warning when adding a PixArt wireless device.
  - Fix migration of legacy config files.
  - Only save config values to the mutable config file.
  - Parse DS-20 descriptors earlier in device setup.
  - Store the version format in the history database to fix
    offline reports.
  - Use the correct GUID for matching realtek-mst and
    parade-lspcon.
  + This release adds support for the following hardware:
  - GoodWay Acer Dock.</changelog>
  <changelog author="info@paolostivanin.com" date="1709035200">- Update to version 1.9.14:
  * Correctly detect ARM32 and RISC-V UEFI binaries.
  * Correctly migrate the database schema from very old fwupd versions.
  * Fix DS-20 descriptors by opening the GUsbDevice earlier.
  * Fix updating the fingerprint reader on the Framework 13 and 16 laptop.
  * Fix warning when probing devices using the metadata allowlist.
  * Only recover the version format for specific devices.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710244800">- Update to version 1.9.15:
  + This release adds the following features:
  - Allow loading in parameters for the test device from
    fwupd.conf.
  - Ensure LVFS remotes are changed from .gz to .xz.
  - Store the install duration in the history database.
  + This release fixes the following bugs:
  - Drop OverrideESPMountPoint references in uefi-capsule.
  - Fix a potential double-free when writing AVer firmware.
  - Only request the BOS descriptor when bcdUSB &gt; 0x0200.
  - Use the root device order when sorting device children.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712318400">- dbxtool is built unconditionally on all architectures: move it
  out of the condition in the files section and also
  unconditionally provide/obsolete the old version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712577600">- Update to version 1.9.16:
  + This release adds the following features:
  - Prefer zstd over xz for metadata.
  - Relicense a few remaining plugin files to LGPL-2.1+.
  + This release fixes the following bugs:
  - Correctly record UEFI success if adding ESRT nodes.
  - Defer the DP Aux MST scanning on hotplug to workaround a
    kernel bug.
  - Do not do the post-update version check if the device
    needs-reboot.
  - Fix a fastboot warning when loading device.
  - Fix a possible warning in fwupdmgr when excluding releases.
  - Fix a qsi-dock warning when writing chunks.
  - Ignore attribute-changed to work around a regression in
    macOS.
  - Ignore ZFS zvols when finding the default ESP.
  - Mark Pluton TPMs as part of the main CPU.
  - Put the fwupd-efi verbose debugging in the journal.
  - Recognize zfsbootmenu in ESP detection heuristic.
  + This release adds support for the following hardware:
  - Acer T34 and U33 docks.
  - Qualcomm Series 5 Gen 1 and Gen 2 and Series 3 Gen 1 and
    Gen 2 devices.
  - Several Puya SPI chips.
  - VIA VL822 C0.</changelog>
</package>
<package pkgid="77ac2cb4af8956f23e6f21151cd0554486d18dece612a8ec53486b95231bc939a7ec1e4d4cf779347375a070f09ee32a676cc7b798a5e17b883d3e117dd3d596" name="fwupd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.9.16" rel="slfo.1.1_1.2"/>
  <changelog author="info@paolostivanin.com" date="1701691200">- Update to version 1.9.10:
  + This release adds the following features:
  - Add support for not_hardware requirements
  - Add support for loongarch64
  - Add support for per-release priority attributes
  - Make USB claim retry count configurable across devices
  + This release fixes the following bugs:
  - Compare the HID report value when checking for duplicates
  - Consider the component priority when installing composite updates
  - Deploy the CCGX firmware correctly the first time
  - Do not export the 'main-system-firmware' and 'cpu' GUIDs
  - Enforce fwupd version requirements client side
  - Fix Genesys 'failed to get static tool info from device' error
  - Fix potential 'dereference before null check' in ccmx-dmc
  - Fix the 'already registered private FuMmDevice flag with value' warning
  - Fix the 'assertion backend_id != NULL failed' runtime warning
  - Fix Wacom USB device emulation by recording the composite phases
  - Generate generic request message text where possible
  - Hide HTTP passwords in fwupd debugging logs
  - Let the client know what interaction is expected
  - Make all critical warnings into backtraces for non-release builds
  - Never obsolete the wrong HSI attribute
  - Never show a HSI index that is impossible
  - Only apply fastboot plugin to modem devices supporting fastboot
  - Only send interactive requests when the sender is alive
  - Remove the now-obsolete Synaptics MST cascade device scanning
  - Replace the Redfish KCS user if required
  - Restrict mediatek-scaler devices on specific hardware only
  - Skip any recovery partitions when detecting ESP</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1704369600">- Update to version 1.9.11:
  + This release adds the following features:
  - Allow exporting 'offline' reports for manual upload
  + This release fixes the following bugs:
  - Add some recovery partition names to ignore for ESP selection
  - Check for CET and SMAP on non-Intel x86 processors too
  - Correctly mark the CPU as supported in the HSI tests
  - Do not fail on probing downstream Synaptics MST ports
  - Do not offer to change BIOS settings that are already set
  - Do not prefer msftdata when choosing the default ESP
  - Do not show spurious device request flags
  - Fix a missing build dependency to fwupdplugin-self-test
  - Fix a segfault when using zlib-ng instead of zlib
  - Fix updating Jabra 410, 510, 710 and 810 devices
  - Match more community-supported branches
  - Remove the Intel SPIBAR proxy support as the mtd module works
  - Show a better error when the ESP is missing
  - Show an error if the post-update version does not match exactly
  - Speed up Synaptics MST device enumeration
  + This release adds support for the following hardware:
  - Algoltek USB devices
  - Luxshare Quad USB4 Dock</changelog>
  <changelog author="dennis.tseng@suse.com" date="1705147200">- Fix build failure on s390x and ppc64le
  + This release modifies spec file
  - add s390x and ppc64le into default 'with efi_fw_update'
    so that old dbxtool version can be obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1706097600">- Update to version 1.9.12:
  + This release adds the following features:
  - Add remote modification support to fwupdtool
  - Add support for more modify-config options
  - Generate HTML pages for all man pages
  + This release fixes the following bugs:
  - Assume the legacy LVFS::UpdateRequestId tag is non-generic
  - Avoid crashing the daemon if not using udisks
  - Correctly mark the CPU as supported
  - Correctly match invalid EFI partitions
  - Do not change the device status until the action has
    completed
  - Do not require systemd for fwupdtool modify-config
  - Enable access to the home interface for snap
  - Fix an assertion when enabling lvfs-testing for the first
    time
  - Fix a possible crash in fwupdtool build-cabinet
  - Handle systems with more than one ccp device
  - Only check AMD CPUs for SHSTK, not IBT
  - Only write the mutable fwupd.conf with the current values
  - Re-evaluate supported every time pci-psp attributes are
    refreshed
  - Show "CET OS support" on AMD systems too
  + This release adds support for the following hardware:
  - AVer CAM340plus
  - AVer VB342 Pro
  - More Algoltek devices</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Update to version 1.9.13:
  + This release adds the following features:
  - Add a timer inhibit if the daemon took a long time to
    startup.
  - Add a concept of 'Test Mode' rather than enabling specific
    plugins.
  - Do not idle-quit the daemon if there is a connected D-Bus
    client.
  + This release fixes the following bugs:
  - Allow plugins to opt-out of the child-device first depsolve.
  - Allow setting multiple flags in LVFS::DeviceFlags.
  - Do not migrate config comments for removed keys.
  - Do not request the Advantech BMC to reboot.
  - Do not warn the user about ESP when using MBR.
  - Fix a critical warning when adding a PixArt wireless device.
  - Fix migration of legacy config files.
  - Only save config values to the mutable config file.
  - Parse DS-20 descriptors earlier in device setup.
  - Store the version format in the history database to fix
    offline reports.
  - Use the correct GUID for matching realtek-mst and
    parade-lspcon.
  + This release adds support for the following hardware:
  - GoodWay Acer Dock.</changelog>
  <changelog author="info@paolostivanin.com" date="1709035200">- Update to version 1.9.14:
  * Correctly detect ARM32 and RISC-V UEFI binaries.
  * Correctly migrate the database schema from very old fwupd versions.
  * Fix DS-20 descriptors by opening the GUsbDevice earlier.
  * Fix updating the fingerprint reader on the Framework 13 and 16 laptop.
  * Fix warning when probing devices using the metadata allowlist.
  * Only recover the version format for specific devices.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710244800">- Update to version 1.9.15:
  + This release adds the following features:
  - Allow loading in parameters for the test device from
    fwupd.conf.
  - Ensure LVFS remotes are changed from .gz to .xz.
  - Store the install duration in the history database.
  + This release fixes the following bugs:
  - Drop OverrideESPMountPoint references in uefi-capsule.
  - Fix a potential double-free when writing AVer firmware.
  - Only request the BOS descriptor when bcdUSB &gt; 0x0200.
  - Use the root device order when sorting device children.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712318400">- dbxtool is built unconditionally on all architectures: move it
  out of the condition in the files section and also
  unconditionally provide/obsolete the old version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712577600">- Update to version 1.9.16:
  + This release adds the following features:
  - Prefer zstd over xz for metadata.
  - Relicense a few remaining plugin files to LGPL-2.1+.
  + This release fixes the following bugs:
  - Correctly record UEFI success if adding ESRT nodes.
  - Defer the DP Aux MST scanning on hotplug to workaround a
    kernel bug.
  - Do not do the post-update version check if the device
    needs-reboot.
  - Fix a fastboot warning when loading device.
  - Fix a possible warning in fwupdmgr when excluding releases.
  - Fix a qsi-dock warning when writing chunks.
  - Ignore attribute-changed to work around a regression in
    macOS.
  - Ignore ZFS zvols when finding the default ESP.
  - Mark Pluton TPMs as part of the main CPU.
  - Put the fwupd-efi verbose debugging in the journal.
  - Recognize zfsbootmenu in ESP detection heuristic.
  + This release adds support for the following hardware:
  - Acer T34 and U33 docks.
  - Qualcomm Series 5 Gen 1 and Gen 2 and Series 3 Gen 1 and
    Gen 2 devices.
  - Several Puya SPI chips.
  - VIA VL822 C0.</changelog>
</package>
<package pkgid="c6f83c846ce16b2fbbb7cd533333c73e4cbfc1fceb5acc15145e48e4db4034e6bca938319a780d305177322c2c1d8023507179ef7818b1d5bbb5eac69501fbab" name="gawk-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.3.0" rel="slfo.1.1_1.8"/>
  <changelog author="andreas.stieger@gmx.de" date="1636891200">- disable racy iolint tests boo#1192521
  add gawk-5.1.1-Disable-racy-test-in-test-iolint.awk.patch</changelog>
  <changelog author="schwab@suse.de" date="1662379200">- Update to gawk 5.2.0
  * Numeric scalars now compare in the same way as C for the relational
    operators. Comparison order for sorting has not changed
  * If the AWK_HASH environment variable is set to "fnv1a" gawk will
    use the FNV1-A hash function for associative arrays
  * There is now a new function, mkbool(), that creates Boolean-typed
    values
  * As BWK awk has supported interval expressions since 2019, they are
    now enabled even if --traditional is supplied
  * The rwarray extension has two new functions, writeall() and readall()
  * The new `gawkbug' script should be used for reporting bugs
  * The manual page (doc/gawk.1) has been considerably reduced in size
  * Gawk now supports Terence Kelly's "persistent malloc" (pma),
    allowing gawk to preserve its variables, arrays and user-defined
    functions between runs
  * Some subtle issues with untyped array elements being passed to
    functions have been fixed
  * Syntax errors are now immediately fatal
- gawk-5.1.1-Disable-racy-test-in-test-iolint.awk.patch: removed
- pma.patch: Handle hole bigger than half the address space
- nan-tests.patch: fix non-portable NaN tests</changelog>
  <changelog author="schwab@suse.de" date="1663070400">- upref.patch: Add missing UPREF</changelog>
  <changelog author="schwab@suse.de" date="1663675200">- double-free.patch: Fix Node_elem_new op, replacing upref.patch
- pma.patch: Replace with upstream solution
- nan-sign.patch: Fix negative NaN issue on RiscV, replacing
  nan-tests.patch</changelog>
  <changelog author="schwab@suse.de" date="1664020800">- double-free.patch: Yet another fix for Node_elem_new</changelog>
  <changelog author="schwab@suse.de" date="1669204800">- Update to gawk 5.2.1
  * Issues related to the sign of NaN and Inf values on RiscV have
    been fixed
  * A few issues with the debugger have been fixed.
  * More subtle issues with untyped array elements being passed to
    functions have been fixed.
  * The rwarray extension's readall() function has had some bugs fixed.
  * The PMA allocator is now supported on FreeBSD, OpenBSD and Linux on
    S/390x.
- double-free.patch, pma.patch, nan-sign.patch: Removed</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683633600">- Update to gawk 5.2.2
  * will now diagnose if a heap file was created with a different
    setting of -M/--bignum than in the current invocation and exit
    with a fatal message if so.
  * no longer "leaks" its free list of NODEs in the heap file,
    resulting in much more efficient usage of persistent storage
  * PROCINFO["pma"] exists if the PMA allocator is compiled into
    gawk. Its value is the PMA version.
  * The time extension is no longer deprecated. The strptime()
    function from gawkextlib's timex extension has been added to
    it.
  * Better information is passed to input parsers for when they
    want to decide whether or not to take control of a file.
  * The various PNG files are now installed for Info and HTML
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683979200">- enable profiling</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699099200">- Update to 5.3.0:
  * Built-in CSV file parsing (--csv)
  * Support a new \u escape sequence for specifying code points in
    multi-byte encodings
  * Pipe output is buffered if PROCINFO["BUFFERPIPE"] exists</changelog>
</package>
<package pkgid="dcba2e46e70cb67760ffb7bf53d5016ad898eb909062ca128127c46d934725d3e4288424b257f800fa8005be97059b52db3d144e3fe2377c84254574f04ca86b" name="gawk-debugsource" arch="aarch64">
  <version epoch="0" ver="5.3.0" rel="slfo.1.1_1.8"/>
  <changelog author="andreas.stieger@gmx.de" date="1636891200">- disable racy iolint tests boo#1192521
  add gawk-5.1.1-Disable-racy-test-in-test-iolint.awk.patch</changelog>
  <changelog author="schwab@suse.de" date="1662379200">- Update to gawk 5.2.0
  * Numeric scalars now compare in the same way as C for the relational
    operators. Comparison order for sorting has not changed
  * If the AWK_HASH environment variable is set to "fnv1a" gawk will
    use the FNV1-A hash function for associative arrays
  * There is now a new function, mkbool(), that creates Boolean-typed
    values
  * As BWK awk has supported interval expressions since 2019, they are
    now enabled even if --traditional is supplied
  * The rwarray extension has two new functions, writeall() and readall()
  * The new `gawkbug' script should be used for reporting bugs
  * The manual page (doc/gawk.1) has been considerably reduced in size
  * Gawk now supports Terence Kelly's "persistent malloc" (pma),
    allowing gawk to preserve its variables, arrays and user-defined
    functions between runs
  * Some subtle issues with untyped array elements being passed to
    functions have been fixed
  * Syntax errors are now immediately fatal
- gawk-5.1.1-Disable-racy-test-in-test-iolint.awk.patch: removed
- pma.patch: Handle hole bigger than half the address space
- nan-tests.patch: fix non-portable NaN tests</changelog>
  <changelog author="schwab@suse.de" date="1663070400">- upref.patch: Add missing UPREF</changelog>
  <changelog author="schwab@suse.de" date="1663675200">- double-free.patch: Fix Node_elem_new op, replacing upref.patch
- pma.patch: Replace with upstream solution
- nan-sign.patch: Fix negative NaN issue on RiscV, replacing
  nan-tests.patch</changelog>
  <changelog author="schwab@suse.de" date="1664020800">- double-free.patch: Yet another fix for Node_elem_new</changelog>
  <changelog author="schwab@suse.de" date="1669204800">- Update to gawk 5.2.1
  * Issues related to the sign of NaN and Inf values on RiscV have
    been fixed
  * A few issues with the debugger have been fixed.
  * More subtle issues with untyped array elements being passed to
    functions have been fixed.
  * The rwarray extension's readall() function has had some bugs fixed.
  * The PMA allocator is now supported on FreeBSD, OpenBSD and Linux on
    S/390x.
- double-free.patch, pma.patch, nan-sign.patch: Removed</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683633600">- Update to gawk 5.2.2
  * will now diagnose if a heap file was created with a different
    setting of -M/--bignum than in the current invocation and exit
    with a fatal message if so.
  * no longer "leaks" its free list of NODEs in the heap file,
    resulting in much more efficient usage of persistent storage
  * PROCINFO["pma"] exists if the PMA allocator is compiled into
    gawk. Its value is the PMA version.
  * The time extension is no longer deprecated. The strptime()
    function from gawkextlib's timex extension has been added to
    it.
  * Better information is passed to input parsers for when they
    want to decide whether or not to take control of a file.
  * The various PNG files are now installed for Info and HTML
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683979200">- enable profiling</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699099200">- Update to 5.3.0:
  * Built-in CSV file parsing (--csv)
  * Support a new \u escape sequence for specifying code points in
    multi-byte encodings
  * Pipe output is buffered if PROCINFO["BUFFERPIPE"] exists</changelog>
</package>
<package pkgid="75aa1b5daa102c29e3552bede507b5bfe1f9946a9420075701093271608a873fd3fa03a22aee8acf7f6db826b9f4259ba0d2eddfcad3e52a34ab36d7ea2884d0" name="gcc14-debugsource" arch="aarch64">
  <version epoch="0" ver="14.3.0+git11799" rel="slfo.1.1_1.1"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="ca6de4ad66ea7f5e90d55bc39d4fd526bc0bc7b2a93653a9b80a91f4625c545ba4c81f3bfbea94bb08ba999fd1a20c3652d20bd58fde15714d9c5ea4c0b64cef" name="gdbm-debugsource" arch="aarch64">
  <version epoch="0" ver="1.23" rel="slfo.1.1_1.3"/>
  <changelog author="astieger@suse.com" date="1534939200">- update to 1.18:
  * Fix directory entry validation
  * Fix improper use of GDBM_DEBUG macro
  * Fix spurious error from gdbm_dump and gdbm_export
  * Make sure gdbm_sync always returns a meaningful value
- includes changes from 1.17:
  * Fix bug in gdbm_dump function, it did not clear the
    GDBM_ITEM_NOT_FOUND error marker, which is set upon its normal
    termination
- changes upstreamed:
  * gdbm_close() and gdbm_sync() now return 0 on success. On error,
    they return -1 and set gdbm_errno and errno to the appropriate
    error codes - drop gdbm-close-and-sync-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1540987200">- update to 1.18.1:
  * Fix debian bug 910911: This restores backward compatibility with
    databases created by version 1.8 (and some later versions, with
    mmapped I/O disabled).</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- added patches
  Build with -no-common, [bsc#1160872]
  + gdbm-no-common.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582372800">- No longer recommend -lang: supplements are in use. Also add a
  explicit %%{name] = %%{version} Provides to aid supplements to do
  the right thing. We will lose the lang package Recommends for the
  compat package, but normally nobody will have only the compat
  package installed without the current package.</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 1.19
  * Pre-read the memory mapped regions on systems that support it.
  This speeds up operations on big databases.
  * gdbmtool: tagged initialization of structured data
  Initializers for structured data can be given in tagged form, e.g.:
    store somekey { status=2, id={a,u,x}, name="foo" }
  * Bugfixes:
  * * Preserve locking type during database reorganization
- modified patches
  % gdbm-no-build-date.patch (refreshed)
- deleted patches
  - gdbm-no-common.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1628510400">- version update to 1.20
  * New bucket cache
    The bucket cache support has been rewritten from scratch.  The new
    bucket cache code provides for significant speed up of search
    operations.
  * Change mmap prereading strategy
    Pre-reading of the memory mapper regions, introduced in version 1.19
    can be advantageous only when doing intensive look-ups on a read-only
    database.  It degrades performance otherwise, especially if doing
    multiple inserts.  Therefore, this version introduces a new flag
    to gdbm_open: GDBM_PREREAD.  When given, it enables pre-reading of
    memory mapped regions.
- modified patches
  % gdbm-no-build-date.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 1.22
  * Fix file header validation
  * Fix key verification in sequential access
  * Fix testing with DejaGNU 1.6.3
  * Fix stack overflow in print_usage
  * Fix a leak of avail entry on pushing a new avail block
  * New gdbmtool variables: errorexit, errormask, trace, timing
  * etc. see CHANGES
- modified patches
  % gdbm-no-build-date.patch (refreshed)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644148800">- update to 1.23:
  * Bucket cache switched from balanced tree to hash table
  * Speed up flushing the changed buckets on disk
  * New option codes for gdbm_setopt
  * Enable or disable automatic cache adjustment
- remove obsolete texinfo packaging macros</changelog>
  <changelog author="danilo.spinella@suse.com" date="1691496000">- Fix bsc#1209583, gdbm_load and gdbm_dump receive a SEGFAULT if
  run without arguments
  bsc1209583.patch</changelog>
  <changelog author="kukuk@suse.com" date="1701864000">- libgdbm_compat4: Fix libgdbm version of Conflicts [bsc#1217727]</changelog>
</package>
<package pkgid="d01b547823bca52c364d976531381fa1b0b42e8763540e04dadbeb26ca6a228dc06ad1e180cef7715f0504f970cc4d577d87ed853579a2c04f750fed08a8e015" name="gdk-pixbuf-debugsource" arch="aarch64">
  <version epoch="0" ver="2.42.12" rel="slfo.1.1_2.1"/>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
</package>
<package pkgid="8ba078ae88b2aaba614e9f43de2f51222ccb3b84bf4c6a3000c64b54268513a17deae6b22bfb9b02c5b007dd3021c0578f5c6daa92b1f432201971b8aa8e3512" name="gdk-pixbuf-loader-rsvg-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.56.3" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 2.55.92:
  + Update to cssparser 0.29.6; this adds support for hwb() color
    syntax, from the CSS Color Module Level 4 spec
    (https://drafts.csswg.org/css-color-4/#changes). Note that
    values inside hwb() are *not* comma-separated, just whitespace.
  + Fix panic when a requested font-size is too big.
  + Validate all clipPath and mask transforms.
  + Add a performance tracking framework. This is part of an
    Outreachy internship.
  + Slight improvements in the size of generated code and memory
    consumption.
  + The Rust crate is now called "rsvg", for consistency with other
    crates that don't usually have a "lib" prefix.
  + The Rust API documentation is now available at
    https://gnome.pages.gitlab.gnome.org/librsvg/doc/rsvg/index.html
- Add minimum harddisk size of 9G for x86_64 to constraints. The
  cargo test uses a lot of disk space.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Pass --skip filter_morphology_from_reference_page_svg to
  cargo_test, filter out new test that fails when building against
  cairo-1.17.8.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054401">- Update to version 2.56.0:
  + Fix crash when XML files get recursively included through
    XInclude.
  + When running the suite of reference tests, you can now use the
    TESTS_OUTPUT_DIR environment variable to specify where results
    for failures get written. See tests/README.md for details.
  + The minimum supported Rust version (MSRV) is 1.64.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681560000">- Use __rustflags macro and drop no longer needed rustflags global.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Update licence tag, there is no longer any Apache licensed code.</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for the various architectures.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685534400">- Update to version 2.56.1:
  + The minimum supported Rust version (MSRV) is 1.65.
    Unfortunately the assert_cmd crate, used in the test suite,
    bumped its MSRV and is forcing us to do the same.
  + Shrink the shared library by telling the linker to omit unused
    code.
  + Updates to dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1686744000">- Use %__default_rustflags instead of the deprecated %__rustflags
  macro. Requires at least cargo-packaging 1.2.0+2 (boo#1212333).</changelog>
  <changelog author="dimstar@opensuse.org" date="1687348800">- Use %build_rustflags instead of the deprecated
  %__default_rustflags macro. Requires at least cargo-packaging
  1.2.0+3 (boo#1212333).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689940800">- Update to version 2.56.3:
  + This is a security release for bug glgo#GNOME/librsvg#996.
  - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has
    special characters.
  - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being
    referenced from use elements.</changelog>
</package>
<package pkgid="7ac9c51fb15c0f5ae950af0d93f34301d90e61fb32af769efc0516b0436b29b47bb32d50cdafe12fa5644682365c2b6daea098a49affb736ca2930cdd59aac6b" name="gdk-pixbuf-query-loaders-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.12" rel="slfo.1.1_2.1"/>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
</package>
<package pkgid="51350a7754104f89263cae6cf314bb8c1ba43198591c9a0f05fb58bb77ba0945259013232ca03490b87f88f13ebc255910e77ac891fa52ed6057ed1f36912e08" name="gettext-runtime-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.21.1" rel="slfo.1.1_2.1"/>
  <changelog author="christian.voegl@suse.com" date="1594123200">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1595937600">- Update to 0.21:
  * Programming languages support:
  - Shell:
    o xgettext now recognizes and ignores 'env' invocations and environment
    variable assignments in front of commands.
  - Java:
    o xgettext now recognizes format strings in the Formatter syntax.  They
    are marked as 'java-printf-format' in POT and PO files.
    o xgettext now recognizes text blocks as string literals.
  - JavaScript:
    xgettext parses JSX expressions more reliably.
  - Ruby:
    o xgettext now supports Ruby.
    o 'msgfmt -c' now verifies the syntax of translations of Ruby format
    strings.
  * Improvements for translators:
  - When msgfmt writes a MO file, it now does so in such a way that processes
    that are currently using an older copy of the MO file will not crash.
  * Libtextstyle:
  - Added support for emitting hyperlinks.
  - New API for doing formatted output.
  - The example programs support the NO_COLOR environment variable.</changelog>
  <changelog author="mcalabkova@suse.com" date="1596801600">- Add multiple new features (bsc#1165138)
- Add patches:
  * 0001-msgcat-Add-feature-to-use-the-newest-po-file.patch
  * 0002-msgcat-Merge-headers-when-use-first.patch
- Reintroduce autoreconf call</changelog>
  <changelog author="dmueller@suse.com" date="1611316800">- fixup libtextstyle autofoo with adding
  use-acinit-for-libtextstyle.patch</changelog>
  <changelog author="mgorse@suse.com" date="1638187200">- Remove libcroco from BuildRequires: it is now bundled internally.</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Added patch:
  * gettext-0.21-jdk17.patch
    + Build with java source and target levels 1.8
    + Allows building with JDK17
    + Fixes build in Factory</changelog>
  <changelog author="coolo@suse.com" date="1665835200">- Update to Version 0.21.1
  * Runtime behaviour:
  - On AIX, locale names with a script or with an uppercase language are now
    supported.
    For example, sr_Cyrl_RS.UTF-8 is treated like sr_RS.UTF-8@cyrillic, and
    EN_US.UTF-8 is treated like en_US.UTF-8.
  * The base Unicode standard is now updated to 14.0.0.
  * Portability:
  - Building on macOS 11/arm64 is now supported.
  - Building on Linux/powerpc64le with glibc ≥ 2.35 is now supported.</changelog>
  <changelog author="dmueller@suse.com" date="1666612800">- update keyring for the last version update</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="sbrabec@suse.com" date="1740571200">- Fix crash while handling po files with malformed header and
  process them properly
  (0003-Fix-malformed-header-processing.patch, boo#1227316).</changelog>
</package>
<package pkgid="9b31ab18c0eb377c4b5445878b94b62021b6e818d44b0be5e87de133c44956221c7a244bde00a2ba69db2260da6af1a19133dc9c857540d9aec7ee65136918c0" name="gettext-runtime-debugsource" arch="aarch64">
  <version epoch="0" ver="0.21.1" rel="slfo.1.1_2.1"/>
  <changelog author="christian.voegl@suse.com" date="1594123200">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1595937600">- Update to 0.21:
  * Programming languages support:
  - Shell:
    o xgettext now recognizes and ignores 'env' invocations and environment
    variable assignments in front of commands.
  - Java:
    o xgettext now recognizes format strings in the Formatter syntax.  They
    are marked as 'java-printf-format' in POT and PO files.
    o xgettext now recognizes text blocks as string literals.
  - JavaScript:
    xgettext parses JSX expressions more reliably.
  - Ruby:
    o xgettext now supports Ruby.
    o 'msgfmt -c' now verifies the syntax of translations of Ruby format
    strings.
  * Improvements for translators:
  - When msgfmt writes a MO file, it now does so in such a way that processes
    that are currently using an older copy of the MO file will not crash.
  * Libtextstyle:
  - Added support for emitting hyperlinks.
  - New API for doing formatted output.
  - The example programs support the NO_COLOR environment variable.</changelog>
  <changelog author="mcalabkova@suse.com" date="1596801600">- Add multiple new features (bsc#1165138)
- Add patches:
  * 0001-msgcat-Add-feature-to-use-the-newest-po-file.patch
  * 0002-msgcat-Merge-headers-when-use-first.patch
- Reintroduce autoreconf call</changelog>
  <changelog author="dmueller@suse.com" date="1611316800">- fixup libtextstyle autofoo with adding
  use-acinit-for-libtextstyle.patch</changelog>
  <changelog author="mgorse@suse.com" date="1638187200">- Remove libcroco from BuildRequires: it is now bundled internally.</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Added patch:
  * gettext-0.21-jdk17.patch
    + Build with java source and target levels 1.8
    + Allows building with JDK17
    + Fixes build in Factory</changelog>
  <changelog author="coolo@suse.com" date="1665835200">- Update to Version 0.21.1
  * Runtime behaviour:
  - On AIX, locale names with a script or with an uppercase language are now
    supported.
    For example, sr_Cyrl_RS.UTF-8 is treated like sr_RS.UTF-8@cyrillic, and
    EN_US.UTF-8 is treated like en_US.UTF-8.
  * The base Unicode standard is now updated to 14.0.0.
  * Portability:
  - Building on macOS 11/arm64 is now supported.
  - Building on Linux/powerpc64le with glibc ≥ 2.35 is now supported.</changelog>
  <changelog author="dmueller@suse.com" date="1666612800">- update keyring for the last version update</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="sbrabec@suse.com" date="1740571200">- Fix crash while handling po files with malformed header and
  process them properly
  (0003-Fix-malformed-header-processing.patch, boo#1227316).</changelog>
</package>
<package pkgid="be139257d3d40bd4ad0a626739d8b73bb2155dc5f9379cd75342e6ca47692a7bb9cf0bfd860c53edda32648d92f0a88c6fee664065074c72dc99fbc9775b9dcb" name="git-core-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.51.0" rel="slfo.1.1_1.1"/>
  <changelog author="mrueckert@suse.de" date="1741953600">- update to 2.49.0
  https://about.gitlab.com/blog/2025/03/14/whats-new-in-git-2-49-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.49.0/Documentation/RelNotes/2.49.0.adoc
- switch to zlib-ng for code 16
- docs switched to asciidoc</changelog>
  <changelog author="tiwai@suse.com" date="1742817600">- Add support of SHA256 git repo for gitk (bsc#1239989):
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="tiwai@suse.com" date="1749816000">- Refresh gitk SHA256 patch and add SHA256 support to git-gui (bsc#1239989):
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
  The previous patches are dropped:
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1750161600">- update to 2.50.0
  https://about.gitlab.com/blog/what-s-new-in-git-2-50-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.50.0/Documentation/RelNotes/2.50.0.adoc</changelog>
  <changelog author="tiwai@suse.com" date="1750939200">- Fix git-gui citool SHA256 repo handling:
  refreshed 0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1752062400">- update to 2.50.1 (boo#1245938 boo#1245939 boo#1245942 boo#1245943
  boo#1245946 boo#1245947)
  Security fixes for CVE-2025-27613, CVE-2025-27614,
  CVE-2025-46334, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385,
  and CVE-2025-48386
  CVE-2025-27613, Gitk:
  When a user clones an untrusted repository and runs Gitk without
  additional command arguments, any writable file can be created and
  truncated. The option "Support per-file encoding" must have been
  enabled. The operation "Show origin of this line" is affected as
  well, regardless of the option being enabled or not.
  CVE-2025-27614, Gitk:
  A Git repository can be crafted in such a way that a user who has
  cloned the repository can be tricked into running any script
  supplied by the attacker by invoking `gitk filename`, where
  `filename` has a particular structure.
  CVE-2025-46334, Git GUI (Windows only):
  A malicious repository can ship versions of sh.exe or typical
  textconv filter programs such as astextplain. On Windows, path
  lookup can find such executables in the worktree. These programs
  are invoked when the user selects "Git Bash" or "Browse Files" from
  the menu.
  CVE-2025-46835, Git GUI:
  When a user clones an untrusted repository and is tricked into
  editing a file located in a maliciously named directory in the
  repository, then Git GUI can create and overwrite any writable
  file.
  CVE-2025-48384, Git:
  When reading a config value, Git strips any trailing carriage
  return and line feed (CRLF). When writing a config entry, values
  with a trailing CR are not quoted, causing the CR to be lost when
  the config is later read.  When initializing a submodule, if the
  submodule path contains a trailing CR, the altered path is read
  resulting in the submodule being checked out to an incorrect
  location. If a symlink exists that points the altered path to the
  submodule hooks directory, and the submodule contains an executable
  post-checkout hook, the script may be unintentionally executed
  after checkout.
  CVE-2025-48385, Git:
  When cloning a repository Git knows to optionally fetch a bundle
  advertised by the remote server, which allows the server-side to
  offload parts of the clone to a CDN. The Git client does not
  perform sufficient validation of the advertised bundles, which
  allows the remote side to perform protocol injection.
  This protocol injection can cause the client to write the fetched
  bundle to a location controlled by the adversary. The fetched
  content is fully controlled by the server, which can in the worst
  case lead to arbitrary code execution.
  CVE-2025-48386, Git:
  The wincred credential helper uses a static buffer (`target`) as a
  unique key for storing and comparing against internal storage. This
  credential helper does not properly bounds check the available
  space remaining in the buffer before appending to it with
  `wcsncat()`, leading to potential buffer overflows.</changelog>
  <changelog author="mrueckert@suse.de" date="1752062401">- refreshed gitk sha256 patches:
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="tiwai@suse.com" date="1752580800">- update git-gui sha256 patches after the upstream review:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- Update to 2.51.0
  - UI, Workflows &amp; Features
  - Userdiff patterns for the R language have been added.
  - Documentation for "git send-email" has been updated with a
    bit more credential helper and OAuth information.
  - "git cat-file --batch" learns to understand %(objectmode)
    atom to allow the caller to tell missing objects (due to
    repository corruption) and submodules (whose commit objects
    are OK to be missing) apart.
  - "git diff --no-index dirA dirB" can limit the comparison with
    pathspec at the end of the command line, just like normal
    "git diff".
  - "git subtree" (in contrib/) learned to grok GPG signing its
    commits.
  - "git whatchanged" that is longer to type than "git log --raw"
    which is its modern rough equivalent has outlived its
    usefulness more than 10 years ago.  Plan to deprecate and
    remove it.
  - An interchange format for stash entries is defined, and
    subcommand of "git stash" to import/export has been added.
  - "git merge/pull" has been taught the "--compact-summary"
    option to use the compact-summary format, intead of diffstat,
    when showing the summary of the incoming changes.
  - "git imap-send" has been broken for a long time, which has
    been resurrected and then taught to talk OAuth2.0 etc.
  - Some error messages from "git imap-send" has been updated.
  - When "git daemon" sees a signal while attempting to accept()
    a new client, instead of retrying, it skipped it by mistake,
    which has been corrected.
  - The reftable ref backend has matured enough; Git 3.0 will
    make it the default format in a newly created repositories by
    default.
  - "netrc" credential helper has been improved to understand
    textual service names (like smtp) in addition to the numeric
    port numbers (like 25).
  - Lift the limitation to use changed-path filter in "git log"
    so that it can be used for a pathspec with multiple literal
    paths.
  - Clean up the way how signature on commit objects are exported
    to and imported from fast-import stream.
  - Remove unsupported, unused, and unsupportable old option from
    "git log".
  - Document recently added "git imap-send --list" with an
    example.
  - "git pull" learned to pay attention to pull.autostash
    configuration variable, which overrides
    rebase/merge.autostash.
  - "git for-each-ref" learns "--start-after" option to help
    applications that want to page its output.
  - "git switch" and "git restore" are declared to be no longer
    experimental.
  - "git -c alias.foo=bar foo -h baz" reported "'foo' is aliased
    to 'bar'" and then went on to run "git foo -h baz", which was
    unexpected.  Tighten the rule so that alias expansion is
    reported only when "-h" is the sole option.
  - Performance, Internal Implementation, Development Support etc.
  - "git pack-objects" learned to find delta bases from blobs at
    the same path, using the --path-walk API.
  - CodingGuidelines update.
  - Add settings for Solaris 10 &amp; 11.
  - Meson-based build/test framework now understands TAP output
    generated by our tests.
  - "Do not explicitly initialize to zero" rule has been
    clarified in the CodingGuidelines document.
  - A test helper "test_seq" function learned the "-f &lt;fmt&gt;"
    option, which allowed us to simplify a lot of test scripts.
  - A lot of stale stuff has been removed from the contrib/
    hierarchy.
  - "git push" and "git fetch" are taught to update refs in
    batches to gain performance.
  - Some code paths in "git prune" used to ignore the passed-in
    repository object and used the `the_repository` singleton
    instance instead, which has been corrected.
  - Update ".clang-format" and ".editorconfig" to match our style
    guide a bit better.
  - "make coccicheck" succeeds even when spatch made suggestions,
    which has been updated to fail in such a case.
  - Code clean-up around object access API.
  - Define .precision to more canned parse-options type to avoid
    bugs coming from using a variable with a wrong type to
    capture the parsed values.
  - Flipping the default hash function to SHA-256 at Git 3.0
    boundary is planned.
  - Declare weather-balloon we raised for "bool" type 18 months
    ago a success and officially allow using the type in our
    codebase.
  - GIT_TEST_INSTALLED was not honored in the recent topic
    related to SHA256 hashes, which has been corrected.
  - The pop_most_recent_commit() function can have quite
    expensive worst case performance characteristics, which has
    been optimized by using prio-queue data structure.
  - Move structure definition from unrelated header file to where
    it belongs.
  - To help our developers, document what C99 language features
    are being considered for adoption, in addition to what past
    experiments have already decided.
  - The reftable unit tests are now ported to the "clar" unit
    testing framework.
  - Redefine where the multi-pack-index sits in the object
    subsystem, which recently was restructured to allow multiple
    backends that support a single object source that belongs to
    one repository.  A MIDX does span multiple "object sources".
  - Reduce implicit assumption and dependence on the_repository
    in the object-file subsystem.
  - Fixes since v2.50 Unless otherwise noted, all the changes in
    2.50.X maintenance track, including security updates, are
    included in this release.
  - A memory-leak in an error code path has been plugged. (merge
    7082da85cb ly/commit-graph-graph-write-leakfix later to
    maint).
  - A memory-leak in an error code path has been plugged. (merge
    aedebdb6b9 ly/fetch-pack-leakfix later to maint).
  - Some leftover references to documentation source files that
    no longer exist, due to recent ".txt" -&gt; ".adoc" renaming,
    have been corrected. (merge 3717a5775a
    jw/doc-txt-to-adoc-refs later to maint).
  - "git stash -p &lt;pathspec&gt;" improvements. (merge 468817bab2
    pw/stash-p-pathspec-fixes later to maint).
  - "git send-email" incremented its internal message counter
    when a message was edited, which made logic that treats the
    first message specially misbehave, which has been corrected.
    (merge 2cc27b3501 ag/send-email-edit-threading-fix later to
    maint).
  - "git stash" recorded a wrong branch name when submodules are
    present in the current checkout, which has been corrected.
    (merge ffb36c64f2 kj/stash-onbranch-submodule-fix later to
    maint).
  - When asking to apply mailmap to both author and committer
    field while showing a commit object, the field that appears
    later was not correctly parsed and replaced, which has been
    corrected. (merge abf94a283f sa/multi-mailmap-fix later to
    maint).
  - "git maintenance" lacked the care "git gc" had to avoid
    holding onto the repository lock for too long during packing
    refs, which has been remedied. (merge 1b5074e614
    ps/maintenance-ref-lock later to maint).
  - Avoid regexp_constraint and instead use comparison_constraint
    when listing functions to exclude from application of
    coccinelle rules, as spatch can be built with different
    regexp engine X-&lt;. (merge f2ad545813
    jc/cocci-avoid-regexp-constraint later to maint).
  - Updating submodules from the upstream did not work well when
    submodule's HEAD is detached, which has been improved. (merge
    ca62f524c1 jk/submodule-remote-lookup-cleanup later to
    maint).
  - Remove unnecessary check from "git daemon" code. (merge
    0c856224d2 cb/daemon-fd-check-fix later to maint).
  - Use of sysctl() system call to learn the total RAM size used
    on BSDs has been corrected. (merge 781c1cf571
    cb/total-ram-bsd-fix later to maint).
  - Drop FreeBSD 4 support and declare that we support only
    FreeBSD 12 or later, which has memmem() supported. (merge
    0392f976a7 bs/config-mak-freebsd later to maint).
  - A diff-filter with negative-only specification like "git log
  - -diff-filter=d" did not trigger correctly, which has been
    fixed. (merge 375ac087c5 jk/all-negative-diff-filter-fix
    later to maint).
  - A failure to open the index file for writing due to
    conflicting access did not state what went wrong, which has
    been corrected. (merge 9455397a5c
    hy/read-cache-lock-error-fix later to maint).
  - Tempfile removal fix in the codepath to sign commits with SSH
    keys. (merge 4498127b04 re/ssh-sign-buffer-fix later to
    maint).
  - Code and test clean-up around string-list API. (merge
    6e5b26c3ff sj/string-list later to maint).
  - "git apply -N" should start from the current index and
    register only new files, but it instead started from an empty
    index, which has been corrected. (merge 2b49d97fcb
    rp/apply-intent-to-add-fix later to maint).
  - Leakfix with a new and a bit invasive test on pack-bitmap
    files. (merge bfd5522e98 ly/load-bitmap-leakfix later to
    maint).
  - "git fetch --prune" used to be O(n^2) expensive when there
    are many refs, which has been corrected. (merge 87d8d8c5d0
    ph/fetch-prune-optim later to maint).
  - When a ref creation at refs/heads/foo/bar fails, the files
    backend now removes refs/heads/foo/ if the directory is
    otherwise not used. (merge a3a7f20516
    ps/refs-files-remove-empty-parent later to maint).
  - "pack-objects" has been taught to avoid pointing into objects
    in cruft packs from midx.
  - "git remote" now detects remote names that overlap with each
    other (e.g., remote nickname "outer" and "outer/inner" are
    used at the same time), as it will lead to overlapping
    remote-tracking branches. (merge a5a727c448
    jk/remote-avoid-overlapping-names later to maint).
  - The gpg.program configuration variable, which names a
    pathname to the (custom) GPG compatible program, can now be
    spelled with ~tilde expansion. (merge 7d275cd5c0
    jb/gpg-program-variable-is-a-pathname later to maint).
  - Our &lt;sane-ctype.h&gt; header file relied on that the
    system-supplied &lt;ctype.h&gt; header is not later included, which
    would override our macro definitions, but "amazon linux"
    broke this assumption.  Fix this by preemptively including
    &lt;ctype.h&gt; near the beginning of &lt;sane-ctype.h&gt; ourselves.
    (merge 9d3b33125f ps/sane-ctype-workaround later to maint).
  - Clean-up compat/bswap.h mess. (merge f4ac32c03a
    ss/compat-bswap-revamp later to maint).
  - Meson-based build did not handle libexecdir setting
    correctly, which has been corrected. (merge 056dbe8612
    rj/meson-libexecdir-fix later to maint).
  - Document that we do not require "real" name when signing your
    patches off. (merge 1f0fed312a
    bc/contribution-under-non-real-names later to maint).
  - "git commit" that concludes a conflicted merge failed to
    notice and remove existing comment added automatically (like
    "# Conflicts:") when the core.commentstring is set to 'auto'.
    (merge 92b7c7c9f5 ac/auto-comment-char-fix later to maint).
  - "git rebase -i" with bogus rebase.instructionFormat
    configuration failed to produce the todo file after recording
    the state files, leading to confused "git status"; this has
    been corrected. (merge ade14bffd7
    ow/rebase-verify-insn-fmt-before-initializing-state later to
    maint).
  - A few file descriptors left unclosed upon program completion
    in a few test helper programs are now closed. (merge
    0f1b33815b hl/test-helper-fd-close later to maint).
  - Interactive prompt code did not correctly strip CRLF from the
    end of line on Windows. (merge 711a20827b js/prompt-crlf-fix
    later to maint).
  - The config API had a set of convenience wrapper functions
    that implicitly use the_repository instance; they have been
    removed and inlined at the calling sites.
  - "git add/etc -p" now honor the diff.context configuration
    variable, and also they learn to honor the -U&lt;n&gt; command-line
    option. (merge 2b3ae04011 lm/add-p-context later to maint).
  - The case where a new submodule takes a path where there used
    to be a completely different subproject is now dealt with a
    bit better than before. (merge 5ed8c5b465
    kj/renamed-submodule later to maint).
  - The deflate codepath in "git archive --format=zip" had a
    longstanding bug coming from misuse of zlib API, which has
    been corrected.
- drop patches included in update:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
- refreshed patches:
  CVE-2024-24577.patch
  completion-wordbreaks.diff
  git-tcsh-completion-fixes.diff
  setup-don-t-fail-if-commondir-reference-is-deleted.patch
- contrib/workdir is dropped. remove references for it.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1755691200">- Use zlib instead of zlib-ng for SLES16</changelog>
</package>
<package pkgid="4d1c50c26408b7b067bc4bb3dce41829999a6a9891681301e4a1e09e0de3b00d56a8fa881dfc91f3941f68d000b79fb559eeb5876de48f1b8781f248734e3f79" name="git-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.51.0" rel="slfo.1.1_1.1"/>
  <changelog author="mrueckert@suse.de" date="1741953600">- update to 2.49.0
  https://about.gitlab.com/blog/2025/03/14/whats-new-in-git-2-49-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.49.0/Documentation/RelNotes/2.49.0.adoc
- switch to zlib-ng for code 16
- docs switched to asciidoc</changelog>
  <changelog author="tiwai@suse.com" date="1742817600">- Add support of SHA256 git repo for gitk (bsc#1239989):
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="tiwai@suse.com" date="1749816000">- Refresh gitk SHA256 patch and add SHA256 support to git-gui (bsc#1239989):
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
  The previous patches are dropped:
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1750161600">- update to 2.50.0
  https://about.gitlab.com/blog/what-s-new-in-git-2-50-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.50.0/Documentation/RelNotes/2.50.0.adoc</changelog>
  <changelog author="tiwai@suse.com" date="1750939200">- Fix git-gui citool SHA256 repo handling:
  refreshed 0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1752062400">- update to 2.50.1 (boo#1245938 boo#1245939 boo#1245942 boo#1245943
  boo#1245946 boo#1245947)
  Security fixes for CVE-2025-27613, CVE-2025-27614,
  CVE-2025-46334, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385,
  and CVE-2025-48386
  CVE-2025-27613, Gitk:
  When a user clones an untrusted repository and runs Gitk without
  additional command arguments, any writable file can be created and
  truncated. The option "Support per-file encoding" must have been
  enabled. The operation "Show origin of this line" is affected as
  well, regardless of the option being enabled or not.
  CVE-2025-27614, Gitk:
  A Git repository can be crafted in such a way that a user who has
  cloned the repository can be tricked into running any script
  supplied by the attacker by invoking `gitk filename`, where
  `filename` has a particular structure.
  CVE-2025-46334, Git GUI (Windows only):
  A malicious repository can ship versions of sh.exe or typical
  textconv filter programs such as astextplain. On Windows, path
  lookup can find such executables in the worktree. These programs
  are invoked when the user selects "Git Bash" or "Browse Files" from
  the menu.
  CVE-2025-46835, Git GUI:
  When a user clones an untrusted repository and is tricked into
  editing a file located in a maliciously named directory in the
  repository, then Git GUI can create and overwrite any writable
  file.
  CVE-2025-48384, Git:
  When reading a config value, Git strips any trailing carriage
  return and line feed (CRLF). When writing a config entry, values
  with a trailing CR are not quoted, causing the CR to be lost when
  the config is later read.  When initializing a submodule, if the
  submodule path contains a trailing CR, the altered path is read
  resulting in the submodule being checked out to an incorrect
  location. If a symlink exists that points the altered path to the
  submodule hooks directory, and the submodule contains an executable
  post-checkout hook, the script may be unintentionally executed
  after checkout.
  CVE-2025-48385, Git:
  When cloning a repository Git knows to optionally fetch a bundle
  advertised by the remote server, which allows the server-side to
  offload parts of the clone to a CDN. The Git client does not
  perform sufficient validation of the advertised bundles, which
  allows the remote side to perform protocol injection.
  This protocol injection can cause the client to write the fetched
  bundle to a location controlled by the adversary. The fetched
  content is fully controlled by the server, which can in the worst
  case lead to arbitrary code execution.
  CVE-2025-48386, Git:
  The wincred credential helper uses a static buffer (`target`) as a
  unique key for storing and comparing against internal storage. This
  credential helper does not properly bounds check the available
  space remaining in the buffer before appending to it with
  `wcsncat()`, leading to potential buffer overflows.</changelog>
  <changelog author="mrueckert@suse.de" date="1752062401">- refreshed gitk sha256 patches:
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="tiwai@suse.com" date="1752580800">- update git-gui sha256 patches after the upstream review:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- Update to 2.51.0
  - UI, Workflows &amp; Features
  - Userdiff patterns for the R language have been added.
  - Documentation for "git send-email" has been updated with a
    bit more credential helper and OAuth information.
  - "git cat-file --batch" learns to understand %(objectmode)
    atom to allow the caller to tell missing objects (due to
    repository corruption) and submodules (whose commit objects
    are OK to be missing) apart.
  - "git diff --no-index dirA dirB" can limit the comparison with
    pathspec at the end of the command line, just like normal
    "git diff".
  - "git subtree" (in contrib/) learned to grok GPG signing its
    commits.
  - "git whatchanged" that is longer to type than "git log --raw"
    which is its modern rough equivalent has outlived its
    usefulness more than 10 years ago.  Plan to deprecate and
    remove it.
  - An interchange format for stash entries is defined, and
    subcommand of "git stash" to import/export has been added.
  - "git merge/pull" has been taught the "--compact-summary"
    option to use the compact-summary format, intead of diffstat,
    when showing the summary of the incoming changes.
  - "git imap-send" has been broken for a long time, which has
    been resurrected and then taught to talk OAuth2.0 etc.
  - Some error messages from "git imap-send" has been updated.
  - When "git daemon" sees a signal while attempting to accept()
    a new client, instead of retrying, it skipped it by mistake,
    which has been corrected.
  - The reftable ref backend has matured enough; Git 3.0 will
    make it the default format in a newly created repositories by
    default.
  - "netrc" credential helper has been improved to understand
    textual service names (like smtp) in addition to the numeric
    port numbers (like 25).
  - Lift the limitation to use changed-path filter in "git log"
    so that it can be used for a pathspec with multiple literal
    paths.
  - Clean up the way how signature on commit objects are exported
    to and imported from fast-import stream.
  - Remove unsupported, unused, and unsupportable old option from
    "git log".
  - Document recently added "git imap-send --list" with an
    example.
  - "git pull" learned to pay attention to pull.autostash
    configuration variable, which overrides
    rebase/merge.autostash.
  - "git for-each-ref" learns "--start-after" option to help
    applications that want to page its output.
  - "git switch" and "git restore" are declared to be no longer
    experimental.
  - "git -c alias.foo=bar foo -h baz" reported "'foo' is aliased
    to 'bar'" and then went on to run "git foo -h baz", which was
    unexpected.  Tighten the rule so that alias expansion is
    reported only when "-h" is the sole option.
  - Performance, Internal Implementation, Development Support etc.
  - "git pack-objects" learned to find delta bases from blobs at
    the same path, using the --path-walk API.
  - CodingGuidelines update.
  - Add settings for Solaris 10 &amp; 11.
  - Meson-based build/test framework now understands TAP output
    generated by our tests.
  - "Do not explicitly initialize to zero" rule has been
    clarified in the CodingGuidelines document.
  - A test helper "test_seq" function learned the "-f &lt;fmt&gt;"
    option, which allowed us to simplify a lot of test scripts.
  - A lot of stale stuff has been removed from the contrib/
    hierarchy.
  - "git push" and "git fetch" are taught to update refs in
    batches to gain performance.
  - Some code paths in "git prune" used to ignore the passed-in
    repository object and used the `the_repository` singleton
    instance instead, which has been corrected.
  - Update ".clang-format" and ".editorconfig" to match our style
    guide a bit better.
  - "make coccicheck" succeeds even when spatch made suggestions,
    which has been updated to fail in such a case.
  - Code clean-up around object access API.
  - Define .precision to more canned parse-options type to avoid
    bugs coming from using a variable with a wrong type to
    capture the parsed values.
  - Flipping the default hash function to SHA-256 at Git 3.0
    boundary is planned.
  - Declare weather-balloon we raised for "bool" type 18 months
    ago a success and officially allow using the type in our
    codebase.
  - GIT_TEST_INSTALLED was not honored in the recent topic
    related to SHA256 hashes, which has been corrected.
  - The pop_most_recent_commit() function can have quite
    expensive worst case performance characteristics, which has
    been optimized by using prio-queue data structure.
  - Move structure definition from unrelated header file to where
    it belongs.
  - To help our developers, document what C99 language features
    are being considered for adoption, in addition to what past
    experiments have already decided.
  - The reftable unit tests are now ported to the "clar" unit
    testing framework.
  - Redefine where the multi-pack-index sits in the object
    subsystem, which recently was restructured to allow multiple
    backends that support a single object source that belongs to
    one repository.  A MIDX does span multiple "object sources".
  - Reduce implicit assumption and dependence on the_repository
    in the object-file subsystem.
  - Fixes since v2.50 Unless otherwise noted, all the changes in
    2.50.X maintenance track, including security updates, are
    included in this release.
  - A memory-leak in an error code path has been plugged. (merge
    7082da85cb ly/commit-graph-graph-write-leakfix later to
    maint).
  - A memory-leak in an error code path has been plugged. (merge
    aedebdb6b9 ly/fetch-pack-leakfix later to maint).
  - Some leftover references to documentation source files that
    no longer exist, due to recent ".txt" -&gt; ".adoc" renaming,
    have been corrected. (merge 3717a5775a
    jw/doc-txt-to-adoc-refs later to maint).
  - "git stash -p &lt;pathspec&gt;" improvements. (merge 468817bab2
    pw/stash-p-pathspec-fixes later to maint).
  - "git send-email" incremented its internal message counter
    when a message was edited, which made logic that treats the
    first message specially misbehave, which has been corrected.
    (merge 2cc27b3501 ag/send-email-edit-threading-fix later to
    maint).
  - "git stash" recorded a wrong branch name when submodules are
    present in the current checkout, which has been corrected.
    (merge ffb36c64f2 kj/stash-onbranch-submodule-fix later to
    maint).
  - When asking to apply mailmap to both author and committer
    field while showing a commit object, the field that appears
    later was not correctly parsed and replaced, which has been
    corrected. (merge abf94a283f sa/multi-mailmap-fix later to
    maint).
  - "git maintenance" lacked the care "git gc" had to avoid
    holding onto the repository lock for too long during packing
    refs, which has been remedied. (merge 1b5074e614
    ps/maintenance-ref-lock later to maint).
  - Avoid regexp_constraint and instead use comparison_constraint
    when listing functions to exclude from application of
    coccinelle rules, as spatch can be built with different
    regexp engine X-&lt;. (merge f2ad545813
    jc/cocci-avoid-regexp-constraint later to maint).
  - Updating submodules from the upstream did not work well when
    submodule's HEAD is detached, which has been improved. (merge
    ca62f524c1 jk/submodule-remote-lookup-cleanup later to
    maint).
  - Remove unnecessary check from "git daemon" code. (merge
    0c856224d2 cb/daemon-fd-check-fix later to maint).
  - Use of sysctl() system call to learn the total RAM size used
    on BSDs has been corrected. (merge 781c1cf571
    cb/total-ram-bsd-fix later to maint).
  - Drop FreeBSD 4 support and declare that we support only
    FreeBSD 12 or later, which has memmem() supported. (merge
    0392f976a7 bs/config-mak-freebsd later to maint).
  - A diff-filter with negative-only specification like "git log
  - -diff-filter=d" did not trigger correctly, which has been
    fixed. (merge 375ac087c5 jk/all-negative-diff-filter-fix
    later to maint).
  - A failure to open the index file for writing due to
    conflicting access did not state what went wrong, which has
    been corrected. (merge 9455397a5c
    hy/read-cache-lock-error-fix later to maint).
  - Tempfile removal fix in the codepath to sign commits with SSH
    keys. (merge 4498127b04 re/ssh-sign-buffer-fix later to
    maint).
  - Code and test clean-up around string-list API. (merge
    6e5b26c3ff sj/string-list later to maint).
  - "git apply -N" should start from the current index and
    register only new files, but it instead started from an empty
    index, which has been corrected. (merge 2b49d97fcb
    rp/apply-intent-to-add-fix later to maint).
  - Leakfix with a new and a bit invasive test on pack-bitmap
    files. (merge bfd5522e98 ly/load-bitmap-leakfix later to
    maint).
  - "git fetch --prune" used to be O(n^2) expensive when there
    are many refs, which has been corrected. (merge 87d8d8c5d0
    ph/fetch-prune-optim later to maint).
  - When a ref creation at refs/heads/foo/bar fails, the files
    backend now removes refs/heads/foo/ if the directory is
    otherwise not used. (merge a3a7f20516
    ps/refs-files-remove-empty-parent later to maint).
  - "pack-objects" has been taught to avoid pointing into objects
    in cruft packs from midx.
  - "git remote" now detects remote names that overlap with each
    other (e.g., remote nickname "outer" and "outer/inner" are
    used at the same time), as it will lead to overlapping
    remote-tracking branches. (merge a5a727c448
    jk/remote-avoid-overlapping-names later to maint).
  - The gpg.program configuration variable, which names a
    pathname to the (custom) GPG compatible program, can now be
    spelled with ~tilde expansion. (merge 7d275cd5c0
    jb/gpg-program-variable-is-a-pathname later to maint).
  - Our &lt;sane-ctype.h&gt; header file relied on that the
    system-supplied &lt;ctype.h&gt; header is not later included, which
    would override our macro definitions, but "amazon linux"
    broke this assumption.  Fix this by preemptively including
    &lt;ctype.h&gt; near the beginning of &lt;sane-ctype.h&gt; ourselves.
    (merge 9d3b33125f ps/sane-ctype-workaround later to maint).
  - Clean-up compat/bswap.h mess. (merge f4ac32c03a
    ss/compat-bswap-revamp later to maint).
  - Meson-based build did not handle libexecdir setting
    correctly, which has been corrected. (merge 056dbe8612
    rj/meson-libexecdir-fix later to maint).
  - Document that we do not require "real" name when signing your
    patches off. (merge 1f0fed312a
    bc/contribution-under-non-real-names later to maint).
  - "git commit" that concludes a conflicted merge failed to
    notice and remove existing comment added automatically (like
    "# Conflicts:") when the core.commentstring is set to 'auto'.
    (merge 92b7c7c9f5 ac/auto-comment-char-fix later to maint).
  - "git rebase -i" with bogus rebase.instructionFormat
    configuration failed to produce the todo file after recording
    the state files, leading to confused "git status"; this has
    been corrected. (merge ade14bffd7
    ow/rebase-verify-insn-fmt-before-initializing-state later to
    maint).
  - A few file descriptors left unclosed upon program completion
    in a few test helper programs are now closed. (merge
    0f1b33815b hl/test-helper-fd-close later to maint).
  - Interactive prompt code did not correctly strip CRLF from the
    end of line on Windows. (merge 711a20827b js/prompt-crlf-fix
    later to maint).
  - The config API had a set of convenience wrapper functions
    that implicitly use the_repository instance; they have been
    removed and inlined at the calling sites.
  - "git add/etc -p" now honor the diff.context configuration
    variable, and also they learn to honor the -U&lt;n&gt; command-line
    option. (merge 2b3ae04011 lm/add-p-context later to maint).
  - The case where a new submodule takes a path where there used
    to be a completely different subproject is now dealt with a
    bit better than before. (merge 5ed8c5b465
    kj/renamed-submodule later to maint).
  - The deflate codepath in "git archive --format=zip" had a
    longstanding bug coming from misuse of zlib API, which has
    been corrected.
- drop patches included in update:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
- refreshed patches:
  CVE-2024-24577.patch
  completion-wordbreaks.diff
  git-tcsh-completion-fixes.diff
  setup-don-t-fail-if-commondir-reference-is-deleted.patch
- contrib/workdir is dropped. remove references for it.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1755691200">- Use zlib instead of zlib-ng for SLES16</changelog>
</package>
<package pkgid="a4493579406b084befd7bede37593d48f48bdd824d02cfca5b452a5a678841a70d72ffd3a0de31c1fb8c9500756e5aeb09e16e15d5316a854472848a0c6e9e91" name="git-debugsource" arch="aarch64">
  <version epoch="0" ver="2.51.0" rel="slfo.1.1_1.1"/>
  <changelog author="mrueckert@suse.de" date="1741953600">- update to 2.49.0
  https://about.gitlab.com/blog/2025/03/14/whats-new-in-git-2-49-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.49.0/Documentation/RelNotes/2.49.0.adoc
- switch to zlib-ng for code 16
- docs switched to asciidoc</changelog>
  <changelog author="tiwai@suse.com" date="1742817600">- Add support of SHA256 git repo for gitk (bsc#1239989):
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="tiwai@suse.com" date="1749816000">- Refresh gitk SHA256 patch and add SHA256 support to git-gui (bsc#1239989):
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
  The previous patches are dropped:
  0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
  0002-gitk-Add-auto-select-length-preference-for-SHA256.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1750161600">- update to 2.50.0
  https://about.gitlab.com/blog/what-s-new-in-git-2-50-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.50.0/Documentation/RelNotes/2.50.0.adoc</changelog>
  <changelog author="tiwai@suse.com" date="1750939200">- Fix git-gui citool SHA256 repo handling:
  refreshed 0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1752062400">- update to 2.50.1 (boo#1245938 boo#1245939 boo#1245942 boo#1245943
  boo#1245946 boo#1245947)
  Security fixes for CVE-2025-27613, CVE-2025-27614,
  CVE-2025-46334, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385,
  and CVE-2025-48386
  CVE-2025-27613, Gitk:
  When a user clones an untrusted repository and runs Gitk without
  additional command arguments, any writable file can be created and
  truncated. The option "Support per-file encoding" must have been
  enabled. The operation "Show origin of this line" is affected as
  well, regardless of the option being enabled or not.
  CVE-2025-27614, Gitk:
  A Git repository can be crafted in such a way that a user who has
  cloned the repository can be tricked into running any script
  supplied by the attacker by invoking `gitk filename`, where
  `filename` has a particular structure.
  CVE-2025-46334, Git GUI (Windows only):
  A malicious repository can ship versions of sh.exe or typical
  textconv filter programs such as astextplain. On Windows, path
  lookup can find such executables in the worktree. These programs
  are invoked when the user selects "Git Bash" or "Browse Files" from
  the menu.
  CVE-2025-46835, Git GUI:
  When a user clones an untrusted repository and is tricked into
  editing a file located in a maliciously named directory in the
  repository, then Git GUI can create and overwrite any writable
  file.
  CVE-2025-48384, Git:
  When reading a config value, Git strips any trailing carriage
  return and line feed (CRLF). When writing a config entry, values
  with a trailing CR are not quoted, causing the CR to be lost when
  the config is later read.  When initializing a submodule, if the
  submodule path contains a trailing CR, the altered path is read
  resulting in the submodule being checked out to an incorrect
  location. If a symlink exists that points the altered path to the
  submodule hooks directory, and the submodule contains an executable
  post-checkout hook, the script may be unintentionally executed
  after checkout.
  CVE-2025-48385, Git:
  When cloning a repository Git knows to optionally fetch a bundle
  advertised by the remote server, which allows the server-side to
  offload parts of the clone to a CDN. The Git client does not
  perform sufficient validation of the advertised bundles, which
  allows the remote side to perform protocol injection.
  This protocol injection can cause the client to write the fetched
  bundle to a location controlled by the adversary. The fetched
  content is fully controlled by the server, which can in the worst
  case lead to arbitrary code execution.
  CVE-2025-48386, Git:
  The wincred credential helper uses a static buffer (`target`) as a
  unique key for storing and comparing against internal storage. This
  credential helper does not properly bounds check the available
  space remaining in the buffer before appending to it with
  `wcsncat()`, leading to potential buffer overflows.</changelog>
  <changelog author="mrueckert@suse.de" date="1752062401">- refreshed gitk sha256 patches:
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="tiwai@suse.com" date="1752580800">- update git-gui sha256 patches after the upstream review:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- Update to 2.51.0
  - UI, Workflows &amp; Features
  - Userdiff patterns for the R language have been added.
  - Documentation for "git send-email" has been updated with a
    bit more credential helper and OAuth information.
  - "git cat-file --batch" learns to understand %(objectmode)
    atom to allow the caller to tell missing objects (due to
    repository corruption) and submodules (whose commit objects
    are OK to be missing) apart.
  - "git diff --no-index dirA dirB" can limit the comparison with
    pathspec at the end of the command line, just like normal
    "git diff".
  - "git subtree" (in contrib/) learned to grok GPG signing its
    commits.
  - "git whatchanged" that is longer to type than "git log --raw"
    which is its modern rough equivalent has outlived its
    usefulness more than 10 years ago.  Plan to deprecate and
    remove it.
  - An interchange format for stash entries is defined, and
    subcommand of "git stash" to import/export has been added.
  - "git merge/pull" has been taught the "--compact-summary"
    option to use the compact-summary format, intead of diffstat,
    when showing the summary of the incoming changes.
  - "git imap-send" has been broken for a long time, which has
    been resurrected and then taught to talk OAuth2.0 etc.
  - Some error messages from "git imap-send" has been updated.
  - When "git daemon" sees a signal while attempting to accept()
    a new client, instead of retrying, it skipped it by mistake,
    which has been corrected.
  - The reftable ref backend has matured enough; Git 3.0 will
    make it the default format in a newly created repositories by
    default.
  - "netrc" credential helper has been improved to understand
    textual service names (like smtp) in addition to the numeric
    port numbers (like 25).
  - Lift the limitation to use changed-path filter in "git log"
    so that it can be used for a pathspec with multiple literal
    paths.
  - Clean up the way how signature on commit objects are exported
    to and imported from fast-import stream.
  - Remove unsupported, unused, and unsupportable old option from
    "git log".
  - Document recently added "git imap-send --list" with an
    example.
  - "git pull" learned to pay attention to pull.autostash
    configuration variable, which overrides
    rebase/merge.autostash.
  - "git for-each-ref" learns "--start-after" option to help
    applications that want to page its output.
  - "git switch" and "git restore" are declared to be no longer
    experimental.
  - "git -c alias.foo=bar foo -h baz" reported "'foo' is aliased
    to 'bar'" and then went on to run "git foo -h baz", which was
    unexpected.  Tighten the rule so that alias expansion is
    reported only when "-h" is the sole option.
  - Performance, Internal Implementation, Development Support etc.
  - "git pack-objects" learned to find delta bases from blobs at
    the same path, using the --path-walk API.
  - CodingGuidelines update.
  - Add settings for Solaris 10 &amp; 11.
  - Meson-based build/test framework now understands TAP output
    generated by our tests.
  - "Do not explicitly initialize to zero" rule has been
    clarified in the CodingGuidelines document.
  - A test helper "test_seq" function learned the "-f &lt;fmt&gt;"
    option, which allowed us to simplify a lot of test scripts.
  - A lot of stale stuff has been removed from the contrib/
    hierarchy.
  - "git push" and "git fetch" are taught to update refs in
    batches to gain performance.
  - Some code paths in "git prune" used to ignore the passed-in
    repository object and used the `the_repository` singleton
    instance instead, which has been corrected.
  - Update ".clang-format" and ".editorconfig" to match our style
    guide a bit better.
  - "make coccicheck" succeeds even when spatch made suggestions,
    which has been updated to fail in such a case.
  - Code clean-up around object access API.
  - Define .precision to more canned parse-options type to avoid
    bugs coming from using a variable with a wrong type to
    capture the parsed values.
  - Flipping the default hash function to SHA-256 at Git 3.0
    boundary is planned.
  - Declare weather-balloon we raised for "bool" type 18 months
    ago a success and officially allow using the type in our
    codebase.
  - GIT_TEST_INSTALLED was not honored in the recent topic
    related to SHA256 hashes, which has been corrected.
  - The pop_most_recent_commit() function can have quite
    expensive worst case performance characteristics, which has
    been optimized by using prio-queue data structure.
  - Move structure definition from unrelated header file to where
    it belongs.
  - To help our developers, document what C99 language features
    are being considered for adoption, in addition to what past
    experiments have already decided.
  - The reftable unit tests are now ported to the "clar" unit
    testing framework.
  - Redefine where the multi-pack-index sits in the object
    subsystem, which recently was restructured to allow multiple
    backends that support a single object source that belongs to
    one repository.  A MIDX does span multiple "object sources".
  - Reduce implicit assumption and dependence on the_repository
    in the object-file subsystem.
  - Fixes since v2.50 Unless otherwise noted, all the changes in
    2.50.X maintenance track, including security updates, are
    included in this release.
  - A memory-leak in an error code path has been plugged. (merge
    7082da85cb ly/commit-graph-graph-write-leakfix later to
    maint).
  - A memory-leak in an error code path has been plugged. (merge
    aedebdb6b9 ly/fetch-pack-leakfix later to maint).
  - Some leftover references to documentation source files that
    no longer exist, due to recent ".txt" -&gt; ".adoc" renaming,
    have been corrected. (merge 3717a5775a
    jw/doc-txt-to-adoc-refs later to maint).
  - "git stash -p &lt;pathspec&gt;" improvements. (merge 468817bab2
    pw/stash-p-pathspec-fixes later to maint).
  - "git send-email" incremented its internal message counter
    when a message was edited, which made logic that treats the
    first message specially misbehave, which has been corrected.
    (merge 2cc27b3501 ag/send-email-edit-threading-fix later to
    maint).
  - "git stash" recorded a wrong branch name when submodules are
    present in the current checkout, which has been corrected.
    (merge ffb36c64f2 kj/stash-onbranch-submodule-fix later to
    maint).
  - When asking to apply mailmap to both author and committer
    field while showing a commit object, the field that appears
    later was not correctly parsed and replaced, which has been
    corrected. (merge abf94a283f sa/multi-mailmap-fix later to
    maint).
  - "git maintenance" lacked the care "git gc" had to avoid
    holding onto the repository lock for too long during packing
    refs, which has been remedied. (merge 1b5074e614
    ps/maintenance-ref-lock later to maint).
  - Avoid regexp_constraint and instead use comparison_constraint
    when listing functions to exclude from application of
    coccinelle rules, as spatch can be built with different
    regexp engine X-&lt;. (merge f2ad545813
    jc/cocci-avoid-regexp-constraint later to maint).
  - Updating submodules from the upstream did not work well when
    submodule's HEAD is detached, which has been improved. (merge
    ca62f524c1 jk/submodule-remote-lookup-cleanup later to
    maint).
  - Remove unnecessary check from "git daemon" code. (merge
    0c856224d2 cb/daemon-fd-check-fix later to maint).
  - Use of sysctl() system call to learn the total RAM size used
    on BSDs has been corrected. (merge 781c1cf571
    cb/total-ram-bsd-fix later to maint).
  - Drop FreeBSD 4 support and declare that we support only
    FreeBSD 12 or later, which has memmem() supported. (merge
    0392f976a7 bs/config-mak-freebsd later to maint).
  - A diff-filter with negative-only specification like "git log
  - -diff-filter=d" did not trigger correctly, which has been
    fixed. (merge 375ac087c5 jk/all-negative-diff-filter-fix
    later to maint).
  - A failure to open the index file for writing due to
    conflicting access did not state what went wrong, which has
    been corrected. (merge 9455397a5c
    hy/read-cache-lock-error-fix later to maint).
  - Tempfile removal fix in the codepath to sign commits with SSH
    keys. (merge 4498127b04 re/ssh-sign-buffer-fix later to
    maint).
  - Code and test clean-up around string-list API. (merge
    6e5b26c3ff sj/string-list later to maint).
  - "git apply -N" should start from the current index and
    register only new files, but it instead started from an empty
    index, which has been corrected. (merge 2b49d97fcb
    rp/apply-intent-to-add-fix later to maint).
  - Leakfix with a new and a bit invasive test on pack-bitmap
    files. (merge bfd5522e98 ly/load-bitmap-leakfix later to
    maint).
  - "git fetch --prune" used to be O(n^2) expensive when there
    are many refs, which has been corrected. (merge 87d8d8c5d0
    ph/fetch-prune-optim later to maint).
  - When a ref creation at refs/heads/foo/bar fails, the files
    backend now removes refs/heads/foo/ if the directory is
    otherwise not used. (merge a3a7f20516
    ps/refs-files-remove-empty-parent later to maint).
  - "pack-objects" has been taught to avoid pointing into objects
    in cruft packs from midx.
  - "git remote" now detects remote names that overlap with each
    other (e.g., remote nickname "outer" and "outer/inner" are
    used at the same time), as it will lead to overlapping
    remote-tracking branches. (merge a5a727c448
    jk/remote-avoid-overlapping-names later to maint).
  - The gpg.program configuration variable, which names a
    pathname to the (custom) GPG compatible program, can now be
    spelled with ~tilde expansion. (merge 7d275cd5c0
    jb/gpg-program-variable-is-a-pathname later to maint).
  - Our &lt;sane-ctype.h&gt; header file relied on that the
    system-supplied &lt;ctype.h&gt; header is not later included, which
    would override our macro definitions, but "amazon linux"
    broke this assumption.  Fix this by preemptively including
    &lt;ctype.h&gt; near the beginning of &lt;sane-ctype.h&gt; ourselves.
    (merge 9d3b33125f ps/sane-ctype-workaround later to maint).
  - Clean-up compat/bswap.h mess. (merge f4ac32c03a
    ss/compat-bswap-revamp later to maint).
  - Meson-based build did not handle libexecdir setting
    correctly, which has been corrected. (merge 056dbe8612
    rj/meson-libexecdir-fix later to maint).
  - Document that we do not require "real" name when signing your
    patches off. (merge 1f0fed312a
    bc/contribution-under-non-real-names later to maint).
  - "git commit" that concludes a conflicted merge failed to
    notice and remove existing comment added automatically (like
    "# Conflicts:") when the core.commentstring is set to 'auto'.
    (merge 92b7c7c9f5 ac/auto-comment-char-fix later to maint).
  - "git rebase -i" with bogus rebase.instructionFormat
    configuration failed to produce the todo file after recording
    the state files, leading to confused "git status"; this has
    been corrected. (merge ade14bffd7
    ow/rebase-verify-insn-fmt-before-initializing-state later to
    maint).
  - A few file descriptors left unclosed upon program completion
    in a few test helper programs are now closed. (merge
    0f1b33815b hl/test-helper-fd-close later to maint).
  - Interactive prompt code did not correctly strip CRLF from the
    end of line on Windows. (merge 711a20827b js/prompt-crlf-fix
    later to maint).
  - The config API had a set of convenience wrapper functions
    that implicitly use the_repository instance; they have been
    removed and inlined at the calling sites.
  - "git add/etc -p" now honor the diff.context configuration
    variable, and also they learn to honor the -U&lt;n&gt; command-line
    option. (merge 2b3ae04011 lm/add-p-context later to maint).
  - The case where a new submodule takes a path where there used
    to be a completely different subproject is now dealt with a
    bit better than before. (merge 5ed8c5b465
    kj/renamed-submodule later to maint).
  - The deflate codepath in "git archive --format=zip" had a
    longstanding bug coming from misuse of zlib API, which has
    been corrected.
- drop patches included in update:
  0001-git-gui-Replace-null_sha1-with-nullid.patch
  0001-gitk-Add-support-of-SHA256-repo.patch
  0002-git-gui-Add-support-of-SHA256-repo.patch
- refreshed patches:
  CVE-2024-24577.patch
  completion-wordbreaks.diff
  git-tcsh-completion-fixes.diff
  setup-don-t-fail-if-commondir-reference-is-deleted.patch
- contrib/workdir is dropped. remove references for it.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1755691200">- Use zlib instead of zlib-ng for SLES16</changelog>
</package>
<package pkgid="747f0920b67ba4058c8393995413b54031a4ad46fbb116512b2bc63748a4beb0eddcf831d152de73c0177c2135c98b54e658f0dd4ca2c5e72f103e6df4abe35a" name="glib-networking-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.78.0" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1662033600">- Update to version 2.74.rc:
  + Support PKCS #12 encrypted certificates.
  + Various improvements to Meson build system.
  + Multiple fixes for proxy tests.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 2.74.0:
  + Updated translations.</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Fix build with gnutls 3.7.8:
  * tests: skip tls-exporter test for TLS 1.2
  * https://gitlab.gnome.org/GNOME/glib-networking/-/issues/201
  * Add glib-networking-gnutls-tls-exporter-tls12.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1676462400">- Update to version 2.76.alpha:
  + OpenSSL: add session resumption support.
  + GnuTLS: several session resumption improvements.
  + Skip TLS exporter test for TLS 1.2.
  + Default values for build options have changed, no longer use
    auto.
  + Fix static linking on Windows.
  + Don't use system trust on iOS.
  + Updated translations.
- Drop glib-networking-gnutls-tls-exporter-tls12.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1677499200">- Update to version 2.76.beta:
  + Hopefully fix environment proxy resolver on Windows.
  + Remove static_modules build option, use
  - Ddefault_library=static instead.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 2.76.0:
  + Fix OpenSSL sessions becoming unresumable.
  + Fix installed libproxy test.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1686830400">- Add a7db10e8862050f19af5c2eebcd1d590a04d5ced.patch: Fix tests
  using libproxy 0.5.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 2.76.1:
  + Fix proxy tests when built against libproxy 0.5.
  + Updated translations.
- Drop a7db10e8862050f19af5c2eebcd1d590a04d5ced.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1691755200">- Ignore test suite errors for now: the test passes when run
  locally in a chroot build env, but fails inside a kvm build env.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.78.0:
  + Respect root certificates added to macOS system keychain by
    users
  + Disable PKCS #11 tests when GnuTLS is built without PKCS #11
    support
  + Fix connection tests on 32-bit systems with 64-bit time_t
  + Updated translations.</changelog>
</package>
<package pkgid="29099b55dbcf80c2bbf952f31e8b2c1f3303af03362ad7e394ea01cb78a5ec0219ac992e89f71c86abf4dbc13041491fc0c1f6b56db8aec4c39d4612d766e1e3" name="glib-networking-debugsource" arch="aarch64">
  <version epoch="0" ver="2.78.0" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1662033600">- Update to version 2.74.rc:
  + Support PKCS #12 encrypted certificates.
  + Various improvements to Meson build system.
  + Multiple fixes for proxy tests.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 2.74.0:
  + Updated translations.</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Fix build with gnutls 3.7.8:
  * tests: skip tls-exporter test for TLS 1.2
  * https://gitlab.gnome.org/GNOME/glib-networking/-/issues/201
  * Add glib-networking-gnutls-tls-exporter-tls12.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1676462400">- Update to version 2.76.alpha:
  + OpenSSL: add session resumption support.
  + GnuTLS: several session resumption improvements.
  + Skip TLS exporter test for TLS 1.2.
  + Default values for build options have changed, no longer use
    auto.
  + Fix static linking on Windows.
  + Don't use system trust on iOS.
  + Updated translations.
- Drop glib-networking-gnutls-tls-exporter-tls12.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1677499200">- Update to version 2.76.beta:
  + Hopefully fix environment proxy resolver on Windows.
  + Remove static_modules build option, use
  - Ddefault_library=static instead.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 2.76.0:
  + Fix OpenSSL sessions becoming unresumable.
  + Fix installed libproxy test.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1686830400">- Add a7db10e8862050f19af5c2eebcd1d590a04d5ced.patch: Fix tests
  using libproxy 0.5.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 2.76.1:
  + Fix proxy tests when built against libproxy 0.5.
  + Updated translations.
- Drop a7db10e8862050f19af5c2eebcd1d590a04d5ced.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1691755200">- Ignore test suite errors for now: the test passes when run
  locally in a chroot build env, but fails inside a kvm build env.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.78.0:
  + Respect root certificates added to macOS system keychain by
    users
  + Disable PKCS #11 tests when GnuTLS is built without PKCS #11
    support
  + Fix connection tests on 32-bit systems with 64-bit time_t
  + Updated translations.</changelog>
</package>
<package pkgid="49e4eb61179fdb74f977fa362190bea42e2814f1a2f784a6b4a0f21a3629bdec487b94f03dc6f24e9f3012cabced1aff38f464578528e7c2da2bc8f573bc3ebb" name="glib2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="slfo.1.1_6.1"/>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="2e12c53eb064678113f89b729e124eb9d3b90994125af128a918fa09c1601ddcfbcbb1dba9894f77e52166f55eadc636a8919a7ad726cc9eb24dcbd3bcc081d2" name="glib2-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="slfo.1.1_6.1"/>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="6b3f1d588aa3ddccfd110860742d1c32ad4dde06a60f62c73018392ff94710cb746c915b355a00960cae00bcfad588d368aa9f7a3435baee0843a3f377c05495" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.38" rel="slfo.1.1_6.1"/>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228041, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1753790400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="5b2f1a487a14f875b19feb909df7a43b010af770e0e98d94555e8a2005560421b7988b151813431c7523bdcea92f74239bbe4c589d004ed3fac0321dda548d2a" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.38" rel="slfo.1.1_6.1"/>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228041, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1753790400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="67c627a2550373e20836c3b92020c50beef1299e2b8da73e82b40e48e7e323120edc672c2488165c16011f505842e1e36230147bbf93d78c0f654a51e737e2d8" name="glibc-devel-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.38" rel="slfo.1.1_6.1"/>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228041, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1753790400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="4fb8e8a0d0299c874b363dfbe8ee56dff6cf3cf05ac3e05ddabe79897070bf967bdcd3b86188da52c65574298e3f5aa3bcebca68ae0b5a08d595e98631ceb033" name="glibc-locale-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.38" rel="slfo.1.1_6.1"/>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228041, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1753790400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="82645b452edbea8ab5ffefcf7b45fe64be76e9396273b7c42aab0d0fb201562a3f21adcf537b39302362d0c8a9343057fdc7b5229a635e34d75cb346365516f0" name="gmp-debugsource" arch="aarch64">
  <version epoch="0" ver="6.3.0" rel="slfo.1.1_1.5"/>
  <changelog author="andreas.stieger@gmx.de" date="1579435200">- GMP 6.2.0:
  * New C++ functions factorial, primorial and fibonacci for mpz_class
  * Functions to detect primality now substitute the first 24 Miller-Rabin
    iterations with the BPSW test
  * Mini-GMP: new functions mpz_2fac_ui and mpz_mfac_uiui.
  * Mini-GMP: mpz_sizeinbase, mpz_get_str, and mpz_set_str now support bases up
    to 62.
  * various bug fixes
  * Major speedup on AMD Ryzen and Epyc, IBM POWER9, 64-bit ARM CPUs
    from assembly code
  * Speedups from reimplementations
- drop patches:
  * gmp-6.1.2-conftest.patch, upstream
  * gmp-noexec.diff, upstream
  * floating-point-format-no-lto.patch, similar change</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Remove broken packaged libgmp.a just containing LTO bytecode.</changelog>
  <changelog author="coolo@suse.com" date="1590494400">- correct license statement (library itself is no GPL-3.0)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606996800">- GMP 6.2.1:
  * A possible overflow of type int is avoided for mpz_cmp on huge
    operands
  * Overflows are more carefully detected and reported for
    mpz_pow_ui
  * Fix a bug in longlong.h for aarch64 sub_ddmmss
  * mini-gmp: mpz_out_str and mpq_out_str now correctly handle out
    of range bases
  * C90 compliance
  * Support for more processors</changelog>
  <changelog author="rguenther@suse.com" date="1607515200">- Add gmp-6.2.1-arm64-invert_limb.patch [bsc#1179751]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1618056000">- do not break SLE 12 build when applying spec-cleaner</changelog>
  <changelog author="rguenther@suse.com" date="1618920000">- Compute FIPS hmac for libgmp.so.10 [bsc#1184555]</changelog>
  <changelog author="rguenther@suse.com" date="1637064000">- Add gmp-6.2.1-CVE-2021-43618.patch to fix buffer overflow on
  malformed input to mpz_inp_raw.  [bsc#1192717, CVE-2021-43618]</changelog>
  <changelog author="rguenther@suse.com" date="1691150400">- GMP 6.3.0
  * A possible overflow of type int is avoided for mpz_cmp on huge operands.
  * A possible error condition when a malformed file is read with mpz_inp_raw
    is now correctly handled.
  * New public function mpz_prevprime, companion of the existing mpz_nextprime.
  * New documented pointer types mpz_ptr, mpz_srcptr, and similar for other
    GMP types. Refer to the manual for full list and suggested usage. These
    types have been present in gmp.h at least since GMP-4.0, but previously
    not advertised to users.
  * Support for 64-bit Arm under Macos.
  * Support for the loongarch64 CPU family.
  * Support for building with LTO, link-time optimisations.
  * New special code for base = 2 in mpz_powm reduces the average time for
    the functions that test primality.
  * Speedup for the function mpz_nextprime on large operands.
  * Speedup for multiplications (some sizes only) thanks to new internal
    functions to compute small negacyclic products.
  * Special assembly code for IBM z13 and later "mainframe" CPUs, resulting
    in a huge speedup.
  * Improved assembly for several 64-bit x86 CPUs, Risc-V, 64-bit Arm.
- Removed gmp-6.2.1-CVE-2021-43618.patch which is included in the
  new release.</changelog>
  <changelog author="rguenther@suse.com" date="1692705600">- Add gmp-6.3.0-s390x-fix.patch to fix s390x optimized code on z13.</changelog>
</package>
<package pkgid="fdf5fb2bd3cfef049a8292ca9299de61a1db2d0626d11de28e20f561abfc0e526dee0a0684e0c77fb9f888896b8c9f26764c4c34cb87511064a272acc8536188" name="gnutls-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.8.3" rel="slfo.1.1_6.1"/>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="a851f6336c1663e3d1ee751a408a88ab5a59ff1ab75c10c7f830f244dda5549479141366793d3b8012cbf223fc8d6252a273a88fea7789c6659562062b44654a" name="gnutls-debugsource" arch="aarch64">
  <version epoch="0" ver="3.8.3" rel="slfo.1.1_6.1"/>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="11bcf5dd45026f45eaff7defe04678fd9a77ac5b878c96da40654f288974cf3a17213333ae8faf2965c094d7032871047d377e51d3835902cbd314e0b08b3245" name="gobject-introspection-debugsource" arch="aarch64">
  <version epoch="0" ver="1.78.1" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1677499200">- Update to version 1.75.6:
  + Documentation fixes.
  + Fix build when using GLib as a subproject.
  + Update the GIR data for GLib.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678795200">- Update to version 1.76.0:
  + Update the GIR data for GLib.
  + Documentation fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1678881600">- Update path regex used in gobjectintrospection.attr: the old one
  was not sufficiently escaped, which resulted in many more files
  being scanned than needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679486400">- Update to version 1.76.1:
  + Handle null default values.
  + Documentation fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680177600">- Run meson_test only on x86(_64) arches until upstream issue is
  fixed.
  https://gitlab.gnome.org/GNOME/gobject-introspection/-/issues/458</changelog>
  <changelog author="luc14n0@opensuse.org" date="1684670400">- Amend gi-find-deps.sh's javascript_pkg_requires function to
  extend GREP's filtering by passing the extended regex option flag
  (-E) and appending ? to the first two single quotes, accounting
  for quoted AND unquoted names before the colon. This should
  ensure that typelib() symbols provisioning are versioned where in
  some previous cases they weren't, but should've, causing a
  different version than the needed to be pulled. Those changes
  address the case where Sushi was requiring only
  typelib(GtkSource), rather than typelib(GtkSource) = 4. And
  without something else, in a default installation of openSUSE
  Tumbleweed, pulling in typelib-1_0-GtkSource-4, Sushi would fail
  to present previews in Nautilus (boo#1211546).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1685361600">- Adapt split_name_version2 function to deal with possible argument
  containing "pkg.require({" string before the wanted module name
  (a case from a JS script from gnome-weather). This is a side
  effect from the previous change to the pcre2grep regex in the
  javascript_pkg_requires function. Now, AWK should strip this
  string with the help of a sub() function call with the ^.*{
  regex.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 1.78.0:
  + Update the GIR data for GLib, GObject, and GIO
  + Add GObject as a dependency for the Cairo GIR
  + Add more tests for GI marshalling
  + Update regression test suite
  + Fix build on Windows for paths using '\' as a separator
  + Support different prefix for finding GIR data
  + Add GI_GIR_PATH environment variable for controlling GIR paths</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 1.78.1:
  + Avoid undefined behaviour in the Regress test suite</changelog>
  <changelog author="fcrozat@suse.com" date="1701259200">- Drop BuildRequires on pkgconfig(cairo)/pkgconfig(cairo-gobject),
  cairo is only needed for some tests.</changelog>
</package>
<package pkgid="82b43da61471882597e95583667226c6bc71e40c787f978f254ae705ff66f305bb28b2ff4cabfbebe6737ae9992255b9b84bc35ab04f80e1d0c32ab069341c41" name="gpg2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.4" rel="slfo.1.1_8.1"/>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873601">- Security fix: [bsc#1256243]
  * gpg2 agent: Fix a memory leak
  * Add patch gnupg-agent-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873604">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601600">- Security fix [bsc#1256389] (gpg.fail/filename)
  * Added gnupg-accepts-path-separators-literal-data.patch
  * GnuPG Accepts Path Separators and Path Traversals in Literal Data</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601601">- Security fix [bsc#1257396, CVE-2026-24882]
  * gpg2: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys
  * Added gnupg-CVE-2026-24882.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Fix Y2K38 FTBFS:
  * gpg2 quick-key-manipulation test FTBFS-2038 (bsc#1251214)
  * Upstream issue: dev.gnupg.org/T8096
  * Add gnupg-gpgscm-New-operator-long-time-t-to-detect-proper-tim.patch</changelog>
</package>
<package pkgid="1e6f955f4f6082d569ae732cd0cc148a27dcdae06d3f797467479139c9cc4fb160a2050d950106d0019089d243ce4b77a6b054985072c09dece71c76b3728bf7" name="gpg2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.4" rel="slfo.1.1_8.1"/>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873601">- Security fix: [bsc#1256243]
  * gpg2 agent: Fix a memory leak
  * Add patch gnupg-agent-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873604">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601600">- Security fix [bsc#1256389] (gpg.fail/filename)
  * Added gnupg-accepts-path-separators-literal-data.patch
  * GnuPG Accepts Path Separators and Path Traversals in Literal Data</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601601">- Security fix [bsc#1257396, CVE-2026-24882]
  * gpg2: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys
  * Added gnupg-CVE-2026-24882.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Fix Y2K38 FTBFS:
  * gpg2 quick-key-manipulation test FTBFS-2038 (bsc#1251214)
  * Upstream issue: dev.gnupg.org/T8096
  * Add gnupg-gpgscm-New-operator-long-time-t-to-detect-proper-tim.patch</changelog>
</package>
<package pkgid="a984efeac30021984a58d9d428fd1c02c8d786b9431a0f3db1e6d509accc705a836a6d417232f7bd2d331673cb1f83190c07c567e57ec327d2266cc86e7882dd" name="gpgme-debugsource" arch="aarch64">
  <version epoch="0" ver="1.23.0" rel="slfo.1.1_2.1"/>
  <changelog author="christophe@krop.fr" date="1681214400">- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets</changelog>
  <changelog author="pmonreal@suse.com" date="1682078400">- Update to 1.20.0:
  * On Windows, the gettext functions provided by gpgrt are switched
    into utf8 mode, so that all localized texts returned by GpgME or
    gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
  * Key::canSign now returns false for OpenPGP keys without signing
    (sub)key. [T6456]
  * The new macOS Homebrew location is now by default supported. [T6440]
  * Fix regression in 1.19.0.
  * Fix invocation of gpgtar on Windows.
  * Interface changes relative to the 1.19.0 release:
  - gpgme_subkey_t              EXTENDED: New field 'can_renc'.
  - gpgme_subkey_t              EXTENDED: New field 'can_timestamp'.
  - gpgme_subkey_t              EXTENDED: New field 'is_group_owned'.
  - cpp: Subkey::canRenc        NEW.
  - cpp: Subkey::canTimestamp   NEW.
  - cpp: Subkey::isGroupOwned   NEW.
  - cpp: Key::canReallySign     DEPRECATED.
  * Release-info: https://dev.gnupg.org/T6463</changelog>
  <changelog author="pmonreal@suse.com" date="1688990400">- Update to 1.21.0
  * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign
    to allow writing the output directly to a file. [T6530]
  * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the
    input data directly from files. [T6530]
  * For key signing and uid revoking allow an empty user id. [rMfbc3963d62]
  * Pass an input-size-hint also to the gpgsm engine. [T6534]
  * qt: Allow writing the created archives directly to a file. [T6530]
  * qt: Allow reading the signed/encrypted archive to decrypt
    or verify directly from a file. [T6530]
  * qt: Qt Jobs working with QIODeviceDataProvider now properly
    handle input-size hints and progress for files larger.
    2^32 bytes in 32 bit builds. [T6534]
  * cpp: Error::isCanceled now also returns true for error code
    GPG_ERR_FULLY_CANCELED. [T6510]
  * python: Fix wrong use of write. [T6501]
  * Interface changes relative to the 1.20.0 release:
  - cpp: Data::setFlag                            NEW.
  - cpp: Data::setSizeHint                        NEW.
  - qt: Job::startIt                              NEW.
  - qt: DecryptVerifyArchiveJob::setInputFile     NEW.
  - qt: DecryptVerifyArchiveJob::inputFile        NEW.
  - qt: EncryptArchiveJob::setRecipients          NEW.
  - qt: EncryptArchiveJob::recipients             NEW.
  - qt: EncryptArchiveJob::setInputPaths          NEW.
  - qt: EncryptArchiveJob::inputPaths             NEW.
  - qt: EncryptArchiveJob::setOutputFile          NEW.
  - qt: EncryptArchiveJob::outputFile             NEW.
  - qt: EncryptArchiveJob::setEncryptionFlags     NEW.
  - qt: EncryptArchiveJob::encryptionFlags        NEW.
  - qt: SignArchiveJob::setSigners                NEW.
  - qt: SignArchiveJob::signers                   NEW.
  - qt: SignArchiveJob::setInputPaths             NEW.
  - qt: SignArchiveJob::inputPaths                NEW.
  - qt: SignArchiveJob::setOutputFile             NEW.
  - qt: SignArchiveJob::outputFile                NEW.
  - qt: SignEncryptArchiveJob::setSigners         NEW.
  - qt: SignEncryptArchiveJob::signers            NEW.
  - qt: SignEncryptArchiveJob::setRecipients      NEW.
  - qt: SignEncryptArchiveJob::recipients         NEW.
  - qt: SignEncryptArchiveJob::setInputPaths      NEW.
  - qt: SignEncryptArchiveJob::inputPaths         NEW.
  - qt: SignEncryptArchiveJob::setOutputFile      NEW.
  - qt: SignEncryptArchiveJob::outputFile         NEW.
  - qt: SignEncryptArchiveJob::setEncryptionFlags NEW.
  - qt: SignEncryptArchiveJob::encryptionFlags    NEW.</changelog>
  <changelog author="schwab@suse.de" date="1691064000">- Run testsuite in qemu build</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Update to 1.22.0:
  * Prevent wrong plaintext when verifying clearsigned signature.
  * Return bad data error instead of general error on unexpected data.
  * Take care of offline mode for all operations of gpgsm engine.
  * Prepare the use of the forthcoming libassuan version 3.
  * New configure option --with-libtool-modification.
  * cpp: Expose gpgme_decrypt_result_t.is_mime.
  * qt: Clean up after failure or cancel of sign/encrypt archive operation.
  * qt: Add setInputEncoding to QGpgMe::EncryptJob.
  * qt: Make toLogString helper public.
  * Interface changes relative to the 1.21.0 release:
  - qt: EncryptJob::setInputEncoding           NEW.
  - qt: DecryptionResult::isMime               NEW.
  - qt: toLogString                            NEW.</changelog>
  <changelog author="pmonreal@suse.com" date="1692705601">- Fix builds with qt and qt6 [T6673]:
  * qt,tests: Fix build in source directory. Include Qt binding
    sources before C++ binding sources and C sources. This fixes
    the problem that the debug.h in the C sources was found before
    the one in the Qt bindings.
  * build: Suggest out-of-source build. Suggest to run configure
    from a build subdirectory.
  * Add patches:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="christophe@krop.fr" date="1695470400">- Use GCC 12 for building the Qt6 library. The default compiler
  is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="christophe@krop.fr" date="1695470401">- Use GCC 12 for building the Qt6 library on Leap 15. The
  default compiler is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1698235200">- Update to 1.23.0:
  * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559]
  * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705]
  * New key capability flags has_*. [T6748]
  * gpgme-tool: Support use of Windows HANDLE. [T6634]
  * qt: Support refreshing keys via WKD. [T6672]
  * qt: Handle cancel in changeexpiryjob. [T6754]
  * Remove patches fixed upstream:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="59c73f5ccaf45b086470a0676257e5c96793909dabd500da0b71eff00b5b8a274f2730278310bca1e425df6eaf8df8285b594dac9dc0a2128f0a886d44ec6a5d" name="gptfdisk-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.9" rel="slfo.1.1_2.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1590494400">- Update to 1.0.5
  * Changed number of columns in type code output ("sgdisk -L"
    and equivalents in gdisk and cgdisk) from 3 to 2, since some
    descriptions are long enough that they are ambiguous with
    three columns.
  * You can now put the 0xEE partition last in a hybrid MBR using
    sgdisk. (Previously, this was possible with gdisk but not
    with sgdisk.) See the sgdisk man page for details.
  * Added numerous type codes for Container Linux, Veracrypt, and
    Freedesktop.org's Discoverable Partitions Specification
  * Partition type name searches are now case-insensitive.
  * It is now possible to quit out of partition type name
    searches by typing "q".
  * When changing a partition type code, the default is now the
    current type code, not a platform-specific type code.</changelog>
  <changelog author="jengelh@inai.de" date="1599220800">- Remove old specfile constructs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1612872000">- Update to 1.0.6
  * Fixed bug that could cause segfault if GPT header claimed partition
    entries are oversized. See:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0256
  * Fixed bug that could cause a crash if a badly-formatted MBR disk was
    read. See:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0308
  * Renamed the partition type "Freedesktop $BOOT" to "XBOOTLDR partition".
  * Added several more Freedesktop partition table type codes (0x8312 through
    0x831C).
  * Fixed type code definition in diskio-unix.cc that prevented 32-bit builds
    from correctly handling disks over 4 TiB in size.
  * Minor tweaks to get the software to compile on FreeBSD; that seems to have
    fallen into disrepair.</changelog>
  <changelog author="manfred99@gmx.ch" date="1613476800">- fix regression from version 1.0.6: misleading warning when reading MBR disks,
    upstream commit f063fe08e424c99f133df18bf9dce49c851bcb0a
- Add fix-spurious-warnings.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623326400">- Update to 1.0.8
  * Fixed double byte swap operation on writes of partition name data on
    big-endian systems; this is in addition to the double byte swap fix on
    reading partition label data fixed in 1.0.7. (Thanks to Erik Larsson for
    both fixes.)
  * Added feature to gdisk and sgdisk to enable swapping the byte order of
    partition names, so as to correct disks already affected by the preceding
    bug. This option is 'b' on the experts' menu in gdisk and
  - b/--byte-swap-name in sgdisk. This seems advanced/obscure enough that I
    don't want to clutter cgdisk's menu with this option, so I haven't added
    it there.
  * Added type code for the Barebox boot loader (0xbb00;
    4778ED65-BF42-45FA-9C5B-287A1DC4AAB1).
  * Fixed bug that caused spurious warnings about the partition table
    header claiming an invalid size of partition entries when reading
    some MBR disks.
  * Added ARM64 as an architecture for the Mac builds of gdisk and fixparts.
    The official GPT fdisk binaries of these files for macOS are now
    "universal" x86-64/ARM64 binaries, so they will run natively on the new M1
    (ARM64) Macs. The sgdisk and cgdisk binaries, though, remain built only
    for x86-64, because they rely on libraries that are not easily built in
    "universal" form.
  * Fixed double byte swap operation on partition label data on big-endian
    CPUs. This resulted in partition names becoming gibberish on such CPUs.
  * Added three new type codes:
  - 0x0701 - Microsoft Storage Replica
  - 0x0702 - ArcaOS Type 1
  - 0x8401 - Storage Performance Development Kit (SPDK) block device
- Drop fix-spurious-warnings.patch</changelog>
  <changelog author="jengelh@inai.de" date="1661601600">- Update to release 1.0.9
  * Added support for aligning partitions' end points, as well as
    their start points. This support affects the default
    partition size when using 'n' in gdisk; it affects the
    default partition size in cgdisk; and it is activated by the
    new `-I` option in sgdisk.
  * Added check for too-small disks (most likely to be an issue
    when trying to use a too-small disk image); program now
    aborts if this happens.
  * Added new parition type codes.</changelog>
  <changelog author="fvogt@suse.com" date="1664539200">- Add patch to fix sgdisk with popt 1.19:
  * 0001-Fix-failure-crash-of-sgdisk-when-compiled-with-lates.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1678190400">- Add gptfdisk-fix-null-pointer-dereference.patch: Fix NULL pointer
  dereference in pervious patch, poptGetArg can return NULL so we
  should not pass it to strdup directly (bsc#1208877).</changelog>
  <changelog author="fvogt@suse.com" date="1694088000">- Add patch to fix UUID generation with util-linux &gt;= 2.38:
  * gptfdisk-1.0.9-libuuid.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1751284800">- fix boot failure with qcow and vmdk images (bsc#1242987)
  * 0001-Do-not-check-for-writable-device-if-we-don-t-need-it.patch</changelog>
</package>
<package pkgid="51e9f4559eb267d98ef1eb4ce0ae95ebdff4169cc7def9da9b3cb02d0793ad4b4d0da206e3593ee94a6a3a3778ed7cdbd8591586a90d53cf79f9ae3cb03cdbaf" name="gptfdisk-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.9" rel="slfo.1.1_2.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1590494400">- Update to 1.0.5
  * Changed number of columns in type code output ("sgdisk -L"
    and equivalents in gdisk and cgdisk) from 3 to 2, since some
    descriptions are long enough that they are ambiguous with
    three columns.
  * You can now put the 0xEE partition last in a hybrid MBR using
    sgdisk. (Previously, this was possible with gdisk but not
    with sgdisk.) See the sgdisk man page for details.
  * Added numerous type codes for Container Linux, Veracrypt, and
    Freedesktop.org's Discoverable Partitions Specification
  * Partition type name searches are now case-insensitive.
  * It is now possible to quit out of partition type name
    searches by typing "q".
  * When changing a partition type code, the default is now the
    current type code, not a platform-specific type code.</changelog>
  <changelog author="jengelh@inai.de" date="1599220800">- Remove old specfile constructs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1612872000">- Update to 1.0.6
  * Fixed bug that could cause segfault if GPT header claimed partition
    entries are oversized. See:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0256
  * Fixed bug that could cause a crash if a badly-formatted MBR disk was
    read. See:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0308
  * Renamed the partition type "Freedesktop $BOOT" to "XBOOTLDR partition".
  * Added several more Freedesktop partition table type codes (0x8312 through
    0x831C).
  * Fixed type code definition in diskio-unix.cc that prevented 32-bit builds
    from correctly handling disks over 4 TiB in size.
  * Minor tweaks to get the software to compile on FreeBSD; that seems to have
    fallen into disrepair.</changelog>
  <changelog author="manfred99@gmx.ch" date="1613476800">- fix regression from version 1.0.6: misleading warning when reading MBR disks,
    upstream commit f063fe08e424c99f133df18bf9dce49c851bcb0a
- Add fix-spurious-warnings.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623326400">- Update to 1.0.8
  * Fixed double byte swap operation on writes of partition name data on
    big-endian systems; this is in addition to the double byte swap fix on
    reading partition label data fixed in 1.0.7. (Thanks to Erik Larsson for
    both fixes.)
  * Added feature to gdisk and sgdisk to enable swapping the byte order of
    partition names, so as to correct disks already affected by the preceding
    bug. This option is 'b' on the experts' menu in gdisk and
  - b/--byte-swap-name in sgdisk. This seems advanced/obscure enough that I
    don't want to clutter cgdisk's menu with this option, so I haven't added
    it there.
  * Added type code for the Barebox boot loader (0xbb00;
    4778ED65-BF42-45FA-9C5B-287A1DC4AAB1).
  * Fixed bug that caused spurious warnings about the partition table
    header claiming an invalid size of partition entries when reading
    some MBR disks.
  * Added ARM64 as an architecture for the Mac builds of gdisk and fixparts.
    The official GPT fdisk binaries of these files for macOS are now
    "universal" x86-64/ARM64 binaries, so they will run natively on the new M1
    (ARM64) Macs. The sgdisk and cgdisk binaries, though, remain built only
    for x86-64, because they rely on libraries that are not easily built in
    "universal" form.
  * Fixed double byte swap operation on partition label data on big-endian
    CPUs. This resulted in partition names becoming gibberish on such CPUs.
  * Added three new type codes:
  - 0x0701 - Microsoft Storage Replica
  - 0x0702 - ArcaOS Type 1
  - 0x8401 - Storage Performance Development Kit (SPDK) block device
- Drop fix-spurious-warnings.patch</changelog>
  <changelog author="jengelh@inai.de" date="1661601600">- Update to release 1.0.9
  * Added support for aligning partitions' end points, as well as
    their start points. This support affects the default
    partition size when using 'n' in gdisk; it affects the
    default partition size in cgdisk; and it is activated by the
    new `-I` option in sgdisk.
  * Added check for too-small disks (most likely to be an issue
    when trying to use a too-small disk image); program now
    aborts if this happens.
  * Added new parition type codes.</changelog>
  <changelog author="fvogt@suse.com" date="1664539200">- Add patch to fix sgdisk with popt 1.19:
  * 0001-Fix-failure-crash-of-sgdisk-when-compiled-with-lates.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1678190400">- Add gptfdisk-fix-null-pointer-dereference.patch: Fix NULL pointer
  dereference in pervious patch, poptGetArg can return NULL so we
  should not pass it to strdup directly (bsc#1208877).</changelog>
  <changelog author="fvogt@suse.com" date="1694088000">- Add patch to fix UUID generation with util-linux &gt;= 2.38:
  * gptfdisk-1.0.9-libuuid.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1751284800">- fix boot failure with qcow and vmdk images (bsc#1242987)
  * 0001-Do-not-check-for-writable-device-if-we-don-t-need-it.patch</changelog>
</package>
<package pkgid="58e24a0b3b9d05da39883dbc6244f7c1658abd1970252079c2a0c4799e91ec466ad420e591a2edd9a19d0f5e3fe598731958a786437959b124cd66a6cbc916ce" name="graphene-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1519387200">- Update to version 1.8.0:
  + No new API, this cycle, but it's time to spin a new stable
    release.
  + The major news for this release is that we dropped the
    Autotools build from the repository; Graphene is now built
    exclusively with Meson.
  + We've added various fixes to the build on macOS, in order to
    maintain compatibility with the old Autotools build.
  + The variables in the pkg-config file that expose the SIMD
    functionality built inside Graphene have been updated, to
    ensure that they can be easily consumed by other projects;
    instead of a single string that needs to be split, we now
    expose boolean variables for all SIMD implementations.
  + We've also improved the ability to use Graphene as a Meson
    sub-project; this allows Meson to check out, build, and depend
    on Graphene when building complex projects, like GTK. This is
    really useful inside CI pipelines, as it minimises the amount
    of separate steps needed when setting up the build.
- Update options passed to meson, following upstream changes:
  gtk_doc=true, gobject_types=true, introspection=true,
  gcc_vector=true, sse2=true, arm-neon=true, tests=true and
  benchmarks=true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1528977600">- Update to version 1.8.2:
  + The main change is that we've now disabled SIMD optimisations
    on 32 bit Intel architectures; there aren't many of those left,
    and in general compilers have been less than stellar when
    supporting SIMD types on them. This is especially problematic
    when it comes to using Graphene types inside other allocated
    structures, where SIMD alignment rules break system allocators
    on platforms like Windows. To avoid introducing weird bugs, if
    you're on 32 bit IA, you're only going to have access to the
    scalar SIMD implementation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553515200">- Update to version 1.8.6:
  + Bug fixes, bug fixes everywhere! Also: documentation changes to
    clarify what we do behind the veil of the various matrix
    multiplication functions. Hopefully, this should help people
    using Graphene especially when it comes to integration with
    other libraries.
  + Fix matrix multiplication when the result matrix is also one of
    the operands.
  + Fix check when converting a 4x4 matrix into an affine
    transformation matrix.
  + Fix interpolation between matrices with a perspective
    component.
  + Documentation fixes for matrix/matrix and matrix/vector
    multiplication operators.
- Changes from version 1.8.4:
  + Mostly a bug fixing release, with an especially glaring bug fix
    in the point transformation function of graphene_matrix_t that
    was found thanks to GTK 4. Now the function is covered by the
    test suite, so it should not regress.
  + Another major fix is the ensuring that we have a description of
    the SIMD types through introspection, which means that language
    bindings can finally know how big every other structure using
    them is. The SIMD API is still not available through
    introspection, as it's a pure C convenience.
  + Require Meson ≥ 0.48.0.
  + Fix matrix/point transformation.
  + Build fixes for MSVC.
  + Introspection fixes for bool.
  + Fix the InitOnce checks on Windows.
  + Correctly parse SIMD types for introspection.
  + Build fixes for the pkg-config file.
  + Documentation fixes:
  - Clarify matrix/vector/point multiplication.
  - Clarify plane description.
  - Clarify the units for the matrix skew factors.
  - Document use of graphene-gobject with Meson.</changelog>
  <changelog author="luke@ljones.dev" date="1567771200">- Update to version 1.9.6:
  + Add radians based initialisers for graphene_euler_t.
  + Use pragma once for the header inclusion guard.
  + Remove unused function (#159)
  + Add multiply(), scale(), and add() operators to
    graphene_quaternion_t.
  + Add lerp() operator to all vector types.
  + Add graphene_plane_transform()
  + Documentation updates for graphene_ray_t.
  + Fix graphene_box_get_center() and.
    graphene_box_get_bounding_sphere() (#165)
  + Ensure that we detect empty or infinite boxes in the.
    graphene_box_t API.
- Changes from version 1.9.4:
  + Graphene now uses an ancillary library called µTest for its
    test suite; this means it's possible to build and run the test
    suite without necessarily depending on GLib.
  + the conversion of the Euler angles type to and from matrices and.
    quaternions has been rewritten from scratch, and should not only
    be finally correct, but it should also cover more use cases—namely
    the "proper" Euler angles as well as the Tait–Bryan angles.
  + the ARM NEON implementation of the SIMD types has been improved,
    fixed, and tested, so it's not marked as experimental any more.
  + Require Meson ≥ 0.50.1.
  + Fix graphene_quaternion_equal() to consider the orientation, not
    just the component equality.
  + Fix graphene_quaternion_slerp() to always interpolate along the
    shortest path.
  + Re-implement the conversion of graphene_euler_t to and from
    graphene_matrix_t and graphene_quaternion_t.
  + Add graphene_rectangle_get_area()
  + Document restrictions of graphene_rect_round(), and deprecate the function.
  + Add graphene_rect_round_extents()
  + Port the test suite from GLib's testing utilities to µTest.
  + Remove internal floating point comparisons.
  + Improve the NEON extensions detection code.
  + Fix comparison operators for graphene_simd4f_t on ARM using the
    NEON extensions.
  + Remove the "experimental" compiler warning from the ARM NEON
    implementation of graphene_simd4f_t.
- Changes from version 1.9.2:
  + Add graphene_rect_scale() method.
  + Fix warning from Meson by dropping unnecessary argument to.
    configure_file()
  + Clean up arguments of pkgconfig.generate()
  + Add equality operators to graphene_matrix_t.
  + Add getters for translation components of a graphene_matrix_t.
  + Use darwin_versions argument instead of rolling our own.
  + Add GRAPHENE_RECT_INIT_ZERO</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 1.10.0:
  + API additions, mostly driven by Gthree:
  - Add graphene_matrix_decompose().
  - Add intersection methods to graphene_ray_t.
  - graphene_triangle_init_from_float().
  - graphene_triangle_get_uv().
  + Fix graphene_ray_transform().
  + Documentation fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_libexecdir} instead of %{_prefix}/lib: follow the package
  installer definition.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1592913600">- Update to version 1.10.2:
  + Disable SSE on 32bit builds on Windows with MSVC
  + Add more documentation on the conventions used by matrix
    operations
  + Fix Euler angles/matrix conversion
  + Various bugs fixed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611835200">- Pass conditional Darm_neon=false instead of Darm-neon=true to
  meson, fix build for armv7.
- Stop passing Dbenchmarks=true, no longer recognized nor used.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618488000">- Update to version 1.10.6:
  + Hide GRAPHENE_SIMD_S from the introspection data.
  + Nudge ray axis when intersecting a box.
- Changes from version 1.10.4:
  + Add ARM NEON support when building with Visual Studio.
  + Build fix on ARM64 Windows.
  + Drop deprecated "python3" Meson module.
  + Fix detection of non-intersecting boxes.
  + Only enable SSE2 on x86_64.
  + Use the compiler-appropriate alignment attributes.
  + Change introspection option to a yielding feature.
- Change -Dintrospection=true meson parameter to
  - Dintrospection=enabled: follow upstream build system changes.
- Wrap -Dsse2=true meson parameter into %ifarch x86_64: 32bit
  builds for example do not support sse2 (likely boo#1184678).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 1.10.8:
  + ray:
  - simplify NaN checking.
  - Improve intersection
  + Build fixes.
  + SIMD:
  - Make reciprocal operations 0-safe.
  - Add simplified scalar reciprocal.
  + tests:
  - Fix installed introspection test.
  - Add ray intersection unit.
  + Fix detection of AArch64.
  + Documentation fixes.</changelog>
</package>
<package pkgid="0491b6dcb654b7aeeb9cdc143a15e5f7e3d95cce06373cbaaab17b9ce4715a156276b6feb509bef36b9aec447208180b3ec184e67431fbb359364c682be4793f" name="graphite2-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="slfo.1.1_1.4"/>
  <changelog author="schwab@suse.de" date="1518696000">- gcc8.patch: return correct value from stream operator</changelog>
  <changelog author="pgajdos@suse.com" date="1520856000">- Update to 1.3.11:
- removed patches (upstreamed or not needed)
  * gcc8.patch (code commeted out)
  * graphite-nonvoid-return.patch (code commented out)
  * graphite2-python3_tests.patch (upstreamed)
  * graphite2-python3_tests_cornercases.patch (upstreamed
- refreshed patch
  * link-gcc-shared.diff
- fixes security issue: CVE-2018-7999 [bsc#1084850]
  + graphite2-CVE-2018-7999.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Use python3 everywhere
- Drop fonttools test dep as it pulls TON of py3 packages</changelog>
  <changelog author="pgajdos@suse.com" date="1540468800">- Update to 1.3.12:
    . Graphite no longer does dumb rendering for fonts with no smarts
    . Segment caching code removed. Anything attempting to use the
    segment cache gets given a regular face instead
    . Add libfuzzer support
    . Builds now require C++11
    . Improvements to Windows 64 bit builds
    . Support different versions of python including 32 bit and python 3
    . Various minor bug fixes
- refreshed patch
  % link-gcc-shared.diff
- removed patch
  - graphite2-CVE-2018-7999.patch (upstreamed)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576411200">- BuildIgnore shared-mime-info, pulled in by libglib-2_0-0. Required
  by gvfs to do mime detection, but not required for building.</changelog>
  <changelog author="elimat@opensuse.org" date="1597233600">- Update to 1.3.13:
  * Resolve minor spacing issue in rtl non-overlap kerning
  * python3 for graphite.py
  * Better fuzzing
  * Better building on windows</changelog>
  <changelog author="elimat@opensuse.org" date="1597233601">- Update to 1.3.14:
  * Bug fixes
  * Allow features to be hidden (for aliases)
  * Move to python3
  * Rename doc files from .txt to .asc
- Run spec-cleaner
  * Remove rpm groups
  * Use make macros
  * Use license macro
- Refresh patches:
  * link-gcc-shared.diff
  * graphite2-1.2.0-cmakepath.patch</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
  <changelog author="fstrba@suse.com" date="1643284800">- Fix license header so that it corresponds to SPDX abbreviation</changelog>
  <changelog author="pgajdos@suse.com" date="1695643200">- fixed license string [bsc#1207676]:
  LGPL-2.1-or-later OR MPL-2.0 OR GPL-2.0-or-later</changelog>
</package>
<package pkgid="b8e8748684e9882fcf259de2abff426d91e4de308eae4ff5e32144da5a233501ed0366f6e804c660220c9c8dc68ab33d83413f793a79cc022fd4e7a7f89a7b49" name="grep-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.11" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@suse.com" date="1653393600">- Do not link an unversioned file by URL (and refresh keyring)</changelog>
  <changelog author="dmueller@suse.com" date="1653393601">- use release keyring rather than full one for validation</changelog>
  <changelog author="schwab@suse.de" date="1659528000">- Skip more gnulib tests in qemu build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- GNU grep 3.8:
  * The -P option is now based on PCRE2 instead of the older PCRE
    (boo#1201803)
  * egrep and fgrep commands, deprecated since release 2.5.3 (2007), now
    warn that they are obsolescent and should be replaced by grep -E and
    grep -F
  * The confusing GREP_COLOR environment variable is now obsolescent
  * Regular expressions with stray backslashes now cause warnings
  * Regular expressions like [:space:] are now errors even if
    POSIXLY_CORRECT is set, since POSIX now allows the GNU behavior
  * In locales using UTF-8 encoding, the regular expression '.' no
    longer sometimes fails to match Unicode characters
  * The -s option no longer suppresses "binary file matches"
    messages.
- doc: fix man page syntax errors (bsc#1201001)</changelog>
  <changelog author="schwab@suse.de" date="1663675200">- efgrep-warning.patch: remove warning from [ef]grep</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- Update to grep 3.9
  * With -P, some non-ASCII UTF8 characters were not recognized as
    word-constituent due to our omission of the PCRE2_UCP flag.
  * When given multiple patterns the last of which has a back-reference,
    grep no longer sometimes mistakenly matches lines in some cases</changelog>
  <changelog author="dmueller@suse.com" date="1680177600">- update to 3.10:
  * With -P, \d now matches only ASCII digits, regardless of
    PCRE options/modes. The changes in grep-3.9 to make ^H and \w
    work properly had the undesirable side effect of making \d
    also match e.g., the Arabic digits: ٠١٢٣٤٥٦٧٨٩.
    With grep-3.9, -P '\d+' would match that ten-digit (20-byte)
    string. Now, to match such a digit, you would use \p{Nd}.
    Similarly, \D is now mapped to [^0-9].</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 3.11:
  * With -P, patterns like [\d] now work again. Fixing this
    has caused grep to revert to the behavior of grep 3.8, in that
    patterns like \w and ^H go back to using ASCII rather
    than Unicode interpretations.
    However, future versions of GNU grep and/or PCRE2 are
    likely to fix this and change the behavior of \w and ^H
    back to Unicode again, without breaking [\d] as 3.10 did.</changelog>
  <changelog author="dimstar@opensuse.org" date="1692187200">- export CONFIG_SHELL=/bin/sh before running configure: results in
  the shell script (egrep/fgrep) to receive a /bin/sh shebang
  instead of requiring bash (the local shell used to build).</changelog>
</package>
<package pkgid="02bcff0668f4c57a520d757cf4981bf8eef7ef40070df2c6b8bc9111bd75d8179ab953ea9759647d66285e80a5d91db242c336366161b45ea4057f593d8b5ebf" name="grep-debugsource" arch="aarch64">
  <version epoch="0" ver="3.11" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@suse.com" date="1653393600">- Do not link an unversioned file by URL (and refresh keyring)</changelog>
  <changelog author="dmueller@suse.com" date="1653393601">- use release keyring rather than full one for validation</changelog>
  <changelog author="schwab@suse.de" date="1659528000">- Skip more gnulib tests in qemu build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- GNU grep 3.8:
  * The -P option is now based on PCRE2 instead of the older PCRE
    (boo#1201803)
  * egrep and fgrep commands, deprecated since release 2.5.3 (2007), now
    warn that they are obsolescent and should be replaced by grep -E and
    grep -F
  * The confusing GREP_COLOR environment variable is now obsolescent
  * Regular expressions with stray backslashes now cause warnings
  * Regular expressions like [:space:] are now errors even if
    POSIXLY_CORRECT is set, since POSIX now allows the GNU behavior
  * In locales using UTF-8 encoding, the regular expression '.' no
    longer sometimes fails to match Unicode characters
  * The -s option no longer suppresses "binary file matches"
    messages.
- doc: fix man page syntax errors (bsc#1201001)</changelog>
  <changelog author="schwab@suse.de" date="1663675200">- efgrep-warning.patch: remove warning from [ef]grep</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- Update to grep 3.9
  * With -P, some non-ASCII UTF8 characters were not recognized as
    word-constituent due to our omission of the PCRE2_UCP flag.
  * When given multiple patterns the last of which has a back-reference,
    grep no longer sometimes mistakenly matches lines in some cases</changelog>
  <changelog author="dmueller@suse.com" date="1680177600">- update to 3.10:
  * With -P, \d now matches only ASCII digits, regardless of
    PCRE options/modes. The changes in grep-3.9 to make ^H and \w
    work properly had the undesirable side effect of making \d
    also match e.g., the Arabic digits: ٠١٢٣٤٥٦٧٨٩.
    With grep-3.9, -P '\d+' would match that ten-digit (20-byte)
    string. Now, to match such a digit, you would use \p{Nd}.
    Similarly, \D is now mapped to [^0-9].</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 3.11:
  * With -P, patterns like [\d] now work again. Fixing this
    has caused grep to revert to the behavior of grep 3.8, in that
    patterns like \w and ^H go back to using ASCII rather
    than Unicode interpretations.
    However, future versions of GNU grep and/or PCRE2 are
    likely to fix this and change the behavior of \w and ^H
    back to Unicode again, without breaking [\d] as 3.10 did.</changelog>
  <changelog author="dimstar@opensuse.org" date="1692187200">- export CONFIG_SHELL=/bin/sh before running configure: results in
  the shell script (egrep/fgrep) to receive a /bin/sh shebang
  instead of requiring bash (the local shell used to build).</changelog>
</package>
<package pkgid="466162f320f105e527274414ffbc2030c14739793ae775b89308ec1557fcd14cb9d8cea7757f83a843f6cdab01d394fa4cd93a806ee83d9b970193f85b3b7a2d" name="groff-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.23.0" rel="slfo.1.1_1.4"/>
  <changelog author="lnussel@suse.de" date="1578571200">- don't recommend groff-full as that would pull in X etc by default.
  Instead use packageand on groff and ghostscript-library to only install
  groff-full when other deps are already there.</changelog>
  <changelog author="dimstar@opensuse.org" date="1602331200">- Don't create recursive link 'current' inside
  /usr/share/groff/%{version}.</changelog>
  <changelog author="sbrabec@suse.com" date="1638273600">- Remove /usr/share/groff/current from groff-full. It creates file
  conflicts during version upgrade (bsc#1192195#c8).</changelog>
  <changelog author="sbrabec@suse.com" date="1644235200">- Do not fail with rpm --excludedocs (bsc#1192195).</changelog>
  <changelog author="pgajdos@suse.com" date="1671105600">- set doc-default-operating-system and doc-volume-operating-system
  to $PRETTY_NAME [bsc#1185613]</changelog>
  <changelog author="pgajdos@suse.com" date="1672833600">- set doc-default-operating-system and doc-volume-operating-system
  to SUSE [bsc#1185613c#5], $PRETTY_NAME cannot be used build time</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- ship %{_docdir}/groff/pdf also in groff-doc [bsc#1208498]</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1693310400">- Update to 1.23.0:
  * Too many changes, see NEWS file for details.
- Refreshed patches:
  * 0002-documentation-for-the-locale-keyword.patch
  * 0004-don-t-use-usr-bin-env-in-shebang.patch
  * groff-1.20.1-deunicode.patch
  * groff-1.20.1-nroff-empty-LANGUAGE.patch
  * groff-1.21-CVE-2009-5081.patch
  * groff-force-locale-usage.patch
- Drop sort-perl-hash-keys.patch (upstreamed)
- Drop doc-volume-operating-system and doc-default-operating-system
  changes (doesn't default to BSD anymore)
- Configure flag --with-appresdir has been renamed to --with-appdefdir
- Update file list with files that were removed from the package</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1694174400">- Refresh bash-scripts.patch
- Add nroff-map-CW-to-R.patch
  * Fixes man-db build errors</changelog>
  <changelog author="luc14n0@opensuse.org" date="1696420800">- Define ext_man="%{?ext_man}%{!?ext_man:.gz}" shell variable in
  the install directive, and replace "%{?ext_man}" with
  "${ext_man:-}" to fix groff-gf.7.gz file ending up uncompressed
  (despite the name) due to the use of %{?ext_man} in the mv/ln
  TARGET parameter used for the preparation of Alternatives. Also
  define a simple shell contruct which identifies whether the
  manpage file is compressed. If not, it unsets the $ext_man
  variable, then ajdusting the mv/ln calls. That's all necessary
  because even though ext_man macro is defined, it doesn't mean the
  file has the extension (which dependes whether the build script
  compresses it).</changelog>
</package>
<package pkgid="e7c282c97d8c206c747c4297d26c62e439771cd4362e4510a014cf298774cd0ce178ab78a7843b54e7c85f9463877d96ee00e40ad36d2083db0deff3ee4fe43a" name="groff-debugsource" arch="aarch64">
  <version epoch="0" ver="1.23.0" rel="slfo.1.1_1.4"/>
  <changelog author="lnussel@suse.de" date="1578571200">- don't recommend groff-full as that would pull in X etc by default.
  Instead use packageand on groff and ghostscript-library to only install
  groff-full when other deps are already there.</changelog>
  <changelog author="dimstar@opensuse.org" date="1602331200">- Don't create recursive link 'current' inside
  /usr/share/groff/%{version}.</changelog>
  <changelog author="sbrabec@suse.com" date="1638273600">- Remove /usr/share/groff/current from groff-full. It creates file
  conflicts during version upgrade (bsc#1192195#c8).</changelog>
  <changelog author="sbrabec@suse.com" date="1644235200">- Do not fail with rpm --excludedocs (bsc#1192195).</changelog>
  <changelog author="pgajdos@suse.com" date="1671105600">- set doc-default-operating-system and doc-volume-operating-system
  to $PRETTY_NAME [bsc#1185613]</changelog>
  <changelog author="pgajdos@suse.com" date="1672833600">- set doc-default-operating-system and doc-volume-operating-system
  to SUSE [bsc#1185613c#5], $PRETTY_NAME cannot be used build time</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- ship %{_docdir}/groff/pdf also in groff-doc [bsc#1208498]</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1693310400">- Update to 1.23.0:
  * Too many changes, see NEWS file for details.
- Refreshed patches:
  * 0002-documentation-for-the-locale-keyword.patch
  * 0004-don-t-use-usr-bin-env-in-shebang.patch
  * groff-1.20.1-deunicode.patch
  * groff-1.20.1-nroff-empty-LANGUAGE.patch
  * groff-1.21-CVE-2009-5081.patch
  * groff-force-locale-usage.patch
- Drop sort-perl-hash-keys.patch (upstreamed)
- Drop doc-volume-operating-system and doc-default-operating-system
  changes (doesn't default to BSD anymore)
- Configure flag --with-appresdir has been renamed to --with-appdefdir
- Update file list with files that were removed from the package</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1694174400">- Refresh bash-scripts.patch
- Add nroff-map-CW-to-R.patch
  * Fixes man-db build errors</changelog>
  <changelog author="luc14n0@opensuse.org" date="1696420800">- Define ext_man="%{?ext_man}%{!?ext_man:.gz}" shell variable in
  the install directive, and replace "%{?ext_man}" with
  "${ext_man:-}" to fix groff-gf.7.gz file ending up uncompressed
  (despite the name) due to the use of %{?ext_man} in the mv/ln
  TARGET parameter used for the preparation of Alternatives. Also
  define a simple shell contruct which identifies whether the
  manpage file is compressed. If not, it unsets the $ext_man
  variable, then ajdusting the mv/ln calls. That's all necessary
  because even though ext_man macro is defined, it doesn't mean the
  file has the extension (which dependes whether the build script
  compresses it).</changelog>
</package>
<package pkgid="ffc04f7137b0b22639ecd3911eb46713ac606e79c18a25561b1c9cbe101d8aa108ca2314c4ced04cebbc5be5c2e137e350734090136f5112c62ecd35835a9e6f" name="grub2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.12" rel="slfo.1.1_4.1"/>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1730289600">- Fix CVE-2024-49504 (bsc#1229163) (bsc#1229164)
- Restrict CLI access if the encrypted root device is automatically unlocked by
  the TPM. LUKS password authentication is required for access to be granted
  * 0001-cli_lock-Add-build-option-to-block-command-line-inte.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Obsolete, as CLI access is now locked and granted access no longer requires
  the previous restrictions
  * 0002-Restrict-file-access-on-cryptodisk-print.patch
  * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
- Rediff
  * 0004-Key-revocation-on-out-of-bound-file-access.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="glin@suse.com" date="1753876800">- Update the patch to fix "SRK not matched" errors when unsealing
  the key (bsc#1232411) (bsc#1247242)
  * 0001-tpm2-Add-extra-RSA-SRK-types.patch</changelog>
  <changelog author="glin@suse.com" date="1753876801">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1757505600">- Fix OOM error in loading loopback file (bsc#1230840) (bsc#1249140)
  * 0001-tpm-Skip-loopback-image-measurement.patch</changelog>
  <changelog author="mchang@suse.com" date="1759924800">- Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="glin@suse.com" date="1768910400">- Optimize PBKDF2 to reduce the decryption time (bsc#1248516)
  * 0001-lib-crypto-Introduce-new-HMAC-functions-to-reuse-buf.patch
  * 0002-lib-pbkdf2-Optimize-PBKDF2-by-reusing-HMAC-handle.patch
  * 0001-kern-misc-Implement-faster-grub_memcpy-for-aligned-b.patch</changelog>
</package>
<package pkgid="049f9e543a53c9a8bfc8716b047c7deeb9ee72a60e93192e56fcc9178164fae2a7eee2d85f9b39899266edd9b2655ff723dcc7a48d51083ac742eb5658690553" name="grub2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.12" rel="slfo.1.1_4.1"/>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1730289600">- Fix CVE-2024-49504 (bsc#1229163) (bsc#1229164)
- Restrict CLI access if the encrypted root device is automatically unlocked by
  the TPM. LUKS password authentication is required for access to be granted
  * 0001-cli_lock-Add-build-option-to-block-command-line-inte.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Obsolete, as CLI access is now locked and granted access no longer requires
  the previous restrictions
  * 0002-Restrict-file-access-on-cryptodisk-print.patch
  * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
- Rediff
  * 0004-Key-revocation-on-out-of-bound-file-access.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="glin@suse.com" date="1753876800">- Update the patch to fix "SRK not matched" errors when unsealing
  the key (bsc#1232411) (bsc#1247242)
  * 0001-tpm2-Add-extra-RSA-SRK-types.patch</changelog>
  <changelog author="glin@suse.com" date="1753876801">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1757505600">- Fix OOM error in loading loopback file (bsc#1230840) (bsc#1249140)
  * 0001-tpm-Skip-loopback-image-measurement.patch</changelog>
  <changelog author="mchang@suse.com" date="1759924800">- Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="glin@suse.com" date="1768910400">- Optimize PBKDF2 to reduce the decryption time (bsc#1248516)
  * 0001-lib-crypto-Introduce-new-HMAC-functions-to-reuse-buf.patch
  * 0002-lib-pbkdf2-Optimize-PBKDF2-by-reusing-HMAC-handle.patch
  * 0001-kern-misc-Implement-faster-grub_memcpy-for-aligned-b.patch</changelog>
</package>
<package pkgid="e2012b05b3077b8dc406b2c2b5581e5099d642f7888b8083cf2c5e64f8d3d8ddf2644ab9b442ae0554251c3b7cce2296d8ecbdaafecd4b4b97c2b6cfdcf8ac7e" name="gstreamer-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_2.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + Highlighted bugfixes in 1.22.9
  - More Security fixes for the AV1 video codec parser
  - va: fixes for Mesa Gallium drivers in Mesa versions older
    than v23.2
  - v4l2src: Consider framerate during caps selection
  - v4l2codec: decoder fixes
  - rtspsrc: multicast fixes
  - camerabin viewfinder fixes
  - various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer
  - aggregator: fix use-after-free in queries processing
  - multiqueue: Ignore queue fullness for most events
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Rebase patches:
  * gstreamer-pie.patch
  * gstreamer-rpm-prov.patch
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="alarrosa@suse.com" date="1710158400">- Add patch to remove the (wrong) check for relocated library which
  is making gstreamer fail to find the gst-plugin-scanner helper
  binary, thus using the installation path set at build time
  (boo#1221150):
  * force-find-gst-plugin-scanner.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710158401">- Add patch from upstream to not install ptp-helper test executable
  * 0001-ptp-Dont-install-test-executable.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Replace the quick fix for boo#1221150 with the version submitted
  to upstream at
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/6322:
  * 0001-Canonicalize-the-library-path-returned-by-dladdr.patch
- Remove previous version of the fix for boo#1221150:
  * force-find-gst-plugin-scanner.patch
- Fix sed command to set the gst-plugin-scanner suffix correctly
- Add preventive checks for the sed commands that set the binary
  suffix so that they don't silently fail anymore.</changelog>
  <changelog author="pgajdos@suse.com" date="1714392000">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop 0001-Canonicalize-the-library-path-returned-by-dladdr.patch
  and 0001-ptp-Dont-install-test-executable.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + Highlighted bugfixes:
  - Fix APE and Musepack audio file and GIF playback with FFmpeg
    7.0
  - playbin3: Fix potential deadlock with multiple playbin3s with
    glimagesink used in parallel
  - qt6: various qmlgl6src and qmlgl6sink fixes and improvements
  - rtspsrc: expose property to force usage of non-compliant
    setup URLs for RTSP servers where the automatic fallback
    doesn't work
  - urisourcebin: gapless playback and program switching fixes
  - v4l2: various fixes
  - va: Fix potential deadlock with multiple va elements used in
    parallel
  - meson: option to disable gst-full for static-library build
    configurations that do not need this
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + gstreamer:
  - bin: Don't keep the object lock while setting a GstContext
    when handling NEED_CONTEXT
  - core: Log pad name, not just the pointer</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add CVE-2024-47606.patch: avoid integer overflow when allocating
  sysmem (boo#1234449 CVE-2024-47606).</changelog>
</package>
<package pkgid="f00179ed007e85e99037156c953de1cb69bd746a6c52fd01cd63d6ecf7262452a465ba43a280bd98afc1f6da849dd21614eb75c1b8fb18d8f5d28967e93ab8cd" name="gstreamer-debugsource" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_2.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + Highlighted bugfixes in 1.22.9
  - More Security fixes for the AV1 video codec parser
  - va: fixes for Mesa Gallium drivers in Mesa versions older
    than v23.2
  - v4l2src: Consider framerate during caps selection
  - v4l2codec: decoder fixes
  - rtspsrc: multicast fixes
  - camerabin viewfinder fixes
  - various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer
  - aggregator: fix use-after-free in queries processing
  - multiqueue: Ignore queue fullness for most events
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Rebase patches:
  * gstreamer-pie.patch
  * gstreamer-rpm-prov.patch
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="alarrosa@suse.com" date="1710158400">- Add patch to remove the (wrong) check for relocated library which
  is making gstreamer fail to find the gst-plugin-scanner helper
  binary, thus using the installation path set at build time
  (boo#1221150):
  * force-find-gst-plugin-scanner.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710158401">- Add patch from upstream to not install ptp-helper test executable
  * 0001-ptp-Dont-install-test-executable.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Replace the quick fix for boo#1221150 with the version submitted
  to upstream at
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/6322:
  * 0001-Canonicalize-the-library-path-returned-by-dladdr.patch
- Remove previous version of the fix for boo#1221150:
  * force-find-gst-plugin-scanner.patch
- Fix sed command to set the gst-plugin-scanner suffix correctly
- Add preventive checks for the sed commands that set the binary
  suffix so that they don't silently fail anymore.</changelog>
  <changelog author="pgajdos@suse.com" date="1714392000">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop 0001-Canonicalize-the-library-path-returned-by-dladdr.patch
  and 0001-ptp-Dont-install-test-executable.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + Highlighted bugfixes:
  - Fix APE and Musepack audio file and GIF playback with FFmpeg
    7.0
  - playbin3: Fix potential deadlock with multiple playbin3s with
    glimagesink used in parallel
  - qt6: various qmlgl6src and qmlgl6sink fixes and improvements
  - rtspsrc: expose property to force usage of non-compliant
    setup URLs for RTSP servers where the automatic fallback
    doesn't work
  - urisourcebin: gapless playback and program switching fixes
  - v4l2: various fixes
  - va: Fix potential deadlock with multiple va elements used in
    parallel
  - meson: option to disable gst-full for static-library build
    configurations that do not need this
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + gstreamer:
  - bin: Don't keep the object lock while setting a GstContext
    when handling NEED_CONTEXT
  - core: Log pad name, not just the pointer</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add CVE-2024-47606.patch: avoid integer overflow when allocating
  sysmem (boo#1234449 CVE-2024-47606).</changelog>
</package>
<package pkgid="995ea5feccdb9173126de71de323192e8789b8f865819e2542b07c3469264e2a40300e2f418a99fd61729b84a8e4cc0d2d9f99339ca700648f580aa818acc14f" name="gstreamer-plugins-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop gst-plugins-base-audiobasesink-gap.patch and
  gstreamer-plugins-base-CVE-2024-4453.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="jonaski@opensuse.org" date="1724241600">- Add gst-plugins-base-decodebin3-collection-identity-check.patch:
  - Fixes a assertion causing crash on track change. Upstream bug:
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3742</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + pbutils: descriptions: use subsampling factor to get YUV
    subsampling
  + rtspconnection: Handle invalid argument properly
  + urisourcebin:
  - Actually drop EOS on old-school pad switch
  - Don't hold lock when emitting about-to-finish
  + gst-launch deadlock with two playbin3s
  + xvimagesink: Fix crash in pool on error</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)
  + CVE-2024-47607.patch (boo#1234455 CVE-2024-47607)</changelog>
  <changelog author="mgorse@suse.com" date="1752494400">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="26a5c7f358f0fd249d0b4f3d7bd0246f9288e12cb48b7eb782700e086c38dc9c804f119525e6e3d864eb7d8308248e3bc347bfd2b221d4898b3aeae842b3e409" name="gstreamer-plugins-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop gst-plugins-base-audiobasesink-gap.patch and
  gstreamer-plugins-base-CVE-2024-4453.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="jonaski@opensuse.org" date="1724241600">- Add gst-plugins-base-decodebin3-collection-identity-check.patch:
  - Fixes a assertion causing crash on track change. Upstream bug:
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3742</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + pbutils: descriptions: use subsampling factor to get YUV
    subsampling
  + rtspconnection: Handle invalid argument properly
  + urisourcebin:
  - Actually drop EOS on old-school pad switch
  - Don't hold lock when emitting about-to-finish
  + gst-launch deadlock with two playbin3s
  + xvimagesink: Fix crash in pool on error</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)
  + CVE-2024-47607.patch (boo#1234455 CVE-2024-47607)</changelog>
  <changelog author="mgorse@suse.com" date="1752494400">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="3b652fcfccd8ced27e4cba3024275c3d93defe8937df2cfdd32c292ace45a0cf5c27882be359f1b9b096f1e3a13966923e5e55d3eef01ef24954b47981117c08" name="gtk3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.24.43" rel="slfo.1.1_2.1"/>
  <changelog author="yfjiang@suse.com" date="1696766400">- Revert RPM ternary operations on SLE where rpm version is not
  ready.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 3.24.38+111:
  + [gtk3] Support tiled windows from xdg-shell.
  + Fix a minor issue in the file portal test.
  + wayland: Be more careful when loading cursors.
  + gdk/wayland: Use g_warning_once for cursor scale mismatches.
  + gdk/wayland: Don't fall back directly to 1 for mismatched
    cursor sizes.
  + Updated translations.
- Drop upstream applied patch
  gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Update to version 3.24.39+23:
  * gdkdisplay-wayland: Init selection before roundtrips
  * Use consistent coordinates in get_toplevel_from_ns_event.
  * emoji: Update data to CLDR v44
  * emoji: Update data to CLDR v43
  * add hi-ja-et-fi-nb-th for gtkemojichooser
  * add bengali language bn.data for gtkemojichooser
  * emoji: Add more locales
  * emoji: Update data to CLDR v40
  * emoji: Fix the convert-emoji program
  * gtkgesture: Preserve accuracy when translating events
  * pathbar: Handle webdav where is the root is a path
  * GtkTooltip: Fix tooltip positioning on X11
  * gdkkeys-win32c: change registry key not found g_warning to g_debug
  * [gtk3/wayland] Expose XDG-shell suspended state via visibility events.
  * [gtk3/wayland] Only request v2 of xdg_wm_base.
  * test-msys2-meson: fix pipeline failure on GTK3
  * wayland: Fix wl_buffer size for custom cursors
  * GtkMenu: Fix positioning when attached to offscreen windows
  * gdk_display_get_monitor_at_window: Check for offscreen windows
  * GdkWindow: check for same impl class in set_transient_for ()
  * [gtk3] Cherry-pick gtkfilechoosernativeportal fixes from gtk4
  * wayland: Avoid more legacy cursor names
  * Fall back to the 'default' cursor</changelog>
  <changelog author="dimstar@opensuse.org" date="1705579200">- Update to version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Update to version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Update to version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1720699200">- Update to version 3.24.43:
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729166400">- Eliminate usage of update-alternatives: GTK2 no longer provides
  gtk-update-icon-cache, thus eliminating the need for this extra
  complexity.</changelog>
</package>
<package pkgid="33ee972b5b8575f2b295eaac0a7f03e3705e5921800f0cdc038ef6ca1fd03a8ccd089eb45a4ed794d47b52202087a93d8f75ec2a1eda4b6f25c77f2541716cff" name="gtk3-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.24.43" rel="slfo.1.1_2.1"/>
  <changelog author="yfjiang@suse.com" date="1696766400">- Revert RPM ternary operations on SLE where rpm version is not
  ready.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 3.24.38+111:
  + [gtk3] Support tiled windows from xdg-shell.
  + Fix a minor issue in the file portal test.
  + wayland: Be more careful when loading cursors.
  + gdk/wayland: Use g_warning_once for cursor scale mismatches.
  + gdk/wayland: Don't fall back directly to 1 for mismatched
    cursor sizes.
  + Updated translations.
- Drop upstream applied patch
  gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Update to version 3.24.39+23:
  * gdkdisplay-wayland: Init selection before roundtrips
  * Use consistent coordinates in get_toplevel_from_ns_event.
  * emoji: Update data to CLDR v44
  * emoji: Update data to CLDR v43
  * add hi-ja-et-fi-nb-th for gtkemojichooser
  * add bengali language bn.data for gtkemojichooser
  * emoji: Add more locales
  * emoji: Update data to CLDR v40
  * emoji: Fix the convert-emoji program
  * gtkgesture: Preserve accuracy when translating events
  * pathbar: Handle webdav where is the root is a path
  * GtkTooltip: Fix tooltip positioning on X11
  * gdkkeys-win32c: change registry key not found g_warning to g_debug
  * [gtk3/wayland] Expose XDG-shell suspended state via visibility events.
  * [gtk3/wayland] Only request v2 of xdg_wm_base.
  * test-msys2-meson: fix pipeline failure on GTK3
  * wayland: Fix wl_buffer size for custom cursors
  * GtkMenu: Fix positioning when attached to offscreen windows
  * gdk_display_get_monitor_at_window: Check for offscreen windows
  * GdkWindow: check for same impl class in set_transient_for ()
  * [gtk3] Cherry-pick gtkfilechoosernativeportal fixes from gtk4
  * wayland: Avoid more legacy cursor names
  * Fall back to the 'default' cursor</changelog>
  <changelog author="dimstar@opensuse.org" date="1705579200">- Update to version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Update to version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Update to version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1720699200">- Update to version 3.24.43:
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729166400">- Eliminate usage of update-alternatives: GTK2 no longer provides
  gtk-update-icon-cache, thus eliminating the need for this extra
  complexity.</changelog>
</package>
<package pkgid="fae36ca5c95734b928ac81b5ca13235558e9e2c88d7dff6669672b662481f285d72e560ff310cf72e8499d00b5c9fa9e67828361cc5694eb82c94e7f4a4f9ee8" name="guestfs-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.52.0" rel="slfo.1.1_1.2"/>
  <changelog author="carnold@suse.com" date="1674648000">- Update to version 1.48.3 bug fix release
  * jsc#PED-2113
  * No upstream changelog found in sources or webpage</changelog>
  <changelog author="carnold@suse.com" date="1675944000">- Update to verion 1.50.0
  * Drivers: Require guestfs_inspect_get_build_id API
  * Drivers: Add support for scanning drivers in Windows guests
  * New 'virt-drivers' tool
    This tool can be pointed at a disk image which lacks metadata and in
    some circumstances can determine useful information about it, such as
    what bootloader it contains and what device emulation it needs to
    boot.
  * Customize: Implement --inject-qemu-ga and --inject-virtio-win operations
  * Customize: Run zypper dist-upgrade for --update operation
  * Customize: rebase to the common/mlcustomize/Guest_packages interface
  * Adopt inversion of SELinux relabeling in virt-customize
  * Update common submodule. In particular, pick up the new Inject_virtio_win module:
  * Inspector: Update coreos test for new &lt;build_id&gt; field
  * Inspector: Display the new build ID field
  * Sysprep: advise against cloning VMs with internal full disk encryption
  * Sysprep: make an effort to cope with LUKS-on-LVM
  * Fixes related to "--key ID:clevis"
    sysprep: set networking for "--key ID:clevis"
    customize: add reminder about "--key ID:clevis"
    get-kernel, sparsify: set networking for "--key ID:clevis"
    cat, log, ls, tail, diff, edit, insp.: set networking for "--key ID:clevis"
  * Builder: templates: Account for UEFI when regenerating grub
  * Ocaml-dep.sh.in: Remove reference to bundled/ocaml-augeas
- Drop CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1679054400">- Use gzip -n for bit-reproducible packages</changelog>
  <changelog author="carnold@suse.com" date="1682942400">- Update to version 1.50.1 bug fix release
  * No upstream changelog found in sources or webpage</changelog>
  <changelog author="carnold@suse.com" date="1701172800">- Update to version 1.51.5
  * No upstream changelog found in sources or webpage
  * customize: Change --chown to use UID:GID:FILENAME
  * Implement virt-customize --tar-in
  * Dropped the virt-dib tool
  * Various bug fixes and language translations</changelog>
  <changelog author="olaf@aepfle.de" date="1701345600">- Remove obsolete requirement for ocaml-gettext-stub-devel
- Require OCaml 4.07+</changelog>
  <changelog author="carnold@suse.com" date="1702296000">- Update to version 1.51.6
  * Include &lt;libxml/parser.h&gt; for xmlReadMemory
  * Test new --key all:SELECTOR option</changelog>
  <changelog author="carnold@suse.com" date="1704369600">- Update to version 1.52.0 (jsc#PED-6305)
  * mltools/libosinfo-c.c: Fix off-by-one error
  * Documentation fixes
  * Fix bugs-in-changelog.sh: Use grep -E instead of egrep</changelog>
  <changelog author="carnold@suse.com" date="1711713600">- Upstream bug fixes
  Update-virt-customize-generated-files.patch
  Initialise-bar-fp-as-NULL.patch</changelog>
  <changelog author="carnold@suse.com" date="1715083200">- Add Requires on libguestfs which will pull in
  libguestfs-appliance and all its dependencies. (bsc#1223444)
  guestfs-tools.spec</changelog>
</package>
<package pkgid="06e0df673e089ed880c2c65b70f8100e6cd42ab88907d437164c6bbcd2ea224499ecd838d1536bb2c322855f07c0186d3bfe9a6a97441ae288827452b3917023" name="guestfs-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="1.52.0" rel="slfo.1.1_1.2"/>
  <changelog author="carnold@suse.com" date="1674648000">- Update to version 1.48.3 bug fix release
  * jsc#PED-2113
  * No upstream changelog found in sources or webpage</changelog>
  <changelog author="carnold@suse.com" date="1675944000">- Update to verion 1.50.0
  * Drivers: Require guestfs_inspect_get_build_id API
  * Drivers: Add support for scanning drivers in Windows guests
  * New 'virt-drivers' tool
    This tool can be pointed at a disk image which lacks metadata and in
    some circumstances can determine useful information about it, such as
    what bootloader it contains and what device emulation it needs to
    boot.
  * Customize: Implement --inject-qemu-ga and --inject-virtio-win operations
  * Customize: Run zypper dist-upgrade for --update operation
  * Customize: rebase to the common/mlcustomize/Guest_packages interface
  * Adopt inversion of SELinux relabeling in virt-customize
  * Update common submodule. In particular, pick up the new Inject_virtio_win module:
  * Inspector: Update coreos test for new &lt;build_id&gt; field
  * Inspector: Display the new build ID field
  * Sysprep: advise against cloning VMs with internal full disk encryption
  * Sysprep: make an effort to cope with LUKS-on-LVM
  * Fixes related to "--key ID:clevis"
    sysprep: set networking for "--key ID:clevis"
    customize: add reminder about "--key ID:clevis"
    get-kernel, sparsify: set networking for "--key ID:clevis"
    cat, log, ls, tail, diff, edit, insp.: set networking for "--key ID:clevis"
  * Builder: templates: Account for UEFI when regenerating grub
  * Ocaml-dep.sh.in: Remove reference to bundled/ocaml-augeas
- Drop CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1679054400">- Use gzip -n for bit-reproducible packages</changelog>
  <changelog author="carnold@suse.com" date="1682942400">- Update to version 1.50.1 bug fix release
  * No upstream changelog found in sources or webpage</changelog>
  <changelog author="carnold@suse.com" date="1701172800">- Update to version 1.51.5
  * No upstream changelog found in sources or webpage
  * customize: Change --chown to use UID:GID:FILENAME
  * Implement virt-customize --tar-in
  * Dropped the virt-dib tool
  * Various bug fixes and language translations</changelog>
  <changelog author="olaf@aepfle.de" date="1701345600">- Remove obsolete requirement for ocaml-gettext-stub-devel
- Require OCaml 4.07+</changelog>
  <changelog author="carnold@suse.com" date="1702296000">- Update to version 1.51.6
  * Include &lt;libxml/parser.h&gt; for xmlReadMemory
  * Test new --key all:SELECTOR option</changelog>
  <changelog author="carnold@suse.com" date="1704369600">- Update to version 1.52.0 (jsc#PED-6305)
  * mltools/libosinfo-c.c: Fix off-by-one error
  * Documentation fixes
  * Fix bugs-in-changelog.sh: Use grep -E instead of egrep</changelog>
  <changelog author="carnold@suse.com" date="1711713600">- Upstream bug fixes
  Update-virt-customize-generated-files.patch
  Initialise-bar-fp-as-NULL.patch</changelog>
  <changelog author="carnold@suse.com" date="1715083200">- Add Requires on libguestfs which will pull in
  libguestfs-appliance and all its dependencies. (bsc#1223444)
  guestfs-tools.spec</changelog>
</package>
<package pkgid="6c29070504872a1f16eb09cde82a040737bdad0e28ded1c5e5546a12dae4204e64f837f905ccc253653384ddefc35fcca486501669629ffbf01b592b9308bd40" name="gzip-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.13" rel="slfo.1.1_2.4"/>
  <changelog author="fbui@suse.com" date="1624449600">- Avoid text relocation on i386 (bsc#1143125)
  Text relocation doesn't cope well with some security hardening which
  consists in prohibiting attempts to change memory mappings to become
  executable.
  Hence disable the use of assembler code and get rid of text
  relocations especially since the assembler code is slower than the
  code generated by gcc according to Fedora. According to Debian this
  also fixes gzip generating different results on ia64.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631188800">- Update to 1.11:
  * Performance improvements
  * Added hardware acceleration for IBM Z
- Refresh patches:
  * manpage-no-date.patch
  * xz_lzma.patch
- Remove upstreamed patches:
  * gzip-1.10-fix-DFLTCC-segfault.patch
  * gzip-1.10-fix_count_of_lines_to_skip.patch
  * gzip-1.10-ibm_dfltcc_support.patch</changelog>
  <changelog author="dmueller@suse.com" date="1643544000">- add conflicts/provides for alternative(gzip)
- modernize spec file</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 1.12 (CVE-2022-1271,bsc#1198062):
  * 'gzip -l' no longer misreports file lengths 4 GiB and larger.
    Previously, 'gzip -l' output the 32-bit value stored in the gzip
    header even though that is the uncompressed length modulo 2**32.
    Now, 'gzip -l' calculates the uncompressed length by decompressing
    the data and counting the resulting bytes.  Although this can take
    much more time, nowadays the correctness pros seem to outweigh the
    performance cons.
  * 'zless' is no longer installed on platforms lacking 'less'.
  * zgrep applied to a crafted file name with two or more newlines
    can no longer overwrite an arbitrary, attacker-selected file.
    [bug introduced in gzip-1.3.10]
  * zgrep now names input file on error instead of mislabeling it as
    "(standard input)", if grep supports the GNU -H and --label options.
  * 'zdiff -C 5' no longer misbehaves by treating '5' as a file name.
  * Configure-time options like --program-prefix now work.
- refresh zdiff.diff, zgrep.diff, zmore.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Rename xz_lzma.patch xz_lzma_zstd.patch and expand the patch to
  supprt zstd compression (boo#1198922).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1692187200">- export CONFIG_SHELL=/bin/sh before running configure: results in
  the shell script (zcat/zgrep/…) to receive a /bin/sh shebang
  instead of requiring bash (the local shell used to build).
- Use for i in $(seq 1 9) instead of bashism for in in {1..9}, and
  drop buildshell definition to require bash.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1693396800">- Update to 1.13:
  * zless now diagnoses gzip failures, if using less 623 or later.
  * When SIGPIPE is ignored, gzip now exits with status 2 (warning)
  instead of status 1 (error) when writing to a broken pipe.  This is
  more useful with programs like 'less' that treat gzip exit status 2
  as a non-failure.
  * 'gzip -d' no longer fails to report invalid compressed data
  that uses a dictionary distance outside the input window.
  [bug present since the beginning]
  * Port to C23, which does not allow K&amp;R-style function definitions
  with parameters, and which does not define __alignas_is_defined.
- Refreshed manpage-no-date.patch</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1698148800">- Fix s390x build with 'gcc -Dalignas=_Alignas' bug#66709</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="37f750e44843438c8139a565a1a27f934d90beb12dc7967a5b6fc2f2c9edb879556f1474a7ec4ff066631a68ad92ad1a86de4d0abb057fd289776c0dd9744315" name="gzip-debugsource" arch="aarch64">
  <version epoch="0" ver="1.13" rel="slfo.1.1_2.4"/>
  <changelog author="fbui@suse.com" date="1624449600">- Avoid text relocation on i386 (bsc#1143125)
  Text relocation doesn't cope well with some security hardening which
  consists in prohibiting attempts to change memory mappings to become
  executable.
  Hence disable the use of assembler code and get rid of text
  relocations especially since the assembler code is slower than the
  code generated by gcc according to Fedora. According to Debian this
  also fixes gzip generating different results on ia64.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631188800">- Update to 1.11:
  * Performance improvements
  * Added hardware acceleration for IBM Z
- Refresh patches:
  * manpage-no-date.patch
  * xz_lzma.patch
- Remove upstreamed patches:
  * gzip-1.10-fix-DFLTCC-segfault.patch
  * gzip-1.10-fix_count_of_lines_to_skip.patch
  * gzip-1.10-ibm_dfltcc_support.patch</changelog>
  <changelog author="dmueller@suse.com" date="1643544000">- add conflicts/provides for alternative(gzip)
- modernize spec file</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 1.12 (CVE-2022-1271,bsc#1198062):
  * 'gzip -l' no longer misreports file lengths 4 GiB and larger.
    Previously, 'gzip -l' output the 32-bit value stored in the gzip
    header even though that is the uncompressed length modulo 2**32.
    Now, 'gzip -l' calculates the uncompressed length by decompressing
    the data and counting the resulting bytes.  Although this can take
    much more time, nowadays the correctness pros seem to outweigh the
    performance cons.
  * 'zless' is no longer installed on platforms lacking 'less'.
  * zgrep applied to a crafted file name with two or more newlines
    can no longer overwrite an arbitrary, attacker-selected file.
    [bug introduced in gzip-1.3.10]
  * zgrep now names input file on error instead of mislabeling it as
    "(standard input)", if grep supports the GNU -H and --label options.
  * 'zdiff -C 5' no longer misbehaves by treating '5' as a file name.
  * Configure-time options like --program-prefix now work.
- refresh zdiff.diff, zgrep.diff, zmore.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Rename xz_lzma.patch xz_lzma_zstd.patch and expand the patch to
  supprt zstd compression (boo#1198922).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1692187200">- export CONFIG_SHELL=/bin/sh before running configure: results in
  the shell script (zcat/zgrep/…) to receive a /bin/sh shebang
  instead of requiring bash (the local shell used to build).
- Use for i in $(seq 1 9) instead of bashism for in in {1..9}, and
  drop buildshell definition to require bash.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1693396800">- Update to 1.13:
  * zless now diagnoses gzip failures, if using less 623 or later.
  * When SIGPIPE is ignored, gzip now exits with status 2 (warning)
  instead of status 1 (error) when writing to a broken pipe.  This is
  more useful with programs like 'less' that treat gzip exit status 2
  as a non-failure.
  * 'gzip -d' no longer fails to report invalid compressed data
  that uses a dictionary distance outside the input window.
  [bug present since the beginning]
  * Port to C23, which does not allow K&amp;R-style function definitions
  with parameters, and which does not define __alignas_is_defined.
- Refreshed manpage-no-date.patch</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1698148800">- Fix s390x build with 'gcc -Dalignas=_Alignas' bug#66709</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="8f1c798a668dd9ccc7820c8f24ae1c84e8b0a82e552abdfa9505e52e9f15bb980b9321c8fedd6a5637b741fb3df55898f93ae846c859b00d5b988f9695128013" name="haproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.8.11+git0.01c1056a4" rel="slfo.1.1_2.1"/>
  <changelog author="mrueckert@suse.de" date="1683028800">- Update to version 2.7.8+git0.58c657f26:
  * [RELEASE] Released version 2.7.8
  * MINOR: listener: remove the now useless LI_F_QUIC_LISTENER flag</changelog>
  <changelog author="mrueckert@suse.de" date="1685534400">- Update to version 2.8.0+git0.fdd8154ed:
  https://www.mail-archive.com/haproxy@formilux.org/msg43600.html</changelog>
  <changelog author="mrueckert@suse.de" date="1685534401">- Refreshed patches to apply cleanly again:
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
- Updated series file: removed outdated patches</changelog>
  <changelog author="mrueckert@suse.de" date="1688385600">- Update to version 2.8.1+git0.a90123aa8:
  * [RELEASE] Released version 2.8.1
  * CLEANUP: quic: Remove server specific about Initial packet number space
  * MINOR: quic: Reduce the maximum length of TLS secrets
  * MINOR: quic: Move packet number space related functions
  * MINOR: quic: Move QUIC encryption level structure definition
  * BUILD: debug: avoid a build warning related to epoll_wait() in debug code
  * MINOR: compression/slz: add support for a pure flush of pending bytes
  * IMPORT: slz: implement a synchronous flush() operation
  * BUG/MINOR: quic: Wrong endianess for version field in Retry token
  * BUG/MINOR: quic: Wrong Retry paquet version field endianess
  * BUG/MINOR: quic: Missing random bits in Retry packet header
  * BUG/MINOR: config: fix stick table duplicate name check
  * BUG/MEDIUM: quic: error checking buffer large enought to receive the retry tag
  * BUG/MINOR: quic: Prevent deadlock with CID tree lock
  * BUG/MINOR: mworker: leak of a socketpair during startup failure
  * BUG/MINOR: http_ext: fix if-none regression in forwardfor option
  * DOC: Attempt to fix dconv parsing error for tune.h2.fe.initial-window-size
  * REGTESTS: h1_host_normalization : Add a barrier to not mix up log messages
  * DOC: Add tune.h2.max-frame-size option to table of contents
  * DOC: Add tune.h2.be.* and tune.h2.fe.* options to table of contents
  * BUG/MINOR: quic: ticks comparison without ticks API use
  * BUG/MEDIUM: mworker: increase maxsock with each new worker
  * BUG/MINOR: quic: Possible endless loop in quic_lstnr_dghdlr()
  * BUG/MINOR: quic: Possible crash in quic_conn_prx_cntrs_update()
  * BUG/MINOR: quic: Missing initialization (packet number space probing)
  * BUG/MINOR: namespace: missing free in netns_sig_stop()
  * BUG/MINOR: server: inherit from netns in srv_settings_cpy()
  * BUG/MINOR: quic: Address inversion in "show quic full"
  * BUG/MINOR: quic: Wrong encryption level flags checking
  * BUG/MINOR: ssl: log message non thread safe in SSL Hanshake failure
  * REG-TESTS: stickiness: Delay haproxys start to properly resolv variables
  * BUG/MINOR: peers: Improve detection of config errors in peers sections
  * BUG/MEDIUM: hlua: Use front SC to detect EOI in HTTP applets' receive functions
  * BUG/MINOR: proxy/server: free default-server on deinit
  * BUG/MINOR: proxy: add missing interface bind free in free_proxy
  * BUG/MINOR: cfgparse-tcp: leak when re-declaring interface from bind line
  * DOC: config: fix rfc7239 converter examples (again)
  * DOC: config: fix jwt_verify() example using var()
  * DOC: quic: fix misspelled tune.quic.socket-owner
  * BUG/MINOR: spoe: Only skip sending new frame after a receive attempt
  * CONTRIB: Add vi file extensions to .gitignore
  * BUG/MINOR: quic: Possible crash when SSL session init fails
  * BUG/MINOR: stream: do not use client-fin/server-fin with HTX
  * BUG/MINOR: stats: Fix Lua's `get_stats` function</changelog>
  <changelog author="mrueckert@suse.de" date="1691582400">- Update to version 2.8.2+git0.61a0f576a: (boo#1214102) CVE-2023-40225
  * [RELEASE] Released version 2.8.2
  * BUG/MINOR: http: skip leading zeroes in content-length values
  * DOC: clarify the handling of URL fragments in requests
  * REGTESTS: http-rules: verify that we block '#' by default for normalize-uri
  * BUG/MINOR: h3: reject more chars from the :path pseudo header
  * BUG/MINOR: h2: reject more chars from the :path pseudo header
  * BUG/MINOR: h1: do not accept '#' as part of the URI component
  * REGTESTS: http-rules: add accept-invalid-http-request for normalize-uri tests
  * MINOR: h2: pass accept-invalid-http-request down the request parser
  * MINOR: http: add new function http_path_has_forbidden_char()
  * MINOR: ist: add new function ist_find_range() to find a character range
  * BUG/MAJOR: http: reject any empty content-length header value
  * BUG/MAJOR: h3: reject header values containing invalid chars
  * REORG: http: move has_forbidden_char() from h2.c to http.h
  * BUG/MAJOR: http-ana: Get a fresh trash buffer for each header value replacement
  * BUILD: quic: fix wrong potential NULL dereference
  * BUG/MINOR: quic: reappend rxbuf buffer on fake dgram alloc error
  * BUG/MINOR: http-client: Don't forget to commit changes on HTX message
  * BUG/MEDIUM: quic: consume contig space on requeue datagram
  * BUG/MEDIUM: bwlim: Reset analyse expiration date when then channel analyse ends
  * BUG/MEDIUM: h3: Be sure to handle fin bit on the last DATA frame
  * BUG/MINOR: chunk: fix chunk_appendf() to not write a zero if buffer is full
  * DOC: configuration: describe Td in Timing events
  * BUG/MEDIUM: h3: Properly report a C-L header was found to the HTX start-line
  * BUG/MINOR: ssl: OCSP callback only registered for first SSL_CTX
  * MINOR: quic: Useless call to SSL_CTX_set_quic_method()
  * MINOR: quic: Make -&gt;set_encryption_secrets() be callable two times
  * BUG/MEDIUM: listener: Acquire proxy's lock in relax_listener() if necessary
  * BUG/MINOR: server-state: Avoid warning on 'file not found'
  * BUG/MINOR: server-state: Ignore empty files
  * BUG/MINOR: quic: Missing parentheses around PTO probe variable.
  * BUG/MINOR: server: Don't warn on server resolution failure with init-addr none
  * BUG/MINOR: init: set process' affinity even in foreground
  * BUG/MINOR: cpuset: remove the bogus "proc" from the cpu_map struct
  * BUG/MINOR: config: do not detect NUMA topology when cpu-map is configured
  * MINOR: cpuset: add cpu_map_configured() to know if a cpu-map was found
  * BUG/MINOR: h1-htx: Return the right reason for 302 FCGI responses
  * BUG/MINOR: hlua: add check for lua_newstate
  * BUILD: quic: fix warning during compilation using gcc-6.5
  * CI: explicitely highlight VTest result section if there's something
  * CI: add naming convention documentation
  * BUG/MINOR: http: Return the right reason for 302
  * BUG/MINOR: sample: Fix wrong overflow detection in add/sub conveters
  * DOC: config: Fix fc_src description to state the source address is returned
  * BUG/MEDIUM: hlua_fcn/queue: bad pop_wait sequencing
  * BUG/MINOR: hlua: hlua_yieldk ctx argument should support pointers
  * CLEANUP: quic: remove useless parameter 'key' from quic_packet_encrypt
  * BUG/MEDIUM: quic: timestamp shared in token was using internal time clock
  * BUG/MEDIUM: quic: missing check of dcid for init pkt including a token
  * BUG/MINOR: quic: retry token remove one useless intermediate expand
  * BUG/MEDIUM: quic: token IV was not computed using a strong secret
  * BUG/MINOR: config: Remove final '\n' in error messages
  * BUG/MINOR: hlua_fcn/queue: use atomic load to fetch queue size
  * EXAMPLES: maintain haproxy 2.8 retrocompatibility for lua mailers script
  * BUG/MINOR: sink/log: properly deinit srv in sink_new_from_logsrv()
  * MINOR: hlua_fcn/mailers: handle timeout mail from mailers section
  * BUG/MINOR: server: set rid default value in new_server()
  * BUG/MINOR: sink: fix errors handling in cfg_post_parse_ring()
  * BUG/MINOR: sink: invalid sft free in sink_deinit()
  * BUG/MINOR: log: free errmsg on error in cfg_parse_log_forward()
  * BUG/MINOR: log: fix multiple error paths in cfg_parse_log_forward()
  * BUG/MINOR: log: fix missing name error message in cfg_parse_log_forward()
  * BUG/MEDIUM: log: improper use of logsrv-&gt;maxlen for buffer targets
  * MINOR: sink/api: pass explicit maxlen parameter to sink_write()
  * BUG/MINOR: log: LF upsets maxlen for UDP targets
  * BUG/MINOR: ring: maxlen warning reported as alert
  * BUG/MINOR: ring: size warning incorrectly reported as fatal error
  * BUG/MINOR: sink: missing sft free in sink_deinit()
  * BUG/MINOR: http_ext: unhandled ERR_ABORT in proxy_http_parse_7239()
  * BUG/MEDIUM: sink: invalid server list in sink_new_from_logsrv()
  * BUG/MINOR: cache: A 'max-age=0' cache-control directive can be overriden by a s-maxage
  * BUG/MINOR: tcp_sample: bc_{dst,src} return IP not INT
  * DOC: ssl: Add ocsp-update troubleshooting clues and emphasize on crt-list only aspect
  * DOC: ssl: Fix typo in 'ocsp-update' option</changelog>
  <changelog author="varkoly@suse.com" date="1692619200">- Build error on ppc64le: include/import/xxhash.h:4148:9: error: invalid parameter combination for AltiVec intrinsic __builtin_vec_ld
  Add patch:
  fix-invalid-parameter-combination-for-AltiVec-intrinsic-__builtin_vec_ld.patch</changelog>
  <changelog author="varkoly@suse.com" date="1693396800">- Apply upstream patch for the ppc64le issue:
  Add patch:
  0001-IMPORT-xxhash-update-xxHash-to-version-0.8.2.patch
  Remove patch:
  fix-invalid-parameter-combination-for-AltiVec-intrinsic-__builtin_vec_ld.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1694088000">- Update to version 2.8.3+git0.86e043add:
  * [RELEASE] Released version 2.8.3
  * CI: Update to actions/checkout@v4
  * MEDIUM: capabilities: enable support for Linux capabilities
  * BUG/MINOR: hlua/action: incorrect message on E_YIELD error
  * BUG/MINOR: ring/cli: Don't expect input data when showing events
  * BUG/MINOR: applet: Always expect data when CLI is waiting for a new command
  * NUG/MEDIUM: stconn: Always update stream's expiration date after I/O
  * BUG/MEDIUM: stconn/stream: Forward shutdown on write timeout
  * BUG/MEDIUM: applet: Report an error if applet request more room on aborted SC
  * BUG/MEDIUM: stconn: Report read activity when a stream is attached to front SC
  * BUG/MEDIUM: applet: Fix API for function to push new data in channels buffer
  * BUG/MINOR: quic: Wrong RTT computation (srtt and rrt_var)
  * BUG/MINOR: quic: Wrong RTT adjusments
  * MINOR: httpclient: allow to configure the timeout.connect
  * MINOR: httpclient: allow to configure the retries
  * DOC: configuration: update examples for req.ver
  * BUG/MINOR: stream: further protect stream_dump() against incomplete sessions
  * BUG/MEDIUM: h1-htx: Ensure chunked parsing with full output buffer
  * BUG/MAJOR: quic: Really ignore malformed ACK frames.
  * BUG/MINOR: quic: Possible skipped RTT sampling
  * BUG/MEDIUM: stconn: Don't block sends if there is a pending shutdown
  * BUG/MEDIUM: stconn: Wake applets on sending path if there is a pending shutdown
  * BUG/MINOR: stconn: Don't report blocked sends during connection establishment
  * BUG/MEDIUM: stconn: Update stream expiration date on blocked sends
  * DEBUG: applet: Properly report opposite SC expiration dates in traces
  * BUG/MINOR: checks: do not queue/wake a bounced check
  * DOC: config: mention uid dependency on the tune.quic.socket-owner option
  * BUG/MINOR: stream: protect stream_dump() against incomplete streams
  * BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate
  * BUILD: import: guard plock.h against multiple inclusion
  * BUG/MINOR: ssl_sock: fix possible memory leak on OOM
  * DOC: lua: fix core.register_action typo
  * BUG/MINOR: hlua_fcn: potentially unsafe stktable_data_ptr usage
  * CI: fedora: fix "dnf" invocation syntax
  * IMPORT: xxhash: update xxHash to version 0.8.2
  * MINOR: atomic: make sure to always relax after a failed CAS
  * MINOR: threads: inline the wait function for pthread_rwlock emulation
  * IMPORT: plock: also support inlining the int code
  * BUILD: Makefile: add the USE_QUIC option to make help
  * DOC: jwt: Add explicit list of supported algorithms
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (3)
  * SCRIPTS: git-show-backports: automatic ref and base detection with -m
  * DOC: typo: fix sc-set-gpt references
  * BUG/MINOR: stktable: allow sc-add-gpc from tcp-request connection
  * BUG/MINOR: stktable: allow sc-set-gpt(0) from tcp-request connection
  * DEV: flags/show-sess-to-flags: properly decode fd.state
  * BUG/MINOR: hlua: fix invalid use of lua_pop on error paths
  * BUG/MEDIUM: quic: fix tasklet_wakeup loop on connection closing
  * CI: get rid of travis-ci wrapper for Coverity scan
  * CI: do not use "groupinstall" for Fedora Rawhide builds
- drop 0001-IMPORT-xxhash-update-xxHash-to-version-0.8.2.patch:
  part of the version update</changelog>
  <changelog author="varkoly@suse.com" date="1733400000">- Update to version 2.8.11+git0.01c1056a4:
  VUL-0: CVE-2024-53008: haproxy: HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server
  (bsc#1233973)
  * [RELEASE] Released version 2.8.11
  * BUG/MINOR: cfgparse-listen: fix option httpslog override warning message
  * BUG/MEDIUM: promex: Wait to have the request before sending the response
  * BUG/MEDIUM: cache/stats: Wait to have the request before sending the response
  * BUG/MEDIUM: queue: implement a flag to check for the dequeuing
  * BUG/MINOR: clock: validate that now_offset still applies to the current date
  * BUG/MINOR: clock: make time jump corrections a bit more accurate
  * BUG/MINOR: polling: fix time reporting when using busy polling
  * BUG/MAJOR: mux-h1: Wake SC to perform 0-copy forwarding in CLOSING state
  * BUG/MEDIUM: pattern: prevent UAF on reused pattern expr
  * BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg()
  * BUG/MEDIUM: clock: detect and cover jumps during execution
  * REGTESTS: fix random failures with wrong_ip_port_logging.vtc under load
  * DOC: configuration: place the HAPROXY_HTTP_LOG_FMT example on the correct line
  * BUG/MINOR: pattern: do not leave a leading comma on "set" error messages
  * BUG/MINOR: pattern: pat_ref_set: return 0 if err was found
  * BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity
  * BUG/MINOR: stconn: Request to send something to be woken up when the pipe is full
  * BUG/MEDIUM: mux-pt/mux-h1: Release the pipe on connection error on sending path
  * BUG/MEDIUM: clock: also update the date offset on time jumps
  * DOC: config: correct the table for option tcplog
  * BUG/MINOR: h3: properly reject too long header responses
  * BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails
  * BUG/MINOR: mux-quic: do not send too big MAX_STREAMS ID
  * REGTESTS: mcli: test the pipelined commands on master CLI
  * BUG/MEDIUM: mworker/cli: fix pipelined modes on master CLI
  * MINOR: channel: implement ci_insert() function
  * BUG/MINOR: proto_tcp: keep error msg if listen() fails
  * BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails
  * BUG/MINOR: quic/trace: make quic_conn_enc_level_init() emit NEW not CLOSE
  * BUG/MINOR: trace/quic: make "qconn" selectable as a lockon criterion
  * BUG/MINOR: trace: automatically start in waiting mode with "start &lt;evt&gt;"
  * BUG/MEDIUM: trace: fix null deref in lockon mechanism since TRACE_ENABLED()
  * BUG/MINOR: trace/quic: permit to lock on frontend/connect/session etc
  * BUG/MINOR: trace/quic: enable conn/session pointer recovery from quic_conn
  * BUG/MINOR: fcgi-app: handle a possible strdup() failure
  * BUG/MEDIUM: mux-h2: Propagate term flags to SE on error in h2s_wake_one_stream
  * BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams
  * BUG/MEDIUM: http-ana: Report error on write error waiting for the response
  * BUG/MEDIUM: quic: prevent conn freeze on 0RTT undeciphered content
  * BUG/MEDIUM: stconn: Report error on SC on send if a previous SE error was set
  * BUG/MEDIUM: mux-h1: Properly handle empty message when an error is triggered
  * BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli
  * BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready
  * BUG/MEDIUM: init: fix fd_hard_limit default in compute_ideal_maxconn
  * MEDIUM: init: set default for fd_hard_limit via DEFAULT_MAXFD (take #2)
  * BUG/MEDIUM: queue: deal with a rare TOCTOU in assign_server_and_queue()
  * MINOR: queue: add a function to check for TOCTOU after queueing
  * BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature
  * BUG/MINOR: quic: Lack of precision when computing K (cubic only cc)
  * BUG/MINOR: cli: Atomically inc the global request counter between CLI commands
  * BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution
  * BUG/MINOR: stick-table: fix crash for src_inc_gpc() without stkcounter
  * DOC: config: improve the http-keep-alive section
  * DOC: configuration: issuers-chain-path not compatible with OCSP
  * BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path
  * BUG/MEDIUM: debug/cli: fix "show threads" crashing with low thread counts
  * BUG/MINOR: session: Eval L4/L5 rules defined in the default section
  * BUG/MEDIUM: bwlim: Be sure to never set the analyze expiration date in past
  * BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread
  * BUG/MEDIUM: h1: Reject empty Transfer-encoding header
  * BUG/MINOR: h1: Reject empty coding name as last transfer-encoding value
  * BUG/MINOR: h1: Fail to parse empty transfer coding names
  * BUG/MINOR: jwt: fix variable initialisation
  * DOC: configuration: update maxconn description
  * BUG/MINOR: jwt: don't try to load files with HMAC algorithm
  * MEDIUM: ssl: initialize the SSL stack explicitely
  * DOC: configuration: more details about the master-worker mode
  * BUG/MEDIUM: quic: fix possible exit from qc_check_dcid() without unlocking
  * BUG/MINOR: quic: fix race-condition on trace for CID retrieval
  * BUG/MINOR: quic: fix race condition in qc_check_dcid()
  * BUG/MEDIUM: quic: fix race-condition in quic_get_cid_tid()
  * BUG/MEDIUM: h3: ensure the ":scheme" pseudo header is totally valid
  * BUG/MEDIUM: h3: ensure the ":method" pseudo header is totally valid
  * MINOR: activity: make the memory profiling hash size configurable at build time
  * BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct()
  * BUG/MINOR: quic: fix BUG_ON() on Tx pkt alloc failure
  * BUG/MINOR: mux-quic: fix crash on qcs SD alloc failure
  * BUG/MINOR: h3: fix crash on STOP_SENDING receive after GOAWAY emission
  * DOC: api/event_hdl: small updates, fix an example and add some precisions
  * SCRIPTS: git-show-backports: do not truncate git-show output
  * DOC: configuration: fix alphabetical order of bind options
  * DOC: management: rename show stats domain cli "dns" to "resolvers"
  * DOC/MINOR: management: add missed -dR and -dv options
  * BUG/MINOR: proxy: fix header_unique_id leak on deinit()
  * BUG/MINOR: proxy: fix source interface and usesrc leaks on deinit()
  * BUG/MINOR: proxy: fix dyncookie_key leak on deinit()
  * BUG/MINOR: proxy: fix check_{command,path} leak on deinit()
  * BUG/MINOR: proxy: fix log_tag leak on deinit()
  * BUG/MINOR: proxy: fix server_id_hdr_name leak on deinit()
  * BUG/MINOR: quic: fix computed length of emitted STREAM frames
  * [RELEASE] Released version 2.8.10
  * BUG/MEDIUM: quic: don't blindly rely on unaligned accesses
  * BUG/MAJOR: connection: fix server used_conns with H2 + reuse safe
  * BUG/MEDIUM: http_ana: ignore NTLM for reuse aggressive/always and no H1
  * BUG/MAJOR: server: do not delete srv referenced by session
  * MINOR: session: rename private conns elements
  * BUG/MEDIUM: quic: fix connection freeze on post handshake
  * BUG/MEDIUM: server: fix dynamic servers initial settings
  * BUG/MEDIUM: ssl: wrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration
  * CLEANUP: hlua: simplify ambiguous lua_insert() usage in hlua_ctx_resume()
  * BUG/MINOR: hlua: fix leak in hlua_ckch_set() error path
  * BUG/MINOR: hlua: prevent LJMP in hlua_traceback()
  * BUG/MINOR: hlua: fix unsafe hlua_pusherror() usage
  * BUG/MINOR: hlua: don't use lua_pushfstring() when we don't expect LJMP
  * CLEANUP: hlua: use hlua_pusherror() where relevant
  * BUG/MINOR: quic: prevent crash on qc_kill_conn()
  * BUG/MINOR: hlua: use CertCache.set() from various hlua contexts
  * BUG/MINOR: tools: fix possible null-deref in env_expand() on out-of-memory
  * BUG/MINOR: tcpcheck: report correct error in tcp-check rule parser
  * BUG/MINOR: cfgparse: remove the correct option on httpcheck send-state warning
  * BUG/MINOR: activity: fix Delta_calls and Delta_bytes count
  * BUG/MINOR: ssl/ocsp: init callback func ptr as NULL
  * CLEANUP: ssl/ocsp: readable ifdef in ssl_sock_load_ocsp
  * BUILD: fd: errno is also needed without poll()
  * CI: scripts: fix build of vtest regarding option -C
  * REGTESTS: acl_cli_spaces: avoid a warning caused by undefined logs
  * DOC: config: fix incorrect section reference about custom log format
  * DOC: quic: specify that connection migration is not supported
  * BUG/MINOR: server: Don't reset resolver options on a new default-server line
  * BUG/MINOR: http-htx: Support default path during scheme based normalization
  * BUG/MINOR: quic: adjust restriction for stateless reset emission
  * MEDIUM: config: prevent communication with privileged ports
  * BUILD: quic: fix unused variable warning when threads are disabled
  * BUG/MEDIUM: mux-quic: Create sedesc in same time of the QUIC stream
  * BUG/MEDIUM: quic_tls: prevent LibreSSL &lt; 4.0 from negotiating CHACHA20_POLY1305
  * BUG/MAJOR: quic: Crash with TLS_AES_128_CCM_SHA256 (libressl only)
  * BUG/MINOR: connection: parse PROXY TLV for LOCAL mode
  * DOC: configuration: update the crt-list documentation
  * CLEANUP: ssl/cli: remove unused code in dump_crtlist_conf
  * BUG/MINOR: stats: Don't state the 303 redirect response is chunked
  * BUG/MINOR: htpp-ana/stats: Specify that HTX redirect messages have a C-L header
  * BUG/MEDIUM: fd: prevent memory waste in fdtab array
  * BUILD: stick-tables: better mark the stktable_data as 32-bit aligned
  * BUG/MEDIUM: h1: Reject CONNECT request if the target has a scheme
  * BUG/MINOR: h1: Check authority for non-CONNECT methods only if a scheme is found
  * BUG/MEDIUM: stick-tables: properly mark stktable_data as packed
  * BUG/MEDIUM: htx: mark htx_sl as packed since it may be realigned
  * BUG/MINOR: qpack: fix error code reported on QPACK decoding failure
  * BUG/MINOR: mux-quic: fix error code on shutdown for non HTTP/3
  * BUG/MINOR: log: smp_rgs array issues with inherited global log directives
  * BUG/MINOR: log: keep the ref in dup_logger()
  * MINOR: log: add dup_logsrv() helper function
  * DOC: lua: fix filters.txt file location
  * BUG/MINOR: haproxy: only tid 0 must not sleep if got signal
  * BUILD: clock: improve check for pthread_getcpuclockid()
  * BUG/MINOR: mworker: reintroduce way to disable seamless reload with -x /dev/null
  * BUG/MINOR: h1: fix detection of upper bytes in the URI
  * BUG/MINOR: backend: use cum_sess counters instead of cum_conn
  * BUG/MINOR: fd: my_closefrom() on Linux could skip contiguous series of sockets
  * BUG/MINOR: sock: handle a weird condition with connect()
  * BUG/MINOR: stconn: Fix sc_mux_strm() return value
  * BUG/MEDIUM: cache: Vary not working properly on anything other than accept-encoding
  * BUG/MINOR: server: fix slowstart behavior
  * BUG/MEDIUM: peers: Fix exit condition when max-updates-at-once is reached
  * BUG/MEDIUM: spoe: Always retry when an applet fails to send a frame
  * BUG/MEDIUM: applet: Fix applet API to put input data in a buffer
  * BUG/MEDIUM: evports: do not clear returned events list on signal
  * BUG/MEDIUM: stconn: Don't forward channel data if input data must be filtered
  * BUG/MEDIUM: grpc: Fix several unaligned 32/64 bits accesses
  * MINOR: net_helper: Add support for floats/doubles.
  * CI: revert kernel addr randomization introduced in 3a0fc864
  * BUG/MEDIUM: peers/trace: fix crash when listing event types
  * BUG/MINOR: debug: make sure DEBUG_STRICT=0 does work as documented
  * BUG/MINOR: http-ana: Fix TX_L7_RETRY and TX_D_L7_RETRY values
  * BUG/MEDIUM: http-ana: Deliver 502 on keep-alive for fressh server connection
  * CLEANUP: log: lf_text_len() returns a pointer not an integer
  * BUG/MINOR: log: invalid snprintf() usage in sess_build_logline()
  * BUG/MINOR: tools/log: invalid encode_{chunk,string} usage
  * BUG/MINOR: log: fix lf_text_len() truncate inconsistency
  * BUG/MINOR: listener: always assign distinct IDs to shards
  * BUG/MINOR: cli: Report an error to user if command or payload is too big
  * [RELEASE] Released version 2.8.9
  * BUILD: proxy: Replace free_logformat_list() to manually release log-format
  * [RELEASE] Released version 2.8.8
  * BUG/MINOR: proxy: fix logformat expression leak in use_backend rules
  * BUG/MINOR: backend: properly handle redispatch 0
  * BUG/MINOR: server: ignore 'enabled' for dynamic servers
  * BUG/MEDIUM: cli: Warn if pipelined commands are delimited by a \n
  * MINOR: cli: Remove useless loop on commands to find unescaped semi-colon
  * MINOR: server: allow cookie for dynamic servers
  * BUG/MINOR: server: fix persistence cookie for dynamic servers
  * BUG/MINOR: ssl: Detect more 'ocsp-update' incompatibilities
  * BUG/MINOR: ssl: Wrong ocsp-update "incompatibility" error message
  * BUG/MINOR: server: 'source' interface ignored from 'default-server' directive
  * OPTIM: http_ext: avoid useless copy in http_7239_extract_{ipv4,ipv6}
  * BUG/MEDIUM: mux-fcgi: Properly handle EOM flag on end-of-trailers HTX block
  * BUG/MINOR: mux-quic: close all QCS before freeing QCC tasklet
  * BUG/MEDIUM: ssl: Fix crash in ocsp-update log function
  * BUG/MINOR: session: ensure conn owner is set after insert into session
  * BUG/MEDIUM: spoe: Return an invalid frame on recv if size is too small
  * CI: temporarily adjust kernel entropy to work with ASAN/clang
  * BUG/MINOR: spoe: Be sure to be able to quickly close IDLE applets on soft-stop
  * BUG/MEDIUM: spoe: Don't rely on stream's expiration to detect processing timeout
  * BUG/MINOR: listener: Don't schedule frontend without task in listener_release()
  * BUG/MINOR: listener: Wake proxy's mngmt task up if necessary on session release
  * BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread (2nd try)
  * MINOR: hlua: use accessors for stream hlua ctx
  * DEBUG: lua: precisely identify if stream is stuck inside lua or not
  * BUG/MINOR: hlua: fix missing lock in hlua_filter_delete()
  * BUG/MINOR: hlua: missing lock in hlua_filter_new()
  * BUG/MINOR: hlua: segfault when loading the same filter from different contexts
  * BUG/MINOR: ssl: fix possible ctx memory leak in sample_conv_aes_gcm()
  * DOC: configuration: clarify ciphersuites usage (V2)
  * BUILD: solaris: fix compilation errors
  * BUG/MINOR: cfgparse: report proper location for log-format-sd errors
  * BUG/MINOR: ssl/cli: typo in new ssl crl-file CLI description
  * CI: skip scheduled builds on forks
  * BUG/MINOR: sink: fix a race condition in the TCP log forwarding code
  * BUG/MINOR: hlua: don't call ha_alert() in hlua_event_subscribe()
  * BUG/MAJOR: hlua: improper lock usage with hlua_ctx_resume()
  * BUG/MEDIUM: hlua: improper lock usage with SET_SAFE_LJMP()
  * BUG/MINOR: hlua: improper lock usage in hlua_filter_new()
  * BUG/MINOR: hlua: improper lock usage in hlua_filter_callback()
  * BUG/MINOR: hlua: fix possible crash in hlua_filter_new() under load
  * BUG/MINOR: hlua: don't use lua_tostring() from unprotected contexts
  * BUG/MINOR: hlua: fix unsafe lua_tostring() usage with empty stack
  * BUG/MINOR: tools: seed the statistical PRNG slightly better
  * MINOR: hlua: Be able to disable logging from lua
  * BUG/MINOR: hlua: Fix log level to the right value when set via TXN:set_loglevel
  * BUG/MINOR: config/quic: Alert about PROXY protocol use on a QUIC listener
  * DOC: configuration: clarify ciphersuites usage
  * LICENSE: http_ext: fix GPL license version
  * LICENSE: event_hdl: fix GPL license version
  * BUG/MINOR: ssl/cli: duplicate cleaning code in cli_parse_del_crtlist
  * BUG/MINOR: ist: only store NUL byte on succeeded alloc
  * BUG/MINOR: quic: fix output of show quic
  * BUG/MAJOR: server: fix stream crash due to deleted server
  * BUG/MINOR: stats: drop srv refcount on early release
  * BUG/MINOR: ist: allocate nul byte on istdup
  * MINOR: quic: warn on bind on multiple addresses if no IP_PKTINFO support
  * DOC: quic: fix recommandation for bind on multiple address
  * BUG/MEDIUM: quic: fix transient send error with listener socket
  * BUG/MEDIUM: hlua: Don't loop if a lua socket does not consume received data
  * BUG/MEDIUM: hlua: Be able to garbage collect uninitialized lua sockets
  * BUG/MEDIUM: applet: Immediately free appctx on early error
  * DOC: quic: Missing tuning setting in "Global parameters"
  * BUG/MINOR: qpack: reject invalid dynamic table capacity
  * BUG/MINOR: qpack: reject invalid increment count decoding
  * BUG/MINOR: quic: reject HANDSHAKE_DONE as server
  * BUG/MINOR: quic: reject unknown frame type
  * BUG/MAJOR: promex: fix crash on deleted server
  * MINOR: connection: add sample fetches to report per-connection glitches
  * MINOR: mux-h2: implement MUX_CTL_GET_GLITCHES
  * MINOR: connection: add a new mux_ctl to report number of connection glitches
  * MEDIUM: mux-h2: allow to set the glitches threshold to kill a connection
  * MINOR: mux-h2: always use h2c_report_glitch()
  * MINOR: mux-h2: count late reduction of INITIAL_WINDOW_SIZE as a glitch
  * MINOR: mux-h2: count excess of CONTINUATION frames as a glitch
  * BUG/MINOR: mux-h2: count rejected DATA frames against the connection's flow control
  * MINOR: mux-h2: add a counter of "glitches" on a connection
  * [RELEASE] Released version 2.8.7
  * BUG/MAJOR: ssl/ocsp: crash with ocsp when old process exit or using ocsp CLI
  * [RELEASE] Released version 2.8.6
  * DEV: makefile: fix POSIX compatibility for "range" target
  * DEV: makefile: add a new "range" target to iteratively build all commits
  * CI: Update to actions/cache@v4
  * DOC: internal: update missing data types in peers-v2.0.txt
  * DOC: install: recommend pcre2
  * DOC: httpclient: add dedicated httpclient section
  * DOC: configuration: clarify http-request wait-for-body
  * BUILD: address a few remaining calloc(size, n) cases
  * BUG/MINOR: ext-check: cannot use without preserve-env
  * MINOR: ext-check: add an option to preserve environment variables
  * BUG/MINOR: diag: run the final diags before quitting when using -c
  * BUG/MINOR: diag: always show the version before dumping a diag warning
  * MINOR: errors: ha_alert() and ha_warning() uses warn_exec_path()
  * MINOR: quic: Add a counter for reordered packets
  * MINOR: quic: Dynamic packet reordering threshold
  * MINOR: quic: Update K CUBIC calculation (RFC 9438)
  * BUG/MEDIUM: quic: Wrong K CUBIC calculation.
  * MINOR: quic: Stop using 1024th of a second.
  * BUG/MINOR: quic: fix possible integer wrap around in cubic window calculation
  * CLEANUP: quic: Code clarifications for QUIC CUBIC (RFC 9438)
  * BUG/MINOR: quic: Wrong ack ranges handling when reaching the limit.
  * BUG/MEDIUM: quic: fix crash on invalid qc_stream_buf_free() BUG_ON
  * BUG/MEDIUM: qpack: allow 6xx..9xx status codes
  * BUG/MEDIUM: h3: do not crash on invalid response status code
  * MINOR: h3: add traces for stream sending function
  * BUG/MEDIUM: quic: remove unsent data from qc_stream_desc buf
  * MINOR: quic: extract qc_stream_buf free in a dedicated function
  * MINOR: quic: Stop hardcoding a scale shifting value (CUBIC_BETA_SCALE_FACTOR_SHIFT)
  * CLEANUP: quic: Remove unused CUBIC_BETA_SCALE_FACTOR_SHIFT macro.
  * BUG/MEDIUM: mux-quic: report early error on stream
  * BUG/MINOR: h3: fix checking on NULL Tx buffer
  * BUG/MEDIUM: ssl: Fix crash when calling "update ssl ocsp-response" when an update is ongoing
  * REGTESTS: ssl: Add OCSP related tests
  * REGTESTS: ssl: Fix empty line in cli command input
  * BUG/MINOR: ssl: Reenable ocsp auto-update after an "add ssl crt-list"
  * BUG/MINOR: ssl: Destroy ckch instances before the store during deinit
  * BUG/MEDIUM: ocsp: Separate refcount per instance and per store
  * MINOR: ssl: Use OCSP_CERTID instead of ckch_store in ckch_store_build_certid
  * BUG/MINOR: ssl: Clear the ckch instance when deleting a crt-list line
  * BUG/MINOR: ssl: Duplicate ocsp update mode when dup'ing ckch
  * BUG/MINOR: ssl: Fix error message after ssl_sock_load_ocsp call
  * BUG/MAJOR: ssl_sock: Always clear retry flags in read/write functions
  * BUG/MEDIUM: h1: always reject the NUL character in header values
  * BUG/MINOR: h1-htx: properly initialize the err_pos field
  * BUG/MEDIUM: h1: Don't support LF only to mark the end of a chunk size
  * BUG/MINOR: h1: Don't support LF only at the end of chunks
  * BUG/MEDIUM: stconn: Don't check pending shutdown to wake an applet up
  * BUG/MEDIUM: stconn: Allow expiration update when READ/WRITE event is pending
  * BUG/MEDIUM: pool: fix rare risk of deadlock in pool_flush()
  * BUG/MINOR: jwt: fix jwt_verify crash on 32-bit archs
  * BUG/MEDIUM: cli: fix once for all the problem of missing trailing LFs
  * BUG/MINOR: vars/cli: fix missing LF after "get var" output
  * BUG/MEDIUM: cli: some err/warn msg dumps add LR into CSV output on stat's CLI
  * REGTESTS: add a test to ensure map-ordering is preserved
  * MINOR: mux-h2/traces: add a missing trace on connection WU with negative inc
  * BUG/MEDIUM: mux-h2: refine connection vs stream error on headers
  * MINOR: mux-h2/traces: clarify the "rejected H2 request" event
  * MINOR: mux-h2/traces: explicitly show the error/refused stream states
  * MINOR: mux-h2/traces: also suggest invalid header upon parsing error
  * MINOR: debug: make BUG_ON() catch build errors even without DEBUG_STRICT
  * MINOR: debug: make ABORT_NOW() store the caller's line number when using abort
  * MINOR: debug: make sure calls to ha_crash_now() are never merged
  * MINOR: compiler: add a new DO_NOT_FOLD() macro to prevent code folding
  * BUG/MEDIUM: quic: keylog callback not called (USE_OPENSSL_COMPAT)
  * BUG/MINOR: mux-h2: also count streams for refused ones
  * BUG/MINOR: mux-quic: do not prevent non-STREAM sending on flow control
  * DOC: configuration: corrected description of keyword tune.ssl.ocsp-update.mindelay
  * MINOR: mux-h2: support limiting the total number of H2 streams per connection
  * BUG/MEDIUM: spoe: Never create new spoe applet if there is no server up
  * BUG/MEDIUM: stconn: Forward shutdown on write timeout only if it is forwardable
  * BUG/MEDIUM: h3: fix incorrect snd_buf return value
  * CLEANUP: quic: Remaining useless code into server part
  * BUG/MINOR: h3: close connection on sending alloc errors
  * BUG/MINOR: h3: properly handle alloc failure on finalize
  * BUG/MINOR: h3: close connection on header list too big
  * MINOR: h3: check connection error during sending
  * BUG/MINOR: quic: Missing call to TLS message callbacks
  * BUG/MINOR: quic: Wrong keylog callback setting.
  * BUG/MINOR: mux-quic: always report error to SC on RESET_STREAM emission
  * BUG/MEDIUM: stats: unhandled switching rules with TCP frontend
  * MINOR: stats: store the parent proxy in stats ctx (http)
  * DOC: config: Update documentation about local haproxy response
  * BUG/MINOR: resolvers: default resolvers fails when network not configured
  * BUG/MEDIUM: mux-h2: Report too large HEADERS frame only when rxbuf is empty
  * BUG/MEDIUM: quic: QUIC CID removed from tree without locking
  * BUG/MEDIUM: quic: Possible buffer overflow when building TLS records
  * BUG/MINOR: mworker/cli: fix set severity-output support
  * DOC: configuration: typo req.ssl_hello_type
  * [RELEASE] Released version 2.8.5
  * BUG/MEDIUM: proxy: always initialize the default settings after init
  * BUG/MINOR: lua: Wrong OCSP CID after modifying an SSL certficate (LUA)
  * BUG/MINOR: ssl: Wrong OCSP CID after modifying an SSL certficate
  * MINOR: ssl/cli: Add ha_(warning|alert) msgs to CLI ckch callback
  * BUG/MINOR: ssl: Double free of OCSP Certificate ID
  * BUG/MINOR: quic: Packet number spaces too lately initialized
  * BUG/MINOR: quic: Missing QUIC connection path member initialization
  * BUG/MINOR: quic: Possible leak of TX packets under heavy load
  * BUG/MEDIUM: quic: Possible crash during retransmissions and heavy load
  * BUG/MINOR: cache: Remove incomplete entries from the cache when stream is closed
  * BUG/MEDIUM: peers: fix partial message decoding
  * DOC: Clarify the differences between field() and word()
  * BUG/MINOR: sample: Make the `word` converter compatible with `-m found`
  * REGTESTS: sample: Test the behavior of consecutive delimiters for the field converter
  * DOC: config: fix monitor-fail typo
  * DOC: config: add matrix entry for "max-session-srv-conns"
  * DOC: config: specify supported sections for "max-session-srv-conns"
  * BUG/MINOR: cfgparse-listen: fix warning being reported as an alert
  * BUG/MINOR: config: Stopped parsing upon unmatched environment variables
  * BUG/MINOR: quic_tp: fix preferred_address decoding
  * DOC: config: fix missing characters in set-spoe-group action
  * BUG/MINOR: h3: always reject PUSH_PROMISE
  * BUG/MINOR: h3: fix TRAILERS encoding
  * BUG/MEDIUM: master/cli: Properly pin the master CLI on thread 1 / group 1
  * BUG/MINOR: compression: possible NULL dereferences in comp_prepare_compress_request()
  * BUG/MINOR: quic: fix CONNECTION_CLOSE_APP encoding
  * DOC: lua: fix Proxy.get_mode() output
  * DOC: lua: add sticktable class reference from Proxy.stktable
  * REGTESTS: connection: disable http_reuse_be_transparent.vtc if !TPROXY
  * DOC: config: fix timeout check inheritance restrictions
  * DOC: 51d: updated 51Degrees repo URL for v3.2.10
  * BUG/MINOR: server: do not leak default-server in defaults sections
  * BUG/MINOR: quic: Possible RX packet memory leak under heavy load
  * BUG/MEDIUM: quic: Possible crash for connections to be killed
  * BUG/MINOR: sock: mark abns sockets as non-suspendable and always unbind them
  * BUG/MINOR: startup: set GTUNE_SOCKET_TRANSFER correctly
  * REGTESTS: http: add a test to validate chunked responses delivery
  * BUG/MINOR: proxy/stktable: missing frees on proxy cleanup
  * MINOR: stktable: add stktable_deinit function
  * BUG/MINOR: stream/cli: report correct stream age in "show sess"
  * BUG/MEDIUM: mux-fcgi: fail earlier on malloc in takeover()
  * BUG/MEDIUM: mux-h1: fail earlier on malloc in takeover()
  * BUG/MEDIUM: mux-h2: fail earlier on malloc in takeover()
  * BUG/MAJOR: quic: complete thread migration before tcp-rules
  * [RELEASE] Released version 2.8.4
  * BUG/MINOR: stconn: Report read activity on non-indep streams for partial sends
  * BUG/MINOR: stconn/applet: Report send activity only if there was output data
  * BUG/MINOR: stconn: Use HTX-aware channel's functions to get info on buffer
  * BUG/MINOR: stconn: Fix streamer detection for HTX streams
  * MINOR: channel: Add functions to get info on buffers and deal with HTX streams
  * MINOR: htx: Use a macro for overhead induced by HTX
  * BUG/MEDIUM: stconn: Update fsb date on partial sends
  * BUG/MEDIUM: stream: Don't call mux .ctl() callback if not implemented
  * BUG/MEDIUM: mworker: set the master variable earlier
  * BUG/MEDIUM: applet: Report a send activity everytime data were sent
  * BUG/MEDIUM: stconn: Report a send activity everytime data were sent
  * REGTESTS: http: Improve script testing abortonclose option
  * BUG/MEDIUM: stream: Properly handle abortonclose when set on backend only
  * MEDIUM: mux-h1: Handle MUX_SUBS_RECV flag in h1_ctl() and susbscribe for reads
  * MINOR: connection: Add a CTL flag to notify mux it should wait for reads again
  * BUG/MINOR: stconn: Handle abortonclose if backend connection was already set up
  * BUG/MEDIUM: connection: report connection errors even when no mux is installed
  * DOC: quic: Wrong syntax for "quic-cc-algo" keyword.
  * BUG/MINOR: sink: don't learn srv port from srv addr
  * BUG/MEDIUM: applet: Remove appctx from buffer wait list on release
  * DOC: config: use the word 'backend' instead of 'proxy' in 'track' description
  * BUG/MINOR: quic: fix retry token check inconsistency
  * DOC: management: -q is quiet all the time
  * BUG/MEDIUM: stconn: Don't update stream expiration date if already expired
  * BUG/MEDIUM: quic: Avoid some crashes upon TX packet allocation failures
  * BUG/MEDIUM: quic: Possible crashes when sending too short Initial packets
  * BUG/MEDIUM: quic: Avoid trying to send ACK frames from an empty ack ranges tree
  * BUG/MINOR: quic: idle timer task requeued in the past
  * BUG/MEDIUM: pool: fix releasable pool calculation when overloaded
  * BUG/MEDIUM: freq-ctr: Don't report overshoot for long inactivity period
  * BUG/MINOR: mux-h1: Properly handle http-request and http-keep-alive timeouts
  * BUG/MINOR: stick-table/cli: Check for invalid ipv4 key
  * BUG/MEDIUM: quic: fix sslconns on quic_conn alloc failure
  * BUG/MEDIUM: quic: fix actconn on quic_conn alloc failure
  * CLEANUP: htx: Properly indent htx_reserve_max_data() function
  * BUG/MINOR: stconn: Sanitize report for read activity
  * BUG/MEDIUM: Don't apply a max value on room_needed in sc_need_room()
  * BUG/MEDIUM: stconn: Don't report rcv/snd expiration date if SC cannot epxire
  * BUG/MEDIUM: pattern: don't trim pools under lock in pat_ref_purge_range()
  * BUG/MINOR: cfgparse/stktable: fix error message on stktable_init() failure
  * BUG/MINOR: stktable: missing free in parse_stick_table()
  * BUG/MINOR: tcpcheck: Report hexstring instead of binary one on check failure
  * BUG/MEDIUM: ssl: segfault when cipher is NULL
  * BUG/MINOR: mux-quic: fix early close if unset client timeout
  * BUG/MINOR: ssl: suboptimal certificate selection with TLSv1.3 and dual ECDSA/RSA
  * MEDIUM: quic: count quic_conn for global sslconns
  * MEDIUM: quic: count quic_conn instance for maxconn
  * MINOR: frontend: implement a dedicated actconn increment function
  * BUG/MINOR: ssl: use a thread-safe sslconns increment
  * BUG/MINOR: quic: do not consider idle timeout on CLOSING state
  * BUG/MEDIUM: server: "proto" not working for dynamic servers
  * MINOR: connection: add conn_pr_mode_to_proto_mode() helper func
  * DEBUG: mux-h2/flags: fix list of h2c flags used by the flags decoder
  * MINOR: lua: Add flags to configure logging behaviour
  * BUG/MINOR: ssl: load correctly @system-ca when ca-base is define
  * DOC: internal: filters: fix reference to entities.pdf
  * BUG/MINOR: mux-h2: update tracked counters with req cnt/req err
  * BUG/MINOR: mux-h2: commit the current stream ID even on reject
  * BUG/MEDIUM: peers: Fix synchro for huge number of tables
  * BUG/MEDIUM: peers: Be sure to always refresh recconnect timer in sync task
  * BUG/MINOR: trace: fix trace parser error reporting
  * BUG/MINOR: mux-h2: fix http-request and http-keep-alive timeouts again
  * BUG/MEDIUM: mux-h2: Don't report an error on shutr if a shutw is pending
  * BUG/MINOR: mux-h2: make up other blocked streams upon removal from list
  * BUG/MINOR: mux-h1: Send a 400-bad-request on shutdown before the first request
  * BUG/MEDIUM: quic-conn: free unsent frames on retransmit to prevent crash
  * BUG/MINOR: mux-quic: fix free on qcs-new fail alloc
  * BUG/MINOR: h3: strengthen host/authority header parsing
  * BUG/MINOR: mux-quic: support initial 0 max-stream-data
  * BUG/MEDIUM: mux-quic: fix RESET_STREAM on send-only stream
  * BUG/MINOR: quic: reject packet with no frame
  * BUG/MINOR: quic: Avoid crashing with unsupported cryptographic algos
  * BUG/MEDIUM: stconn: Fix comparison sign in sc_need_room()
  * BUG/MINOR: hq-interop: simplify parser requirement
  * BUG/MEDIUM: h1: Ignore C-L value in the H1 parser if T-E is also set
  * BUG/MINOR: mux-h1: Ignore C-L when sending H1 messages if T-E is also set
  * BUG/MINOR: mux-h1: Handle read0 in rcv_pipe() only when data receipt was tried
  * BUG/MEDIUM: hlua: Initialize appctx used by a lua socket on connect only
  * MINOR: hlua: Test the hlua struct first when the lua socket is connecting
  * MINOR: hlua: Save the lua socket's server in its context
  * MINOR: hlua: Save the lua socket's timeout in its context
  * MINOR: hlua: Don't preform operations on a not connected socket
  * MINOR: hlua: Set context's appctx when the lua socket is created
  * BUG/MEDIUM: http-ana: Try to handle response before handling server abort
  * BUG/MEDIUM: quic_conn: let the scheduler kill the task when needed
  * BUG/MEDIUM: actions: always apply a longest match on prefix lookup
  * BUG/MINOR: mux-quic: remove full demux flag on ncbuf release
  * BUG/MEDIUM: server/cli: don't delete a dynamic server that has streams
  * MINOR: pattern: fix pat_{parse,match}_ip() function comments
  * BUG/MINOR: server: add missing free for server-&gt;rdr_pfx
  * BUG/MAJOR: mux-h2: Report a protocol error for any DATA frame before headers
  * BUG/MINOR: freq_ctr: fix possible negative rate with the scaled API
  * BUG/MEDIUM: master/cli: Pin the master CLI on the first thread of the group 1
  * BUG/MINOR: promex: fix backend_agg_check_status
  * BUG/MEDIUM: mux-fcgi: Don't swap trash and dbuf when handling STDERR records
  * BUG/MINOR: hlua/init: coroutine may not resume itself
  * BUG/MEDIUM: hlua: don't pass stale nargs argument to lua_resume()
  * CI: musl: drop shopt in workflow invocation
  * CI: musl: highlight section if there are coredumps
  * Revert "BUG/MEDIUM: quic: missing check of dcid for init pkt including a token"
  * BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread
  * MINOR: hlua: add hlua_stream_ctx_prepare helper function
  * BUILD: quic: fix build on centos 8 and USE_QUIC_OPENSSL_COMPAT
  * BUG/MINOR: quic: ssl_quic_initial_ctx() uses error count not error code
  * BUG/MINOR: quic: allow-0rtt warning must only be emitted with quic bind
  * BUILD: Makefile: add USE_QUIC_OPENSSL_COMPAT to make help
  * MINOR: quic+openssl_compat: Emit an alert for "allow-0rtt" option
  * MINOR: quic+openssl_compat: Do not start without "limited-quic"
  * MINOR: quic: Warning for OpenSSL wrapper QUIC bindings without "limited-quic"
  * BUG/MINOR: quic+openssl_compat: Non initialized TLS encryption levels
  * DOC: quic: Add "limited-quic" new tuning setting
  * MINOR: quic: Add "limited-quic" new tuning setting
  * MINOR: quic: SSL context initialization with QUIC OpenSSL wrapper.
  * MINOR: quic: Add a quic_openssl_compat struct to quic_conn struct
  * MINOR: quic: Call the keylog callback for QUIC openssl wrapper from SSL_CTX_keylog()
  * MINOR: quic: Initialize TLS contexts for QUIC openssl wrapper
  * MINOR: quic: Export some KDF functions (QUIC-TLS)
  * MINOR: quic: Add a compilation option for the QUIC OpenSSL wrapper
  * MINOR: quic: Do not enable 0RTT with SSL_set_quic_early_data_enabled()
  * MINOR: quic: Set the QUIC connection as extra data before calling SSL_set_quic_method()
  * MINOR: quic: Do not enable O-RTT with USE_QUIC_OPENSSL_COMPAT
  * MINOR: quic: Include QUIC opensssl wrapper header from TLS stacks compatibility header
  * MINOR: quic: QUIC openssl wrapper implementation
  * BUG/MINOR: quic: Wrong cluster secret initialization
  * BUG/MINOR: quic: Leak of frames to send.
  * BUILD: bug: make BUG_ON() void to avoid a rare warning</changelog>
  <changelog author="varkoly@suse.com" date="1759665600">- VUL-0: CVE-2025-11230: haproxy: issue in the mjson JSON decoder leads
  to excessive resource consumption when processing numbers with large exponents
  (bsc#1250983)  Add upstream patch:
  0001-BUG-CRITICAL-mjson-fix-possible-DoS-when-parsing-num.patch</changelog>
</package>
<package pkgid="c5392297121f9f61561f5c5948a05378a479a0e3fe9a8bc5f8df2506998d09f5cf7fbf19f89358efd223edddab9c2a707903b9e48729de7fb03e339a18e9573a" name="haproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="2.8.11+git0.01c1056a4" rel="slfo.1.1_2.1"/>
  <changelog author="mrueckert@suse.de" date="1683028800">- Update to version 2.7.8+git0.58c657f26:
  * [RELEASE] Released version 2.7.8
  * MINOR: listener: remove the now useless LI_F_QUIC_LISTENER flag</changelog>
  <changelog author="mrueckert@suse.de" date="1685534400">- Update to version 2.8.0+git0.fdd8154ed:
  https://www.mail-archive.com/haproxy@formilux.org/msg43600.html</changelog>
  <changelog author="mrueckert@suse.de" date="1685534401">- Refreshed patches to apply cleanly again:
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
- Updated series file: removed outdated patches</changelog>
  <changelog author="mrueckert@suse.de" date="1688385600">- Update to version 2.8.1+git0.a90123aa8:
  * [RELEASE] Released version 2.8.1
  * CLEANUP: quic: Remove server specific about Initial packet number space
  * MINOR: quic: Reduce the maximum length of TLS secrets
  * MINOR: quic: Move packet number space related functions
  * MINOR: quic: Move QUIC encryption level structure definition
  * BUILD: debug: avoid a build warning related to epoll_wait() in debug code
  * MINOR: compression/slz: add support for a pure flush of pending bytes
  * IMPORT: slz: implement a synchronous flush() operation
  * BUG/MINOR: quic: Wrong endianess for version field in Retry token
  * BUG/MINOR: quic: Wrong Retry paquet version field endianess
  * BUG/MINOR: quic: Missing random bits in Retry packet header
  * BUG/MINOR: config: fix stick table duplicate name check
  * BUG/MEDIUM: quic: error checking buffer large enought to receive the retry tag
  * BUG/MINOR: quic: Prevent deadlock with CID tree lock
  * BUG/MINOR: mworker: leak of a socketpair during startup failure
  * BUG/MINOR: http_ext: fix if-none regression in forwardfor option
  * DOC: Attempt to fix dconv parsing error for tune.h2.fe.initial-window-size
  * REGTESTS: h1_host_normalization : Add a barrier to not mix up log messages
  * DOC: Add tune.h2.max-frame-size option to table of contents
  * DOC: Add tune.h2.be.* and tune.h2.fe.* options to table of contents
  * BUG/MINOR: quic: ticks comparison without ticks API use
  * BUG/MEDIUM: mworker: increase maxsock with each new worker
  * BUG/MINOR: quic: Possible endless loop in quic_lstnr_dghdlr()
  * BUG/MINOR: quic: Possible crash in quic_conn_prx_cntrs_update()
  * BUG/MINOR: quic: Missing initialization (packet number space probing)
  * BUG/MINOR: namespace: missing free in netns_sig_stop()
  * BUG/MINOR: server: inherit from netns in srv_settings_cpy()
  * BUG/MINOR: quic: Address inversion in "show quic full"
  * BUG/MINOR: quic: Wrong encryption level flags checking
  * BUG/MINOR: ssl: log message non thread safe in SSL Hanshake failure
  * REG-TESTS: stickiness: Delay haproxys start to properly resolv variables
  * BUG/MINOR: peers: Improve detection of config errors in peers sections
  * BUG/MEDIUM: hlua: Use front SC to detect EOI in HTTP applets' receive functions
  * BUG/MINOR: proxy/server: free default-server on deinit
  * BUG/MINOR: proxy: add missing interface bind free in free_proxy
  * BUG/MINOR: cfgparse-tcp: leak when re-declaring interface from bind line
  * DOC: config: fix rfc7239 converter examples (again)
  * DOC: config: fix jwt_verify() example using var()
  * DOC: quic: fix misspelled tune.quic.socket-owner
  * BUG/MINOR: spoe: Only skip sending new frame after a receive attempt
  * CONTRIB: Add vi file extensions to .gitignore
  * BUG/MINOR: quic: Possible crash when SSL session init fails
  * BUG/MINOR: stream: do not use client-fin/server-fin with HTX
  * BUG/MINOR: stats: Fix Lua's `get_stats` function</changelog>
  <changelog author="mrueckert@suse.de" date="1691582400">- Update to version 2.8.2+git0.61a0f576a: (boo#1214102) CVE-2023-40225
  * [RELEASE] Released version 2.8.2
  * BUG/MINOR: http: skip leading zeroes in content-length values
  * DOC: clarify the handling of URL fragments in requests
  * REGTESTS: http-rules: verify that we block '#' by default for normalize-uri
  * BUG/MINOR: h3: reject more chars from the :path pseudo header
  * BUG/MINOR: h2: reject more chars from the :path pseudo header
  * BUG/MINOR: h1: do not accept '#' as part of the URI component
  * REGTESTS: http-rules: add accept-invalid-http-request for normalize-uri tests
  * MINOR: h2: pass accept-invalid-http-request down the request parser
  * MINOR: http: add new function http_path_has_forbidden_char()
  * MINOR: ist: add new function ist_find_range() to find a character range
  * BUG/MAJOR: http: reject any empty content-length header value
  * BUG/MAJOR: h3: reject header values containing invalid chars
  * REORG: http: move has_forbidden_char() from h2.c to http.h
  * BUG/MAJOR: http-ana: Get a fresh trash buffer for each header value replacement
  * BUILD: quic: fix wrong potential NULL dereference
  * BUG/MINOR: quic: reappend rxbuf buffer on fake dgram alloc error
  * BUG/MINOR: http-client: Don't forget to commit changes on HTX message
  * BUG/MEDIUM: quic: consume contig space on requeue datagram
  * BUG/MEDIUM: bwlim: Reset analyse expiration date when then channel analyse ends
  * BUG/MEDIUM: h3: Be sure to handle fin bit on the last DATA frame
  * BUG/MINOR: chunk: fix chunk_appendf() to not write a zero if buffer is full
  * DOC: configuration: describe Td in Timing events
  * BUG/MEDIUM: h3: Properly report a C-L header was found to the HTX start-line
  * BUG/MINOR: ssl: OCSP callback only registered for first SSL_CTX
  * MINOR: quic: Useless call to SSL_CTX_set_quic_method()
  * MINOR: quic: Make -&gt;set_encryption_secrets() be callable two times
  * BUG/MEDIUM: listener: Acquire proxy's lock in relax_listener() if necessary
  * BUG/MINOR: server-state: Avoid warning on 'file not found'
  * BUG/MINOR: server-state: Ignore empty files
  * BUG/MINOR: quic: Missing parentheses around PTO probe variable.
  * BUG/MINOR: server: Don't warn on server resolution failure with init-addr none
  * BUG/MINOR: init: set process' affinity even in foreground
  * BUG/MINOR: cpuset: remove the bogus "proc" from the cpu_map struct
  * BUG/MINOR: config: do not detect NUMA topology when cpu-map is configured
  * MINOR: cpuset: add cpu_map_configured() to know if a cpu-map was found
  * BUG/MINOR: h1-htx: Return the right reason for 302 FCGI responses
  * BUG/MINOR: hlua: add check for lua_newstate
  * BUILD: quic: fix warning during compilation using gcc-6.5
  * CI: explicitely highlight VTest result section if there's something
  * CI: add naming convention documentation
  * BUG/MINOR: http: Return the right reason for 302
  * BUG/MINOR: sample: Fix wrong overflow detection in add/sub conveters
  * DOC: config: Fix fc_src description to state the source address is returned
  * BUG/MEDIUM: hlua_fcn/queue: bad pop_wait sequencing
  * BUG/MINOR: hlua: hlua_yieldk ctx argument should support pointers
  * CLEANUP: quic: remove useless parameter 'key' from quic_packet_encrypt
  * BUG/MEDIUM: quic: timestamp shared in token was using internal time clock
  * BUG/MEDIUM: quic: missing check of dcid for init pkt including a token
  * BUG/MINOR: quic: retry token remove one useless intermediate expand
  * BUG/MEDIUM: quic: token IV was not computed using a strong secret
  * BUG/MINOR: config: Remove final '\n' in error messages
  * BUG/MINOR: hlua_fcn/queue: use atomic load to fetch queue size
  * EXAMPLES: maintain haproxy 2.8 retrocompatibility for lua mailers script
  * BUG/MINOR: sink/log: properly deinit srv in sink_new_from_logsrv()
  * MINOR: hlua_fcn/mailers: handle timeout mail from mailers section
  * BUG/MINOR: server: set rid default value in new_server()
  * BUG/MINOR: sink: fix errors handling in cfg_post_parse_ring()
  * BUG/MINOR: sink: invalid sft free in sink_deinit()
  * BUG/MINOR: log: free errmsg on error in cfg_parse_log_forward()
  * BUG/MINOR: log: fix multiple error paths in cfg_parse_log_forward()
  * BUG/MINOR: log: fix missing name error message in cfg_parse_log_forward()
  * BUG/MEDIUM: log: improper use of logsrv-&gt;maxlen for buffer targets
  * MINOR: sink/api: pass explicit maxlen parameter to sink_write()
  * BUG/MINOR: log: LF upsets maxlen for UDP targets
  * BUG/MINOR: ring: maxlen warning reported as alert
  * BUG/MINOR: ring: size warning incorrectly reported as fatal error
  * BUG/MINOR: sink: missing sft free in sink_deinit()
  * BUG/MINOR: http_ext: unhandled ERR_ABORT in proxy_http_parse_7239()
  * BUG/MEDIUM: sink: invalid server list in sink_new_from_logsrv()
  * BUG/MINOR: cache: A 'max-age=0' cache-control directive can be overriden by a s-maxage
  * BUG/MINOR: tcp_sample: bc_{dst,src} return IP not INT
  * DOC: ssl: Add ocsp-update troubleshooting clues and emphasize on crt-list only aspect
  * DOC: ssl: Fix typo in 'ocsp-update' option</changelog>
  <changelog author="varkoly@suse.com" date="1692619200">- Build error on ppc64le: include/import/xxhash.h:4148:9: error: invalid parameter combination for AltiVec intrinsic __builtin_vec_ld
  Add patch:
  fix-invalid-parameter-combination-for-AltiVec-intrinsic-__builtin_vec_ld.patch</changelog>
  <changelog author="varkoly@suse.com" date="1693396800">- Apply upstream patch for the ppc64le issue:
  Add patch:
  0001-IMPORT-xxhash-update-xxHash-to-version-0.8.2.patch
  Remove patch:
  fix-invalid-parameter-combination-for-AltiVec-intrinsic-__builtin_vec_ld.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1694088000">- Update to version 2.8.3+git0.86e043add:
  * [RELEASE] Released version 2.8.3
  * CI: Update to actions/checkout@v4
  * MEDIUM: capabilities: enable support for Linux capabilities
  * BUG/MINOR: hlua/action: incorrect message on E_YIELD error
  * BUG/MINOR: ring/cli: Don't expect input data when showing events
  * BUG/MINOR: applet: Always expect data when CLI is waiting for a new command
  * NUG/MEDIUM: stconn: Always update stream's expiration date after I/O
  * BUG/MEDIUM: stconn/stream: Forward shutdown on write timeout
  * BUG/MEDIUM: applet: Report an error if applet request more room on aborted SC
  * BUG/MEDIUM: stconn: Report read activity when a stream is attached to front SC
  * BUG/MEDIUM: applet: Fix API for function to push new data in channels buffer
  * BUG/MINOR: quic: Wrong RTT computation (srtt and rrt_var)
  * BUG/MINOR: quic: Wrong RTT adjusments
  * MINOR: httpclient: allow to configure the timeout.connect
  * MINOR: httpclient: allow to configure the retries
  * DOC: configuration: update examples for req.ver
  * BUG/MINOR: stream: further protect stream_dump() against incomplete sessions
  * BUG/MEDIUM: h1-htx: Ensure chunked parsing with full output buffer
  * BUG/MAJOR: quic: Really ignore malformed ACK frames.
  * BUG/MINOR: quic: Possible skipped RTT sampling
  * BUG/MEDIUM: stconn: Don't block sends if there is a pending shutdown
  * BUG/MEDIUM: stconn: Wake applets on sending path if there is a pending shutdown
  * BUG/MINOR: stconn: Don't report blocked sends during connection establishment
  * BUG/MEDIUM: stconn: Update stream expiration date on blocked sends
  * DEBUG: applet: Properly report opposite SC expiration dates in traces
  * BUG/MINOR: checks: do not queue/wake a bounced check
  * DOC: config: mention uid dependency on the tune.quic.socket-owner option
  * BUG/MINOR: stream: protect stream_dump() against incomplete streams
  * BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate
  * BUILD: import: guard plock.h against multiple inclusion
  * BUG/MINOR: ssl_sock: fix possible memory leak on OOM
  * DOC: lua: fix core.register_action typo
  * BUG/MINOR: hlua_fcn: potentially unsafe stktable_data_ptr usage
  * CI: fedora: fix "dnf" invocation syntax
  * IMPORT: xxhash: update xxHash to version 0.8.2
  * MINOR: atomic: make sure to always relax after a failed CAS
  * MINOR: threads: inline the wait function for pthread_rwlock emulation
  * IMPORT: plock: also support inlining the int code
  * BUILD: Makefile: add the USE_QUIC option to make help
  * DOC: jwt: Add explicit list of supported algorithms
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (3)
  * SCRIPTS: git-show-backports: automatic ref and base detection with -m
  * DOC: typo: fix sc-set-gpt references
  * BUG/MINOR: stktable: allow sc-add-gpc from tcp-request connection
  * BUG/MINOR: stktable: allow sc-set-gpt(0) from tcp-request connection
  * DEV: flags/show-sess-to-flags: properly decode fd.state
  * BUG/MINOR: hlua: fix invalid use of lua_pop on error paths
  * BUG/MEDIUM: quic: fix tasklet_wakeup loop on connection closing
  * CI: get rid of travis-ci wrapper for Coverity scan
  * CI: do not use "groupinstall" for Fedora Rawhide builds
- drop 0001-IMPORT-xxhash-update-xxHash-to-version-0.8.2.patch:
  part of the version update</changelog>
  <changelog author="varkoly@suse.com" date="1733400000">- Update to version 2.8.11+git0.01c1056a4:
  VUL-0: CVE-2024-53008: haproxy: HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server
  (bsc#1233973)
  * [RELEASE] Released version 2.8.11
  * BUG/MINOR: cfgparse-listen: fix option httpslog override warning message
  * BUG/MEDIUM: promex: Wait to have the request before sending the response
  * BUG/MEDIUM: cache/stats: Wait to have the request before sending the response
  * BUG/MEDIUM: queue: implement a flag to check for the dequeuing
  * BUG/MINOR: clock: validate that now_offset still applies to the current date
  * BUG/MINOR: clock: make time jump corrections a bit more accurate
  * BUG/MINOR: polling: fix time reporting when using busy polling
  * BUG/MAJOR: mux-h1: Wake SC to perform 0-copy forwarding in CLOSING state
  * BUG/MEDIUM: pattern: prevent UAF on reused pattern expr
  * BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg()
  * BUG/MEDIUM: clock: detect and cover jumps during execution
  * REGTESTS: fix random failures with wrong_ip_port_logging.vtc under load
  * DOC: configuration: place the HAPROXY_HTTP_LOG_FMT example on the correct line
  * BUG/MINOR: pattern: do not leave a leading comma on "set" error messages
  * BUG/MINOR: pattern: pat_ref_set: return 0 if err was found
  * BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity
  * BUG/MINOR: stconn: Request to send something to be woken up when the pipe is full
  * BUG/MEDIUM: mux-pt/mux-h1: Release the pipe on connection error on sending path
  * BUG/MEDIUM: clock: also update the date offset on time jumps
  * DOC: config: correct the table for option tcplog
  * BUG/MINOR: h3: properly reject too long header responses
  * BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails
  * BUG/MINOR: mux-quic: do not send too big MAX_STREAMS ID
  * REGTESTS: mcli: test the pipelined commands on master CLI
  * BUG/MEDIUM: mworker/cli: fix pipelined modes on master CLI
  * MINOR: channel: implement ci_insert() function
  * BUG/MINOR: proto_tcp: keep error msg if listen() fails
  * BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails
  * BUG/MINOR: quic/trace: make quic_conn_enc_level_init() emit NEW not CLOSE
  * BUG/MINOR: trace/quic: make "qconn" selectable as a lockon criterion
  * BUG/MINOR: trace: automatically start in waiting mode with "start &lt;evt&gt;"
  * BUG/MEDIUM: trace: fix null deref in lockon mechanism since TRACE_ENABLED()
  * BUG/MINOR: trace/quic: permit to lock on frontend/connect/session etc
  * BUG/MINOR: trace/quic: enable conn/session pointer recovery from quic_conn
  * BUG/MINOR: fcgi-app: handle a possible strdup() failure
  * BUG/MEDIUM: mux-h2: Propagate term flags to SE on error in h2s_wake_one_stream
  * BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams
  * BUG/MEDIUM: http-ana: Report error on write error waiting for the response
  * BUG/MEDIUM: quic: prevent conn freeze on 0RTT undeciphered content
  * BUG/MEDIUM: stconn: Report error on SC on send if a previous SE error was set
  * BUG/MEDIUM: mux-h1: Properly handle empty message when an error is triggered
  * BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli
  * BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready
  * BUG/MEDIUM: init: fix fd_hard_limit default in compute_ideal_maxconn
  * MEDIUM: init: set default for fd_hard_limit via DEFAULT_MAXFD (take #2)
  * BUG/MEDIUM: queue: deal with a rare TOCTOU in assign_server_and_queue()
  * MINOR: queue: add a function to check for TOCTOU after queueing
  * BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature
  * BUG/MINOR: quic: Lack of precision when computing K (cubic only cc)
  * BUG/MINOR: cli: Atomically inc the global request counter between CLI commands
  * BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution
  * BUG/MINOR: stick-table: fix crash for src_inc_gpc() without stkcounter
  * DOC: config: improve the http-keep-alive section
  * DOC: configuration: issuers-chain-path not compatible with OCSP
  * BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path
  * BUG/MEDIUM: debug/cli: fix "show threads" crashing with low thread counts
  * BUG/MINOR: session: Eval L4/L5 rules defined in the default section
  * BUG/MEDIUM: bwlim: Be sure to never set the analyze expiration date in past
  * BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread
  * BUG/MEDIUM: h1: Reject empty Transfer-encoding header
  * BUG/MINOR: h1: Reject empty coding name as last transfer-encoding value
  * BUG/MINOR: h1: Fail to parse empty transfer coding names
  * BUG/MINOR: jwt: fix variable initialisation
  * DOC: configuration: update maxconn description
  * BUG/MINOR: jwt: don't try to load files with HMAC algorithm
  * MEDIUM: ssl: initialize the SSL stack explicitely
  * DOC: configuration: more details about the master-worker mode
  * BUG/MEDIUM: quic: fix possible exit from qc_check_dcid() without unlocking
  * BUG/MINOR: quic: fix race-condition on trace for CID retrieval
  * BUG/MINOR: quic: fix race condition in qc_check_dcid()
  * BUG/MEDIUM: quic: fix race-condition in quic_get_cid_tid()
  * BUG/MEDIUM: h3: ensure the ":scheme" pseudo header is totally valid
  * BUG/MEDIUM: h3: ensure the ":method" pseudo header is totally valid
  * MINOR: activity: make the memory profiling hash size configurable at build time
  * BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct()
  * BUG/MINOR: quic: fix BUG_ON() on Tx pkt alloc failure
  * BUG/MINOR: mux-quic: fix crash on qcs SD alloc failure
  * BUG/MINOR: h3: fix crash on STOP_SENDING receive after GOAWAY emission
  * DOC: api/event_hdl: small updates, fix an example and add some precisions
  * SCRIPTS: git-show-backports: do not truncate git-show output
  * DOC: configuration: fix alphabetical order of bind options
  * DOC: management: rename show stats domain cli "dns" to "resolvers"
  * DOC/MINOR: management: add missed -dR and -dv options
  * BUG/MINOR: proxy: fix header_unique_id leak on deinit()
  * BUG/MINOR: proxy: fix source interface and usesrc leaks on deinit()
  * BUG/MINOR: proxy: fix dyncookie_key leak on deinit()
  * BUG/MINOR: proxy: fix check_{command,path} leak on deinit()
  * BUG/MINOR: proxy: fix log_tag leak on deinit()
  * BUG/MINOR: proxy: fix server_id_hdr_name leak on deinit()
  * BUG/MINOR: quic: fix computed length of emitted STREAM frames
  * [RELEASE] Released version 2.8.10
  * BUG/MEDIUM: quic: don't blindly rely on unaligned accesses
  * BUG/MAJOR: connection: fix server used_conns with H2 + reuse safe
  * BUG/MEDIUM: http_ana: ignore NTLM for reuse aggressive/always and no H1
  * BUG/MAJOR: server: do not delete srv referenced by session
  * MINOR: session: rename private conns elements
  * BUG/MEDIUM: quic: fix connection freeze on post handshake
  * BUG/MEDIUM: server: fix dynamic servers initial settings
  * BUG/MEDIUM: ssl: wrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration
  * CLEANUP: hlua: simplify ambiguous lua_insert() usage in hlua_ctx_resume()
  * BUG/MINOR: hlua: fix leak in hlua_ckch_set() error path
  * BUG/MINOR: hlua: prevent LJMP in hlua_traceback()
  * BUG/MINOR: hlua: fix unsafe hlua_pusherror() usage
  * BUG/MINOR: hlua: don't use lua_pushfstring() when we don't expect LJMP
  * CLEANUP: hlua: use hlua_pusherror() where relevant
  * BUG/MINOR: quic: prevent crash on qc_kill_conn()
  * BUG/MINOR: hlua: use CertCache.set() from various hlua contexts
  * BUG/MINOR: tools: fix possible null-deref in env_expand() on out-of-memory
  * BUG/MINOR: tcpcheck: report correct error in tcp-check rule parser
  * BUG/MINOR: cfgparse: remove the correct option on httpcheck send-state warning
  * BUG/MINOR: activity: fix Delta_calls and Delta_bytes count
  * BUG/MINOR: ssl/ocsp: init callback func ptr as NULL
  * CLEANUP: ssl/ocsp: readable ifdef in ssl_sock_load_ocsp
  * BUILD: fd: errno is also needed without poll()
  * CI: scripts: fix build of vtest regarding option -C
  * REGTESTS: acl_cli_spaces: avoid a warning caused by undefined logs
  * DOC: config: fix incorrect section reference about custom log format
  * DOC: quic: specify that connection migration is not supported
  * BUG/MINOR: server: Don't reset resolver options on a new default-server line
  * BUG/MINOR: http-htx: Support default path during scheme based normalization
  * BUG/MINOR: quic: adjust restriction for stateless reset emission
  * MEDIUM: config: prevent communication with privileged ports
  * BUILD: quic: fix unused variable warning when threads are disabled
  * BUG/MEDIUM: mux-quic: Create sedesc in same time of the QUIC stream
  * BUG/MEDIUM: quic_tls: prevent LibreSSL &lt; 4.0 from negotiating CHACHA20_POLY1305
  * BUG/MAJOR: quic: Crash with TLS_AES_128_CCM_SHA256 (libressl only)
  * BUG/MINOR: connection: parse PROXY TLV for LOCAL mode
  * DOC: configuration: update the crt-list documentation
  * CLEANUP: ssl/cli: remove unused code in dump_crtlist_conf
  * BUG/MINOR: stats: Don't state the 303 redirect response is chunked
  * BUG/MINOR: htpp-ana/stats: Specify that HTX redirect messages have a C-L header
  * BUG/MEDIUM: fd: prevent memory waste in fdtab array
  * BUILD: stick-tables: better mark the stktable_data as 32-bit aligned
  * BUG/MEDIUM: h1: Reject CONNECT request if the target has a scheme
  * BUG/MINOR: h1: Check authority for non-CONNECT methods only if a scheme is found
  * BUG/MEDIUM: stick-tables: properly mark stktable_data as packed
  * BUG/MEDIUM: htx: mark htx_sl as packed since it may be realigned
  * BUG/MINOR: qpack: fix error code reported on QPACK decoding failure
  * BUG/MINOR: mux-quic: fix error code on shutdown for non HTTP/3
  * BUG/MINOR: log: smp_rgs array issues with inherited global log directives
  * BUG/MINOR: log: keep the ref in dup_logger()
  * MINOR: log: add dup_logsrv() helper function
  * DOC: lua: fix filters.txt file location
  * BUG/MINOR: haproxy: only tid 0 must not sleep if got signal
  * BUILD: clock: improve check for pthread_getcpuclockid()
  * BUG/MINOR: mworker: reintroduce way to disable seamless reload with -x /dev/null
  * BUG/MINOR: h1: fix detection of upper bytes in the URI
  * BUG/MINOR: backend: use cum_sess counters instead of cum_conn
  * BUG/MINOR: fd: my_closefrom() on Linux could skip contiguous series of sockets
  * BUG/MINOR: sock: handle a weird condition with connect()
  * BUG/MINOR: stconn: Fix sc_mux_strm() return value
  * BUG/MEDIUM: cache: Vary not working properly on anything other than accept-encoding
  * BUG/MINOR: server: fix slowstart behavior
  * BUG/MEDIUM: peers: Fix exit condition when max-updates-at-once is reached
  * BUG/MEDIUM: spoe: Always retry when an applet fails to send a frame
  * BUG/MEDIUM: applet: Fix applet API to put input data in a buffer
  * BUG/MEDIUM: evports: do not clear returned events list on signal
  * BUG/MEDIUM: stconn: Don't forward channel data if input data must be filtered
  * BUG/MEDIUM: grpc: Fix several unaligned 32/64 bits accesses
  * MINOR: net_helper: Add support for floats/doubles.
  * CI: revert kernel addr randomization introduced in 3a0fc864
  * BUG/MEDIUM: peers/trace: fix crash when listing event types
  * BUG/MINOR: debug: make sure DEBUG_STRICT=0 does work as documented
  * BUG/MINOR: http-ana: Fix TX_L7_RETRY and TX_D_L7_RETRY values
  * BUG/MEDIUM: http-ana: Deliver 502 on keep-alive for fressh server connection
  * CLEANUP: log: lf_text_len() returns a pointer not an integer
  * BUG/MINOR: log: invalid snprintf() usage in sess_build_logline()
  * BUG/MINOR: tools/log: invalid encode_{chunk,string} usage
  * BUG/MINOR: log: fix lf_text_len() truncate inconsistency
  * BUG/MINOR: listener: always assign distinct IDs to shards
  * BUG/MINOR: cli: Report an error to user if command or payload is too big
  * [RELEASE] Released version 2.8.9
  * BUILD: proxy: Replace free_logformat_list() to manually release log-format
  * [RELEASE] Released version 2.8.8
  * BUG/MINOR: proxy: fix logformat expression leak in use_backend rules
  * BUG/MINOR: backend: properly handle redispatch 0
  * BUG/MINOR: server: ignore 'enabled' for dynamic servers
  * BUG/MEDIUM: cli: Warn if pipelined commands are delimited by a \n
  * MINOR: cli: Remove useless loop on commands to find unescaped semi-colon
  * MINOR: server: allow cookie for dynamic servers
  * BUG/MINOR: server: fix persistence cookie for dynamic servers
  * BUG/MINOR: ssl: Detect more 'ocsp-update' incompatibilities
  * BUG/MINOR: ssl: Wrong ocsp-update "incompatibility" error message
  * BUG/MINOR: server: 'source' interface ignored from 'default-server' directive
  * OPTIM: http_ext: avoid useless copy in http_7239_extract_{ipv4,ipv6}
  * BUG/MEDIUM: mux-fcgi: Properly handle EOM flag on end-of-trailers HTX block
  * BUG/MINOR: mux-quic: close all QCS before freeing QCC tasklet
  * BUG/MEDIUM: ssl: Fix crash in ocsp-update log function
  * BUG/MINOR: session: ensure conn owner is set after insert into session
  * BUG/MEDIUM: spoe: Return an invalid frame on recv if size is too small
  * CI: temporarily adjust kernel entropy to work with ASAN/clang
  * BUG/MINOR: spoe: Be sure to be able to quickly close IDLE applets on soft-stop
  * BUG/MEDIUM: spoe: Don't rely on stream's expiration to detect processing timeout
  * BUG/MINOR: listener: Don't schedule frontend without task in listener_release()
  * BUG/MINOR: listener: Wake proxy's mngmt task up if necessary on session release
  * BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread (2nd try)
  * MINOR: hlua: use accessors for stream hlua ctx
  * DEBUG: lua: precisely identify if stream is stuck inside lua or not
  * BUG/MINOR: hlua: fix missing lock in hlua_filter_delete()
  * BUG/MINOR: hlua: missing lock in hlua_filter_new()
  * BUG/MINOR: hlua: segfault when loading the same filter from different contexts
  * BUG/MINOR: ssl: fix possible ctx memory leak in sample_conv_aes_gcm()
  * DOC: configuration: clarify ciphersuites usage (V2)
  * BUILD: solaris: fix compilation errors
  * BUG/MINOR: cfgparse: report proper location for log-format-sd errors
  * BUG/MINOR: ssl/cli: typo in new ssl crl-file CLI description
  * CI: skip scheduled builds on forks
  * BUG/MINOR: sink: fix a race condition in the TCP log forwarding code
  * BUG/MINOR: hlua: don't call ha_alert() in hlua_event_subscribe()
  * BUG/MAJOR: hlua: improper lock usage with hlua_ctx_resume()
  * BUG/MEDIUM: hlua: improper lock usage with SET_SAFE_LJMP()
  * BUG/MINOR: hlua: improper lock usage in hlua_filter_new()
  * BUG/MINOR: hlua: improper lock usage in hlua_filter_callback()
  * BUG/MINOR: hlua: fix possible crash in hlua_filter_new() under load
  * BUG/MINOR: hlua: don't use lua_tostring() from unprotected contexts
  * BUG/MINOR: hlua: fix unsafe lua_tostring() usage with empty stack
  * BUG/MINOR: tools: seed the statistical PRNG slightly better
  * MINOR: hlua: Be able to disable logging from lua
  * BUG/MINOR: hlua: Fix log level to the right value when set via TXN:set_loglevel
  * BUG/MINOR: config/quic: Alert about PROXY protocol use on a QUIC listener
  * DOC: configuration: clarify ciphersuites usage
  * LICENSE: http_ext: fix GPL license version
  * LICENSE: event_hdl: fix GPL license version
  * BUG/MINOR: ssl/cli: duplicate cleaning code in cli_parse_del_crtlist
  * BUG/MINOR: ist: only store NUL byte on succeeded alloc
  * BUG/MINOR: quic: fix output of show quic
  * BUG/MAJOR: server: fix stream crash due to deleted server
  * BUG/MINOR: stats: drop srv refcount on early release
  * BUG/MINOR: ist: allocate nul byte on istdup
  * MINOR: quic: warn on bind on multiple addresses if no IP_PKTINFO support
  * DOC: quic: fix recommandation for bind on multiple address
  * BUG/MEDIUM: quic: fix transient send error with listener socket
  * BUG/MEDIUM: hlua: Don't loop if a lua socket does not consume received data
  * BUG/MEDIUM: hlua: Be able to garbage collect uninitialized lua sockets
  * BUG/MEDIUM: applet: Immediately free appctx on early error
  * DOC: quic: Missing tuning setting in "Global parameters"
  * BUG/MINOR: qpack: reject invalid dynamic table capacity
  * BUG/MINOR: qpack: reject invalid increment count decoding
  * BUG/MINOR: quic: reject HANDSHAKE_DONE as server
  * BUG/MINOR: quic: reject unknown frame type
  * BUG/MAJOR: promex: fix crash on deleted server
  * MINOR: connection: add sample fetches to report per-connection glitches
  * MINOR: mux-h2: implement MUX_CTL_GET_GLITCHES
  * MINOR: connection: add a new mux_ctl to report number of connection glitches
  * MEDIUM: mux-h2: allow to set the glitches threshold to kill a connection
  * MINOR: mux-h2: always use h2c_report_glitch()
  * MINOR: mux-h2: count late reduction of INITIAL_WINDOW_SIZE as a glitch
  * MINOR: mux-h2: count excess of CONTINUATION frames as a glitch
  * BUG/MINOR: mux-h2: count rejected DATA frames against the connection's flow control
  * MINOR: mux-h2: add a counter of "glitches" on a connection
  * [RELEASE] Released version 2.8.7
  * BUG/MAJOR: ssl/ocsp: crash with ocsp when old process exit or using ocsp CLI
  * [RELEASE] Released version 2.8.6
  * DEV: makefile: fix POSIX compatibility for "range" target
  * DEV: makefile: add a new "range" target to iteratively build all commits
  * CI: Update to actions/cache@v4
  * DOC: internal: update missing data types in peers-v2.0.txt
  * DOC: install: recommend pcre2
  * DOC: httpclient: add dedicated httpclient section
  * DOC: configuration: clarify http-request wait-for-body
  * BUILD: address a few remaining calloc(size, n) cases
  * BUG/MINOR: ext-check: cannot use without preserve-env
  * MINOR: ext-check: add an option to preserve environment variables
  * BUG/MINOR: diag: run the final diags before quitting when using -c
  * BUG/MINOR: diag: always show the version before dumping a diag warning
  * MINOR: errors: ha_alert() and ha_warning() uses warn_exec_path()
  * MINOR: quic: Add a counter for reordered packets
  * MINOR: quic: Dynamic packet reordering threshold
  * MINOR: quic: Update K CUBIC calculation (RFC 9438)
  * BUG/MEDIUM: quic: Wrong K CUBIC calculation.
  * MINOR: quic: Stop using 1024th of a second.
  * BUG/MINOR: quic: fix possible integer wrap around in cubic window calculation
  * CLEANUP: quic: Code clarifications for QUIC CUBIC (RFC 9438)
  * BUG/MINOR: quic: Wrong ack ranges handling when reaching the limit.
  * BUG/MEDIUM: quic: fix crash on invalid qc_stream_buf_free() BUG_ON
  * BUG/MEDIUM: qpack: allow 6xx..9xx status codes
  * BUG/MEDIUM: h3: do not crash on invalid response status code
  * MINOR: h3: add traces for stream sending function
  * BUG/MEDIUM: quic: remove unsent data from qc_stream_desc buf
  * MINOR: quic: extract qc_stream_buf free in a dedicated function
  * MINOR: quic: Stop hardcoding a scale shifting value (CUBIC_BETA_SCALE_FACTOR_SHIFT)
  * CLEANUP: quic: Remove unused CUBIC_BETA_SCALE_FACTOR_SHIFT macro.
  * BUG/MEDIUM: mux-quic: report early error on stream
  * BUG/MINOR: h3: fix checking on NULL Tx buffer
  * BUG/MEDIUM: ssl: Fix crash when calling "update ssl ocsp-response" when an update is ongoing
  * REGTESTS: ssl: Add OCSP related tests
  * REGTESTS: ssl: Fix empty line in cli command input
  * BUG/MINOR: ssl: Reenable ocsp auto-update after an "add ssl crt-list"
  * BUG/MINOR: ssl: Destroy ckch instances before the store during deinit
  * BUG/MEDIUM: ocsp: Separate refcount per instance and per store
  * MINOR: ssl: Use OCSP_CERTID instead of ckch_store in ckch_store_build_certid
  * BUG/MINOR: ssl: Clear the ckch instance when deleting a crt-list line
  * BUG/MINOR: ssl: Duplicate ocsp update mode when dup'ing ckch
  * BUG/MINOR: ssl: Fix error message after ssl_sock_load_ocsp call
  * BUG/MAJOR: ssl_sock: Always clear retry flags in read/write functions
  * BUG/MEDIUM: h1: always reject the NUL character in header values
  * BUG/MINOR: h1-htx: properly initialize the err_pos field
  * BUG/MEDIUM: h1: Don't support LF only to mark the end of a chunk size
  * BUG/MINOR: h1: Don't support LF only at the end of chunks
  * BUG/MEDIUM: stconn: Don't check pending shutdown to wake an applet up
  * BUG/MEDIUM: stconn: Allow expiration update when READ/WRITE event is pending
  * BUG/MEDIUM: pool: fix rare risk of deadlock in pool_flush()
  * BUG/MINOR: jwt: fix jwt_verify crash on 32-bit archs
  * BUG/MEDIUM: cli: fix once for all the problem of missing trailing LFs
  * BUG/MINOR: vars/cli: fix missing LF after "get var" output
  * BUG/MEDIUM: cli: some err/warn msg dumps add LR into CSV output on stat's CLI
  * REGTESTS: add a test to ensure map-ordering is preserved
  * MINOR: mux-h2/traces: add a missing trace on connection WU with negative inc
  * BUG/MEDIUM: mux-h2: refine connection vs stream error on headers
  * MINOR: mux-h2/traces: clarify the "rejected H2 request" event
  * MINOR: mux-h2/traces: explicitly show the error/refused stream states
  * MINOR: mux-h2/traces: also suggest invalid header upon parsing error
  * MINOR: debug: make BUG_ON() catch build errors even without DEBUG_STRICT
  * MINOR: debug: make ABORT_NOW() store the caller's line number when using abort
  * MINOR: debug: make sure calls to ha_crash_now() are never merged
  * MINOR: compiler: add a new DO_NOT_FOLD() macro to prevent code folding
  * BUG/MEDIUM: quic: keylog callback not called (USE_OPENSSL_COMPAT)
  * BUG/MINOR: mux-h2: also count streams for refused ones
  * BUG/MINOR: mux-quic: do not prevent non-STREAM sending on flow control
  * DOC: configuration: corrected description of keyword tune.ssl.ocsp-update.mindelay
  * MINOR: mux-h2: support limiting the total number of H2 streams per connection
  * BUG/MEDIUM: spoe: Never create new spoe applet if there is no server up
  * BUG/MEDIUM: stconn: Forward shutdown on write timeout only if it is forwardable
  * BUG/MEDIUM: h3: fix incorrect snd_buf return value
  * CLEANUP: quic: Remaining useless code into server part
  * BUG/MINOR: h3: close connection on sending alloc errors
  * BUG/MINOR: h3: properly handle alloc failure on finalize
  * BUG/MINOR: h3: close connection on header list too big
  * MINOR: h3: check connection error during sending
  * BUG/MINOR: quic: Missing call to TLS message callbacks
  * BUG/MINOR: quic: Wrong keylog callback setting.
  * BUG/MINOR: mux-quic: always report error to SC on RESET_STREAM emission
  * BUG/MEDIUM: stats: unhandled switching rules with TCP frontend
  * MINOR: stats: store the parent proxy in stats ctx (http)
  * DOC: config: Update documentation about local haproxy response
  * BUG/MINOR: resolvers: default resolvers fails when network not configured
  * BUG/MEDIUM: mux-h2: Report too large HEADERS frame only when rxbuf is empty
  * BUG/MEDIUM: quic: QUIC CID removed from tree without locking
  * BUG/MEDIUM: quic: Possible buffer overflow when building TLS records
  * BUG/MINOR: mworker/cli: fix set severity-output support
  * DOC: configuration: typo req.ssl_hello_type
  * [RELEASE] Released version 2.8.5
  * BUG/MEDIUM: proxy: always initialize the default settings after init
  * BUG/MINOR: lua: Wrong OCSP CID after modifying an SSL certficate (LUA)
  * BUG/MINOR: ssl: Wrong OCSP CID after modifying an SSL certficate
  * MINOR: ssl/cli: Add ha_(warning|alert) msgs to CLI ckch callback
  * BUG/MINOR: ssl: Double free of OCSP Certificate ID
  * BUG/MINOR: quic: Packet number spaces too lately initialized
  * BUG/MINOR: quic: Missing QUIC connection path member initialization
  * BUG/MINOR: quic: Possible leak of TX packets under heavy load
  * BUG/MEDIUM: quic: Possible crash during retransmissions and heavy load
  * BUG/MINOR: cache: Remove incomplete entries from the cache when stream is closed
  * BUG/MEDIUM: peers: fix partial message decoding
  * DOC: Clarify the differences between field() and word()
  * BUG/MINOR: sample: Make the `word` converter compatible with `-m found`
  * REGTESTS: sample: Test the behavior of consecutive delimiters for the field converter
  * DOC: config: fix monitor-fail typo
  * DOC: config: add matrix entry for "max-session-srv-conns"
  * DOC: config: specify supported sections for "max-session-srv-conns"
  * BUG/MINOR: cfgparse-listen: fix warning being reported as an alert
  * BUG/MINOR: config: Stopped parsing upon unmatched environment variables
  * BUG/MINOR: quic_tp: fix preferred_address decoding
  * DOC: config: fix missing characters in set-spoe-group action
  * BUG/MINOR: h3: always reject PUSH_PROMISE
  * BUG/MINOR: h3: fix TRAILERS encoding
  * BUG/MEDIUM: master/cli: Properly pin the master CLI on thread 1 / group 1
  * BUG/MINOR: compression: possible NULL dereferences in comp_prepare_compress_request()
  * BUG/MINOR: quic: fix CONNECTION_CLOSE_APP encoding
  * DOC: lua: fix Proxy.get_mode() output
  * DOC: lua: add sticktable class reference from Proxy.stktable
  * REGTESTS: connection: disable http_reuse_be_transparent.vtc if !TPROXY
  * DOC: config: fix timeout check inheritance restrictions
  * DOC: 51d: updated 51Degrees repo URL for v3.2.10
  * BUG/MINOR: server: do not leak default-server in defaults sections
  * BUG/MINOR: quic: Possible RX packet memory leak under heavy load
  * BUG/MEDIUM: quic: Possible crash for connections to be killed
  * BUG/MINOR: sock: mark abns sockets as non-suspendable and always unbind them
  * BUG/MINOR: startup: set GTUNE_SOCKET_TRANSFER correctly
  * REGTESTS: http: add a test to validate chunked responses delivery
  * BUG/MINOR: proxy/stktable: missing frees on proxy cleanup
  * MINOR: stktable: add stktable_deinit function
  * BUG/MINOR: stream/cli: report correct stream age in "show sess"
  * BUG/MEDIUM: mux-fcgi: fail earlier on malloc in takeover()
  * BUG/MEDIUM: mux-h1: fail earlier on malloc in takeover()
  * BUG/MEDIUM: mux-h2: fail earlier on malloc in takeover()
  * BUG/MAJOR: quic: complete thread migration before tcp-rules
  * [RELEASE] Released version 2.8.4
  * BUG/MINOR: stconn: Report read activity on non-indep streams for partial sends
  * BUG/MINOR: stconn/applet: Report send activity only if there was output data
  * BUG/MINOR: stconn: Use HTX-aware channel's functions to get info on buffer
  * BUG/MINOR: stconn: Fix streamer detection for HTX streams
  * MINOR: channel: Add functions to get info on buffers and deal with HTX streams
  * MINOR: htx: Use a macro for overhead induced by HTX
  * BUG/MEDIUM: stconn: Update fsb date on partial sends
  * BUG/MEDIUM: stream: Don't call mux .ctl() callback if not implemented
  * BUG/MEDIUM: mworker: set the master variable earlier
  * BUG/MEDIUM: applet: Report a send activity everytime data were sent
  * BUG/MEDIUM: stconn: Report a send activity everytime data were sent
  * REGTESTS: http: Improve script testing abortonclose option
  * BUG/MEDIUM: stream: Properly handle abortonclose when set on backend only
  * MEDIUM: mux-h1: Handle MUX_SUBS_RECV flag in h1_ctl() and susbscribe for reads
  * MINOR: connection: Add a CTL flag to notify mux it should wait for reads again
  * BUG/MINOR: stconn: Handle abortonclose if backend connection was already set up
  * BUG/MEDIUM: connection: report connection errors even when no mux is installed
  * DOC: quic: Wrong syntax for "quic-cc-algo" keyword.
  * BUG/MINOR: sink: don't learn srv port from srv addr
  * BUG/MEDIUM: applet: Remove appctx from buffer wait list on release
  * DOC: config: use the word 'backend' instead of 'proxy' in 'track' description
  * BUG/MINOR: quic: fix retry token check inconsistency
  * DOC: management: -q is quiet all the time
  * BUG/MEDIUM: stconn: Don't update stream expiration date if already expired
  * BUG/MEDIUM: quic: Avoid some crashes upon TX packet allocation failures
  * BUG/MEDIUM: quic: Possible crashes when sending too short Initial packets
  * BUG/MEDIUM: quic: Avoid trying to send ACK frames from an empty ack ranges tree
  * BUG/MINOR: quic: idle timer task requeued in the past
  * BUG/MEDIUM: pool: fix releasable pool calculation when overloaded
  * BUG/MEDIUM: freq-ctr: Don't report overshoot for long inactivity period
  * BUG/MINOR: mux-h1: Properly handle http-request and http-keep-alive timeouts
  * BUG/MINOR: stick-table/cli: Check for invalid ipv4 key
  * BUG/MEDIUM: quic: fix sslconns on quic_conn alloc failure
  * BUG/MEDIUM: quic: fix actconn on quic_conn alloc failure
  * CLEANUP: htx: Properly indent htx_reserve_max_data() function
  * BUG/MINOR: stconn: Sanitize report for read activity
  * BUG/MEDIUM: Don't apply a max value on room_needed in sc_need_room()
  * BUG/MEDIUM: stconn: Don't report rcv/snd expiration date if SC cannot epxire
  * BUG/MEDIUM: pattern: don't trim pools under lock in pat_ref_purge_range()
  * BUG/MINOR: cfgparse/stktable: fix error message on stktable_init() failure
  * BUG/MINOR: stktable: missing free in parse_stick_table()
  * BUG/MINOR: tcpcheck: Report hexstring instead of binary one on check failure
  * BUG/MEDIUM: ssl: segfault when cipher is NULL
  * BUG/MINOR: mux-quic: fix early close if unset client timeout
  * BUG/MINOR: ssl: suboptimal certificate selection with TLSv1.3 and dual ECDSA/RSA
  * MEDIUM: quic: count quic_conn for global sslconns
  * MEDIUM: quic: count quic_conn instance for maxconn
  * MINOR: frontend: implement a dedicated actconn increment function
  * BUG/MINOR: ssl: use a thread-safe sslconns increment
  * BUG/MINOR: quic: do not consider idle timeout on CLOSING state
  * BUG/MEDIUM: server: "proto" not working for dynamic servers
  * MINOR: connection: add conn_pr_mode_to_proto_mode() helper func
  * DEBUG: mux-h2/flags: fix list of h2c flags used by the flags decoder
  * MINOR: lua: Add flags to configure logging behaviour
  * BUG/MINOR: ssl: load correctly @system-ca when ca-base is define
  * DOC: internal: filters: fix reference to entities.pdf
  * BUG/MINOR: mux-h2: update tracked counters with req cnt/req err
  * BUG/MINOR: mux-h2: commit the current stream ID even on reject
  * BUG/MEDIUM: peers: Fix synchro for huge number of tables
  * BUG/MEDIUM: peers: Be sure to always refresh recconnect timer in sync task
  * BUG/MINOR: trace: fix trace parser error reporting
  * BUG/MINOR: mux-h2: fix http-request and http-keep-alive timeouts again
  * BUG/MEDIUM: mux-h2: Don't report an error on shutr if a shutw is pending
  * BUG/MINOR: mux-h2: make up other blocked streams upon removal from list
  * BUG/MINOR: mux-h1: Send a 400-bad-request on shutdown before the first request
  * BUG/MEDIUM: quic-conn: free unsent frames on retransmit to prevent crash
  * BUG/MINOR: mux-quic: fix free on qcs-new fail alloc
  * BUG/MINOR: h3: strengthen host/authority header parsing
  * BUG/MINOR: mux-quic: support initial 0 max-stream-data
  * BUG/MEDIUM: mux-quic: fix RESET_STREAM on send-only stream
  * BUG/MINOR: quic: reject packet with no frame
  * BUG/MINOR: quic: Avoid crashing with unsupported cryptographic algos
  * BUG/MEDIUM: stconn: Fix comparison sign in sc_need_room()
  * BUG/MINOR: hq-interop: simplify parser requirement
  * BUG/MEDIUM: h1: Ignore C-L value in the H1 parser if T-E is also set
  * BUG/MINOR: mux-h1: Ignore C-L when sending H1 messages if T-E is also set
  * BUG/MINOR: mux-h1: Handle read0 in rcv_pipe() only when data receipt was tried
  * BUG/MEDIUM: hlua: Initialize appctx used by a lua socket on connect only
  * MINOR: hlua: Test the hlua struct first when the lua socket is connecting
  * MINOR: hlua: Save the lua socket's server in its context
  * MINOR: hlua: Save the lua socket's timeout in its context
  * MINOR: hlua: Don't preform operations on a not connected socket
  * MINOR: hlua: Set context's appctx when the lua socket is created
  * BUG/MEDIUM: http-ana: Try to handle response before handling server abort
  * BUG/MEDIUM: quic_conn: let the scheduler kill the task when needed
  * BUG/MEDIUM: actions: always apply a longest match on prefix lookup
  * BUG/MINOR: mux-quic: remove full demux flag on ncbuf release
  * BUG/MEDIUM: server/cli: don't delete a dynamic server that has streams
  * MINOR: pattern: fix pat_{parse,match}_ip() function comments
  * BUG/MINOR: server: add missing free for server-&gt;rdr_pfx
  * BUG/MAJOR: mux-h2: Report a protocol error for any DATA frame before headers
  * BUG/MINOR: freq_ctr: fix possible negative rate with the scaled API
  * BUG/MEDIUM: master/cli: Pin the master CLI on the first thread of the group 1
  * BUG/MINOR: promex: fix backend_agg_check_status
  * BUG/MEDIUM: mux-fcgi: Don't swap trash and dbuf when handling STDERR records
  * BUG/MINOR: hlua/init: coroutine may not resume itself
  * BUG/MEDIUM: hlua: don't pass stale nargs argument to lua_resume()
  * CI: musl: drop shopt in workflow invocation
  * CI: musl: highlight section if there are coredumps
  * Revert "BUG/MEDIUM: quic: missing check of dcid for init pkt including a token"
  * BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread
  * MINOR: hlua: add hlua_stream_ctx_prepare helper function
  * BUILD: quic: fix build on centos 8 and USE_QUIC_OPENSSL_COMPAT
  * BUG/MINOR: quic: ssl_quic_initial_ctx() uses error count not error code
  * BUG/MINOR: quic: allow-0rtt warning must only be emitted with quic bind
  * BUILD: Makefile: add USE_QUIC_OPENSSL_COMPAT to make help
  * MINOR: quic+openssl_compat: Emit an alert for "allow-0rtt" option
  * MINOR: quic+openssl_compat: Do not start without "limited-quic"
  * MINOR: quic: Warning for OpenSSL wrapper QUIC bindings without "limited-quic"
  * BUG/MINOR: quic+openssl_compat: Non initialized TLS encryption levels
  * DOC: quic: Add "limited-quic" new tuning setting
  * MINOR: quic: Add "limited-quic" new tuning setting
  * MINOR: quic: SSL context initialization with QUIC OpenSSL wrapper.
  * MINOR: quic: Add a quic_openssl_compat struct to quic_conn struct
  * MINOR: quic: Call the keylog callback for QUIC openssl wrapper from SSL_CTX_keylog()
  * MINOR: quic: Initialize TLS contexts for QUIC openssl wrapper
  * MINOR: quic: Export some KDF functions (QUIC-TLS)
  * MINOR: quic: Add a compilation option for the QUIC OpenSSL wrapper
  * MINOR: quic: Do not enable 0RTT with SSL_set_quic_early_data_enabled()
  * MINOR: quic: Set the QUIC connection as extra data before calling SSL_set_quic_method()
  * MINOR: quic: Do not enable O-RTT with USE_QUIC_OPENSSL_COMPAT
  * MINOR: quic: Include QUIC opensssl wrapper header from TLS stacks compatibility header
  * MINOR: quic: QUIC openssl wrapper implementation
  * BUG/MINOR: quic: Wrong cluster secret initialization
  * BUG/MINOR: quic: Leak of frames to send.
  * BUILD: bug: make BUG_ON() void to avoid a rare warning</changelog>
  <changelog author="varkoly@suse.com" date="1759665600">- VUL-0: CVE-2025-11230: haproxy: issue in the mjson JSON decoder leads
  to excessive resource consumption when processing numbers with large exponents
  (bsc#1250983)  Add upstream patch:
  0001-BUG-CRITICAL-mjson-fix-possible-DoS-when-parsing-num.patch</changelog>
</package>
<package pkgid="c61625be7cd3b94b20fcf1a71c5d7f19f22ae572d3da9b58d324a9c5ba83f9e9fb0420d9bc4319f5e75aa8da2322c100bbd4be30a4eadb8a4d32611f5873b8fc" name="harfbuzz-debugsource" arch="aarch64">
  <version epoch="0" ver="7.2.0" rel="slfo.1.1_1.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1659528000">- harfbuzz 5.1.0:
  + More extensive buffer tracing messages
  + Fix hb-ft regression in bitmap fonts rendering
  + Support extension promotion of lookups in hb-subset-repacker
  + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use
    elongation (e.g. Arabic) to signify where it is safe to insert
    tatweel glyph without interrupting shaping
  + Add --safe-to-insert-tatweel to hb-shape tool
- add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch
  from upstream to fix ARM and PPC builds</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663675200">- Update to version 5.2.0:
  + Fix regressions in hb-ft font functions for FT_Faces with
    transformation matrix.
  + The experimental hb-repacker API now supports splitting several
    GPOS subtable types when needed.
  + The HarfBuzz extensions to OpenType font format are now opt-in
    behind build-time flags.
  + The experimental hb-subset variable fonts instantiation API can
    now instantiate more font tables and arbitrary axis locations.
  + Unicode 15 support.
  + Various documentation improvements.
  + The hb-view command line tool now detects WezTerm inline images
    support.
  + Fix FreeType and ICU dependency lookup with meson.
  + New API:
  - +HB_SCRIPT_KAWI
  - +HB_SCRIPT_NAG_MUNDARI
- Drop patch fixed upstream:
  + harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665316800">- Update to version 5.3.0:
  + Don’t add glyphs from dropped MATH or COLR tables to the subset
    glyphs
  + Map rlig to appropriate AAT feature selectors
  + Update USE data files to latest version
  + Check CBDT extents first before outline tables, to help with
    fonts that also include an empty glyf table
  + More work towards variable font instancing in the subsetter
  + Subsetter repacker improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666353600">- Update to version 5.3.1:
  + Subsetter repacker fixes
  + Adjust Grapheme clusters for Katakana voiced sound marks
  + New hb-subset option --preprocess-face
- Add harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fix failing
  tests.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1671278400">- Update to version 6.0.0:
  + Add API to pre-process the face and speed up future subsetting
    operations on that face. Provides up to a 95% reduction in
    subsetting times when the same face is subset more than once.
  + Shaping have been speedup by skipping entire lookups when the
    buffer contents don't intersect with the lookup. Shows up to a
    10% speedup in shaping some fonts
  + The HarfBuzz subsetter can now drop axes by pinning them to
    specific values (also referred to as instancing)
- Drop harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1675684800">- Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when
  looking back (boo#1207922 CVE-2023-25193).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- Update to version 7.0.0:
  + New hb-paint API that is designed mainly to paint COLRv1 glyphs,
    but can be also used as a unified API to paint any of the glyph
    representations supported by HarfBuzz (B/W outlines, color
    layers, or color bitmaps).
  + New hb-cairo API for integrating with cairo graphics library.
    This is provided as a separate harfbuzz-cairo library.
  + Support for instancing CFF2 table
  + Support font emboldening
  + Support feature ranges with AAT shaping
  + Experimental support to cubic curves in glyf table
  + Various subsetter improvements
  + Various documentation improvements
  + Significantly reduced memory use during shaping
  + Greatly reduced memory use during subsetting CFF table
  + New command line utility, hb-info, for querying various font
    information
  + New hb-shape/hb-view options: --glyphs, --color-palette,
  - -font-bold, --font-grade, and --named-instance
  + Miscellaneous fixes and improvements
- harfbuzz-CVE-2023-25193.patch dropped in favor of upstream
  consensus fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- Update to version 7.0.1:
  + Various build and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677844800">- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to version 7.2.0:
  + Improve Tifinagh glyph positioning
  + Fix 4.2.0 regression in applying across syllables in syllabic
    scripts.
  + Add flag to avoid glyph substitution closure during subsetting,
    and the corresponding “--no-layout-closure” option to
    “hb-subset” command line tool.
  + Support instancing COLRv1 table
  + Optimize handling of “gvar” table
  + Various subsetter bug fixes and improvements, documentation</changelog>
</package>
<package pkgid="61bf9d16c8439b0be4bd91562b9cea47f2422483f85dd0bad56c6cb56a59ec0487e981f8cdf4aebafdd16c486e064dd4304ec8858f18150ef762a0b1198dd0e7" name="hdparm-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.65" rel="slfo.1.1_1.2"/>
  <changelog author="josua.mayer97@gmail.com" date="1549800000">- Update to 9.58
  * fix segfault with -I onr non-ATA drives.</changelog>
  <changelog author="lnussel@suse.de" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 9.60:
  - support for ioSafe Solo with jMicron bridge, courtesy Matthias-Christian Ott.
  - decode more bits from id[69], courtesy Adrián Kálazi.
  - allow passing of custom LDFLAGS from the environment.
  - add new "static" target.
  - fix --dco-identify max sectors, courtesy of Paul Sultana.
  - get rid of leftover "unknown" variables from identify.c
  - fixed return values from get_log_page_data().</changelog>
  <changelog author="info@paolostivanin.com" date="1619524800">- update to 9.61:
  - fixes for --set-sector-size and reporting of physical/logical sector sizes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620648000">- update to 9.62:
  * work around unexpected sign-extending of left-shifted unsigned
    values by gcc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1641902400">- Update to 9.63:
  * new --sanitize-overwrite-passes flag, courtesy Michal Grzedzicki.
  * "Plurals patch" from Martin Guy.</changelog>
  <changelog author="dmueller@suse.com" date="1658577600">- update to 9.64:
  * fix truncated output buf with --Istdin</changelog>
  <changelog author="dmueller@suse.com" date="1660046400">- add avoid-linux-includes.patch (bsc#1202212)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to 9.65:
  * Fixed "hdparm --Istdin" to not attempt reading LOG data from a non-existent drive.
- Refresh avoid-linux-includes.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="2782ec34a38c11092f35426e2d3b459946611e208f55adadb270f844e8c4b9c7f72f2616cc054d4a4ad94df1c32735ba0d27adb50f68a9edf320e7b2e0812a2e" name="hdparm-debugsource" arch="aarch64">
  <version epoch="0" ver="9.65" rel="slfo.1.1_1.2"/>
  <changelog author="josua.mayer97@gmail.com" date="1549800000">- Update to 9.58
  * fix segfault with -I onr non-ATA drives.</changelog>
  <changelog author="lnussel@suse.de" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 9.60:
  - support for ioSafe Solo with jMicron bridge, courtesy Matthias-Christian Ott.
  - decode more bits from id[69], courtesy Adrián Kálazi.
  - allow passing of custom LDFLAGS from the environment.
  - add new "static" target.
  - fix --dco-identify max sectors, courtesy of Paul Sultana.
  - get rid of leftover "unknown" variables from identify.c
  - fixed return values from get_log_page_data().</changelog>
  <changelog author="info@paolostivanin.com" date="1619524800">- update to 9.61:
  - fixes for --set-sector-size and reporting of physical/logical sector sizes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620648000">- update to 9.62:
  * work around unexpected sign-extending of left-shifted unsigned
    values by gcc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1641902400">- Update to 9.63:
  * new --sanitize-overwrite-passes flag, courtesy Michal Grzedzicki.
  * "Plurals patch" from Martin Guy.</changelog>
  <changelog author="dmueller@suse.com" date="1658577600">- update to 9.64:
  * fix truncated output buf with --Istdin</changelog>
  <changelog author="dmueller@suse.com" date="1660046400">- add avoid-linux-includes.patch (bsc#1202212)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to 9.65:
  * Fixed "hdparm --Istdin" to not attempt reading LOG data from a non-existent drive.
- Refresh avoid-linux-includes.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="05d6db57b16363b72dc9d0b00ea30fe983d4e1ada566bd7ce1e9576db6c4cff1af5972b3b2d6587b38bee0ef428db125922dfc4a9aec12420e8bf902a47a0530" name="hidapi-debugsource" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="slfo.1.1_1.3"/>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1623240000">- Add 0001-configure.ac-remove-duplicate-AC_CONFIG_MACRO_DIR-22.patch:
  fix boo#1187056</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 0.11.0:
  * hidraw: (explicit) workaround to allow build with kernels older than 2.6.39
  * libusb: stabilize device path (uses same semantic as Linux kernel)
  * libusb: add platform-specific hid_libusb_wrap_sys_device
  * general: lots of documentation improvements
  * general: (Windows) DDK build files are obsolete
  * general: add CMake build system
  * general: deprecated Autotools build scripts
  * lots of other small fixes and improvements
- remove 0001-configure.ac-remove-duplicate-AC_CONFIG_MACRO_DIR-22.patch (obsolete)</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.12.0:
  * libusb: improved CMake dependency on Iconv (#405) - as a result, better support for NetBSD;
  * general: documentation improvements;
  * general: small code cleanups/improvements;
  * many windows specific fixes
- spec-cleaner cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1673179200">- update to 0.13.0:
  * general: add hid_get_device_info (#432);
  * general: Meson build script (as a wrapper over CMake) (#410);
  * general: add HID Bus Type in hid_device_info (#308);
  * libusb: primary usage_page/usage is now available with hid_get_device_info
    regardless of the compilation flags;
  * hidraw: Open files with O_CLOEXEC to not leak fds to child processes (#446);
  * hidraw: add support for HID over SPI (#486);
  * cmake: libusb: Ensure Iconv is found when provided via CFLAGS/LDFLAGS (#430);</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- update to 0.13.1:
  * hidraw: fix invalid read past the UDEV buffer</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 0.14.0:
  * general: add `hid_get_report_descriptor` API function (#451)
  * libusb: fix crash in hid_enumerate() caused by a stale device
    handle (#526)
  * fixes (mostly error handling) of issues found by
    Coverity Scan (#552/#554/#555/#559/#560/#561)
  * various fixes and improvements</changelog>
</package>
<package pkgid="54582eed02364e2dcbe55d17cef0d380b7f1a56b15303a037a576c3a93d3bc561e58b6186bdf8bd8e26086222ac7a36650ad377f367dc0ee8708ca5dd798e075" name="hivex-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.23" rel="slfo.1.1_1.3"/>
  <changelog author="ohering@suse.de" date="1565265600">- disable lto
- Update to version 1.3.18
  * ocaml: Link the C bindings with LDFLAGS (RHBZ#1548536)
  * perl: fix format of croak for RLenValue
  * Update gnulib to latest.
  * lib: Reset errno to zero to avoid erroneously returning E2BIG</changelog>
  <changelog author="ohering@suse.de" date="1572609600">- Fix bytecode build
- Remove defattr and BuildRoot
- disablement of lto comes via ocaml macros</changelog>
  <changelog author="steven.kowalik@suse.com" date="1580904000">- Switch to building using Python 3, as a consequence rename python
  binding package to python3-hivex.
- Drop unneeded Recommends and Group lines.
- Make use of python3_sitearch macro to drop pyver variable.
- Use python3-config to determine CFLAGS and libraries.
- Run spec-cleaner against the specfile.</changelog>
  <changelog author="jgwang@suse.com" date="1610280000">- Update to version 1.3.19
  * ocaml: Throw exception if malloc returns NULL
  * ocaml: Cast return from String_val to (char *)
  * ocaml: Use caml_alloc_initialized_string
  * Remove extra @LIBS@ from pkg-config file
  * Win::Hivex::Regedit: Ignore comments
  * Win::Hivex::Regedit: Accept CRLF line endings</changelog>
  <changelog author="ohering@suse.de" date="1619006400">- Remove ocaml_native_compiler conditional
  build native target unconditionally</changelog>
  <changelog author="carnold@suse.com" date="1620129600">- Update to version 1.3.20
  * Fixes bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds
    check within hivex_open()
  * Increase HIVEX_MAX_VALUES
  * Updated translations</changelog>
  <changelog author="carnold@suse.com" date="1628251200">- bsc#1189060 - VUL-0: CVE-2021-3622: hivex: hivex: stack overflow
  due to recursive call of _get_children. Update to version 1.3.21
  hivex-1.3.21.tar.gz
  hivex-1.3.21.tar.gz.sig</changelog>
  <changelog author="ohering@suse.de" date="1632571200">- move all ocaml libraries to devel package to align with our
  OCaml packaging</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="carnold@suse.com" date="1674648000">- Update hivex to version 1.3.23
  * jsc#PED-2113
  * Updated langauge files
  * Various build fixes
  * Improved windows support</changelog>
</package>
<package pkgid="402552f587f9d9b5516f0226f51377e3bdd796fda5c381e19f5ed0b9cb4f476c86307de1c0dd5be698a0bd6dc2690438384bc205ab342bf2b252f82993fc95a2" name="hostname-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.23" rel="slfo.1.1_1.4"/>
  <changelog author="kukuk@suse.de" date="1459425600">- Add ypdomainname and nisdomainname, too. Were removed from yp-tools.</changelog>
  <changelog author="kukuk@suse.de" date="1502798400">- Add build require libnsl-devel in preparation of libnsl removal
  from glibc.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to 3.20
  * debian-specific change only
- includes 3.19
  * Fix lintian warnings.
- includes 3.18
  * Make sure memory is initialized to zero before attempting to
    read hostname.
- includes 3.17
  * Use _GNU_SOURCE feature test macro, instead of glibc internal
    __USE_GNU.
  * Use getdomainname instead of yp_get_default_domain because it
    is more widely available and avoids the -lnsl dependency.
  * localnisdomain is kept, even though it should be the same as
    localdomain, so the behaviour is not changed in case of an error.
  * Replace 'dh-clean -k' with 'dh-prep'
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 3.21:
  * Minor fixes to the manpage</changelog>
  <changelog author="ngompa13@gmail.com" date="1586692800">- Add nis-domainname.service for FreeIPA</changelog>
  <changelog author="ngompa13@gmail.com" date="1589544000">- Fix LIBEXECDIR substitution for systemd service</changelog>
  <changelog author="dmueller@suse.com" date="1598443200">- update to 3.23:
  * Increase buffer size for all FQDNs to NI_MAXHOST as suggested by manpage.
  (Closes: #942311)
  * Use the same size for getdomainname().
  * Bumped Standards-Version, no changes needed.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="035904d92d6df10796fae07deaeae0948307dbe9867cf5ba09deb68e2784aa3fb497b4bc59c7534c4fa835f6bcf8fb35a3f04c5b74997704ece77c500f85f2a1" name="hostname-debugsource" arch="aarch64">
  <version epoch="0" ver="3.23" rel="slfo.1.1_1.4"/>
  <changelog author="kukuk@suse.de" date="1459425600">- Add ypdomainname and nisdomainname, too. Were removed from yp-tools.</changelog>
  <changelog author="kukuk@suse.de" date="1502798400">- Add build require libnsl-devel in preparation of libnsl removal
  from glibc.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to 3.20
  * debian-specific change only
- includes 3.19
  * Fix lintian warnings.
- includes 3.18
  * Make sure memory is initialized to zero before attempting to
    read hostname.
- includes 3.17
  * Use _GNU_SOURCE feature test macro, instead of glibc internal
    __USE_GNU.
  * Use getdomainname instead of yp_get_default_domain because it
    is more widely available and avoids the -lnsl dependency.
  * localnisdomain is kept, even though it should be the same as
    localdomain, so the behaviour is not changed in case of an error.
  * Replace 'dh-clean -k' with 'dh-prep'
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 3.21:
  * Minor fixes to the manpage</changelog>
  <changelog author="ngompa13@gmail.com" date="1586692800">- Add nis-domainname.service for FreeIPA</changelog>
  <changelog author="ngompa13@gmail.com" date="1589544000">- Fix LIBEXECDIR substitution for systemd service</changelog>
  <changelog author="dmueller@suse.com" date="1598443200">- update to 3.23:
  * Increase buffer size for all FQDNs to NI_MAXHOST as suggested by manpage.
  (Closes: #942311)
  * Use the same size for getdomainname().
  * Bumped Standards-Version, no changes needed.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="f935976b0efa9ce04628e65bad9fb79d489eccc288d2ae6f0bf5b965e3caa8fc914c06f20682ba1b9e9f52f7657ee141eafccc707ce6412b2ec47202bbab2b2f" name="hwinfo-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.2" rel="slfo.1.1_1.2"/>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#114
- improve treatment of NVME devices (bsc#1200975)
- add new NVME hardware class and support it in hwinfo
- fix compiler warnings
- 22.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1660046400">- merge gh#openSUSE/hwinfo#117
- glibc 2.36+ includes fsconfig itself, make linux/fs.h inclusion
  conditional (bsc#1202213)
- 22.1</changelog>
  <changelog author="jengelh@inai.de" date="1666008000">- Implement shared library packaging guideline.
- Modernize specfile.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#126
- create xen usb controller device if necessary (bsc#1204294)
- 22.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#133
- avoid linking problems with libsamba (bsc#1212756)
- 22.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688558400">- merge gh#openSUSE/hwinfo#134
- restrict libhd exported symbols to the documented API
  (bsc#1212756)
- fix pppoe compile warning
- 23.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688558401">- merge gh#openSUSE/hwinfo#137
- adjust exported symbols to yast2-hardware-detection test case
- 23.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1689854400">- merge gh#openSUSE/hwinfo#128
- Add support for loongarch cpu
- 23.2</changelog>
</package>
<package pkgid="378fd37863a4a8361950c335c0f7bcf278ce258ec76cd3d1e527177a4f6f1d83001ca2e385344f2471023719d6b1e3db0df7efd589319969387a898a3c704d28" name="hwinfo-debugsource" arch="aarch64">
  <version epoch="0" ver="23.2" rel="slfo.1.1_1.2"/>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#114
- improve treatment of NVME devices (bsc#1200975)
- add new NVME hardware class and support it in hwinfo
- fix compiler warnings
- 22.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1660046400">- merge gh#openSUSE/hwinfo#117
- glibc 2.36+ includes fsconfig itself, make linux/fs.h inclusion
  conditional (bsc#1202213)
- 22.1</changelog>
  <changelog author="jengelh@inai.de" date="1666008000">- Implement shared library packaging guideline.
- Modernize specfile.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#126
- create xen usb controller device if necessary (bsc#1204294)
- 22.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#133
- avoid linking problems with libsamba (bsc#1212756)
- 22.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688558400">- merge gh#openSUSE/hwinfo#134
- restrict libhd exported symbols to the documented API
  (bsc#1212756)
- fix pppoe compile warning
- 23.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688558401">- merge gh#openSUSE/hwinfo#137
- adjust exported symbols to yast2-hardware-detection test case
- 23.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1689854400">- merge gh#openSUSE/hwinfo#128
- Add support for loongarch cpu
- 23.2</changelog>
</package>
<package pkgid="5ca61bc2defd1d35e4970e03057e7c99f77e98b6b2407b5672237d369769d44390da36e16c0ea420b4098d5515cb41df9e610ff4d2223c1c9083ec0244ce6d33" name="hyper-v-debuginfo" arch="aarch64">
  <version epoch="0" ver="8" rel="slfo.1.1_1.2"/>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
</package>
<package pkgid="1e40d2a699bf7a76d59f124cdc1201a57699a2c6693db9610a7aacfa3c1c57ddea7325124e2d210dd9a28115bb4d986477edfa8e8bdd4b2c0342b8c0c858d34c" name="hyper-v-debugsource" arch="aarch64">
  <version epoch="0" ver="8" rel="slfo.1.1_1.2"/>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
</package>
<package pkgid="7074ee16e87ceef91de8e9c6216ea7594d047f69508724191fad339237f43aaa8503e73ddd8f4de6053c908dfaf711d881281140fb568a3a041254c6c10ea5a7" name="ignition-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.19.0" rel="slfo.1.1_1.1"/>
  <changelog author="fvogt@suse.com" date="1692792000">- Omit ignition module in initrds for already configured systems:
  * Add 0001-dracut-Don-t-include-the-ignition-module-by-default.patch
  * Edit module-setup.sh
- Add explicit dep on combustion in module-setup.sh
- Replace ignition-dracut-grub2 with combustion's firstboot.target:
  * Add 0001-Order-ignition-disks.service-before-systemd-fsck-roo.patch
  * Edit ignition-suse-generator
  * Edit ignition-umount-initrd-fstab.service
  * Edit module-setup.sh
  * Drop 02_ignition_firstboot
  * Drop ignition-firstboot-complete.service
  * Adjust README.SUSE
- Edit ignition-umount-initrd-fstab.service to not rely on combustion
  units forcing proper order</changelog>
  <changelog author="iforster@suse.com" date="1692964800">- Patch file cleanup:
  * Improve description of
    0003-Move-the-GPT-header-on-resized-disks.patch
  * Rename
    0001-Order-ignition-disks.service-before-systemd-fsck-roo.patch
    to
    0004-Order-ignition-disks.service-before-systemd-fsck-roo.patch
  * Rename
    0001-dracut-Don-t-include-the-ignition-module-by-default.patch
    to
    0005-dracut-Don-t-include-the-ignition-module-by-default.patch</changelog>
  <changelog author="fvogt@suse.com" date="1694001600">- Amend patch to fix race condition with kiwi:
  * 0005-dracut-Don-t-include-the-ignition-module-by-default.patch</changelog>
  <changelog author="iforster@suse.com" date="1700827200">- Update to version 2.17.0:
  * NEWS: update 2.17.0
  * packit: add initial support
  * Bump minimum Go version to 1.19
  * Add vsock modules into ramdisk
  * Sync repo templates ⚙
  * providers/applehv: Add Apple Hypervisor
  * tests/blackbox: allow skipping critical logging check
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
  * providers/hetzner: add support for Hetzner Cloud
  * docs: expand development docs and rationale
  * doc/development: list the test frameworks
  * docs/development: improve formatting of blackbox section
  * build(deps): updated dependencies
- Increased required Go version
- Removed Changelog part of
  0005-dracut-Don-t-include-the-ignition-module-by-default.patch -
  the information is part of the patch description already and
  conflicts with the upstream Changelog.</changelog>
  <changelog author="fvogt@suse.com" date="1709294400">- module-setup.sh: Use $dracutsysrootdir</changelog>
  <changelog author="iforster@suse.com" date="1709899200">- Update to version 2.18.0:
  * NEWS: update 2.18.0
  * azure: retry HTTP requests on codes 404, 410, and 429
  * docs: add missing scaleway link
  * providers: add scaleway
  * resource/url: customize local address (port)
  * stages/files: filter out non-existent paths before relabeling
  * docs/release-notes: tweak dracut module change
  * Bump minimum Go version to 1.20
  * dracut: Don't include the ignition module by default
  * ci: cancel previous build on PR update
  * Sync repo templates ⚙
  * Update build(deps)
- Remove because included in upstream now:
  0005-dracut-Don-t-include-the-ignition-module-by-default.patch
- Increased required Go version</changelog>
  <changelog author="iforster@suse.com" date="1718020800">- Update to version 2.19.0:
  * Support LUKS encryption using IBM CEX secure keys on s390x
  * providers: add "akamai" provider
- Adding %check section
- Build scripts are executable by themselves now, remove explicit
  Bash call</changelog>
  <changelog author="iforster@suse.com" date="1721908800">- Apply (temporary) upstream patch from fedora-coreos-config for
  compatibility with systemd 256.</changelog>
  <changelog author="iforster@suse.com" date="1722254400">- Fix order of previous change - *first* remount rw, *then* create
  directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1725019200">- Drop "go clean" from the upstream build script: since we build in
  clean environments, we don't have caches. Additionally, the way
  it is used does not even work and reports:
    go: clean -cache cannot be used with package arguments
  The error was masked until GO 1.23, as the test wether go
  supported caching was checking for go 1.23 formatted output.</changelog>
</package>
<package pkgid="db34d606eaf33d14f5d99805b3fb6dcb28c7fafe9cf517bf335279bf928351d6d55af69b5cfe5b0140c202cc43f0412a151074d462f20bc4fd1171bf0f2eac4d" name="info-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.0.3" rel="slfo.1.1_1.3"/>
  <changelog author="rpm@fthiessen.de" date="1650888000">- Update to version 6.8
  * new command @displaymath for formatting of mathematical notation
  * new command @example takes an argument to specify the language
  * Deprecate commands: @centerchap, @definfoenclose, @refill, @inforef
  * new paper size @bsixpaper
  * texi2any
  * should be faster as Perl XS parser is enabled by default
  * SHOW_MENU customization variable replaced by FORMAT_MENU.
  * only check menu structure if CHECK_NORMAL_MENU_STRUCTURE
    variable is set
  * MathJax support for display of math.
  * JavaScript License Web Labels support
  * Use sectional tables of contents instead of menus by defaut
  * Use section names in links by default
  * CONTENTS_OUTPUT_LOCATION sets location of table of contents
  * Document sections wrapped in &lt;div&gt; elements
  * New variable USE_NODE_DIRECTIONS to use node or section structure
    for node directions
  * copiable anchor links for definitions
  * Don't add an extra period before file extension given as
    an argument to @image if image file is not found
  * info: Support compressed dir files
  * texi2dvi: Stop on first error in input file
  * texinfo.tex:
  * put logical page numbers into PDF's ('page labels')
  * put chapter numbers in the PDF outline
  * new Finnish translation
- Rebased texinfo-zlib.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1650974400">- Add 13a8894fe2.patch
  * Fixing @headings: Add missing option value 'single'.
    Resolved regression where gpm could not be build.</changelog>
  <changelog author="werner@suse.de" date="1658923200">- Check for filetrigger lua scriplets if rpm.execute() as function
  call is given and used this</changelog>
  <changelog author="werner@suse.de" date="1659096000">- Do lua scripting only once for execute() function</changelog>
  <changelog author="werner@suse.de" date="1659528000">- In case of an update of package info: do never remove existing
  info page from dir file (boo#1201852)</changelog>
  <changelog author="werner@suse.de" date="1668513600">- Update to version 7.0 (7 November 2022)
  * texi2any
  * LaTeX added as an output format, selected with --latex
  * EPUB 3 added as an output format, selected with --epub3
  * reform throughout the code in general
  * thorough review of character encoding issues
  * new customization variables involved with character encoding:
    INPUT_FILE_NAME_ENCODING, OUTPUT_FILE_NAME_ENCODING,
    DOC_ENCODING_FOR_INPUT_FILE_NAME, DOC_ENCODING_FOR_OUTPUT_FILE_NAME,
    MESSAGE_ENCODING and COMMAND_LINE_ENCODING
  * warn if full-text commands (@ref, @footnote, @anchor) appear in @w
  * new variable NO_TOP_NODE_OUTPUT
  * IGNORE_BEFORE_SETFILENAME variable removed.  former effect
    is now always on.
  * HTML output:
  * use manual_name_html as output directory for split HTML instead of
    manual_name or manual_name.html
  * default DOCTYPE declaration changed to plain HTML5 style rather than
    HTML4 DTD reference
  * output only the CSS rules that are needed in an output file
    . remove CSS_LINES variable and add SHOW_BUILTIN_CSS_RULES
  * (custom CSS can still be output using EXTRA_HEAD)
  * use &lt;code&gt; tag for the output of @t and @verb instead of &lt;tt&gt;
  * use &lt;abbr&gt; for @acronym instead of &lt;acronym&gt;
  * link to table of contents from short table of contents only if a
    table of contents is actually output
  * prefix classes from @example arguments with `user-'
  * percent encode URL in @url/@uref, @email, @image and external
    manual file
  * new USE_XML_SYNTAX, HTML_ROOT_ELEMENT_ATTRIBUTES and
    NO_CUSTOM_HTML_ATTRIBUTE variables can be used to output
    valid XHTML
  * systematic addition of classes attribute in HTML elements based on the
    Texinfo @-command names.  renaming of class attributes to avoid
    confusion with @-commands formatting and describe the role in the
    document rather than the formatting style.
  * COPIABLE_ANCHORS renamed to COPIABLE_LINKS
  * do not add a title by default; SHOW_TITLE or NO_TOP_NODE_OUTPUT has
    to be set
  * USE_TITLEPAGE_FOR_TITLE is now true by default
  * L2H variable removed, replaced by HTML_MATH set to `l2h'
  * rename OVERVIEW_LINK_TO_TOC to SHORT_TOC_LINK_TO_TOC
  * rename BEFORE_OVERVIEW to BEFORE_SHORT_TOC_LINE
  * rename AFTER_OVERVIEW to AFTER_SHORT_TOC_LINES
  * remove PRE_ABOUT, AFTER_ABOUT, and add PROGRAM_NAME_IN_ABOUT
  * remove KEEP_TOP_EXTERNAL_REF
  * new variables IGNORE_REF_TO_TOP_NODE_UP, CONVERT_TO_LATEX_IN_MATH,
    HTMLXREF_MODE and HTMLXREF_FILE
  * DocBook output:
  * do not output Top node or text before the first @node or sectioning
    @-command.  NO_TOP_NODE_OUTPUT can be set to false to output Top node
    for now.
  * replace @definfocenlose defined @-commands by the argument as-is
    to be more consistent with printed output
  * HTML/DocBook output:
  * USE_NUMERIC_ENTITY changed to mean to use numeric entities instead
    of named entities.  former effect is now always on.
  * ENABLE_ENCODING_USE_ENTITY variable removed.  former effect is now
    always off.
  * Info output
  * quote problematic node names (with :, comma...) by default
  * new customization variable ASCII_PUNCTUATION to use plain ASCII
    characters for quotation marks and a few other symbols
  * texinfo.tex
  * `@microtype on' uses microtypography in formatting for pdfTeX and LuaTeX
  * do not ignore @part page immediately following Top node
  * do `@set txicodevaristt' to get slanted typewriter for @var in code,
    `@clear txicodevaristt' to use slanted, variable-width roman font for
    @var everywhere.  flag is @set by default, but we may turn this off
    in the future.
  * new file doc/texinfo-zh.tex for Texinfo documents in Chinese.
    new support file doc/txi-zh.tex for Chinese.  doc/short-sample-zh.texi is
    a sample document.
  * info
  * better support for index entries containing parentheses
  * better support for getting bold text etc. when displaying manpages
  * bug fixed where the first index entry in a file could be ignored
  * M-C-f closes as well as opens footnotes window
  * do not crash if run in Brazilian Portuguese locale
  * Language
  * @deftype* commands use typewriter font in argument list
  * new commands @latex, @iflatex, @ifnotlatex for new LaTeX output format
  * do `@set txidefnamenospace' to omit space after a definition name
  * Other
  * build fixed for glibc 2.34
- Delete patch 13a8894fe2.patch as now part of upstream tar ball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670155200">- texinfo 7.0.1:
  * texi2any: avoid multiple crashes on empty @image argument and
    other conditions
  * avoid hang on @ref command inside section command
  * info: fix recoding of UTF-8 files to ASCII when run in C
    locale
  * js: index search fixed for new HTML output</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1675512000">- texinfo 7.0.2:
  * texi2any: do not distribute architecture-dependent files
  * info: further fix of recoding of UTF-8 files to ASCII
  * install-info: build fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679832000">- texinfo 7.0.3:
  * texi2any: fix performance regression when Perl binary
    extension (XS) modules are not being used (e.g. with
    TEXINFO_XS=omit)
  * info: further fix of recoding of UTF-8 files to ASCII to avoid
    text disappearing from nodes
  * info: avoid possible freeze at start of a file with
    `-v nodeline=pointers'</changelog>
</package>
<package pkgid="5ec7142a77f379437157aa72f2cd46c1a2817d56cc9e386e80580d10fe7698c9d2b8e0ba16165807a9c2d060b4187a45cc5395de01baa8dde733fdbf56612da0" name="inih-debugsource" arch="aarch64">
  <version epoch="0" ver="56" rel="slfo.1.1_1.3"/>
  <changelog author="marix@marix.org" date="1600344000">- Include static library</changelog>
  <changelog author="marix@marix.org" date="1600344001">- Fix the library not matching its soname</changelog>
  <changelog author="marix@marix.org" date="1600430400">- Execute upstream tests during package build</changelog>
  <changelog author="marix@marix.org" date="1600516800">- Following packaging guidelines, exclude static libraries again.</changelog>
  <changelog author="marix@marix.org" date="1602763200">- Update to version 52
  * Add INI_CUSTOM_ALLOCATOR to allow using a custom memory
    allocator.
- Drop workaround for library name not matching its soname as this
  was fixed upstream.</changelog>
  <changelog author="marix@marix.org" date="1608811200">- Make package conform to spec-cleaner.</changelog>
  <changelog author="jgwang@suse.com" date="1615464000">￼
- Update to version 53
  * Add architecture ppc64le to travis build (#122)
  * enable distro settings by default (#125)
  * meson: optionally depend on c++ (#124)
  * meson: add static compile args to inih_dep (#126)</changelog>
  <changelog author="marix@marix.org" date="1648209600">- Update to version 54
  * Improve quality of shared objects by explicitly defining symbol
    visibility.</changelog>
  <changelog author="marix@marix.org" date="1648209601">- Update to version 55
  * Include proper version in installed pkgconfig files.</changelog>
  <changelog author="marix@marix.org" date="1657972800">- Update to version 55
  * Fix redundant cast-to-int when INI_USE_STACK!=0
  * Make inline comments work on subsequent lines of multiline values</changelog>
</package>
<package pkgid="9139db1c48a5bd76e100e0fb0d51b3f114bedec0f3e118042fe492991ee996565daa07fe2cabf341645222bc7e039f20d3f4a871a6b7e2d44e1332ec598f62e1" name="ipmitool-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.19.13.gbe11d94" rel="slfo.1.1_1.2"/>
  <changelog author="josef.moellers@suse.com" date="1611835200">- When really starting the daemon, in lib/helper.c::ipmi_start_daemon()
  stdin/stdout/stderr are redirected to /dev/null and this is checked
  but the check for stderr tests for STDOUT_FILENO. This is, most
  likely, a copy-paste error.
  [bsc#1175328, 0007-bsc#1175328-check-for-correct-fd.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1611835201">- Do not append the device number to the PIDFILE pathname
  as this will confuse systemd.
  [bsc#1181063, 0008-bsc#1181063-dont-parametrize-pidfile-name.patch]</changelog>
  <changelog author="trenn@suse.de" date="1612353600">- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
  <changelog author="trenn@suse.de" date="1619611200">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.</changelog>
  <changelog author="trenn@suse.de" date="1621944000">- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Update to version 1.8.18+git20210622.11c7605:
  * Fix codefactor-io / CodeFactor warnings
  * Use /run instead of /var/run
  * oem: Update product IDs for YADRO
  * lan: Add processing of get/set specific CCs
  * lan: Refactor pointer style
  * doc: update lanplus doc to reflect default cipher suite change
  * ekanalyzer: Fix internal use area off-by-one bug
  * ekanalyzer frushow: Fix internal area size calc
  * sel: Fix "power supply inactive" flag offset
  * free: Fix implicit function declarations
  * Convert line endings to LF
- Update source file:
  M    enterprise-numbers
- Adopt to latest sources:
  M    0003-Cleanup-and-compiler-issues-only-no-functional-chang.patch
- Remove mainline patches:
  D    0007-bsc#1175328-check-for-correct-fd.patch
  D    0008-bsc#1181063-dont-parametrize-pidfile-name.patch
  D    Use-run-instead-of-var-run.patch
  D    lanplus-don-t-retry-pre-session-Get-cipher-suites.patch
- Config file in /etc must not be executable
  /etc/bmc-snmp-proxy
- Enhance _service file to always get latest sources and get the
  version correctly parsed</changelog>
  <changelog author="trenn@suse.de" date="1628683200">- Update to version 1.8.18.238.gb7adc1d:
  * ipmi_mc: Fix the IPM_DEV_FWREV1_MAJOR_MASK
- Use %{?systemd_ordering} instead of %{?systemd_requires}</changelog>
  <changelog author="moritz.kodytek@suse.com" date="1652184000">- Update to version 1.8.18.249.g4d25a93:
  * man: Update the text for -C option
  * chassis restart_cause: Add new causes
  * sel: Remove redundant "Reserve SEL"
  * sdr: Fix modifier unit
  * Refactor bridging level detection to dedicated function
  * Fix double bridge detection in get_max_(req|rsp)_data_size()</changelog>
  <changelog author="trenn@suse.de" date="1662552000">- Update to version 1.8.19.0.g19d7878:
  * Release Version 1.8.19
  * Cast type before the left shift
  * sel: Fix the deasserted thresholds inequality</changelog>
  <changelog author="trenn@suse.de" date="1690200000">- Fix: ipmitool duplicates the timestamp (bsc#1213390)
  A    Fix-time-format-for-sel-list-v.patch
- Remove: Make-IANA-PEN-download-configurable (is mainline)
  D 0006-Make-IANA-PEN-download-configurable-fix-uninitalized.patch
- Update to version 1.8.19.13.gbe11d94:
  * configure.ac: allow disabling registry downloads
  * lan: channel: Fix set alert on/off
  * make: use correct docdir variable provided by autotools
  * Do not require the IANA PEN registry file
  * configure.ac: fix readline static build
  * Update github actions for modern OSes
  * Update macos target name in github actions
  * delloem: Fix the unalign bug in arm64
  * lanplus: Realloc the msg if the payload_length gets updated
  * fru print: Add area checksum verification
  * fru: Add decoder for multirec system mgmt records
  * Fix enterprise-numbers URL
  * Update issue templates</changelog>
</package>
<package pkgid="061e14ecee1045f0c661c3dc6f98f98d1ea9d973002bfcd5b870c77d0d08c11cf4694a4c7c77b33a98927849dd14f175d8dadd8bc347b2ca0a28a1778a4c5ff8" name="ipmitool-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.19.13.gbe11d94" rel="slfo.1.1_1.2"/>
  <changelog author="josef.moellers@suse.com" date="1611835200">- When really starting the daemon, in lib/helper.c::ipmi_start_daemon()
  stdin/stdout/stderr are redirected to /dev/null and this is checked
  but the check for stderr tests for STDOUT_FILENO. This is, most
  likely, a copy-paste error.
  [bsc#1175328, 0007-bsc#1175328-check-for-correct-fd.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1611835201">- Do not append the device number to the PIDFILE pathname
  as this will confuse systemd.
  [bsc#1181063, 0008-bsc#1181063-dont-parametrize-pidfile-name.patch]</changelog>
  <changelog author="trenn@suse.de" date="1612353600">- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
  <changelog author="trenn@suse.de" date="1619611200">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.</changelog>
  <changelog author="trenn@suse.de" date="1621944000">- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Update to version 1.8.18+git20210622.11c7605:
  * Fix codefactor-io / CodeFactor warnings
  * Use /run instead of /var/run
  * oem: Update product IDs for YADRO
  * lan: Add processing of get/set specific CCs
  * lan: Refactor pointer style
  * doc: update lanplus doc to reflect default cipher suite change
  * ekanalyzer: Fix internal use area off-by-one bug
  * ekanalyzer frushow: Fix internal area size calc
  * sel: Fix "power supply inactive" flag offset
  * free: Fix implicit function declarations
  * Convert line endings to LF
- Update source file:
  M    enterprise-numbers
- Adopt to latest sources:
  M    0003-Cleanup-and-compiler-issues-only-no-functional-chang.patch
- Remove mainline patches:
  D    0007-bsc#1175328-check-for-correct-fd.patch
  D    0008-bsc#1181063-dont-parametrize-pidfile-name.patch
  D    Use-run-instead-of-var-run.patch
  D    lanplus-don-t-retry-pre-session-Get-cipher-suites.patch
- Config file in /etc must not be executable
  /etc/bmc-snmp-proxy
- Enhance _service file to always get latest sources and get the
  version correctly parsed</changelog>
  <changelog author="trenn@suse.de" date="1628683200">- Update to version 1.8.18.238.gb7adc1d:
  * ipmi_mc: Fix the IPM_DEV_FWREV1_MAJOR_MASK
- Use %{?systemd_ordering} instead of %{?systemd_requires}</changelog>
  <changelog author="moritz.kodytek@suse.com" date="1652184000">- Update to version 1.8.18.249.g4d25a93:
  * man: Update the text for -C option
  * chassis restart_cause: Add new causes
  * sel: Remove redundant "Reserve SEL"
  * sdr: Fix modifier unit
  * Refactor bridging level detection to dedicated function
  * Fix double bridge detection in get_max_(req|rsp)_data_size()</changelog>
  <changelog author="trenn@suse.de" date="1662552000">- Update to version 1.8.19.0.g19d7878:
  * Release Version 1.8.19
  * Cast type before the left shift
  * sel: Fix the deasserted thresholds inequality</changelog>
  <changelog author="trenn@suse.de" date="1690200000">- Fix: ipmitool duplicates the timestamp (bsc#1213390)
  A    Fix-time-format-for-sel-list-v.patch
- Remove: Make-IANA-PEN-download-configurable (is mainline)
  D 0006-Make-IANA-PEN-download-configurable-fix-uninitalized.patch
- Update to version 1.8.19.13.gbe11d94:
  * configure.ac: allow disabling registry downloads
  * lan: channel: Fix set alert on/off
  * make: use correct docdir variable provided by autotools
  * Do not require the IANA PEN registry file
  * configure.ac: fix readline static build
  * Update github actions for modern OSes
  * Update macos target name in github actions
  * delloem: Fix the unalign bug in arm64
  * lanplus: Realloc the msg if the payload_length gets updated
  * fru print: Add area checksum verification
  * fru: Add decoder for multirec system mgmt records
  * Fix enterprise-numbers URL
  * Update issue templates</changelog>
</package>
<package pkgid="0d2f1dc5eb91ee91f03468e67c8f0627752aab745fd04debecb66e24ebcab1a9509ec6332009c3aeb9f08de678331ee3d5bf2a5c42d8069cd1c0227967467f5e" name="iproute2-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.3" rel="slfo.1.1_1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1648296000">- update to 5.17:
  * lib/fs: fix memory leak in get_task_name()
  * bridge: Remove vlan listing from `bridge link`
  * bond: add arp_missed_max option
  * libnetlink: fix socket leak in rtnl_open_byproto()
  * dcb: Fix error reporting when accessing "dcb app"
  * tc_util: Fix parsing action control with space and slash
  * lib: fix ax25.h include for musl
  * uapi: add missing rose and ax25 files
  * rdma: Fix res_print_uint() and add res_print_u64()
  * tc: Add support for ce_threshold_value/mask in fq_codel
- Add tmpfiles.d conf for /run/netns</changelog>
  <changelog author="dmueller@suse.com" date="1654430400">- update to 5.18:
  This is the release of iproute2 corresponding to the 5.18 kernel.
  There are not many new features in this release.
  * The build issues with libbpf should be fixed now.
  * Building with clang is now supported.
  * There are still some warnings with gcc-12 that will need to be
    fixed in the upstream kernel headers.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1660132800">- update to 5.19:
  * ip/iplink_virt_wifi: add support for virt_wifi
  * Update kernel headers
  * libnetlink: Add filtering to rtnl_statsdump_req_filter()
  * ipstats: Add a "set" command
  * ipstats: Add a group "link"
  * libbpf: Use bpf_object__load instead of bpf_object__load_xattr
  * uapi: change name for zerocopy sendfile in tls
  * bridge: vxlan device vnifilter support
  * f_flower: Add num of vlans parameter</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665230400">- update to 6.0:
  * ipstats: Add param.h for musl
  * Update kernel headers
  * libbpf: add xdp program name support
  * iplink: bond_slave: add per port prio support
  * seg6: add support for SRv6 Headend Reduced Encapsulation
  * lib: Introduce ppp protocols
  * f_flower: Introduce PPPoE support</changelog>
  <changelog author="jengelh@inai.de" date="1669118400">- Replace routel program by a non-python version [boo#1205632]</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 6.1:
  * man: ss.8: fix a typo
  * testsuite: fix build failure
  * genl: remove unused vars in Makefile
  * json: do not escape single quotes
  * ip-monitor: Do not error out when RTNLGRP_STATS is not available
  * ip-link: man: Document existence of netns argument in add command
  * macsec: add Extended Packet Number support
  * macsec: add user manual description for extended packet number feature
  * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces
  * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes
  * ip: add NLM_F_ECHO support
  * libnetlink: add offset for nl_dump_ext_ack_done
  * tc/tc_monitor: print netlink extack message
  * rtnetlink: add new function rtnl_echo_talk()
  * ip: fix return value for rtnl_talk failures
  * iplink_bridge: Add no_linklocal_learn option support
  * devlink: use dl_no_arg instead of checking dl_argc == 0
  * devlink: remove dl_argv_parse_put
  * mnlg: remove unnused mnlg_socket structure
  * utils: extract CTRL_ATTR_MAXATTR and save it
  * devlink: expose nested devlink for a line card object
  * devlink: load port-ifname map on demand
  * devlink: fix parallel flash notifications processing
  * devlink: move use_iec into struct dl
  * devlink: fix typo in variable name in ifname_map_cb()
  * devlink: load ifname map on demand from ifname_map_rev_lookup() as well
  * dcb: unblock mnl_socket_recvfrom if not message received
  * libnetlink: Fix memory leak in __rtnl_talk_iov()
  * tc_util: Fix no error return when large parent id used
  * tc_util: Change datatype for maj to avoid overflow issue
  * ss: man: add missing entries for MPTCP
  * ss: man: add missing entries for TIPC
  * ss: usage: add missing parameters
  * ss: re-add TIPC query support
  * devlink: Fix setting parent for 'rate add'
  * link: display 'allmulti' counter
  * seg6: add support for flavors in SRv6 End* behaviors
  * tc: ct: Fix invalid pointer dereference
  * uapi: update from 6.1 pre rc1
  * u32: fix json formatting of flowid
  * tc_stab: remove dead code
  * uapi: update for in.h and ip.h
  * remove #if 0 code
  * tc: add json support to size table
  * tc: put size table options in json object
  * tc/basic: fix json output filter
  * iplink: support JSON in MPLS output
  * tc: print errors on stderr
  * ip: print mpls errors on stderr
  * tc: make prefix const
  * man: add missing tc class show
  * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays
  * ip link: add sub-command to view and change DSA conduit interface</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="jengelh@inai.de" date="1678190400">- Update to release 6.2
  * f_flower: Introduce L2TPv3 support
  * bridge: fdb: Add support for locked FDB entries
  * bridge: link: Add MAC Authentication Bypass (MAB) support
  * ip: Support --json on `ip neigh get`
  * tc: Add JSON output to tc-class</changelog>
  <changelog author="jengelh@inai.de" date="1679313600">- Delete xfrm-support-displaying-transformations-used-for-Mob.patch
  (mip6d-ng is abandoned too)</changelog>
  <changelog author="info@paolostivanin.com" date="1683201600">- Update to release 6.3:
  * New release of iproute2 corresponding to the 6.3 kernel.
    No large feature improvements only incremental improvements to
    the bridge mdb support, mostly just bug fixes.
- Rebase patches.</changelog>
</package>
<package pkgid="35dcd68c883608d896c2227fff86cbad0cb056f2b270535013327ea37f2602e8b465290f3adf72896b761f2332b806a2a7715322e4c4224baacb1f01094ae0b9" name="iproute2-debugsource" arch="aarch64">
  <version epoch="0" ver="6.3" rel="slfo.1.1_1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1648296000">- update to 5.17:
  * lib/fs: fix memory leak in get_task_name()
  * bridge: Remove vlan listing from `bridge link`
  * bond: add arp_missed_max option
  * libnetlink: fix socket leak in rtnl_open_byproto()
  * dcb: Fix error reporting when accessing "dcb app"
  * tc_util: Fix parsing action control with space and slash
  * lib: fix ax25.h include for musl
  * uapi: add missing rose and ax25 files
  * rdma: Fix res_print_uint() and add res_print_u64()
  * tc: Add support for ce_threshold_value/mask in fq_codel
- Add tmpfiles.d conf for /run/netns</changelog>
  <changelog author="dmueller@suse.com" date="1654430400">- update to 5.18:
  This is the release of iproute2 corresponding to the 5.18 kernel.
  There are not many new features in this release.
  * The build issues with libbpf should be fixed now.
  * Building with clang is now supported.
  * There are still some warnings with gcc-12 that will need to be
    fixed in the upstream kernel headers.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1660132800">- update to 5.19:
  * ip/iplink_virt_wifi: add support for virt_wifi
  * Update kernel headers
  * libnetlink: Add filtering to rtnl_statsdump_req_filter()
  * ipstats: Add a "set" command
  * ipstats: Add a group "link"
  * libbpf: Use bpf_object__load instead of bpf_object__load_xattr
  * uapi: change name for zerocopy sendfile in tls
  * bridge: vxlan device vnifilter support
  * f_flower: Add num of vlans parameter</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665230400">- update to 6.0:
  * ipstats: Add param.h for musl
  * Update kernel headers
  * libbpf: add xdp program name support
  * iplink: bond_slave: add per port prio support
  * seg6: add support for SRv6 Headend Reduced Encapsulation
  * lib: Introduce ppp protocols
  * f_flower: Introduce PPPoE support</changelog>
  <changelog author="jengelh@inai.de" date="1669118400">- Replace routel program by a non-python version [boo#1205632]</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 6.1:
  * man: ss.8: fix a typo
  * testsuite: fix build failure
  * genl: remove unused vars in Makefile
  * json: do not escape single quotes
  * ip-monitor: Do not error out when RTNLGRP_STATS is not available
  * ip-link: man: Document existence of netns argument in add command
  * macsec: add Extended Packet Number support
  * macsec: add user manual description for extended packet number feature
  * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces
  * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes
  * ip: add NLM_F_ECHO support
  * libnetlink: add offset for nl_dump_ext_ack_done
  * tc/tc_monitor: print netlink extack message
  * rtnetlink: add new function rtnl_echo_talk()
  * ip: fix return value for rtnl_talk failures
  * iplink_bridge: Add no_linklocal_learn option support
  * devlink: use dl_no_arg instead of checking dl_argc == 0
  * devlink: remove dl_argv_parse_put
  * mnlg: remove unnused mnlg_socket structure
  * utils: extract CTRL_ATTR_MAXATTR and save it
  * devlink: expose nested devlink for a line card object
  * devlink: load port-ifname map on demand
  * devlink: fix parallel flash notifications processing
  * devlink: move use_iec into struct dl
  * devlink: fix typo in variable name in ifname_map_cb()
  * devlink: load ifname map on demand from ifname_map_rev_lookup() as well
  * dcb: unblock mnl_socket_recvfrom if not message received
  * libnetlink: Fix memory leak in __rtnl_talk_iov()
  * tc_util: Fix no error return when large parent id used
  * tc_util: Change datatype for maj to avoid overflow issue
  * ss: man: add missing entries for MPTCP
  * ss: man: add missing entries for TIPC
  * ss: usage: add missing parameters
  * ss: re-add TIPC query support
  * devlink: Fix setting parent for 'rate add'
  * link: display 'allmulti' counter
  * seg6: add support for flavors in SRv6 End* behaviors
  * tc: ct: Fix invalid pointer dereference
  * uapi: update from 6.1 pre rc1
  * u32: fix json formatting of flowid
  * tc_stab: remove dead code
  * uapi: update for in.h and ip.h
  * remove #if 0 code
  * tc: add json support to size table
  * tc: put size table options in json object
  * tc/basic: fix json output filter
  * iplink: support JSON in MPLS output
  * tc: print errors on stderr
  * ip: print mpls errors on stderr
  * tc: make prefix const
  * man: add missing tc class show
  * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays
  * ip link: add sub-command to view and change DSA conduit interface</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="jengelh@inai.de" date="1678190400">- Update to release 6.2
  * f_flower: Introduce L2TPv3 support
  * bridge: fdb: Add support for locked FDB entries
  * bridge: link: Add MAC Authentication Bypass (MAB) support
  * ip: Support --json on `ip neigh get`
  * tc: Add JSON output to tc-class</changelog>
  <changelog author="jengelh@inai.de" date="1679313600">- Delete xfrm-support-displaying-transformations-used-for-Mob.patch
  (mip6d-ng is abandoned too)</changelog>
  <changelog author="info@paolostivanin.com" date="1683201600">- Update to release 6.3:
  * New release of iproute2 corresponding to the 6.3 kernel.
    No large feature improvements only incremental improvements to
    the bridge mdb support, mostly just bug fixes.
- Rebase patches.</changelog>
</package>
<package pkgid="ecdd3b0c18e2e23ac26f111a504e069461d8e582b40af787b98e21bc51ebdb3b85bf6a9c966a71f1f016398d9caad56136339344d1f5d400b0a63120b6f0cc01" name="iptables-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.9" rel="slfo.1.1_2.1"/>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736164800">- Add iptables-1.8.9-fix-checking-existence-of-rule.patch
  * Fixes checking existence of rules. Fixes issues with rule creation
    with podman/netavark. (bsc#1235088, bsc#1234996)</changelog>
</package>
<package pkgid="3e5a06af2cdcdbc69d9865c06f1d52208b28346f825eeddfb4e6974d5f27819685de7931b97a343f1061fed66044f546783eea8a76337ed1138d286aa8ccda7b" name="iptables-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.9" rel="slfo.1.1_2.1"/>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736164800">- Add iptables-1.8.9-fix-checking-existence-of-rule.patch
  * Fixes checking existence of rules. Fixes issues with rule creation
    with podman/netavark. (bsc#1235088, bsc#1234996)</changelog>
</package>
<package pkgid="b7f3c591f2e828bdeecb93adfe47c8fd8ecafcef21b74a3e90f6e1765f0a5ab914be5827539a283fc707bf51fbb3d82c7081b67b300f956fdcadfb996c63d7d1" name="iputils-debuginfo" arch="aarch64">
  <version epoch="0" ver="20221126" rel="slfo.1.1_2.1"/>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="angel.yankov@suse.com" date="1747137600">- Security fix [bsc#1242300, CVE-2025-47268]
  * integer overflow in RTT calculation can lead to undefined behavior
  * Add iputils-CVE-2025-47268.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1747396800">- Fix bsc#1243284 - ping on s390x prints invalid ttl
  * Add iputils-invalid-ttl-s390x.patch
  * Fix ipv4 ttl value when using SOCK_DGRAM on big endian systems</changelog>
  <changelog author="angel.yankov@suse.com" date="1749556800">- Security fix [bsc#1243772, CVE-2025-48964]
  * Fix  integer overflow in ping statistics via zero timestamp
  * Add iputils-CVE-2025-48964_01.patch
  * Add iputils-CVE-2025-48964_02.patch
  * Add iputils-CVE-2025-48964_03.patch
  * Add iputils-CVE-2025-48964_regression.patch</changelog>
</package>
<package pkgid="ef71d13473dd93a5ad587c33147d3d9c719cb9de324ceabf3255bef5c4ec7660e81074cbfc31040a10cc0361e24ecc65250740d4a198fc206b0f3d4dfd4d701f" name="iputils-debugsource" arch="aarch64">
  <version epoch="0" ver="20221126" rel="slfo.1.1_2.1"/>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="angel.yankov@suse.com" date="1747137600">- Security fix [bsc#1242300, CVE-2025-47268]
  * integer overflow in RTT calculation can lead to undefined behavior
  * Add iputils-CVE-2025-47268.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1747396800">- Fix bsc#1243284 - ping on s390x prints invalid ttl
  * Add iputils-invalid-ttl-s390x.patch
  * Fix ipv4 ttl value when using SOCK_DGRAM on big endian systems</changelog>
  <changelog author="angel.yankov@suse.com" date="1749556800">- Security fix [bsc#1243772, CVE-2025-48964]
  * Fix  integer overflow in ping statistics via zero timestamp
  * Add iputils-CVE-2025-48964_01.patch
  * Add iputils-CVE-2025-48964_02.patch
  * Add iputils-CVE-2025-48964_03.patch
  * Add iputils-CVE-2025-48964_regression.patch</changelog>
</package>
<package pkgid="8bd9aa57078da4d37b32521ef2546f4b90c38b5a99fa599e6019967eb967243216fdf3fc57d6e0bf675d575054ff8922a74e5699ff1bbb88c5eca4310a1f1a2e" name="irqbalance-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.9.4.0.git+f8b8cdd" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1666699200">- run tests
- add Avoid-double-free-on-deinit_thermal.patch (bsc#1204607)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- update to 1.9.2:
  * avoid coredump on build_one_dev_entry()
  * avoid double free on deinit_thermal()
  * change the log level in thermal.c
  * fix a minor typo
- drop Avoid-double-free-on-deinit_thermal.patch, uninitialized.patch: (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1668168000">- add irqbalance-systemd-netlink.patch (related to bsc#1205308)</changelog>
  <changelog author="dmueller@suse.com" date="1671192000">- build for x86_64 subarchs the same way like for baseline</changelog>
  <changelog author="trenn@suse.de" date="1687780800">- Resurrect _service file and old git patch no versioning
  A _service
  A _servicedata
  A irqbalance.obsinfo
- Update to version 1.9.2.24.git+184c950:
  * procinterrupts: fix initialisation of regex_t struct
  * Fix it so we actually stop when we hit an interrupt condition
  * Fix signedness of error handling
  * Revert "Fix CPU number condition in service file"
  * Issue 259: select NL_SKIP / NL_STOP based on error
  * fix CPU number condition in service file
- Already included upstream:
  D irqbalance-systemd-netlink.patch</changelog>
  <changelog author="trenn@suse.de" date="1692619200">- Update to version 1.9.2.34.git+5069982:
  * activate_mapping: avoid logging error when there is none
  * activate_mapping: only blacklist irq if error is considered permanent
  * activate_mapping: report error reason
  * activate_mapping: make sure to catch all errors
  * activate_mapping: avoid use-after-free when affinity cannot be set
  * Revert "activate_mapping: fflush the buffered data to smp_affinity"
  * activate_mapping: fflush the buffered data to smp_affinity</changelog>
  <changelog author="trenn@suse.de" date="1700568000">- Update to version 1.9.3.8.git+c963f48:
  * Enable systemd feature support by default when building with meson
  * Add support for linking against libnl when building with meson
  * Turn NUMA support into an enabled feature, when building with meson
  * Set project version of meson build to 1.9.3
  * Install man pages when building with meson
  * When building with meson, make sure to link against numa
  * Updating to version 1.9.3
  * Automatically use systemd journal and run in foreground when under systemd</changelog>
  <changelog author="aschnell@suse.com" date="1701864000">- Update to version 1.9.3.10.git+1a7d461:
  * filter console only output when using journal mode
- build with libsystemd for logging (bsc#1217754)</changelog>
  <changelog author="trenn@suse.de" date="1710849600">- Update to version 1.9.4.0.git+f8b8cdd:
  * update configure to version 1.9.4
  * Flush file before closing
  * Fix socket API being blocked for 10s
  * Set additional systemd options for service
  * activate_mapping: set errsave before first jump to the error label
  * Avoid repeated affinity checks when no change is necessary
  * Slience "... rebalancing" messages for unmigratable IRQs
- Use manual instead of local service for updating
- Adopt to mainline:
  M Set-fd-limit.patch</changelog>
  <changelog author="pujos.michael@gmail.com" date="1720699200">- removed ProtectKernelTunables=yes from irqbalance.service to
  fix "Cannot change IRQ %d affinity: Read-only file system" errors.
  See https://github.com/Irqbalance/irqbalance/issues/308</changelog>
</package>
<package pkgid="457437fd48880213d67c8f6ff35a79f9885bea40bbe5885d6b477555468b0d89758f9a7bffc21896fda864652d263ac473c9ab57091b9ead7ecca607c19db99b" name="irqbalance-debugsource" arch="aarch64">
  <version epoch="0" ver="1.9.4.0.git+f8b8cdd" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1666699200">- run tests
- add Avoid-double-free-on-deinit_thermal.patch (bsc#1204607)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- update to 1.9.2:
  * avoid coredump on build_one_dev_entry()
  * avoid double free on deinit_thermal()
  * change the log level in thermal.c
  * fix a minor typo
- drop Avoid-double-free-on-deinit_thermal.patch, uninitialized.patch: (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1668168000">- add irqbalance-systemd-netlink.patch (related to bsc#1205308)</changelog>
  <changelog author="dmueller@suse.com" date="1671192000">- build for x86_64 subarchs the same way like for baseline</changelog>
  <changelog author="trenn@suse.de" date="1687780800">- Resurrect _service file and old git patch no versioning
  A _service
  A _servicedata
  A irqbalance.obsinfo
- Update to version 1.9.2.24.git+184c950:
  * procinterrupts: fix initialisation of regex_t struct
  * Fix it so we actually stop when we hit an interrupt condition
  * Fix signedness of error handling
  * Revert "Fix CPU number condition in service file"
  * Issue 259: select NL_SKIP / NL_STOP based on error
  * fix CPU number condition in service file
- Already included upstream:
  D irqbalance-systemd-netlink.patch</changelog>
  <changelog author="trenn@suse.de" date="1692619200">- Update to version 1.9.2.34.git+5069982:
  * activate_mapping: avoid logging error when there is none
  * activate_mapping: only blacklist irq if error is considered permanent
  * activate_mapping: report error reason
  * activate_mapping: make sure to catch all errors
  * activate_mapping: avoid use-after-free when affinity cannot be set
  * Revert "activate_mapping: fflush the buffered data to smp_affinity"
  * activate_mapping: fflush the buffered data to smp_affinity</changelog>
  <changelog author="trenn@suse.de" date="1700568000">- Update to version 1.9.3.8.git+c963f48:
  * Enable systemd feature support by default when building with meson
  * Add support for linking against libnl when building with meson
  * Turn NUMA support into an enabled feature, when building with meson
  * Set project version of meson build to 1.9.3
  * Install man pages when building with meson
  * When building with meson, make sure to link against numa
  * Updating to version 1.9.3
  * Automatically use systemd journal and run in foreground when under systemd</changelog>
  <changelog author="aschnell@suse.com" date="1701864000">- Update to version 1.9.3.10.git+1a7d461:
  * filter console only output when using journal mode
- build with libsystemd for logging (bsc#1217754)</changelog>
  <changelog author="trenn@suse.de" date="1710849600">- Update to version 1.9.4.0.git+f8b8cdd:
  * update configure to version 1.9.4
  * Flush file before closing
  * Fix socket API being blocked for 10s
  * Set additional systemd options for service
  * activate_mapping: set errsave before first jump to the error label
  * Avoid repeated affinity checks when no change is necessary
  * Slience "... rebalancing" messages for unmigratable IRQs
- Use manual instead of local service for updating
- Adopt to mainline:
  M Set-fd-limit.patch</changelog>
  <changelog author="pujos.michael@gmail.com" date="1720699200">- removed ProtectKernelTunables=yes from irqbalance.service to
  fix "Cannot change IRQ %d affinity: Read-only file system" errors.
  See https://github.com/Irqbalance/irqbalance/issues/308</changelog>
</package>
<package pkgid="fe785969ac1205247465704b497098f43dc69042f7e39cf0aa573a74295b0ab4f7ad13728e4f7e30f3128638a3164cec188ee4e143deb8a99cc2c013a5d852ea" name="iscsiuio-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.7.8.8" rel="slfo.1.1_1.2"/>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="144d92b49d0805d4295467559cd5f85361d703a414f570005194cbba8b3ecfe04172faf0180ad6be9f91e759132b8bcfb1464d543eff980182cb6c991be9d03c" name="jbigkit-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1" rel="slfo.1.1_2.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- Makefile is not parallel-safe</changelog>
  <changelog author="pgajdos@suse.com" date="1750161600">- version update to 2.1
- added patches
  CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="0ba83997ffc393adae6fe018eaebd00521d586469007f309eebfbfb5b2c09059b9993db7651b10f0b57e9b4503a41ae45feb0963ab10fef1f7d9a38da8bab47a" name="jfsutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.15" rel="slfo.1.1_1.2"/>
  <changelog author="jnelson-suse@jamponi.net" date="1258113600">- update to version 1.1.14
  * Fix journal replay to handle records that span 3 pages
  * Increase the maximum inline journal size from 32 MB to 128 MB
  * Don't call ioctl(BLKFLSBUF) on a ramdisk.  It wipes out everything.
  * Fix fsck abort
- changes in 1.1.13
  * Rewrite a confusing error messages
  * Improve sanity checking when replaying the journal
  * Work around _LARGEFILE_SOURCE not getting defined by autoconf
  * Remove unhelpful allocation debug messages</changelog>
  <changelog author="per@opensuse.org" date="1308484800">- update to version 1.1.15
  * Several fixes for large filesystems where 64-bit variables are needed
  * Fix incorrect size check on directories
  * Make the timestamp format consistent
- spec: add sed-script to fix warnings wrt formatting of man-pages</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags</changelog>
  <changelog author="aj@suse.de" date="1353067200">- Fix missing include (patch jfs-headers.patch).</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Cleanup spec file with spec-cleaner
- Use url for source</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="mliska@suse.cz" date="1587988800">- Enable -fcommon in order to fix boo#1160272.</changelog>
  <changelog author="mliska@suse.cz" date="1588161600">- Added patch: libfs-Fixing-issue-with-variable-name-collision.patch
- Remove not needed -fcommon.</changelog>
  <changelog author="ddiss@suse.com" date="1633953600">- UsrMerge: don't override _sbindir (bsc#1191065)</changelog>
  <changelog author="dmueller@suse.com" date="1652788800">- add jfsutils_format-security_ftbs.patch</changelog>
</package>
<package pkgid="28ae906e4e9bc42b95b68eab80d6778cff93c9348f65d8c8e632e04a5ddfd5723b31cd46b4f08acef38d9fde9fd5dfb51e2c8759baed4bc7d992cdb86022bf02" name="jfsutils-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.15" rel="slfo.1.1_1.2"/>
  <changelog author="jnelson-suse@jamponi.net" date="1258113600">- update to version 1.1.14
  * Fix journal replay to handle records that span 3 pages
  * Increase the maximum inline journal size from 32 MB to 128 MB
  * Don't call ioctl(BLKFLSBUF) on a ramdisk.  It wipes out everything.
  * Fix fsck abort
- changes in 1.1.13
  * Rewrite a confusing error messages
  * Improve sanity checking when replaying the journal
  * Work around _LARGEFILE_SOURCE not getting defined by autoconf
  * Remove unhelpful allocation debug messages</changelog>
  <changelog author="per@opensuse.org" date="1308484800">- update to version 1.1.15
  * Several fixes for large filesystems where 64-bit variables are needed
  * Fix incorrect size check on directories
  * Make the timestamp format consistent
- spec: add sed-script to fix warnings wrt formatting of man-pages</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags</changelog>
  <changelog author="aj@suse.de" date="1353067200">- Fix missing include (patch jfs-headers.patch).</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Cleanup spec file with spec-cleaner
- Use url for source</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="mliska@suse.cz" date="1587988800">- Enable -fcommon in order to fix boo#1160272.</changelog>
  <changelog author="mliska@suse.cz" date="1588161600">- Added patch: libfs-Fixing-issue-with-variable-name-collision.patch
- Remove not needed -fcommon.</changelog>
  <changelog author="ddiss@suse.com" date="1633953600">- UsrMerge: don't override _sbindir (bsc#1191065)</changelog>
  <changelog author="dmueller@suse.com" date="1652788800">- add jfsutils_format-security_ftbs.patch</changelog>
</package>
<package pkgid="5adc4f68fb7bfab51f1c60904fae0c3c952696b84d42e171ef869930137af138837d122913cdc3e4b222e72d10db3dd7d8facb3f4ee768b6022e63cd29973856" name="jigit-debugsource" arch="aarch64">
  <version epoch="0" ver="1.22" rel="slfo.1.1_1.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1485777600">- Initial rpm release.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1486036800">- Change %{_bindir}/* to an explicit binary list.</changelog>
  <changelog author="jengelh@inai.de" date="1486209600">- Use text from upstream readme as description.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1614686400">- Update to version 1.22:
  * Add support for SHA256 checksums, using jigdo format v2
    + Changes to libjte to generate the new format as an option -
    still defaults to v1 for cmpatibility for now
    + libjte updated to major version 2
    + Add support for v2 in jigdump, jigit-mkimage etc. too
    + Add new jigsum-sha256 program, for the base64-like output
    with sha256 checksums
  * jigdump now also understands jigdo .iso.tmp files
  * Misc small cleanups
  From version 1.21:
  * parallel-sums:
    + New utility for calculating checksums in parallel
  * Misc code cleanups
  * Misc man page cleanups
  * jigit-mkimage:
    + Print missing file names correctly</changelog>
</package>
<package pkgid="85ba3c7ba2bdc6bfd0202d00fce50d3f48ed488e09aeee64fd41ba126c3b44798eccca8991bab6bef1d84f92ba6ccad090a77cfb7ca6f7b90451b1ac4ea683fa" name="jq-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.1" rel="slfo.1.1_2.1"/>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- build without valgrind on riscv64 - does not exist (yet)</changelog>
  <changelog author="mardnh@gmx.de" date="1694088000">- Update to version 1.7
  * Make object key color configurable using JQ_COLORS environment
    variable.
  * Change the default color of null to Bright Black.
  * Respect NO_COLOR environment variable to disable color output.
  * Improved --help output. Now mentions all options and nicer
    order.
  * Fix multiple issues of exit code using --exit-code/-e option.
  * Add --raw-output0 for NUL (zero byte) separated output.
  * Fix assert crash and validate JSON for --jsonarg.
  * Remove deprecated --argfile option.
  Language changes
  * Use decimal number literals to preserve precision. Comparison
    operations respects precision but arithmetic operations might
    truncate.
  * Adds new builtin pick(stream) to emit a projection of the
    input object or array.
  * Adds new builtin debug(msgs) that works like debug but applies
    a filter on the input before writing to stderr.
  * Adds new builtin scan($re; $flags). Was documented but not
    implemented.
  * Adds new builtin abs to get absolute value. This potentially
    allows the literal value of numbers to be preserved as length
    and fabs convert to float.
  * Allow if without else-branch. When skipped the else-branch
    will be . (identity).
  * Allow use of $binding as key in object literals.
  * Allow dot between chained indexes when using .["index"]
  * Allow dot for chained value iterator .[], .[]?
  * Fix try/catch catches more than it should.
  * Speed up and refactor some builtins, also remove
    scalars_or_empty/0.
  * Now halt and halt_error exit immediately instead of continuing
    to the next input.
  * Fix issue converting string to number after previous convert
    error.
  * Fix issue representing large numbers on some platforms causing
    invalid JSON output.
  * Fix deletion using assigning empty against arrays.
  * Allow keywords to be used as binding name in more places.
  * Allow using nan as NaN in JSON.
  * Expose a module's function names in modulemeta.
  * Fix contains/1 to handle strings with NUL.
  * Fix stderr/0 to output raw text without any decoration.
  * Fix nth/2 to emit empty on index out of range.
  * Fix implode to not assert and instead replace invalid unicode
    codepoints.
  * Fix indices/1 and rindex/1 in case of overlapping matches in
    strings.
  * Fix sub/3 to resolve issues involving global search-and-replace
    (gsub) operations.
  * Fix empty regular expression matches.
  * Fix overflow exception of the modulo operator.
  * Fix string multiplication by 0 (and less than 1) to emit empty
    string.
  * Fix segfault when using libjq and threads.
  * Fix constant folding of division and reminder with zero
    divisor.
  * Fix error/0, error/1 to throw null error.
  * Simpler and faster transpose.
  * Simple and efficient implementation of walk/1.
  * Remove deprecated filters leaf_paths, recurse_down.
- Adjust URL/Source - new upstream
  https://github.com/stedolan/jq -&gt; https://github.com/jqlang</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1695816000">- switch to bootstrapped upstream tarball to fix version output
  [boo#1215737]</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- build with valgrind only on 64 bit architectures</changelog>
  <changelog author="mardnh@gmx.de" date="1702468800">- Update to version 1.7.1
  Security
  * Fix CVE-2023-50246 (boo#1218034)
    + Fix heap buffer overflow in jvp_literal_number_literal.
  * Fix CVE-2023-50268 (boo#1218038)
    fix stack-buffer-overflow if comparing nan with payload.
  CLI changes
  * Make the default background color more suitable for bright
    backgrounds.
  * Allow passing the inline jq script after --.
  * Fix possible uninitialised value dereference if jq_init() fails
  Language changes
  * Simplify paths/0 and paths/1.
  * Reject U+001F in string literals.
  * Remove unused nref accumulator in block_bind_library.
  * Remove a bunch of unused variables, and useless assignments.
  * main.c: Remove unused EXIT_STATUS_EXACT option.
  * Actually use the number correctly casted from double to int as
    index.
  * src/builtin.c: remove unnecessary jv_copy-s in
    type_error/type_error2.
  * Remove undefined behavior caught by LLVM 10 UBSAN.
  * Convert decnum to binary64 (double) instead of decimal64.
    This makes jq behave like the JSON specification suggests and
    more similar to other languages.
  * Fix memory leaks on invalid input for ltrimstr/1 and
    rtrimstr/1.
  * Fix memory leak on failed get for setpath/2.
  * Fix nan from json parsing also for nans with payload that
    start with 'n'.
  * Allow carriage return characters in comments.
  Documentation changes
  * Generate links in the man page.
  libjq
  * Add extern C for C++.</changelog>
  <changelog author="ncutler@suse.com" date="1747742400">- Add patch CVE-2024-53427.patch (CVE-2024-53427, bsc#1238078)</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
  <changelog author="ncutler@suse.com" date="1753963200">- Add patches CVE-2025-48060-1.patch and CVE-2025-48060-2.patch
  (CVE-2025-48060, bsc#1244116)</changelog>
</package>
<package pkgid="daf445e741bfda0fbdf61cfd43ad8509cb364754bfb4f1df92bec54182621d8109bd936bcfbbcc5ffce209e66e76c420379e88e2f2d831073e183c3fdb6c635c" name="jq-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.1" rel="slfo.1.1_2.1"/>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- build without valgrind on riscv64 - does not exist (yet)</changelog>
  <changelog author="mardnh@gmx.de" date="1694088000">- Update to version 1.7
  * Make object key color configurable using JQ_COLORS environment
    variable.
  * Change the default color of null to Bright Black.
  * Respect NO_COLOR environment variable to disable color output.
  * Improved --help output. Now mentions all options and nicer
    order.
  * Fix multiple issues of exit code using --exit-code/-e option.
  * Add --raw-output0 for NUL (zero byte) separated output.
  * Fix assert crash and validate JSON for --jsonarg.
  * Remove deprecated --argfile option.
  Language changes
  * Use decimal number literals to preserve precision. Comparison
    operations respects precision but arithmetic operations might
    truncate.
  * Adds new builtin pick(stream) to emit a projection of the
    input object or array.
  * Adds new builtin debug(msgs) that works like debug but applies
    a filter on the input before writing to stderr.
  * Adds new builtin scan($re; $flags). Was documented but not
    implemented.
  * Adds new builtin abs to get absolute value. This potentially
    allows the literal value of numbers to be preserved as length
    and fabs convert to float.
  * Allow if without else-branch. When skipped the else-branch
    will be . (identity).
  * Allow use of $binding as key in object literals.
  * Allow dot between chained indexes when using .["index"]
  * Allow dot for chained value iterator .[], .[]?
  * Fix try/catch catches more than it should.
  * Speed up and refactor some builtins, also remove
    scalars_or_empty/0.
  * Now halt and halt_error exit immediately instead of continuing
    to the next input.
  * Fix issue converting string to number after previous convert
    error.
  * Fix issue representing large numbers on some platforms causing
    invalid JSON output.
  * Fix deletion using assigning empty against arrays.
  * Allow keywords to be used as binding name in more places.
  * Allow using nan as NaN in JSON.
  * Expose a module's function names in modulemeta.
  * Fix contains/1 to handle strings with NUL.
  * Fix stderr/0 to output raw text without any decoration.
  * Fix nth/2 to emit empty on index out of range.
  * Fix implode to not assert and instead replace invalid unicode
    codepoints.
  * Fix indices/1 and rindex/1 in case of overlapping matches in
    strings.
  * Fix sub/3 to resolve issues involving global search-and-replace
    (gsub) operations.
  * Fix empty regular expression matches.
  * Fix overflow exception of the modulo operator.
  * Fix string multiplication by 0 (and less than 1) to emit empty
    string.
  * Fix segfault when using libjq and threads.
  * Fix constant folding of division and reminder with zero
    divisor.
  * Fix error/0, error/1 to throw null error.
  * Simpler and faster transpose.
  * Simple and efficient implementation of walk/1.
  * Remove deprecated filters leaf_paths, recurse_down.
- Adjust URL/Source - new upstream
  https://github.com/stedolan/jq -&gt; https://github.com/jqlang</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1695816000">- switch to bootstrapped upstream tarball to fix version output
  [boo#1215737]</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- build with valgrind only on 64 bit architectures</changelog>
  <changelog author="mardnh@gmx.de" date="1702468800">- Update to version 1.7.1
  Security
  * Fix CVE-2023-50246 (boo#1218034)
    + Fix heap buffer overflow in jvp_literal_number_literal.
  * Fix CVE-2023-50268 (boo#1218038)
    fix stack-buffer-overflow if comparing nan with payload.
  CLI changes
  * Make the default background color more suitable for bright
    backgrounds.
  * Allow passing the inline jq script after --.
  * Fix possible uninitialised value dereference if jq_init() fails
  Language changes
  * Simplify paths/0 and paths/1.
  * Reject U+001F in string literals.
  * Remove unused nref accumulator in block_bind_library.
  * Remove a bunch of unused variables, and useless assignments.
  * main.c: Remove unused EXIT_STATUS_EXACT option.
  * Actually use the number correctly casted from double to int as
    index.
  * src/builtin.c: remove unnecessary jv_copy-s in
    type_error/type_error2.
  * Remove undefined behavior caught by LLVM 10 UBSAN.
  * Convert decnum to binary64 (double) instead of decimal64.
    This makes jq behave like the JSON specification suggests and
    more similar to other languages.
  * Fix memory leaks on invalid input for ltrimstr/1 and
    rtrimstr/1.
  * Fix memory leak on failed get for setpath/2.
  * Fix nan from json parsing also for nans with payload that
    start with 'n'.
  * Allow carriage return characters in comments.
  Documentation changes
  * Generate links in the man page.
  libjq
  * Add extern C for C++.</changelog>
  <changelog author="ncutler@suse.com" date="1747742400">- Add patch CVE-2024-53427.patch (CVE-2024-53427, bsc#1238078)</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
  <changelog author="ncutler@suse.com" date="1753963200">- Add patches CVE-2025-48060-1.patch and CVE-2025-48060-2.patch
  (CVE-2025-48060, bsc#1244116)</changelog>
</package>
<package pkgid="472a9e5ccb36d85115efc704a108b92753becbab3ee64add6c2cef9df1846d1c7da46da7d0b7ecad4d0b80dda1464c019ba74e16164f0f15e91fcd2ac021e89b" name="json-glib-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.6" rel="slfo.1.1_1.2"/>
  <changelog author="sbrabec@suse.com" date="1524744000">- Set gettext domain explicitly in translation-update-upstream,
  as it does not support complex meson.build expressions
  (bsc#1087076#c21).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.4.4:
  + Fix memory leaks.
  + Fix behaviour of JsonParser with immutable nodes for empty
    documents.
  + Clarify documentation.
  + Update autoptr macro for JsonNode to use json_node_unref().
  + Update the enumeration types template.
  + Perform fuzzy comparisons for floating point values in the test
    suite.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1590148800">- Require pkgconfig to create pkgconfig() provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 1.5.2:
  + Add getters with default fallback for JsonObject.
  + Clarify some expections of the json_object_get_*_member APIs.
  + Fix getting immutable root nodes from empty input.
  + Add `--output` option to json-glib-format.
  + Support loading files via memory mapping.
  + Add a symbol version to all exported symbols.
- Pass -Dgtk_doc=disabled to meson: keep the gtk-doc disabled for
  now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1599825600">- Update to version 1.6.0:
  + docs: Add missing index for 1.6 symbols.
  + Updated translations.
- Add gtk-doc BuildRequires and build gtk-doc api documentation and
  manpages via passing man=true and gtk_doc=enabled to meson.
- Add check section and run meson_test macro during build.
- Drop obsolete nuking of .la files, no longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1612872000">- Update to version 1.6.2:
  + Fix build reproducibility.
  + Fix parsing of UTF-16 surrogate pairs.
  + Ignore UTF-8 BOM.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629547200">- Update to version 1.6.4:
  + Discover linker flags on all toolchains
  + Fix memory leak
  + Use gi-docgen instead of gtk-doc for generating the API
    reference
  + Build against newer versions of GLib
- Pass gtk_doc=disabled to meson, no longer build API
  documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629892800">- Update to version 1.6.6:
  + New release with the documentation and gi-docgen included in
    the archive.
- Drop gtk-doc BuildRequires, no longer needed, nor used.
- Add docbook-xsl-stylesheets and libxslt-tools BuildRequires,
  needed for building of manpages.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
</package>
<package pkgid="70b709346db93f7a407819ccdc617297b67ca4671168a31254e70163605ddefd69910fae18ea163c2f1e2ad943de6046f0d24a515babade84808486c5e5d419e" name="kbd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.4" rel="slfo.1.1_1.3"/>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- rebased cz-map.patch for console-setup 1.215 update; apparently
  'U+00b0' needs to be 'dead_abovering' and not 'dead_grave' as we
  assumed before</changelog>
  <changelog author="msuchanek@suse.com" date="1677499200">- Update to version 2.5.1
  - Add Irish keyboard map
  - Add PinePhone keyboard keymap
  - Added braces to IT keyboard map
  - Add Euro at Portuguese keyboards
  - Fix incorrect acentuation pt-latin9
  - fa.map: drop high codepoint character that chokes loadkeys
  - data/keymaps/i386/neo: use Delete instead of Backspace
  - Fix documentation for a few program options
  - Fix some memory leaks
  - Update translations
  - autogen.sh missing from release tarball, copy from git
  - Remove upstreamed patches
  - 0001-libkfont-Initialize-kfont_context-options.patch
  - kbd-1.15.2-dumpkeys-C-opt.patch
  - kbd-2.0.2-comment-typo-qwerty.patch</changelog>
  <changelog author="fbui@suse.com" date="1681992000">- Rename 'arabic' keyboard console layout into 'ara' and drop 'korean' symlink
  (bsc#1210702)</changelog>
  <changelog author="fcrozat@suse.com" date="1682683200">- Remove additional vfonts, they are freeware, not opensource
  (bsc#1210678).
- Adjust license tag, pinephone keymap is under GPL-3.0-or-later.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1688126400">- Update to version 2.6.1:
  - libkfont:
  * Fix font saving from linux kernel if KD_FONT_OP_GET_TALL is available.
  * Respect font height when writing psf2 header.
  - keymaps:
  * Create new 'mac-fr' layout for contemporary French Macs.
- Version 2.6.0 changelog:
  - libkfont:
  * Leverage KD_FONT_OP_GET/SET_TALL font operations. The new
    KD_FONT_OP_GET/SET_TALL font operations allow to load fonts taller
    than 32 pixels by dropping the VGA-specific vertical pitch limitation
    (requires kernel 6.2 or later).
  * Use threadsafe strtok_r.
  * Increase soname version.
  - setvtrgb:
  * Fix read from pipe. The pipe is not rewindable, but we don't really
    need to rewind() but we need to unread one character.
  - keymaps:
  * i386/dvorak/dvorak-de.map: Add dvorak-de.map from console-data.
  * i386/qwerty/is-latin1.map: the circumflex should also be available in
    its original level-3 position.
  * i386/qwerty/la-latin1.map: Convert the characters expressed in Latin-1
    to the named constants, to ease up transition to Unicode.
  * pine/en.map: New version of pinephone keyboard map file.
  - unimaps:
  * Add mapping for U+25CF. The unicode maps in font files like
    eurlatgr.psfu and cp850-8x16.psfu have an entry for U+25CF, but the
    plaintext unimap files do not.
  - tests:
  * Use strace to track syscalls. Now strace is powerful enough to show
    ioctls specific to console configuration.
  - po:
  * Update translations (from translationproject.org).</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1692100800">- Update to version 2.6.2:
  - loadkeys:
  * Don't look for keymap in the current directory.
  - keymaps:
  * Add colemak mod-dh keymaps.
- Refresh kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1695384000">- Update to version 2.6.3:
  - libkfont:
  * Don't look for fonts in the current directory.
  - showkey:
  * Add parameter to allow to change timeout.
  - po:
  * Update po files.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1703246400">- Update to version 2.6.4:
  - Use AX_ADD_FORTIFY_SOURCE to avoid redefining _FORTIFY_SOURCE
  - Do not look up include files in the current working directory</changelog>
  <changelog author="sbrabec@suse.com" date="1713355200">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)</changelog>
</package>
<package pkgid="4729197ab9ede1f299070c6aff53294f4ae80b1b26e103769f9819d491e38a1baf954eb36b54fb4148c9131f8a5c25814b79f2579a899041bb31176c3f6d6495" name="kbd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.4" rel="slfo.1.1_1.3"/>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- rebased cz-map.patch for console-setup 1.215 update; apparently
  'U+00b0' needs to be 'dead_abovering' and not 'dead_grave' as we
  assumed before</changelog>
  <changelog author="msuchanek@suse.com" date="1677499200">- Update to version 2.5.1
  - Add Irish keyboard map
  - Add PinePhone keyboard keymap
  - Added braces to IT keyboard map
  - Add Euro at Portuguese keyboards
  - Fix incorrect acentuation pt-latin9
  - fa.map: drop high codepoint character that chokes loadkeys
  - data/keymaps/i386/neo: use Delete instead of Backspace
  - Fix documentation for a few program options
  - Fix some memory leaks
  - Update translations
  - autogen.sh missing from release tarball, copy from git
  - Remove upstreamed patches
  - 0001-libkfont-Initialize-kfont_context-options.patch
  - kbd-1.15.2-dumpkeys-C-opt.patch
  - kbd-2.0.2-comment-typo-qwerty.patch</changelog>
  <changelog author="fbui@suse.com" date="1681992000">- Rename 'arabic' keyboard console layout into 'ara' and drop 'korean' symlink
  (bsc#1210702)</changelog>
  <changelog author="fcrozat@suse.com" date="1682683200">- Remove additional vfonts, they are freeware, not opensource
  (bsc#1210678).
- Adjust license tag, pinephone keymap is under GPL-3.0-or-later.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1688126400">- Update to version 2.6.1:
  - libkfont:
  * Fix font saving from linux kernel if KD_FONT_OP_GET_TALL is available.
  * Respect font height when writing psf2 header.
  - keymaps:
  * Create new 'mac-fr' layout for contemporary French Macs.
- Version 2.6.0 changelog:
  - libkfont:
  * Leverage KD_FONT_OP_GET/SET_TALL font operations. The new
    KD_FONT_OP_GET/SET_TALL font operations allow to load fonts taller
    than 32 pixels by dropping the VGA-specific vertical pitch limitation
    (requires kernel 6.2 or later).
  * Use threadsafe strtok_r.
  * Increase soname version.
  - setvtrgb:
  * Fix read from pipe. The pipe is not rewindable, but we don't really
    need to rewind() but we need to unread one character.
  - keymaps:
  * i386/dvorak/dvorak-de.map: Add dvorak-de.map from console-data.
  * i386/qwerty/is-latin1.map: the circumflex should also be available in
    its original level-3 position.
  * i386/qwerty/la-latin1.map: Convert the characters expressed in Latin-1
    to the named constants, to ease up transition to Unicode.
  * pine/en.map: New version of pinephone keyboard map file.
  - unimaps:
  * Add mapping for U+25CF. The unicode maps in font files like
    eurlatgr.psfu and cp850-8x16.psfu have an entry for U+25CF, but the
    plaintext unimap files do not.
  - tests:
  * Use strace to track syscalls. Now strace is powerful enough to show
    ioctls specific to console configuration.
  - po:
  * Update translations (from translationproject.org).</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1692100800">- Update to version 2.6.2:
  - loadkeys:
  * Don't look for keymap in the current directory.
  - keymaps:
  * Add colemak mod-dh keymaps.
- Refresh kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1695384000">- Update to version 2.6.3:
  - libkfont:
  * Don't look for fonts in the current directory.
  - showkey:
  * Add parameter to allow to change timeout.
  - po:
  * Update po files.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1703246400">- Update to version 2.6.4:
  - Use AX_ADD_FORTIFY_SOURCE to avoid redefining _FORTIFY_SOURCE
  - Do not look up include files in the current working directory</changelog>
  <changelog author="sbrabec@suse.com" date="1713355200">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)</changelog>
</package>
<package pkgid="5bc98695191551f5cf7ac4a1b2d6ca7b63f4985aad01656050d1d721436a656d08acd8f3947b2c8e5ffed4d6abb6fe8795295ea9db594c622431e74aae08f3af" name="kdump-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.1" rel="slfo.1.1_1.4"/>
  <changelog author="jbohac@suse.com" date="1687953600">- upgrade to version 1.9.3
  * fix calibrate
  * update kdump(7) manpage
  * turn missing ssh, lftp or host key into a fatal error
  * depend on openssh-clients not openssh
- refreshed calibrate values</changelog>
  <changelog author="jbohac@suse.com" date="1690459200">- upgrade to version 1.9.4
  * fix FADUMP initramfs when not created by mkdumprd
  * FADUMP: let dracut de-duplicate initrd by preserving modification times
  * mkdumprd: only regenerate FADUMP initrds when needed
  * mkdumprd: exit when destination not writable (transactional updates)
  * mkdumprd: don't call update-bootloader</changelog>
  <changelog author="jbohac@suse.com" date="1690545600">- upgrade to version 1.9.5
  * SELinux: temporary hack for bsc#1213721</changelog>
  <changelog author="jbohac@suse.com" date="1692964800">- upgrade to version 1.9.6
  * use newer /sys/kernel/fadump/ instead of /sys/kernel/fadump_
  * use kexec -a which falls back to kexec_load(2) automatically
  * update s390 udev rules
  * drop systemd device timeout generator</changelog>
  <changelog author="jbohac@suse.com" date="1694001600">- update calibrate values, newly added SLE15-SP6 values</changelog>
  <changelog author="jbohac@suse.com" date="1697544000">- upgrade to version 1.9.7
  * prevent dracut emergency shell
  * s390: consolidate low-level network configuration with zdev
  * s390: Explicitly request zFCP devices</changelog>
  <changelog author="jbohac@suse.com" date="1698753600">- upgrade to version 1.9.8
  * drop obsolete dependency on systemd-sysvinit (bsc#1216745)</changelog>
  <changelog author="jbohac@suse.com" date="1702468800">- upgrade to version 2.0.0
  * add support for riscv64 (bsc#1204214)
  * mkdumprd: fix the check for updated SSH keys
  * prefer by-path and device-mapper aliases (bsc#1217617)
  * udev: don't reload kdump if kernel handles hotplug (jsc#PED-5077)</changelog>
  <changelog author="schwab@suse.de" date="1702728000">- Update calibrate values for riscv64</changelog>
  <changelog author="jbohac@suse.com" date="1705579200">- upgrade to version 2.0.1
  * load.sh: fix fadump (bsc#1218589)</changelog>
</package>
<package pkgid="c9842ad125cd52fbd74982bca48df4059954a7f6177d3e860d205ea426c4d97cbb900e686808c7f934eb79d52810574295456e0312dcfe606ab7102dbcbac26d" name="kdump-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.1" rel="slfo.1.1_1.4"/>
  <changelog author="jbohac@suse.com" date="1687953600">- upgrade to version 1.9.3
  * fix calibrate
  * update kdump(7) manpage
  * turn missing ssh, lftp or host key into a fatal error
  * depend on openssh-clients not openssh
- refreshed calibrate values</changelog>
  <changelog author="jbohac@suse.com" date="1690459200">- upgrade to version 1.9.4
  * fix FADUMP initramfs when not created by mkdumprd
  * FADUMP: let dracut de-duplicate initrd by preserving modification times
  * mkdumprd: only regenerate FADUMP initrds when needed
  * mkdumprd: exit when destination not writable (transactional updates)
  * mkdumprd: don't call update-bootloader</changelog>
  <changelog author="jbohac@suse.com" date="1690545600">- upgrade to version 1.9.5
  * SELinux: temporary hack for bsc#1213721</changelog>
  <changelog author="jbohac@suse.com" date="1692964800">- upgrade to version 1.9.6
  * use newer /sys/kernel/fadump/ instead of /sys/kernel/fadump_
  * use kexec -a which falls back to kexec_load(2) automatically
  * update s390 udev rules
  * drop systemd device timeout generator</changelog>
  <changelog author="jbohac@suse.com" date="1694001600">- update calibrate values, newly added SLE15-SP6 values</changelog>
  <changelog author="jbohac@suse.com" date="1697544000">- upgrade to version 1.9.7
  * prevent dracut emergency shell
  * s390: consolidate low-level network configuration with zdev
  * s390: Explicitly request zFCP devices</changelog>
  <changelog author="jbohac@suse.com" date="1698753600">- upgrade to version 1.9.8
  * drop obsolete dependency on systemd-sysvinit (bsc#1216745)</changelog>
  <changelog author="jbohac@suse.com" date="1702468800">- upgrade to version 2.0.0
  * add support for riscv64 (bsc#1204214)
  * mkdumprd: fix the check for updated SSH keys
  * prefer by-path and device-mapper aliases (bsc#1217617)
  * udev: don't reload kdump if kernel handles hotplug (jsc#PED-5077)</changelog>
  <changelog author="schwab@suse.de" date="1702728000">- Update calibrate values for riscv64</changelog>
  <changelog author="jbohac@suse.com" date="1705579200">- upgrade to version 2.0.1
  * load.sh: fix fadump (bsc#1218589)</changelog>
</package>
<package pkgid="afce9592682a4017f530b3e515b0506be83940aa121560c1b1bc6d1ed8647419e7092e8fd8caeddd37cc2b3f0b2d00de38fd4295cd495ede18142b942d26ac0c" name="keepalived-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.2.8" rel="slfo.1.1_1.2"/>
  <changelog author="mrueckert@suse.de" date="1613649600">- Make sure we pull in the libraries we need for dlopen, by
  following the symlinks from the .so symlinks with the
  requires_file macro.</changelog>
  <changelog author="mrueckert@suse.de" date="1615118400">- Update to 2.2.2
  https://www.keepalived.org/release-notes/Release-2.2.2.html
- change how we install documentation to avoid duplicated files
- Link all the files for ipset, iptables, libnl instead of dlopen.
  Drop the previous workaround for generating requires for the
  dlopen-ed libaries.
- remove unsupported configure option: --enable-libiptc</changelog>
  <changelog author="mrueckert@suse.de" date="1615204800">- drop linux-4.15.patch: No longer needed as it was a backport from
  upstream
- Cleanup configure options after consultation with upstream:
  - --enable-regex-timers is for debugging purposes
  - --enable-snmp-checker and --enable-snmp-vrrp are enabled by
  - -enable-snmp
  - --enable-snmp-rfcv2 and --enable-snmp-rfcv3 anre enabled by
  - -enable-snmp-rfc
  - --enable-stacktrace is definitely a debugging option
- on systems where we have nftables support we will only ship with
  nftables support (&gt;= 15.0) and use iptables support only on older
  distributions.</changelog>
  <changelog author="dmueller@suse.com" date="1626868800">- add 1915.patch to fix build on tumbleweed</changelog>
  <changelog author="jsegitz@suse.com" date="1632744000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_keepalived.service.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1639051200">- Update to 2.2.4
  * Bug fixes
- Update to 2.2.3
  * Added some new features and minor bug fixes
  * genhash utility is now part of the mainline daemon
  * https://www.keepalived.org/release-notes/Release-2.2.3.html
- Drop 1915.patch, merged upstream
- Drop outdated suse_version check</changelog>
  <changelog author="rpm@fthiessen.de" date="1645704000">- Update to 2.2.7
  * Fix CVE-2021-44225: The D-Bus policy does not sufficiently
    restrict the message destination, allowing any user to inspect
    and manipulate any property.
  * New features:
  * global: Don’t assume running as user root.
  * ipvs: Add support to twos scheduler.
  * vrrp: New features:
  * Add vrf option for unicast without specifying an interface.
  * Add option unicast_fault_no_peer.
  * Allow specification of multicast address to be used.
  * Add vrf option to static and vrrp routes.
  * Add option to resend vrrp states on fifos after reload.
  * Allow duplication of VRIDs on an interface with unicast peers.
  * systemd: Add keepalived-non-root.service systemd service file.
  * make BFD work when IPv6 disabled on system.
  * Fix calculating CLOCK_REALTIME and CLOCK_MONOTONIC offsets.
  * bfd: Handle interface down/address missing when keepalived starts.
    This resolves a segfault, and also makes bfd retry once per minute
    to create send socket if it cannot do so due to no address to bind
    to on an interface.
  * vrrp:
  * Fix configured IPv6 multicast addresses with VMACs.
  * Don’t segfault if duplicate VMAC name, but ignore second name.
  * Don’t delete and recreate VMAC on reload if only VRID has changed.
  * Don’t segfault if don’t have permission for ARP/NDISC socket.
  * Fix IPv6 with vmac_xmit_base.
  * Fix disabling vmac-xmit-base with VRRPv3 IPv6 use_vmac.
  * Fix specifying user/group for vrrp_scripts.
  * Various other fixes and improvements</changelog>
  <changelog author="mrueckert@suse.de" date="1649764800">- Own /etc/keepalived/keepalived.conf as %ghost entry
  otherwise upgrading the package will always move the
  /etc/keepalived/keepalived.conf to
  /etc/keepalived/keepalived.conf.rpmsave
- make permissions of config files more secure</changelog>
  <changelog author="mrueckert@suse.de" date="1685534400">- Update to 2.2.8
  https://www.keepalived.org/release-notes/Release-2.2.8.html</changelog>
  <changelog author="varkoly@suse.com" date="1723550400">- VUL-0: CVE-2024-41184: keepalived: integer overflow in vrrp_ipsets_handler
  (bsc#1228123) Apply upstream patches:
    bsc-1228123.patch</changelog>
</package>
<package pkgid="a9f28cf4ad696ad40ea86462c78cba5b48790661c5ccf248b32811f1bb4891f66570e64682f4b61288110952e4ca9bf035b523ea02613b64c8224d42122b5695" name="keepalived-debugsource" arch="aarch64">
  <version epoch="0" ver="2.2.8" rel="slfo.1.1_1.2"/>
  <changelog author="mrueckert@suse.de" date="1613649600">- Make sure we pull in the libraries we need for dlopen, by
  following the symlinks from the .so symlinks with the
  requires_file macro.</changelog>
  <changelog author="mrueckert@suse.de" date="1615118400">- Update to 2.2.2
  https://www.keepalived.org/release-notes/Release-2.2.2.html
- change how we install documentation to avoid duplicated files
- Link all the files for ipset, iptables, libnl instead of dlopen.
  Drop the previous workaround for generating requires for the
  dlopen-ed libaries.
- remove unsupported configure option: --enable-libiptc</changelog>
  <changelog author="mrueckert@suse.de" date="1615204800">- drop linux-4.15.patch: No longer needed as it was a backport from
  upstream
- Cleanup configure options after consultation with upstream:
  - --enable-regex-timers is for debugging purposes
  - --enable-snmp-checker and --enable-snmp-vrrp are enabled by
  - -enable-snmp
  - --enable-snmp-rfcv2 and --enable-snmp-rfcv3 anre enabled by
  - -enable-snmp-rfc
  - --enable-stacktrace is definitely a debugging option
- on systems where we have nftables support we will only ship with
  nftables support (&gt;= 15.0) and use iptables support only on older
  distributions.</changelog>
  <changelog author="dmueller@suse.com" date="1626868800">- add 1915.patch to fix build on tumbleweed</changelog>
  <changelog author="jsegitz@suse.com" date="1632744000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_keepalived.service.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1639051200">- Update to 2.2.4
  * Bug fixes
- Update to 2.2.3
  * Added some new features and minor bug fixes
  * genhash utility is now part of the mainline daemon
  * https://www.keepalived.org/release-notes/Release-2.2.3.html
- Drop 1915.patch, merged upstream
- Drop outdated suse_version check</changelog>
  <changelog author="rpm@fthiessen.de" date="1645704000">- Update to 2.2.7
  * Fix CVE-2021-44225: The D-Bus policy does not sufficiently
    restrict the message destination, allowing any user to inspect
    and manipulate any property.
  * New features:
  * global: Don’t assume running as user root.
  * ipvs: Add support to twos scheduler.
  * vrrp: New features:
  * Add vrf option for unicast without specifying an interface.
  * Add option unicast_fault_no_peer.
  * Allow specification of multicast address to be used.
  * Add vrf option to static and vrrp routes.
  * Add option to resend vrrp states on fifos after reload.
  * Allow duplication of VRIDs on an interface with unicast peers.
  * systemd: Add keepalived-non-root.service systemd service file.
  * make BFD work when IPv6 disabled on system.
  * Fix calculating CLOCK_REALTIME and CLOCK_MONOTONIC offsets.
  * bfd: Handle interface down/address missing when keepalived starts.
    This resolves a segfault, and also makes bfd retry once per minute
    to create send socket if it cannot do so due to no address to bind
    to on an interface.
  * vrrp:
  * Fix configured IPv6 multicast addresses with VMACs.
  * Don’t segfault if duplicate VMAC name, but ignore second name.
  * Don’t delete and recreate VMAC on reload if only VRID has changed.
  * Don’t segfault if don’t have permission for ARP/NDISC socket.
  * Fix IPv6 with vmac_xmit_base.
  * Fix disabling vmac-xmit-base with VRRPv3 IPv6 use_vmac.
  * Fix specifying user/group for vrrp_scripts.
  * Various other fixes and improvements</changelog>
  <changelog author="mrueckert@suse.de" date="1649764800">- Own /etc/keepalived/keepalived.conf as %ghost entry
  otherwise upgrading the package will always move the
  /etc/keepalived/keepalived.conf to
  /etc/keepalived/keepalived.conf.rpmsave
- make permissions of config files more secure</changelog>
  <changelog author="mrueckert@suse.de" date="1685534400">- Update to 2.2.8
  https://www.keepalived.org/release-notes/Release-2.2.8.html</changelog>
  <changelog author="varkoly@suse.com" date="1723550400">- VUL-0: CVE-2024-41184: keepalived: integer overflow in vrrp_ipsets_handler
  (bsc#1228123) Apply upstream patches:
    bsc-1228123.patch</changelog>
</package>
<package pkgid="2eeeb56aa407758da3299ff3f47858c0388eaa5c0db0abc8cde84b0b49eee219d2250f7d068ede6e24d54627b0c8e39f5810490abdcc342de52832d7b02f8b98" name="kernel-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="40.1"/>
  <changelog author="vkarasulli@suse.de" date="1772539200">- iommu/mediatek: fix use-after-free on probe deferral
  (CVE-2025-71071 bsc#1256802).
- commit 0b777d9</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1772539201">- cifs: add xid to query server interface call (git-fixes).
- Refresh
  patches.suse/cifs-handle-when-server-starts-supporting-multichannel.patch.
- Refresh
  patches.suse/cifs-make-sure-server-interfaces-are-requested-only-for-SMB3-.patch
  (bsc#1258928,bsc#1259070).
- Refresh
  patches.suse/cifs-do-not-disable-interface-polling-on-failure.patch.
- Refresh
  patches.suse/cifs-add-xid-to-query-server-interface-call.patch.
- commit e67e831</changelog>
  <changelog author="tiwai@suse.de" date="1772712000">- ALSA: usb-audio: Add sanity check for OOB writes at silencing
  (stable-fixes).
- ALSA: usb-audio: Update the number of packets properly at
  receiving (stable-fixes).
- ALSA: usb-audio: Add iface reset and delay quirk for AB13X
  USB Audio (stable-fixes).
- ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie
  15X Pro (stable-fixes).
- APEI/GHES: ensure that won't go past CPER allocated record
  (stable-fixes).
- ACPI: processor: Fix NULL-pointer dereference in
  acpi_processor_errata_piix4() (stable-fixes).
- ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
  (stable-fixes).
- ASoC: nau8821: Avoid unnecessary blocking in IRQ handler
  (stable-fixes).
- commit d3af28a</changelog>
  <changelog author="tiwai@suse.de" date="1772712001">- ASoC: nau8821: Consistently clear interrupts before unmasking
  (git-fixes).
- Refresh
  patches.suse/ASoC-nau8821-Add-DMI-quirk-to-bypass-jack-debounce-c.patch.
- commit abf4286</changelog>
  <changelog author="tiwai@suse.de" date="1772712002">- ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
  (stable-fixes).
- drm/amdgpu: Add HAINAN clock adjustment (stable-fixes).
- drm/radeon: Add HAINAN clock adjustment (stable-fixes).
- drm/amdgpu: Adjust usleep_range in fence wait (stable-fixes).
- drm/amdkfd: Fix watch_id bounds checking in debug address
  watch v2 (git-fixes).
- drm/amd/display: Avoid updating surface with the same surface
  under MPO (stable-fixes).
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
  (stable-fixes).
- dma: dma-axi-dmac: fix SW cyclic transfers (git-fixes).
- dmaengine: sun6i: Choose appropriate burst length under maxburst
  (stable-fixes).
- fpga: of-fpga-region: Fail if any bridge is missing
  (stable-fixes).
- fix it87_wdt early reboot by reporting running timer
  (stable-fixes).
- fbdev: ffb: fix corrupted video output on Sun FFB1
  (stable-fixes).
- ata: libata: avoid long timeouts on hot-unplugged SATA DAS
  (stable-fixes).
- Bluetooth: btusb: Add device ID for Realtek RTL8761BU
  (stable-fixes).
- Bluetooth: btusb: Add new VID/PID for RTL8852CE (stable-fixes).
- Bluetooth: hci_conn: Set link_policy on incoming ACL connections
  (stable-fixes).
- Bluetooth: hci_conn: use mod_delayed_work for active mode
  timeout (stable-fixes).
- drm/atmel-hlcdc: don't reject the commit if the src rect has
  fractional parts (stable-fixes).
- drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after
  release (stable-fixes).
- drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state
  callback (stable-fixes).
- drm: Account property blob allocations to memcg (stable-fixes).
- drm/amdkfd: Fix GART PTE for non-4K pagesize in
  svm_migrate_gart_map() (stable-fixes).
- drm/amdgpu: avoid a warning in timedout job handler
  (stable-fixes).
- drm/amdgpu: add support for HDP IP version 6.1.1 (stable-fixes).
- drm/v3d: Set DMA segment size to avoid debug warnings
  (stable-fixes).
- drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros
  (stable-fixes).
- drm/display/dp_mst: Add protection against 0 vcpi
  (stable-fixes).
- ASoC: codecs: max98390: Check return value of
  devm_gpiod_get_optional() in max98390_i2c_probe()
  (stable-fixes).
- ASoC: sunxi: sun50i-dmic: Add missing check for
  devm_regmap_init_mmio (stable-fixes).
- ASoC: wm8962: Don't report a microphone if it's shorted to
  ground on plug (stable-fixes).
- ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
  (stable-fixes).
- ASoC: nau8821: Fixup nau8821_enable_jack_detect() (git-fixes).
- char: tpm: cr50: Remove IRQF_ONESHOT (stable-fixes).
- docs: fix WARNING document not included in any toctree
  (stable-fixes).
- drm/amdkfd: fix debug watchpoints for logical devices
  (stable-fixes).
- commit 0c8127e</changelog>
  <changelog author="tiwai@suse.de" date="1772712003">- media: dvb-net: fix OOB access in ULE extension header tables
  (git-fixes).
- rtc: zynqmp: correct frequency value (stable-fixes).
- ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
  (stable-fixes).
- ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
  (stable-fixes).
- net: usb: catc: enable basic endpoint checking (git-fixes).
- phy: mvebu-cp110-utmi: fix dr_mode property read from dts
  (stable-fixes).
- phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
  (stable-fixes).
- soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded
  of NUC15) (stable-fixes).
- serial: 8250: 8250_omap.c: Clear DMA RX running status only
  after DMA termination is done (stable-fixes).
- serial: 8250_dw: handle clock enable errors in runtime_resume
  (stable-fixes).
- staging: rtl8723bs: fix memory leak on failure path
  (stable-fixes).
- staging: rtl8723bs: fix missing status update on
  sdio_alloc_irq() failure (stable-fixes).
- iio: magnetometer: Remove IRQF_ONESHOT (stable-fixes).
- iio: Use IRQF_NO_THREAD (stable-fixes).
- Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay
  to 5ms" (git-fixes).
- mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
  (git-fixes).
- misc: bcm_vk: Fix possible null-pointer dereferences in
  bcm_vk_read() (stable-fixes).
- misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
  (stable-fixes).
- net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in
  uhdlc_memclean() (git-fixes).
- nfc: nxp-nci: remove interrupt trigger type (stable-fixes).
- myri10ge: avoid uninitialized variable use (stable-fixes).
- net: usb: sr9700: remove code to drive nonexistent multicast
  filter (stable-fixes).
- net: usb: r8152: fix transmit queue timeout (stable-fixes).
- PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port
  (stable-fixes).
- PCI: Enable ACS after configuring IOMMU for OF platforms
  (stable-fixes).
- PCI: Add ACS quirk for Qualcomm Hamoa &amp; Glymur (stable-fixes).
- PCI: Fix pci_slot_lock () device locking (stable-fixes).
- PCI: Mark Nvidia GB10 to avoid bus reset (stable-fixes).
- PCI: Mark ASM1164 SATA controller to avoid bus reset
  (stable-fixes).
- media: rkisp1: Fix filter mode register configuration
  (stable-fixes).
- media: cx25821: Fix a resource leak in cx25821_dev_setup()
  (stable-fixes).
- media: pvrusb2: fix URB leak in pvr2_send_request_ex
  (stable-fixes).
- media: solo6x10: Check for out of bounds chip_id (stable-fixes).
- media: adv7180: fix frame interval in progressive mode
  (stable-fixes).
- media: amphion: Clear last_buffer_dequeued flag for
  DEC_CMD_START (stable-fixes).
- media: omap3isp: isppreview: always clamp in
  preview_try_format() (stable-fixes).
- media: omap3isp: set initial format (stable-fixes).
- media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
  (stable-fixes).
- media: dvb-core: dmxdevfilter must always flush bufs
  (stable-fixes).
- HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
  (stable-fixes).
- HID: multitouch: add eGalaxTouch EXC3188 support (stable-fixes).
- HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
  (stable-fixes).
- HID: prodikeys: Check presence of pm-&gt;input_ep82 (stable-fixes).
- HID: magicmouse: Do not crash on missing msc-&gt;input
  (stable-fixes).
- HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple
  keyboards (stable-fixes).
- hwmon: (f71882fg) Add F81968 support (stable-fixes).
- hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE (stable-fixes).
- gpio: aspeed-sgpio: Change the macro to support deferred probe
  (stable-fixes).
- PCI/MSI: Unmap MSI-X region on error (stable-fixes).
- i3c: master: svc: Initialize 'dev' to NULL in
  svc_i3c_master_ibi_isr() (stable-fixes).
- spi: wpcm-fiu: Fix uninitialized res (git-fixes).
- spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname()
  (stable-fixes).
- PCI: Log bridge info when first enumerating bridge
  (stable-fixes).
- PCI: Log bridge windows conditionally (stable-fixes).
- PCI: Supply bridge device, not secondary bus, to read window
  details (stable-fixes).
- PCI: Move pci_read_bridge_windows() below individual window
  accessors (stable-fixes).
- commit 291a680</changelog>
  <changelog author="tiwai@suse.de" date="1772712004">- PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros
  (stable-fixes).
- Refresh
  patches.suse/PCI-ACPI-Restrict-program_hpx_type2-to-AER-bits.patch.
- commit 8b1fafb</changelog>
  <changelog author="tiwai@suse.de" date="1772712005">- PCI: Add defines for bridge window indexing (stable-fixes).
- Refresh
  patches.suse/PCI-ACPI-Restrict-program_hpx_type2-to-AER-bits.patch.
- commit 7f99d8e</changelog>
  <changelog author="tiwai@suse.de" date="1772712006">- spi: wpcm-fiu: Fix potential NULL pointer dereference in
  wpcm_fiu_probe() (git-fixes).
- thermal: int340x: Fix sysfs group leak on DLVR registration
  failure (stable-fixes).
- watchdog: imx7ulp_wdt: handle the nowayout option
  (stable-fixes).
- wifi: ath10k: fix lock protection in
  ath10k_wmi_event_peer_sta_ps_state_chg() (stable-fixes).
- wifi: rtw89: pci: restore LDO setting after device resume
  (stable-fixes).
- wifi: iwlwifi: mvm: check the validity of noa_len
  (stable-fixes).
- wifi: ath12k: fix preferred hardware mode calculation
  (stable-fixes).
- wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1
  (stable-fixes).
- wifi: iwlegacy: add missing mutex protection in
  il4965_store_tx_power() (stable-fixes).
- wifi: iwlegacy: add missing mutex protection in
  il3945_store_measurement() (stable-fixes).
- wifi: rtw89: wow: add reason codes for disassociation in WoWLAN
  mode (stable-fixes).
- wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (stable-fixes).
- wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
  (stable-fixes).
- wifi: rtw88: fix DTIM period handling when conf-&gt;dtim_period
  is zero (stable-fixes).
- wifi: libertas: fix WARNING in usb_tx_block (stable-fixes).
- spi: spi-mem: Protect dirmap_create() with
  spi_mem_access_start/end (stable-fixes).
- spi: spi-mem: Limit octal DTR constraints to octal DTR
  situations (stable-fixes).
- spi: stm32: fix Overrun issue at &lt; 8bpw (stable-fixes).
- spi-geni-qcom: initialize mode related registers to 0
  (stable-fixes).
- spi-geni-qcom: use xfer-&gt;bits_per_word for can_dma()
  (stable-fixes).
- tools/power cpupower: Reset errno before strtoull()
  (stable-fixes).
- spi: wpcm-fiu: Simplify with dev_err_probe() (stable-fixes).
- commit 9ae9cd6</changelog>
  <changelog author="tiwai@suse.de" date="1772712007">- ASoC: nau8821: Cancel pending work before suspend (git-fixes).
- ASoC: nau8821: Cancel delayed work on component remove
  (git-fixes).
- commit b862c94</changelog>
</package>
<package pkgid="205eb2c7c5d52486d39a6d28d3508e9d1f038373484217afccb5cd4557bcdcf4ffd7d7707dbba32792e99900d499f7d1e246458c2d3b94e5d3d463fea9b27ac5" name="kernel-default-debugsource" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="40.1"/>
  <changelog author="vkarasulli@suse.de" date="1772539200">- iommu/mediatek: fix use-after-free on probe deferral
  (CVE-2025-71071 bsc#1256802).
- commit 0b777d9</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1772539201">- cifs: add xid to query server interface call (git-fixes).
- Refresh
  patches.suse/cifs-handle-when-server-starts-supporting-multichannel.patch.
- Refresh
  patches.suse/cifs-make-sure-server-interfaces-are-requested-only-for-SMB3-.patch
  (bsc#1258928,bsc#1259070).
- Refresh
  patches.suse/cifs-do-not-disable-interface-polling-on-failure.patch.
- Refresh
  patches.suse/cifs-add-xid-to-query-server-interface-call.patch.
- commit e67e831</changelog>
  <changelog author="tiwai@suse.de" date="1772712000">- ALSA: usb-audio: Add sanity check for OOB writes at silencing
  (stable-fixes).
- ALSA: usb-audio: Update the number of packets properly at
  receiving (stable-fixes).
- ALSA: usb-audio: Add iface reset and delay quirk for AB13X
  USB Audio (stable-fixes).
- ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie
  15X Pro (stable-fixes).
- APEI/GHES: ensure that won't go past CPER allocated record
  (stable-fixes).
- ACPI: processor: Fix NULL-pointer dereference in
  acpi_processor_errata_piix4() (stable-fixes).
- ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
  (stable-fixes).
- ASoC: nau8821: Avoid unnecessary blocking in IRQ handler
  (stable-fixes).
- commit d3af28a</changelog>
  <changelog author="tiwai@suse.de" date="1772712001">- ASoC: nau8821: Consistently clear interrupts before unmasking
  (git-fixes).
- Refresh
  patches.suse/ASoC-nau8821-Add-DMI-quirk-to-bypass-jack-debounce-c.patch.
- commit abf4286</changelog>
  <changelog author="tiwai@suse.de" date="1772712002">- ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
  (stable-fixes).
- drm/amdgpu: Add HAINAN clock adjustment (stable-fixes).
- drm/radeon: Add HAINAN clock adjustment (stable-fixes).
- drm/amdgpu: Adjust usleep_range in fence wait (stable-fixes).
- drm/amdkfd: Fix watch_id bounds checking in debug address
  watch v2 (git-fixes).
- drm/amd/display: Avoid updating surface with the same surface
  under MPO (stable-fixes).
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
  (stable-fixes).
- dma: dma-axi-dmac: fix SW cyclic transfers (git-fixes).
- dmaengine: sun6i: Choose appropriate burst length under maxburst
  (stable-fixes).
- fpga: of-fpga-region: Fail if any bridge is missing
  (stable-fixes).
- fix it87_wdt early reboot by reporting running timer
  (stable-fixes).
- fbdev: ffb: fix corrupted video output on Sun FFB1
  (stable-fixes).
- ata: libata: avoid long timeouts on hot-unplugged SATA DAS
  (stable-fixes).
- Bluetooth: btusb: Add device ID for Realtek RTL8761BU
  (stable-fixes).
- Bluetooth: btusb: Add new VID/PID for RTL8852CE (stable-fixes).
- Bluetooth: hci_conn: Set link_policy on incoming ACL connections
  (stable-fixes).
- Bluetooth: hci_conn: use mod_delayed_work for active mode
  timeout (stable-fixes).
- drm/atmel-hlcdc: don't reject the commit if the src rect has
  fractional parts (stable-fixes).
- drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after
  release (stable-fixes).
- drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state
  callback (stable-fixes).
- drm: Account property blob allocations to memcg (stable-fixes).
- drm/amdkfd: Fix GART PTE for non-4K pagesize in
  svm_migrate_gart_map() (stable-fixes).
- drm/amdgpu: avoid a warning in timedout job handler
  (stable-fixes).
- drm/amdgpu: add support for HDP IP version 6.1.1 (stable-fixes).
- drm/v3d: Set DMA segment size to avoid debug warnings
  (stable-fixes).
- drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros
  (stable-fixes).
- drm/display/dp_mst: Add protection against 0 vcpi
  (stable-fixes).
- ASoC: codecs: max98390: Check return value of
  devm_gpiod_get_optional() in max98390_i2c_probe()
  (stable-fixes).
- ASoC: sunxi: sun50i-dmic: Add missing check for
  devm_regmap_init_mmio (stable-fixes).
- ASoC: wm8962: Don't report a microphone if it's shorted to
  ground on plug (stable-fixes).
- ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
  (stable-fixes).
- ASoC: nau8821: Fixup nau8821_enable_jack_detect() (git-fixes).
- char: tpm: cr50: Remove IRQF_ONESHOT (stable-fixes).
- docs: fix WARNING document not included in any toctree
  (stable-fixes).
- drm/amdkfd: fix debug watchpoints for logical devices
  (stable-fixes).
- commit 0c8127e</changelog>
  <changelog author="tiwai@suse.de" date="1772712003">- media: dvb-net: fix OOB access in ULE extension header tables
  (git-fixes).
- rtc: zynqmp: correct frequency value (stable-fixes).
- ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
  (stable-fixes).
- ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
  (stable-fixes).
- net: usb: catc: enable basic endpoint checking (git-fixes).
- phy: mvebu-cp110-utmi: fix dr_mode property read from dts
  (stable-fixes).
- phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
  (stable-fixes).
- soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded
  of NUC15) (stable-fixes).
- serial: 8250: 8250_omap.c: Clear DMA RX running status only
  after DMA termination is done (stable-fixes).
- serial: 8250_dw: handle clock enable errors in runtime_resume
  (stable-fixes).
- staging: rtl8723bs: fix memory leak on failure path
  (stable-fixes).
- staging: rtl8723bs: fix missing status update on
  sdio_alloc_irq() failure (stable-fixes).
- iio: magnetometer: Remove IRQF_ONESHOT (stable-fixes).
- iio: Use IRQF_NO_THREAD (stable-fixes).
- Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay
  to 5ms" (git-fixes).
- mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
  (git-fixes).
- misc: bcm_vk: Fix possible null-pointer dereferences in
  bcm_vk_read() (stable-fixes).
- misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
  (stable-fixes).
- net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in
  uhdlc_memclean() (git-fixes).
- nfc: nxp-nci: remove interrupt trigger type (stable-fixes).
- myri10ge: avoid uninitialized variable use (stable-fixes).
- net: usb: sr9700: remove code to drive nonexistent multicast
  filter (stable-fixes).
- net: usb: r8152: fix transmit queue timeout (stable-fixes).
- PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port
  (stable-fixes).
- PCI: Enable ACS after configuring IOMMU for OF platforms
  (stable-fixes).
- PCI: Add ACS quirk for Qualcomm Hamoa &amp; Glymur (stable-fixes).
- PCI: Fix pci_slot_lock () device locking (stable-fixes).
- PCI: Mark Nvidia GB10 to avoid bus reset (stable-fixes).
- PCI: Mark ASM1164 SATA controller to avoid bus reset
  (stable-fixes).
- media: rkisp1: Fix filter mode register configuration
  (stable-fixes).
- media: cx25821: Fix a resource leak in cx25821_dev_setup()
  (stable-fixes).
- media: pvrusb2: fix URB leak in pvr2_send_request_ex
  (stable-fixes).
- media: solo6x10: Check for out of bounds chip_id (stable-fixes).
- media: adv7180: fix frame interval in progressive mode
  (stable-fixes).
- media: amphion: Clear last_buffer_dequeued flag for
  DEC_CMD_START (stable-fixes).
- media: omap3isp: isppreview: always clamp in
  preview_try_format() (stable-fixes).
- media: omap3isp: set initial format (stable-fixes).
- media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
  (stable-fixes).
- media: dvb-core: dmxdevfilter must always flush bufs
  (stable-fixes).
- HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
  (stable-fixes).
- HID: multitouch: add eGalaxTouch EXC3188 support (stable-fixes).
- HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
  (stable-fixes).
- HID: prodikeys: Check presence of pm-&gt;input_ep82 (stable-fixes).
- HID: magicmouse: Do not crash on missing msc-&gt;input
  (stable-fixes).
- HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple
  keyboards (stable-fixes).
- hwmon: (f71882fg) Add F81968 support (stable-fixes).
- hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE (stable-fixes).
- gpio: aspeed-sgpio: Change the macro to support deferred probe
  (stable-fixes).
- PCI/MSI: Unmap MSI-X region on error (stable-fixes).
- i3c: master: svc: Initialize 'dev' to NULL in
  svc_i3c_master_ibi_isr() (stable-fixes).
- spi: wpcm-fiu: Fix uninitialized res (git-fixes).
- spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname()
  (stable-fixes).
- PCI: Log bridge info when first enumerating bridge
  (stable-fixes).
- PCI: Log bridge windows conditionally (stable-fixes).
- PCI: Supply bridge device, not secondary bus, to read window
  details (stable-fixes).
- PCI: Move pci_read_bridge_windows() below individual window
  accessors (stable-fixes).
- commit 291a680</changelog>
  <changelog author="tiwai@suse.de" date="1772712004">- PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros
  (stable-fixes).
- Refresh
  patches.suse/PCI-ACPI-Restrict-program_hpx_type2-to-AER-bits.patch.
- commit 8b1fafb</changelog>
  <changelog author="tiwai@suse.de" date="1772712005">- PCI: Add defines for bridge window indexing (stable-fixes).
- Refresh
  patches.suse/PCI-ACPI-Restrict-program_hpx_type2-to-AER-bits.patch.
- commit 7f99d8e</changelog>
  <changelog author="tiwai@suse.de" date="1772712006">- spi: wpcm-fiu: Fix potential NULL pointer dereference in
  wpcm_fiu_probe() (git-fixes).
- thermal: int340x: Fix sysfs group leak on DLVR registration
  failure (stable-fixes).
- watchdog: imx7ulp_wdt: handle the nowayout option
  (stable-fixes).
- wifi: ath10k: fix lock protection in
  ath10k_wmi_event_peer_sta_ps_state_chg() (stable-fixes).
- wifi: rtw89: pci: restore LDO setting after device resume
  (stable-fixes).
- wifi: iwlwifi: mvm: check the validity of noa_len
  (stable-fixes).
- wifi: ath12k: fix preferred hardware mode calculation
  (stable-fixes).
- wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1
  (stable-fixes).
- wifi: iwlegacy: add missing mutex protection in
  il4965_store_tx_power() (stable-fixes).
- wifi: iwlegacy: add missing mutex protection in
  il3945_store_measurement() (stable-fixes).
- wifi: rtw89: wow: add reason codes for disassociation in WoWLAN
  mode (stable-fixes).
- wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (stable-fixes).
- wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
  (stable-fixes).
- wifi: rtw88: fix DTIM period handling when conf-&gt;dtim_period
  is zero (stable-fixes).
- wifi: libertas: fix WARNING in usb_tx_block (stable-fixes).
- spi: spi-mem: Protect dirmap_create() with
  spi_mem_access_start/end (stable-fixes).
- spi: spi-mem: Limit octal DTR constraints to octal DTR
  situations (stable-fixes).
- spi: stm32: fix Overrun issue at &lt; 8bpw (stable-fixes).
- spi-geni-qcom: initialize mode related registers to 0
  (stable-fixes).
- spi-geni-qcom: use xfer-&gt;bits_per_word for can_dma()
  (stable-fixes).
- tools/power cpupower: Reset errno before strtoull()
  (stable-fixes).
- spi: wpcm-fiu: Simplify with dev_err_probe() (stable-fixes).
- commit 9ae9cd6</changelog>
  <changelog author="tiwai@suse.de" date="1772712007">- ASoC: nau8821: Cancel pending work before suspend (git-fixes).
- ASoC: nau8821: Cancel delayed work on component remove
  (git-fixes).
- commit b862c94</changelog>
</package>
<package pkgid="c99cc2d7a1d6d74e47d1ece7773f9255b780cc4f3aff82c88b8d6173b98a9bff18e95bf2f52909bf48da34738efcdf3dcaa3836130cbf691924737234cf5dd6f" name="kernel-default-extra-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="40.1"/>
  <changelog author="vkarasulli@suse.de" date="1772539200">- iommu/mediatek: fix use-after-free on probe deferral
  (CVE-2025-71071 bsc#1256802).
- commit 0b777d9</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1772539201">- cifs: add xid to query server interface call (git-fixes).
- Refresh
  patches.suse/cifs-handle-when-server-starts-supporting-multichannel.patch.
- Refresh
  patches.suse/cifs-make-sure-server-interfaces-are-requested-only-for-SMB3-.patch
  (bsc#1258928,bsc#1259070).
- Refresh
  patches.suse/cifs-do-not-disable-interface-polling-on-failure.patch.
- Refresh
  patches.suse/cifs-add-xid-to-query-server-interface-call.patch.
- commit e67e831</changelog>
  <changelog author="tiwai@suse.de" date="1772712000">- ALSA: usb-audio: Add sanity check for OOB writes at silencing
  (stable-fixes).
- ALSA: usb-audio: Update the number of packets properly at
  receiving (stable-fixes).
- ALSA: usb-audio: Add iface reset and delay quirk for AB13X
  USB Audio (stable-fixes).
- ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie
  15X Pro (stable-fixes).
- APEI/GHES: ensure that won't go past CPER allocated record
  (stable-fixes).
- ACPI: processor: Fix NULL-pointer dereference in
  acpi_processor_errata_piix4() (stable-fixes).
- ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
  (stable-fixes).
- ASoC: nau8821: Avoid unnecessary blocking in IRQ handler
  (stable-fixes).
- commit d3af28a</changelog>
  <changelog author="tiwai@suse.de" date="1772712001">- ASoC: nau8821: Consistently clear interrupts before unmasking
  (git-fixes).
- Refresh
  patches.suse/ASoC-nau8821-Add-DMI-quirk-to-bypass-jack-debounce-c.patch.
- commit abf4286</changelog>
  <changelog author="tiwai@suse.de" date="1772712002">- ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
  (stable-fixes).
- drm/amdgpu: Add HAINAN clock adjustment (stable-fixes).
- drm/radeon: Add HAINAN clock adjustment (stable-fixes).
- drm/amdgpu: Adjust usleep_range in fence wait (stable-fixes).
- drm/amdkfd: Fix watch_id bounds checking in debug address
  watch v2 (git-fixes).
- drm/amd/display: Avoid updating surface with the same surface
  under MPO (stable-fixes).
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
  (stable-fixes).
- dma: dma-axi-dmac: fix SW cyclic transfers (git-fixes).
- dmaengine: sun6i: Choose appropriate burst length under maxburst
  (stable-fixes).
- fpga: of-fpga-region: Fail if any bridge is missing
  (stable-fixes).
- fix it87_wdt early reboot by reporting running timer
  (stable-fixes).
- fbdev: ffb: fix corrupted video output on Sun FFB1
  (stable-fixes).
- ata: libata: avoid long timeouts on hot-unplugged SATA DAS
  (stable-fixes).
- Bluetooth: btusb: Add device ID for Realtek RTL8761BU
  (stable-fixes).
- Bluetooth: btusb: Add new VID/PID for RTL8852CE (stable-fixes).
- Bluetooth: hci_conn: Set link_policy on incoming ACL connections
  (stable-fixes).
- Bluetooth: hci_conn: use mod_delayed_work for active mode
  timeout (stable-fixes).
- drm/atmel-hlcdc: don't reject the commit if the src rect has
  fractional parts (stable-fixes).
- drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after
  release (stable-fixes).
- drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state
  callback (stable-fixes).
- drm: Account property blob allocations to memcg (stable-fixes).
- drm/amdkfd: Fix GART PTE for non-4K pagesize in
  svm_migrate_gart_map() (stable-fixes).
- drm/amdgpu: avoid a warning in timedout job handler
  (stable-fixes).
- drm/amdgpu: add support for HDP IP version 6.1.1 (stable-fixes).
- drm/v3d: Set DMA segment size to avoid debug warnings
  (stable-fixes).
- drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros
  (stable-fixes).
- drm/display/dp_mst: Add protection against 0 vcpi
  (stable-fixes).
- ASoC: codecs: max98390: Check return value of
  devm_gpiod_get_optional() in max98390_i2c_probe()
  (stable-fixes).
- ASoC: sunxi: sun50i-dmic: Add missing check for
  devm_regmap_init_mmio (stable-fixes).
- ASoC: wm8962: Don't report a microphone if it's shorted to
  ground on plug (stable-fixes).
- ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
  (stable-fixes).
- ASoC: nau8821: Fixup nau8821_enable_jack_detect() (git-fixes).
- char: tpm: cr50: Remove IRQF_ONESHOT (stable-fixes).
- docs: fix WARNING document not included in any toctree
  (stable-fixes).
- drm/amdkfd: fix debug watchpoints for logical devices
  (stable-fixes).
- commit 0c8127e</changelog>
  <changelog author="tiwai@suse.de" date="1772712003">- media: dvb-net: fix OOB access in ULE extension header tables
  (git-fixes).
- rtc: zynqmp: correct frequency value (stable-fixes).
- ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
  (stable-fixes).
- ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
  (stable-fixes).
- net: usb: catc: enable basic endpoint checking (git-fixes).
- phy: mvebu-cp110-utmi: fix dr_mode property read from dts
  (stable-fixes).
- phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
  (stable-fixes).
- soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded
  of NUC15) (stable-fixes).
- serial: 8250: 8250_omap.c: Clear DMA RX running status only
  after DMA termination is done (stable-fixes).
- serial: 8250_dw: handle clock enable errors in runtime_resume
  (stable-fixes).
- staging: rtl8723bs: fix memory leak on failure path
  (stable-fixes).
- staging: rtl8723bs: fix missing status update on
  sdio_alloc_irq() failure (stable-fixes).
- iio: magnetometer: Remove IRQF_ONESHOT (stable-fixes).
- iio: Use IRQF_NO_THREAD (stable-fixes).
- Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay
  to 5ms" (git-fixes).
- mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
  (git-fixes).
- misc: bcm_vk: Fix possible null-pointer dereferences in
  bcm_vk_read() (stable-fixes).
- misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
  (stable-fixes).
- net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in
  uhdlc_memclean() (git-fixes).
- nfc: nxp-nci: remove interrupt trigger type (stable-fixes).
- myri10ge: avoid uninitialized variable use (stable-fixes).
- net: usb: sr9700: remove code to drive nonexistent multicast
  filter (stable-fixes).
- net: usb: r8152: fix transmit queue timeout (stable-fixes).
- PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port
  (stable-fixes).
- PCI: Enable ACS after configuring IOMMU for OF platforms
  (stable-fixes).
- PCI: Add ACS quirk for Qualcomm Hamoa &amp; Glymur (stable-fixes).
- PCI: Fix pci_slot_lock () device locking (stable-fixes).
- PCI: Mark Nvidia GB10 to avoid bus reset (stable-fixes).
- PCI: Mark ASM1164 SATA controller to avoid bus reset
  (stable-fixes).
- media: rkisp1: Fix filter mode register configuration
  (stable-fixes).
- media: cx25821: Fix a resource leak in cx25821_dev_setup()
  (stable-fixes).
- media: pvrusb2: fix URB leak in pvr2_send_request_ex
  (stable-fixes).
- media: solo6x10: Check for out of bounds chip_id (stable-fixes).
- media: adv7180: fix frame interval in progressive mode
  (stable-fixes).
- media: amphion: Clear last_buffer_dequeued flag for
  DEC_CMD_START (stable-fixes).
- media: omap3isp: isppreview: always clamp in
  preview_try_format() (stable-fixes).
- media: omap3isp: set initial format (stable-fixes).
- media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
  (stable-fixes).
- media: dvb-core: dmxdevfilter must always flush bufs
  (stable-fixes).
- HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
  (stable-fixes).
- HID: multitouch: add eGalaxTouch EXC3188 support (stable-fixes).
- HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
  (stable-fixes).
- HID: prodikeys: Check presence of pm-&gt;input_ep82 (stable-fixes).
- HID: magicmouse: Do not crash on missing msc-&gt;input
  (stable-fixes).
- HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple
  keyboards (stable-fixes).
- hwmon: (f71882fg) Add F81968 support (stable-fixes).
- hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE (stable-fixes).
- gpio: aspeed-sgpio: Change the macro to support deferred probe
  (stable-fixes).
- PCI/MSI: Unmap MSI-X region on error (stable-fixes).
- i3c: master: svc: Initialize 'dev' to NULL in
  svc_i3c_master_ibi_isr() (stable-fixes).
- spi: wpcm-fiu: Fix uninitialized res (git-fixes).
- spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname()
  (stable-fixes).
- PCI: Log bridge info when first enumerating bridge
  (stable-fixes).
- PCI: Log bridge windows conditionally (stable-fixes).
- PCI: Supply bridge device, not secondary bus, to read window
  details (stable-fixes).
- PCI: Move pci_read_bridge_windows() below individual window
  accessors (stable-fixes).
- commit 291a680</changelog>
  <changelog author="tiwai@suse.de" date="1772712004">- PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros
  (stable-fixes).
- Refresh
  patches.suse/PCI-ACPI-Restrict-program_hpx_type2-to-AER-bits.patch.
- commit 8b1fafb</changelog>
  <changelog author="tiwai@suse.de" date="1772712005">- PCI: Add defines for bridge window indexing (stable-fixes).
- Refresh
  patches.suse/PCI-ACPI-Restrict-program_hpx_type2-to-AER-bits.patch.
- commit 7f99d8e</changelog>
  <changelog author="tiwai@suse.de" date="1772712006">- spi: wpcm-fiu: Fix potential NULL pointer dereference in
  wpcm_fiu_probe() (git-fixes).
- thermal: int340x: Fix sysfs group leak on DLVR registration
  failure (stable-fixes).
- watchdog: imx7ulp_wdt: handle the nowayout option
  (stable-fixes).
- wifi: ath10k: fix lock protection in
  ath10k_wmi_event_peer_sta_ps_state_chg() (stable-fixes).
- wifi: rtw89: pci: restore LDO setting after device resume
  (stable-fixes).
- wifi: iwlwifi: mvm: check the validity of noa_len
  (stable-fixes).
- wifi: ath12k: fix preferred hardware mode calculation
  (stable-fixes).
- wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1
  (stable-fixes).
- wifi: iwlegacy: add missing mutex protection in
  il4965_store_tx_power() (stable-fixes).
- wifi: iwlegacy: add missing mutex protection in
  il3945_store_measurement() (stable-fixes).
- wifi: rtw89: wow: add reason codes for disassociation in WoWLAN
  mode (stable-fixes).
- wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (stable-fixes).
- wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
  (stable-fixes).
- wifi: rtw88: fix DTIM period handling when conf-&gt;dtim_period
  is zero (stable-fixes).
- wifi: libertas: fix WARNING in usb_tx_block (stable-fixes).
- spi: spi-mem: Protect dirmap_create() with
  spi_mem_access_start/end (stable-fixes).
- spi: spi-mem: Limit octal DTR constraints to octal DTR
  situations (stable-fixes).
- spi: stm32: fix Overrun issue at &lt; 8bpw (stable-fixes).
- spi-geni-qcom: initialize mode related registers to 0
  (stable-fixes).
- spi-geni-qcom: use xfer-&gt;bits_per_word for can_dma()
  (stable-fixes).
- tools/power cpupower: Reset errno before strtoull()
  (stable-fixes).
- spi: wpcm-fiu: Simplify with dev_err_probe() (stable-fixes).
- commit 9ae9cd6</changelog>
  <changelog author="tiwai@suse.de" date="1772712007">- ASoC: nau8821: Cancel pending work before suspend (git-fixes).
- ASoC: nau8821: Cancel delayed work on component remove
  (git-fixes).
- commit b862c94</changelog>
</package>
<package pkgid="0e09b28a6cca4b32d46183370ad26df6f4817f78e2a27a89b843c5b1bf251a51e6ac5cd0a600eeb3fbf2c86f310080b98634f68b6db276132f9ef7ce92567251" name="kexec-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.27" rel="slfo.1.1_1.2"/>
  <changelog author="dmueller@suse.com" date="1664884800">- add kexec-tools-riscv64.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="petr@tesarici.cz" date="1675339200">- update to 2.0.26:
  * m68k: pass rng seed via BI_RNG_SEED
  * workflow: update to checkout@v3
  * LoongArch: Remove redundant cmdline parameters when using --reuse-cmdline option
  * LoongArch: Add purgatory framework code
  * LoongArch: PE format image loading support
  * LoongArch: Add kexec/kdump support
  * config: Add LoongArch architecture support in config.guess and config.sub files
  * ppc64: remove rma_top limit
- refresh kexec-tools-riscv64.patch.</changelog>
  <changelog author="msuchanek@suse.com" date="1677153600">- kexec-bootloader: Add -a argument to load using kexec_load_file() when available (boo#1202820).</changelog>
  <changelog author="olaf@aepfle.de" date="1680609600">- Update kexec-tools-SYS_getrandom.patch to fix build errors on
  old x86_64 distributions</changelog>
  <changelog author="msuchanek@suse.com" date="1687953600">- Pull kexec-bootloader from perl-Bootloader, bump version so that
  perl-Bootloader can obsolete kexec-tools containing kexec-bootloader
  (bsc#1211082).</changelog>
  <changelog author="olaf@aepfle.de" date="1691496000">- Disable Xen support in ALP</changelog>
  <changelog author="petr@tesarici.cz" date="1694001600">- update to 2.0.27:
  * ppc64: add --reuse-cmdline parameter support
  * kexec: make -a the default
  * x86: add devicetree support
  * ppc64: document elf-ppc64 options and --dt-no-old-root
  * LoongArch: kdump: set up kernel image segment
  * arm64: zboot support</changelog>
  <changelog author="olaf@aepfle.de" date="1698148800">- Fix build with old glibc with 6419b008fde783fd0cc2cc266bd1c9cf35e99a0e.patch</changelog>
  <changelog author="jbohac@suse.com" date="1706184000">- add kexec-dont-use-kexec_file_load-on-xen.patch:
  kexec: don't use kexec_file_load on xen (bsc#1218590)</changelog>
</package>
<package pkgid="78a368e9f1634b6670c119d0b8d394be604ec603f9f1394e07a3da26d84c7cc7305725431ce2b5bcddd8ffcfb5b6480c0f2a91124c75e78b8313dc84a24a45a0" name="kexec-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.27" rel="slfo.1.1_1.2"/>
  <changelog author="dmueller@suse.com" date="1664884800">- add kexec-tools-riscv64.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="petr@tesarici.cz" date="1675339200">- update to 2.0.26:
  * m68k: pass rng seed via BI_RNG_SEED
  * workflow: update to checkout@v3
  * LoongArch: Remove redundant cmdline parameters when using --reuse-cmdline option
  * LoongArch: Add purgatory framework code
  * LoongArch: PE format image loading support
  * LoongArch: Add kexec/kdump support
  * config: Add LoongArch architecture support in config.guess and config.sub files
  * ppc64: remove rma_top limit
- refresh kexec-tools-riscv64.patch.</changelog>
  <changelog author="msuchanek@suse.com" date="1677153600">- kexec-bootloader: Add -a argument to load using kexec_load_file() when available (boo#1202820).</changelog>
  <changelog author="olaf@aepfle.de" date="1680609600">- Update kexec-tools-SYS_getrandom.patch to fix build errors on
  old x86_64 distributions</changelog>
  <changelog author="msuchanek@suse.com" date="1687953600">- Pull kexec-bootloader from perl-Bootloader, bump version so that
  perl-Bootloader can obsolete kexec-tools containing kexec-bootloader
  (bsc#1211082).</changelog>
  <changelog author="olaf@aepfle.de" date="1691496000">- Disable Xen support in ALP</changelog>
  <changelog author="petr@tesarici.cz" date="1694001600">- update to 2.0.27:
  * ppc64: add --reuse-cmdline parameter support
  * kexec: make -a the default
  * x86: add devicetree support
  * ppc64: document elf-ppc64 options and --dt-no-old-root
  * LoongArch: kdump: set up kernel image segment
  * arm64: zboot support</changelog>
  <changelog author="olaf@aepfle.de" date="1698148800">- Fix build with old glibc with 6419b008fde783fd0cc2cc266bd1c9cf35e99a0e.patch</changelog>
  <changelog author="jbohac@suse.com" date="1706184000">- add kexec-dont-use-kexec_file_load-on-xen.patch:
  kexec: don't use kexec_file_load on xen (bsc#1218590)</changelog>
</package>
<package pkgid="61c0a258575393018c96e8b39361e6d621c4b051371aedd05e948d7957f314d00202b3c7697aabb985e60f1f016cb54b61b68121d73a35654b4c00386575f44c" name="keyutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.3" rel="slfo.1.1_1.3"/>
  <changelog author="astieger@suse.com" date="1540814400">- add upstream signing key and verify source signature</changelog>
  <changelog author="dimstar@opensuse.org" date="1551700800">- Replace krb5-devel BuildRequires with pkgconfig(krb5): Allow OBS
  to shortcut the ring0 bootstrap cycle by also using krb5-mini.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1561982400">- updated to 1.6
  - Apply various specfile cleanups from Fedora.
  - request-key: Provide a command line option to suppress helper execution.
  - request-key: Find least-wildcard match rather than first match.
  - Remove the dependency on MIT Kerberos.
  - Fix some error messages
  - keyctl_dh_compute.3: Suggest /proc/crypto for list of available hashes.
  - Fix doc and comment typos.
  - Add public key ops for encrypt, decrypt, sign and verify (needs linux-4.20).
  - Add pkg-config support for finding libkeyutils.
- upstream isn't offering PGP signatures for the source tarballs anymore</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 1.6.3:
  * Revert the change notifications that were using /dev/watch_queue.
  * Apply the change notifications that use pipe2(O_NOTIFICATION_PIPE).
  * Allow "keyctl supports" to retrieve raw capability data.
  * Allow "keyctl id" to turn a symbolic key ID into a numeric ID.
  * Allow "keyctl new_session" to name the keyring.
  * Allow "keyctl add/padd/etc." to take hex-encoded data.
  * Add "keyctl watch*" to expose kernel change notifications on keys.
  * Add caps for namespacing and notifications.
  * Set a default TTL on keys that upcall for name resolution.
  * Explicitly clear memory after it's held sensitive information.
  * Various manual page fixes.
  * Fix C++-related errors.
  * Add support for keyctl_move().
  * Add support for keyctl_capabilities().
  * Make key=val list optional for various public-key ops.
  * Fix system call signature for KEYCTL_PKEY_QUERY.
  * Fix 'keyctl pkey_query' argument passing.
  * Use keyctl_read_alloc() in dump_key_tree_aux().
  * Various manual page fixes.
- spec-cleaner run (fixup failing homepage url)</changelog>
  <changelog author="meissner@suse.com" date="1609934400">- adjust the library license to be LPGL-2.1+ only (the tools are GPL2+,
  the library is just LGPL-2.1+) (bsc#1180603)</changelog>
  <changelog author="aplanas@suse.com" date="1624536000">- Add /etc/keys/ and /usr/etc/keys/ directory (bsc#1187654)</changelog>
  <changelog author="aplanas@suse.com" date="1655812800">- Add /etc/keys/evn and /usr/etc/keys/evm together with the IMA ones</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1679572800">- Drop pkgconfig(krb5) BuildRequires: this dependency was dropped
  upstream in commit f9c7b4e4 (2018-11-02).</changelog>
</package>
<package pkgid="bd3958c5a159bd3618d3ba26e60d00f23396fbe27bd6dfc9ee9ab4fca5c31a380a5c41c7c9b7aaea5e43a79fffe3bcb3580a3e9aef9df0d6779ea6bd1d18b7d5" name="keyutils-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.3" rel="slfo.1.1_1.3"/>
  <changelog author="astieger@suse.com" date="1540814400">- add upstream signing key and verify source signature</changelog>
  <changelog author="dimstar@opensuse.org" date="1551700800">- Replace krb5-devel BuildRequires with pkgconfig(krb5): Allow OBS
  to shortcut the ring0 bootstrap cycle by also using krb5-mini.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1561982400">- updated to 1.6
  - Apply various specfile cleanups from Fedora.
  - request-key: Provide a command line option to suppress helper execution.
  - request-key: Find least-wildcard match rather than first match.
  - Remove the dependency on MIT Kerberos.
  - Fix some error messages
  - keyctl_dh_compute.3: Suggest /proc/crypto for list of available hashes.
  - Fix doc and comment typos.
  - Add public key ops for encrypt, decrypt, sign and verify (needs linux-4.20).
  - Add pkg-config support for finding libkeyutils.
- upstream isn't offering PGP signatures for the source tarballs anymore</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 1.6.3:
  * Revert the change notifications that were using /dev/watch_queue.
  * Apply the change notifications that use pipe2(O_NOTIFICATION_PIPE).
  * Allow "keyctl supports" to retrieve raw capability data.
  * Allow "keyctl id" to turn a symbolic key ID into a numeric ID.
  * Allow "keyctl new_session" to name the keyring.
  * Allow "keyctl add/padd/etc." to take hex-encoded data.
  * Add "keyctl watch*" to expose kernel change notifications on keys.
  * Add caps for namespacing and notifications.
  * Set a default TTL on keys that upcall for name resolution.
  * Explicitly clear memory after it's held sensitive information.
  * Various manual page fixes.
  * Fix C++-related errors.
  * Add support for keyctl_move().
  * Add support for keyctl_capabilities().
  * Make key=val list optional for various public-key ops.
  * Fix system call signature for KEYCTL_PKEY_QUERY.
  * Fix 'keyctl pkey_query' argument passing.
  * Use keyctl_read_alloc() in dump_key_tree_aux().
  * Various manual page fixes.
- spec-cleaner run (fixup failing homepage url)</changelog>
  <changelog author="meissner@suse.com" date="1609934400">- adjust the library license to be LPGL-2.1+ only (the tools are GPL2+,
  the library is just LGPL-2.1+) (bsc#1180603)</changelog>
  <changelog author="aplanas@suse.com" date="1624536000">- Add /etc/keys/ and /usr/etc/keys/ directory (bsc#1187654)</changelog>
  <changelog author="aplanas@suse.com" date="1655812800">- Add /etc/keys/evn and /usr/etc/keys/evm together with the IMA ones</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1679572800">- Drop pkgconfig(krb5) BuildRequires: this dependency was dropped
  upstream in commit f9c7b4e4 (2018-11-02).</changelog>
</package>
<package pkgid="f8e0893c954abe62d32ba61a3fc0196d5519f24d593888947b5eeee357646a515d8abd5b4950976a8aab86e9bc297d3f69c4fc41c7be8aa41ea56bf92a07631d" name="kmod-debuginfo" arch="aarch64">
  <version epoch="0" ver="32" rel="slfo.1.1_2.1"/>
  <changelog author="msuchanek@suse.de" date="1685102400">- On usrmerged system move kernel modules into /usr as well (boo#1211796)
  * usr-lib-modules.patch
  * testsuite-Move-setup-rootfs-logic-from-Makefile-to-s.patch
- Refresh usr-lib-modprobe.patch
- Refresh no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1688126400">- Fix up usrmerge patches to make the feature configurable (boo#1212835)
  * testsuite-Handle-different-sysconfdir.patch
  * testsuite-depmod-use-defines-for-the-rootfs-lib_modu.patch
  * depmod-Introduce-outdir-option.patch
  * man-depmod.d-Fix-incorrect-usr-lib-search-path.patch
  * kmod-Add-config-command-to-show-compile-time-configu.patch
- Refresh usr-lib-modprobe.patch
- Refresh usr-lib-modules.patch
- Refresh no-stylesheet-download.patch</changelog>
  <changelog author="jengelh@inai.de" date="1689508800">- Edit usr-lib-modules.patch to /lib/modules provide fallback
  behavior for successfully running `make modules_install` in
  pristine tarballs.</changelog>
  <changelog author="msuchanek@suse.de" date="1689595200">- Use pkgconfig for kmod configuration.
  * Delete kmod-Add-config-command-to-show-compile-time-configu.patch
  * Add kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch,
    Provide-fallback-for-successfully-running-make-modules_install.patch
    compat-module_directory-module_prefix.patch.
- Refresh usr-lib-modprobe.patch, usr-lib-modules.patch.
- Add configure-Detect-openssl-sm3-support.patch to
  fix build with older openssl without SM3 support.</changelog>
  <changelog author="msuchanek@suse.de" date="1690200000">- Remove compatibility patches, add README.usrmerge (boo#1212835).
  * Delete Provide-fallback-for-successfully-running-make-modules_install.patch
  * Delete compat-module_directory-module_prefix.patch</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 31
  * Allow passing a path to modprobe so the module is loaded from
    anywhere from the filesystem.
  * Use in-kernel decompression if available.
  * depmod learned a `-o &lt;dir&gt;` option to allow using a separate
    output directory.
- Delete depmod-Introduce-outdir-option.patch,
  testsuite-Handle-different-sysconfdir.patch,
  testsuite-depmod-use-defines-for-the-rootfs-lib_modu.patch,
  0001-testsuite-repair-read-of-uninitialized-memory.patch,
  testsuite-Move-setup-rootfs-logic-from-Makefile-to-s.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1697544000">- Fix tests
  * refresh configure-Detect-openssl-sm3-support.patch
  * refresh kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch
  * refresh usr-lib-modules.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1701864000">- Add upstream fixes since v31
  * tools-depmod-fix-Walloc-size.patch
  * libkmod-remove-pkcs7-obj_to_hash_algo.patch
  * configure-Check-that-provided-paths-are-absolute.patch
- Refresh usrmerge patches to upstream version (cosmetic change only)</changelog>
  <changelog author="msuchanek@suse.de" date="1712232000">- Update to release 32
  * Drop python bindings
  * Remove unmaintained experimental tool
- Drop upstreamed patches
  * configure-Detect-openssl-sm3-support.patch
  * man-depmod.d-Fix-incorrect-usr-lib-search-path.patch
  * usr-lib-modprobe.patch
  * kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch
  * tools-depmod-fix-Walloc-size.patch
  * libkmod-remove-pkcs7-obj_to_hash_algo.patch
  * usr-lib-modules.patch
  * configure-Check-that-provided-paths-are-absolute.patch
- Refresh no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1763553600">- man: modprobe.d: document the config file order handling (bsc#1253741)
  * man-modprobe.d-document-the-config-file-order-handling.patch</changelog>
</package>
<package pkgid="f550a945055ea05e609816cccf5e5b7423ca48a108c065d542976140a5e8aeb6f776647abf171331a71c9ac9574a734789bc3a06f2a89f3457b9a38e28b15ae9" name="kmod-debugsource" arch="aarch64">
  <version epoch="0" ver="32" rel="slfo.1.1_2.1"/>
  <changelog author="msuchanek@suse.de" date="1685102400">- On usrmerged system move kernel modules into /usr as well (boo#1211796)
  * usr-lib-modules.patch
  * testsuite-Move-setup-rootfs-logic-from-Makefile-to-s.patch
- Refresh usr-lib-modprobe.patch
- Refresh no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1688126400">- Fix up usrmerge patches to make the feature configurable (boo#1212835)
  * testsuite-Handle-different-sysconfdir.patch
  * testsuite-depmod-use-defines-for-the-rootfs-lib_modu.patch
  * depmod-Introduce-outdir-option.patch
  * man-depmod.d-Fix-incorrect-usr-lib-search-path.patch
  * kmod-Add-config-command-to-show-compile-time-configu.patch
- Refresh usr-lib-modprobe.patch
- Refresh usr-lib-modules.patch
- Refresh no-stylesheet-download.patch</changelog>
  <changelog author="jengelh@inai.de" date="1689508800">- Edit usr-lib-modules.patch to /lib/modules provide fallback
  behavior for successfully running `make modules_install` in
  pristine tarballs.</changelog>
  <changelog author="msuchanek@suse.de" date="1689595200">- Use pkgconfig for kmod configuration.
  * Delete kmod-Add-config-command-to-show-compile-time-configu.patch
  * Add kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch,
    Provide-fallback-for-successfully-running-make-modules_install.patch
    compat-module_directory-module_prefix.patch.
- Refresh usr-lib-modprobe.patch, usr-lib-modules.patch.
- Add configure-Detect-openssl-sm3-support.patch to
  fix build with older openssl without SM3 support.</changelog>
  <changelog author="msuchanek@suse.de" date="1690200000">- Remove compatibility patches, add README.usrmerge (boo#1212835).
  * Delete Provide-fallback-for-successfully-running-make-modules_install.patch
  * Delete compat-module_directory-module_prefix.patch</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 31
  * Allow passing a path to modprobe so the module is loaded from
    anywhere from the filesystem.
  * Use in-kernel decompression if available.
  * depmod learned a `-o &lt;dir&gt;` option to allow using a separate
    output directory.
- Delete depmod-Introduce-outdir-option.patch,
  testsuite-Handle-different-sysconfdir.patch,
  testsuite-depmod-use-defines-for-the-rootfs-lib_modu.patch,
  0001-testsuite-repair-read-of-uninitialized-memory.patch,
  testsuite-Move-setup-rootfs-logic-from-Makefile-to-s.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1697544000">- Fix tests
  * refresh configure-Detect-openssl-sm3-support.patch
  * refresh kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch
  * refresh usr-lib-modules.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1701864000">- Add upstream fixes since v31
  * tools-depmod-fix-Walloc-size.patch
  * libkmod-remove-pkcs7-obj_to_hash_algo.patch
  * configure-Check-that-provided-paths-are-absolute.patch
- Refresh usrmerge patches to upstream version (cosmetic change only)</changelog>
  <changelog author="msuchanek@suse.de" date="1712232000">- Update to release 32
  * Drop python bindings
  * Remove unmaintained experimental tool
- Drop upstreamed patches
  * configure-Detect-openssl-sm3-support.patch
  * man-depmod.d-Fix-incorrect-usr-lib-search-path.patch
  * usr-lib-modprobe.patch
  * kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch
  * tools-depmod-fix-Walloc-size.patch
  * libkmod-remove-pkcs7-obj_to_hash_algo.patch
  * usr-lib-modules.patch
  * configure-Check-that-provided-paths-are-absolute.patch
- Refresh no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1763553600">- man: modprobe.d: document the config file order handling (bsc#1253741)
  * man-modprobe.d-document-the-config-file-order-handling.patch</changelog>
</package>
<package pkgid="a16724cd6053d2acf25479f7cb2e3410c3d16d3ba7964a8f2b97e4ed28fbc31e7abff939f002b0f4e2ea950fc403ac72bc4b193b4e237e54e95d544751dc65cb" name="kpartx-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.10.0+103+suse.0fc97cd" rel="slfo.1.1_1.3"/>
  <changelog author="mwilck@suse.com" date="1707739200">- Update to version 0.9.7+148+suse.7d9953e.obscpio
  * This is a multipath-tools 0.9.8 pre-release
  * fix fast_io_fail for Infinibox (bsc#1219348)
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707912000">- Update to version 0.9.7+148+suse.9780ae0:
  * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
</package>
<package pkgid="5d759b6f1a4d1d012e79eeb828a67e62b40259390e2546d9eab01d81f288129a68831f89091776ea0cedadba9f9a4c2783a40db99f794f30bb61a0d598cf540d" name="krb5-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.21.3" rel="slfo.1.1_2.1"/>
  <changelog author="scabrero@suse.de" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="dmueller@suse.com" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="pmonreal@suse.com" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="kukuk@suse.com" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="asn@cryptomilk.org" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
</package>
<package pkgid="4b9ed09f9450f1bbc91c90f393c66035e2734bee7d8e34e9de39bcd6b8898305a51b086d9a8c4d6ca3cf2ee067e5847707aa9ff6c469cc5c9a4f76cae709ec2b" name="krb5-debugsource" arch="aarch64">
  <version epoch="0" ver="1.21.3" rel="slfo.1.1_2.1"/>
  <changelog author="scabrero@suse.de" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="dmueller@suse.com" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="pmonreal@suse.com" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="kukuk@suse.com" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="asn@cryptomilk.org" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
</package>
<package pkgid="48b2eec3cae01cc564a33b88c8949503d684f084b459774258d01850ea015afd99cf846f25df388afcfdd0851cca74f2a8be1cbd3c4c37cfb5c19b0dfa99ba84" name="lastlog2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.40.4" rel="slfo.1.1_4.1"/>
  <changelog author="jslaby@suse.cz" date="1715860800">- add support for pidfs in kernel 6.9 (bsc#1224285)
  * 0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch
  * 0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch
  * 0003-lsfd-Support-pidfs.patch
  * 0004-lsfd-test-Adapt-test-cases-for-pidfs.patch</changelog>
  <changelog author="dmueller@suse.com" date="1718020800">- disable libmagic in more(1) for binary detection (bsc#1225197)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1721131200">- uncomment "autoreconf --install" to use the new version of automake</changelog>
  <changelog author="sbrabec@suse.com" date="1722859200">- Update to version 2.40.2:
  * cfdisk: fix possible integer overflow
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
    (obsoletes
    0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch,
    0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch,
    0003-lsfd-Support-pidfs.patch,
    0004-lsfd-test-Adapt-test-cases-for-pidfs.patch)
  * mkswap.8.adoc: update note regarding swapfile creation
  * setpgid: make -f work
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Enable kernel mountfd API, as it should be already stable
  (PED-9752).
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.</changelog>
  <changelog author="sbrabec@suse.com" date="1729512000">- Disable mountfd API again.
  (https://github.com/util-linux/util-linux/issues/3158)</changelog>
  <changelog author="sbrabec@suse.com" date="1731844800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).
- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
</package>
<package pkgid="d96037d8025f68b6fc302a30350b4a489d49bcf7be45736591f38e5c70ec39fd447109cdf9cfe28ce784f28ec9de36078a27481a3c0fb78cbaa42c9f7568f8d1" name="lcms2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.16" rel="slfo.1.1_1.2"/>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to 2.11
  * Fixed __cpuid() on fast float plugin to allow gnu gcc
  * Fixed copy alpha bounds check
  * Fixed data race condition on contexts pool
  * Fixed LUT16 write matrix on multichannel V2 profiles
- Changes in 2.10
  * Added a compilation toggle to remove "register" keyword in API.
  * Previously commercial, fast_float plug-in is now released as open source
    under GPL3 license.
  * MD5 functions are now accesible through plug-in API.
  * Added support for Visual Studio 2019
  * Bug fixing.
- Drop lcms2-cgats-memory-allocation.patch, its now in upstream code
- Refresh patches
- Run spec-cleaner</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- update to 2.12:
  * Added build system for fast-float plugin (see plugin documentation)
  * Added new build-in sigmoidal tone curve
  * Added XCode 12 project
  * Added support for multichannel input up to 15 channels
  * Fix LUT8 write matrix
  * Fix version mess on 10/11
  * Fix tools &amp; samples xgetopt
  * Fix warnings on different function pointers
  * Fix matlab MEX compilation
  * plugin: cleanup and better SSE detection
  * plugin: add lab to any on float
  * plugin: it can now be compiled as C++
  * recover PDF documentation, but try to keep it under a resonable size.
  * Prevent a rare but possible out-of-bounds read in postscript generator
  * Fix some compiler warnings
  * Add named color profile building sample to testbed</changelog>
  <changelog author="info@paolostivanin.com" date="1643630400">- Update to 2.13:
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma function
  * configure now accepts --without-fastfloat to turn plugin off
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
- Rebase lcms2-visibility.patch</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 2.13.1:
  * Fix a bug on grayscale that made printing gray on white paper
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * Better documentation
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Travis CI discontinued, GitHub actions used instead
  * Added a very preliminary meson build script (thanks to xclaesse)
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma
  * configure now accepts --without-fastfloat to turn plugin off
  * autogen.sh has now a --distclean toggle to get rid of all autotools generated files
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
  * Fixed mem leaks and out-of bounds accesses as reported by fuzzer</changelog>
  <changelog author="christophe@krop.fr" date="1667908800">- Update to 2.14:
  * lcms2 now implements ICC specification 4.4
  * New multi-threaded plug-in
  * Several fixes to keep fuzzers happy
  * Removed check on DLL when CMS_NO_REGISTER_KEYWORD is used
  * Added more validation against broken profiles
  * Added more help to several tools
  * Revised documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1668168000">- Added reverse-0001-fix-memory-leaks-on-testbed.patch to fix
  colord's i586 build failure</changelog>
  <changelog author="davejplater@gmail.com" date="1668600000">- Removed reverse-0001-fix-memory-leaks-on-testbed.patch and added
  0001-fix-memory-corruption-when-unregistering-plugins.patch as
  final fix for https://github.com/hughsie/colord/issues/145</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) for alternative providers support</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 2.15:
  * New MESON build system, many thanks to amispark and Lovell
    Fuller for bringing this.
  * Fixed a bug that caused memory corruption on colord
  * cmsReadRawTag can read portions  of tags again. Removing this
    caused colord to segfault when dumping profiles
  * Added more checks based of fuzzer discoveries.
  * MSYS2 can now compile lcms2
  * Checked on Apple Silicon M1 and M2
  * Fixed a bug of fastfloat plug-in that affected Krita CMYK
    color selector
- drop 0001-fix-memory-corruption-when-unregistering-plugins.patch (upstream)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1701691200">- update to 2.16:
  * New: import .CUBE files as RGB device links
  * New: Read/Write MHC2 tags for Windows GPU access
  * New: Support for UTF8 on multi-localized Unicode functions
  * New: Support for OkLab color space, built-in and formatter.
  * Improved: floating point transforms float -&gt; integer are now
    honored as float
  * Improved: MSYS2, mingw is now supported
  * Improved: preferred CMM, platform and creator now survives profile
    edition.
  * Fixed: tificc now can deal with Lab TIFF
  * Fixed: code can now be compiled by a C++17 compiler, "register"
    keyword use detected at compile time.
  * Fixed: Reverted PostScript creation that corrupted some interpreters.
  * Bug fixing</changelog>
</package>
<package pkgid="41960d683a897796b8e82d07b0b21a14b747583d75160efc4f33692d00e54afdad1a59ded4a9198d373bae06fa333aa6bb6201b2997ca00e80933aabfb29eacb" name="ldb-debugsource" arch="aarch64">
  <version epoch="0" ver="2.9.1" rel="slfo.1.1_1.2"/>
  <changelog author="scabrero@suse.de" date="1647950400">- Update to version 2.5.0
  + No code changes, just bump version for samba 4.16.0 release</changelog>
  <changelog author="scabrero@suse.de" date="1655380800">- Update to version 2.5.1
  + Fix build problems; (bso#15071);</changelog>
  <changelog author="scabrero@suse.de" date="1659355200">- Update to version 2.5.2;
  + CVE-2022-32746: Use-after-free occurring in database audit
    logging module; (bso#15009); (bsc#1201490);</changelog>
  <changelog author="nopower@suse.com" date="1663848000">- Update to version 2.6.1
  + CVE-2022-32746 Use-after-free occurring in database audit
    logging module; (bso#15009); (bsc#1201490);
- Update to version 2.6.0
  + ldb: bump version to 2.6.0 for Samba 4.17.x releases</changelog>
  <changelog author="nopower@suse.com" date="1678708800">- Update to version 2.7.1
  - Build fix for Solaris, after removal of tevent ports
    backend (bso#15298).
- Update to version 2.7.0
  - Support python 3.12
  * Have python functions operating on DNs raise LdbError
  * don't call comparison() directly in LDB_TYPESAFE_QSORT
  * Use ldb_ascii_toupper() for case folding to support
    tr_TR.UTF-8 and other dotless i locales; (bso#15248).</changelog>
  <changelog author="scabrero@suse.de" date="1679054400">- Update to 2.7.1
  * Build fix for Solaris, after removal of tevent ports backend
    (bso#15298)
- Changes from 2.7.0
  * Support python 3.12
  * Have python functions operating on DNs raise LdbError
  * Don't call comparison() directly in LDB_TYPESAFE_QSORT
  * Use ldb_ascii_toupper() for case folding to support
    tr_TR.UTF-8 and other dotless i locales (bso#15248)</changelog>
  <changelog author="nopower@suse.com" date="1680091200">- CVE-2023-0614: Access controlled AD LDAP attributes can be
    discovered  (bso#15270); (bsc#1209485).</changelog>
  <changelog author="nopower@suse.com" date="1695729600">-  Update to 2.8.0
  * CVE-2023-0614 Not-secret but access controlled LDAP attributes can be discovered (bug 15270)
  * pyldb: Raise an exception if ldb_dn_get_parent() fails
  * Implement ldap_whoami in pyldb and add the RFC4532 LDB_EXTENDED_WHOAMI_OID definition
  * Documentation and spelling fixes
  * Add ldb_val -&gt; bool,uint64,int64 parsing functions
  * Split out ldb_val_as_dn() helper function
  * add LDB_CHANGETYPE_MODRDN support to ldb_ldif_to_pyobject()
  * add LDB_CHANGETYPE_DELETE support to ldb_ldif_to_pyobject()
  * let ldb_ldif_parse_modrdn() handle names without 'rdn_name=' prefix
  * Don't create error string if there is no error
  * Avoid allocation and memcpy() for every wildcard match candidate
  * Make ldb_msg_remove_attr O(n)
  * pyldb: Throw error on invalid controls
  * pyldb: remove py2 ifdefs
  * Call tevent_set_max_debug_level(TEVENT_DEBUG_TRACE)</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to 2.9.0
  * documentation fixes
  * build with Python 3.12 (bso#15513)
  * a lot of additional error checking in the python bindings
  * minor code fixes
  * Update patch ldb-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="nopower@suse.com" date="1719576000">- Update to 2.9.1
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15569).</changelog>
</package>
<package pkgid="041bb1089b0b5739d02f7cc7cab50c801fd3ecfa92baac85d486062813f0b343cd9bd53704b896992a2dd77b69b8a8fce624fc576ffa4302387e9de4ef6671ab" name="ldmtool-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.2.4" rel="slfo.1.1_1.2"/>
  <changelog author="cbosdonnat@suse.com" date="1491480000">- Release 0.2.3
- Added patches:
  * werror-fixes.patch
  * cast_be64toh.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Properly assign RPM group to shlib package
- Replace %soname to %sover to better reflects its intent
- Replace -exec rm by _much simpler_ -delete
- Trim excess whitespace</changelog>
  <changelog author="cbosdonnat@suse.com" date="1491825600">- Fix license files</changelog>
  <changelog author="olaf@aepfle.de" date="1496145600">- fix double const</changelog>
  <changelog author="lyan@suse.com" date="1540641600">- fix deprecated api g_type_class_add_private()
- Added patches:
  * Remove-deprecated-g_type_class_add_private.patch</changelog>
  <changelog author="aginies@suse.com" date="1582632000">- update to version 0.2.4
- update patch Remove-deprecated-g_type_class_add_private.patch
- remove upstream merged patches (werror-fixes.patch, cast_be64toh.patch)
- fix buildrequires
- use localsource as the github repo doesnt include yet the built tarball
  for 0.2.4 release</changelog>
  <changelog author="olaf@aepfle.de" date="1609848000">- Adjust Remove-deprecated-g_type_class_add_private.patch to fix build</changelog>
</package>
<package pkgid="f3e0f9acfed97685c3f097b912919092a2ec038a6ada594b9c4f0ec2e3915862620c5fd96e0c64450af9ef4953a7942ee8f3b6a7e1b236f1089d739248002520" name="ldmtool-debugsource" arch="aarch64">
  <version epoch="0" ver="0.2.4" rel="slfo.1.1_1.2"/>
  <changelog author="cbosdonnat@suse.com" date="1491480000">- Release 0.2.3
- Added patches:
  * werror-fixes.patch
  * cast_be64toh.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Properly assign RPM group to shlib package
- Replace %soname to %sover to better reflects its intent
- Replace -exec rm by _much simpler_ -delete
- Trim excess whitespace</changelog>
  <changelog author="cbosdonnat@suse.com" date="1491825600">- Fix license files</changelog>
  <changelog author="olaf@aepfle.de" date="1496145600">- fix double const</changelog>
  <changelog author="lyan@suse.com" date="1540641600">- fix deprecated api g_type_class_add_private()
- Added patches:
  * Remove-deprecated-g_type_class_add_private.patch</changelog>
  <changelog author="aginies@suse.com" date="1582632000">- update to version 0.2.4
- update patch Remove-deprecated-g_type_class_add_private.patch
- remove upstream merged patches (werror-fixes.patch, cast_be64toh.patch)
- fix buildrequires
- use localsource as the github repo doesnt include yet the built tarball
  for 0.2.4 release</changelog>
  <changelog author="olaf@aepfle.de" date="1609848000">- Adjust Remove-deprecated-g_type_class_add_private.patch to fix build</changelog>
</package>
<package pkgid="c8f09fa0e361b5b4669f66ea19ae2a4d3db38986643474e76fcab536c59009edb911aea72cd6970b63e016942a390670f59cc99434bac5415523ecb5fa57ad57" name="ledmon-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.97" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1576065600">- Small packaging cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1576584000">- Fix download url
- Fix jira reference in changelog
- Add ledmon-amd_sgpio.patch to fix issues with building on TW</changelog>
  <changelog author="heming.zhao@suse.com" date="1577448000">- backport upstream patches to v0.93
  + Don-t-build-with-Werror.patch
  + ledmon-paths-in-systemd-service-file-are-generated.patch
  + smp-fix-the-activity-indicator-states.patch
- rename patch file
  - ledmon-amd_sgpio.patch
  + amd_sgpio-Correct-use-of-packed-structs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1589803200">- Update to version 0.94:
  * Support for AMD IPMI enclosure management
  * Support for NPEM
  * Documentation updates
  * Fix activity indicator state for SMP
  * Fix for GCC 9 compilation
  * Update ipbi pattern for drives with previous pattern unknown
- Drop no longer needed patches:
  * Don-t-build-with-Werror.patch
  * amd_sgpio-Correct-use-of-packed-structs.patch
  * ledmon-paths-in-systemd-service-file-are-generated.patch
  * smp-fix-the-activity-indicator-states.patch
- Install compat symlink</changelog>
  <changelog author="rpm@fthiessen.de" date="1625140800">- Update to version 0.95
  * Allow to run ledctl version without root
  * Defaulting to SGPIO for AMD systems
  * Don't rely on states priority while changing IBPI states
  * Check the white/blacklist from ledmon.conf earlier in discovery
  * Change installation directory to /usr/sbin
  * Use package version from autotools, not version.h
  * Fix memory leak in utils.c
  * Some other bugfixes</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_ledmon.service.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1658145600">- Update to version 0.96: (PED-85)
  * Manual updates, clarify --listed-only option
  * Fix cache indexing of ATA port
  * Fixes in regard to macros
  * Fix memory leak in amd_ipmi.c
  * Fix NULL pointer dereferences in sysfs.c
  * Make messages appear in service log immediately
- add patches after 0.96:
  + 0001-Ledctl-slots-management-94.patch
  + 0002-add-Dell-15G-servers.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1677585600">- add a patch to fix bsc#1208613
  * 0003-ipmi-avoid-error-messages-on-non-dell-platforms-112.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1682510400">- Don't use ProtectKernelTunables, can break some use cases
  (bsc#1210656)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1684411200">- Update to version 0.97:
  Enhancements
    ledctl: add support to empty slots blinking
    ledmon license change to LGPLv2
    ledctl: Add SES get/set/list slot support
    Update NPEM wait command
    Remove exclusionary language
    ledmon: Define ONESHOT_NORMAL for VMD
  Bug fixes
    ipmi: avoid error messages on non-dell platforms
    vmdssd: define normal pattern
    ledctl: clear unsupported params from config
    block.c: get_block_device_from_sysfs_path modification
    fix ibpi_value lists getter
    amd_ipmi: Allow to _enable_smbus_control
    ledmon.c: allocate memory for ignore
    sysfs: add only vmd devices to slots_list
    Rename --controller parameter
    Slots list implementations and fixes
- Drop no longer needed patches:
  * 0001-Ledctl-slots-management-94.patch
  * 0002-add-Dell-15G-servers.patch
  * 0003-ipmi-avoid-error-messages-on-non-dell-platforms-112.patch</changelog>
</package>
<package pkgid="e24919e5be761567b7e809a34ce840b8ae9bc82f69702426f4deeee72eb33160e466015e99f0deaab12565ba94520e245dedc30fdf5fa6bd60b5b98969ca1c73" name="ledmon-debugsource" arch="aarch64">
  <version epoch="0" ver="0.97" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1576065600">- Small packaging cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1576584000">- Fix download url
- Fix jira reference in changelog
- Add ledmon-amd_sgpio.patch to fix issues with building on TW</changelog>
  <changelog author="heming.zhao@suse.com" date="1577448000">- backport upstream patches to v0.93
  + Don-t-build-with-Werror.patch
  + ledmon-paths-in-systemd-service-file-are-generated.patch
  + smp-fix-the-activity-indicator-states.patch
- rename patch file
  - ledmon-amd_sgpio.patch
  + amd_sgpio-Correct-use-of-packed-structs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1589803200">- Update to version 0.94:
  * Support for AMD IPMI enclosure management
  * Support for NPEM
  * Documentation updates
  * Fix activity indicator state for SMP
  * Fix for GCC 9 compilation
  * Update ipbi pattern for drives with previous pattern unknown
- Drop no longer needed patches:
  * Don-t-build-with-Werror.patch
  * amd_sgpio-Correct-use-of-packed-structs.patch
  * ledmon-paths-in-systemd-service-file-are-generated.patch
  * smp-fix-the-activity-indicator-states.patch
- Install compat symlink</changelog>
  <changelog author="rpm@fthiessen.de" date="1625140800">- Update to version 0.95
  * Allow to run ledctl version without root
  * Defaulting to SGPIO for AMD systems
  * Don't rely on states priority while changing IBPI states
  * Check the white/blacklist from ledmon.conf earlier in discovery
  * Change installation directory to /usr/sbin
  * Use package version from autotools, not version.h
  * Fix memory leak in utils.c
  * Some other bugfixes</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_ledmon.service.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1658145600">- Update to version 0.96: (PED-85)
  * Manual updates, clarify --listed-only option
  * Fix cache indexing of ATA port
  * Fixes in regard to macros
  * Fix memory leak in amd_ipmi.c
  * Fix NULL pointer dereferences in sysfs.c
  * Make messages appear in service log immediately
- add patches after 0.96:
  + 0001-Ledctl-slots-management-94.patch
  + 0002-add-Dell-15G-servers.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1677585600">- add a patch to fix bsc#1208613
  * 0003-ipmi-avoid-error-messages-on-non-dell-platforms-112.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1682510400">- Don't use ProtectKernelTunables, can break some use cases
  (bsc#1210656)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1684411200">- Update to version 0.97:
  Enhancements
    ledctl: add support to empty slots blinking
    ledmon license change to LGPLv2
    ledctl: Add SES get/set/list slot support
    Update NPEM wait command
    Remove exclusionary language
    ledmon: Define ONESHOT_NORMAL for VMD
  Bug fixes
    ipmi: avoid error messages on non-dell platforms
    vmdssd: define normal pattern
    ledctl: clear unsupported params from config
    block.c: get_block_device_from_sysfs_path modification
    fix ibpi_value lists getter
    amd_ipmi: Allow to _enable_smbus_control
    ledmon.c: allocate memory for ignore
    sysfs: add only vmd devices to slots_list
    Rename --controller parameter
    Slots list implementations and fixes
- Drop no longer needed patches:
  * 0001-Ledctl-slots-management-94.patch
  * 0002-add-Dell-15G-servers.patch
  * 0003-ipmi-avoid-error-messages-on-non-dell-platforms-112.patch</changelog>
</package>
<package pkgid="7f79c9b10482ef0f8f9450059a2f40158d835e7ab6d33735b4fa95eb95aa39bd1188795541b84ddacf32d0eb0e033d2c4712e9675c3f56eb48b04ed0892c1e96" name="less-debuginfo" arch="aarch64">
  <version epoch="0" ver="668" rel="slfo.1.1_1.1"/>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to 608:
  * Add the --header option (github #43).
  * Add the --no-number-headers option (github #178).
  * Add the --status-line option.
  * Add the --redraw-on-quit option (github #36).
  * Add the --search-options option (github #213).
  * Add the --exit-follow-on-close option (github #244).
  * Add 'H' color type to set color of header lines.
  * Add #version conditional to lesskey.
  * Add += syntax to variable section in lesskey files.
  * Allow option name in -- command to end with '=' in addition to '\n'.
  * Add $HOME/.config to possible locations of lesskey file (github #153).
  * Add $XDG_STATE_HOME and $HOME/.local/state to possible locations
    of history file (github #223).
  * Don't read or write history file in secure mode (github #201).
  * Fix display of multibyte and double-width chars in prompt.
  * Fix ESC-BACKSPACE command when BACKSPACE key does not send 0x08
    (github #188).
  * Add more \k codes to lesskey format.
  * Fix bug when empty file is modified while viewing it.
  * Fix bug when parsing a malformed lesskey file (githb #234).
  * Fix bug scrolling history when --incsearch is set (github #214).
  * Fix buffer overflow when invoking lessecho with more than 63 -m/-n
    options (github #198).
  * Fix buffer overflow in bin_file (github #271).
  * Fix bug restoring color at end of highlighted text.
  * Fix bug in parsing lesskey file.
  * Defer moving cursor to lower left in some more cases.
  * Suppress TAB filename expansion in some cases where it doesn't make sense.
  * Fix termlib detection when compiler doesn't accept
    calls to undeclared functions.
  * Escape filenames when invoking LESSCLOSE.
  * Fix bug using multibyte UTF-8 char in search string
    with --incsearch (github #273).</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]
- Refreshed all other patches with quilt to an uniform -p1 patch
  style, which allows us to use %autosetup and simplify the spec
  file a bit.</changelog>
  <changelog author="kstreitova@suse.com" date="1683028800">- Update to 632 (differences between 608 and 632)
  * Add LESSUTFCHARDEF environment variable (github #275).
  * Add # command (github #330).
  * Add ^S search modifier (github #196).
  * Add --wordwrap option (github #113).
  * Add --no-vbell option (github #304).
  * Add --no-search-headers option (github #44).
  * Add --modelines option (github #89).
  * Add --intr option (github #224).
  * Add --proc-backspace, --proc-tab and --proc-return options (github #335).
  * Add --show-preproc-errors option (github #258).
  * Add LESS_LINES and LESS_COLUMNS environment variables (github #84).
  * Add LESS_DATA_DELAY environment variable (github #337).
  * Allow empty "lines" field in --header option.
  * Update Unicode tables.
  * Improve ability of ^X to interrupt F command (github #49).
  * Status column (-J) shows off-screen matches.
  * Parenthesized sub-patterns in searches are colored with unique colors, if supported by the regular expression library (github #196).
  * Don't allow opening a tty as file input unless -f is set (github #309).
  * Don't require newline input after +&amp;... option (github #339).
  * Fix incorrect handling of some Private Use Unicode characters.
  * Fix ANSI color bug when overstriking with colored chars (github #276).
  * Fix compiler const warning (github #279).
  * Fix signal race in iread (github #280).
  * Fix reading procfs files on Linux (github #282).
  * Fix --ignore-case with ctrl-R (no regex) search (github #300).
  * Fix bug doing repeat search after setting &amp; filter (github #299).
  * Fix bug doing repeat search before non-repeat search.
  * Fix crash with -R and certain line lengths (github #338).
  * Fix input of Windows dead keys (github #352).
  * Don't retain search options from a cancelled search (github #302).
  * Don't call realpath on fake filenames like "-" (github #289).
  * Implement lesstest test suite.
  * Convert function parameter definitions from K&amp;R to C89 (github #316).
- Drop patch cve-2022-46663.patch (merged).</changelog>
  <changelog author="kstreitova@suse.com" date="1683201600">- Update to 633
  * This release fixes a build problem found in less-632 on systems
    which have termcap.h in a subdirectory (ncurses/termcap.h or
    ncursesw/termcap.h). There is no functional difference between
    less-632 and less-633</changelog>
  <changelog author="info@paolostivanin.com" date="1692014400">- Update to 643:
  * Fix problem when a program piping into less reads from the tty,
    like sudo asking for password (github #368).
  * Fix search modifier ^E after ^W.
  * Fix bug using negated (^N) search (github #374).
  * Fix bug setting colors with -D on Windows build (github #386).
  * Fix reading special chars like PageDown on Windows (github #378).
  * Fix mouse wheel scrolling on Windows (github #379).
  * Fix erroneous EOF when terminal window size changes (github #372).
  * Fix compile error with some definitions of ECHONL (github #395).
  * Fix crash on Windows when writing logfile (github #405).
  * Fix regression in exit code when stdin is /dev/null and
    output is a file (github #373).
  * Add lesstest test suite to production release (github #344).
  * Change lesstest output to conform with
    automake Simple Test Format (github #399).</changelog>
  <changelog author="dmueller@suse.com" date="1699531200">- add zstd support to lessopen</changelog>
  <changelog author="danilo.spinella@suse.com" date="1716811200">- Update to 656:
  * Add ^O^N, ^O^P, ^O^L and ^O^O commands and mouse clicks (with --mouse) to find and open OSC8 hyperlinks (github #251).
  * Add --match-shift option.
  * Add --lesskey-content option (github #447).
  * Add LESSKEY_CONTENT environment variable (github #447).
  * Add --no-search-header-lines and --no-search-header-columns options (github #397).
  * Add ctrl-L search modifier (github #367).
  * A ctrl-P at the start of a shell command suppresses the "done" message (github #462).
  * Add attribute characters ('*', '~', '_', '&amp;') to --color parameter (github #471).
  * Allow expansion of environment variables in lesskey files.
  * Add LESSSECURE_ALLOW environment variable (github #449).
  * Add LESS_UNSUPPORT environment variable.
  * Add line number parameter to --header option (github #436).
  * Mouse right-click jumps to position marked by left-click (github #390).
  * Ensure that the target line is not obscured by a header line set by --header (github #444).
  * Change default character set to "utf-8", except remains "dos" on MS-DOS.
  * Add message when search with ^W wraps (github #459).
  * UCRT builds on Windows 10 and later now support Unicode file names (github #438).
  * Improve behavior of interrupt while reading non-terminated pipe (github #414).
  * Improve parsing of -j, -x and -# options (github #393).
  * Support files larger than 4GB on Windows (github #417).
  * Support entry of Unicode chars larger than U+FFFF on Windows (github #391).
  * Improve colors of bold, underline and standout text on Windows.
  * Allow --rscroll to accept non-ASCII characters (github #483).
  * Allow the parameter to certain options to be terminated with a space (--color, --quotes, --rscroll, --search-options and --intr) (github #495).
  * Fix bug where # substitution failed after viewing help (github #420).
  * Fix crash if files are deleted while less is viewing them (github #404).
  * Workaround unreliable ReadConsoleInputW behavior on Windows with non-ASCII input.
  * Fix -J display when searching for non-ASCII characters (github #422).
  * Don't filter header lines via the &amp; command (github #423).
  * Fix bug when horizontally shifting long lines (github #425).
  * Add -x and -D options to lesstest, to make it easier to diagnose a failed lesstest run.
  * Fix bug searching long lines with --incsearch and -S (github #428).
  * Fix bug that made ESC-} fail if top line on screen was empty (github #429).
  * Fix bug with --mouse on Windows when used with pipes (github #440).
  * Fix bug in --+OPTION command line syntax.
  * Fix display bug when using -w with an empty line with a CR/LF line ending (github #474).
  * When substituting '#' or '%' with a filename, quote the filename if it contains a space (github #480).
  * Fix wrong sleep time when system has usleep but not nanosleep (github #489).
  * Fix bug when file name contains a newline (CVE-2024-32487, bsc#1222849).
  * Fix bug when file name contains nonprintable characters (github #503).
  * Fix DJGPP build (github #497).
  * Update Unicode tables.
- Refresh less-429-shell.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1720785600">- Update to 661:
  * fix crash - buffer overflow by one in fexpand
  * fix free(): double free detected in tcache 2
  * fix segmentation fault on line-num-width &amp; -N</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1729512000">- Change preprocessor dependencies from Requires to Recommends. It's disabled by
  default and they are not necessary for less.</changelog>
  <changelog author="bwiedemann@suse.com" date="1734264000">- Update to 668
  * Fix crash when using --header on command line
  * Fix possible crash when scrolling left/right or toggling -S
  * Fix bug when using #stop in a lesskey file
  * Fix bug when using --shift or --match-shift on command line with a parameter starting with '.'
  * Fix bug in R command when file size changes
  * Fix bug using --header when file does not fill screen
  * Fix ^X bug when output is not a terminal
  * Fix bug where ^Z is not handled immediately
  * Fix bug where first byte from a LESSOPEN filter is deleted if it is greater than 0x7F
  * Fix uninitialized variable in edit_ifile
  * Fix incorrect handling of UTF-8 chars in prompts
- Add reproducible.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="79699a6af05e66a8ef3da1bfb6ace9025d8bb94672d97dbc47ed46c3dc73d973c6f7a4c368b91a4fbdd474cd076600b69efacf7f94e82a89881674640199e1c6" name="less-debugsource" arch="aarch64">
  <version epoch="0" ver="668" rel="slfo.1.1_1.1"/>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to 608:
  * Add the --header option (github #43).
  * Add the --no-number-headers option (github #178).
  * Add the --status-line option.
  * Add the --redraw-on-quit option (github #36).
  * Add the --search-options option (github #213).
  * Add the --exit-follow-on-close option (github #244).
  * Add 'H' color type to set color of header lines.
  * Add #version conditional to lesskey.
  * Add += syntax to variable section in lesskey files.
  * Allow option name in -- command to end with '=' in addition to '\n'.
  * Add $HOME/.config to possible locations of lesskey file (github #153).
  * Add $XDG_STATE_HOME and $HOME/.local/state to possible locations
    of history file (github #223).
  * Don't read or write history file in secure mode (github #201).
  * Fix display of multibyte and double-width chars in prompt.
  * Fix ESC-BACKSPACE command when BACKSPACE key does not send 0x08
    (github #188).
  * Add more \k codes to lesskey format.
  * Fix bug when empty file is modified while viewing it.
  * Fix bug when parsing a malformed lesskey file (githb #234).
  * Fix bug scrolling history when --incsearch is set (github #214).
  * Fix buffer overflow when invoking lessecho with more than 63 -m/-n
    options (github #198).
  * Fix buffer overflow in bin_file (github #271).
  * Fix bug restoring color at end of highlighted text.
  * Fix bug in parsing lesskey file.
  * Defer moving cursor to lower left in some more cases.
  * Suppress TAB filename expansion in some cases where it doesn't make sense.
  * Fix termlib detection when compiler doesn't accept
    calls to undeclared functions.
  * Escape filenames when invoking LESSCLOSE.
  * Fix bug using multibyte UTF-8 char in search string
    with --incsearch (github #273).</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]
- Refreshed all other patches with quilt to an uniform -p1 patch
  style, which allows us to use %autosetup and simplify the spec
  file a bit.</changelog>
  <changelog author="kstreitova@suse.com" date="1683028800">- Update to 632 (differences between 608 and 632)
  * Add LESSUTFCHARDEF environment variable (github #275).
  * Add # command (github #330).
  * Add ^S search modifier (github #196).
  * Add --wordwrap option (github #113).
  * Add --no-vbell option (github #304).
  * Add --no-search-headers option (github #44).
  * Add --modelines option (github #89).
  * Add --intr option (github #224).
  * Add --proc-backspace, --proc-tab and --proc-return options (github #335).
  * Add --show-preproc-errors option (github #258).
  * Add LESS_LINES and LESS_COLUMNS environment variables (github #84).
  * Add LESS_DATA_DELAY environment variable (github #337).
  * Allow empty "lines" field in --header option.
  * Update Unicode tables.
  * Improve ability of ^X to interrupt F command (github #49).
  * Status column (-J) shows off-screen matches.
  * Parenthesized sub-patterns in searches are colored with unique colors, if supported by the regular expression library (github #196).
  * Don't allow opening a tty as file input unless -f is set (github #309).
  * Don't require newline input after +&amp;... option (github #339).
  * Fix incorrect handling of some Private Use Unicode characters.
  * Fix ANSI color bug when overstriking with colored chars (github #276).
  * Fix compiler const warning (github #279).
  * Fix signal race in iread (github #280).
  * Fix reading procfs files on Linux (github #282).
  * Fix --ignore-case with ctrl-R (no regex) search (github #300).
  * Fix bug doing repeat search after setting &amp; filter (github #299).
  * Fix bug doing repeat search before non-repeat search.
  * Fix crash with -R and certain line lengths (github #338).
  * Fix input of Windows dead keys (github #352).
  * Don't retain search options from a cancelled search (github #302).
  * Don't call realpath on fake filenames like "-" (github #289).
  * Implement lesstest test suite.
  * Convert function parameter definitions from K&amp;R to C89 (github #316).
- Drop patch cve-2022-46663.patch (merged).</changelog>
  <changelog author="kstreitova@suse.com" date="1683201600">- Update to 633
  * This release fixes a build problem found in less-632 on systems
    which have termcap.h in a subdirectory (ncurses/termcap.h or
    ncursesw/termcap.h). There is no functional difference between
    less-632 and less-633</changelog>
  <changelog author="info@paolostivanin.com" date="1692014400">- Update to 643:
  * Fix problem when a program piping into less reads from the tty,
    like sudo asking for password (github #368).
  * Fix search modifier ^E after ^W.
  * Fix bug using negated (^N) search (github #374).
  * Fix bug setting colors with -D on Windows build (github #386).
  * Fix reading special chars like PageDown on Windows (github #378).
  * Fix mouse wheel scrolling on Windows (github #379).
  * Fix erroneous EOF when terminal window size changes (github #372).
  * Fix compile error with some definitions of ECHONL (github #395).
  * Fix crash on Windows when writing logfile (github #405).
  * Fix regression in exit code when stdin is /dev/null and
    output is a file (github #373).
  * Add lesstest test suite to production release (github #344).
  * Change lesstest output to conform with
    automake Simple Test Format (github #399).</changelog>
  <changelog author="dmueller@suse.com" date="1699531200">- add zstd support to lessopen</changelog>
  <changelog author="danilo.spinella@suse.com" date="1716811200">- Update to 656:
  * Add ^O^N, ^O^P, ^O^L and ^O^O commands and mouse clicks (with --mouse) to find and open OSC8 hyperlinks (github #251).
  * Add --match-shift option.
  * Add --lesskey-content option (github #447).
  * Add LESSKEY_CONTENT environment variable (github #447).
  * Add --no-search-header-lines and --no-search-header-columns options (github #397).
  * Add ctrl-L search modifier (github #367).
  * A ctrl-P at the start of a shell command suppresses the "done" message (github #462).
  * Add attribute characters ('*', '~', '_', '&amp;') to --color parameter (github #471).
  * Allow expansion of environment variables in lesskey files.
  * Add LESSSECURE_ALLOW environment variable (github #449).
  * Add LESS_UNSUPPORT environment variable.
  * Add line number parameter to --header option (github #436).
  * Mouse right-click jumps to position marked by left-click (github #390).
  * Ensure that the target line is not obscured by a header line set by --header (github #444).
  * Change default character set to "utf-8", except remains "dos" on MS-DOS.
  * Add message when search with ^W wraps (github #459).
  * UCRT builds on Windows 10 and later now support Unicode file names (github #438).
  * Improve behavior of interrupt while reading non-terminated pipe (github #414).
  * Improve parsing of -j, -x and -# options (github #393).
  * Support files larger than 4GB on Windows (github #417).
  * Support entry of Unicode chars larger than U+FFFF on Windows (github #391).
  * Improve colors of bold, underline and standout text on Windows.
  * Allow --rscroll to accept non-ASCII characters (github #483).
  * Allow the parameter to certain options to be terminated with a space (--color, --quotes, --rscroll, --search-options and --intr) (github #495).
  * Fix bug where # substitution failed after viewing help (github #420).
  * Fix crash if files are deleted while less is viewing them (github #404).
  * Workaround unreliable ReadConsoleInputW behavior on Windows with non-ASCII input.
  * Fix -J display when searching for non-ASCII characters (github #422).
  * Don't filter header lines via the &amp; command (github #423).
  * Fix bug when horizontally shifting long lines (github #425).
  * Add -x and -D options to lesstest, to make it easier to diagnose a failed lesstest run.
  * Fix bug searching long lines with --incsearch and -S (github #428).
  * Fix bug that made ESC-} fail if top line on screen was empty (github #429).
  * Fix bug with --mouse on Windows when used with pipes (github #440).
  * Fix bug in --+OPTION command line syntax.
  * Fix display bug when using -w with an empty line with a CR/LF line ending (github #474).
  * When substituting '#' or '%' with a filename, quote the filename if it contains a space (github #480).
  * Fix wrong sleep time when system has usleep but not nanosleep (github #489).
  * Fix bug when file name contains a newline (CVE-2024-32487, bsc#1222849).
  * Fix bug when file name contains nonprintable characters (github #503).
  * Fix DJGPP build (github #497).
  * Update Unicode tables.
- Refresh less-429-shell.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1720785600">- Update to 661:
  * fix crash - buffer overflow by one in fexpand
  * fix free(): double free detected in tcache 2
  * fix segmentation fault on line-num-width &amp; -N</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1729512000">- Change preprocessor dependencies from Requires to Recommends. It's disabled by
  default and they are not necessary for less.</changelog>
  <changelog author="bwiedemann@suse.com" date="1734264000">- Update to 668
  * Fix crash when using --header on command line
  * Fix possible crash when scrolling left/right or toggling -S
  * Fix bug when using #stop in a lesskey file
  * Fix bug when using --shift or --match-shift on command line with a parameter starting with '.'
  * Fix bug in R command when file size changes
  * Fix bug using --header when file does not fill screen
  * Fix ^X bug when output is not a terminal
  * Fix bug where ^Z is not handled immediately
  * Fix bug where first byte from a LESSOPEN filter is deleted if it is greater than 0x7F
  * Fix uninitialized variable in edit_ifile
  * Fix incorrect handling of UTF-8 chars in prompts
- Add reproducible.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="8f1ffe2e21fbae361c7c7bb9146d3a1714b84aa6b90d8f386b055828694ae4ca1a3fcb14660b9a29c4cef971a086e55cf8a07773fcde75470c033d40c9a22b3b" name="libLLVM17-debuginfo" arch="aarch64">
  <version epoch="0" ver="17.0.6" rel="slfo.1.1_1.5"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1683460800">- Update to version 16.0.3.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1684324800">- Update to version 16.0.4.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1685793600">- Update to version 16.0.5.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
- Enable ThinLTO on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1686830400">- Update to version 16.0.6.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Make python3-clang noarch again and fix conflicts/provides to
  point to %python3_sitelib instead of %python3_sitearch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1695124800">- Update to version 17.0.1.
  * For details, see the release notes:
  - https://releases.llvm.org/17.0.1/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/lld/docs/ReleaseNotes.html
- Rebase patches:
  * libcxx-test-library-path.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
  * llvm-remove-clang-only-flags.patch
  * opt-viewer-Find-style-css-in-usr-share.patch
- Simplify check-no-llvm-exegesis.patch by removing test directory.
- Drop patches that have landed upstream:
  * openmp-drop-rpath.patch
- Add openmp-dont-run-gpu-arch.patch: the binaries are not
  available in our build, and neither are the toolchains they test
  for (NV CUDA and AMD HSA).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1696680000">- Update to version 17.0.2.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1697716800">- Update to version 17.0.3.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Disable zstd support for now regardless of whether libzstd-devel
  is installed. (boo#1216121)
- Limit number of LTO threads on 32-bit architectures to prevent
  out-of-memory during linking.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1699185600">- Update to version 17.0.4.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Include libomptarget.devicertl.a in libomp*-devel, which is
  required for (GPU) offloading.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1700308800">- Update to version 17.0.5.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Also test clang-tools-extra (at least most parts) and lld.
- Adapt test in lld-default-sha1.patch.
- Don't disable testing if qemu_user_space_build has been set to 0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Update to version 17.0.6.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Use major version only instead of full (patch-level) version for
  versioned executables: we don't support parallel installation of
  multiple versions of the same LLVM major version. (boo#1217450)
  Also drop the clang-X.Y symlink that was introduced for
  boo#1012260, because Y is always 0.
- Manage clang-cpp with update-alternatives like other binaries.</changelog>
</package>
<package pkgid="aef33104a0e2a253af3234738dfec0caace108704074bd342dffc328216c9b6dfca60988c651522262c953f1da624e2dd8648385c1020834894762cd7d10817e" name="libX11-6-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.7" rel="slfo.1.1_2.1"/>
  <changelog author="sndirsch@suse.com" date="1670068800">- U_0001-Add-XFreeThreads-function.patch
  U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch
  * adding all patches since 1.8.2 release in order to try fixing
    regressions after introducing thread safety constructor with
    1.8.1 (boo#1205778, boo#1205818)
- supersedes U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
- re-enabled thread safe constructor</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- going back to version 1.7.5 for now to get rid of regressions,
  which were introduced by trying to get thread-safe in libX11
  itself
- re-introduced U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  which was not yet in 1.7.5
- supersedes the following patches
  * U_0001-Add-XFreeThreads-function.patch
  * U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  * U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  * U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1670241601">- Update to version 1.8.1
  This release fixes the --enable-thread-safety-constructor option to the
  configure script to work as intended.  In the previous release, the changes
  for this option may not have been enabled when the option was not specified
  or when the --enable option was specified.
  While we have enabled it by default, believing that doing so will reduce
  the number of bugs users encounter running libX11 clients, in some cases
  it may expose bugs in which clients had previously gotten away with calling
  libX11 functions while a libX11 lock is already held, and thus now deadlock,
  as discussed in https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/157
- let's hope this version doesn't suffer yet from the regressions
  reported in boo#1205778, boo#1205818 (reported against 1.8.2);
  we need libX11 thread safe for totem (GNOME 43) :-(</changelog>
  <changelog author="llyyr.public@gmail.com" date="1678363200">- Update to version 1.8.4
  This release fixes the regressions in previous 1.8.x related to the thread-
  - safety-constructor option. (boo#1209176)
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1685620800">- Update to version 1.8.5
  * gitlab CI: Add libtool to required packages
  * configure: raise minimum autoconf requirement to 2.70
  * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * gitlab CI: add workflow rules
  * nls: delete compose sequences that pointlessly mix upper and lower case
  * nls: remove four hundred and sixty untypable Greek compose sequences
  * nls: remove twenty two untypable Greek compose sequences
  * XSetScreenSaver.man: restore the part that was accidentally snipped
  * nls: make the Amharic compose sequences use the dead-vowel symbols
  * nls: sort three sequences alphabetically in their group, like all others
  * nls: delete six compose sequences that cannot be typed
  * nls: use a slash instead of a combining solidus in compose sequences
  * NLS: move long S compositions to respective blocks
  * NLS: implement the expansion of the six Breton N-graph keysyms
  * NLS: move dead-caron subscript compositions to the relevant Unicode block
  * NLS: Remove strange dead_cedilla cedi sign sequences
  * nls: add compose sequence for capital schwa, and delete a deviant one
- Users of the Amharic (am_ET.UTF-8) compose key sequences provided by libX11
  will also want to upgrade to xkeyboard-config 2.39 (releasing soon), in order
  to keep those sequeunces working with this release.</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="sndirsch@suse.com" date="1740225600">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="f90eafe9322eae3ddc7a3f87bfa1df93db845f4105c34a5fbb095e707d17c154a2a54afb960c087dbb7aa0021856fa32dd440857b76373e36d22793d6e9cc543" name="libX11-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.7" rel="slfo.1.1_2.1"/>
  <changelog author="sndirsch@suse.com" date="1670068800">- U_0001-Add-XFreeThreads-function.patch
  U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch
  * adding all patches since 1.8.2 release in order to try fixing
    regressions after introducing thread safety constructor with
    1.8.1 (boo#1205778, boo#1205818)
- supersedes U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
- re-enabled thread safe constructor</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- going back to version 1.7.5 for now to get rid of regressions,
  which were introduced by trying to get thread-safe in libX11
  itself
- re-introduced U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  which was not yet in 1.7.5
- supersedes the following patches
  * U_0001-Add-XFreeThreads-function.patch
  * U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  * U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  * U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1670241601">- Update to version 1.8.1
  This release fixes the --enable-thread-safety-constructor option to the
  configure script to work as intended.  In the previous release, the changes
  for this option may not have been enabled when the option was not specified
  or when the --enable option was specified.
  While we have enabled it by default, believing that doing so will reduce
  the number of bugs users encounter running libX11 clients, in some cases
  it may expose bugs in which clients had previously gotten away with calling
  libX11 functions while a libX11 lock is already held, and thus now deadlock,
  as discussed in https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/157
- let's hope this version doesn't suffer yet from the regressions
  reported in boo#1205778, boo#1205818 (reported against 1.8.2);
  we need libX11 thread safe for totem (GNOME 43) :-(</changelog>
  <changelog author="llyyr.public@gmail.com" date="1678363200">- Update to version 1.8.4
  This release fixes the regressions in previous 1.8.x related to the thread-
  - safety-constructor option. (boo#1209176)
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1685620800">- Update to version 1.8.5
  * gitlab CI: Add libtool to required packages
  * configure: raise minimum autoconf requirement to 2.70
  * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * gitlab CI: add workflow rules
  * nls: delete compose sequences that pointlessly mix upper and lower case
  * nls: remove four hundred and sixty untypable Greek compose sequences
  * nls: remove twenty two untypable Greek compose sequences
  * XSetScreenSaver.man: restore the part that was accidentally snipped
  * nls: make the Amharic compose sequences use the dead-vowel symbols
  * nls: sort three sequences alphabetically in their group, like all others
  * nls: delete six compose sequences that cannot be typed
  * nls: use a slash instead of a combining solidus in compose sequences
  * NLS: move long S compositions to respective blocks
  * NLS: implement the expansion of the six Breton N-graph keysyms
  * NLS: move dead-caron subscript compositions to the relevant Unicode block
  * NLS: Remove strange dead_cedilla cedi sign sequences
  * nls: add compose sequence for capital schwa, and delete a deviant one
- Users of the Amharic (am_ET.UTF-8) compose key sequences provided by libX11
  will also want to upgrade to xkeyboard-config 2.39 (releasing soon), in order
  to keep those sequeunces working with this release.</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="sndirsch@suse.com" date="1740225600">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="58be61a177bd29756f06d33a11781df1f9e305c1782830dfb95df7134f9c02f71ecdfda1b971b94997f30318da4d7e56b82c3b37750739f6b5d85f5e93a23c2d" name="libX11-xcb1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.7" rel="slfo.1.1_2.1"/>
  <changelog author="sndirsch@suse.com" date="1670068800">- U_0001-Add-XFreeThreads-function.patch
  U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch
  * adding all patches since 1.8.2 release in order to try fixing
    regressions after introducing thread safety constructor with
    1.8.1 (boo#1205778, boo#1205818)
- supersedes U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
- re-enabled thread safe constructor</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- going back to version 1.7.5 for now to get rid of regressions,
  which were introduced by trying to get thread-safe in libX11
  itself
- re-introduced U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  which was not yet in 1.7.5
- supersedes the following patches
  * U_0001-Add-XFreeThreads-function.patch
  * U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  * U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  * U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1670241601">- Update to version 1.8.1
  This release fixes the --enable-thread-safety-constructor option to the
  configure script to work as intended.  In the previous release, the changes
  for this option may not have been enabled when the option was not specified
  or when the --enable option was specified.
  While we have enabled it by default, believing that doing so will reduce
  the number of bugs users encounter running libX11 clients, in some cases
  it may expose bugs in which clients had previously gotten away with calling
  libX11 functions while a libX11 lock is already held, and thus now deadlock,
  as discussed in https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/157
- let's hope this version doesn't suffer yet from the regressions
  reported in boo#1205778, boo#1205818 (reported against 1.8.2);
  we need libX11 thread safe for totem (GNOME 43) :-(</changelog>
  <changelog author="llyyr.public@gmail.com" date="1678363200">- Update to version 1.8.4
  This release fixes the regressions in previous 1.8.x related to the thread-
  - safety-constructor option. (boo#1209176)
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1685620800">- Update to version 1.8.5
  * gitlab CI: Add libtool to required packages
  * configure: raise minimum autoconf requirement to 2.70
  * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * gitlab CI: add workflow rules
  * nls: delete compose sequences that pointlessly mix upper and lower case
  * nls: remove four hundred and sixty untypable Greek compose sequences
  * nls: remove twenty two untypable Greek compose sequences
  * XSetScreenSaver.man: restore the part that was accidentally snipped
  * nls: make the Amharic compose sequences use the dead-vowel symbols
  * nls: sort three sequences alphabetically in their group, like all others
  * nls: delete six compose sequences that cannot be typed
  * nls: use a slash instead of a combining solidus in compose sequences
  * NLS: move long S compositions to respective blocks
  * NLS: implement the expansion of the six Breton N-graph keysyms
  * NLS: move dead-caron subscript compositions to the relevant Unicode block
  * NLS: Remove strange dead_cedilla cedi sign sequences
  * nls: add compose sequence for capital schwa, and delete a deviant one
- Users of the Amharic (am_ET.UTF-8) compose key sequences provided by libX11
  will also want to upgrade to xkeyboard-config 2.39 (releasing soon), in order
  to keep those sequeunces working with this release.</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="sndirsch@suse.com" date="1740225600">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="5ac323a775f0e303ba19d3cd9577e3f5375848d33b27c3948f26a391dc1494cee72694b2dd7c31e010a02ce38b2b4624b761fb2a40b0912275efd95fb2489e9c" name="libXau-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.11" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@novell.com" date="1283601600">- libXau 1.0.6
  * This minor release includes a number of packaging updates
    accumulated over the last year, and a couple of documentation
    fixes.
- bumped version number to 7.5_1.0.6
- make use of %fdupes macro
- fixed Summary/Group entries in -devel package</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_1.0.6</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXau to libXau and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.0.7:
  + Improve the handling of "normal" locking collisions
  + Documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369828800">- Update to version 1.0.8:
  This maintenance release brings happiness by getting rid of things
  that make valgrind, clang, doclifter, automake, the GNOME build system,
  various other static analyzers, and obsessive developers be unhappy.
  Don't warn, be happy.</changelog>
  <changelog author="sndirsch@suse.com" date="1380542400">- U_0001-XauFileName-reset-bsize-when-malloc-failed.patch/
  U_0002-XauFileName-always-go-through-buf-allocation-if-buf-.patch
  * fixes regression in libXau 1.0.8, which resulted in a crash in
    Mozilla (bnc#831620,fdo#69929)</changelog>
  <changelog author="sndirsch@suse.com" date="1549886400">- Update to version 1.0.9:
  * Update configure.ac bug URL for gitlab migration
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish
  * XauFileName: always go through buf allocation if buf is NULL
  * XauFileName: reset bsize when malloc failed
  * AuDispose.c:remove redundant null check on calling free()
  * AuFileName.c: remove redundant null check on calling free()
  * AuRead.c: remove redundant null check on calling free()
  * Avoid out of boundary read access
- supersedes U_0001-XauFileName-reset-bsize-when-malloc-failed.patch,
  U_0002-XauFileName-always-go-through-buf-allocation-if-buf-.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1661601600">- Update to version 1.0.10
  * gitlab CI: add a basic build test
  * Fix spelling/wording issues
  * Autest.c: Fix -Wdiscarded-qualifiers warnings
  * Remove unnnecessary casts from malloc() and free() calls
  * XauReadAuth: move failure handling code to a common code block</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 1.0.11:
    configure: Use AC_SYS_LARGEFILE to enable large file support
- modernize spec file, install license into licensedir</changelog>
</package>
<package pkgid="1e28e42982cb494aaaada97c5b51573c2c6e1d5bb5ef73ebc8d849e7df926c5562a348548920ef024a06733c5a2d110eafb768b3f46d2512f14644a50cdebb0f" name="libXau6-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.11" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@novell.com" date="1283601600">- libXau 1.0.6
  * This minor release includes a number of packaging updates
    accumulated over the last year, and a couple of documentation
    fixes.
- bumped version number to 7.5_1.0.6
- make use of %fdupes macro
- fixed Summary/Group entries in -devel package</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_1.0.6</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXau to libXau and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.0.7:
  + Improve the handling of "normal" locking collisions
  + Documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369828800">- Update to version 1.0.8:
  This maintenance release brings happiness by getting rid of things
  that make valgrind, clang, doclifter, automake, the GNOME build system,
  various other static analyzers, and obsessive developers be unhappy.
  Don't warn, be happy.</changelog>
  <changelog author="sndirsch@suse.com" date="1380542400">- U_0001-XauFileName-reset-bsize-when-malloc-failed.patch/
  U_0002-XauFileName-always-go-through-buf-allocation-if-buf-.patch
  * fixes regression in libXau 1.0.8, which resulted in a crash in
    Mozilla (bnc#831620,fdo#69929)</changelog>
  <changelog author="sndirsch@suse.com" date="1549886400">- Update to version 1.0.9:
  * Update configure.ac bug URL for gitlab migration
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish
  * XauFileName: always go through buf allocation if buf is NULL
  * XauFileName: reset bsize when malloc failed
  * AuDispose.c:remove redundant null check on calling free()
  * AuFileName.c: remove redundant null check on calling free()
  * AuRead.c: remove redundant null check on calling free()
  * Avoid out of boundary read access
- supersedes U_0001-XauFileName-reset-bsize-when-malloc-failed.patch,
  U_0002-XauFileName-always-go-through-buf-allocation-if-buf-.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1661601600">- Update to version 1.0.10
  * gitlab CI: add a basic build test
  * Fix spelling/wording issues
  * Autest.c: Fix -Wdiscarded-qualifiers warnings
  * Remove unnnecessary casts from malloc() and free() calls
  * XauReadAuth: move failure handling code to a common code block</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 1.0.11:
    configure: Use AC_SYS_LARGEFILE to enable large file support
- modernize spec file, install license into licensedir</changelog>
</package>
<package pkgid="ae5ba86b9457a221db17b7d507069652cd41c5245dcfb8678c734f3ca4dca9010fd2969f00c717cb619ccf26c5f1dcd719229b6ba7d6c650a0d706c596b45461" name="libXcomposite-debugsource" arch="aarch64">
  <version epoch="0" ver="0.4.6" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Provide package descriptions and update URL</changelog>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1357473600">- Update to version 0.4.4:
  + This minor maintenance release cleans up the build configuration scripts,
    including making them compatible with automake-1.13, which errors out on
    the old AM_CONFIG_HEADER macro.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1552305600">- Update to version 0.4.5
  * autogen: add default patch prefix
  * autogen.sh: Implement GNOME Build API
  * autogen.sh: use exec instead of waiting for configure to finish
  * autogen.sh: use quoted string variables
  * configure: Remove AM_MAINTAINER_MODE
  * Use Xfree rather than XFree for consistency
  * Update configure.ac bug URL for gitlab migration
  * Update README for gitlab migration</changelog>
  <changelog author="sndirsch@suse.com" date="1559044800">- marked baselibs.conf as sourcefile in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1670155200">- Update to version 0.4.6
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Mark two dpy parameters const as suggested by cppcheck
  * Remove unnecessary casts from malloc() and free() calls
  * Wrap XComposite*CheckExtension() in do { ... } while(0)
  * Handle implicit conversion warnings from clang
  * XCompositeCloseDisplay: Mark codes as unused</changelog>
</package>
<package pkgid="547bbda91a3f329bc7c7b48c1baa2226ec289867c844afb1fe006774a745fdbb7b109ee75c866babe933ab2ca634042f1d8d396f69b43d9d0cb89e38804499ec" name="libXcomposite1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.4.6" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Provide package descriptions and update URL</changelog>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1357473600">- Update to version 0.4.4:
  + This minor maintenance release cleans up the build configuration scripts,
    including making them compatible with automake-1.13, which errors out on
    the old AM_CONFIG_HEADER macro.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1552305600">- Update to version 0.4.5
  * autogen: add default patch prefix
  * autogen.sh: Implement GNOME Build API
  * autogen.sh: use exec instead of waiting for configure to finish
  * autogen.sh: use quoted string variables
  * configure: Remove AM_MAINTAINER_MODE
  * Use Xfree rather than XFree for consistency
  * Update configure.ac bug URL for gitlab migration
  * Update README for gitlab migration</changelog>
  <changelog author="sndirsch@suse.com" date="1559044800">- marked baselibs.conf as sourcefile in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1670155200">- Update to version 0.4.6
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Mark two dpy parameters const as suggested by cppcheck
  * Remove unnecessary casts from malloc() and free() calls
  * Wrap XComposite*CheckExtension() in do { ... } while(0)
  * Handle implicit conversion warnings from clang
  * XCompositeCloseDisplay: Mark codes as unused</changelog>
</package>
<package pkgid="75b4f802b4cba2158d8f1d0ef0120bd2efe63ad476b5c966e0497bf59326e7142b978b35db66cf3a5e6e0d3cf9181f46f9fa3c7fb9e64ba4b0f912399d37a400" name="libXcursor-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Provide package descriptions and update homepage URL</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.1.13:
  + Make the version number reported in Xcursor.h match the one
    reported in xcursor.pc
  + Fix issues found by Parfait bug checking tool
  + Build system improvements
- Changes from version 1.1.12:
  + Fix leaks
  + Fix compiler warnings and issues found by clang
  + Build system improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.1.14:
  This release delivers the fix for security vulnerability CVE-2013-2003
  and makes the Makefile.am more compatible with future automake releases.</changelog>
  <changelog author="sndirsch@suse.com" date="1398686400">- added missing pkgconfig(xextproto)</changelog>
  <changelog author="sndirsch@suse.com" date="1511870400">-  U_Avoid-heap-overflows-due-to-integer-overflow-signedn.patch
  * It is possible to trigger heap overflows due to an integer
    overflow while parsing images and a signedness issue while
    parsing comments. [CVE-2017-16612] (bsc#1065386)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1512648000">- Update to version 1.1.15:
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use strdup() instead of malloc(strlen())+strcpy()
  * Fix some clang integer sign/size mismatch warnings
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish
  * Fix heap overflows when parsing malicious files. (CVE-2017-16612)
  * Insufficient memory for terminating null of string in _XcursorThemeInherits
- Drop U_Avoid-heap-overflows-due-to-integer-overflow-signedn.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1552305600">- Update to version 1.2.0
  * This release adds ~/.local/share/icons to the front of the
    default cursor path in the library in support of the XDG user
    data dir. This default can still be overridden at at run time
    using the XCURSOR_PATH environment variable.</changelog>
  <changelog author="sndirsch@suse.com" date="1648987200">- Update to version 1.2.1
  * This release provides bug fixes, code cleanups, and some
    significant documentation improvements.</changelog>
</package>
<package pkgid="4c343f3649d6cde2c3454ada8f4a6819ca587687f32f492dffbcdd46fa346c5dc016a58b889181b447dacbca0a753157e1cb9794c3a2b0322925c2daf00e3c4c" name="libXcursor1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Provide package descriptions and update homepage URL</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.1.13:
  + Make the version number reported in Xcursor.h match the one
    reported in xcursor.pc
  + Fix issues found by Parfait bug checking tool
  + Build system improvements
- Changes from version 1.1.12:
  + Fix leaks
  + Fix compiler warnings and issues found by clang
  + Build system improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.1.14:
  This release delivers the fix for security vulnerability CVE-2013-2003
  and makes the Makefile.am more compatible with future automake releases.</changelog>
  <changelog author="sndirsch@suse.com" date="1398686400">- added missing pkgconfig(xextproto)</changelog>
  <changelog author="sndirsch@suse.com" date="1511870400">-  U_Avoid-heap-overflows-due-to-integer-overflow-signedn.patch
  * It is possible to trigger heap overflows due to an integer
    overflow while parsing images and a signedness issue while
    parsing comments. [CVE-2017-16612] (bsc#1065386)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1512648000">- Update to version 1.1.15:
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use strdup() instead of malloc(strlen())+strcpy()
  * Fix some clang integer sign/size mismatch warnings
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish
  * Fix heap overflows when parsing malicious files. (CVE-2017-16612)
  * Insufficient memory for terminating null of string in _XcursorThemeInherits
- Drop U_Avoid-heap-overflows-due-to-integer-overflow-signedn.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1552305600">- Update to version 1.2.0
  * This release adds ~/.local/share/icons to the front of the
    default cursor path in the library in support of the XDG user
    data dir. This default can still be overridden at at run time
    using the XCURSOR_PATH environment variable.</changelog>
  <changelog author="sndirsch@suse.com" date="1648987200">- Update to version 1.2.1
  * This release provides bug fixes, code cleanups, and some
    significant documentation improvements.</changelog>
</package>
<package pkgid="aced54540177a33824bd797a58f2da6dc1d9a33acc97d378924e915ea7a6a45b940aac6268f7dd4e44a2f8193106b937d7518138c8b90f67bbd972b07c1237ba" name="libXdamage-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.6" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Provide package descriptions and update URL</changelog>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1357473600">- Update to version 1.1.4:
  + This minor maintenance release cleans up the build configuration scripts,
    including making them compatible with automake-1.13, which errors out on
    the old AM_CONFIG_HEADER macro.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="sndirsch@suse.com" date="1552305600">- Update to version 1.1.5:
  * autogen: add default patch prefix
  * autogen.sh: Implement GNOME Build API
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS
  * configure: Remove AM_MAINTAINER_MODE
  * Use Xfree rather than XFree for consistency
  * Update README for gitlab migration</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- Update to version 1.1.6
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Variable scope reduction as recommended by cppcheck
  * Mark two dpy parameters const as suggested by cppcheck
  * XDamageCloseDisplay: Mark codes as unused
  * Remove unnecessary casts from malloc() and free() calls
  * Handle -Wconversion warnings from clang
  * Handle -Wshorten-64-to-32 warnings from clang</changelog>
</package>
<package pkgid="3b51f5c9261e967d0ccea13ced9ee6e21a493dc2037c083c7b3441df202dac9887ee2f06f25346d261da9b181bf77adffd9bf81e5bb7324edf32ea81e4ac08c8" name="libXdamage1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.6" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Provide package descriptions and update URL</changelog>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1357473600">- Update to version 1.1.4:
  + This minor maintenance release cleans up the build configuration scripts,
    including making them compatible with automake-1.13, which errors out on
    the old AM_CONFIG_HEADER macro.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="sndirsch@suse.com" date="1552305600">- Update to version 1.1.5:
  * autogen: add default patch prefix
  * autogen.sh: Implement GNOME Build API
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS
  * configure: Remove AM_MAINTAINER_MODE
  * Use Xfree rather than XFree for consistency
  * Update README for gitlab migration</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- Update to version 1.1.6
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Variable scope reduction as recommended by cppcheck
  * Mark two dpy parameters const as suggested by cppcheck
  * XDamageCloseDisplay: Mark codes as unused
  * Remove unnecessary casts from malloc() and free() calls
  * Handle -Wconversion warnings from clang
  * Handle -Wshorten-64-to-32 warnings from clang</changelog>
</package>
<package pkgid="48f9fb6f0d4089f26422a9bf655b9fad1cbf1bf9e074501888ca296b82d5f2bd0b6ca1b1f080faf83a59296fd32b4322a9bc1b3d61419967095b3b8d1e692dc1" name="libXext-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.5" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_1.2.0</changelog>
  <changelog author="jengelh@medozas.de" date="1328356800">- Remove apparently unused (Build)Requires on Xdmcp, xtrans
- Remove redundant tags/sections like %clean
  (see specfile guidelines)
- Parallel build with %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXext to libXext and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.3.1:
  + Fixes for compiler warnings
  + Improvements to formattings for all the included extension API
    specs
  + Improvements to the documentation
- Changes from version 1.3.0:
  + New API functions to support the Fence Sync Objects added in
    Sync extension version 3.1
  + Redefine the return values of several MIT-SHM API calls from
    Status (#define Status int) to Bool (typedef int Bool) to
    clarify the expected interpretation of the return values
  + Fix build issues
  + Documentation improvements
  + Build system improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.3.2:
  This release provides fixes for the recently announced security issue
  CVE-2013-1982, as well as build configuration improvements, man page
  macro cleanups to work better with doclifter, and several other small
  fixes.</changelog>
  <changelog author="sndirsch@suse.com" date="1406203200">- Update to version 1.3.3
  * Time for a release before the accumulated patches are old
    enough to vote.  Two new requirements: libX11 1.6 and a C89
    preprocessor.</changelog>
  <changelog author="sndirsch@suse.com" date="1406203201">- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1553169600">- Update to version 1.3.3
  * autogen: add default patch prefix
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Update configure.ac bug URL for gitlab migration
  * Assert that values buffer has enough room for provided values
  * Fix typos in man pages
  * Use __builtin_popcountl if available to replace Ones() in XSecurity.c
  * Add description of libXext to README.md
  * XSecurityGenerateAuthorization: Allocate enough space in values buffer
  * Update README for gitlab migration</changelog>
  <changelog author="sndirsch@suse.com" date="1667044800">- Update to version 1.3.5
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Xge.c, Xge.h: convert from ISO-8859-1 to UTF-8
  * Add extutilP.h header for xgeExtRegister() prototype
  * Remove unnecessary casts of malloc/calloc results
  * Remove unnecessary (char *) casts from Xfree() arguments
  * Use calloc instead of malloc if we may not initialize all the bytes
  * Import reallocarray() from libX11
  * Convert calls to Xmalloc arrays to use Xmallocarray instead
  * configure: Use AC_USE_SYSTEM_EXTENSIONS to set GNU_SOURCE &amp; other defines
  * Remove "All rights reserved" from Oracle copyright notices.
  * COPYING: Add info for Xge.* and reallocarray.* files
  * add ACLOCAL_AMFLAGS = -I m4 to make aclocal pick ax_gcc_builtin.m4</changelog>
</package>
<package pkgid="6c6eb8460b006b4e5c8710946df3baae0d70db724d7a28e1b71d18a7e4a6cd4d40de832e884ff6724d11e023eabe924e014d5cdbb19ea226950b8010742703dc" name="libXext6-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.5" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_1.2.0</changelog>
  <changelog author="jengelh@medozas.de" date="1328356800">- Remove apparently unused (Build)Requires on Xdmcp, xtrans
- Remove redundant tags/sections like %clean
  (see specfile guidelines)
- Parallel build with %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXext to libXext and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.3.1:
  + Fixes for compiler warnings
  + Improvements to formattings for all the included extension API
    specs
  + Improvements to the documentation
- Changes from version 1.3.0:
  + New API functions to support the Fence Sync Objects added in
    Sync extension version 3.1
  + Redefine the return values of several MIT-SHM API calls from
    Status (#define Status int) to Bool (typedef int Bool) to
    clarify the expected interpretation of the return values
  + Fix build issues
  + Documentation improvements
  + Build system improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.3.2:
  This release provides fixes for the recently announced security issue
  CVE-2013-1982, as well as build configuration improvements, man page
  macro cleanups to work better with doclifter, and several other small
  fixes.</changelog>
  <changelog author="sndirsch@suse.com" date="1406203200">- Update to version 1.3.3
  * Time for a release before the accumulated patches are old
    enough to vote.  Two new requirements: libX11 1.6 and a C89
    preprocessor.</changelog>
  <changelog author="sndirsch@suse.com" date="1406203201">- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1553169600">- Update to version 1.3.3
  * autogen: add default patch prefix
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Update configure.ac bug URL for gitlab migration
  * Assert that values buffer has enough room for provided values
  * Fix typos in man pages
  * Use __builtin_popcountl if available to replace Ones() in XSecurity.c
  * Add description of libXext to README.md
  * XSecurityGenerateAuthorization: Allocate enough space in values buffer
  * Update README for gitlab migration</changelog>
  <changelog author="sndirsch@suse.com" date="1667044800">- Update to version 1.3.5
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Xge.c, Xge.h: convert from ISO-8859-1 to UTF-8
  * Add extutilP.h header for xgeExtRegister() prototype
  * Remove unnecessary casts of malloc/calloc results
  * Remove unnecessary (char *) casts from Xfree() arguments
  * Use calloc instead of malloc if we may not initialize all the bytes
  * Import reallocarray() from libX11
  * Convert calls to Xmalloc arrays to use Xmallocarray instead
  * configure: Use AC_USE_SYSTEM_EXTENSIONS to set GNU_SOURCE &amp; other defines
  * Remove "All rights reserved" from Oracle copyright notices.
  * COPYING: Add info for Xge.* and reallocarray.* files
  * add ACLOCAL_AMFLAGS = -I m4 to make aclocal pick ax_gcc_builtin.m4</changelog>
</package>
<package pkgid="2dc2bb08bb7f8e2714a7b867fc8f1e5d923fdf9488c0f891d1f3f24cc2e02bbda976ccabbaee5fff40db54bfa2143fcac61e77257ded25e869799592186d2af1" name="libXfixes-debugsource" arch="aarch64">
  <version epoch="0" ver="6.0.1" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369828800">- Update to version 5.0.1:
  This bug fix release includes the fix for the recently announced
  CVE-2013-1983, along with some other cleanups &amp; warning fixes.</changelog>
  <changelog author="sndirsch@suse.com" date="1464609600">- Update to version 5.0.2
  * Remove fallback for _XEatDataWords, require libX11 1.6 for it
- tagged baselibs.conf as source in specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 5.0.3:
  + fix Integer overflow on illegal server response</changelog>
  <changelog author="sndirsch@suse.com" date="1620820800">- Update to version 6.0.0
  * The big new feature here is support for the new
    ClientDisconnectMode. From the corresponding
    xorgproto announcement:
    An X server that is started on demand (Xwayland) should ideally
    also terminate when the last client disconnects. However, some
    X11 clients that provide system services will linger around
    forever, preventing that shutdown.
  * With the new XFixes request, a client can designate itself as
    to-be-terminated and the X server can ignore those clients when
    counting the number of remaining clients. If no other clients
    are left, the server can shut down.
  * Note that this requires changes to the X server and each
    client to work.</changelog>
  <changelog author="sndirsch@suse.com" date="1638360000">- update to version 6.0 is needed for GNOME41, particularly the
  gnome-settings-daemon's new feature to disconnect from Xwayland
  (JIRA #SLE-22829)</changelog>
  <changelog author="sndirsch@suse.com" date="1681128000">- Update to version 6.0.1
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Remove unnecessary casts from malloc &amp; free calls
  * Variable scope reduction as recommended by cppcheck
  * Mark two dpy parameters const as suggested by cppcheck
  * Quiet -Wconditional-uninitialized warnings from clang
  * Resolve 36 of 40 -Wextra-semi-stmt warnings from clang
  * Handle 63 of 63 -Wshorten-64-to-32 warnings from clang
  * Handle 60 of 60 -Wimplicit-int-conversion warnings from clang
  * Handle 6 of 9 -Wsign-conversion warnings from clang
  * XFixesCloseDisplay: Mark codes as unused
  * Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * Remove "All rights reserved" from Oracle copyright notices</changelog>
  <changelog author="dmueller@suse.com" date="1681387200">- add keyring validation
- modernize spec file. install license and documentation</changelog>
</package>
<package pkgid="a0592e26836fe817c35fa64b793695b1fbef40366f3e8af0e8cd984bc1bd5598aa04653344e2ba7c4646f232c82e4dd7f2bfd5cd1209d05a8505afaf168a129a" name="libXfixes3-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.0.1" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369828800">- Update to version 5.0.1:
  This bug fix release includes the fix for the recently announced
  CVE-2013-1983, along with some other cleanups &amp; warning fixes.</changelog>
  <changelog author="sndirsch@suse.com" date="1464609600">- Update to version 5.0.2
  * Remove fallback for _XEatDataWords, require libX11 1.6 for it
- tagged baselibs.conf as source in specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 5.0.3:
  + fix Integer overflow on illegal server response</changelog>
  <changelog author="sndirsch@suse.com" date="1620820800">- Update to version 6.0.0
  * The big new feature here is support for the new
    ClientDisconnectMode. From the corresponding
    xorgproto announcement:
    An X server that is started on demand (Xwayland) should ideally
    also terminate when the last client disconnects. However, some
    X11 clients that provide system services will linger around
    forever, preventing that shutdown.
  * With the new XFixes request, a client can designate itself as
    to-be-terminated and the X server can ignore those clients when
    counting the number of remaining clients. If no other clients
    are left, the server can shut down.
  * Note that this requires changes to the X server and each
    client to work.</changelog>
  <changelog author="sndirsch@suse.com" date="1638360000">- update to version 6.0 is needed for GNOME41, particularly the
  gnome-settings-daemon's new feature to disconnect from Xwayland
  (JIRA #SLE-22829)</changelog>
  <changelog author="sndirsch@suse.com" date="1681128000">- Update to version 6.0.1
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Remove unnecessary casts from malloc &amp; free calls
  * Variable scope reduction as recommended by cppcheck
  * Mark two dpy parameters const as suggested by cppcheck
  * Quiet -Wconditional-uninitialized warnings from clang
  * Resolve 36 of 40 -Wextra-semi-stmt warnings from clang
  * Handle 63 of 63 -Wshorten-64-to-32 warnings from clang
  * Handle 60 of 60 -Wimplicit-int-conversion warnings from clang
  * Handle 6 of 9 -Wsign-conversion warnings from clang
  * XFixesCloseDisplay: Mark codes as unused
  * Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * Remove "All rights reserved" from Oracle copyright notices</changelog>
  <changelog author="dmueller@suse.com" date="1681387200">- add keyring validation
- modernize spec file. install license and documentation</changelog>
</package>
<package pkgid="1e8ab00f95154e07e0218dea89eb80d5276c24cafb81bfb33e2a484cb775869130887b20844a1adb0ca974fab3cafb6556fbd78c21bf57ff5ee5a9d2d1b8cac7" name="libXft-debugsource" arch="aarch64">
  <version epoch="0" ver="2.3.8" rel="slfo.1.1_1.2"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1386763200">- Added U_use-recommended-freetype-include.patch -- Freetype upstream
  recommends using their macros together with ft2build include.
  Positive sideeffect is that this patch makes it build with both
  freetype2 2.5.1, and older version</changelog>
  <changelog author="sndirsch@suse.com" date="1402056000">- Update to version 2.3.2
  * This release fixes a build issue with FreeType 2.5.1 &amp; later,
    and fixes the prototypes in the man page for XftDrawString8 &amp;
    XftDrawRect.
  * supersedes U_use-recommended-freetype-include.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1431432000">- added baselibs.conf as source to specfile</changelog>
  <changelog author="mliska@suse.cz" date="1548158400">- Use make_build macro in order to get verbose output of make.</changelog>
  <changelog author="sndirsch@suse.com" date="1553169600">- Update to version 2.3.3
  * This release updates XftDrawSrcPicture to use XRenderCreateSolidFill
    when available (Render version 0.10 or later).</changelog>
  <changelog author="sndirsch@suse.com" date="1627905600">- Update to version 2.3.4
  * This release handles the deprecation of the
    FcNameRegisterObjectTypes API by fontconfig, and provides
    minor cleanups for compiler warnings and man pages.</changelog>
  <changelog author="sndirsch@suse.com" date="1662465600">- Update to version 2.3.5
  * bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1662811200">- Update to version 2.3.6
  * Fixes a regression in 2.3.5 for XftTextExtents* length-checks.</changelog>
  <changelog author="sndirsch@suse.com" date="1668600000">- Update to version 2.3.7
  * libxft issue #15
    https://gitlab.freedesktop.org/xorg/lib/libxft/-/issues/15
    XftFontLoadGlyphs for mono font returns wrong info in extents from
    XftTextExtentsUtf8 for variable chars
    Patch by Scott Mcdermott, based on
    https://github.com/googlefonts/Inconsolata/issues/42
  * fix compiler warning
  * libxft issue #16
    https://gitlab.freedesktop.org/xorg/lib/libxft/-/issues/16
    Stack gets smashed in fonts with colors when calling XftGlyphRender
    BGRA changes made incorrect comparison for local vs allocated
    buffer in XftGlyphSpecRender
  * stdint.h header is needed for SIZE_MAX</changelog>
  <changelog author="sndirsch@suse.com" date="1681819200">- Updat to version 2.3.8
  * configure: Use LT_INIT from libtool 2 instead of deprecated
    AC_PROG_LIBTOOL
  * add check for missing glyph in XftFontCheckGlyph()
  * issue 17: libxft-2.3.7: Bold fonts in urxvt missing leftmost pixels
  * issue 18: Problems with rotated text (monospace font only)</changelog>
</package>
<package pkgid="90af103d9aae518b226ea51bc18ac58734db1bbae258d399f4713d652819991c364d8115827cb2afaad2e1999a46e832b003c09a0de2469819ada847bf0e4ccf" name="libXft2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.3.8" rel="slfo.1.1_1.2"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1386763200">- Added U_use-recommended-freetype-include.patch -- Freetype upstream
  recommends using their macros together with ft2build include.
  Positive sideeffect is that this patch makes it build with both
  freetype2 2.5.1, and older version</changelog>
  <changelog author="sndirsch@suse.com" date="1402056000">- Update to version 2.3.2
  * This release fixes a build issue with FreeType 2.5.1 &amp; later,
    and fixes the prototypes in the man page for XftDrawString8 &amp;
    XftDrawRect.
  * supersedes U_use-recommended-freetype-include.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1431432000">- added baselibs.conf as source to specfile</changelog>
  <changelog author="mliska@suse.cz" date="1548158400">- Use make_build macro in order to get verbose output of make.</changelog>
  <changelog author="sndirsch@suse.com" date="1553169600">- Update to version 2.3.3
  * This release updates XftDrawSrcPicture to use XRenderCreateSolidFill
    when available (Render version 0.10 or later).</changelog>
  <changelog author="sndirsch@suse.com" date="1627905600">- Update to version 2.3.4
  * This release handles the deprecation of the
    FcNameRegisterObjectTypes API by fontconfig, and provides
    minor cleanups for compiler warnings and man pages.</changelog>
  <changelog author="sndirsch@suse.com" date="1662465600">- Update to version 2.3.5
  * bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1662811200">- Update to version 2.3.6
  * Fixes a regression in 2.3.5 for XftTextExtents* length-checks.</changelog>
  <changelog author="sndirsch@suse.com" date="1668600000">- Update to version 2.3.7
  * libxft issue #15
    https://gitlab.freedesktop.org/xorg/lib/libxft/-/issues/15
    XftFontLoadGlyphs for mono font returns wrong info in extents from
    XftTextExtentsUtf8 for variable chars
    Patch by Scott Mcdermott, based on
    https://github.com/googlefonts/Inconsolata/issues/42
  * fix compiler warning
  * libxft issue #16
    https://gitlab.freedesktop.org/xorg/lib/libxft/-/issues/16
    Stack gets smashed in fonts with colors when calling XftGlyphRender
    BGRA changes made incorrect comparison for local vs allocated
    buffer in XftGlyphSpecRender
  * stdint.h header is needed for SIZE_MAX</changelog>
  <changelog author="sndirsch@suse.com" date="1681819200">- Updat to version 2.3.8
  * configure: Use LT_INIT from libtool 2 instead of deprecated
    AC_PROG_LIBTOOL
  * add check for missing glyph in XftFontCheckGlyph()
  * issue 17: libxft-2.3.7: Bold fonts in urxvt missing leftmost pixels
  * issue 18: Problems with rotated text (monospace font only)</changelog>
</package>
<package pkgid="dec03a33b75c02e06f2a6463fb4d8a647230720fc5ed7c8c49736d8ff29abad0f856bd8f844602affa1150230a72e7c2e8003f2712b69c4fbe1bdfaef200c848" name="libXi-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="slfo.1.1_1.2"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
  <changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1450785600">- Update to version 1.7.6:
  One significant change here: libXi was using raw serial numbers in event
  cookies, the one read off the wire. All other events don't use that number
  but a Xlib-internal serial number which is similar but not always the same.
  This could cause events to look out of order. With this release, libXi is
  now using the same serial number for event cookies as it uses for all other
  events.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477656000">- Update to version 1.7.8:
  The changes of 1.7.7 are included.
  + Fix a crash introduced in the 1.7.7 release.
  + Properly validate server responses.</changelog>
  <changelog author="sndirsch@suse.com" date="1485172800">- Update to version 1.7.9:
  * Plug a memory leak
  * Check that allocating a buffer succeeded
  * Fix possible free of uninitialized pointer</changelog>
  <changelog author="sndirsch@suse.com" date="1561118400">- Update to version 1.7.10
  * Fix the FIXME in XIValuatorClass case of copy_classes function in XExtInt.c
  * _XIPassiveGrabDevice needs to set time value
  * Replace open-coded FP3232_TO_DOUBLE
  * autogen: add default patch prefix
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Update configure.ac bug URL for gitlab migration
  * Update README for gitlab migration
  * man: add a bunch of missing spaces
  * Update XIChangeHierarchy.txt</changelog>
  <changelog author="sndirsch@suse.com" date="1631707200">- Update to version 1.8
  * This release of libXi marks the support of XI 2.4 touchpad
    gesture events official. This feature is the only difference
    between libXi 1.8 and the latest release in the 1.7.x series
    (1.7.10).</changelog>
  <changelog author="sndirsch@suse.com" date="1683201600">- Update to version 1.8.1
  * Fix spelling/wording issues
  * gitlab CI: enable commit &amp; merge request checks
  * gitlab CI: enable gitlab's builtin static analysis
  * XInput_find_display: Don't dereference NULL dpyinfo
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * Initialize a few stack vars to zero</changelog>
</package>
<package pkgid="b786eb9091c5ab53417e4e3c0e831284c092dcba18c109a9abecb7e5c7b953319faf85fee78f0f8fc55ee7fd51466497f1386805ef3756a677dc81cc7d1837cb" name="libXi6-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="slfo.1.1_1.2"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
  <changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1450785600">- Update to version 1.7.6:
  One significant change here: libXi was using raw serial numbers in event
  cookies, the one read off the wire. All other events don't use that number
  but a Xlib-internal serial number which is similar but not always the same.
  This could cause events to look out of order. With this release, libXi is
  now using the same serial number for event cookies as it uses for all other
  events.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477656000">- Update to version 1.7.8:
  The changes of 1.7.7 are included.
  + Fix a crash introduced in the 1.7.7 release.
  + Properly validate server responses.</changelog>
  <changelog author="sndirsch@suse.com" date="1485172800">- Update to version 1.7.9:
  * Plug a memory leak
  * Check that allocating a buffer succeeded
  * Fix possible free of uninitialized pointer</changelog>
  <changelog author="sndirsch@suse.com" date="1561118400">- Update to version 1.7.10
  * Fix the FIXME in XIValuatorClass case of copy_classes function in XExtInt.c
  * _XIPassiveGrabDevice needs to set time value
  * Replace open-coded FP3232_TO_DOUBLE
  * autogen: add default patch prefix
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Update configure.ac bug URL for gitlab migration
  * Update README for gitlab migration
  * man: add a bunch of missing spaces
  * Update XIChangeHierarchy.txt</changelog>
  <changelog author="sndirsch@suse.com" date="1631707200">- Update to version 1.8
  * This release of libXi marks the support of XI 2.4 touchpad
    gesture events official. This feature is the only difference
    between libXi 1.8 and the latest release in the 1.7.x series
    (1.7.10).</changelog>
  <changelog author="sndirsch@suse.com" date="1683201600">- Update to version 1.8.1
  * Fix spelling/wording issues
  * gitlab CI: enable commit &amp; merge request checks
  * gitlab CI: enable gitlab's builtin static analysis
  * XInput_find_display: Don't dereference NULL dpyinfo
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * Initialize a few stack vars to zero</changelog>
</package>
<package pkgid="4dc58cd7996dc60fd275d081129fbcc5c60bf1817aa3714d7379c67fa6e61641401343b12e773e490b318776b1e96b1c18db9afdc321ce06e04ff0af58f1a78d" name="libXinerama-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.5" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.1.2:
  + Janitorial cleanups
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.1.3:
  This bug fix release primarily provides the fix for the recently announced
  security vulnerability CVE-2013-1985.</changelog>
  <changelog author="sndirsch@suse.com" date="1530878400">- Update to version 1.1.4
  * Contains some tiny bugfixes sitting in git unreleased for too long.</changelog>
  <changelog author="sndirsch@suse.com" date="1667044800">- Update to version 1.1.6
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * XineramaQueryScreens: fix -Wsign-compare warning
  * Remove "register" type qualifier from variable declarations</changelog>
</package>
<package pkgid="28f6b4f9d533f8925953a1ab899ab7f3ce0ada1a4c361f572ef05c385f9501e527fcfac0991c0366ddfe06723a6fde462b0dd72a816609cb109f2748c35ed0a1" name="libXinerama1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.5" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.1.2:
  + Janitorial cleanups
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.1.3:
  This bug fix release primarily provides the fix for the recently announced
  security vulnerability CVE-2013-1985.</changelog>
  <changelog author="sndirsch@suse.com" date="1530878400">- Update to version 1.1.4
  * Contains some tiny bugfixes sitting in git unreleased for too long.</changelog>
  <changelog author="sndirsch@suse.com" date="1667044800">- Update to version 1.1.6
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * XineramaQueryScreens: fix -Wsign-compare warning
  * Remove "register" type qualifier from variable declarations</changelog>
</package>
<package pkgid="8c24efe516fc210dc26a3b52289df77d5f33005125385e46ade005b41b1676a5271750f37bb7d72c239a383825badbaf7a0cc3e80428e92d249257e2d8ef5044" name="libXmu-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.4" rel="slfo.1.1_1.2"/>
  <changelog author="jslaby@suse.de" date="1291204800">- revert 'export only public API symbols'
  it breaks xclock, xterm and others</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXmu to libXmu and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.1.1:
  + Cleanups of code that causes compiler warnings
  + Improvements to the documentation
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="sndirsch@suse.com" date="1377777600">- added requires to xbitmaps/-devel packages (bnc#836530)</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.1.2:
  + Add missing copyright notices to COPYING file.
  + Preserve constness when casting const pointers in various
    functions.
  + Fix a const issue.
  + autogen.sh: Implement GNOME Build API.
  + configure: Remove AM_MAINTAINER_MODE.
  + Remove unused DECnet ("DNETCONN") code from
    XmuConvertStandardSelection.</changelog>
  <changelog author="sndirsch@suse.com" date="1553169600">- Update to version 1.1.3
  * This minor maintenance release includes some small bug fixes,
    build configuration improvements and janitorial cleanups.</changelog>
  <changelog author="sndirsch@suse.com" date="1666094400">- Update to version 1.1.4
  This release includes two notable changes to XmuConvertStandardSelection():
  1) It no longer supports XA_IP_ADDRESS, which only supported IPv4 addresses
  and simply provided the output of gethostbyname() on the local hostname.
  2) XA_OWNER_OS no longer reports "BSD" for any Unix-like OS (including Linux)
  that it hadn't been coded to handle, instead relying on uname() where
  available to provide the OS name.
  The lack of bug reports about the previously misleading output for these
  suggests they're not widely used, with codesearch.debian.net only finding
  matches in libXmu and the rust bindings to libXmu, and not any consumers
  of these interfaces.</changelog>
</package>
<package pkgid="41397e2ac053b5338108fd681415868407d3eaca5a6146cd1d0e3095168bbd8a260504531e8597e9a0ae13831ec5e5743214410dc0b66ccb6cb250a6207c0fd5" name="libXmuu1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.4" rel="slfo.1.1_1.2"/>
  <changelog author="jslaby@suse.de" date="1291204800">- revert 'export only public API symbols'
  it breaks xclock, xterm and others</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXmu to libXmu and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.1.1:
  + Cleanups of code that causes compiler warnings
  + Improvements to the documentation
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="sndirsch@suse.com" date="1377777600">- added requires to xbitmaps/-devel packages (bnc#836530)</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.1.2:
  + Add missing copyright notices to COPYING file.
  + Preserve constness when casting const pointers in various
    functions.
  + Fix a const issue.
  + autogen.sh: Implement GNOME Build API.
  + configure: Remove AM_MAINTAINER_MODE.
  + Remove unused DECnet ("DNETCONN") code from
    XmuConvertStandardSelection.</changelog>
  <changelog author="sndirsch@suse.com" date="1553169600">- Update to version 1.1.3
  * This minor maintenance release includes some small bug fixes,
    build configuration improvements and janitorial cleanups.</changelog>
  <changelog author="sndirsch@suse.com" date="1666094400">- Update to version 1.1.4
  This release includes two notable changes to XmuConvertStandardSelection():
  1) It no longer supports XA_IP_ADDRESS, which only supported IPv4 addresses
  and simply provided the output of gethostbyname() on the local hostname.
  2) XA_OWNER_OS no longer reports "BSD" for any Unix-like OS (including Linux)
  that it hadn't been coded to handle, instead relying on uname() where
  available to provide the OS name.
  The lack of bug reports about the previously misleading output for these
  suggests they're not widely used, with codesearch.debian.net only finding
  matches in libXmu and the rust bindings to libXmu, and not any consumers
  of these interfaces.</changelog>
</package>
<package pkgid="364b407cd5eaa9fd5a6981690e26d4f0b441f338105fabe0623d9ef2f9178579f05973005308087da487d68249833f4b4294b8ea8a1a5598ebe6dd4a13c644c3" name="libXrandr-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="slfo.1.1_1.2"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378641600">- Update to version 1.4.2:
  This release fixes two small bugs in the library, and fixes an omission
  in the list of copyright notices in the COPYING file.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1431864000">- Update to version 1.5.0:
  Add support for monitors and fixes requires on libX11.</changelog>
  <changelog author="sndirsch@suse.com" date="1431950400">- added baselibs.conf as source in specfile</changelog>
  <changelog author="fcrozat@suse.com" date="1450267200">- update BuildRequires to pkgconfig(randrproto) &gt;= 1.5</changelog>
  <changelog author="sndirsch@suse.com" date="1475755200">- Update to version 1.5.1
  * Avoid out of boundary accesses on illegal responses
    (bnc#1003000, CVE-2016-7947, CVE-2016-7948)
  * fix: doGetScreenResources() info: redundant null check on
    calling free()
  * fix: redundant null check on calling free()</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #320388, bnc#1003000, CVE-2016-7947, CVE-2016-7948 (bsc#1041366)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511352000">- Add U_libXrandr_fix-memory-leak.patch: Fix memory leak on error
  paths.
- Drop unneeded autoconf, automake and libtool BuildRequires and no
  longer pass autoreconf.</changelog>
  <changelog author="sndirsch@suse.com" date="1553256000">- Update to version 1.5.2
  * autogen: add default patch prefix
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Update configure.ac bug URL for gitlab migration
  * Fix memory leak on error paths
  * Add description of libXrandr to README.md
  * Update README for gitlab migration
- supersedes U_libXrandr_fix-memory-leak.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1668945600">- Update to version 1.5.3
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Xrandr.h: remove misleading comment for XRRGetScreenSizeRange()
  * XRRGetProviderInfo: Remove unneeded ProviderInfoExtra
  * Variable scope reductions as recommended by cppcheck
  * Remove unnecessary casts of return values from malloc()</changelog>
  <changelog author="sndirsch@suse.com" date="1696507200">- Update to version 1.5.4
  This release fixes a bug where an invalid pointer (a pointer to the
  middle of a buffer returned from malloc() instead of to the beginning
  of the buffer) could be passed to free() when cleaning up after an
  out-of-bounds output is found in the response from the X server to
  XRRGetMonitors().</changelog>
</package>
<package pkgid="bb1b9b54752e57c8476063bebfe85981595cb018cecb06ead864931be8e742b11a343d2074e4ff3004eaeba02343a337b4ce94076bbeea73e4d98dcf9d2b57cf" name="libXrandr2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="slfo.1.1_1.2"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378641600">- Update to version 1.4.2:
  This release fixes two small bugs in the library, and fixes an omission
  in the list of copyright notices in the COPYING file.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1431864000">- Update to version 1.5.0:
  Add support for monitors and fixes requires on libX11.</changelog>
  <changelog author="sndirsch@suse.com" date="1431950400">- added baselibs.conf as source in specfile</changelog>
  <changelog author="fcrozat@suse.com" date="1450267200">- update BuildRequires to pkgconfig(randrproto) &gt;= 1.5</changelog>
  <changelog author="sndirsch@suse.com" date="1475755200">- Update to version 1.5.1
  * Avoid out of boundary accesses on illegal responses
    (bnc#1003000, CVE-2016-7947, CVE-2016-7948)
  * fix: doGetScreenResources() info: redundant null check on
    calling free()
  * fix: redundant null check on calling free()</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #320388, bnc#1003000, CVE-2016-7947, CVE-2016-7948 (bsc#1041366)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511352000">- Add U_libXrandr_fix-memory-leak.patch: Fix memory leak on error
  paths.
- Drop unneeded autoconf, automake and libtool BuildRequires and no
  longer pass autoreconf.</changelog>
  <changelog author="sndirsch@suse.com" date="1553256000">- Update to version 1.5.2
  * autogen: add default patch prefix
  * autogen.sh: use quoted string variables
  * autogen.sh: use exec instead of waiting for configure to finish
  * Update configure.ac bug URL for gitlab migration
  * Fix memory leak on error paths
  * Add description of libXrandr to README.md
  * Update README for gitlab migration
- supersedes U_libXrandr_fix-memory-leak.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1668945600">- Update to version 1.5.3
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Xrandr.h: remove misleading comment for XRRGetScreenSizeRange()
  * XRRGetProviderInfo: Remove unneeded ProviderInfoExtra
  * Variable scope reductions as recommended by cppcheck
  * Remove unnecessary casts of return values from malloc()</changelog>
  <changelog author="sndirsch@suse.com" date="1696507200">- Update to version 1.5.4
  This release fixes a bug where an invalid pointer (a pointer to the
  middle of a buffer returned from malloc() instead of to the beginning
  of the buffer) could be passed to free() when cleaning up after an
  out-of-bounds output is found in the response from the X server to
  XRRGetMonitors().</changelog>
</package>
<package pkgid="c0da8fe28445078ee7f3f134d564fda0785369badf29a47d8e3894c061e3ea6334f0d5a482dad6e2253698e97b6228f0516d8ca4ccdd78cb9e255c4b4e02e885" name="libXrender-debugsource" arch="aarch64">
  <version epoch="0" ver="0.9.11" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@suse.de" date="1270382400">- libXrender 0.9.5
- obsoletes libXrender-commit-f6f784c.diff
- bumped version number to 7.5</changelog>
  <changelog author="sndirsch@novell.com" date="1283601600">- update to release 0.9.6
- bumped version number to 7.5_0.9.6
- fixed Summary/Group entries in -devel package</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_0.9.6</changelog>
  <changelog author="sndirsch@suse.com" date="1329480000">- fixed name of .changes (follows rename)</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 0.9.7:
  + Fix alpha premultiplication in XRenderParseColor
  + Compiler warning fixes
  + Documentation typo fixes
  + Build configuration fixes</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1371211200">- Update to version 0.9.8:
  This bugfix release delivers the fixes for the recently announced security
  issue CVE-2013-1987.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 0.9.9
  * Fix request length calculation for XRenderCompositeText32
  * Remove fallback for _XEatDataWords, require libX11 1.6 for it</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 0.9.10:
  + Fix documentation to explicitly mention premultiplied alpha
  + Avoid OOB write in XRenderQueryFilters
  + Validate lengths while parsing server data.</changelog>
  <changelog author="sndirsch@suse.com" date="1666440000">- Update to version 0.9.11
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Remove unnecessary casts from malloc &amp; free calls
  * Reduce variable scopes as recommended by cppcheck
  * Resolve -Wsign-compare warnings
  * Rename xDepth to xPDepth to quiet -Wshadow warnings
  * fix coredumps in XRenderComputeTrapezoids (issue #1)
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * WIP: Documentation
  * autogen.sh: use exec instead of waiting for configure to finish
  * Add missing HAVE_CONFIG_H guard to Xrenderint.h
  * amend cppcheck-scope change, fixing c89 build
  * additional cppcheck-scope warning
  * cppcheck (removing unused assignment lets variable scope reduction)
  * use casts to reduce compiler warnings (no object change)
  * use _Xconst with DataInt32/DataInt16/memcpy to reduce strict compiler warnings
  * use _X_UNUSED for compiler-warnings
  * whitespace fix
  * fix regression
  * fix coredumps in XRenderComputeTrapezoids (issue #1)
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * WIP: Documentation
  * autogen.sh: use exec instead of waiting for configure to finish
  * Add missing HAVE_CONFIG_H guard to Xrenderint.h
  * amend cppcheck-scope change, fixing c89 build
  * additional cppcheck-scope warning
  * cppcheck (removing unused assignment lets variable scope reduction)
  * use casts to reduce compiler warnings (no object change)
  * use _Xconst with DataInt32/DataInt16/memcpy to reduce strict compiler warnings
  * use _X_UNUSED for compiler-warnings
  * whitespace fix
  * fix regression</changelog>
</package>
<package pkgid="ae765b04423ced5d10175d11d801a1a3236dfba14970ae7c77adf71c85b5deb2d54de1a2a2ba137fb6279c6928f339d29ad3026e55191e2a0dc23cc707ab7ae4" name="libXrender1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.9.11" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@suse.de" date="1270382400">- libXrender 0.9.5
- obsoletes libXrender-commit-f6f784c.diff
- bumped version number to 7.5</changelog>
  <changelog author="sndirsch@novell.com" date="1283601600">- update to release 0.9.6
- bumped version number to 7.5_0.9.6
- fixed Summary/Group entries in -devel package</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_0.9.6</changelog>
  <changelog author="sndirsch@suse.com" date="1329480000">- fixed name of .changes (follows rename)</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 0.9.7:
  + Fix alpha premultiplication in XRenderParseColor
  + Compiler warning fixes
  + Documentation typo fixes
  + Build configuration fixes</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1371211200">- Update to version 0.9.8:
  This bugfix release delivers the fixes for the recently announced security
  issue CVE-2013-1987.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 0.9.9
  * Fix request length calculation for XRenderCompositeText32
  * Remove fallback for _XEatDataWords, require libX11 1.6 for it</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 0.9.10:
  + Fix documentation to explicitly mention premultiplied alpha
  + Avoid OOB write in XRenderQueryFilters
  + Validate lengths while parsing server data.</changelog>
  <changelog author="sndirsch@suse.com" date="1666440000">- Update to version 0.9.11
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Remove unnecessary casts from malloc &amp; free calls
  * Reduce variable scopes as recommended by cppcheck
  * Resolve -Wsign-compare warnings
  * Rename xDepth to xPDepth to quiet -Wshadow warnings
  * fix coredumps in XRenderComputeTrapezoids (issue #1)
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * WIP: Documentation
  * autogen.sh: use exec instead of waiting for configure to finish
  * Add missing HAVE_CONFIG_H guard to Xrenderint.h
  * amend cppcheck-scope change, fixing c89 build
  * additional cppcheck-scope warning
  * cppcheck (removing unused assignment lets variable scope reduction)
  * use casts to reduce compiler warnings (no object change)
  * use _Xconst with DataInt32/DataInt16/memcpy to reduce strict compiler warnings
  * use _X_UNUSED for compiler-warnings
  * whitespace fix
  * fix regression
  * fix coredumps in XRenderComputeTrapezoids (issue #1)
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * WIP: Documentation
  * autogen.sh: use exec instead of waiting for configure to finish
  * Add missing HAVE_CONFIG_H guard to Xrenderint.h
  * amend cppcheck-scope change, fixing c89 build
  * additional cppcheck-scope warning
  * cppcheck (removing unused assignment lets variable scope reduction)
  * use casts to reduce compiler warnings (no object change)
  * use _Xconst with DataInt32/DataInt16/memcpy to reduce strict compiler warnings
  * use _X_UNUSED for compiler-warnings
  * whitespace fix
  * fix regression</changelog>
</package>
<package pkgid="acde1ac8a4fb7d5a4f44b00c0818212e3a5c86d8ccb57df13866d33a14e2eaf2daceffc55c931309e9f5fefc0c9ada69428c09a8ae97586cf0ea181ef01bd61c" name="libXv-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.12" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Rename xorg-x11-libXv to libXv and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.0.7:
  + Janitorial cleanups
  + Man page fix
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.0.8:
  This release delivers the fixes for the recently announced security issues
  CVE-2013-1989 &amp; CVE-2013-2066, plus a couple build configuration changes
  and man page fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1371988800">- Update to version 1.0.9:
  This quick fix release corrects an issue with the security fix from 1.0.8,
  in which, if the size checks did determine the response from the X server
  was too large to fit in the buffer it had allocated, XvQueryPortAttributes
  could return a pointer to the caller that pointed to uninitialized memory
  where the caller expected a nil-terminated string.</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.10:
  + Remove fallback for _XEatDataWords, require libX11 1.6 for it.
  + Refactor error handling.
  + Add missing calls to _XEatDataWords when we are skipping
    _XRead.
  + Replace custom copy of GetReq macro with call to Xlib 1.5's
    _XGetRequest.
  + Require ANSI C89 pre-processor, drop pre-C89 token pasting
    support.
  + Use pad_to_int32 macro instead of repeated (x + 3) &amp; ~3
    pattern.
  + Fix sign conversion &amp; comparison warnings from clang.
  + Remove unnecessary casts from Xmalloc calls.
  + Adopt X.Org standard code style, with consistent indentation.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477656000">- Update to version 1.0.11:
  + Fix typo in dependencies for lint library
  + Protocol handling issues in libXv - CVE-2016-5407</changelog>
  <changelog author="sndirsch@suse.com" date="1478088000">- tagged baselibs.conf as source in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- Update to version 1.0.12:
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Build xz tarballs instead of bzip2
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * XvGetReq: remove trailing semicolon that caller is expected to provide
  * Variable scope reductions
  * Handle implicit conversion warnings from clang</changelog>
</package>
<package pkgid="bba80b68a37a112e01c9fbe729ba18ee9350b2f22838db04001e4c8d81a8e75df175dc7905d5e674b160dc6c54206f0be394049e2497d1e919d336cce100e74a" name="libXv1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.12" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Rename xorg-x11-libXv to libXv and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.0.7:
  + Janitorial cleanups
  + Man page fix
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.0.8:
  This release delivers the fixes for the recently announced security issues
  CVE-2013-1989 &amp; CVE-2013-2066, plus a couple build configuration changes
  and man page fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1371988800">- Update to version 1.0.9:
  This quick fix release corrects an issue with the security fix from 1.0.8,
  in which, if the size checks did determine the response from the X server
  was too large to fit in the buffer it had allocated, XvQueryPortAttributes
  could return a pointer to the caller that pointed to uninitialized memory
  where the caller expected a nil-terminated string.</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.10:
  + Remove fallback for _XEatDataWords, require libX11 1.6 for it.
  + Refactor error handling.
  + Add missing calls to _XEatDataWords when we are skipping
    _XRead.
  + Replace custom copy of GetReq macro with call to Xlib 1.5's
    _XGetRequest.
  + Require ANSI C89 pre-processor, drop pre-C89 token pasting
    support.
  + Use pad_to_int32 macro instead of repeated (x + 3) &amp; ~3
    pattern.
  + Fix sign conversion &amp; comparison warnings from clang.
  + Remove unnecessary casts from Xmalloc calls.
  + Adopt X.Org standard code style, with consistent indentation.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477656000">- Update to version 1.0.11:
  + Fix typo in dependencies for lint library
  + Protocol handling issues in libXv - CVE-2016-5407</changelog>
  <changelog author="sndirsch@suse.com" date="1478088000">- tagged baselibs.conf as source in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- Update to version 1.0.12:
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Build xz tarballs instead of bzip2
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * XvGetReq: remove trailing semicolon that caller is expected to provide
  * Variable scope reductions
  * Handle implicit conversion warnings from clang</changelog>
</package>
<package pkgid="473fdcd65470e50c4f95045c53630f0a9d4ab2d976b3d887788796c93a9e0d6c3342bd4e5c4e623a7918b3b8bac2bb7e093b36039b42bcac221267595ed04778" name="libXxf86vm-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.5" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Provide package descriptions and update homepage URL</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.1.2:
  + Janitorial cleanups
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.1.3:
  This release provides the fixes for the recently announced security issue
  CVE-2013-2001 along with a number of other fixes to the error handling
  code found while investigating that issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425816000">- Update to version 1.1.4:
  + Tell the compiler it's unlikely we're talking to an XFree86 3.x
    server.
  + Discard correct length for old-format replies in
    XF86VidModeGetGamma.
  + Remove fallback for _XEatDataWords, require libX11 1.6 for it.
  + Add XF86VidModeAddModeLine man page.
  + Fix a couple sign comparison warnings.
  + Require ANSI C89 pre-processor, drop pre-C89 token pasting
    support.
  + Enable parsing of C prototypes in the synopsis into prototype
    markup.
  + Eliminate use of .ta.</changelog>
  <changelog author="sndirsch@suse.com" date="1425902400">- added baselibs.conf as source to specfile in order to make
  factory checkin policy happy ...</changelog>
  <changelog author="sndirsch@suse.com" date="1664280000">- Update to version 1.1.5
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Fix -Wsign-compare warning
  * Variable scope reductions as suggested by cppcheck
  * Update GetOldReq to use _XGetRequest()
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish</changelog>
  <changelog author="dmueller@suse.com" date="1664452800">- modernize spec file, add license</changelog>
</package>
<package pkgid="2a340a16cdb45a62c2e4c8dbc378911b8a9025607776343d715e6133464e0b1283f7db9b5fca9dc34603c0e12e76ea2b887bbdcd1fe854c81da1f03bec456b75" name="libXxf86vm1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.5" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Provide package descriptions and update homepage URL</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.1.2:
  + Janitorial cleanups
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.1.3:
  This release provides the fixes for the recently announced security issue
  CVE-2013-2001 along with a number of other fixes to the error handling
  code found while investigating that issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425816000">- Update to version 1.1.4:
  + Tell the compiler it's unlikely we're talking to an XFree86 3.x
    server.
  + Discard correct length for old-format replies in
    XF86VidModeGetGamma.
  + Remove fallback for _XEatDataWords, require libX11 1.6 for it.
  + Add XF86VidModeAddModeLine man page.
  + Fix a couple sign comparison warnings.
  + Require ANSI C89 pre-processor, drop pre-C89 token pasting
    support.
  + Enable parsing of C prototypes in the synopsis into prototype
    markup.
  + Eliminate use of .ta.</changelog>
  <changelog author="sndirsch@suse.com" date="1425902400">- added baselibs.conf as source to specfile in order to make
  factory checkin policy happy ...</changelog>
  <changelog author="sndirsch@suse.com" date="1664280000">- Update to version 1.1.5
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Fix -Wsign-compare warning
  * Variable scope reductions as suggested by cppcheck
  * Update GetOldReq to use _XGetRequest()
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish</changelog>
  <changelog author="dmueller@suse.com" date="1664452800">- modernize spec file, add license</changelog>
</package>
<package pkgid="d2935240c6aeaa2e153cd2037f0be1c33ab76fffc83c4cf1e83e90ace29160ad38146267aecb878d693d5980ddb48e93eff16c3f46e923e5b9573e9be7c697a4" name="libacl1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.3.1" rel="slfo.1.1_1.3"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- BuildRequires gettext-tools-mini instead of gettext-tools: as
  acl is part of the bootstrap, we want to try to keep the dep
  chain as small as possible.</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- refresh acl-2.2.52-tests.patch to work with perl 5.26</changelog>
  <changelog author="jeffm@suse.com" date="1539259200">- Update to v2.2.53.
- Removed patches:
  * 0001-Install-the-libraries-to-the-appropriate-directory.patch
  * 0001-Use-OS-byteswapping-macros.patch
  * 0002-setfacl.1-fix-typo-inclu-de-include.patch
  * 0003-test-fix-insufficient-quoting-of.patch
  * 0004-Makefile-rename-configure.in-to-configure.ac.patch
  * 0005-Bad-markup-in-acl.5-page.patch
  * 0006-.gitignore-ignore-and-config.h.in.patch
  * 0007-Use-autoreconf-rather-than-autoconf-to-regenerate-th.patch
  * 0008-libacl-Make-sure-that-acl_from_text-always-sets-errn.patch
  * 0009-libacl-fix-SIGSEGV-of-getfacl-e-on-overly-long-group.patch
  * 0010-punt-debian-rpm-packaging-logic.patch
  * 0011-move-gettext-logic-into-misc.h.patch
  * 0012-test-make-running-parallel-out-of-tree-safe.patch
  * 0013-modernize-build-system.patch
  * 0014-po-regenerate-files-after-move.patch
  * 0015-build-drop-aclincludedir-use-pkgincludedir.patch
  * 0016-build-make-use-of-an-aux-dir-to-stow-away-helper-scr.patch
  * 0017-build-ship-a-pkgconfig-file-for-libacl.patch
  * 0018-read_acl_-comments-seq-rename-line-to-lineno.patch
  * 0019-read_acl_-comments-seq-switch-to-next_line.patch
  * 0020-telldir-return-value-and-seekdir-second-parameters-a.patch
  * 0021-mark-libmisc-funcs-as-hidden-so-they-are-not-exporte.patch
  * 0022-add-__acl_-prefixes-to-internal-symbols.patch
  * 0023-cp.test-Check-permissions-of-the-right-file.patch
  * 0024-libacl-acl_set_file-Remove-unnecesary-racy-check.patch
  * 0025-fix-compilation-with-latest-xattr-git.patch
  * 0026-getfacl-Fix-memory-leak.patch
  * 0027-Fix-the-display-block-nesting-in-acl.5.patch
  * 0028-setfacl-man-page-Minor-wording-improvements.patch
  * 0029-getfacl-Fix-minor-resource-leak.patch
  * 0030-Do-not-export-symbols-that-are-not-supposed-to-be-ex.patch
  * 0031-walk_tree-mark-internal-variables-as-static.patch
  * 0032-ignore-configure.lineno.patch
  * acl-2.2.52-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1541678400">- libacl-devel used to require libattr-devel, but that is no longer
  the case, packages that relied on this indirect dependency to
  be present were fixed years ago.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Update boilerplate descriptions for libacl-devel.
- Remove out-of-date comments for libattr.
- Remove old BuildRoot and %defattr tags.
- Move library into the standard library directory.</changelog>
  <changelog author="dmueller@suse.com" date="1598961600">- update url</changelog>
  <changelog author="dimstar@opensuse.org" date="1611662400">- Replace system-user-{bin,daemon} with user({bin,daemon}): be
  resilient to package name changes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1620820800">- Update to version 2.3.1
  * Update German translation
  * getfacl: fix indent in --help output
  * getfacl: Add --one-file-system option, with this option getfacl
    will not cross mount points
  * Fix segfault on allocation failure
  * Avoid SIGSEGV with link-time optimisation enabled
- Use SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- modernize spec-file (move license to licensedir)</changelog>
  <changelog author="mliska@suse.cz" date="1649419200">- Disable -D_FORTIFY_SOURCE=3 for now
  as explained here: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104964</changelog>
</package>
<package pkgid="87931ebb04df5350cd0de52cef693702d243a848e366317e65242c6c8e26fc14c461d439f00140c659e34dd8c15b82c7d8fd662eaef2ed083b7c079f8fdd7650" name="libaio-debugsource" arch="aarch64">
  <version epoch="0" ver="0.3.113" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1548936000">- riscv-support.patch: Add support for RISC-V</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133233).</changelog>
  <changelog author="tchvatal@suse.com" date="1564574400">- Update to 0.3.112:
  * Various patches for architectures/etc
- Update url
- Update install
- Enable tests
- Remove mostly merged patches or differently fixed issues:
  * libaio-aarch64-support.diff
  * libaio-generic-arch.diff
  * libaio-optflags.diff
  * 00_arches.patch
  * 00_arches_sh.patch
  * 01_link_libgcc.patch
  * 02_libdevdir.patch
  * 03_man_errors.patch
  * riscv-support.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566907200">-  Add _constraints for PowerPC to avoid OOM at build time</changelog>
  <changelog author="lduncan@suse.com" date="1613390400">- Update to version libaio0.3.112+29.696a5e6483ba:
  * Fix test issue with gcc-11 (bsc#1181869)
  * harness: Skip the test if io_pgetevents() is not implemented
  * harness: Print better error messages on error conditions in 22.t
  * harness: Fix PROT_WRITE mmap check
  * harness: fix read into PROT_WRITE mmap test
  * harness: skip 22.p if async_poll isn't supported
  * harness: Handle -ENOTSUP from io_submit() with RWF_NOWAIT
  * harness: Add fallback code for filesystems not supporting O_DIRECT
  * harness: add support for skipping tests
  * harness: Make the test exit with a code matching the pass/fail state</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 0.3.113:
  * cases/16.t: loongarch only supports eventfd2
  * Add loongarch to supported architectures in libaio.spec
  * Add endian detection and bit width detection for loongarch
  * Use generic syscall number schema for loongarch
  * Fix struct io_iocb_vector padding for 32bit architectures
  * struct io_iocb_sockaddr padding for 32bit architectures
  * Verify structure padding is correct at build time
  * harness: add test for aio poll missed events</changelog>
  <changelog author="dmueller@suse.com" date="1657627200">- add fix-splice-signature.patch to fix build on 32bit</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- skip testsuite on qemu_linux_user builds</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Make the package respect %optflags and disable LTO.</changelog>
</package>
<package pkgid="4fa9e23dadabb0ae3ab2f370b548a4ca8878228ddad745fb6d755101c88f249c5d7f5c3881110e9deec1c868499aad9c91904d6590b67f070b82a539016b872b" name="libaio1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.3.113" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1548936000">- riscv-support.patch: Add support for RISC-V</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133233).</changelog>
  <changelog author="tchvatal@suse.com" date="1564574400">- Update to 0.3.112:
  * Various patches for architectures/etc
- Update url
- Update install
- Enable tests
- Remove mostly merged patches or differently fixed issues:
  * libaio-aarch64-support.diff
  * libaio-generic-arch.diff
  * libaio-optflags.diff
  * 00_arches.patch
  * 00_arches_sh.patch
  * 01_link_libgcc.patch
  * 02_libdevdir.patch
  * 03_man_errors.patch
  * riscv-support.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566907200">-  Add _constraints for PowerPC to avoid OOM at build time</changelog>
  <changelog author="lduncan@suse.com" date="1613390400">- Update to version libaio0.3.112+29.696a5e6483ba:
  * Fix test issue with gcc-11 (bsc#1181869)
  * harness: Skip the test if io_pgetevents() is not implemented
  * harness: Print better error messages on error conditions in 22.t
  * harness: Fix PROT_WRITE mmap check
  * harness: fix read into PROT_WRITE mmap test
  * harness: skip 22.p if async_poll isn't supported
  * harness: Handle -ENOTSUP from io_submit() with RWF_NOWAIT
  * harness: Add fallback code for filesystems not supporting O_DIRECT
  * harness: add support for skipping tests
  * harness: Make the test exit with a code matching the pass/fail state</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 0.3.113:
  * cases/16.t: loongarch only supports eventfd2
  * Add loongarch to supported architectures in libaio.spec
  * Add endian detection and bit width detection for loongarch
  * Use generic syscall number schema for loongarch
  * Fix struct io_iocb_vector padding for 32bit architectures
  * struct io_iocb_sockaddr padding for 32bit architectures
  * Verify structure padding is correct at build time
  * harness: add test for aio poll missed events</changelog>
  <changelog author="dmueller@suse.com" date="1657627200">- add fix-splice-signature.patch to fix build on 32bit</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- skip testsuite on qemu_linux_user builds</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Make the package respect %optflags and disable LTO.</changelog>
</package>
<package pkgid="ce76a6c2ab17a43aa4b0acc9569f496e5bf20e789fc88700ee9c68fd9e5bc96a2c35ad0a06dda6e01aa881235ef526f7d3fe4b240fe583824c8332bf7b171d74" name="libalternatives-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2+30.a5431e9" rel="slfo.1.1_1.3"/>
  <changelog author="adam.majer@suse.de" date="1623240000">- Version v1.0.0:
  * Prefix symbols with libalts_ to avoid symbol clashes
  * Add symbol visibility and versioning
  * Decamelize public symbols and rename</changelog>
  <changelog author="adam.majer@suse.de" date="1624276800">- Update to version v1.1:
  * docs: Add broken manpage
  * tests: unit tests configs
  * tests: fix memory leak during tests
  * list_binaries: initialize pointer that is later used in free
  * libalts_exec_default() sets errno on not found</changelog>
  <changelog author="adam.majer@suse.de" date="1631534400">- Update to version v1.2:
  * Add config option=KeepArgv0 to keep original argument during
    exec() call</changelog>
  <changelog author="jengelh@inai.de" date="1631620800">- Use noun phrase for the summary; fix grammar in description.</changelog>
  <changelog author="adam.majer@suse.de" date="1631620801">- Update to version v1.2+3.b848aad:
  * tests: fix array overrun in unit tests</changelog>
  <changelog author="dmueller@suse.com" date="1668427200">- switch to a manual service rather than a buildtime tar service
  which introduces a bootstrap cycle between python and tar_scm</changelog>
  <changelog author="bogdan.lezhepekov@suse.com" date="1682424000">- Update to version v1.2+30.a5431e9: (bsc#1191692)
  * Change license to less restrictive Apache 2.0
  * doc: fixing a few typos
  * Adds option to display target executable only
  * Makefiles and cmake: rework for reproducible build
  * Improve Makefile
  * libalts_exec_default: fix memory leak on error condition
  * libalts_write_binary_configured_priority_to_file: fix memory leak
  * saveConfigData(): fix file descriptor leak in while loop error case
  * loadConfigData(): use goto exit label to prevent file descriptor leaks
  * libalts_load_available_binaries: use goto err: label to fix leaks
  * loadAlternativeForBinary: goto-assisted error handling to avoid leaks
  * checkGroupConsistencies(): explicitly ignore unused `flags`
  * lib: refactor error handling of findAltConfig()
  * utils: fix possible memory leaks on error conditions
  * docs: fix some typos and grammar
  * Update README.md
  * lib: generally open[at] with O_CLOEXEC
  * Fix logic in options parser
  * Add basic Makefile for buidling without cmake
  * Added description for options=KeepArgv0
  * cmake: Express the dependency on CUnit correctly for building tests
  * cmake: Build and install CMake and PkgConfig files
  * cmake: Fix setup of shared linker flags
  * config.h: Fix the version to match the current latest tag</changelog>
</package>
<package pkgid="d66235720722c39d789c985bfa175d135bc2dd1a53e272b4e3df083e32c090b9d8853c8393d84501c401021f59b1a994264701f97f319ed9db47975bf0ffb349" name="libalternatives1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2+30.a5431e9" rel="slfo.1.1_1.3"/>
  <changelog author="adam.majer@suse.de" date="1623240000">- Version v1.0.0:
  * Prefix symbols with libalts_ to avoid symbol clashes
  * Add symbol visibility and versioning
  * Decamelize public symbols and rename</changelog>
  <changelog author="adam.majer@suse.de" date="1624276800">- Update to version v1.1:
  * docs: Add broken manpage
  * tests: unit tests configs
  * tests: fix memory leak during tests
  * list_binaries: initialize pointer that is later used in free
  * libalts_exec_default() sets errno on not found</changelog>
  <changelog author="adam.majer@suse.de" date="1631534400">- Update to version v1.2:
  * Add config option=KeepArgv0 to keep original argument during
    exec() call</changelog>
  <changelog author="jengelh@inai.de" date="1631620800">- Use noun phrase for the summary; fix grammar in description.</changelog>
  <changelog author="adam.majer@suse.de" date="1631620801">- Update to version v1.2+3.b848aad:
  * tests: fix array overrun in unit tests</changelog>
  <changelog author="dmueller@suse.com" date="1668427200">- switch to a manual service rather than a buildtime tar service
  which introduces a bootstrap cycle between python and tar_scm</changelog>
  <changelog author="bogdan.lezhepekov@suse.com" date="1682424000">- Update to version v1.2+30.a5431e9: (bsc#1191692)
  * Change license to less restrictive Apache 2.0
  * doc: fixing a few typos
  * Adds option to display target executable only
  * Makefiles and cmake: rework for reproducible build
  * Improve Makefile
  * libalts_exec_default: fix memory leak on error condition
  * libalts_write_binary_configured_priority_to_file: fix memory leak
  * saveConfigData(): fix file descriptor leak in while loop error case
  * loadConfigData(): use goto exit label to prevent file descriptor leaks
  * libalts_load_available_binaries: use goto err: label to fix leaks
  * loadAlternativeForBinary: goto-assisted error handling to avoid leaks
  * checkGroupConsistencies(): explicitly ignore unused `flags`
  * lib: refactor error handling of findAltConfig()
  * utils: fix possible memory leaks on error conditions
  * docs: fix some typos and grammar
  * Update README.md
  * lib: generally open[at] with O_CLOEXEC
  * Fix logic in options parser
  * Add basic Makefile for buidling without cmake
  * Added description for options=KeepArgv0
  * cmake: Express the dependency on CUnit correctly for building tests
  * cmake: Build and install CMake and PkgConfig files
  * cmake: Fix setup of shared linker flags
  * config.h: Fix the version to match the current latest tag</changelog>
</package>
<package pkgid="fcefc6e1ea8f818f1e32be1a097013dcd7b3fcb003e30b13ab37ec363a83cc48b091edee3a6ddab7fd94bd4bc71613e412a990f14ce5ce8868b81fb72f2d4adf" name="libappindicator-debugsource" arch="aarch64">
  <version epoch="0" ver="12.10.1~bzr20200706.298" rel="slfo.1.1_1.2"/>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1596801600">- Provide RH used libappindicator-gtk3 symbol, so third party rpms
  like Slack won't complain about missing dependencies</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608465600">- Provide RH used libappindicator symbol, so third party rpms
  like Mailspring won't complain about missing dependencies</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1637409600">- Update to version 12.10.1~bzr20200706.298 (chages since
  12.10.1~bzr20170215.282):
  * Fix build failures.
  * Vendorise indicator-desktop-shortcuts (convenience wrapper
    around gdesktopappinfo) from the libindicator project, to drop
    the dependency on libindicator as none of the rest of it is
    used.
  * Don't build with -Werror.
  * Drop Python 2 bindings and GObject Introspection for GTK 2
    (lp#1740637).
  * app-indicator: Don't pass unexpected parameter to signal
    emissions (lp#1867996).
  * app-indicator: Only check for item numbers when iterating
    array (lp#1867996).
  * Fall back to tray icon when StatusNotifierHost is not
    available.
- Drop libappindicator-no-Werror.patch: fixed upstream.
- Drop only_require_python_for_gtk2.patch: no longer needed.
- Rebase xappstatusicon.patch.</changelog>
  <changelog author="bwiedemann@suse.com" date="1668254400">- Let the rpm provide libappindicator-gtk3 for EL8 compat</changelog>
</package>
<package pkgid="b59929e209cb047589cea1e12b38719df5d37a746b0dd7e51d3de879f7de7a08ce6e45b1fcb35a0df3bcba46eec7483b2ce6ff30457bdfe7e234fadbfd1451c0" name="libappindicator3-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="12.10.1~bzr20200706.298" rel="slfo.1.1_1.2"/>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1596801600">- Provide RH used libappindicator-gtk3 symbol, so third party rpms
  like Slack won't complain about missing dependencies</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608465600">- Provide RH used libappindicator symbol, so third party rpms
  like Mailspring won't complain about missing dependencies</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1637409600">- Update to version 12.10.1~bzr20200706.298 (chages since
  12.10.1~bzr20170215.282):
  * Fix build failures.
  * Vendorise indicator-desktop-shortcuts (convenience wrapper
    around gdesktopappinfo) from the libindicator project, to drop
    the dependency on libindicator as none of the rest of it is
    used.
  * Don't build with -Werror.
  * Drop Python 2 bindings and GObject Introspection for GTK 2
    (lp#1740637).
  * app-indicator: Don't pass unexpected parameter to signal
    emissions (lp#1867996).
  * app-indicator: Only check for item numbers when iterating
    array (lp#1867996).
  * Fall back to tray icon when StatusNotifierHost is not
    available.
- Drop libappindicator-no-Werror.patch: fixed upstream.
- Drop only_require_python_for_gtk2.patch: no longer needed.
- Rebase xappstatusicon.patch.</changelog>
  <changelog author="bwiedemann@suse.com" date="1668254400">- Let the rpm provide libappindicator-gtk3 for EL8 compat</changelog>
</package>
<package pkgid="d963d7f663620b9db53019fd653a18486f1b1c936149c980e41d7c70835a1ee3c7251756412090065e208746cd6ae1bbb0be108c214686ee21579d9359e2581a" name="libarchive-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.4" rel="slfo.1.1_3.1"/>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 3.6.2 (bsc#1205629, CVE-2022-36227)
  * NULL pointer dereference vulnerability in archive_write.c
  * include ZSTD in Windows builds (#1688)
  * SSL fixes on Windows (#1714, #1723, #1724)
  * rar5 reader: fix possible garbled output with bsdtar -O (#1745)
  * mtree reader: support reading mtree files with tabs (#1783)
  * various small fixes for issues found by CodeQL
- Drop upstream merged CVE-2022-36227.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1690200000">- update to 3.7.0
  * bsdunzip port from FreeBSD
  * fix 2 year 2038 issues</changelog>
  <changelog author="dmueller@suse.com" date="1694952000">- update to 3.7.2:
  * Multiple vulnerabilities have been fixed in the PAX writer
  * bsdunzip(1) now correctly handles arguments following an
  - x after the zipfile
  * zstd filter now supports the "long" write option
  * SEGV and stack buffer overflow in verbose mode of cpio
  * bsdunzip updated to match latest upstream code
  * miscellaneous functional bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1703851200">- skip write tests on 32bit, they OOM</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Update to 3.7.4:
  * rar: Fix OOB in rar e8 filter (CVE-2024-26256, bsc#1222911)
  * zip: Fix out of boundary access
  * 7zip: Limit amount of properties
  * bsdtar: Fix error handling around strtol() usages
  * passphrase: Improve newline handling on Windows
  * passphrase: Never allow empty passwords
  * rar: Fix "File CRC Error" when extracting specific rar4 archives
  * xar: Avoid infinite link loop
  * zip: Update AppleDouble support for directories
  * zstd: Implement core detection
- Update to 3.7.3:
  * PCRE2 support
  * add trailing letter b to bsdtar(1) substitute pattern
  * add support for long options "--group" and "--owner" to tar(1)
  * Fix possible vulnerability in tar error reporting introduced in f27c173
  * ISO9660: preserve the natural order of links
  * rar5: fix decoding unicode filenames on Windows
  * rar5: fix infinite loop if during rar5 decompression the last block produced no data
  * xz filter: fix incorrect eof at the end of an lzip member
  * zip: fix end-of-data marker processing when decompressing zip archives
  * multiple bsdunzip(1) fixes
  * filetime truncation fix on Windows
- Fix rpmlint warning about summary being too long</changelog>
  <changelog author="danilo.spinella@suse.com" date="1716379200">- Fix bsdunzip test failing due to a locale issue
  * fix-bsdunzip-test.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736942400">- Fix CVE-2024-48958, out-of-bounds access in execute_filter_delta
  (CVE-2024-48958, bsc#1231624)
  * CVE-2024-48958.patch
- Fix CVE-2024-20697 (also attributed CVE-2024-26256)
  (CVE-2024-20697, CVE-2024-26256, bsc#1225972)
  * CVE-2024-20697-2.patch
- Fix CVE-2024-48957, out-of-bounds access in execute_filter_audio
  (CVE-2024-48957, bsc#1231544)
  * CVE-2024-48957.patch
- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1741694400">- Fix CVE-2025-1632, null pointer dereference in bsdunzip.c
  (CVE-2025-1632, bsc#1237606)
  * CVE-2025-1632.patch
- Fix CVE-2025-25724, Buffer Overflow vulnerability in libarchive
  (CVE-2025-25724, bsc#1238610)
  * CVE-2025-25724.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1750680000">- Fix CVE-2025-5918, reading past EOF may be triggered for piped file streams
  (CVE-2025-5918, bsc#1244279)
  * CVE-2025-5918.patch
- Fix CVE-2025-5917, off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c
  (CVE-2025-5917, bsc#1244336)
  * CVE-2025-5917.patch
- Fix CVE-2025-5916, integer overflow while reading warc files at archive_read_support_format_warc.c
  (CVE-2025-5916, bsc#1244270)
  * CVE-2025-5916.patch
- Fix CVE-2025-5915, heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
  (CVE-2025-5915, bsc#1244273)
  * CVE-2025-5915.patch
- Fix CVE-2025-5914, double free due to an integer overflow in the archive_read_format_rar_seek_data() function
  (CVE-2025-5914, bsc#1244272)
  * CVE-2025-5914.patch</changelog>
</package>
<package pkgid="6e2b163fd753d6a81d748d7cd842c2a2cd5c991eec56e8ab8ebbf7d24f24fb82751175ef011258bbad680e1f8a369129eab932e1b667202116fa6bfee31f604b" name="libarchive13-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.4" rel="slfo.1.1_3.1"/>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 3.6.2 (bsc#1205629, CVE-2022-36227)
  * NULL pointer dereference vulnerability in archive_write.c
  * include ZSTD in Windows builds (#1688)
  * SSL fixes on Windows (#1714, #1723, #1724)
  * rar5 reader: fix possible garbled output with bsdtar -O (#1745)
  * mtree reader: support reading mtree files with tabs (#1783)
  * various small fixes for issues found by CodeQL
- Drop upstream merged CVE-2022-36227.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1690200000">- update to 3.7.0
  * bsdunzip port from FreeBSD
  * fix 2 year 2038 issues</changelog>
  <changelog author="dmueller@suse.com" date="1694952000">- update to 3.7.2:
  * Multiple vulnerabilities have been fixed in the PAX writer
  * bsdunzip(1) now correctly handles arguments following an
  - x after the zipfile
  * zstd filter now supports the "long" write option
  * SEGV and stack buffer overflow in verbose mode of cpio
  * bsdunzip updated to match latest upstream code
  * miscellaneous functional bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1703851200">- skip write tests on 32bit, they OOM</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Update to 3.7.4:
  * rar: Fix OOB in rar e8 filter (CVE-2024-26256, bsc#1222911)
  * zip: Fix out of boundary access
  * 7zip: Limit amount of properties
  * bsdtar: Fix error handling around strtol() usages
  * passphrase: Improve newline handling on Windows
  * passphrase: Never allow empty passwords
  * rar: Fix "File CRC Error" when extracting specific rar4 archives
  * xar: Avoid infinite link loop
  * zip: Update AppleDouble support for directories
  * zstd: Implement core detection
- Update to 3.7.3:
  * PCRE2 support
  * add trailing letter b to bsdtar(1) substitute pattern
  * add support for long options "--group" and "--owner" to tar(1)
  * Fix possible vulnerability in tar error reporting introduced in f27c173
  * ISO9660: preserve the natural order of links
  * rar5: fix decoding unicode filenames on Windows
  * rar5: fix infinite loop if during rar5 decompression the last block produced no data
  * xz filter: fix incorrect eof at the end of an lzip member
  * zip: fix end-of-data marker processing when decompressing zip archives
  * multiple bsdunzip(1) fixes
  * filetime truncation fix on Windows
- Fix rpmlint warning about summary being too long</changelog>
  <changelog author="danilo.spinella@suse.com" date="1716379200">- Fix bsdunzip test failing due to a locale issue
  * fix-bsdunzip-test.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736942400">- Fix CVE-2024-48958, out-of-bounds access in execute_filter_delta
  (CVE-2024-48958, bsc#1231624)
  * CVE-2024-48958.patch
- Fix CVE-2024-20697 (also attributed CVE-2024-26256)
  (CVE-2024-20697, CVE-2024-26256, bsc#1225972)
  * CVE-2024-20697-2.patch
- Fix CVE-2024-48957, out-of-bounds access in execute_filter_audio
  (CVE-2024-48957, bsc#1231544)
  * CVE-2024-48957.patch
- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1741694400">- Fix CVE-2025-1632, null pointer dereference in bsdunzip.c
  (CVE-2025-1632, bsc#1237606)
  * CVE-2025-1632.patch
- Fix CVE-2025-25724, Buffer Overflow vulnerability in libarchive
  (CVE-2025-25724, bsc#1238610)
  * CVE-2025-25724.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1750680000">- Fix CVE-2025-5918, reading past EOF may be triggered for piped file streams
  (CVE-2025-5918, bsc#1244279)
  * CVE-2025-5918.patch
- Fix CVE-2025-5917, off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c
  (CVE-2025-5917, bsc#1244336)
  * CVE-2025-5917.patch
- Fix CVE-2025-5916, integer overflow while reading warc files at archive_read_support_format_warc.c
  (CVE-2025-5916, bsc#1244270)
  * CVE-2025-5916.patch
- Fix CVE-2025-5915, heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
  (CVE-2025-5915, bsc#1244273)
  * CVE-2025-5915.patch
- Fix CVE-2025-5914, double free due to an integer overflow in the archive_read_format_rar_seek_data() function
  (CVE-2025-5914, bsc#1244272)
  * CVE-2025-5914.patch</changelog>
</package>
<package pkgid="706952f0b71209d39f49a93127117ebbb0dcff4d1ad41993566c54b9663fb3a6886879f25cc22b6c55ec27026596caaaf25fbbaae0fcdba871eeda07a43f69da" name="libargon2-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="20190702" rel="slfo.1.1_1.2"/>
  <changelog author="idonmez@suse.com" date="1482235200">- Initial release</changelog>
  <changelog author="hpj@urpla.net" date="1485604800">- make sure to call cc with -pthread option (implies -lpthread)
- run test suite</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- moved argon2-specs.pdf to doc subpackage
- added packaging of man page</changelog>
  <changelog author="meissner@suse.com" date="1492516800">- ship libargon2.pc (bsc#1034441)</changelog>
  <changelog author="lnussel@suse.de" date="1515499200">- Update to version 0.0+git20171227.670229c:
  * Added ABI version number
  * AVX2/AVX-512F optimizations of BLAMKA
  * Set Argon2 version number from the command line
  * New bindings
  * Minor bug and warning fixes (no security issue)
- use _service file</changelog>
  <changelog author="jengelh@inai.de" date="1515499201">- Update description.</changelog>
  <changelog author="lnussel@suse.de" date="1517313600">- add baselibs.conf as cryptsetup also has 32bit variants</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1589284800">- Update to version 0.0+git20190520.62358ba (boo#1170512):
  * Fix the Makefile to install libargon2.pc.
  * Wait for already running threads if a thread creation failed.
  * Added Argon2 Erlang binding.
  * Additional JVM bindings (Jargon2).</changelog>
  <changelog author="rpm@fthiessen.de" date="1650715200">- Fix version of package: 20171227 is the upstream version number
  of the package
- Replaced optflags.patch with adjust-makefile.patch, the
  patch will now also allow to set the file permissions of installed
  libraries. This fixes the rpmlint error: shared-library-not-executable</changelog>
  <changelog author="meissner@suse.com" date="1651060800">- use a source url</changelog>
</package>
<package pkgid="3579fbb874a263fe975b2a019e93679ee9991bb03844c3385ceb4b133e7c02781a1488c8b9c752fc30db066491328e85a79ded61935d6d49d55df1a8a4bfef5c" name="libasm1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.189" rel="slfo.1.1_1.5"/>
  <changelog author="mliska@suse.cz" date="1650974400">- Update to version 0.187:
  * debuginfod: Support -C option for connection thread pooling.
  * debuginfod-client: Negative cache file are now zero sized instead of
    no-permission files.
  * addr2line: The -A, --absolute option, which shows file names including
    the full compilation directory is now the default.  To get the
    old behavior use the new option --relative.
  * readelf, elflint: Recognize FDO Packaging Metadata ELF notes
  * libdw, debuginfo-client: Load libcurl lazily only when files need to
    be fetched remotely. libcurl is now never
    loaded when DEBUGINFOD_URLS is unset. And when
    DEBUGINFOD_URLS is set, libcurl is only loaded
    when the debuginfod_begin function is called.</changelog>
  <changelog author="mliska@suse.cz" date="1665748800">- Add RISC-V specific patches:
  * 0001-libelf-Sync-elf.h-from-glibc.patch
  * 0002-backends-Handle-new-RISC-V-specific-definitions.patch
  * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch
  * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch
  * 0005-backends-Add-RISC-V-object-attribute-printing.patch</changelog>
  <changelog author="mliska@suse.cz" date="1667822400">- Update to version 0.188:
  * readelf: Add -D, --use-dynamic option.
  * debuginfod-client: Add $DEBUGINFOD_HEADERS_FILE setting to supply
    outgoing debuginfod_find_section.
  * debuginfod: Add --disable-source-scan option.
  * libdwfl: Add new function dwfl_get_debuginfod_client.
    Add new function dwfl_frame_reg.
    Add new function dwfl_report_offline_memory.
- Remove upstreamed patches:
  * 0001-libelf-Sync-elf.h-from-glibc.patch
  * 0002-backends-Handle-new-RISC-V-specific-definitions.patch
  * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch
  * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch
  * PR29474-debuginfod.patch
  * config-Move-the-2-dev-null-inside-the-sh-c-quotes-fo.patch
  * support-nullglob-in-profile.-.in-files.patch</changelog>
  <changelog author="dmueller@suse.com" date="1667995200">- align patches section
- remove date/time handling weirdness, elfutils does no longer
  use __DATE__ or __TIME__ (as proven by the newly added -Werror=date-time)</changelog>
  <changelog author="mliska@suse.cz" date="1676376000">- Add support-DW_TAG_unspecified_type.patch that fixes PR30047.</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Fix build with libcurl version 7.88.0 for various deprecated
  constants. Add patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch</changelog>
  <changelog author="mliska@suse.cz" date="1677153600">- Disable a false-positive -Werror=use-after-free warning.</changelog>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="d8b30d6a9ecb59b20f0dc1e579355e720c6f0838d8da28984e3d862881ba015747019465d20bc1ed170db1f0c528b85d1cd24b88232b9cf63f1b90acd7e486f1" name="libasound2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.10" rel="slfo.1.1_1.2"/>
  <changelog author="tiwai@suse.com" date="1654516800">- Backport upstream fixes for 32bit inode and ELD parsing:
  0001-conf-Use-ino64_t-to-save-and-compare-inode-numbers.patch
  0002-control-eld-fix-the-decoding-for-older-hw.patch</changelog>
  <changelog author="tiwai@suse.com" date="1655726400">- Update to version 1.2.7.1: minor bug fixes, including the previous
  patches.  For details, see
    https://www.alsa-project.org/wiki/Changes_v1.2.7_v1.2.7.1#alsa-lib
- Drop obsoleted patches:
  0001-conf-Use-ino64_t-to-save-and-compare-inode-numbers.patch
  0002-control-eld-fix-the-decoding-for-older-hw.patch</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Update to version 1.2.7.2: minor updates, including fixes for PCM
  share plugin, rawmidi and UCM</changelog>
  <changelog author="tiwai@suse.com" date="1666699200">- Update to version 1.2.8 (jsc#PED-850):
  add FreeBSD/NetBD/OpenBSD build support, fixes in control namehint,
  various PCM plugins and UCM.  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.7.2_v1.2.8
- Add keyring</changelog>
  <changelog author="tiwai@suse.com" date="1683547200">- Update to version 1.2.9:
  * Versioned symbol updates
  * Various fixes for building on *BSD and Android
  * Fixes and enhancements of auto silencing and playback drain
  * Add SND_CTL_EINTR open mode at PCM
  * Avoid endless loop in snd_pcm_sw_params_default()
  * Fixes in PCM rate, route/softvol plugins
  * Fixes in topology API parser, cleanups
  * Enhancements in latency test program
  * Minor code cleanup and memory leak fixes in UCM API
  * emu10k1 config cleanup
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.8_v1.2.9#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1693828800">- Update to version 1.2.10 (jsc#PED-6566):
  * MIDI 2.0 feature support
  * build fixes for various platforms
  * various documentation fixes
  * misc topology fixes
  * ucm fixes and cleanups
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-lib
- Took upstream fix for possible build errors:
  0001-control.h-Fix-ump-header-file-detection.patch</changelog>
  <changelog author="tiwai@suse.com" date="1694260800">- Upstream fix backport:
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
- Upstream fix for PCM segfault regression (bsc#1215167):
  0003-pcm-Fix-segfault-with-32bit-libs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
</package>
<package pkgid="1f5c5e1c50d5ec6b17bb3fe7bfea3e0088771c254d95abf660572eab5c40559ec6c6dd868ee689ab3c65c2f255a48f853df2a0e2a41d8fb0d9a8ac71d21a53d9" name="libassuan-debugsource" arch="aarch64">
  <version epoch="0" ver="2.5.6" rel="slfo.1.1_1.2"/>
  <changelog author="astieger@suse.com" date="1511265600">- libassuan 2.4.4:
  * New configure option --disable-doc
  * Fix the use of nanosleep
  * Portability fix for systems not defining INADDR_LOOPBACK</changelog>
  <changelog author="astieger@suse.com" date="1512388800">- libassuan 2.4.5:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- libassuan 2.5.1:
  * New function to change the system hooks for the socket
    interface (assuan_sock_set_system_hooks)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544702400">-Update to 2.5.2:
  * configure.ac: Bump LT version to C8/A8/R2
  * include libassuan.pc in the spec file</changelog>
  <changelog author="schwab@suse.de" date="1545220800">- qemu-disable-fdpassing-test.patch: remove</changelog>
  <changelog author="kbabioch@suse.de" date="1549886400">- Update to 2.5.3:
  * Add a timeout for writing to a SOCKS5 proxy.
  * Add workaround for a problem with LD_LIBRARY_PATH on newer systems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603540800">- update to 2.5.4:
  * Fix some minor build annoyances</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 2.5.5:
  * Fix a crash in the logging code
  * Upgrade autoconf</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 2.5.6:
  * Fix logging of confidential data. [rA0fc31770fa]
  * Fix memory wiping. [T5977]
  * Fix macOS build problem. [T5440,T5610]
  * Upgrade autoconf stuff.
  * Release-info: https://dev.gnupg.org/T6542</changelog>
</package>
<package pkgid="9c427212bb5ed8eef79c419e490564276df1a798b8099e6cd27669cfb9401eb60a3e74351f4c794f71148e669d53f4dd2fe1cf2e6a3dd7b5139148f17a9b86a3" name="libassuan0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.5.6" rel="slfo.1.1_1.2"/>
  <changelog author="astieger@suse.com" date="1511265600">- libassuan 2.4.4:
  * New configure option --disable-doc
  * Fix the use of nanosleep
  * Portability fix for systems not defining INADDR_LOOPBACK</changelog>
  <changelog author="astieger@suse.com" date="1512388800">- libassuan 2.4.5:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- libassuan 2.5.1:
  * New function to change the system hooks for the socket
    interface (assuan_sock_set_system_hooks)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544702400">-Update to 2.5.2:
  * configure.ac: Bump LT version to C8/A8/R2
  * include libassuan.pc in the spec file</changelog>
  <changelog author="schwab@suse.de" date="1545220800">- qemu-disable-fdpassing-test.patch: remove</changelog>
  <changelog author="kbabioch@suse.de" date="1549886400">- Update to 2.5.3:
  * Add a timeout for writing to a SOCKS5 proxy.
  * Add workaround for a problem with LD_LIBRARY_PATH on newer systems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603540800">- update to 2.5.4:
  * Fix some minor build annoyances</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 2.5.5:
  * Fix a crash in the logging code
  * Upgrade autoconf</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 2.5.6:
  * Fix logging of confidential data. [rA0fc31770fa]
  * Fix memory wiping. [T5977]
  * Fix macOS build problem. [T5440,T5610]
  * Upgrade autoconf stuff.
  * Release-info: https://dev.gnupg.org/T6542</changelog>
</package>
<package pkgid="bdc5b73fe5829247ebbdc532c03d106cce88fb2a31cc3ad81efb41d05de25b9de6a46bdfe3c2601e090578e28152c8fd94fc6ad2e6321ffa0771aec1cdf840c9" name="libatasmart-debugsource" arch="aarch64">
  <version epoch="0" ver="0.19" rel="slfo.1.1_1.2"/>
  <changelog author="vuntz@opensuse.org" date="1252497600">- Update to version 0.14:
  + Get rid of qurik 9_UNKNOWN again
  + add missing 'else'
  + add another sunplus bridge to the list of supported sunplus
    bridges
  + look at lower 32 bit of current-pending-sector raw data only,
    similar to reallocated-sector-count
  + black list a few attributes on FUJITSU MHY2120BH/0085000B
  + rename SK_DISK_TYPE_ATA to SK_DISK_TYPE_LINUX_IDE
  + allow prefixing device strings with access methods
  + show full device string when dumping status
  + if the ID_ATA_SMART_ACCESS udev env var is set for a device
    read the access method from it
  + blacklist attribute 5 of an hitachi drive
  + verify parsing of all attributes
  + add MHY2250B/0085000B to quirk db
  + rename failed to bad
  + rework logic that determines verdict of drive
  + bump soname due to ABI change
  + add entries to database
  + fix parsing of power-on-minutes
  + highlight if smart status is bad
- Rename libatasmart0 to libatasmart4 because of soname change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1254484800">- Add libatasmart-jmicron.patch to fix issues with some bridges not
  working well. See rh#515881 for details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1258113600">- Update to version 0.17:
  + Add various blobs
  + Ignore attributes 5 and 190 on some Apple SSD
  + Check the right boolean when calculating blob size
  + Delay smart initialization until the first SMART call is done
- Changes from version 0.16:
  + Disable jmicron access mode for some more jmicron bridges
- Changes from version 0.15:
  + Support some ssd smart attrs
  + Add various blobs.
  + Blacklist 152d:2329 jmicron usb bridges
  + Add vala vapi files.
- Drop libatasmart-jmicron.patch: fixed upstream.</changelog>
  <changelog author="ro@suse.de" date="1268740800">- fix build by initializing member suffix_of in strpool.c</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="vuntz@opensuse.org" date="1321358400">- Update to version 0.18:
  + Add support for end-to-end-error, command-timeout,
    available-reserved-space, program-fail-count, erase-fail-count
    attributes.
  + Display endurance-remaining as percentage decreasing from 100
    to 0.
  + Show MB, GB or TB depending on the value.
  + Ignore sector count if it is -1.
  + Speed up get_overall() and get_bad().
  + Restrict the list of exported symbols to sk_.*
  + Use quirks for more Apple SSD firmware versions
  + Blacklist an Oxford Semiconductor bridge.
  + Add INTEL SSD 320 120GB blob and several quirks for Intel SSD
    G3 (Available Reserved Space, Media Wearout Indicator, Total
    LBAs Written, Timed Workload Media Wear, Timed Workload Host
    Reads, Workload Timer, etc.)
  + Several small bug fixes and other code changes.
  + Build system improvements.
- Drop libatasmart-initialize.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.19:
  + Add quirks for Intel SSD Serie 320
  + Add S.M.A.R.T attributes for Samsung SSD</changelog>
  <changelog author="perry.werneck@gmail.com" date="1461931200">- Adding "xz" as BuildRequires since it's not default on SLES11 and
  using a bigger description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Add libatasmart-0.19-wd-fix.patch: Fix issue with WD drives.
  Fixes fdo#61998.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578139200">- Modernize spec file
- Use pkgconfig(libudev) instead of libudev-devel, allows shortcut
  via systemd-mini package.</changelog>
</package>
<package pkgid="0b4ac18f3386c5353d52fba686398925d4485d4d33a111b20c24a7582dac4fccc58e4f7347506d1dc1653db75558ed43badaf535accd914db5d949d51b4f480d" name="libatasmart-utils-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.19" rel="slfo.1.1_1.2"/>
  <changelog author="vuntz@opensuse.org" date="1252497600">- Update to version 0.14:
  + Get rid of qurik 9_UNKNOWN again
  + add missing 'else'
  + add another sunplus bridge to the list of supported sunplus
    bridges
  + look at lower 32 bit of current-pending-sector raw data only,
    similar to reallocated-sector-count
  + black list a few attributes on FUJITSU MHY2120BH/0085000B
  + rename SK_DISK_TYPE_ATA to SK_DISK_TYPE_LINUX_IDE
  + allow prefixing device strings with access methods
  + show full device string when dumping status
  + if the ID_ATA_SMART_ACCESS udev env var is set for a device
    read the access method from it
  + blacklist attribute 5 of an hitachi drive
  + verify parsing of all attributes
  + add MHY2250B/0085000B to quirk db
  + rename failed to bad
  + rework logic that determines verdict of drive
  + bump soname due to ABI change
  + add entries to database
  + fix parsing of power-on-minutes
  + highlight if smart status is bad
- Rename libatasmart0 to libatasmart4 because of soname change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1254484800">- Add libatasmart-jmicron.patch to fix issues with some bridges not
  working well. See rh#515881 for details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1258113600">- Update to version 0.17:
  + Add various blobs
  + Ignore attributes 5 and 190 on some Apple SSD
  + Check the right boolean when calculating blob size
  + Delay smart initialization until the first SMART call is done
- Changes from version 0.16:
  + Disable jmicron access mode for some more jmicron bridges
- Changes from version 0.15:
  + Support some ssd smart attrs
  + Add various blobs.
  + Blacklist 152d:2329 jmicron usb bridges
  + Add vala vapi files.
- Drop libatasmart-jmicron.patch: fixed upstream.</changelog>
  <changelog author="ro@suse.de" date="1268740800">- fix build by initializing member suffix_of in strpool.c</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="vuntz@opensuse.org" date="1321358400">- Update to version 0.18:
  + Add support for end-to-end-error, command-timeout,
    available-reserved-space, program-fail-count, erase-fail-count
    attributes.
  + Display endurance-remaining as percentage decreasing from 100
    to 0.
  + Show MB, GB or TB depending on the value.
  + Ignore sector count if it is -1.
  + Speed up get_overall() and get_bad().
  + Restrict the list of exported symbols to sk_.*
  + Use quirks for more Apple SSD firmware versions
  + Blacklist an Oxford Semiconductor bridge.
  + Add INTEL SSD 320 120GB blob and several quirks for Intel SSD
    G3 (Available Reserved Space, Media Wearout Indicator, Total
    LBAs Written, Timed Workload Media Wear, Timed Workload Host
    Reads, Workload Timer, etc.)
  + Several small bug fixes and other code changes.
  + Build system improvements.
- Drop libatasmart-initialize.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.19:
  + Add quirks for Intel SSD Serie 320
  + Add S.M.A.R.T attributes for Samsung SSD</changelog>
  <changelog author="perry.werneck@gmail.com" date="1461931200">- Adding "xz" as BuildRequires since it's not default on SLES11 and
  using a bigger description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Add libatasmart-0.19-wd-fix.patch: Fix issue with WD drives.
  Fixes fdo#61998.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578139200">- Modernize spec file
- Use pkgconfig(libudev) instead of libudev-devel, allows shortcut
  via systemd-mini package.</changelog>
</package>
<package pkgid="8ea28646292d91a5366d3342760b5ffbf2df8af37b073dc73a7f44819fc44d42b47d814e4f12e2a61b566a42d4b76028902188f06aeb8101b18ad839cf42f9d0" name="libatasmart4-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.19" rel="slfo.1.1_1.2"/>
  <changelog author="vuntz@opensuse.org" date="1252497600">- Update to version 0.14:
  + Get rid of qurik 9_UNKNOWN again
  + add missing 'else'
  + add another sunplus bridge to the list of supported sunplus
    bridges
  + look at lower 32 bit of current-pending-sector raw data only,
    similar to reallocated-sector-count
  + black list a few attributes on FUJITSU MHY2120BH/0085000B
  + rename SK_DISK_TYPE_ATA to SK_DISK_TYPE_LINUX_IDE
  + allow prefixing device strings with access methods
  + show full device string when dumping status
  + if the ID_ATA_SMART_ACCESS udev env var is set for a device
    read the access method from it
  + blacklist attribute 5 of an hitachi drive
  + verify parsing of all attributes
  + add MHY2250B/0085000B to quirk db
  + rename failed to bad
  + rework logic that determines verdict of drive
  + bump soname due to ABI change
  + add entries to database
  + fix parsing of power-on-minutes
  + highlight if smart status is bad
- Rename libatasmart0 to libatasmart4 because of soname change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1254484800">- Add libatasmart-jmicron.patch to fix issues with some bridges not
  working well. See rh#515881 for details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1258113600">- Update to version 0.17:
  + Add various blobs
  + Ignore attributes 5 and 190 on some Apple SSD
  + Check the right boolean when calculating blob size
  + Delay smart initialization until the first SMART call is done
- Changes from version 0.16:
  + Disable jmicron access mode for some more jmicron bridges
- Changes from version 0.15:
  + Support some ssd smart attrs
  + Add various blobs.
  + Blacklist 152d:2329 jmicron usb bridges
  + Add vala vapi files.
- Drop libatasmart-jmicron.patch: fixed upstream.</changelog>
  <changelog author="ro@suse.de" date="1268740800">- fix build by initializing member suffix_of in strpool.c</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="vuntz@opensuse.org" date="1321358400">- Update to version 0.18:
  + Add support for end-to-end-error, command-timeout,
    available-reserved-space, program-fail-count, erase-fail-count
    attributes.
  + Display endurance-remaining as percentage decreasing from 100
    to 0.
  + Show MB, GB or TB depending on the value.
  + Ignore sector count if it is -1.
  + Speed up get_overall() and get_bad().
  + Restrict the list of exported symbols to sk_.*
  + Use quirks for more Apple SSD firmware versions
  + Blacklist an Oxford Semiconductor bridge.
  + Add INTEL SSD 320 120GB blob and several quirks for Intel SSD
    G3 (Available Reserved Space, Media Wearout Indicator, Total
    LBAs Written, Timed Workload Media Wear, Timed Workload Host
    Reads, Workload Timer, etc.)
  + Several small bug fixes and other code changes.
  + Build system improvements.
- Drop libatasmart-initialize.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.19:
  + Add quirks for Intel SSD Serie 320
  + Add S.M.A.R.T attributes for Samsung SSD</changelog>
  <changelog author="perry.werneck@gmail.com" date="1461931200">- Adding "xz" as BuildRequires since it's not default on SLES11 and
  using a bigger description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Add libatasmart-0.19-wd-fix.patch: Fix issue with WD drives.
  Fixes fdo#61998.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578139200">- Modernize spec file
- Use pkgconfig(libudev) instead of libudev-devel, allows shortcut
  via systemd-mini package.</changelog>
</package>
<package pkgid="5274627e4389fed4b186bc771deb2ea781547fe0b439897ebc577769fdfe69f1c3060c423be95aae3f7be1de889edc577e0b660c6ed62655020ec57673577c46" name="libatk-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.50.0" rel="slfo.1.1_1.2"/>
  <changelog author="mgorse@suse.com" date="1683806400">- Update to version 2.48.2:
  + Fixed a regression in 2.48.1 where the bus launcher would fail
    if dbus-broker was configured at build time but not installed
    on the system.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685275200">- Update to version 2.48.3:
  + Fix the build when dbus-broker is not set to be used by
    default.
  + Fix a couple of use after frees when finalizing devices.
  + atk-adaptor: Fix handling of sockets in impl_GetChildren.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689681600">- Update to version 2.49.1:
  + TableCell.xml: Add Get{Column,Row}HeaderCells methods.
  + atspi_accessible_get_localized_role_name: Use internal names
    when possible.
  + Add a non-recursive function to clear a single object's cache.
  + Code clean-ups.</changelog>
  <changelog author="yfjiang@suse.com" date="1691064000">- Support build environments like SLE 15 SP5 and Leap 15.5 which
  had %{_distconfdir) not defined yet.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.48.4:
  + Add atspi_get_version() to return the runtime version of the
    AT-SPI library.
  + collection:
  - Fix match testing for attributes.
  - Avoid locking up if an object has a very large child count.
  + Fix possible NULL pointer dereference when deregistering an
    event listener.
  + Various fixes for the new key grabbing API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.49.90:
  + Fix a test failure/timeout.
  + Add atspi_get_version() to return the runtime version of the
    library.
  + Collection: fix match testing for attributes.
  + Fix a NULL pointer dereference when deregistering an event
    listener that doesn't include a detail.
  + Fix the documentation for interfaces in collection match rules.
  + Add an AtspiLive enum to specify the politeness level for live
    regions, and document that this should be used for Announcement
    signals. Also add a notification signal in atk to replace the
    announcement signal that lacks the politeness information.
  + Add an asynchronous version of atspi_generate_mouse_event.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.49.91:
  + collection: Avoid locking up if an object has a very large
    child count.
  + Fix possible NULL pointer dereference when deregistering an
    event listener.
  + Various fixes for the new key grabbing API.
  + Don't wait for a reply when registering or deregistering
    keystroke listeners.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.50.0:
  + Fix at-spi2-atk test when running under a non-English locale.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695038400">- Adjust %fdupes parameter value to %{buildroot}%{_datadir}, one of
  the parent directories of the former parameter, to symlink other
  duplicate files under the datadir.</changelog>
  <changelog author="yfjiang@suse.com" date="1705233600">- Provide and obsolete more packages from old atk and at-spi2-atk:
  atk-devel, at-spi2-atk-devel and at-spi2-atk-common.</changelog>
</package>
<package pkgid="a694618055653f9a913a3d7ae77ebd85a8ca1f31dcfc1fc2c2a0ac87a825594be1af75a0d7f0b2c10c90aaf221e31bd6ff4d1ad76533db602569d3c74e51c929" name="libatk-bridge-2_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.50.0" rel="slfo.1.1_1.2"/>
  <changelog author="mgorse@suse.com" date="1683806400">- Update to version 2.48.2:
  + Fixed a regression in 2.48.1 where the bus launcher would fail
    if dbus-broker was configured at build time but not installed
    on the system.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685275200">- Update to version 2.48.3:
  + Fix the build when dbus-broker is not set to be used by
    default.
  + Fix a couple of use after frees when finalizing devices.
  + atk-adaptor: Fix handling of sockets in impl_GetChildren.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689681600">- Update to version 2.49.1:
  + TableCell.xml: Add Get{Column,Row}HeaderCells methods.
  + atspi_accessible_get_localized_role_name: Use internal names
    when possible.
  + Add a non-recursive function to clear a single object's cache.
  + Code clean-ups.</changelog>
  <changelog author="yfjiang@suse.com" date="1691064000">- Support build environments like SLE 15 SP5 and Leap 15.5 which
  had %{_distconfdir) not defined yet.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.48.4:
  + Add atspi_get_version() to return the runtime version of the
    AT-SPI library.
  + collection:
  - Fix match testing for attributes.
  - Avoid locking up if an object has a very large child count.
  + Fix possible NULL pointer dereference when deregistering an
    event listener.
  + Various fixes for the new key grabbing API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.49.90:
  + Fix a test failure/timeout.
  + Add atspi_get_version() to return the runtime version of the
    library.
  + Collection: fix match testing for attributes.
  + Fix a NULL pointer dereference when deregistering an event
    listener that doesn't include a detail.
  + Fix the documentation for interfaces in collection match rules.
  + Add an AtspiLive enum to specify the politeness level for live
    regions, and document that this should be used for Announcement
    signals. Also add a notification signal in atk to replace the
    announcement signal that lacks the politeness information.
  + Add an asynchronous version of atspi_generate_mouse_event.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.49.91:
  + collection: Avoid locking up if an object has a very large
    child count.
  + Fix possible NULL pointer dereference when deregistering an
    event listener.
  + Various fixes for the new key grabbing API.
  + Don't wait for a reply when registering or deregistering
    keystroke listeners.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.50.0:
  + Fix at-spi2-atk test when running under a non-English locale.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695038400">- Adjust %fdupes parameter value to %{buildroot}%{_datadir}, one of
  the parent directories of the former parameter, to symlink other
  duplicate files under the datadir.</changelog>
  <changelog author="yfjiang@suse.com" date="1705233600">- Provide and obsolete more packages from old atk and at-spi2-atk:
  atk-devel, at-spi2-atk-devel and at-spi2-atk-common.</changelog>
</package>
<package pkgid="5e82e8e41495f6e5f44f2dc80a5f2af3fc4e7eff12506521d55bc9109fd026445af94627ed01bb3a19402bf0b4a3189602cde3e3d1ce726be9d02f6c6a1130a0" name="libatm1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@novell.com" date="1288699200">- fix requires after rename</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="aj@ajaissle.de" date="1390478400">- Cleanup spec file, remove %clean section
- Updated to 2.5.2
- Removed linux-atm-2.5.0.diff (in mainline)
- Removed linux-atm-2.5.0-include.patch (in mainline)
- Rebased linux-atm-2.5.0-fdleak.patch as linux-atm-2.5.2_fdleak.patch
- Added linux-atm-2.5.2_implicit-fortify-decl.patch to fix implicit declarations</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- linux-atm-2.5.2-fix-header-conflict.patch: avoid conflict with kernel
  headers</changelog>
  <changelog author="jslaby@suse.com" date="1547035200">- add linux-atm-2.5.2-remove-headers-crude-hack.patch
- switch from %doc to %license for licenses</changelog>
  <changelog author="jslaby@suse.com" date="1562846400">- add fix-build-after-y2038-changes-in-glibc.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1575633600">- Modernise spec file a bit:
  * Move licnse to library package
  * Use more of new macros for building</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Use %_firmwaredir</changelog>
</package>
<package pkgid="14c00d21f3a03edd37b0efe7792552eec3ea6777984aeb6f8adef4e93a8d060bf339041f0819c90f03bb2dc5f519fa406c467450e2c6f236ce0937cb4f59daca" name="libatomic1-debuginfo" arch="aarch64">
  <version epoch="0" ver="14.3.0+git11799" rel="slfo.1.1_1.1"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="e5c85f34abb5e1941ba6999fe1be7ff045e2c7774ba037f09f7de6ae765ab6de0684e1ef2c37de7712fcca0d74f4658f750a33fdd6a4b1fe7597e6701909d4ad" name="libatspi0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.50.0" rel="slfo.1.1_1.2"/>
  <changelog author="mgorse@suse.com" date="1683806400">- Update to version 2.48.2:
  + Fixed a regression in 2.48.1 where the bus launcher would fail
    if dbus-broker was configured at build time but not installed
    on the system.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685275200">- Update to version 2.48.3:
  + Fix the build when dbus-broker is not set to be used by
    default.
  + Fix a couple of use after frees when finalizing devices.
  + atk-adaptor: Fix handling of sockets in impl_GetChildren.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689681600">- Update to version 2.49.1:
  + TableCell.xml: Add Get{Column,Row}HeaderCells methods.
  + atspi_accessible_get_localized_role_name: Use internal names
    when possible.
  + Add a non-recursive function to clear a single object's cache.
  + Code clean-ups.</changelog>
  <changelog author="yfjiang@suse.com" date="1691064000">- Support build environments like SLE 15 SP5 and Leap 15.5 which
  had %{_distconfdir) not defined yet.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.48.4:
  + Add atspi_get_version() to return the runtime version of the
    AT-SPI library.
  + collection:
  - Fix match testing for attributes.
  - Avoid locking up if an object has a very large child count.
  + Fix possible NULL pointer dereference when deregistering an
    event listener.
  + Various fixes for the new key grabbing API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.49.90:
  + Fix a test failure/timeout.
  + Add atspi_get_version() to return the runtime version of the
    library.
  + Collection: fix match testing for attributes.
  + Fix a NULL pointer dereference when deregistering an event
    listener that doesn't include a detail.
  + Fix the documentation for interfaces in collection match rules.
  + Add an AtspiLive enum to specify the politeness level for live
    regions, and document that this should be used for Announcement
    signals. Also add a notification signal in atk to replace the
    announcement signal that lacks the politeness information.
  + Add an asynchronous version of atspi_generate_mouse_event.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.49.91:
  + collection: Avoid locking up if an object has a very large
    child count.
  + Fix possible NULL pointer dereference when deregistering an
    event listener.
  + Various fixes for the new key grabbing API.
  + Don't wait for a reply when registering or deregistering
    keystroke listeners.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.50.0:
  + Fix at-spi2-atk test when running under a non-English locale.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695038400">- Adjust %fdupes parameter value to %{buildroot}%{_datadir}, one of
  the parent directories of the former parameter, to symlink other
  duplicate files under the datadir.</changelog>
  <changelog author="yfjiang@suse.com" date="1705233600">- Provide and obsolete more packages from old atk and at-spi2-atk:
  atk-devel, at-spi2-atk-devel and at-spi2-atk-common.</changelog>
</package>
<package pkgid="ab5b53e9bafeab84c8b5d0d570f60d36d3c98a7ebac81151d0f2e50bf672f147e617b93bdb2a9eb9b970d0fd4e1ffc3ab5eceaa18dcc2d81141c3f9cb62cdbbd" name="libattr1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.5.1" rel="slfo.1.1_1.3"/>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg-offline from bootstrap packages</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- remove man5/attr.5, it is now part of man-pages
  http://lwn.net/Articles/643559/</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Remove obsolete Obsolete lines
- Drop static subpackage, nothing in TW depends on it Deb/RH do not
  provide it either
- Rely on simple upstream make install target
- Run tests
- Update to 2.4.48:
  * Provide default xattr.conf
  * Update buildsystem to reflect current autotools state
  * Small test updates
  * Remove various deprecated sections like attr/attr.h
- Update keyring, Mike Frysinger released this version
- Add patch to have tests working with newer perls:
  * 0001-attr-2.4.48-test-suite-perl.patch</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Replace unspecific boilerplate summary from years ago.</changelog>
  <changelog author="schwab@suse.de" date="1536148800">- Add libattr-devel-static subpackage</changelog>
  <changelog author="dmueller@suse.com" date="1536667200">- update description for libattr-devel-static to make it less
  boilerplate</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.5.1:
  * Fix libtool library versioning regression
  * Update po files and German translation
  * getfattr: Add --one-file-system option
  * Move struct stat into struct walk_tree_args
  * Move list of open directories into struct walk_tree_args
  * Move walk_tree_rec arguments into a separate struct
  * xattr.conf: Indicate afs metadata xattrs should be skipped when copying
  * Fix typos in manual pages
  * getfattr.1: by default only user namespace attributes are dumped
  * Enable large-file support on systems that do not enable it by default
  * test: escape left brace in a regex in test/run
- drop 0001-attr-2.4.48-test-suite-perl.patch (upstream)</changelog>
</package>
<package pkgid="d20f00c95ccf6c86fba02a796f225a9d6ac64f2f4ff93f079f41561084ecd580e0c55762399fda09de3e96c251e425766eb68ab11a6c909d61bdd615b89ac390" name="libaudit1-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.1" rel="slfo.1.1_2.1"/>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1671105600">- Enable build for ARM (32-bit)
- Update to version 3.0.9:
  * In auditd, release the async flush lock on stop
  * Don't allow auditd to log directly into /var/log when log_group is non-zero
  * Cleanup krb5 memory leaks on error paths
  * Update auditd.cron to use auditctl --signal
  * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
  * In auparse, special case kernel module name interpretation
  * If overflow_action is ignore, don't treat as an error
  (3.0.8)
  * Add gcc function attributes for access and allocation
  * Add some more man pages (MIZUTA Takeshi)
  * In auditd, change the reinitializing of the plugin queue
  * Fix path normalization in auparse (Sergio Correia)
  * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
  * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
  * Drop ProtectHome from auditd.service as it interferes with rules
  (3.0.7)
  * Add support for the OPENAT2 record type (Richard Guy Briggs)
  * In auditd, close the logging file descriptor when logging is suspended
  * Update the capabilities lookup table to match 5.16 kernel
  * Improve interpretation of renamat &amp; faccessat family of syscalls
  * Update syscall table for the 5.16 kernel
  * Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
  * audit-allow-manual-stop.patch
  * audit-ausearch-do-not-require-tclass.patch
  * audit-no-gss.patch
  * enable-stop-rules.patch
  * fix-hardened-service.patch
  * harden_auditd.service.patch
- Remove patches (fixed by version update):
  * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
</package>
<package pkgid="dcd7c4c92866053d9758bf6dbb5eec8a7e02cd88e9c87046df0b478c1fa0b3a499a0e07b4a02a67145c6c72d2224a44e94949aa0ec17fef5b40c447e1a7d4a07" name="libaugeas0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="66c9636861ff02f037843f5ba2469301153d024ad7cc23236981daa5665cf06d853c54f0df0970a25997bc3a6630f96b2bccec959039ad8b58a3e63aa3673458" name="libauparse0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.1" rel="slfo.1.1_2.1"/>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1671105600">- Enable build for ARM (32-bit)
- Update to version 3.0.9:
  * In auditd, release the async flush lock on stop
  * Don't allow auditd to log directly into /var/log when log_group is non-zero
  * Cleanup krb5 memory leaks on error paths
  * Update auditd.cron to use auditctl --signal
  * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
  * In auparse, special case kernel module name interpretation
  * If overflow_action is ignore, don't treat as an error
  (3.0.8)
  * Add gcc function attributes for access and allocation
  * Add some more man pages (MIZUTA Takeshi)
  * In auditd, change the reinitializing of the plugin queue
  * Fix path normalization in auparse (Sergio Correia)
  * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
  * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
  * Drop ProtectHome from auditd.service as it interferes with rules
  (3.0.7)
  * Add support for the OPENAT2 record type (Richard Guy Briggs)
  * In auditd, close the logging file descriptor when logging is suspended
  * Update the capabilities lookup table to match 5.16 kernel
  * Improve interpretation of renamat &amp; faccessat family of syscalls
  * Update syscall table for the 5.16 kernel
  * Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
  * audit-allow-manual-stop.patch
  * audit-ausearch-do-not-require-tclass.patch
  * audit-no-gss.patch
  * enable-stop-rules.patch
  * fix-hardened-service.patch
  * harden_auditd.service.patch
- Remove patches (fixed by version update):
  * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
</package>
<package pkgid="c1788a85bc0e9a3f910a8025bc9d638c17dc674c125ed07db2357e7e316dfc70384a46501aa2e1b86aa3956636f00f16292b4baf8c952a3dbfe5b133a3aa8e88" name="libavahi-client3-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8" rel="slfo.1.1_4.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="d92c3d2f1fd0ec0cbdf9215808e2234652f76fcc0bca14755a2fbef870be5abfb33fb47729787d1315bc9267ba09330a7cc51ad19894825c13c72b2f48ac8e5e" name="libavahi-common3-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8" rel="slfo.1.1_4.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="7fea4d00bf794b30cec641aeb5ce3b7383bdb6168c9f7b923ee98f4057cfa3fbcee65d7da98aaf81fadc3b93aef947d16624d7ab6f20aadf35b5f412f62aaff2" name="libavahi-core7-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8" rel="slfo.1.1_4.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="aead6c07f250b9564c6e14801df1ca5746cf92762273cea045efa4ca7a17816204c5aff88c1acd1ba27bd878fd93a1c6e85a842b342fdcaa3e2dd2370c10f769" name="libbasicobjects0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.1.1" rel="slfo.1.1_1.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="02512f22494c9b40fdeb9667110ada2eef5d93bfc827456e5472f196a6c9fabd8a0f252773a0c1875e729e1792b24c1d664333939a1c0d6357001277235a3861" name="libbd_btrfs2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="752f6693136e2b89dd2783b102efd11df93e908f5e9f20f213bf51659e65bf39d4cb5f8af4d4eb898421e2fce272fa1ae88833d53502904bcccc12665a60c9fd" name="libbd_crypto2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="006b8a4a5596c3736b41bb39eece5da607b304b9ebc47562d347b305c89e4dd4a6b5d73a45bd020d4262ec0016f5e8a1dc1361af00b3f4e13bb30e9e6007cc2b" name="libbd_fs2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="31c4fe293b4b926bbc6723e75e239256e3af9589717ed9a8c3b4ff988cb316a48ec7d01525c79d819df06665cbeaad5eb0e8a6ae4b0690e22d88cc38d6f0b916" name="libbd_loop2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="04d30e4f16cfc047fdd24ff244e3b323483cf0c61b5a6fad34da3377d54b226cc177ea9aa82d62550fe1e17b93135ed34b23fceec4d6ef19300e78861278e2c7" name="libbd_lvm2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="4432a6d5e337325097ff42a5992a118de4967c0217889b116c4751b3915ca87908b0f98f5a87b30c070cd08cf80b9d01fd026c33995183608e5dac34e908f508" name="libbd_mdraid2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="b8d2d22e6da4e7bfdee0720d97eeaea2e8d5e9527005e39067542fa3f4654ebbb37ba52c61fae5733c0d9b5df24cfadf4945b60823cc503e5127b074691239e5" name="libbd_part2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="26a0e178d14185e1a6786857b3936871170cc081112c92cccfff172cdf8e30c4f2ee6d7f4e501536114d1324195d4749e01eeb37bedf342b1527632d45e193e5" name="libbd_swap2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="00645cd9744c76dc8b3b03a95d63220753f392f2ccb6f7f7430cba55d1aa38ae44bbaa7722c4fcd25070e37a924f4428d59d82f83af3dac866dc1c1add53ca08" name="libbd_utils2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="59bbb8bc949c0c7e8b8285d345735b106bcae723ffd112c49901995e4d0c31306e25a7758cce055c3d0655f13b2e9ea8ef02148d1cf3946850cd75377f802f82" name="libblkid1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.40.4" rel="slfo.1.1_4.1"/>
  <changelog author="jslaby@suse.cz" date="1715860800">- add support for pidfs in kernel 6.9 (bsc#1224285)
  * 0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch
  * 0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch
  * 0003-lsfd-Support-pidfs.patch
  * 0004-lsfd-test-Adapt-test-cases-for-pidfs.patch</changelog>
  <changelog author="dmueller@suse.com" date="1718020800">- disable libmagic in more(1) for binary detection (bsc#1225197)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1721131200">- uncomment "autoreconf --install" to use the new version of automake</changelog>
  <changelog author="sbrabec@suse.com" date="1722859200">- Update to version 2.40.2:
  * cfdisk: fix possible integer overflow
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
    (obsoletes
    0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch,
    0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch,
    0003-lsfd-Support-pidfs.patch,
    0004-lsfd-test-Adapt-test-cases-for-pidfs.patch)
  * mkswap.8.adoc: update note regarding swapfile creation
  * setpgid: make -f work
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Enable kernel mountfd API, as it should be already stable
  (PED-9752).
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.</changelog>
  <changelog author="sbrabec@suse.com" date="1729512000">- Disable mountfd API again.
  (https://github.com/util-linux/util-linux/issues/3158)</changelog>
  <changelog author="sbrabec@suse.com" date="1731844800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).
- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
</package>
<package pkgid="c569ea9d2a8f519d4a4e5faee99aeada3bdecf3aa72548122d55a1cc16ea044a882f8ec77fb58e7412938bcb939aa95ae381d42fd037fdec61ea4aa59e7196e8" name="libblockdev-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="b067bcbdc67a0d0c94100ea521d266d5588f893f95188a0605a0edbd56763208804e59dc6d4b2b4ede48c9aae9ede5bebc48d7d39cea31072c25a4572e6bc311" name="libblockdev-debugsource" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="934e7a729467baa9194a071a91213ab952a0ebc0173770377121a9760b6f5e594a1a238a7373fc3028565a6b4b4c3b50c029cb28eedd41f435a29a556988a8f8" name="libblockdev2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.28" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1658923200">- Update to version 2.27:
  + Fix for s390x: Remove double fclose in bd_s390_dasd_online
  + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
    filesystem
  + overrides: Fix translating exceptions in ErrorProxy
  + vdo_stats: Default to 100 % savings for invalid savings values
  + lvm-dbus: Add support for changing compression and
    deduplication
  + lvm:
  - Fix reading statistics for VDO pools with VDO 8
  - Do not set global config to and empty string
  - Do not include duplicate entries in bd_lvm_lvs output
  - Use correct integer type in for comparison
  + crypto: Remove useless comparison in progress report in
    luks_format</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 2.28:
  * lvm: Fix bd_lvm_get_supported_pe_sizes in Python on 32bit
  * tests: Create bigger devices for XFS tests
  * tests: Use ext instead of xfs in MountTestCase.test_mount_ro_device
  * mpath: Memory leak fix
  * spec: Require the same version utils from plugins
  * mdraid: Try harder to get container UUID in bd_md_detail
  * Add a test case for DDF arrays/containers
  * mdraid: Do not ignore errors from bd_md_canonicalize_uuid in bd_md_examine
  * mdraid: Try harder to get container UUID in bd_md_examine
  * mdraid: Fix copy-paste error when checking return value
  * tests: Wait for raid and mirrored LVs to be synced before removing
  * tests: Make smaller images for test_lvcreate_type
  * dm: Fix comparing DM RAID member devices UUID
  * mdraid: Fix use after free
  * ci: Add .lgtm.yaml config for LGTM
  * ci: Add GitHub actions for running rpmbuilds and csmock
  * mpath: Fix potential NULL pointer dereference</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="2a9238e3d0ae4b6c6305d5c44db550bfa3978a99f26baaa1ac1a0f629101599460eaa54a9fcbabf40f1057ab5d7259d58e6126e9414c164c38b0aab41f647a3e" name="libblogger2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.27" rel="slfo.1.1_1.2"/>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1688990400">- Fix big endian cast problems to be able to read commands
  and ansers (blogctl) as well as passphrases (blogd)</changelog>
</package>
<package pkgid="c42b24f693be54a800657fc4c1f2d0bc49a53f540e0b730c630a750d7db8894231e08a064c87803b49ed66b0817815d73efcaeec0730ebaa5904aa98ba1a2c10" name="libbluetooth3-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.70" rel="slfo.1.1_2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1668600000">- update to 5.66:
  * Fix issue with A2DP and transport connection collisions.
  * Fix issue with allowing application specific error codes.
  * Fix issue with not setting initiator flag correctly.
  * Fix issue with HoG Report MAP size handling.
  * Add initial support for Basic Audio Profile.
  * Add initial support for Volume Control Profile.
- remove RPi-Move-the-43xx-firmware-into-lib-firmware.patch (does
  not apply anymore), replace with CPPFLAGS define</changelog>
  <changelog author="tjyrinki@suse.com" date="1691668800">- update to 5.68
  * Fix issue with A2DP and handling of Transport.Acquire.
  * Fix issue with BAP and initiating QoS and Enable procedures.
  * Fix issue with BAP and detaching streams when PAC is removed.
  * Fix issue with BAP and reading all instances of PAC.
  * Fix issue with BAP and not being able to reconfigure.
  * Fix issue with BAP and transport configuration changes.
  * Fix issue with BAP and handling unexpected disconnect.
  * Fix issue with GATT and not removing pending services.
  * Fix issue with GATT and client ready handling.
  * Fix issue with handling fallback to transient hostname.
  * Add support for SecureConnections configuration option.
  * Add support for Mesh Remove Provisioning.
  * Add support for Mesh Private Beacons.
- Remove patches that are not needed with the new upstream.</changelog>
  <changelog author="jlee@suse.com" date="1691755200">- 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch be
  removed by Timo Jyrinki when updating to 5.68. I saw some reasons:
  - Upstream didn't take this patch:
    https://www.spinics.net/lists/linux-bluetooth/msg40136.html
  - Fedora also marked this patch in bluez.spec since bluez-5.68-2.fc39
    https://src.fedoraproject.org/rpms/bluez/blob/2b133d795f4f823c8b22ef5a07569792ad7ce6aa/f/bluez.spec
  We didn't put any bug number of this patch when it be introduced
  to bluez.spec since Nov 23, 2021. So, let's remove this patch unless
  upstream or Fedora add it back.</changelog>
  <changelog author="jlee@suse.com" date="1692100800">- For pushing bluez 5.68 to 15-SP6 (bluez-5.65), sync change log:
  (jsc#PED-5599)
  - The avrcp-Fix-crash-while-handling-unsupported-events.patch
    be merged to bluez-5.67 since 2023. (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1692187200">- For pushing bluez 5.68 to 15-SP6 (bluez-5.65), sync change log:
  (jsc#PED-5599)
  - RPi-Move-the-43xx-firmware-into-lib-firmware.patch be removed
    by Stefan Seyfried since updating to bluez-5.66. (bsc#995059)(bsc#1094902)
    Because the header file has "#ifndef FIRMWARE_DIR...#define FIRMWARE_DIR /etc/firmare"
    instead of patching. So we just supply FIRMWARE_DIR on compiler's
    command line in bluez.spec:
    export CPPFLAGS="$CPPFLAGS -DFIRMWARE_DIR='\"/lib/firmware\"'</changelog>
  <changelog author="gmbr3@opensuse.org" date="1692446400">- Use %_firmwaredir</changelog>
  <changelog author="tjyrinki@suse.com" date="1693310400">- update to 5.69
  * Fix issue with BAP enabling state correctly when resuming.
  * Fix issue with detaching source ASEs only after Stop Ready.
  * Fix issue with handling VCP audio location and descriptor.
  * Fix issue with generating IRK for adapter with privacy enabled.
  * Add support for BAP broadcast sink.
- Add three new man pages</changelog>
  <changelog author="jlee@suse.com" date="1696420800">- Moved btmgmt to main rpm of bluez. (jsc#PED-6216)</changelog>
  <changelog author="dmueller@suse.com" date="1699272000">- update to 5.70:
  * Fix issue with not sending GATT confirmations.
  * Fix issue with not handling initiator properly.
  * Fix issue with not checking PBAP counter length.
  * Add support for MICP profile and MICS service.
- add Fix-.device_probe-failing-if-SDP-record-is-not.patch to fix
  regression when pairing game controllers</changelog>
  <changelog author="jlee@suse.com" date="1757332800">- Add input.conf-Change-default-of-ClassicBondedOnly.patch
  to change default of ClassicBondedOnly in input.conf.
    25a471a83e02 input.conf: Change default of ClassicBondedOnly
  (bsc#1217877, CVE-2023-45866)
- Fixed the date in bluez.changes:
  - Mon Sep2y 09:36:31 CEST 2008 - seife@suse.de
    +Mon Sep 29 09:36:31 CEST 2008 - seife@suse.de</changelog>
</package>
<package pkgid="34dd34fed0ee946124b7a81c5fdea8596aff83d50a5430aa771e45ee9375613f2e449a06979b507eb7a7f473d208fa7abcab1baba8508a85ddac721670e95f3c" name="libboost_thread1_84_0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.84.0" rel="slfo.1.1_1.4"/>
  <changelog author="adam.majer@suse.de" date="1661169600">- ppc64le: added some new math libraries (bsc#1202594)</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="aschnell@suse.com" date="1671019200">- update to 1.81.0
  * new libraries:
    + URL - URL Library
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_81_0.html</changelog>
  <changelog author="dmueller@suse.com" date="1674907200">- add boost-phoenix-revert-std-tuple-support.patch to fix
  libetonyek and others build that use boost::phoenix</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="aschnell@suse.com" date="1681992000">- update to 1.82.0
  * new libraries:
    + MySQL - MySQL Header-only Library.
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_82_0.html</changelog>
  <changelog author="aschnell@suse.com" date="1693915200">- update to 1.83.0
  * new libraries:
    + Compat - Header-only Library.
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_83_0.html
- dynamic_linking.patch: updated
- boost-mpi-noreturn.patch: added</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698148800">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698321600">- Fix build for gnu-mpich-hpc broken by previous update</changelog>
  <changelog author="aschnell@suse.com" date="1702555200">- update to 1.84.0
  * new libraries:
    + Cobalt (single-threaded asynchronicity framework)
    + Redis (implements protocol RESP3)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_84_0.html
- drop boost-phoenix-revert-std-tuple-support.patch (upstream)
- drop boost-mpi-noreturn.patch (upstream)</changelog>
</package>
<package pkgid="2849b4500989ce4743ea94de25bd06a504acc29974dd6ed1c033857c04e50e2a56574871576a8fcb946e0cb9e435a42e4106286ab91f08f2bb3074444c582546" name="libbpf-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="slfo.1.1_1.2"/>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.3.0:
  * support for `netfilter` programs is added
    `SEC("netfilter")` is now available
  * API function `bpf_program__attach_netfilter()` is now
    available
  * support for `tcx` BPF programs is added:
  * the following new SEC definitions are now available:
    SEC("tc/egress"), SEC("tc/ingress"), SEC("tcx/egress"),
    SEC("tcx/ingress")
  * the following SEC definitions are now considered legacy:
    SEC("tc"), SEC("action"), SEC("classifier")
  * functions `bpf_prog_attach_opts()` and
    `bpf_prog_query_opts()` are extended to work with `tcx`
    programs, plus two new API functions are added:
  * the following new SEC definitions are now available:
    SEC("uprobe.multi"), SEC("uprobe.multi.s"),
    SEC("uretprobe.multi"), SEC("uretprobe.multi.s")
  * support for section `SEC("usdt.s")` is added for sleepable
    `usdt` programs;
  * support for Unix domain socket cgroup BPF programs is added
    the following new SEC definitions are now available:
    SEC("cgroup/connect_unix"),SEC("cgroup/sendmsg_unix"),
    SEC("cgroup/recvmsg_unix"), SEC("cgroup/getpeername_unix"),
    SEC("cgroup/getsockname_unix")
  * new `LIBBPF_OPTS_RESET()` utility macro;
  * new `bpf_object__unpin()` function to complement existing
    `bpf_object__pin()`;
  * new API functions for work with ring buffers
  * uprobe SEC matcher extended to allow golang symbols;
  * uprobe support for symbols versioning;
  * `bpf_map__set_value_size()` can now be used to resize memory
    mapped region for memory mapped maps;
  * `struct bpf_xdp_query_opts` extended with `xdp_zc_max_segs`
    output field;
  * basic BTF sanity check pass added to reject bogus BTF.
  * fix for btf_dump__dump_type_data() when type contains
    bitfields;
  * fix for correct work of offsetof() and container_of() macro
    with CO-RE;
  * no longer attempt to load modules BTF when resolving CO-RE
    relocations if CAP_SYS_ADMIN are absent;
  * regex based function search for "kprobe.multi/" programs no
    longer attempts to trace functions that cannot be traced;
  * bpf_program__set_type() no longer resets sec_def if it is set
    to a custom fallback SEC handler;
  * fix for memory leak possible after
    bpf_program__set_attach_target() call;</changelog>
</package>
<package pkgid="4c86a3bf95122bd4aef5c596377b97e6cdcc37017542fe1ead8ca8eabe83ce5cc378cf8c05bdfaceb3f690a32d2ff3428951cbb4ba268aab3ba5ec0309536a7d" name="libbpf1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="slfo.1.1_1.2"/>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.3.0:
  * support for `netfilter` programs is added
    `SEC("netfilter")` is now available
  * API function `bpf_program__attach_netfilter()` is now
    available
  * support for `tcx` BPF programs is added:
  * the following new SEC definitions are now available:
    SEC("tc/egress"), SEC("tc/ingress"), SEC("tcx/egress"),
    SEC("tcx/ingress")
  * the following SEC definitions are now considered legacy:
    SEC("tc"), SEC("action"), SEC("classifier")
  * functions `bpf_prog_attach_opts()` and
    `bpf_prog_query_opts()` are extended to work with `tcx`
    programs, plus two new API functions are added:
  * the following new SEC definitions are now available:
    SEC("uprobe.multi"), SEC("uprobe.multi.s"),
    SEC("uretprobe.multi"), SEC("uretprobe.multi.s")
  * support for section `SEC("usdt.s")` is added for sleepable
    `usdt` programs;
  * support for Unix domain socket cgroup BPF programs is added
    the following new SEC definitions are now available:
    SEC("cgroup/connect_unix"),SEC("cgroup/sendmsg_unix"),
    SEC("cgroup/recvmsg_unix"), SEC("cgroup/getpeername_unix"),
    SEC("cgroup/getsockname_unix")
  * new `LIBBPF_OPTS_RESET()` utility macro;
  * new `bpf_object__unpin()` function to complement existing
    `bpf_object__pin()`;
  * new API functions for work with ring buffers
  * uprobe SEC matcher extended to allow golang symbols;
  * uprobe support for symbols versioning;
  * `bpf_map__set_value_size()` can now be used to resize memory
    mapped region for memory mapped maps;
  * `struct bpf_xdp_query_opts` extended with `xdp_zc_max_segs`
    output field;
  * basic BTF sanity check pass added to reject bogus BTF.
  * fix for btf_dump__dump_type_data() when type contains
    bitfields;
  * fix for correct work of offsetof() and container_of() macro
    with CO-RE;
  * no longer attempt to load modules BTF when resolving CO-RE
    relocations if CAP_SYS_ADMIN are absent;
  * regex based function search for "kprobe.multi/" programs no
    longer attempts to trace functions that cannot be traced;
  * bpf_program__set_type() no longer resets sec_def if it is set
    to a custom fallback SEC handler;
  * fix for memory leak possible after
    bpf_program__set_attach_target() call;</changelog>
</package>
<package pkgid="93de064197d9699a5085dc6364b283d31912d9b857234fca5c431bb24a0fa3842fa59142745acbaa185b5d981f922ac30d7a675c07ab2c57559532abdbb6209b" name="libbrotlicommon1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1544788800">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="sflees@suse.de" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andythe_great@pm.me" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="jengelh@inai.de" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="meissner@suse.com" date="1677326400">- add 32bit devel package for Wine development.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="jengelh@inai.de" date="1693483200">- Update to release 1.1
  * CLI: added a --dictionary option
- Reomve 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="dmueller@suse.com" date="1697544000">- build with optflags again</changelog>
</package>
<package pkgid="5e8ce6143c2095378904af17b2130d3e106f98b3213637b57f570b0af7bb27e169872ecd4c23a10857dfd691ae0f715bac01ab68d289a58f908c0d0aa18adf7e" name="libbrotlidec1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1544788800">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="sflees@suse.de" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andythe_great@pm.me" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="jengelh@inai.de" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="meissner@suse.com" date="1677326400">- add 32bit devel package for Wine development.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="jengelh@inai.de" date="1693483200">- Update to release 1.1
  * CLI: added a --dictionary option
- Reomve 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="dmueller@suse.com" date="1697544000">- build with optflags again</changelog>
</package>
<package pkgid="7ae163671cfed5f819448a3af6dbeeff0e1a0b8fefe36594f8396c9c46de13d16d4fb54333c58daa6153ad4b8458fc95f197293fa01c68f90e37e9f0c55cad89" name="libbsd-debugsource" arch="aarch64">
  <version epoch="0" ver="0.11.7" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 0.8.6:
  * test:
    + Fix nlist() unit test on IA64 and PowerPC 64-bit ELFv1
  * Fix handling of non-contiguous argv + envp in setproctitle()
- Changes for version 0.8.5:
  * test:
    + Handle libtool executable names in getprogname() unit test
    + Remove unused variable in nlist() unit test
  * man:
    + Ship and install libbsd(7)
    + Update man page sections in titles and references
  * Fix ELF definitions for PowerPC in local-elf.h
  * Fix ELF definitions for MIPS in local-elf.h
- Changes for version 0.8.4:
  * Add support for RISC-V
  * Support GCC deprecated attribute for GCC older than 4.5
  * Fix the __progname check to avoid the optimizer discarding the symbol
  * Gracefully handle lack of system &lt;sys/cdefs.h&gt;
  * Do not provide funopen() on musl
  * Try &lt;linux/a.out.h&gt; if &lt;a.out.h&gt; is not present
  * Do not use legacy BSD u_* types
  * Import &lt;sys/time.h&gt; for some of its macros</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Update to version 0.8.7:
  * Fix &lt;sys/cdefs.h&gt; for gcc with no __has_include or
    __has_include_next support
  * man: Document on what other BSDs arc4random(3) is present
  * Handle several functions now being provided by glibc
  * test: Fix nlist(3) unit test on IA64
- switch to mirror temporarily, per announce:
  https://lists.freedesktop.org/archives/libbsd/2018-January/000166.html</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Update to version 0.9.1:
  * Add __arraycount() macro.
  * Add flopenat() function.
  * Add strtoi() and strtou() functions.
  * Add several new vis and unvis functions.
  * Add pidfile_fileno() function, and struct pidfh is now opaque.
  * The humanize_number() now understands HN_IEC_PREFIXES.
  * The fmtcheck() function supports all standard printf(3)
    conversions.
  * The getentropy(), and thus arc4random() functions will not
    block anymore on Linux on boot when there's not enough entropy
    available.
  * The arc4random() function handles direct clone() calls better.</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO - symbol versioning unsupported by GCC (boo#1133096).</changelog>
  <changelog author="mpluskal@suse.com" date="1576497600">- Update to version 0.10.0:
  * Several security related fixes for nlist() reported by Daniel
    Hodson and one by Coverity Scan.
  * Preliminary and partial Windows porting, thanks to Aaron
    Dierking.
  * Fix for a leak in the vis family of functions.
  * Fix for a configure check to not unnecessarily link against
    librt.
  * General portability fixes for musl, uClibc, macOS and
    GNU/kFreeBSD.
  * New architectures support for nlist().
  * Switch the &lt;err.h&gt; *c() functions to be standalone and add
    err(), warn(), errx() and warnx() familiy of functions in case
    the system lacks them.
  * Several man page fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static).
- Make description neutral; adhere to noun phrasing.</changelog>
  <changelog author="dmueller@suse.com" date="1650024000">- update to 0.11.6:
  * import pwcache module from OpenBSD
  * use libmd for hashing functions
  * Fix message digest library checks
  * Switch libmd wrapper to dlsym
  * Enable .init_array support when building with LTO
  * Switch md5 back to direct linking
- reenable LTO</changelog>
  <changelog author="dmueller@suse.com" date="1650456000">- add missing devel requires</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 0.11.7:
  * man: Discourage using the library in non-overlay mode
  * include: Adjust reallocarray() per glibc adoption
  * include: Adjust arc4random() per glibc adoption
  * include: explicit_bzero() requires _DEFAULT_SOURCE
  * include: Simplify glibc version dependent macro handling
  * doc: Switch references from pkg-config to pkgconf
  * doc: Add missing empty line to separate README sections
  * doc: Refer to the main git repository as primary
  * test: Fix explicit_bzero() test on the Hurd
  * fgetwln: Add comment about lack of getwline(3) for recommendation
  * setmode: Dot not use saveset after free
  * man: Rewrite gerprogname(3bsd) from scratch
  * man: Lowercase man page title
  * man: Document that some arc4random(3) functions are now in glibc 2.36
  * Sync arc4random(3) implementation from OpenBSD
  * Fix ELF support for big endian SH
  * man: Use -compact also for alternative functions in libbsd(7)
  * getentropy: Fix function cast for getauxval()</changelog>
  <changelog author="gmbr3@opensuse.org" date="1678881600">- Add libbsd-glibc-2.34-closefrom.patch to avoid conflicting
  with function provided by glibc 2.34</changelog>
</package>
<package pkgid="f63c1ac1f11933a90d387fefc29d098654f3f845ffd9b0437b5f10abf090d5905aac2d776d2a1d573acde2cbd2e6aabcc8d345df7c5ec3e4c8750417827d35f7" name="libbsd0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.11.7" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 0.8.6:
  * test:
    + Fix nlist() unit test on IA64 and PowerPC 64-bit ELFv1
  * Fix handling of non-contiguous argv + envp in setproctitle()
- Changes for version 0.8.5:
  * test:
    + Handle libtool executable names in getprogname() unit test
    + Remove unused variable in nlist() unit test
  * man:
    + Ship and install libbsd(7)
    + Update man page sections in titles and references
  * Fix ELF definitions for PowerPC in local-elf.h
  * Fix ELF definitions for MIPS in local-elf.h
- Changes for version 0.8.4:
  * Add support for RISC-V
  * Support GCC deprecated attribute for GCC older than 4.5
  * Fix the __progname check to avoid the optimizer discarding the symbol
  * Gracefully handle lack of system &lt;sys/cdefs.h&gt;
  * Do not provide funopen() on musl
  * Try &lt;linux/a.out.h&gt; if &lt;a.out.h&gt; is not present
  * Do not use legacy BSD u_* types
  * Import &lt;sys/time.h&gt; for some of its macros</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Update to version 0.8.7:
  * Fix &lt;sys/cdefs.h&gt; for gcc with no __has_include or
    __has_include_next support
  * man: Document on what other BSDs arc4random(3) is present
  * Handle several functions now being provided by glibc
  * test: Fix nlist(3) unit test on IA64
- switch to mirror temporarily, per announce:
  https://lists.freedesktop.org/archives/libbsd/2018-January/000166.html</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Update to version 0.9.1:
  * Add __arraycount() macro.
  * Add flopenat() function.
  * Add strtoi() and strtou() functions.
  * Add several new vis and unvis functions.
  * Add pidfile_fileno() function, and struct pidfh is now opaque.
  * The humanize_number() now understands HN_IEC_PREFIXES.
  * The fmtcheck() function supports all standard printf(3)
    conversions.
  * The getentropy(), and thus arc4random() functions will not
    block anymore on Linux on boot when there's not enough entropy
    available.
  * The arc4random() function handles direct clone() calls better.</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO - symbol versioning unsupported by GCC (boo#1133096).</changelog>
  <changelog author="mpluskal@suse.com" date="1576497600">- Update to version 0.10.0:
  * Several security related fixes for nlist() reported by Daniel
    Hodson and one by Coverity Scan.
  * Preliminary and partial Windows porting, thanks to Aaron
    Dierking.
  * Fix for a leak in the vis family of functions.
  * Fix for a configure check to not unnecessarily link against
    librt.
  * General portability fixes for musl, uClibc, macOS and
    GNU/kFreeBSD.
  * New architectures support for nlist().
  * Switch the &lt;err.h&gt; *c() functions to be standalone and add
    err(), warn(), errx() and warnx() familiy of functions in case
    the system lacks them.
  * Several man page fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static).
- Make description neutral; adhere to noun phrasing.</changelog>
  <changelog author="dmueller@suse.com" date="1650024000">- update to 0.11.6:
  * import pwcache module from OpenBSD
  * use libmd for hashing functions
  * Fix message digest library checks
  * Switch libmd wrapper to dlsym
  * Enable .init_array support when building with LTO
  * Switch md5 back to direct linking
- reenable LTO</changelog>
  <changelog author="dmueller@suse.com" date="1650456000">- add missing devel requires</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 0.11.7:
  * man: Discourage using the library in non-overlay mode
  * include: Adjust reallocarray() per glibc adoption
  * include: Adjust arc4random() per glibc adoption
  * include: explicit_bzero() requires _DEFAULT_SOURCE
  * include: Simplify glibc version dependent macro handling
  * doc: Switch references from pkg-config to pkgconf
  * doc: Add missing empty line to separate README sections
  * doc: Refer to the main git repository as primary
  * test: Fix explicit_bzero() test on the Hurd
  * fgetwln: Add comment about lack of getwline(3) for recommendation
  * setmode: Dot not use saveset after free
  * man: Rewrite gerprogname(3bsd) from scratch
  * man: Lowercase man page title
  * man: Document that some arc4random(3) functions are now in glibc 2.36
  * Sync arc4random(3) implementation from OpenBSD
  * Fix ELF support for big endian SH
  * man: Use -compact also for alternative functions in libbsd(7)
  * getentropy: Fix function cast for getauxval()</changelog>
  <changelog author="gmbr3@opensuse.org" date="1678881600">- Add libbsd-glibc-2.34-closefrom.patch to avoid conflicting
  with function provided by glibc 2.34</changelog>
</package>
<package pkgid="a34494ca620856079efb8d790bb02faea2be8fd9df2a6ed0ae9e1aea37a47e5d4754221eb09634ec229c5eb848d0183674bea1cb7b14b6034f49f8c10b771f93" name="libbtrfs0-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.8.1" rel="slfo.1.1_1.2"/>
  <changelog author="dsterba@suse.cz" date="1693224000">- update to 6.3.3:
  * add btrfs-find-root to btrfs.box
  * replace: properly enqueue if there's another replace running
  * other:
  * CI updates, more tests enabled, code coverage, badges
  * documentation updates
  * build warning fixes</changelog>
  <changelog author="dsterba@suse.cz" date="1693569600">- update to 6.5:
  * crc32c implementation speedup (3x)
  * btrfstune:
  * be more strict about option combinations and refuse changing
    features from incompatible groups
  * metadata_uuid changes fixes
  * libbtrfs: fix ABI breakage introduced in 6.3.1, revert struct subvol_info
    and subvol_uuid_search changes (bsc#1212217)
  * CI updates
  * pull request build tests enabled
  * published static binaries built with backward compatibility (-march=x86-64)
  * other
  * documentation updates
  * new and updated tests
  * experimental feature updates (json, list-chunks, checksum switch)
  * code refactoring
  * remove btrfs-fragments</changelog>
  <changelog author="dsterba@suse.cz" date="1694606400">- update to 6.5.1:
  * build fixes:
  * crc32c if PIE or relro is enabled
  * detect if PCLMUL feature is recognized by compiler and also detect that
    at runtime
  * check: verify metadata item level when skinny-metadata is enabled
  * other: minor build and docs updates
  * spec: remove xmlto dependency, docs built by sphinx</changelog>
  <changelog author="dsterba@suse.cz" date="1698062400">- update to 6.5.3
  * mkfs:
  * add short aliases for -O specification, block-group-tree (bgt),
    free-space-tree (fst), raid-stripe-tree (rst)
  * don't try to resize the image (namely when backed by file) when --rootdir
    contains sparse file larger than the image
  * also copy xattr/permissions/ugid/timestamps of the top --rootdir directory
  * add new option --device-uuid to let user specify exact uuid of the
    device item (only for single device filesystems)
  * check:
  * on zoned devices, use correct super block offsets when repairing
  * check inline extent refs order
  * subvolume create: add new option --parent to create missing path
    components of the given path (like mkdir -p)
  * rescue clear-ino-cache: new command moved from 'btrfs check' implementing
    the same as option --clear-ino-cache (to be deprecated and removed in the
    future)
  * dump-tree: allow '-' in tree identifier names for option -t
  * btrfstune:
  * drop short option and add long option to enable squota
  * tune space reservation and batch size for block-group-tree conversion
  * scrub status: print correct value of "Bytes scrubbed" for unfinished runs
  * qgroup show: fix crash when attempting to print path of stale qgroups
  * experimental features:
  * move build of raid-stripe-tree out for testing but it's still considered
    experimental
  * other:
  * shell completion updates
  * sync raid-stripe-tree code with kernel
  * build fixes
  * new and updated tests
- update to 6.5.2
  * new feature support:
  * raid-stripe-tree, new tree to track extent mapping for raid profiles,
    allows raid1*, raid0 and raid10 on zoned devices (kernel 6.7)
  * simple quotas, simplified accounting that does not track exclusive and
    shared extents (kernel 6.7)
  * mkfs with duplicate UUID on a single device, temp-fsid (kernel 6.7)
  * metadata_uuid: enhanced capabilities to repair partially updated fsid on
    multiple devices
  * other:
  * updated tests and CI
  * sync sources with kernel</changelog>
  <changelog author="dsterba@suse.cz" date="1700049600">- update to 6.6.2
  * squota: change key number of EXTENT_OWNER_REF_KEY, sync with kernel 6.7-rc1
  * property set/get: completely skip char devices, trying to set properties
    and open /dev/watchdog* causes a reboot
  * other: build warnings, test updates, documentation updates
- update to 6.6.1
  * fix device scanning ioctl definition, accidental change to the 'forget' ioctl
    that breaks mounting multi-device filesystems
- update to 6.6
  * new global option --dry-run, now implemented for 'subvolume delete'
  * fi defrag: new option --step to defragment files in steps, report progress
  * balance: removed support for obsolete short syntax 'btrfs balance /path'
  * mkfs: print zone count for each device in the overview
  * check:
  * verify inline ref ordering
  * deprecate --clear-space-cache, moved to the 'rescue' group
  * rescue clear-space-cache: new command moved from 'btrfs check' implementing
    the same as option --clear-space-cache (to be deprecated and removed in the
    future)
  * dump-tree: output sequence number for inline refs
  * fixes:
  * fi resize: fallback to lowest devid when 1 does not exist, previously the
    command would fail with "No such device"
  * fi usage: fix "devices 0 != 1" message and broken output on multi-device
    filesystem
  * open files in non-blocking mode when reading fsid, this could hang when
    trying to open fifo files or some special character devices, was observed
    with 'prop set/get'
  * experimental:
  * mkfs: parametric zone size for emulated zoned mode
  * other:
  * cleanups refactoring
  * new and updated tests
  * CI updates
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1706184000">- update to 6.7
  * mkfs: make 4k sectorsize default, recommended minimum kernel for that is
    6.1 and requires subpage support on architectures with page size &gt; 4k
  * subvolume create: return correct error code when a target already exists
  * tree-checker: dump tree block on error (btrfs-convert, ...)
  * scrub limit: fix reporting of a limit set while there's none
  * fi usage: fix reporting of unallocated data or raid56 profile without root
    privs due to lack of that information
  * convert:
  * align data block group lengths to 64K
  * fix conversion of a large filesystem when there are partial inode items
    present due to caching
  * other:
  * build fixes
  * updated documentation
  * new and updated tests
- update to 6.6.3
  * subvol create: accept multiple arguments
  * subvol delete: print the subvolume id in the output
  * subvol sync: check if the filesystems is still writeable so it does not
    wait indefinitely
  * device delete: add a timeout and warning when deleting multiple devices
  * scrub status: report limit if set in sysfs/../scrub_speed_max
  * scrub limit: new command to show or set the per-device scrub limits
  * scrub start: report the limit if set
  * build:
  * fix CPU feature detection on aarch64
  * support Botan and OpenSSL (3.2+) as crypto backends
  * other:
  * documentation updates, RTD config update
  * new and updated tests
  * CI updates</changelog>
  <changelog author="dsterba@suse.cz" date="1707998400">- update to 6.7.1
  * convert: raid-stripe-tree can be now enabled for the target filesystem
  * mkfs:
  * handle lifetime of open file descriptors so it does not trigger udev
    that could miss to create the UUID symlinks in /dev
  * update warning when CPU page size does not match sector size
  * merge features in summary, no more distinction of incompat and runtime
    to match the semantics of option -O
  * fi show: fix recognizing raw device mapper paths
  * other:
  * documentation updates, fix links to labels in included directories</changelog>
  <changelog author="dsterba@suse.cz" date="1711454400">- update to 6.8
  * fix --enqueue option timeout handling
  * subvolume: remove support for undocumented options -c and -x,
    functionality disabled in kernel
  * libbtrfsutil:
  * version 0.1.3, backward compabile
  * add aliases for all existing functions with unified naming scheme
  * updated header defintions for recently added kernel features
  * send: v3 supported in experimental mode
  * other:
  * docs: manual page references, graphs, enhancements, clarifications
  * error handling fixes
  * cleanups and refactoring</changelog>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
</package>
<package pkgid="0840c33d1db3741b5077166eb50b298a7ed82081246b3c9989aca5d201618f91b19e3b5acb7294d459ddbb83276f5cc2efff579275a328324fb44fa8eab182eb" name="libbtrfsutil1-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.8.1" rel="slfo.1.1_1.2"/>
  <changelog author="dsterba@suse.cz" date="1693224000">- update to 6.3.3:
  * add btrfs-find-root to btrfs.box
  * replace: properly enqueue if there's another replace running
  * other:
  * CI updates, more tests enabled, code coverage, badges
  * documentation updates
  * build warning fixes</changelog>
  <changelog author="dsterba@suse.cz" date="1693569600">- update to 6.5:
  * crc32c implementation speedup (3x)
  * btrfstune:
  * be more strict about option combinations and refuse changing
    features from incompatible groups
  * metadata_uuid changes fixes
  * libbtrfs: fix ABI breakage introduced in 6.3.1, revert struct subvol_info
    and subvol_uuid_search changes (bsc#1212217)
  * CI updates
  * pull request build tests enabled
  * published static binaries built with backward compatibility (-march=x86-64)
  * other
  * documentation updates
  * new and updated tests
  * experimental feature updates (json, list-chunks, checksum switch)
  * code refactoring
  * remove btrfs-fragments</changelog>
  <changelog author="dsterba@suse.cz" date="1694606400">- update to 6.5.1:
  * build fixes:
  * crc32c if PIE or relro is enabled
  * detect if PCLMUL feature is recognized by compiler and also detect that
    at runtime
  * check: verify metadata item level when skinny-metadata is enabled
  * other: minor build and docs updates
  * spec: remove xmlto dependency, docs built by sphinx</changelog>
  <changelog author="dsterba@suse.cz" date="1698062400">- update to 6.5.3
  * mkfs:
  * add short aliases for -O specification, block-group-tree (bgt),
    free-space-tree (fst), raid-stripe-tree (rst)
  * don't try to resize the image (namely when backed by file) when --rootdir
    contains sparse file larger than the image
  * also copy xattr/permissions/ugid/timestamps of the top --rootdir directory
  * add new option --device-uuid to let user specify exact uuid of the
    device item (only for single device filesystems)
  * check:
  * on zoned devices, use correct super block offsets when repairing
  * check inline extent refs order
  * subvolume create: add new option --parent to create missing path
    components of the given path (like mkdir -p)
  * rescue clear-ino-cache: new command moved from 'btrfs check' implementing
    the same as option --clear-ino-cache (to be deprecated and removed in the
    future)
  * dump-tree: allow '-' in tree identifier names for option -t
  * btrfstune:
  * drop short option and add long option to enable squota
  * tune space reservation and batch size for block-group-tree conversion
  * scrub status: print correct value of "Bytes scrubbed" for unfinished runs
  * qgroup show: fix crash when attempting to print path of stale qgroups
  * experimental features:
  * move build of raid-stripe-tree out for testing but it's still considered
    experimental
  * other:
  * shell completion updates
  * sync raid-stripe-tree code with kernel
  * build fixes
  * new and updated tests
- update to 6.5.2
  * new feature support:
  * raid-stripe-tree, new tree to track extent mapping for raid profiles,
    allows raid1*, raid0 and raid10 on zoned devices (kernel 6.7)
  * simple quotas, simplified accounting that does not track exclusive and
    shared extents (kernel 6.7)
  * mkfs with duplicate UUID on a single device, temp-fsid (kernel 6.7)
  * metadata_uuid: enhanced capabilities to repair partially updated fsid on
    multiple devices
  * other:
  * updated tests and CI
  * sync sources with kernel</changelog>
  <changelog author="dsterba@suse.cz" date="1700049600">- update to 6.6.2
  * squota: change key number of EXTENT_OWNER_REF_KEY, sync with kernel 6.7-rc1
  * property set/get: completely skip char devices, trying to set properties
    and open /dev/watchdog* causes a reboot
  * other: build warnings, test updates, documentation updates
- update to 6.6.1
  * fix device scanning ioctl definition, accidental change to the 'forget' ioctl
    that breaks mounting multi-device filesystems
- update to 6.6
  * new global option --dry-run, now implemented for 'subvolume delete'
  * fi defrag: new option --step to defragment files in steps, report progress
  * balance: removed support for obsolete short syntax 'btrfs balance /path'
  * mkfs: print zone count for each device in the overview
  * check:
  * verify inline ref ordering
  * deprecate --clear-space-cache, moved to the 'rescue' group
  * rescue clear-space-cache: new command moved from 'btrfs check' implementing
    the same as option --clear-space-cache (to be deprecated and removed in the
    future)
  * dump-tree: output sequence number for inline refs
  * fixes:
  * fi resize: fallback to lowest devid when 1 does not exist, previously the
    command would fail with "No such device"
  * fi usage: fix "devices 0 != 1" message and broken output on multi-device
    filesystem
  * open files in non-blocking mode when reading fsid, this could hang when
    trying to open fifo files or some special character devices, was observed
    with 'prop set/get'
  * experimental:
  * mkfs: parametric zone size for emulated zoned mode
  * other:
  * cleanups refactoring
  * new and updated tests
  * CI updates
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1706184000">- update to 6.7
  * mkfs: make 4k sectorsize default, recommended minimum kernel for that is
    6.1 and requires subpage support on architectures with page size &gt; 4k
  * subvolume create: return correct error code when a target already exists
  * tree-checker: dump tree block on error (btrfs-convert, ...)
  * scrub limit: fix reporting of a limit set while there's none
  * fi usage: fix reporting of unallocated data or raid56 profile without root
    privs due to lack of that information
  * convert:
  * align data block group lengths to 64K
  * fix conversion of a large filesystem when there are partial inode items
    present due to caching
  * other:
  * build fixes
  * updated documentation
  * new and updated tests
- update to 6.6.3
  * subvol create: accept multiple arguments
  * subvol delete: print the subvolume id in the output
  * subvol sync: check if the filesystems is still writeable so it does not
    wait indefinitely
  * device delete: add a timeout and warning when deleting multiple devices
  * scrub status: report limit if set in sysfs/../scrub_speed_max
  * scrub limit: new command to show or set the per-device scrub limits
  * scrub start: report the limit if set
  * build:
  * fix CPU feature detection on aarch64
  * support Botan and OpenSSL (3.2+) as crypto backends
  * other:
  * documentation updates, RTD config update
  * new and updated tests
  * CI updates</changelog>
  <changelog author="dsterba@suse.cz" date="1707998400">- update to 6.7.1
  * convert: raid-stripe-tree can be now enabled for the target filesystem
  * mkfs:
  * handle lifetime of open file descriptors so it does not trigger udev
    that could miss to create the UUID symlinks in /dev
  * update warning when CPU page size does not match sector size
  * merge features in summary, no more distinction of incompat and runtime
    to match the semantics of option -O
  * fi show: fix recognizing raw device mapper paths
  * other:
  * documentation updates, fix links to labels in included directories</changelog>
  <changelog author="dsterba@suse.cz" date="1711454400">- update to 6.8
  * fix --enqueue option timeout handling
  * subvolume: remove support for undocumented options -c and -x,
    functionality disabled in kernel
  * libbtrfsutil:
  * version 0.1.3, backward compabile
  * add aliases for all existing functions with unified naming scheme
  * updated header defintions for recently added kernel features
  * send: v3 supported in experimental mode
  * other:
  * docs: manual page references, graphs, enhancements, clarifications
  * error handling fixes
  * cleanups and refactoring</changelog>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
</package>
<package pkgid="af1eebaf28bc47002a7aa3fafa0ac70bf646b61e74b98a86fa1cc5dd47c42965050ad8f11ab67b2d639ad3df0d0a49f7e90b0181688c338aa717db8beb065195" name="libburn-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="slfo.1.1_1.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1401451200">- Update to version 1.3.6.pl01:
  libburn:
  * Bug fix: Compilation warning for unsupported systems mutated into an error.
    This is a regression introduced by release 1.3.6.
  From version 1.3.6:
  * New system adapter for NetBSD
  * Bug fix: CD TAO with multiple tracks or add-on sessions could cause a
    buffer overrun by one 0-byte.
- Split libburn from libburnia and make it a separate package.
- Added cdrskin as a subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1425816000">- Update to 1.3.8
  * Bug fix: Wrong stack usage caused SIGBUS on sparc when
    compiled by gcc -O2
  * Bug fix: Minimum drive buffer fill was measured by cdrskin
    before the buffer could get full
  * Bug fix: A failed MMC BLANK command did not cause error
    indication by libburn
  * Bug fix: A final fsync(2) was performed with stdio drives,
    even if not desired</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1432555200">- Update to 1.4.0:
  libburn:
  * Bug fix: Wrong read access to memory.
  cdrskin:
  * Bug fix: Double free with cdrskin -vvv. Introduced with
    rev 5065, version 1.3.1.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to 1.4.2.pl01:
  cdrskin:
  * Bug fix: cdrskin "failed to attach fifo" when burning from
    stdin. Regression of 1.4.2, rev 5522.
  From 1.4.2:
  libburn:
  * Bug fix: burn_disc_get_media_id() returned BD identifiers 2
    chars too long
  * Bug fix: burn_disc_get_multi_caps() returned 2048 bytes too
    many in caps.start_range_high
  * Bug fix: Media summary session count of blank and closed media
    was short by 1
  * Bug fix: Endless loop if transport error occurs while waiting
    for drive ready
  * New API calls burn_drive_get_serial_no() and
    burn_drive_get_media_sno()
  * Result of a Coverity audit: 40+ code changes, but no
    easy-to-trigger bugs
  cdrskin:
  * New -toc line "Drive id" tells the drive's individual serial
    number</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: Option drive_scsi_dev_family=sg did not convert
    /dev/sr* to /dev/sg*
  * Bug fix: burn_make_input_sheet_v07t() falsly recognized double
    byte encoding. Affected cdrskin option: cdtext_to_v07t=
  * Bug fix: Double free at end of run if
    burn_write_opts_set_leadin_text() is used. Affected cdrskin
    option: textfile=
  * Bug fix: DVD book type of DVD+RW DL and DVD+R DL was reported
    wrong.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: SAO CD could be perceived 2 blocks to short.
    Regression in 1.4.4 by rev 5672.
  * New API call burn_drive_set_immed()
  * New cdrskin option use_immed_bit=</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: Option -dummy did not affect writing by
    direct_write_amount=
  * New API call burn_drive_reset_simulate()
  * New API call burn_drive_get_bd_r_pow()
  * Refusing to write to BD-R if formatted to Pseudo Overwrite</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to 1.5.0:
  * User defined padding was moved after appended partitions
  * xorriso and libisoburn make user of the new xattr capability of libisofs
  * libburn got some rarely triggered bugs fixed</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 1.5.2.pl01
  * Bug fix
  + cdrskin multi-track burning was slow and stalled after track 1.
    Regression introduced in version 1.5.0, O_DIRECT is now
    disabled for track sources.
  version 1.5.2:
  * Bug fixes
    + No lock was obtained for setting up a fifo object
    + Stream recording was applied regardless whether the drive
    offers it. This caused Xfburn failures with some MATSHITA
    laptop drives.
    + TDK Corporation was not recognized as manufacturer of
    DVD-R "TTH02"
  * Made libburn ready for building out-of-source.
  * New API calls burn_drive_get_feature_codes(),
    burn_drive_get_feature()
  * New cdrskin option --list_features
- Added signature file and keyring as sources
- Spec cleanup</changelog>
  <changelog author="dmueller@suse.com" date="1614081600">- update to 1.5.4:
  * Bug fix: Early SCSI commands from sg-linux.c were not logged
  * New API call burn_drive_set_speed_exact()
  * New API call burn_nominal_slowdown()</changelog>
</package>
<package pkgid="8fd6a09337aad81cc52efb63294022a5d01cb34b91a818f2dd0092103dd8eccd43418fc5d30af348b48ec135fb7cdc6a6d8d7017fd1131f04a23e1ad8a69936c" name="libburn4-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="slfo.1.1_1.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1401451200">- Update to version 1.3.6.pl01:
  libburn:
  * Bug fix: Compilation warning for unsupported systems mutated into an error.
    This is a regression introduced by release 1.3.6.
  From version 1.3.6:
  * New system adapter for NetBSD
  * Bug fix: CD TAO with multiple tracks or add-on sessions could cause a
    buffer overrun by one 0-byte.
- Split libburn from libburnia and make it a separate package.
- Added cdrskin as a subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1425816000">- Update to 1.3.8
  * Bug fix: Wrong stack usage caused SIGBUS on sparc when
    compiled by gcc -O2
  * Bug fix: Minimum drive buffer fill was measured by cdrskin
    before the buffer could get full
  * Bug fix: A failed MMC BLANK command did not cause error
    indication by libburn
  * Bug fix: A final fsync(2) was performed with stdio drives,
    even if not desired</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1432555200">- Update to 1.4.0:
  libburn:
  * Bug fix: Wrong read access to memory.
  cdrskin:
  * Bug fix: Double free with cdrskin -vvv. Introduced with
    rev 5065, version 1.3.1.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to 1.4.2.pl01:
  cdrskin:
  * Bug fix: cdrskin "failed to attach fifo" when burning from
    stdin. Regression of 1.4.2, rev 5522.
  From 1.4.2:
  libburn:
  * Bug fix: burn_disc_get_media_id() returned BD identifiers 2
    chars too long
  * Bug fix: burn_disc_get_multi_caps() returned 2048 bytes too
    many in caps.start_range_high
  * Bug fix: Media summary session count of blank and closed media
    was short by 1
  * Bug fix: Endless loop if transport error occurs while waiting
    for drive ready
  * New API calls burn_drive_get_serial_no() and
    burn_drive_get_media_sno()
  * Result of a Coverity audit: 40+ code changes, but no
    easy-to-trigger bugs
  cdrskin:
  * New -toc line "Drive id" tells the drive's individual serial
    number</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: Option drive_scsi_dev_family=sg did not convert
    /dev/sr* to /dev/sg*
  * Bug fix: burn_make_input_sheet_v07t() falsly recognized double
    byte encoding. Affected cdrskin option: cdtext_to_v07t=
  * Bug fix: Double free at end of run if
    burn_write_opts_set_leadin_text() is used. Affected cdrskin
    option: textfile=
  * Bug fix: DVD book type of DVD+RW DL and DVD+R DL was reported
    wrong.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: SAO CD could be perceived 2 blocks to short.
    Regression in 1.4.4 by rev 5672.
  * New API call burn_drive_set_immed()
  * New cdrskin option use_immed_bit=</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: Option -dummy did not affect writing by
    direct_write_amount=
  * New API call burn_drive_reset_simulate()
  * New API call burn_drive_get_bd_r_pow()
  * Refusing to write to BD-R if formatted to Pseudo Overwrite</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to 1.5.0:
  * User defined padding was moved after appended partitions
  * xorriso and libisoburn make user of the new xattr capability of libisofs
  * libburn got some rarely triggered bugs fixed</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 1.5.2.pl01
  * Bug fix
  + cdrskin multi-track burning was slow and stalled after track 1.
    Regression introduced in version 1.5.0, O_DIRECT is now
    disabled for track sources.
  version 1.5.2:
  * Bug fixes
    + No lock was obtained for setting up a fifo object
    + Stream recording was applied regardless whether the drive
    offers it. This caused Xfburn failures with some MATSHITA
    laptop drives.
    + TDK Corporation was not recognized as manufacturer of
    DVD-R "TTH02"
  * Made libburn ready for building out-of-source.
  * New API calls burn_drive_get_feature_codes(),
    burn_drive_get_feature()
  * New cdrskin option --list_features
- Added signature file and keyring as sources
- Spec cleanup</changelog>
  <changelog author="dmueller@suse.com" date="1614081600">- update to 1.5.4:
  * Bug fix: Early SCSI commands from sg-linux.c were not logged
  * New API call burn_drive_set_speed_exact()
  * New API call burn_nominal_slowdown()</changelog>
</package>
<package pkgid="46db808fef9f0172031b71b623895d8daef82c96db181c830a8c7c8a6d242dc03ac8655b48747bdc2e73a829bbe5811ad78c20f77010721ab2d2ebb228cc2bb8" name="libbytesize-debugsource" arch="aarch64">
  <version epoch="0" ver="2.8" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1517832000">- Clear up unusual grammar in description.
- Replace %__-type macro indirections by their normal variants.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517918400">- Add a %{name}-lang Recommends tag in the preamble and a %{name}
  Provides tag under the lib subpackage so the lang subpackge can
  be installable.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 1.3:
  + Do not segfault when trying to bs_size_free NULL.
- Cleanup specfile removing deprecations.
- Update LGPL License tag appending '-only' to comply with SPDX
  3.0.
- Add gcc BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 1.4:
  + There are only small changes in this release.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.4:
  * remove msgcat dependency
  * Translated using Weblate (Bengali (India))
  * Add Travis build status badge
  * Update translation files
  * add translation platform widget
  * Translated using Weblate (Turkish)
  * Fix memory leak in bs_size_new_from_str
  * Update translation files
  * src/gettext: fix warning if gettext is already present
  * fix build on shells where test == fails
  * Require the same version of python3-bytesize in libbytesize-tools
  * New minor release of the libbytesize library. There are only two bugfixes in this release.
  * Full list of changes
  * fix out of tree build failure
  * Fix return value for round_to_nearest when using Size
  * New bytesize calculator bssize has been added.
  * Code has been ported from PCRE to PCRE2.
  * Python 2 support has been removed.
  * Run all libbytesize tests from one script
  * Add all "public" python API symbols to __init__.py
  * Allow running tests using installed library
  * Remove Python 2 support
  * Port to pcre2
  * Add support for floor division by a non-integer number in Python
  * Add a simple bytesize calculator tool
  * Add tools to autotools and packaging
  * Exit with 1 from configure if there were failures
  * Add a summary to the end of ./configure output
  * Only support modulo between two Size instances
  * Fix parsing of exponential representations of real numbers
  * Add the '--version' option to bs_calc.py
  * Add a man page for the bscalc tool
  * Assume the given expression is in bytes if no unit is given</changelog>
  <changelog author="dmueller@suse.com" date="1612008000">- update to 2.5:
  * translation updates
  * tools: Read input from stdin when not running in a tty
  * Add support to ppc64le for debian build
  * testsuite fixes</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.6:
  * Make sure Size can be interpreted as integer in Python 3.10
  * Translation updates</changelog>
  <changelog author="dmueller@suse.com" date="1657800000">- update to 2.7:
  * Fix skipping tests when required locale is missing
  * Remove Travis CI configuration
  * Fix some warnings and typos in docstrings and comments
  * Fix warnings dicovered by the GCC analyzer
  * build: avoid bashisms in configure
  * Update translation files
  * Do not use distutils to get Python library path</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 2.8:
  * Added translation using Weblate
  * configure.ac: Remove invalid email address for bug reports
  * spec: Bump release to 21 for Packit daily builds
  * spec: Fix source archive URL
  * Make use of error optional
  * Replace C++ style comments with C style
  * Various docstring fixes
  * docs: Remove information about Python 2 support
  * Remove unused test dependencies variables from Makefile
  * Do not hardcode pylint executable name in Makefile</changelog>
  <changelog author="luc14n0@opensuse.org" date="1683374400">- Drop lang sub-package recommendation. It's not needed anymore now
  that lang packages provide package supplementation instead.
- Make bscalc sub-package 'noarch', since it doesn't contain any
  binaries, only a Python script and its manpage.</changelog>
</package>
<package pkgid="3a3422ea9a5e0bcf9494e482a676bef1f40f17cf93dc6000f7a59e6aec4a21b975ea125786d7ba0bda5e9d2738e16c4a9356cf52209579698ee82875776b2389" name="libbytesize1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.8" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1517832000">- Clear up unusual grammar in description.
- Replace %__-type macro indirections by their normal variants.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517918400">- Add a %{name}-lang Recommends tag in the preamble and a %{name}
  Provides tag under the lib subpackage so the lang subpackge can
  be installable.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 1.3:
  + Do not segfault when trying to bs_size_free NULL.
- Cleanup specfile removing deprecations.
- Update LGPL License tag appending '-only' to comply with SPDX
  3.0.
- Add gcc BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 1.4:
  + There are only small changes in this release.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.4:
  * remove msgcat dependency
  * Translated using Weblate (Bengali (India))
  * Add Travis build status badge
  * Update translation files
  * add translation platform widget
  * Translated using Weblate (Turkish)
  * Fix memory leak in bs_size_new_from_str
  * Update translation files
  * src/gettext: fix warning if gettext is already present
  * fix build on shells where test == fails
  * Require the same version of python3-bytesize in libbytesize-tools
  * New minor release of the libbytesize library. There are only two bugfixes in this release.
  * Full list of changes
  * fix out of tree build failure
  * Fix return value for round_to_nearest when using Size
  * New bytesize calculator bssize has been added.
  * Code has been ported from PCRE to PCRE2.
  * Python 2 support has been removed.
  * Run all libbytesize tests from one script
  * Add all "public" python API symbols to __init__.py
  * Allow running tests using installed library
  * Remove Python 2 support
  * Port to pcre2
  * Add support for floor division by a non-integer number in Python
  * Add a simple bytesize calculator tool
  * Add tools to autotools and packaging
  * Exit with 1 from configure if there were failures
  * Add a summary to the end of ./configure output
  * Only support modulo between two Size instances
  * Fix parsing of exponential representations of real numbers
  * Add the '--version' option to bs_calc.py
  * Add a man page for the bscalc tool
  * Assume the given expression is in bytes if no unit is given</changelog>
  <changelog author="dmueller@suse.com" date="1612008000">- update to 2.5:
  * translation updates
  * tools: Read input from stdin when not running in a tty
  * Add support to ppc64le for debian build
  * testsuite fixes</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.6:
  * Make sure Size can be interpreted as integer in Python 3.10
  * Translation updates</changelog>
  <changelog author="dmueller@suse.com" date="1657800000">- update to 2.7:
  * Fix skipping tests when required locale is missing
  * Remove Travis CI configuration
  * Fix some warnings and typos in docstrings and comments
  * Fix warnings dicovered by the GCC analyzer
  * build: avoid bashisms in configure
  * Update translation files
  * Do not use distutils to get Python library path</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 2.8:
  * Added translation using Weblate
  * configure.ac: Remove invalid email address for bug reports
  * spec: Bump release to 21 for Packit daily builds
  * spec: Fix source archive URL
  * Make use of error optional
  * Replace C++ style comments with C style
  * Various docstring fixes
  * docs: Remove information about Python 2 support
  * Remove unused test dependencies variables from Makefile
  * Do not hardcode pylint executable name in Makefile</changelog>
  <changelog author="luc14n0@opensuse.org" date="1683374400">- Drop lang sub-package recommendation. It's not needed anymore now
  that lang packages provide package supplementation instead.
- Make bscalc sub-package 'noarch', since it doesn't contain any
  binaries, only a Python script and its manpage.</changelog>
</package>
<package pkgid="33e5a5ca90236f8eebdb74ef4ebbc95cfd937edaad288edec5b8630f6c810fc068338270d8b14b955d2661c30804f43952aeff2b031dcaaf9077354c3a5c6871" name="libbz2-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="slfo.1.1_1.4"/>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534852800">- Replace the URL. The bzip.org owner changed [bsc#1104445].
- Remove the URL from the 'Source' line. The 1.0.6 version is not
  available.
- Run spec-cleaner.</changelog>
  <changelog author="kstreitova@suse.com" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561636800">- Update to version 1.0.7:
  * Fix undefined behavior in the macros SET_BH, CLEAR_BH, &amp;
    ISSET_BH.
  * bzip2: Fix return value when combining --test,-t and -q.
  * bzip2recover: Fix buffer overflow for large argv[0].
  * bzip2recover: Fix use after free issue with outFile
    (CVE-2016-3189).
  * Make sure nSelectors is not out of range (CVE-2019-12900
    bsc#1139083)
- Drop patches fixed upstream:
  * bzip2-unsafe_strcpy.patch.
  * bzip2-1.0.6-CVE-2016-3189.patch.
- Refresh patches with quilt.</changelog>
  <changelog author="mpluskal@suse.com" date="1561723200">- Update bug reference
- Fix downloaded patches</changelog>
  <changelog author="kstreitova@suse.com" date="1563796800">- Update to version 1.0.8:
  * Accept as many selectors as the file format allows.
    This relaxes the fix for CVE-2019-12900 from 1.0.7
    so that bzip2 allows decompression of bz2 files that
    use (too) many selectors again.
  * Fix handling of large (&gt; 4GB) files on Windows.
  * Cleanup of bzdiff and bzgrep scripts so they don't use
    any bash extensions and handle multiple archives correctly.
- remove (applied upstream)
  * bzip2-1.0.6-fix-bashisms.patch
  * bzip2-1.0.6-bzgrep_return_value.patch
- use a new Source url</changelog>
  <changelog author="suse+build@de-korte.org" date="1572436800">- Use correct version in autotools patchset
  M bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static)
- Use %autosetup (rediff bzip2-1.0.6.2-autoconfiscated.patch to p1)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Port rpmlintrc format to rpmlint 2.x.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
</package>
<package pkgid="3b05c4cb0517e0ac0021779f99579270011ff10852077b4ec861cb78f25a99bf0b6b1d74b0c31a3156c7e8ffad0decf670997fb379a78e75652504cf614cb69d" name="libcairo-gobject2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.17.8" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
</package>
<package pkgid="b4753e1e76185c18ca988cdba22c95c4438ac3334f43e448a3be5d69f401a4a8a83585d65be99762ad0cb7e3503c874fda455cfb3dcd76156700c97763580fd3" name="libcairo2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.17.8" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
</package>
<package pkgid="6cf50919a3d8a5dffce8cdd31241eedd5f18c68d7b7c1fe3dd41724c81613b96320afa808196747710c33664f2d89bb2671275697f0b321dd5eb4844291c48e6" name="libcap-debugsource" arch="aarch64">
  <version epoch="0" ver="2.69" rel="slfo.1.1_1.3"/>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="dmueller@suse.com" date="1649764800">- update to 2.64:
  * Fix memory leak in libpsx at program exit.
  * Be more resilient to CGo configuration with Go compiler when building tests.
  * Fix cap_*prctl() return code/errno handling.
  * Minor clarification to cap_get_pid() man page concerning pid
    value within namespaces.</changelog>
  <changelog author="dmueller@suse.com" date="1658491200">- update to 2.65:
  * Fix syntax error in DEBUG build of protected code in setcap.c.
  * Prevent bash from reading the wrong startup files when the capsh --user=xxx
    argument is used to invoke a shell as the user xxx. This is done by capsh now
    changing the USER and HOME environment variables when --user is specified.
    The argument --noenv can be used to suppress this behavior to what used to be
    the problematic default. (Bug: 215926)
  * Improved documentation</changelog>
  <changelog author="dmueller@suse.com" date="1664452800">- update to 2.66:
  * Fix documentation typos in cap_from_text.3
  * Some getpcaps code clean up and a fix for PID argument parsing from Jakub
    Wilk.
  * Slightly more robust Makefiles to address an error with make -j48 test observed
  * Include a simple Go program, captrace, to trace kernel capability validation
    checks
  * This program can be used to figure out what capabilities a program needs to
    operate.
  * captrace (a wrapper for bpftrace) uses BPF kprobes to monitor the kernel for
    capability checks and whether or not they succeed for the system, a specific
    PID or a program's direct execution.
  * Trim down the default file capabilities for contrib/sucap/su to those actually
    needed and set USER and HOME environment variables so bash doesn't complain
    about a sourcing error.</changelog>
  <changelog author="dmueller@suse.com" date="1675512000">- update to 2.67:
  * Replace use of fgrep with grep -F (POSIX grep flags preferred by
    GNU grep) - patch from David Seifert.
  * Added SPDX identifiers to License file(s). Hopefully this will
    help the various robots out there correctly identify the
    longstanding licenses for libcap and friends. (Bug: 216609
    reported by Günther Noack)
  * Started down the rabbit hole of trying to address (Bug: 216610
    reported by Günther Noack on behalf of Michael Stapelberg)
  * The basic issue is how to link C code with Go psx without using
    CGo. This is all a low level hackery. If you are interested,
    browse the source.
  * Correct for bad whatis entries in man pages (this was throwing a
    Debian build test, detail)
  * Also reviewed man pages and addressed cross linkage issues (Bug:
  * Cleaned up some README.md files (made a github mirror now just so
    I can automatically render them).
  * Changed meaning of DYNAMIC=no builds.
    This now builds everything with static linking except for libc.
    The reason for this exception is explained in the commit message.
  * Inserted demonstration exploit code in capso.so to support
    article.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine.</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Revert LTO again; it still breaks builds</changelog>
  <changelog author="mliska@suse.cz" date="1679659201">- Enable LTO and add missing -ffat-lto-objects for the provided
  static libs.</changelog>
  <changelog author="dmueller@suse.com" date="1680177600">- update to 2.68:
  * Force libcap internal functions to be hidden outside the library
  * Expanded the list of man page (links) to all of the supported API
    functions.
  * fixed some formatting issues with the libpsx(3) manpage.
  * Add support for a markdown preamble and postscript when generating
    .md versions of the man pages (Bug 217007)
  * psx package clean up
  * fix some copy-paste errors with TestShared()
  * added a more complete psx testing into this test as well
  * cap package clean up
  * drop an unnecessary use of ", _" in the sources
  * cleaned up cap.NamedCount documentation
  * Converted goapps/web/README to .md format and fixed the
    instructions to indicate go mod tidy is needed.
  * cap_compare test binary now cleans up after itself (Bug 217018)
  * Figured out how to cross compile Go programs for arm (i.e. RPi) that
    use C code, don't use cgo but do use the psx package
  * Eliminate use of vendor directory</changelog>
  <changelog author="meissner@suse.com" date="1684238400">- updated to 2.69
  - An audit was performed on libcap and friends by https://x41-dsec.de/ (blog) . The audit (final report, 2023-05-10) was sponsored by the the Open Source Technology Improvement Fund, https://ostif.org/ (blog). Five issues were found. Four of them are addressed in this release. Each issue was labeled in the audit results as follows:
  - LCAP-CR-23-01 (SEVERITY) LOW (CVE-2023-2602) - found by David Gstir (bsc#1211418)
  - LCAP-CR-23-02 (SEVERITY) MEDIUM (CVE-2023-2603) - found by Richard Weinberger (bsc#1211419)
  - LCAP-CR-23-100 (SEVERITY) NONE
  - LCAP-CR-23-101 (SEVERITY) NONE
  - LCAP-CR-23-102 (SEVERITY) NONE
  - Man page style improvement from Emanuele Torre</changelog>
</package>
<package pkgid="4ec9db724fc4a29a405bc71df7f9dcdf5d71102eae07f965991ead25443b47fd9ab562ee41ad47840aedd2f6d2f539d271cf55bbed4b1088615d1713450d61b0" name="libcap-ng-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8.3" rel="slfo.1.1_1.4"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Update to version 0.7.7
  * Make sure all types used in _lnode are defined in proc-llist.h
  * Fix python binding test for old kernels
  * Fix leaked FD in library init
- Changes from version 0.7.6
  * Fix python3 support
- Changes from version 0.7.5
  * Make python3 supported
  * In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap
  * Update table for 3.16 kernel</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1495022400">- Update to version 0.7.8:
  * Improve Python3 support
  * Fix the thread separation test
  * Correct typo in cap_pacct text
  * Update man page for captest
  * Fix sscanf string lengths in netcap
  * Correct linking of python3 module</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 0.7.9:
  * Detect and output a couple errors in filecap
  * Use pthread_atfork to optionally reset the pid and related info
    on fork
- cleanup with spec-cleaner
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1518955201">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="dimstar@opensuse.org" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="info@paolostivanin.com" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="rpm@fthiessen.de" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="info@paolostivanin.com" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="0879fa2b85092b1275cea8fe90158354ce38ee99fbf67e68b0de3e88cce3d7be38228907cc09b0524af21a0528ac68c2f3e8df5fdbffdd80a3e11757b84ff104" name="libcap-ng0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8.3" rel="slfo.1.1_1.4"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Update to version 0.7.7
  * Make sure all types used in _lnode are defined in proc-llist.h
  * Fix python binding test for old kernels
  * Fix leaked FD in library init
- Changes from version 0.7.6
  * Fix python3 support
- Changes from version 0.7.5
  * Make python3 supported
  * In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap
  * Update table for 3.16 kernel</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1495022400">- Update to version 0.7.8:
  * Improve Python3 support
  * Fix the thread separation test
  * Correct typo in cap_pacct text
  * Update man page for captest
  * Fix sscanf string lengths in netcap
  * Correct linking of python3 module</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 0.7.9:
  * Detect and output a couple errors in filecap
  * Use pthread_atfork to optionally reset the pid and related info
    on fork
- cleanup with spec-cleaner
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1518955201">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="dimstar@opensuse.org" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="info@paolostivanin.com" date="1589284800">- Update to 0.7.10:
  * Update capng_change_id man page
  * Add capng_have_permitted_capabilities function
  * Update filecap to output which set the capabilities are in
  * Fix filecap to not output an error when a file has no capabilities
  * Add udplite support to netcap
  * Fix usage of pthread_atfork (Joe Orton)
  * Mark processes in child user namespaces with * (Danila Kiver)</changelog>
  <changelog author="rpm@fthiessen.de" date="1639051200">- Update to 0.7.11
  * Really clear bounding set if asked in capng_change_id
  * Add CAP_PERFMON, CAP_BPF, &amp; CAP_CHECKPOINT_RESTORE
  * Avoid malloc/free in capng_apply (Natanael Copa)
  * If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc</changelog>
  <changelog author="info@paolostivanin.com" date="1652097600">- Update to 0.8.3:
  * Add vararg support to python bindings for capng_updatev
  * Add support for ambient capabilities
  * Add support for V3 filesystem capabilities
  * If procfs is not available, leave last_cap as CAP_LAST_CAP
  * If bounding and ambient not found in status, try prctl method
  * In capng_apply, move ambient caps to the end of the transaction
  * In capng_apply, return errors more aggressively.
  * In capng_apply, if the action includes the bounding set,resync with the kernel
  * Fix signed/unsigned warning in cap-ng.c
  * In capng_apply, return a unique error code to diagnose any failure
  * In capng_have_capability, return 0 for failure
  * Add the libdrop_ambient admin tool
  * In capng_apply, if we blew up in bounding set, allow setting capabilities
  * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
  * Improve last_cap check
  * Fix parameters to capng_updatev python bindings to be signed
  * Detect capability options at runtime to make containerization easier (ntkme)
  * Initialize the library when linked statically
  * Add gcc function attributes for deallocation</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="0ff342882c89aab1a5c5236e806c344cf1e440587600847bacac755483d8d8194448fa732dfa3050eee15e9cf435fc3d042b210ab13659537849100caa52d594" name="libcap2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.69" rel="slfo.1.1_1.3"/>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="dmueller@suse.com" date="1649764800">- update to 2.64:
  * Fix memory leak in libpsx at program exit.
  * Be more resilient to CGo configuration with Go compiler when building tests.
  * Fix cap_*prctl() return code/errno handling.
  * Minor clarification to cap_get_pid() man page concerning pid
    value within namespaces.</changelog>
  <changelog author="dmueller@suse.com" date="1658491200">- update to 2.65:
  * Fix syntax error in DEBUG build of protected code in setcap.c.
  * Prevent bash from reading the wrong startup files when the capsh --user=xxx
    argument is used to invoke a shell as the user xxx. This is done by capsh now
    changing the USER and HOME environment variables when --user is specified.
    The argument --noenv can be used to suppress this behavior to what used to be
    the problematic default. (Bug: 215926)
  * Improved documentation</changelog>
  <changelog author="dmueller@suse.com" date="1664452800">- update to 2.66:
  * Fix documentation typos in cap_from_text.3
  * Some getpcaps code clean up and a fix for PID argument parsing from Jakub
    Wilk.
  * Slightly more robust Makefiles to address an error with make -j48 test observed
  * Include a simple Go program, captrace, to trace kernel capability validation
    checks
  * This program can be used to figure out what capabilities a program needs to
    operate.
  * captrace (a wrapper for bpftrace) uses BPF kprobes to monitor the kernel for
    capability checks and whether or not they succeed for the system, a specific
    PID or a program's direct execution.
  * Trim down the default file capabilities for contrib/sucap/su to those actually
    needed and set USER and HOME environment variables so bash doesn't complain
    about a sourcing error.</changelog>
  <changelog author="dmueller@suse.com" date="1675512000">- update to 2.67:
  * Replace use of fgrep with grep -F (POSIX grep flags preferred by
    GNU grep) - patch from David Seifert.
  * Added SPDX identifiers to License file(s). Hopefully this will
    help the various robots out there correctly identify the
    longstanding licenses for libcap and friends. (Bug: 216609
    reported by Günther Noack)
  * Started down the rabbit hole of trying to address (Bug: 216610
    reported by Günther Noack on behalf of Michael Stapelberg)
  * The basic issue is how to link C code with Go psx without using
    CGo. This is all a low level hackery. If you are interested,
    browse the source.
  * Correct for bad whatis entries in man pages (this was throwing a
    Debian build test, detail)
  * Also reviewed man pages and addressed cross linkage issues (Bug:
  * Cleaned up some README.md files (made a github mirror now just so
    I can automatically render them).
  * Changed meaning of DYNAMIC=no builds.
    This now builds everything with static linking except for libc.
    The reason for this exception is explained in the commit message.
  * Inserted demonstration exploit code in capso.so to support
    article.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine.</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Revert LTO again; it still breaks builds</changelog>
  <changelog author="mliska@suse.cz" date="1679659201">- Enable LTO and add missing -ffat-lto-objects for the provided
  static libs.</changelog>
  <changelog author="dmueller@suse.com" date="1680177600">- update to 2.68:
  * Force libcap internal functions to be hidden outside the library
  * Expanded the list of man page (links) to all of the supported API
    functions.
  * fixed some formatting issues with the libpsx(3) manpage.
  * Add support for a markdown preamble and postscript when generating
    .md versions of the man pages (Bug 217007)
  * psx package clean up
  * fix some copy-paste errors with TestShared()
  * added a more complete psx testing into this test as well
  * cap package clean up
  * drop an unnecessary use of ", _" in the sources
  * cleaned up cap.NamedCount documentation
  * Converted goapps/web/README to .md format and fixed the
    instructions to indicate go mod tidy is needed.
  * cap_compare test binary now cleans up after itself (Bug 217018)
  * Figured out how to cross compile Go programs for arm (i.e. RPi) that
    use C code, don't use cgo but do use the psx package
  * Eliminate use of vendor directory</changelog>
  <changelog author="meissner@suse.com" date="1684238400">- updated to 2.69
  - An audit was performed on libcap and friends by https://x41-dsec.de/ (blog) . The audit (final report, 2023-05-10) was sponsored by the the Open Source Technology Improvement Fund, https://ostif.org/ (blog). Five issues were found. Four of them are addressed in this release. Each issue was labeled in the audit results as follows:
  - LCAP-CR-23-01 (SEVERITY) LOW (CVE-2023-2602) - found by David Gstir (bsc#1211418)
  - LCAP-CR-23-02 (SEVERITY) MEDIUM (CVE-2023-2603) - found by Richard Weinberger (bsc#1211419)
  - LCAP-CR-23-100 (SEVERITY) NONE
  - LCAP-CR-23-101 (SEVERITY) NONE
  - LCAP-CR-23-102 (SEVERITY) NONE
  - Man page style improvement from Emanuele Torre</changelog>
</package>
<package pkgid="873214026d2d287a32a941529e9a9c3fa5e66846884396402a6bd1df70f580b24de28ac0fc96d076069ea11fb7d4093691840d6b6f38d825863d2eb286bad094" name="libcapstone4-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.0.2" rel="slfo.1.1_2.1"/>
  <changelog author="mardnh@gmx.de" date="1514462400">- Specfile cleanup</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1518436800">- Correct the license tag, Capstone is BSD-3-Clause
- Provide python3 bindings
- Rename bindings subpackage to docs, it does not contain any
  bindings but documentation
- Package some more documentation
- Build with %{optflags}</changelog>
  <changelog author="afaerber@suse.de" date="1523793600">- Update to 3.0.5-rc2
  * Package cstool
- Adopt %license</changelog>
  <changelog author="brogers@suse.com" date="1534334400">- Update to 3.0.5
  * build static library (but still don't install), since build
  explicitly links cstool against it</changelog>
  <changelog author="aloisio@gmx.com" date="1586433600">- Update to version 4.0.1
  [ Core ]
  * Fix some issues for packaging (Debian, Gentoo).
  * Better support for building with Mingw.
  * cstool has new option -s to turn on skipdata mode.
  * cstool -v now report build settings of the core.
  * Add suite/capstone_get_setup.c so users can integrate with
    their own code
  * to retrieve Capstone settings at build time.
  [ Arm ]
  * Fix 4.0 regression: the tbh [r0, r1, lsl #1] instruction
    sets the operand.shift.value back again.
  * Remove ARM_REG_PC group for BX instruction.
  [ X86 ]
  * Fix: endbr32 and endbr64 instructions are now properly
    decoded in both CS_MODE_32 and CS_MODE_64.
  [ M680X ]
  * Fix some issues reported by clang-analyzer.
  [ Python ]
  * Fix skipdata setup.
  * Add getter/setter for skipdata_mnem, skipdata_callback.
  version 4.0:
  [ Core ]
  * New APIs: cs_regs_access()
  * Add new options for cs_option(): CS_OPT_MNEMONIC &amp;
    CS_OPT_UNSIGNED &amp; CS_OPT_SYNTAX_MASM.
  * Various updates &amp; bugfixes for all architectures.
  * Add 4 new architectures: EVM, M68K, M680X &amp; TMS320C64x.
  * Add new group types: CS_GRP_PRIVILEGE &amp;
    CS_GRP_BRANCH_RELATIVE.
  * Add new error types: CS_ERR_X86_MASM.
  [ X86 ]
  * Add XOP code condition type in x86_xop_cc.
  * Add some info on encoding to cs_x86 in cs_x86_encoding.
  * Add register flags update in cs_x86.{eflags, fpu_flags}
  * Change cs_x86.disp type from int32_t to int64_t.
  * Add new groups: X86_GRP_VM &amp; X86_GRP_FPU.
  * Lots of new instructions (AVX)
  [ ARM64 ]
  * Add instruction ARM64_INS_NEGS &amp; ARM64_INS_NGCS.
  [ Mips ]
  * Add mode CS_MODE_MIPS2.
  [ PPC ]
  * Change cs_ppc_op.imm type from int32_t to int64_t.
  * Add new groups: PPC_GRP_ICBT, PPC_GRP_P8ALTIVEC,
    PPC_GRP_P8VECTOR &amp; PPC_GRP_QPX.
  * Lots of new instructions (QPX among them)
  [ Sparc ]
  * Change cs_sparc_op.imm type from int32_t to int64_t.
  [ Binding ]
  * New bindings: PowerShell &amp; VB6
- Bumped sover to 4
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1590408000">- Rename -docs subpackage to -doc to follow openSUSE practices.
- Descriptions: say what the package is, not what it wants to be.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 4.0.2
  Windows kernel-mode driver support
  - Add armv8, ppc32 &amp; thumbv8 modes
  - Print instruction ID
  - Support CS_OPT_UNSIGNED for ATT syntax
  - Fix operand size for some instructions
  - Fix LOCK prefixes
  - Recognize xacquire/xrelease prefix
  - Fix call/jmp access mode of mem operand
  - Add ENDBR32, ENDBR64 to reduce mode
  - Other minor fixes
  - Support CS_OPT_UNSIGNED
  - Fix register access flags for memory instructions
  - Fix UMOV vess
  - Update writeback for STR_POST_REG
  - Store correct register value in op.reg_pair
  - BDZLA is absolute branch
  - Fix truncated 64bit imm operand
  - Fix base/index printing
  - Fix skipdata struct being destroyed
  - Add __repr__ for capstone.CsInsn
  - Fix Java bindings to use pointers instead of longs
  - Fix x86_op record</changelog>
  <changelog author="mwilck@suse.com" date="1672747200">- Enable static library, and add libcapstone-devel-static subpackage
  (this is helpful for qemu-linux-user)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766145600">- Fix bsc#1255310 (CVE-2025-68114)
  Patch added:
  * fix-buffer-overflow-2c7797.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1766491200">- fix bsc#1255309 (CVE-2025-67873)
  Patch added:
  * fix-unchecked-lenght-cbef76.patch</changelog>
</package>
<package pkgid="d2f336e736251dfd56cdb3af3357bb408cdcaf8f1218946823a730752c9094269273d633640614b20a80371d7b05caee1698051f436ef4638aea723a227ff5e1" name="libcares2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.27.0" rel="slfo.1.1_1.2"/>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
  <changelog author="adam.majer@suse.de" date="1696939200">- Update to version 1.20.1
  * Remove bin/acountry from built tools as nerd.dk is gone
  * Default per-query timeout has been reduced to 2s with a 3x retry count
  * rand: add support for getrandom()
  Bug fixes:
  * TCP back to back queries were broken
  * Ensure queries for ares_getaddrinfo() are not requeued during
    destruction
  * ares_getaddrinfo() should not retry other address classes if
    one address class has already been returned
  * Avoid production ill-formed result when qualifying a name
    with the root domain
  * Fix missing prefix for CMake generated libcares.pc
  * DNS server ports can now be read from system configuration
    instead of defaulting to port 53, aka openBSD resolv.conf format
  * Replace usages of sprintf with snprintf</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1698494400">- update to 1.21.0:
  * Replace multiple DNS hand-made parsers with new memory-safe DNS
    message parser
  * developer visible changes and bug fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1701432000">- Update to version 1.23
  Features:
    Introduce optional (but on by default) thread-safety for the c-ares library. This has no API nor ABI implications.
    resolv.conf in modern systems uses attempts and timeouts options instead of the old retrans and retry options.
    Query caching support based on TTL of responses. Can be enabled via ares_init_options() with ARES_OPT_QUERY_CACHE.
  Bugfixes:
    ares_init_options() for ARES_OPT_UDP_PORT and ARES_OPT_TCP_PORT accept theport in host byte order, but it was reading it as network byte order. Regression introduced in 1.20.0.
    ares_init_options() for ARES_FLAG_NOSEARCH was not being honored forares_getaddrinfo() or ares_gethostbyname(). Regression introduced in 1.16.0.
    Autotools MacOS and iOS version check was failing
    Environment variables passed to c-ares are meant to be an override for system configuration. Regression introduced in 1.22.0.
    Spelling fixes as detected by codespell.
    The timeout returned by ares_timeout() was truncated to milliseconds butvalidated to microseconds which could cause a user to attempt to process timeouts prior to the timeout actually expiring.
    CMake was not honoring CXXFLAGS passed in via the environment which couldcause compile and link errors with distribution hardening flags during packaging.
    Fix Windows UWP and Cygwin compilation.
    ares_set_servers_*() for legacy reasons needs to accept an empty server listand zero out all servers. This results in an inoperable channel and thus is only used in simulation testing, but we don't want to break users. Regression introduced in 1.21.0.
  Changes in version 1.22.1
  Bugfixes:
    Fix /etc/hosts processing performance with all entries using same IPaddress. Large hosts files using the same IP address for all entries could use exponential time.
    Fix typos in manpages
    Fix OpenWatcom building
  Changes in version 1.22.0
  Features:
    ares_reinit() is now implemented to re-read any system configuration and immediately apply to an existing ares channel
    The adig command line program has been rewritten and its format now more closely matches that of BIND's dig utility
    The new DNS message parser and writer functions have now been made public
    RFC9460 HTTPS and SVCB records are now supported
    RFC6698 TLSA records are now supported
    The server list is now internally dynamic and can be changed without impacting existing queries
    Hosts file processing is now cached until the file is detected to be changed to speed up repetitive lookups of large hosts files
  Changes:
    Internally all DNS messages are now written using the new DNS writing functions
    EDNS is now enabled by default
    Internal cleanups in function prototypes
  Bugfixes:
    Randomize retry penalties to prevent thundering herd issues when dns servers throttle requests
    Fix Windows build error for missing if_indextoname()</changelog>
  <changelog author="adam.majer@suse.de" date="1704196800">- Update to version 1.24
  Features:
  * Add support for IPv6 link-local DNS servers. Nameserver formats
    can now accept the 0face suffix, and a new ares_get_servers_csv()
    function was added to return servers that can contain the link-local
    interface name.
  Changes:
  * Unbundle GoogleTest for test cases. Package maintainers will now
    need torequire GoogleTest (GMock) as a build dependency if
    building tests. New GoogleTest versions require C++14 or later.
  * Replace nameserver parsing code to use new memory-safe functions.
  * Replace the sortlist parser with new memory-safe functions.
  * Various warning fixes and dead code removal.
  Bugfixes:
  * Old Linux versions require POSIX_C_SOURCE or _GNU_SOURCE to
  compile with thread safety support
  * A non-responsive DNS server that caused timeouts wouldn't
  increment thefailure count, this would lead to other servers
  not being tried. Regression introduced in 1.22.0
  * Some projects that depend on c-ares expect invalid parameter
  option valuespassed into ares_init_options() to simply be
  ignored. This behavior has been restored
  * getrandom() can fail if the kernel doesn't support
  the syscall, fall back to another random source
  * ares_cancel() when performing ares_gethostbyname() or
  ares_getaddrinfo()with AF_UNSPEC, if called after one address
  class was returned but before the other address class, it
  would return ARES_SUCCESS rather than ARES_ECANCELLED
- disable-live-tests.patch: dropped, not needed</changelog>
  <changelog author="adam.majer@suse.de" date="1704715200">- Update to version 1.25
  Changes:
  o Rewrite ares_strsplit() as a wrapper for ares__buf_split() for memory
  safety reasons.
  o The ahost utility now uses ares_getaddrinfo() and returns both IPv4 and
  IPv6 addresses by default.
  Bug Fixes:
  o Tests: Live reverse lookups for Google's public DNS servers no longer
  return results, replace with CloudFlare pubic DNS servers.
  o Connection failures should increment the server failure count first or a
  retry might be enqueued to the same server
  o On systems that don't implement the ability to enumerate network interfaces
  the stubs used the wrong prototype.
  o Fix minor warnings and documentation typos
  o Fix support for older GoogleTest versions
  o getrandom() may require sys/random.h on some systems.
  o Fix building tests with symbol hiding enabled.
- 0001-Use-RPM-compiler-options.patch: dropped, obsolete</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1706961600">- c-ares 1.26.0:
  * Event Thread support. Integrators are no longer required to
    monitor the file descriptors registered by c-ares for events
    and call ares_process() when enabling the event thread feature
    via ARES_OPT_EVENT_THREAD passed to ares_init_options().
  * Added flags to are_dns_parse() to force RAW packet parsing
  * Mark ares_fds() as deprecated
  * Bug fixes
- move tests into a build flavor to avoid gtest/gmock build loop</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480000">- Ensure multibuild flavors result in different src names.</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- c-ares 1.27.0
  Security:
  * Moderate. CVE-2024-25629. Reading malformatted /etc/resolv.conf,
    /etc/nsswitch.conf or the HOSTALIASES file could result in a crash.
    GHSA-mg26-v6qh-x48q (CVE-2024-25629, bsc#1220279)
  Features:
  * New function ares_queue_active_queries() to retrieve number of in-flight
    queries. PR #712
  * New function ares_queue_wait_empty() to wait for the number of in-flight
    queries to reach zero. PR #710
  * New ARES_FLAG_NO_DEFLT_SVR for ares_init_options() to return a failure if
    no DNS servers can be found rather than attempting to use 127.0.0.1. This
    also introduces a new ares status code of ARES_ENOSERVER. PR #713
  Changes:
  * EDNS Packet size should be 1232 as per DNS Flag Day. PR #705
  Bugfixes:
  * Fix warning due to ignoring return code of write(). PR #709
  * CMake: don't override target output locations if not top-level. Issue #708
  * Fix building c-ares without thread support. PR #700</changelog>
</package>
<package pkgid="1f706856c112100ed7cfdabe4d72ab4f41b1dd3a27abe3ea9cedb32063c603ecb23ee41982661fff0bf5ae7bbb009542c1896a6dc8693d4b297e8c62f8dc8517" name="libcbor-debugsource" arch="aarch64">
  <version epoch="0" ver="0.10.2" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="t.gruner@katodev.de" date="1577966400">- remove documentation build with doxygen</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 0.7.0
  * Too many changes to list, see included CHANGELOG.md file
- 0.6.0 includes patch by bwiedemann@suse.com to not build shared
  lib twice and make package build reproducible (boo#1102408,
  gh#PJK/libcbor#72)</changelog>
  <changelog author="idonmez@suse.com" date="1600776000">- Update to version 0.8.0
  * BREAKING: Fix cbor_tag_item not increasing the reference count
    on the tagged item reference it returns
  * BREAKING: CBOR_DECODER_EBUFFER removed from cbor_decoder_status
    + cbor_stream_decode will set CBOR_DECODER_NEDATA instead if the
    input buffer is empty
  * Fix cbor_stream_decode to set cbor_decoder_result.required to
    the minimum number of input bytes necessary to receive the next
    callback (as long as at least one byte was passed)
  * Fixed several minor manpage issue</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 0.9.0:
  * Improved pkg-config paths handling
  * Use explicit math.h linkage
  * BREAKING: Fixed handling of items that exceed the host size_t range
  * cbor_decode explicitly checks size to avoid overflows (previously broken,
    potentially resulting in erroneous decoding on affected systems)
- split docs into multibuild flavor to avoid build cycle via openssh&lt;-&gt;
  python-pyOpenSSL &lt;-&gt; python-cryptography</changelog>
  <changelog author="dmueller@suse.com" date="1638878400">- fix duplicate src package name issue on multibuild</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Install manual page in the correct man section</changelog>
  <changelog author="info@paolostivanin.com" date="1673870400">- Update to 0.10.1:
  * BREAKING: Fix cbor_copy leaking memory and creating invalid items when the allocator fails.
  * BREAKING: Improved half-float encoding for denormalized numbers. [#208]
  * Make the buffer_size optional in cbor_serialize_alloc [#205]
  * Fix a potential memory leak when the allocator fails during array or map decoding [#224]
  * Fix a memory leak when the allocator fails when adding chunks to indefinite bytestrings.
  * Fix a memory leak when the allocator fails when adding chunks to indefinite strings
  * Fix cbor_build_tag illegal memory behavior when the allocator fails
  * Add a new cbor_serialized_size API
  * Reworked cbor_serialize_alloc to allocate the exact amount of memory necessary upfront</changelog>
  <changelog author="alarrosa@suse.com" date="1677067200">- Merge change from SLE15 SP4 made by pgajdos@suse.com on
  Tue Apr  5 14:36:56 UTC 2022:
- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.3</changelog>
  <changelog author="info@paolostivanin.com" date="1677499200">- Update to 0.10.2:
  * Fixed minor test bug causing failures for x86 Linux
  * Made tests platform-independent</changelog>
</package>
<package pkgid="9befa2555feba6cce4f3ceb5246fbccab7d27a8aeaa219107099e90244d48eb1ea0a00b2563373b8633129b0358abf9a15e970036eeda81db6e3f26f62e75176" name="libcbor0_10-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.10.2" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="t.gruner@katodev.de" date="1577966400">- remove documentation build with doxygen</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 0.7.0
  * Too many changes to list, see included CHANGELOG.md file
- 0.6.0 includes patch by bwiedemann@suse.com to not build shared
  lib twice and make package build reproducible (boo#1102408,
  gh#PJK/libcbor#72)</changelog>
  <changelog author="idonmez@suse.com" date="1600776000">- Update to version 0.8.0
  * BREAKING: Fix cbor_tag_item not increasing the reference count
    on the tagged item reference it returns
  * BREAKING: CBOR_DECODER_EBUFFER removed from cbor_decoder_status
    + cbor_stream_decode will set CBOR_DECODER_NEDATA instead if the
    input buffer is empty
  * Fix cbor_stream_decode to set cbor_decoder_result.required to
    the minimum number of input bytes necessary to receive the next
    callback (as long as at least one byte was passed)
  * Fixed several minor manpage issue</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 0.9.0:
  * Improved pkg-config paths handling
  * Use explicit math.h linkage
  * BREAKING: Fixed handling of items that exceed the host size_t range
  * cbor_decode explicitly checks size to avoid overflows (previously broken,
    potentially resulting in erroneous decoding on affected systems)
- split docs into multibuild flavor to avoid build cycle via openssh&lt;-&gt;
  python-pyOpenSSL &lt;-&gt; python-cryptography</changelog>
  <changelog author="dmueller@suse.com" date="1638878400">- fix duplicate src package name issue on multibuild</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Install manual page in the correct man section</changelog>
  <changelog author="info@paolostivanin.com" date="1673870400">- Update to 0.10.1:
  * BREAKING: Fix cbor_copy leaking memory and creating invalid items when the allocator fails.
  * BREAKING: Improved half-float encoding for denormalized numbers. [#208]
  * Make the buffer_size optional in cbor_serialize_alloc [#205]
  * Fix a potential memory leak when the allocator fails during array or map decoding [#224]
  * Fix a memory leak when the allocator fails when adding chunks to indefinite bytestrings.
  * Fix a memory leak when the allocator fails when adding chunks to indefinite strings
  * Fix cbor_build_tag illegal memory behavior when the allocator fails
  * Add a new cbor_serialized_size API
  * Reworked cbor_serialize_alloc to allocate the exact amount of memory necessary upfront</changelog>
  <changelog author="alarrosa@suse.com" date="1677067200">- Merge change from SLE15 SP4 made by pgajdos@suse.com on
  Tue Apr  5 14:36:56 UTC 2022:
- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.3</changelog>
  <changelog author="info@paolostivanin.com" date="1677499200">- Update to 0.10.2:
  * Fixed minor test bug causing failures for x86 Linux
  * Made tests platform-independent</changelog>
</package>
<package pkgid="f6f80f4d0097667ee4446eecd36e4c6d93e66752fa4bbd30002fc67c3e741c8247c937a6d40763a94cc92f6d62324625cecd4fa9565c318366138b145722aa1b" name="libcdda_interface0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.2" rel="slfo.1.1_1.2"/>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fixes: use %configure macro, set bindir and include
  dir explicitly when installing</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1342353600">- own directories for japanese man pages, no need to buildrequire man
  for that</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1369137600">- add config-guess-sub-update.diff:
  * configure.guess/sub update for aarch64 support</changelog>
  <changelog author="tchvatal@suse.com" date="1382616000">- Redo the buildsystem to use only shared libs and allow parallel
  building to have it faster in obs.
  * removed patches:
  - cdparanoia-III-dt_needed.patch
  - cdparanoia-large-pic.diff
  * added patches:
  - 010_build_system.patch
  - 050_all_build_only_shared_libraries.patch</changelog>
  <changelog author="schwab@suse.de" date="1523966400">- config-guess-sub-update.diff: update for RISC-V support</changelog>
  <changelog author="adam.majer@suse.de" date="1524052800">- Adjust licenses to be installed with %license not %doc
- libraries are covered by LGPL-2.1-or-greater and the command-line
  tool is GPL-2.0-or-greater</changelog>
  <changelog author="tchvatal@suse.com" date="1524052801">- Do not bother to talk about it being beta release as we
  are shipping this since 2008</changelog>
  <changelog author="jengelh@inai.de" date="1524052802">- Update descriptions.</changelog>
</package>
<package pkgid="993310c5c18d5a569aa742fc63487c2a70f18be28849689d255b0730716bc6dd8fbfb85b2381c94dd3e0842ba1a6ddf256f91c94ff15e2a651b698b8059746c6" name="libcdda_paranoia0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.2" rel="slfo.1.1_1.2"/>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fixes: use %configure macro, set bindir and include
  dir explicitly when installing</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1342353600">- own directories for japanese man pages, no need to buildrequire man
  for that</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1369137600">- add config-guess-sub-update.diff:
  * configure.guess/sub update for aarch64 support</changelog>
  <changelog author="tchvatal@suse.com" date="1382616000">- Redo the buildsystem to use only shared libs and allow parallel
  building to have it faster in obs.
  * removed patches:
  - cdparanoia-III-dt_needed.patch
  - cdparanoia-large-pic.diff
  * added patches:
  - 010_build_system.patch
  - 050_all_build_only_shared_libraries.patch</changelog>
  <changelog author="schwab@suse.de" date="1523966400">- config-guess-sub-update.diff: update for RISC-V support</changelog>
  <changelog author="adam.majer@suse.de" date="1524052800">- Adjust licenses to be installed with %license not %doc
- libraries are covered by LGPL-2.1-or-greater and the command-line
  tool is GPL-2.0-or-greater</changelog>
  <changelog author="tchvatal@suse.com" date="1524052801">- Do not bother to talk about it being beta release as we
  are shipping this since 2008</changelog>
  <changelog author="jengelh@inai.de" date="1524052802">- Update descriptions.</changelog>
</package>
<package pkgid="017244305146def1cb8762990be95f8b098963517bf193af6ea458e38be8b5802cdaa59e32bd2de2ca8ca4b8b25a8c515413456d09ede6e51f0a300344c567c2" name="libcdrdeflt1_0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.02~a10" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="7ba6e5c29d3af6d6bd6f36e57c2c96ef2744a0b3acd92de62ed3c743179cfc9f0dd231a5c01358075238642d6078fee47ab72351f26be33c304ca7b29683b831" name="libcollection4-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.7.0" rel="slfo.1.1_1.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="c35d055e3b6a1c99e9e7994fef15a89ca1f63e6278dce37e17759284305841f057f9ffb1f1092ba21c259c8c8775ab76fded3c2bee05592405acb06691c94ac5" name="libcolord2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="slfo.1.1_2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1648209600">- Update to version 1.4.6:
  + Add missing copyright notices.
  + Add Spyder X entry.
  + Document where to send patches.
  + Don't use exact floating point comparisons.
  + Drop option for removed reverse engineering tools.
  + Drop references to hughski.com.
  + Fix a small memory leak in sqlite3_exec().
  + Fix typo in device-removed signal documentation.
  + Make introspection optional in meson.
- Drop -Dreverse=false meson parameter: no longer supported.
- Fix a few rpmlint warnings:
  + Do not self-obsolete shared-color-profiles by providing the
    symbol with a version.
  + Call +%tmpfiles_create %{_tmpfilesdir}/colord.conf in %post.
  + Package /usr/share/bash-completion/completions/colormgr with
    mode 644: the files are not executed, but sourced.
  + Own %{_localstatedir}/lib/colord/icc (ghost): this directory is
    generated by %tmpfiles_create.</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak on db
  open failure (boo#1202802 CVE-2021-42523).</changelog>
  <changelog author="mgorse@suse.com" date="1759492800">- Rework colord-CVE-2021-42523.patch based on what is now upstream.
  The original fix was wrong and did not properly free the error,
  resulting in a crash (bsc#1250750).</changelog>
</package>
<package pkgid="85087abb67a5cea31a17d3a13321f49d78030b2279f176ca616a42d8f7a0badfecb8170a9fc665d15457e42becbf456abb9321102e75e40d37b781c25e9d9c11" name="libcom_err2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.47.0" rel="slfo.1.1_1.2"/>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
</package>
<package pkgid="a3e41a243211702ce56e25fe8dd41d716c0f82d9d3bbc5777012ea6b5b56b06b370df646b072ac87aa18de4747c82d34dd65448d50c895df499c76623e886eac" name="libconfig-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.3" rel="slfo.1.1_1.3"/>
  <changelog author="davejplater@gmail.com" date="1337428800">- Added baselibs.conf for 32 bit ffado
- Disabled pdf and html docs, moved info to devel package</changelog>
  <changelog author="p.drouand@gmail.com" date="1356782400">- Update to 1.4.9 version:
  * lib/libconfigcpp.c++ - Fixed compiler warnings in constructor
    initializers
  * tinytest/tiytest.c, tinytest/tinytest.h - added tt_file_exists();
    added alternate implementations of some test macros since MSVC does
    not support C99 fully; added comparators for text files (ignoring
    line endings)
  * tests/tests.c - use tt_file_exists() rather than access(); alias
    snprintf to _snprintf for MSVC; compare files as text files rather
    than as binary files
  * lib/scanner.l - fixed parsing issue when backslash in string is
    followed by invalid escape character; reported by Jimmy Scott
  * lib/scanner.c - regenerated
  * lib/libconfig.h, lib/libconfig.h++, lib/Makefile.am,
    doc/libconfig.texi, configure.ac - bump version numbers
  * aclocal.m4, ac_config.h - regenerated
  * m4/*, aux-build/*, libtool - updated to newer</changelog>
  <changelog author="jengelh@inai.de" date="1412510400">- Make doc subpackage noarch; improve on RPM group classification</changelog>
  <changelog author="i@marguerite.su" date="1433678400">- update version 1.5.0
  * lib/libconfig.c - Don't fclose() a null pointer.
  * lib/libconfig.c, lib/wincompat.h - check if file being
    opened is a directory
  * lib/libconfig.c, lib/libconfig.h, lib/libconfig.h++,
    doc/libconfig.texi - added config_set_options(),
    config_get_options(), setOptions(), getOptions().
  * lib/libconfig.c++, lib/libconfig.h++ - added patches
    from Matt Renaud (added iterators, removed throws()
    specifications); added Setting.lookup(); code cleanup;
    added patch from Yuri Dyachenko (made exception
    constructors public)
  * lib/libconfig.c, lib/libconfig.h - renamed
    config_setting_lookup_from() to config_setting_lookup()
    and documented it; patch from Alexander Klauer (floating
    point precision loss)
  * doc/libconfig.texi - documented new APIs, bumped version
  * lib/scanner.c, lib/scanner.h, lib/scanner.l, libconfig.c -
    scanner code cleanup; and regenerated with flex 2.5.39
  * lib/grammar.c, lib/grammar.h, lib/grammar.y - parser code
    cleanup; and regenerated with bison 3.0.2
  * lib/libconfig.c - bugfix; capture root filename
  * tests/Makefile.am - fix for out-of-source builds
  * ac_config.h.in, aclocal.m4 - updated to newer autotools</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Update to 1.6.0:
  * Added include_dir feature (support for Debian-style conf.d/
    includes) (pull request #36)
  * Added octal_ints feature (support for integer expressed in octal,
    useful for permissions and masks in UNIX-like systems (pull req #42)
  * Fixed "Removing a setting removes all siblings" (issue #41)
    Props random85
  * Allow specifying the number of decimals wanted when outputting
    Based upon a suggestion by zhaopingsun (issue #31)
  * Make libconfig usable from CMake (pull request/issue #28)
    Props thfi
  * Documentation fixes
  - Copyright and examples
  - Included TeX patch from Debian (fixes FTBS with TeXlive)
  * Resync Debian packaging
    includes updated packages for GCC5 transition</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 1.7:
  * Redesigned the directory-include feature to avoid using
    platform-specific directory scanning code, and to fix a bug in
    the handling of nested includes. The application can now do its
    own directory scanning and/or wildcard expansion by registering
    an include function.
  * Added new CONFIG_OPTION_ALLOW_SCIENTIFIC_NOTATION to allow
    either %f or %g-style formatting for floating point values.
  * Improved the options APIs in both the C and C++ libraries.
  * Improved the automatic conversion between int and int64 values.
  * Fixed build errors caused by out-of-sync generated lexer and
    parser source files.
  * Added an API to clear an existing configuration.
  * Fixed a problem where a group or list could be added to an array.
  * Changed default float precision from 2 to 6.
  * Modified grammar to allow trailing commas in lists and arrays.
  * Removed logic that clipped negative values to 0 in (unsigned int)
    cast operator.
  * Updated manual and added a new chapter on other libconfig
    implementations and bindings.
  * Various internal code cleanup.
  * Fixed failing unit tests.
  * Upgraded VS2015 solution/project files to VS2017.
- Use new project URL
- sonum updated from 8 to 11</changelog>
  <changelog author="jengelh@inai.de" date="1518004800">- Ensure neutrality of description, and strip other OS mentions.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- libconfig 1.7.2:
  * fix a slow memory leak
- includes changes from 1.7.1:
  * Fixed a bug that caused incorrect processing of strings with
    escape sequences.
  * Added a new 'fsync' configuration option.
- switch to upstream bootstrapped tarball</changelog>
  <changelog author="jengelh@inai.de" date="1624190400">- Update to release 1.7.3
  * Fixed a heap corruption bug in config_clear()
  * Added a Setting::isString() method
  * Renamed all remaining internal methods that lacked a
    "libconfig_" prefix.</changelog>
</package>
<package pkgid="b7031bcd101d8dd91ac3b7aaf388084028b74044f16436b7367fc27e83caf18926ebaa0ea7b41803d29d34d4f3302af116c489db3021dc9614de2f3a14d9846d" name="libconfig11-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.3" rel="slfo.1.1_1.3"/>
  <changelog author="davejplater@gmail.com" date="1337428800">- Added baselibs.conf for 32 bit ffado
- Disabled pdf and html docs, moved info to devel package</changelog>
  <changelog author="p.drouand@gmail.com" date="1356782400">- Update to 1.4.9 version:
  * lib/libconfigcpp.c++ - Fixed compiler warnings in constructor
    initializers
  * tinytest/tiytest.c, tinytest/tinytest.h - added tt_file_exists();
    added alternate implementations of some test macros since MSVC does
    not support C99 fully; added comparators for text files (ignoring
    line endings)
  * tests/tests.c - use tt_file_exists() rather than access(); alias
    snprintf to _snprintf for MSVC; compare files as text files rather
    than as binary files
  * lib/scanner.l - fixed parsing issue when backslash in string is
    followed by invalid escape character; reported by Jimmy Scott
  * lib/scanner.c - regenerated
  * lib/libconfig.h, lib/libconfig.h++, lib/Makefile.am,
    doc/libconfig.texi, configure.ac - bump version numbers
  * aclocal.m4, ac_config.h - regenerated
  * m4/*, aux-build/*, libtool - updated to newer</changelog>
  <changelog author="jengelh@inai.de" date="1412510400">- Make doc subpackage noarch; improve on RPM group classification</changelog>
  <changelog author="i@marguerite.su" date="1433678400">- update version 1.5.0
  * lib/libconfig.c - Don't fclose() a null pointer.
  * lib/libconfig.c, lib/wincompat.h - check if file being
    opened is a directory
  * lib/libconfig.c, lib/libconfig.h, lib/libconfig.h++,
    doc/libconfig.texi - added config_set_options(),
    config_get_options(), setOptions(), getOptions().
  * lib/libconfig.c++, lib/libconfig.h++ - added patches
    from Matt Renaud (added iterators, removed throws()
    specifications); added Setting.lookup(); code cleanup;
    added patch from Yuri Dyachenko (made exception
    constructors public)
  * lib/libconfig.c, lib/libconfig.h - renamed
    config_setting_lookup_from() to config_setting_lookup()
    and documented it; patch from Alexander Klauer (floating
    point precision loss)
  * doc/libconfig.texi - documented new APIs, bumped version
  * lib/scanner.c, lib/scanner.h, lib/scanner.l, libconfig.c -
    scanner code cleanup; and regenerated with flex 2.5.39
  * lib/grammar.c, lib/grammar.h, lib/grammar.y - parser code
    cleanup; and regenerated with bison 3.0.2
  * lib/libconfig.c - bugfix; capture root filename
  * tests/Makefile.am - fix for out-of-source builds
  * ac_config.h.in, aclocal.m4 - updated to newer autotools</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Update to 1.6.0:
  * Added include_dir feature (support for Debian-style conf.d/
    includes) (pull request #36)
  * Added octal_ints feature (support for integer expressed in octal,
    useful for permissions and masks in UNIX-like systems (pull req #42)
  * Fixed "Removing a setting removes all siblings" (issue #41)
    Props random85
  * Allow specifying the number of decimals wanted when outputting
    Based upon a suggestion by zhaopingsun (issue #31)
  * Make libconfig usable from CMake (pull request/issue #28)
    Props thfi
  * Documentation fixes
  - Copyright and examples
  - Included TeX patch from Debian (fixes FTBS with TeXlive)
  * Resync Debian packaging
    includes updated packages for GCC5 transition</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 1.7:
  * Redesigned the directory-include feature to avoid using
    platform-specific directory scanning code, and to fix a bug in
    the handling of nested includes. The application can now do its
    own directory scanning and/or wildcard expansion by registering
    an include function.
  * Added new CONFIG_OPTION_ALLOW_SCIENTIFIC_NOTATION to allow
    either %f or %g-style formatting for floating point values.
  * Improved the options APIs in both the C and C++ libraries.
  * Improved the automatic conversion between int and int64 values.
  * Fixed build errors caused by out-of-sync generated lexer and
    parser source files.
  * Added an API to clear an existing configuration.
  * Fixed a problem where a group or list could be added to an array.
  * Changed default float precision from 2 to 6.
  * Modified grammar to allow trailing commas in lists and arrays.
  * Removed logic that clipped negative values to 0 in (unsigned int)
    cast operator.
  * Updated manual and added a new chapter on other libconfig
    implementations and bindings.
  * Various internal code cleanup.
  * Fixed failing unit tests.
  * Upgraded VS2015 solution/project files to VS2017.
- Use new project URL
- sonum updated from 8 to 11</changelog>
  <changelog author="jengelh@inai.de" date="1518004800">- Ensure neutrality of description, and strip other OS mentions.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- libconfig 1.7.2:
  * fix a slow memory leak
- includes changes from 1.7.1:
  * Fixed a bug that caused incorrect processing of strings with
    escape sequences.
  * Added a new 'fsync' configuration option.
- switch to upstream bootstrapped tarball</changelog>
  <changelog author="jengelh@inai.de" date="1624190400">- Update to release 1.7.3
  * Fixed a heap corruption bug in config_clear()
  * Added a Setting::isString() method
  * Renamed all remaining internal methods that lacked a
    "libconfig_" prefix.</changelog>
</package>
<package pkgid="85a510809b5983739232f7aebfbbcb9b673b132b2bc4667d5d108188ec0151efe0c54add3a811ead9de1f766ac4ec9da5969d44447fd68dd61cd69974939c8b8" name="libcpupower1-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="slfo.1.1_1.2"/>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Change to building the package from kernel-source based on
  how the perf package works
- Removed patches:
  * turbostat_makefile_fix_asm_header.patch
  * remove_bits_h.patch
  * x86_perf_makefile_fix_asm_header.patch
- Remove all tarballs and git script
- Use %lang_package
- Correct ix86 to %ix86</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- add rebuild subpackage to trigger rebuild on kernel updates</changelog>
  <changelog author="trenn@suse.de" date="1657022400">- Remove powercap capabilities to patch againt latest kernel sources
  - &gt; still keep the patches, will be removed after trying to get this
    mainline
- Add netlink (libnl-devel) requires</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
</package>
<package pkgid="6097f306d552af0079091655357cb75a92f26d4d73cb81bdd70d7cb3fd488ab3b0a6aa2baf8d9165965d0a9450cac6129e5b55ea87cd69f7f3fb52d057a6b585" name="libcrack2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.11" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="jengelh@inai.de" date="1628683200">- Drop --with-pic, as it has no effect with --disable-static.</changelog>
  <changelog author="pgajdos@suse.com" date="1636027200">- %check: really test the package [bsc#1191736]</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 2.9.8:
  * rules: Drop using register keyword
  * add exec perms
  * translation updates
  * Use what's in the build environment and use a current autoconf
  * util/Makefile.am: fix link with lintl
  * Force grep to treat the input as text when formatting word files</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- version update to 2.9.11
  * Merge fedora patches and man pages
  * Fix missing files in dist tarball, other automake fixes (Leandro Nini)
  * Fix error handling during build of dictionary (yixiangzhike)
  * Fix to localization support (A. Wilcox, nekopsykose)
  * Fix to test utilities (Alexander Kanavin)
  * Translation updates from weblate
  * python: adjust include path for builddir by @thesamesam in #61
  * Make buffer static and avoid returning stack-allocated memory by @drfiemost in #63
- modified patches
  % 0002-cracklib-2.9.2-visibility.patch (refreshed)</changelog>
</package>
<package pkgid="f97e90a494808cded1c574c5cf28094bceb9da5c7642d1103aaf939d1d3770ef11d58a553801e57e6cb5356130084e607c491831340829c452f99140fa3bb34f" name="libcrypt1-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.4.36" rel="slfo.1.1_1.4"/>
  <changelog author="schwab@suse.de" date="1629288000">- Update to 4.4.25
  * Fix several issues found by Covscan in the testsuite.  These include:
  - CWE-170: String not null terminated (STRING_NULL)
  - CWE-188: Reliance on integer endianness (INCOMPATIBLE_CAST)
  - CWE-190: Unintentional integer overflow (OVERFLOW_BEFORE_WIDEN)
  - CWE-569: Wrong sizeof argument (SIZEOF_MISMATCH)
  - CWE-573: Missing varargs init or cleanup (VARARGS)
  - CWE-687: Argument cannot be negative (NEGATIVE_RETURNS)
  * Stricter checking of invalid salt characters (issue #135).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638100800">- update to 4.4.26:
  * fix compilation on system with gcc &gt;= 10 that do not support
    declarations with __attribute__((symver))
- switch to bootstrapped tarball, add upstream signing key and
  verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 4.4.27:
  * Limit the maximum amount of rbytes to 64 bytes (512 bits) for yescrypt,
    gost-yescrypt, and scrypt</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 4.4.28:
  No changes whatsoever.</changelog>
  <changelog author="schwab@suse.de" date="1669809600">- Update to 4.4.33
  * Fix variable name in crypt(3) for a datamember of 'struct crypt_data'
  * Fix -Werror=strict-overflow in lib/crypt-des.c, which is seen
    by GCC 12.x
  * Add some SHA-2 Maj() optimization in lib/alg-sha256.c
  * Fix -Werror=conversion in lib/alg-yescrypt-opt.c
  * Improvements to huge page handling in lib/alg-yescrypt-platform.c
  * Fix -Werror=sign-conversion in lib/alg-yescrypt-platform.c</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1678449600">- Enable livepatching support on x86_64.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO now (boo#1138833) and use FAT LTO objects for static libs.</changelog>
  <changelog author="schwab@suse.de" date="1685620800">- Update to 4.4.34
  * Optimize some cast operation for performance in
    lib/alg-yescrypt-platform.c.
  * Add SHA-2 Maj() optimization proposed by Wei Dai in lib/alg-sha512.c.
  * Explicitly clean the stack and context state after computation in
    lib/alg-gost3411-2012-hmac.c, lib/alg-hmac-sha1.c, and lib/alg-sha256.c
    (issue #168).</changelog>
  <changelog author="dmueller@suse.com" date="1688212800">- update to 4.4.35:
  * Fix build with Perl v5.38.0 (issue #170).
  * Fix build with MinGW-w(32|64).</changelog>
  <changelog author="schwab@suse.de" date="1689595200">- Update to 4.4.36
  * Fix left over bits failing with Perl v5.38.0</changelog>
</package>
<package pkgid="98e7e55ebadae4661856ae09820da2e57e6f39198599c2d25d53be680a3891f1b331c26ef6f514f4e00b7604e125e42c01936a01028ef9f6760066544b7dcdd5" name="libcryptsetup12-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.1" rel="slfo.1.1_1.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="lnussel@suse.de" date="1661169600">- cryptsetup 2.5.0:
  * Split manual pages into per-action pages and use AsciiDoc format.
  * Remove cryptsetup-reencrypt tool from the project and move reencryption
    to already existing "cryptsetup reencrypt" command.
    If you need to emulate the old cryptsetup-reencrypt binary, use simple
    wrappers script running "exec cryptsetup reencrypt $@".
  * LUKS2: implement --decryption option that allows LUKS removal.
  * Fix decryption operation with --active-name option and restrict
    it to be used only with LUKS2.
  * Do not refresh reencryption digest when not needed.
    This should speed up the reencryption resume process.
  * Store proper resilience data in LUKS2 reencrypt initialization.
    Resuming reencryption now does not require specification of resilience
    type parameters if these are the same as during initialization.
  * Properly wipe the unused area after reencryption with datashift in
    the forward direction.
  * Check datashift value against larger sector size.
    For example, it could cause an issue if misaligned 4K sector appears
    during decryption.
  * Do not allow sector size increase reencryption in offline mode.
  * Do not allow dangerous sector size change during reencryption.
  * Ask the user for confirmation before resuming reencryption.
  * Do not resume reencryption with conflicting parameters.
  * Add --force-offline-reencrypt option.
  * Do not allow nested encryption in LUKS reencrypt.
  * Support all options allowed with luksFormat with encrypt action.
  * Add resize action to integritysetup.
  * Remove obsolete dracut plugin reencryption example.
  * Fix possible keyslot area size overflow during conversion to LUKS2.
  * Allow use of --header option for cryptsetup close.
  * Fix activation of LUKS2 device with integrity and detached header.
  * Add ZEROOUT IOCTL support for crypt_wipe API call.
  * VERITY: set loopback sector size according to dm-verity block sizes.
  * veritysetup: dump device sizes.
  * LUKS2 token: prefer token PIN query before passphrase in some cases.
    When a user provides --token-type or specific --token-id, a token PIN
    query is preferred to a passphrase query.
  * LUKS2 token: allow tokens to be replaced with --token-replace option
    for cryptsetup token command.
  * LUKS2 token: do not continue operation when interrupted in PIN prompt.
  * Add --progress-json parameter to utilities.
  * Add support for --key-slot option in luksResume action.
- move man pages to separate subpackage
- drop backports handling</changelog>
  <changelog author="luca.boccassi@gmail.com" date="1663070400">- Add virtual provides for 'integritysetup' and 'veritysetup' to match
  package names provided by Fedora/RHEL, to allow the same set of
  dependencies to be used across all RPM distributions.</changelog>
  <changelog author="info@paolostivanin.com" date="1669636800">- cryptsetup 2.6.0:
  * Introduce support for handling macOS FileVault2 devices (FVAULT2).
  * libcryptsetup: no longer use global memory locking through mlockall()
  * libcryptsetup: process priority is increased only for key derivation
    (PBKDF) calls.
  * Add new LUKS keyslot context handling functions and API.
  * The volume key may now be extracted using a passphrase, keyfile, or
    token. For LUKS devices, it also returns the volume key after
    a successful crypt_format call.
  * Fix --disable-luks2-reencryption configuration option.
  * cryptsetup: Print a better error message and warning if the format
    produces an image without space available for data.
  * Print error if anti-forensic LUKS2 hash setting is not available.
    If the specified hash was not available, activation quietly failed.
  * Fix internal crypt segment compare routine if the user
    specified cipher in kernel format (capi: prefix).
  * cryptsetup: Add token unassign action.
    This action allows removing token binding on specific keyslot.
  * veritysetup: add support for --use-tasklets option.
    This option sets try_verify_in_tasklet kernel dm-verity option
    (available since Linux kernel 6.0) to allow some performance
    improvement on specific systems.
  * Provide pkgconfig Require.private settings.
    While we do not completely provide static build on udev systems,
    it helps produce statically linked binaries in certain situations.
  * Always update automake library files if autogen.sh is run.
    For several releases, we distributed older automake scripts by mistake.
  * reencryption: Fix user defined moved segment size in LUKS2 decryption.
    The --hotzone-size argument was ignored in cases where the actual data
    size was less than the original LUKS2 data offset.
  * Delegate FIPS mode detection to configured crypto backend.
    System FIPS mode check no longer depends on /etc/system-fips file.
  * Update documentation, including FAQ and man pages.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- cryptsetup 2.6.1
  * bitlk: Fixes for BitLocker-compatible on-disk metadata parser
  * Fix possible iteration overflow in OpenSSL2 PBKDF2 crypto
    backend
  * portability and compilation fixes
  * verity: Fix possible hash offset setting overflow.
  * bitlk: Fix use of startup BEK key on big-endian platforms.
  * Do not initiate encryption (reencryption command) when the
    header and data devices are the same. If data device reduction
    is not requsted, this leads to data corruption since LUKS
    metadata was written over the data device.
  * Fix possible memory leak if crypt_load() fails.
  * Always use passphrases with a minimal 8 chars length for
    benchmarking, as used in some implementation of FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1686744000">- FIPS: Remove not needed libcryptsetup12-hmac package that contains
  the HMAC checksums for integrity checking for FIPS. [bsc#1185116]
  * Remove the cryptsetup-rpmlintrc file.
  * Remove not needed fipscheck dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1686744001">- Enable running the regression test suite.
- Force a regeneration of the man pages from AsciiDoc.
- Add LUKS1 and LUKS2 On-Disk Format Specification pdfs to doc.</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="bd0454ef5011eb21b31edfc1c47a4d5c1fc4b1991cfdd970fa156a3eaa092d6f4eef97aad9af486e2290ccaff8aaf17a0284e8cbe13e6f3c0674893129d34dda" name="libcups2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.16" rel="slfo.1.1_1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
</package>
<package pkgid="968c29d93411409415a7fada485f8a0ae5883ed4013b63c5cb465298d0108bfe4baaed7c4c3597ac182d09eebb231fe6d1e6da1539fdb9c870d425f21d21c33f" name="libcurl4-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.14.1" rel="slfo.1.1_6.1"/>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * Add patches:
  - curl-CVE-2026-1965.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="bbbe35b39e2e085e68208376ddc5889c42c51a78e49ad27b91bf314e1813038cd25518f932e7e17a3018ceb395589f1a2526da5e09c666e46bd96ec8f4bbc649" name="libdaemon-debugsource" arch="aarch64">
  <version epoch="0" ver="0.14" rel="slfo.1.1_1.2"/>
  <changelog author="seife@suse.de" date="1227787200">- update to version 0.13:
  - add daemon_reset_sigs() and daemon_unblock_sigs()
  - improve error handling
- obsoletes bnc-309132.patch, libdaemon-0.10-testd-fix-FD_SET.diff</changelog>
  <changelog author="seife@suse.de" date="1233057600">- mark filedescritor as closed after closing it, preventing
  application errors in e.g. avahi (bnc#469342, bnc#442210)
  Thanks to Stefan Thaeter for providing the patch.</changelog>
  <changelog author="crrodriguez@suse.de" date="1233748800">- move shared libraries to /%{_lib} so ifplugd can use them
- remove static libraries again</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="vuntz@opensuse.org" date="1286280000">- Update to version 0.14:
  + add daemon_set_verbosity() call
  + make daemon_nonblock() actually work
  + numerous updates
  + build fixes
- Drop libdaemon-0.12-bnc449728.diff,
  libdaemon-0.13-bnc469342.diff: fixed upstream.
- Improve descriptions.
- Do not set CFLAGS since we use %configure.
- Use %makeinstall.</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1328961600">- Move library back to %{_libdir}, /usr merge project.</changelog>
  <changelog author="mpluskal@suse.com" date="1426075200">- Cleanup spec file with spec-cleaner
- Use url for source</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static).
- Modernize rpm macro constructs.</changelog>
</package>
<package pkgid="0e0416873e9d9da132fb9f2431cecc96cd520d829bb4f126a34026136124654a1b297d8dbd997ecc8b9a6ac44aef628c515fc864a75eff73d016cad4c76dbd30" name="libdaemon0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.14" rel="slfo.1.1_1.2"/>
  <changelog author="seife@suse.de" date="1227787200">- update to version 0.13:
  - add daemon_reset_sigs() and daemon_unblock_sigs()
  - improve error handling
- obsoletes bnc-309132.patch, libdaemon-0.10-testd-fix-FD_SET.diff</changelog>
  <changelog author="seife@suse.de" date="1233057600">- mark filedescritor as closed after closing it, preventing
  application errors in e.g. avahi (bnc#469342, bnc#442210)
  Thanks to Stefan Thaeter for providing the patch.</changelog>
  <changelog author="crrodriguez@suse.de" date="1233748800">- move shared libraries to /%{_lib} so ifplugd can use them
- remove static libraries again</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="vuntz@opensuse.org" date="1286280000">- Update to version 0.14:
  + add daemon_set_verbosity() call
  + make daemon_nonblock() actually work
  + numerous updates
  + build fixes
- Drop libdaemon-0.12-bnc449728.diff,
  libdaemon-0.13-bnc469342.diff: fixed upstream.
- Improve descriptions.
- Do not set CFLAGS since we use %configure.
- Use %makeinstall.</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1328961600">- Move library back to %{_libdir}, /usr merge project.</changelog>
  <changelog author="mpluskal@suse.com" date="1426075200">- Cleanup spec file with spec-cleaner
- Use url for source</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static).
- Modernize rpm macro constructs.</changelog>
</package>
<package pkgid="e1f9cd204d26953ad69555f8bd7da94964b3ced7130e5d3e2b3dd20e0a56fd36498d22320949cbdd0c0994cefa5b9c778ea17cfcb779edcf45d144fb65b680fc" name="libdatrie-debugsource" arch="aarch64">
  <version epoch="0" ver="0.2.13" rel="slfo.1.1_1.2"/>
  <changelog author="vuntz@opensuse.org" date="1298462400">- Add missing baselibs.conf.</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="p.drouand@gmail.com" date="1423051200">- Update to version 0.2.8
  * Fix compiler warnings in test suites.
  * Fix edge-case error on alphabet set of size 255.
  * Fail trie operations on non-alphabet inputs, rather than silently
    allowing them to sneak in as false keys.
  * Improved documentation.
- Add xz build require to keep SLE11 support</changelog>
  <changelog author="dimstar@opensuse.org" date="1439899200">- Add libdatrie-doxygen-found-is-enough.patch: when we find
  doxygen, we assume it is new enough. The configure script uses
  'expr 1.8.4 \&lt; $DOXYGEN_VER', which returns false for 1.8.10.
- For safeguard, we specify the minimal required version of
  doxygen (1.8.4) in the buildrequirements.</changelog>
  <changelog author="pgajdos@suse.com" date="1439899201">- update to version 0.2.9
  * Fix infinite loop on empty trie iteration.
  * Document about alphabet size.
  * Disable timestamp in Doxygen-generated doc.
  * etc. see ChangeLog
- remove libdatrie-doxygen-found-is-enough.patch in favour of
  libdatrie-doxygen-version-check.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to version 0.2.10
  * Correctly check doxygen version on configure
  * Optimization on AlphaMap mapping
- remove libdatrie-doxygen-version-check.patch
  * upstreamed in 7db54c662357dba5f109eaf1b24490f46ca23d44
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups. Remove ineffective --with-pic.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 0.2.12:
  - More C90 (ANSI C) compliance.
  - Prevent some compiling conflicts with other sources.
  - Fix miscellaneous compiler warnings.
  - Prevent trimming on extremely long dictionary path names.
  - Detect iconv() error more correctly in trietool.
  - Clarify package description that search time is O(m), where m is
    key length, not O(1), while still claiming that it's independent
    of database size.
  - Fix trie_state_get_data() on a prefix key.
  - Fix reported segfault on full-range alpha map.</changelog>
  <changelog author="dmueller@suse.com" date="1613044800">- update to 0.2.13:
  - Fix wrong key listing in byte trie
  - Fix cross-compiling issue caused by AC_FUNC_MALLOC
  - Fix isspace() arg problem on NetBSD.
  - Fix some documentations.
  - Really use TRIE_CHAR_TERM in TrieChar string termination.
    Changing TRIE_CHAR_TERM definition now won't break the code.
  - Fix Windows build issue by avoiding &lt;unistd.h&gt; include.
  - [New APIs] Add serialization of the trie into memory buffer.</changelog>
</package>
<package pkgid="ab9907982f17771c27581991badf7a30bd82772f3930fefe9393aacd99f9e0a7b7c8e48aa7cabab70d75cebafc8c9fd063108b5b308252a2d882e8fd6a8e8302" name="libdatrie1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.2.13" rel="slfo.1.1_1.2"/>
  <changelog author="vuntz@opensuse.org" date="1298462400">- Add missing baselibs.conf.</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="p.drouand@gmail.com" date="1423051200">- Update to version 0.2.8
  * Fix compiler warnings in test suites.
  * Fix edge-case error on alphabet set of size 255.
  * Fail trie operations on non-alphabet inputs, rather than silently
    allowing them to sneak in as false keys.
  * Improved documentation.
- Add xz build require to keep SLE11 support</changelog>
  <changelog author="dimstar@opensuse.org" date="1439899200">- Add libdatrie-doxygen-found-is-enough.patch: when we find
  doxygen, we assume it is new enough. The configure script uses
  'expr 1.8.4 \&lt; $DOXYGEN_VER', which returns false for 1.8.10.
- For safeguard, we specify the minimal required version of
  doxygen (1.8.4) in the buildrequirements.</changelog>
  <changelog author="pgajdos@suse.com" date="1439899201">- update to version 0.2.9
  * Fix infinite loop on empty trie iteration.
  * Document about alphabet size.
  * Disable timestamp in Doxygen-generated doc.
  * etc. see ChangeLog
- remove libdatrie-doxygen-found-is-enough.patch in favour of
  libdatrie-doxygen-version-check.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to version 0.2.10
  * Correctly check doxygen version on configure
  * Optimization on AlphaMap mapping
- remove libdatrie-doxygen-version-check.patch
  * upstreamed in 7db54c662357dba5f109eaf1b24490f46ca23d44
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups. Remove ineffective --with-pic.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 0.2.12:
  - More C90 (ANSI C) compliance.
  - Prevent some compiling conflicts with other sources.
  - Fix miscellaneous compiler warnings.
  - Prevent trimming on extremely long dictionary path names.
  - Detect iconv() error more correctly in trietool.
  - Clarify package description that search time is O(m), where m is
    key length, not O(1), while still claiming that it's independent
    of database size.
  - Fix trie_state_get_data() on a prefix key.
  - Fix reported segfault on full-range alpha map.</changelog>
  <changelog author="dmueller@suse.com" date="1613044800">- update to 0.2.13:
  - Fix wrong key listing in byte trie
  - Fix cross-compiling issue caused by AC_FUNC_MALLOC
  - Fix isspace() arg problem on NetBSD.
  - Fix some documentations.
  - Really use TRIE_CHAR_TERM in TrieChar string termination.
    Changing TRIE_CHAR_TERM definition now won't break the code.
  - Fix Windows build issue by avoiding &lt;unistd.h&gt; include.
  - [New APIs] Add serialization of the trie into memory buffer.</changelog>
</package>
<package pkgid="8ec2a591793c3f1ec948a5b0cb5a484e2c31352c6c9c3b113e509f1e3f5b96e6b9b208c91ad90075fda7261aa4668dc1cd49ba2210f02e0da68cc5463f67f140" name="libdb-4_8-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.8.30" rel="slfo.1.1_1.4"/>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1678449600">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="177443707679c63c8c439096826a8b1fc2391f2830b4cf3d56fe2fe6f465b8e4d7da02deca81209fa78a7246adadfefc06129ce97b2de39b5453143316ed38d2" name="libdb-4_8-debugsource" arch="aarch64">
  <version epoch="0" ver="4.8.30" rel="slfo.1.1_1.4"/>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1678449600">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="d9db1e3ddc73485f9fffeefe49e08691a7cb48c99d03fb00123c410416dae1cf3b53631cccf3c7b10f986ba69dde295c652fe08ac63801d1566c39fbe0988ec2" name="libdbus-1-3-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.10" rel="slfo.1.1_1.2"/>
  <changelog author="sflees@suse.de" date="1653566400">- The great dbus package split of 22, in preperation for replacing
  dbus-daemon with dbus-broker currently there is no functional
  difference that will change later, this follows a similar setup
  to RedHat and Debian.
  * dbus-daemon is now in its own separate package
  * Create a dbus-1-common package with all the files and config
    that are shared between the dbus-daemon and dbus-broker
    implementations.
  * Create a dbus-1-tools package with the tools eventually we will
    likely want to move to only recommending this package Redhat and
    Debian have both already gone down this path.</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- version provides
- add split provides
- remove unused/obsolete pre_checkin.sh</changelog>
  <changelog author="dmueller@suse.com" date="1665662400">- Disable asserts (bsc#1087072)</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 1.14.4 (bsc#1204111, CVE-2022-42010,
    bsc#1204112, CVE-2022-42011,
    bsc#1204113, CVE-2022-42012):
  This is a security update for the dbus 1.14.x stable branch, fixing
  denial-of-service issues (CVE-2022-42010, -42011, -42012) and applying
  security hardening (dbus#416).
  Behaviour changes:
  * On Linux, dbus-daemon and other uses of DBusServer now create a
    path-based Unix socket, unix:path=..., when asked to listen on a
    unix:tmpdir=... address. This makes unix:tmpdir=... equivalent to
    unix:dir=... on all platforms.
    Previous versions would have created an abstract socket, unix:abstract=...,
    in this situation.
    This change primarily affects the well-known session bus when run via
    dbus-launch(1) or dbus-run-session(1). The user bus, enabled by configuring
    dbus with --enable-user-session and running it on a systemd system,
    already used path-based Unix sockets and is unaffected by this change.
    This behaviour change prevents a sandbox escape via the session bus socket
    in sandboxing frameworks that can share the network namespace with the host
    system, such as Flatpak.
    This change might cause a regression in situations where the abstract socket
    is intentionally shared between the host system and a chroot or container,
    such as some use-cases of schroot(1). That regression can be resolved by
    using a bind-mount to share either the D-Bus socket, or the whole /tmp
    directory, with the chroot or container.
    (dbus#416, Simon McVittie)
  * Denial of service fixes:
  - Evgeny Vereshchagin discovered several ways in which an authenticated
    local attacker could cause a crash (denial of service) in
    dbus-daemon --system or a custom DBusServer. In uncommon configurations
    these could potentially be carried out by an authenticated remote attacker.
  - An invalid array of fixed-length elements where the length of the array
    is not a multiple of the length of the element would cause an assertion
    failure in debug builds or an out-of-bounds read in production builds.
    This was a regression in version 1.3.0.
    (dbus#413, CVE-2022-42011; Simon McVittie)
  - A syntactically invalid type signature with incorrectly nested parentheses
    and curly brackets would cause an assertion failure in debug builds.
    Similar messages could potentially result in a crash or incorrect message
    processing in a production build, although we are not aware of a practical
    example. (dbus#418, CVE-2022-42010; Simon McVittie)
  - A message in non-native endianness with out-of-band Unix file descriptors
    would cause a use-after-free and possible memory corruption in production
    builds, or an assertion failure in debug builds. This was a regression in
    version 1.3.0. (dbus#417, CVE-2022-42012; Simon McVittie)
  - Preserve errno on failure to open /proc/self/oom_score_adj
    (dbus!285, Gentoo#834725; Mike Gilbert)
  - On Linux, don't log warnings if oom_score_adj is read-only but does not
    need to be changed (dbus!291, Simon McVittie)
  - Slightly improve error-handling for inotify
    (dbus!235, Simon McVittie)
  - Don't crash if dbus-daemon is asked to watch more than 128 directories
    for changes (dbus!302, Jan Tojnar)</changelog>
  <changelog author="dmueller@suse.com" date="1675944000">- update to 1.14.6:
  * Fix an incorrect assertion that could be used to crash
    dbus-daemon or other users of DBusServer prior to
    authentication, if libdbus was compiled with assertions
    enabled.
    We recommend that production builds of dbus, for example in
    OS distributions, should be compiled with checks but
    without assertions.
  * When connected to a dbus-broker, stop dbus-monitor from
    incorrectly replying to Peer method calls that were sent to the
    dbus-broker with a NULL destination
  * Fix out-of-bounds varargs read in the dbus-daemon's config-
    parser.  This is not attacker-triggerable and appears to be
    harmless in practice, but is technically undefined behaviour
    and is detected as such by AddressSanitizer.
  * Avoid a data race in multi-threaded use of DBusCounter
  * Fix a crash with some glibc versions when non-auditable
    SELinux events are logged (dbus!386, Jeremi Piotrowski)
  * If dbus_message_demarshal() runs out of memory while
    validating a message, report it as NoMemory rather than
    InvalidArgs (dbus#420, Simon McVittie)
  * Use C11 _Alignof if available, for better standards-
    compliance
  * Stop including an outdated copy of pkg.m4 in the git tree
  * Documentation:
  * Fix the test-apparmor-activation test after dbus#416
  * Internal changes:
  * Fix CI builds with recent git versions (dbus#447, Simon
    McVittie)
- switch to using multibuild</changelog>
  <changelog author="dimstar@opensuse.org" date="1676030400">- Fix multibuild: do not mention main flavor in multibuild, as it
  is implicit built.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1676808000">- Packaging changes:
  * Move missed scriptlets and links for dbus.socket to common
  * Move sysusers and tmpfiles scriptlets, and ghost files to
    common
  * Move dbus-launch man page to correct package</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
</package>
<package pkgid="b7c0ecba77cfdcb3a254f258b05dd650619fec7ddf56f54619537757052e6c14f29dc748ee79e8a2fecb97381d8c2fc44e2345aac7c240ffff8ad00fab3e55d7" name="libdbusmenu-glib4-debuginfo" arch="aarch64">
  <version epoch="0" ver="16.04.0" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1648987200">- Set GTKDOCIZE=true when gtk3 to fix issues with autoconf 2.70</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- conditionalize valgrind dependency - it is optional and not
  available on all architectures</changelog>
</package>
<package pkgid="76363eb703c3b4e11aecfec3d921b773d15e9cd0cbd825d0faff3563436ebb90138e93480fedfd946a6dc3bede18f9ea891a58e4954f79d8a578d2a93d26d685" name="libdbusmenu-gtk2-debugsource" arch="aarch64">
  <version epoch="0" ver="16.04.0" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1648987200">- Set GTKDOCIZE=true when gtk3 to fix issues with autoconf 2.70</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- conditionalize valgrind dependency - it is optional and not
  available on all architectures</changelog>
</package>
<package pkgid="77ce9aa8e20230c54e16c0f5b5db5f2232cd249ae2cb43bbe28ead18704c06662fe8b1fb7e2ef81a953448710d22124f60104f574868ebf6303eb27682ee0813" name="libdbusmenu-gtk3-4-debuginfo" arch="aarch64">
  <version epoch="0" ver="16.04.0" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1648987200">- Set GTKDOCIZE=true when gtk3 to fix issues with autoconf 2.70</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- conditionalize valgrind dependency - it is optional and not
  available on all architectures</changelog>
</package>
<package pkgid="8224aa9b611dda267dd606b04a549df42d963f1f7e7ee3a08783a41f58b7d493fa41d4b5a570028ed72f9bafbdfe51ad55b3ad286002320c63f5e44405a5c918" name="libdbusmenu-gtk3-debugsource" arch="aarch64">
  <version epoch="0" ver="16.04.0" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1648987200">- Set GTKDOCIZE=true when gtk3 to fix issues with autoconf 2.70</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- conditionalize valgrind dependency - it is optional and not
  available on all architectures</changelog>
</package>
<package pkgid="ea6bc6fcb101793bad519cd2f0b3464af2e6891b3b7dba922d3bdd9ef1c4e1c1dd55e53dc3951bf5de8967fec22d03bdbadad3df10414265f7b9c350c229465c" name="libdeflt1_0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2022.10.16" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="80df787010b65591162e068a7c294e965a2d172ed61281034b6992c5476aca69366ce5cde7a0e2318255e7ddcbc45834fd9d0afb33013fdb1f4c04dcbcc679dc" name="libdevmapper-event1_03-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="slfo.1.1_1.3"/>
  <changelog author="heming.zhao@suse.com" date="1648641600">-  lvm2-monitor.service reported warning messages for udev didn't finish to set up device database (bsc#1197183)
  + 0025-vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Update lvm2 from LVM2.2.03.15 to LVM2.2.03.16
  * ** WHATS_NEW for 2.03.16 ***
  Version 2.03.16 - 18th May 2022
  ===============================
    Fix segfault when handling selection with historical LVs.
    Add support --vdosettings with lvcreate, lvconvert, lvchange.
    Filtering multipath devices respects blacklist setting from multipath configuration.
    lvmdevices support for removing by device id using --deviceidtype and --deldev.
    Display writecache block size with lvs -o writecache_block_size.
    Improve cachesettings description in man lvmcache.
    Fix lossing of delete message on thin-pool extension.
- Drop patches that have been merged into upstream
  - 0001-post-release.patch
  - 0002-asan-fix-some-reports-from-libasan.patch
  - 0003-make-generate.patch
  - 0004-tests-udev-pvscan-vgchange-fix-service-wait.patch
  - 0005-devices-file-do-not-clear-PVID-of-unread-devices.patch
  - 0006-tests-skip-vgchange-pvs-online.sh-on-rhel5.patch
  - 0007-dev_manager-fix-dm_task_get_device_list.patch
  - 0008-dev_manager-failing-status-is-not-internal-error.patch
  - 0009-clang-add-extra-check.patch
  - 0010-clang-possible-better-compilation-with-musl-c.patch
  - 0011-dev_manager-do-not-query-for-open_count.patch
  - 0012-dev_manager-use-list-info-for-preset-devs.patch
  - 0013-man-lvmcache-add-more-writecache-cachesettings-info.patch
  - 0014-man-update-cachesettings-option-description.patch
  - 0015-man-lvmcache-mention-writecache-memory-usage.patch
  - 0016-writecache-display-block-size-from-lvs.patch
  - 0017-devices-simplify-dev_cache_get_by_devt.patch
  - 0018-devices-drop-incorrect-paths-from-aliases-list.patch
  - 0019-devices-initial-use-of-existing-option.patch
  - 0020-devices-fix-dev_name-assumptions.patch
  - 0021-devices-use-dev-cache-aliases-handling-from-label-sc.patch
  - 0022-devices-only-close-PVs-on-LVs-when-scan_lvs-is-enabl.patch
  - 0023-writecache-check-memory-usage.patch
  - 0024-pvscan-don-t-use-udev-for-external-device-info.patch
  - 0025-vgchange-monitor-don-t-use-udev-info.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new man: lvm_import_vdo.8 dmfilemapd.8
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
- lvm.conf
  - align upstream style, comment out default values</changelog>
  <changelog author="heming.zhao@suse.com" date="1663761600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667476800">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695038400">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * ** WHATS_NEW from 2.03.17 to 2.03.22 ***
  version 2.03.22 - 02nd August 2023
  ==================================
    Fix pv_major/pv_minor report field types so they are integers, not strings.
    Add lvmdevices --delnotfound to delete entries for missing devices.
    Always use cachepool name for metadata backup LV for lvconvert --repair.
    Make metadata backup LVs read-only after pool's lvconvert --repair.
    Improve VDO and Thin support with lvmlockd.
    Handle 'lvextend --usepolicies' for pools for all activation variants.
    Fix memleak in vgchange autoactivation setup.
    Update py-compile building script.
    Support conversion from thick to fully provisioned thin LV.
    Cache/Thin-pool can use error and zero volumes for testing.
    Individual thin volume can be cached, but cannot take snapshot.
    Better internal support for handling error and zero target (for testing).
    Resize COW above trimmed maximal size is does not return error.
    Support parsing of vdo geometry format version 4.
    Add lvm.conf thin_restore and cache_restore settings.
    Handle multiple mounts while resizing volume with a FS.
    Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
    Enhance lvm_import_vdo and use snapshot when converting VDO volume.
    Fix parsing of VDO metadata.
    Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
    Allow snapshots of raid+integrity LV.
    Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  version 2.03.21 - 21st April 2023
  =================================
    Fix activation of vdo-pool for with 0 length headers (converted pools).
    Avoid printing internal init messages when creation integration devices.
    Allow (write)cache over raid+integrity LV.
  version 2.03.20 - 21st March 2023
  =================================
    Fix segfault if using -S|--select with log/report_command_log=1 setting.
    Configure now fails when requested lvmlockd dependencies are missing.
    Add some configure Gentoo enhancements for static builds.
  version 2.03.19 - 21st February 2023
  ====================================
    Configure supports --with-systemd-run executed from udev rules.
    Enhancement for build with MuslC systemd and non-bash system shells (dash).
    Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
    Ensure udev is processing origin LV before its thick snapshots LVs.
    Fix and improve runtime memory size detection for VDO volumes.
  version 2.03.18 - 22nd December 2022
  ====================================
    Fix issues reported by coverity scan.
    Fix warning for thin pool overprovisioning on lvextend (2.03.17).
    Add support for writecache metadata_only and pause_writeback settings.
    Fix missing error messages in lvmdbusd.
  Version 2.03.17 - 10th November 2022
  ====================================
    Add new options (--fs, --fsmode) for FS handling when resizing LVs.
    Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
    Fix lv_active field type to binary so --select and --binary applies properly.
    Switch to use mallinfo2 and use it only with glibc.
    Error out in lvm shell if using a cmd argument not supported in the shell.
    Fix lvm shell's lastlog command to report previous pre-command failures.
    Extend VDO and VDOPOOL without flushing and locking fs.
    Add --valuesonly option to lvmconfig to print only values without keys.
    Updates configure with recent autoconf tooling.
    Fix lvconvert --test --type vdo-pool execution.
    Add json_std output format for more JSON standard compliant version of output.
    Fix vdo_slab_size_mb value for converted VDO volume.
    Fix many corner cases in device_id, including handling of S/N duplicates.
    Fix various issues in lvmdbusd.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="f7ebbba92383be27a42dd58618a05a984a114c086564795ec5690a277ec66f8340e526a438eddbf3faed1fcbf9ce8b88fed052ae720eb6ada86a74032ee891e9" name="libdevmapper1_03-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="slfo.1.1_1.3"/>
  <changelog author="heming.zhao@suse.com" date="1648641600">-  lvm2-monitor.service reported warning messages for udev didn't finish to set up device database (bsc#1197183)
  + 0025-vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Update lvm2 from LVM2.2.03.15 to LVM2.2.03.16
  * ** WHATS_NEW for 2.03.16 ***
  Version 2.03.16 - 18th May 2022
  ===============================
    Fix segfault when handling selection with historical LVs.
    Add support --vdosettings with lvcreate, lvconvert, lvchange.
    Filtering multipath devices respects blacklist setting from multipath configuration.
    lvmdevices support for removing by device id using --deviceidtype and --deldev.
    Display writecache block size with lvs -o writecache_block_size.
    Improve cachesettings description in man lvmcache.
    Fix lossing of delete message on thin-pool extension.
- Drop patches that have been merged into upstream
  - 0001-post-release.patch
  - 0002-asan-fix-some-reports-from-libasan.patch
  - 0003-make-generate.patch
  - 0004-tests-udev-pvscan-vgchange-fix-service-wait.patch
  - 0005-devices-file-do-not-clear-PVID-of-unread-devices.patch
  - 0006-tests-skip-vgchange-pvs-online.sh-on-rhel5.patch
  - 0007-dev_manager-fix-dm_task_get_device_list.patch
  - 0008-dev_manager-failing-status-is-not-internal-error.patch
  - 0009-clang-add-extra-check.patch
  - 0010-clang-possible-better-compilation-with-musl-c.patch
  - 0011-dev_manager-do-not-query-for-open_count.patch
  - 0012-dev_manager-use-list-info-for-preset-devs.patch
  - 0013-man-lvmcache-add-more-writecache-cachesettings-info.patch
  - 0014-man-update-cachesettings-option-description.patch
  - 0015-man-lvmcache-mention-writecache-memory-usage.patch
  - 0016-writecache-display-block-size-from-lvs.patch
  - 0017-devices-simplify-dev_cache_get_by_devt.patch
  - 0018-devices-drop-incorrect-paths-from-aliases-list.patch
  - 0019-devices-initial-use-of-existing-option.patch
  - 0020-devices-fix-dev_name-assumptions.patch
  - 0021-devices-use-dev-cache-aliases-handling-from-label-sc.patch
  - 0022-devices-only-close-PVs-on-LVs-when-scan_lvs-is-enabl.patch
  - 0023-writecache-check-memory-usage.patch
  - 0024-pvscan-don-t-use-udev-for-external-device-info.patch
  - 0025-vgchange-monitor-don-t-use-udev-info.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new man: lvm_import_vdo.8 dmfilemapd.8
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
- lvm.conf
  - align upstream style, comment out default values</changelog>
  <changelog author="heming.zhao@suse.com" date="1663761600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667476800">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695038400">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * ** WHATS_NEW from 2.03.17 to 2.03.22 ***
  version 2.03.22 - 02nd August 2023
  ==================================
    Fix pv_major/pv_minor report field types so they are integers, not strings.
    Add lvmdevices --delnotfound to delete entries for missing devices.
    Always use cachepool name for metadata backup LV for lvconvert --repair.
    Make metadata backup LVs read-only after pool's lvconvert --repair.
    Improve VDO and Thin support with lvmlockd.
    Handle 'lvextend --usepolicies' for pools for all activation variants.
    Fix memleak in vgchange autoactivation setup.
    Update py-compile building script.
    Support conversion from thick to fully provisioned thin LV.
    Cache/Thin-pool can use error and zero volumes for testing.
    Individual thin volume can be cached, but cannot take snapshot.
    Better internal support for handling error and zero target (for testing).
    Resize COW above trimmed maximal size is does not return error.
    Support parsing of vdo geometry format version 4.
    Add lvm.conf thin_restore and cache_restore settings.
    Handle multiple mounts while resizing volume with a FS.
    Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
    Enhance lvm_import_vdo and use snapshot when converting VDO volume.
    Fix parsing of VDO metadata.
    Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
    Allow snapshots of raid+integrity LV.
    Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  version 2.03.21 - 21st April 2023
  =================================
    Fix activation of vdo-pool for with 0 length headers (converted pools).
    Avoid printing internal init messages when creation integration devices.
    Allow (write)cache over raid+integrity LV.
  version 2.03.20 - 21st March 2023
  =================================
    Fix segfault if using -S|--select with log/report_command_log=1 setting.
    Configure now fails when requested lvmlockd dependencies are missing.
    Add some configure Gentoo enhancements for static builds.
  version 2.03.19 - 21st February 2023
  ====================================
    Configure supports --with-systemd-run executed from udev rules.
    Enhancement for build with MuslC systemd and non-bash system shells (dash).
    Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
    Ensure udev is processing origin LV before its thick snapshots LVs.
    Fix and improve runtime memory size detection for VDO volumes.
  version 2.03.18 - 22nd December 2022
  ====================================
    Fix issues reported by coverity scan.
    Fix warning for thin pool overprovisioning on lvextend (2.03.17).
    Add support for writecache metadata_only and pause_writeback settings.
    Fix missing error messages in lvmdbusd.
  Version 2.03.17 - 10th November 2022
  ====================================
    Add new options (--fs, --fsmode) for FS handling when resizing LVs.
    Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
    Fix lv_active field type to binary so --select and --binary applies properly.
    Switch to use mallinfo2 and use it only with glibc.
    Error out in lvm shell if using a cmd argument not supported in the shell.
    Fix lvm shell's lastlog command to report previous pre-command failures.
    Extend VDO and VDOPOOL without flushing and locking fs.
    Add --valuesonly option to lvmconfig to print only values without keys.
    Updates configure with recent autoconf tooling.
    Fix lvconvert --test --type vdo-pool execution.
    Add json_std output format for more JSON standard compliant version of output.
    Fix vdo_slab_size_mb value for converted VDO volume.
    Fix many corner cases in device_id, including handling of S/N duplicates.
    Fix various issues in lvmdbusd.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="5d8a271b2a95f2fbe0ffb22f7d71719cac1518ea7d0cfb4d2b999fd5eb16123c85826697d54e28e619f02f6b0f4003d83be38e1b750222aa4a9799f554037837" name="libdhash1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="slfo.1.1_1.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="05eb0a727187c8d4f60459750698812add2183ee590c6f2a2b888ab4b301b0828a706208b83ec442f51675073ed388b2d77912783853a593fd9b059acaeee277" name="libdialog15-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
  <changelog author="sbrabec@suse.com" date="1541592000">- Fix mangled Hindi translation (bsc#1115005).</changelog>
  <changelog author="werner@suse.de" date="1550059200">- Update to version 1.3-20190211
  + modify to work with ncurses' threaded-library, which does not allow
    assignment to LINES/COLS (report by Marcus Roeckrath).
  + correct clearing after text in progressbox from 2018/06/21 changes
    for resizing (reports by David Boyd, Alan Somers).
  + improved configure macros CF_GNU_SOURCE, CF_POSIX_C_SOURCE,
    CF_XOPEN_SOURCE
  + update config.guess, config.sub
- Includes also version 1.3-20181107
  + convert ja.po to UTF-8 for consistency (suggested by Stanislav
    Brabec).
  + repair mis-encoded hi.po (report/analysis by Stanislav Brabec).
- Includes also version 1.3-20181022
  + improved configure macros CF_CC_ENV_FLAGS, CF_LD_RPATH_OPT,
    CF_LIBRARY_PATH, CF_SHARED_OPTS, CF_WITH_MAN2HTML,
    CF_WITH_VERSIONED_SYMS from ncurses
  + add ast.po, from
    http://translationproject.org/latest/dialog/
- Includes also version 1.3-20180621
  + improve file-offset computation in textbox.c (Werner Fink).
  + fix an overlooked case with real_auto_size() to maximize when
    height or width is given as -1.
  + build-fixes for configure options "--disable-Xdialog2" and
    "--disable-form"
  + add traces for each widget to show its parameters.
  + modify color scheme for mixedgauge to use the dialog window colors,
    like the captions.
  + fix a too-small malloc in the mixedgauge widget.
  + fix a use-after-free in dlg_remove_callback().
  + improve handling of SIGWINCH for several widgets (Debian #865840).
    + menubox, the point of the Debian report was that it would be nice
    to increase the window size if the terminal size increases.  Did
    that as a special case less problematic than decreasing the
    terminal size.  Added samples/menubox11 to demonstrate by
    comparison with menubox10 a problem with debconf which puts extra
    newlines in the caption that interfere with autowrap.
    + progressbox and derived prgbox, programbox, now handle resizing.
    + yesno, window was cleared
  + add dlg_ttysize() to support new options, allowing scripts to obtain
    some text-formatting details without initializing the terminal.
  + add options --print-text-only, and --print-text-size for scripts that
    adjust the widget size according to how the captions are formatted.
  + improve dialog.pl:
    + add demo.pl, to demonstrate the functions
    + quote/escape string parameters passed to dialog.
    + ensure all "integer" parameters are really integers.
    + use actual screensize for list captions rather than assuming 24
    lines.
  + when trimming blanks, treat unconverted tabs the same as spaces.
  + correct parameter to test when trimming blanks from the script,
    e.g., with "--trim" (report by Jarno Suni).
  + improve documentation of the various whitespace-filtering options,
    to show which take precedence (Debian #867536, cf: Debian #102942).
  + modify msgbox.c, yesno.c to bind SCROLLKEY_BINDINGS before
    TRAVERSE_BINDINGS so that up/down arrow will by default scroll the
    message up/down rather than be aliases for tab-traversal (report by
    Fredrik Kers).
  + modify dump_one_binding() to show when a binding is overridden.
  + improve format of trace-file, making comment-syntax consistent,
    as well as showing argv-splitting as a series of comments.
  + modify dlg_string_to_argv() to change the quoting behavior to be
    more consistent with shell behavior (patch by Denilson Sa Maia).
  + modify dlg_getc() to return ESC when a timeout expires, notifying
    callers that a quit occurred rather than exiting the application
    (suggested by Rodrigo Freitas).
  + modify handle_inputs() to ensure cursor-visibility is restored when
    there is no input character available (report by Guillaume Vareille).
  + improve comment in manual page regarding which widgets can use the
    "--help-button" (prompted by discussion with Csanyi Pal).
  + add a check for valid object pointer in tailbox's main loop since
    the getc-callback may have been freed within ui_getc.c (report by
    "David").
  + improved configure macros for ncurses: CF_GNU_SOURCE, CF_SHARED_OPTS,
    CF_CURSES_LIBS, CF_CURSES_FUNCS, CF_NCURSES_CONFIG
  + improved configure script checks for groff vs man2html:
    CF_PROG_GROFF and CF_WITH_MAN2HTML
  + build-fix from lynx for AM_WITH_NLS configure macro
  + update config.guess, config.sub
- Remove fix for Hindi translation as now upstream
- Remove patch textbox-file_size.patch now upstream
- Remove dialog.ko.po.bz2 as ko.po now upstream
- Modify patch dialog-1.2-20121230.dif</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="werner@suse.de" date="1616068800">- Update to version 1.3-20210306
  + add several usage-messages to dialog.pot
  + improve configure-check for ld searchpath on HP-UX and Solaris.
  + fix a few cppcheck warnings
  + updated eo.po, fi.po, pt.po, sq.po, sv.po, ru.po, uk.po, zh_CN.po
    from http://translationproject.org/latest/dialog/
  + updated dialog.pot
  + add option --no-hot-list, to allow suppressing the hotkey feature
    from lists.
  + increase minimum height of inputbox to avoid input field overlapping
    with the button-box (report by Victor Ananjevsky).
  + modify options-parsing to permit a "no" on any boolean option and
    deprecating the "no" options without a "-" , e.g., generalizing on
    "--nook" equivalence to "--no-ok".
  + minor spelling fixes, per codespell
  + update configure macros, for quoting/escaping fixes per shellcheck
  + update config.guess, config.sub
  + modify configure script's compiler check to work around Xcode's
    useless aliases for standard C.
  + enable keep-tite feature for NetBSD 8 and up; earlier releases would
    dump core.
  &gt; new features/fixes (Glenn Herteg)
  + add option "--cursor-off-label"
  + add option "--erase-on-exit"
  + fix errata in manpage.
  + fix logic: dlg_button_to_char() would return wrong value if no
    uppercase was found
  + add DIALOG_TIMEOUT to sample scripts, and use report-button more
    consistently to handle unexpected exit-status values.
  + add dlg_getenv_num() and dlg_getenv_str().
  + add DLG_EXIT_TIMEOUT to allow scripts to exit on an expired timeout
    with an exit-status different from DLG_EXIT_ERROR or DLG_EXIT_ESC
    (patch by Norbert Koch).
  + modify dlg_ok_label() and dlg_ok_labels() to ignore --no-ok if all
    buttons would be omitted.
  + add/use dlg_der_window() to account for derived windows just like
    subwindows, to fix regression in dlg_getc() in fselect/dselect
    widget.
  + modify several widgets to make their handling of --no-ok consistent
    with the majority of the widgets: editbox.c, menubox.c, msgbox.c,
    rangebox.c, textbox.c, timebox.c
  + add ^D as binding for new virtual key DLGK_LEAVE, which will close
    the current dialog by activating the currently-selected button.
  + improve manual-page description of --no-ok option (reports by
    Hans Mueller, Gil Delescluse).
  + modify configure script to make Solaris -R rpath feature work
  + fix regression in dlg_getc() caused by not taking into account
    subwindows used for input (report by Michael Wihl).
  + add validity-checks for window pointer (report/testcase by Michael
    Wihl).
  + improve configure macros:
    CF_CLANG_COMPILER: apply compiler-flags needed for test.
    CF_WITH_SCREEN_PDCURSES: use this to reduce X11-checks.
  + amend initialization for dlg_getc to fix regression in pause widget
    from 2020/03/27 changes (reports by Aidan Tessier, Norbert Koch,
    Josmar Pierri).
  + improve configure macros:
    CF_CLANG_COMPILER: split-out check for -Qunused-arguments to ensure
    that clang supports it.  IBM xlclang does not.
    CF_MIXEDCASE_FILENAMES: when cross-compiling to darwin (macOS),
    assume the filesystem doesn't support mixed-case
  + modify init_dialog's initialization of tab_len and aspect_ratio to
    avoid overwriting initialization done in process_common_options
    (report/patch by Rainer Weikusat, Debian #970508).
  + fix out-of-order description for --tailbox vs --rangebox in manpage
    (report by Glenn Herteg).
  + updated configure-macros: compiler-warnings and shared-library
    options.  Changed configure --with-warnings to --enable-warnings for
    consistency.
  + update config.guess
  + updated sq.po from http://translationproject.org/latest/dialog/
  + add clarification in manual page to show when the single/double
    quotes may be needed (prompted by discussion with Danilo G Baio).
  + fix an extra ".exe" in makefile.in which prevented Cygwin build.
  + fix most cppcheck warnings
  + tailbox/tailboxbg's exit-button now works with mouse-clicks
  + fix repainting while resizing for the editbox widget.
  + add configure-check for curses_exit() from ncurses 6.2
  + fix a few memory leaks in fselect.c, mixedgauge.c when resizing.
  + fix inconsistency in dlg_string_to_argv() which made the checklist9
    example not work.
  + add empty-string check in dlg_print_listitem() to avoid indexing past
    the end of the array of character-offsets.
  + improve handling of KEY_RESIZE by repainting the backtitle after
    clearing the screen (integrated patch by Rainer Weikusat, Debian
    [#954185]).
  + improve logic for wtimeout() calls which are used to set temporary
    non-blocking reads (prompted by patch by Rainer Weikusat, Debian
    [#954220]).
  + add "make check" rule.
  + updated configure-macros.
  + updated configure-macros, to work around ncurses vs xcode's c99 -W
  + update config.guess
  + updated configure-macros.
  + update config.guess
  + correct rc-file lookup of "default" color (report by Grady Martin,
    cf: 2019/09/24).
  + fix several issues in the sample scripts reported by shellcheck.
  + fix a few spelling errors reported by codespell (report by Jens
    Schleusener).
  + correct check for return-value of isblank(), which is not necessarily
    0/1 (report/patch by Paul Cercueil, Peter Korsgaard, cf: 2018/05/31).
  + amend change for parsing command-options before calling init_dialog,
    to handle --no-shadow, etc., which are initialized in init_dialog
    (report by Paul Cercueil, cf: 2018/06/21).
  + add dlg_trace_va_msg to manpage, symbol files.
  + improve layout of several widgets' data area when maximizing.
  + modify dselect/fselect to work with autosizing (Debian #915949).
  + add error messages from dlg_exiterr() to trace file.
  + improve manual page description of escaping in key-bindings.
  + modify inputmenu to recognize the "Cancel" button and keys bound to
    that feature while editing a renamed menu item.
  + revert one change, in form.c to the --last-key feature (Debian
    [#942025]).
  + correct ordering of libraries in configure-script, which appended
    in a case where it should have prepended.
  + update config.guess, config.sub
  + improve dialog-config script's filtering of -L options using the
    linker default directories.
  + improve dialog-config script, adding a -L option corresponding to
    the configure --libdir option if it would be a duplicate (report by
    Andrew Kosteltsev).
  + build-fix for configure --disable-trace
  + updated pt.po from http://translationproject.org/latest/dialog/
  + allow for underline- and reverse-video flags in the ".rc" file
    (integrated patch by Richard Robbins).
  + amend change to --last-key feature to eliminate an unnecessary
    separator (report by Gabriele Balducci).
  + extend --last-key feature to the remaining widgets which have
    ok/cancel buttons, and add logic to map keys which happen to be
    bound to ok/extra/cancel/help to simulate a button-press on the
    corresponding button (report by "sgewrk").
  + further fixes for dialog-config.in (report by Andrew Kosteltsev).
  + modify dialog-config.in so that setting prefix or exec-prefix to
    a given value with --prefix=VALUE or --exec-prefix=VALUE has the
    expected result of changing bindir, etc.
  + correct substitution for $LIBS value in dialog-config.in (report by
    Andrew Kosteltsev).
  + modify dlg_will_resize() and dlg_result_key() functions to reduce
    the chance that dialog exits on a SIGWINCH (Debian #930775).
  + make test-package for the development headers/library
  + add --libs-only-L, etc., to dialog-config script (prompted by
    discussion with Andrew Kosteltsev).
  + fix a memory leak in gauge widget (Andrew Kosteltsev).
  + minor fix for CF_GCC_WARNINGS
  + update config.guess, config.sub
- Modify patch dialog-1.2-20121230.dif
- This update fixes boo#1183668</changelog>
  <changelog author="dimstar@opensuse.org" date="1623844800">- Update to version 1.3-20210530:
  + amend adjustment to inputbox height so the autosized dimensions
    match  older versions (boo#1184503).
  + improve configure checks, to reduce warnings during those checks
  + updated translations.
- Changes from version 1.3-20210509:
  + improve configure checks, e.g., for libtool version
- Changes from version 1.3-20210324:
  + add configure option --enable-stdnoreturn to build when C11
    _Noreturn feature is enabled in recent ncurses development.
- Changes from version 1.3-20210319:
  Updated translations.</changelog>
</package>
<package pkgid="7a314237e052f9511eddd3354b7c8879ea7932658d1c718d1c1c705551bf42a9d098e12b8567455963b70ad820750c5f8b3fa97108278e8678503bc71efd4c4d" name="libdpdk-23-debuginfo" arch="aarch64">
  <version epoch="0" ver="22.11.10" rel="slfo.1.1_1.1"/>
  <changelog author="sweiberg@suse.com" date="1635163200">- - Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch
- rename
  dpdk-fallthrough-comment-fixes.patch
  to
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1645876800">- Update to LTS version 21.11.
  21.11 should be supported for at least two years, the new major
  ABI version is 22. New Features:
  * General
  * hugetlbfs subdirectories
  * AddressSanitizer (ASan) integration for debug
  * mempool flag for non-IO usages
  * device class for DMA accelerators and drivers for
  * HiSilicon, Intel DSA, Intel IOAT, Marvell CNXK and NXP DPAA
  * device class for GPU devices and driver for NVIDIA CUDA
  * Toeplitz hash using Galois Fields New Instructions (GFNI)
  * Networking
  * MTU handling rework
  * get all MAC addresses of a port
  * RSS based on L3/L4 checksum fields
  * flow match on L2TPv2 and PPP
  * flow flex parser for custom header
  * control delivery of HW Rx metadata
  * transfer flows API rework
  * shared Rx queue
  * driver for NXP ENETFEC
  * vDPA driver for Xilinx devices
  * virtio RSS
  * vhost power monitor wakeup
  * testpmd multi-process
  * pcapng library and dumpcap tool
  * API/ABI
  * API namespace improvements and cleanups
  * API internals hidden
  * flags check for future ABI compatibility
  * More details in the release notes:
    https://doc.dpdk.org/guides/rel_notes/release_21_11.html
- Update to LTS version 20.11.0, new features:
  * General
  * mbuf dynamic area increased from 16 to 36 bytes
  * ring zero cop
  * SIMD bitwidth limit API
  * moved igb_uio to dpdk-kmods/linux
  * removed Python 2 support
  * removed Make support, meson + pkg-config files are
    now used to build applications
  * Networking
  * FEC AP
  * Rx buffer split
  * thread safety in flow API
  * shared action in flow API
  * flow sampling and mirroring
  * tunnel offload API
  * multi-port hairpin
  * Solarflare EF100 architecture
  * Wangxun txgbe driver
  * vhost-vDPA backend in virtio-user
  * removed vhost dequeue zero-copy
  * removed legacy ethdev filtering
  * SWX pipeline aligned with P4
  * Baseband
  * Intel ACC100 driver
  * Cryptography
  * raw datapath API
  * Broadcom BCMFS symmetric crypto driver
  * RegEx
  * Marvell OCTEON TX2 regex driver
  * Others
  * Intel DLB/DLB2 drivers
  * Intel DSA support in IOAT driver
  * Full changes and more details in the release notes:
    https://doc.dpdk.org/guides/rel_notes/release_20_11.html
- Rebased 0002-SLE15-SP3-compatibility-patch-for-kni.patch
- Drop outdated 0001-fix-cpu-compatibility.patch
- Drop outdated 0003-dpdk-fallthrough-comment-fixes.patch
- Added 0001-build-try-to-get-kernel-version-from-kernel-source.patch
  Allow host system to have a different kernel than the target
  system, fixes kernel module installation path for such case.
  Submitted upstream 2022-02-26
- Added fix-buildsystem-python36.patch for Leap as the buildsystem
  uses python syntax introduced with python37, but Leap still
  sticks with 3.6, so this backports it for the old python version.</changelog>
  <changelog author="rpm@fthiessen.de" date="1651060800">- Update to version 21.11.1
  * acl: add missing C++ guards
  * app/compress-perf: Various bug fixes
  * app/dumpcap: check for failure to set promiscuous
  * app/fib: fix division by zero
  * app/pdump: abort on multi-core capture limit
  * app/regex: fix number of matches
  * app/testpmd: Various bug fixes
  * baseband/acc100: avoid out-of-bounds access
  * bpf: add missing C++ guards
  * bus/pci: assign driver pointer before mapping
  * common/cnxk: Various bug fixes
  * common/mlx5: Various bug fixes
  * common/sfc_efx/base: fix recirculation ID set in outer rules
  * compressdev: fix missing space in log macro
  * eal/linux:
  * fix device monitor stop return
  * fix illegal memory access in uevent handler
  * log hugepage create errors with filename
  * Full change log can be found online:
    http://doc.dpdk.org/guides-21.11/rel_notes/release_21_11.html#fixes
- Rebased 0001-build-try-to-get-kernel-version-from-kernel-source.patch
- Dropped upstream fixed fix-buildsystem-python36.patch
- fixes CVE-2022-0669 [bsc#1198964], CVE-2021-3839 [bsc#1198963</changelog>
  <changelog author="jslaby@suse.cz" date="1653480000">- add kni-fix-build-with-Linux-5.18.patch to fix build with kernel
  5.18</changelog>
  <changelog author="dmueller@suse.com" date="1655812800">- also strip meson generated runpaths when installing examples
  manually (bsc#1200620)</changelog>
  <changelog author="bwiedemann@suse.com" date="1677067200">- Cleanup Sphinx build leftovers for reproducible builds</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1680696000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
    http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
  0001-build-try-to-get-kernel-version-from-kernel-source.patch
  kni-fix-build-with-Linux-5.18.patch
  * Added Patches:
    0001-fix-cpu-compatibility.patch
  * Rebased patches:
    0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1682510400">- add 0001-kni-fix-build-with-Linux-6.3.patch to fix build against
  kernel 6.3.</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1763380800">- Upstream bugfix update:
  - Version 22.11.10
  - net/mlx5: fix out-of-order completions in ordinary Rx burst
    (CVE-2025-23259, bsc#1254161)
  - Version 22.11.9
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id24
  - Version 22.11.8
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id21
  - Version 22.11.7
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id18
  - Remove included fix dpdk-CVE-2024-11614.patch
  - Version 22.11.6
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id15
  - Version 22.11.5
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id12
  - Version 22.11.4
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id8
  - Version 22.11.3
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id4
    Remove included fixes:
  - 0001-kni-fix-build-with-Linux-6.3.patch
  - Version 22.11.2
    https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id2
- Fix [bsc#1214724], SUSE provided DPDK modules taint the kernel as unsupported
  + Add kernel support flag for rte_kni.ko</changelog>
</package>
<package pkgid="7106461c1a4173ef140ecefc9709a40ad47bd00cf69e1f3e87a71160a4509c70d9fb4a695a523a58a4c9a8bf8465b6c7984499dafe98196faaf174be258b38fe" name="libdrm-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.119" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to 2.4.116
  * nouveau: add interface to make buffer objects global
  * xf86drm: update DRM_NODE_NAME_MAX supporting more nodes
  * xf86drm: use drm device name to identify drm node type
  * meson: drop pthread-stubs dependency on BSDs
  * amdgpu: add marketing names from amd-5.4.3 (22.40.3)
  * tests/amdgpu: Fix Usage string
  * tests/amdgpu: Add all 9 options to the help output
  * tests/amdgpu: Allow to exclude a test or a suite of tests
  * amdgpu: add an environment variable that overrides the context priority
  * amdgpu: remove va::dev member
  * tests/amdgpu/vcn: change vbv_buffer name to input
  * tests/amdgpu/vcn: fix drm test failure
  * tests/amdgpu/vcn: fix session buffer issue for vcn1-vcn3
  * tests/amdgpu/vcn:update decoder unit test
  * xf86drm: bump DRM_MAX_MINOR to 64
  * xf86drm: drop control nodes implementation
  * Sync headers with drm-next
  * xf86drm: add drmSyncobjEventfd
  * build: bump version to 2.4.116
  * xf86drmMode: constify drmModeCrtcSetGamma
  * tests/util: Add vkms driver
  * test/amdgpu/hotunplug: add apu check for hotplug test</changelog>
  <changelog author="sndirsch@suse.com" date="1695211200">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to generated 2.4.116
  pkgconfig files in order to fix build against sle15/Leap 15.x</changelog>
  <changelog author="sndirsch@suse.com" date="1695297600">- provide/obsolete dropped packages libkms1/libkms-devel (bsc#1215526)</changelog>
  <changelog author="sndirsch@suse.com" date="1697803200">- Update to 2.4.117
  * modetest: print modifiers in hex as well
  * modetest: custom mode support
  * meson: fix intel requirements
  * meson: Use feature.require() and feature.allowed()
  * meson: replace deprecated program.path -&gt; program.full_path
  * modetest: avoid erroring if there's no gamma legacy support
  * amdgpu: Fix pointer/integer mismatch warning
  * amdgpu: Use PRI?64 to format uint64_t
  * util: add NV24 and NV42 frame buffer formats
  * util: add pattern support for DRM_FORMAT_NV{24,42}
  * modetest: add support for DRM_FORMAT_NV{24,42}
  * util: fix grey in YUV SMPTE patterns
  * modetest: fix mode_vrefresh() for interlace/dblscan/vscan
  * util: remove unused definitions of RED, GREEN, and BLUE
  * amdgpu: add marketing names from amd-5.4.6 (22.40.6)
  * amdgpu: add marketing names from amd-5.5.1 (23.10.1)
  * amdgpu: add marketing names from PRO Edition 23.Q3 W7000
  * amdgpu: add marketing names from Adrenalin 23.7.2
  * amdgpu: add marketing names from Adrenalin 23.9.1
  * modetest: document why no blob is created for linear gamma LUT
  * modetest: allocate and commit atomic request around set_property()
  * modetest: permit -r and -s to work together
  * modetest: allow using -r and -P
  * modetest: add support for writeback connector
  * amdgpu: amdgpu_drm.h for new GPUVM fault ioctl
  * amdgpu: add support for querying VM faults information
  * xf86drm: mark DRM_MAX_MINOR as deprecated
  * ci: bump FreeBSD to 13.2</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- use valgrind support only on 64bit platforms</changelog>
  <changelog author="sndirsch@suse.com" date="1700222400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 2.4.118:
  * improve SMPTE color LUT accuracy
  * util: factor out and optimize C8 SMPTE color LUT
  * util: add support for DRM_FORMAT_C[124]
  * util: store number of colors for indexed formats
  * util: add SMPTE pattern support for C4 format
  * util: add SMPTE pattern support for C1 format
  * util: add SMPTE pattern support for C2 format
  * modetest: add support for DRM_FORMAT_C[124]
  * modetest: add SMPTE pattern support for C[124] formats
  * intel: determine target endianness using meson
  * util: fix 32 bpp patterns on big-endian
  * util: fix 16 bpp patterns on big-endian
  * util: add missing big-endian RGB16 frame buffer formats
  * modetest: add support for parsing big-endian formats
  * util: add test pattern support for big-endian XRGB1555/RGB565
  * util: fix pwetty on big-endian
  * util: add pwetty support for big-endian RGB565
  * modetest: add support for big-endian XRGB1555/RGB565
  * modetest: add support for DRM_FORMAT_NV{15,20,30}
  * modetest: switch usage to proper options grammar
  * xf86drm: add drmGetNodeTypeFromDevId
  * Sync headers with drm-next
  * xf86drmMode: add drmModeCloseFB()</changelog>
  <changelog author="sndirsch@suse.com" date="1701172800">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build on sle15-sp6</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.4.119:
  * add amdgpu_va_get_start_addr</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build</changelog>
</package>
<package pkgid="ed8b3200c2bc5cc60c932d5c9c02821e049ccee0abe4247064ec59f0f6155be3c801b070b83868ecb0591e52e9ea0ebe35da13fe5432d7c992d04ad964e8e0dc" name="libdrm2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.119" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to 2.4.116
  * nouveau: add interface to make buffer objects global
  * xf86drm: update DRM_NODE_NAME_MAX supporting more nodes
  * xf86drm: use drm device name to identify drm node type
  * meson: drop pthread-stubs dependency on BSDs
  * amdgpu: add marketing names from amd-5.4.3 (22.40.3)
  * tests/amdgpu: Fix Usage string
  * tests/amdgpu: Add all 9 options to the help output
  * tests/amdgpu: Allow to exclude a test or a suite of tests
  * amdgpu: add an environment variable that overrides the context priority
  * amdgpu: remove va::dev member
  * tests/amdgpu/vcn: change vbv_buffer name to input
  * tests/amdgpu/vcn: fix drm test failure
  * tests/amdgpu/vcn: fix session buffer issue for vcn1-vcn3
  * tests/amdgpu/vcn:update decoder unit test
  * xf86drm: bump DRM_MAX_MINOR to 64
  * xf86drm: drop control nodes implementation
  * Sync headers with drm-next
  * xf86drm: add drmSyncobjEventfd
  * build: bump version to 2.4.116
  * xf86drmMode: constify drmModeCrtcSetGamma
  * tests/util: Add vkms driver
  * test/amdgpu/hotunplug: add apu check for hotplug test</changelog>
  <changelog author="sndirsch@suse.com" date="1695211200">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to generated 2.4.116
  pkgconfig files in order to fix build against sle15/Leap 15.x</changelog>
  <changelog author="sndirsch@suse.com" date="1695297600">- provide/obsolete dropped packages libkms1/libkms-devel (bsc#1215526)</changelog>
  <changelog author="sndirsch@suse.com" date="1697803200">- Update to 2.4.117
  * modetest: print modifiers in hex as well
  * modetest: custom mode support
  * meson: fix intel requirements
  * meson: Use feature.require() and feature.allowed()
  * meson: replace deprecated program.path -&gt; program.full_path
  * modetest: avoid erroring if there's no gamma legacy support
  * amdgpu: Fix pointer/integer mismatch warning
  * amdgpu: Use PRI?64 to format uint64_t
  * util: add NV24 and NV42 frame buffer formats
  * util: add pattern support for DRM_FORMAT_NV{24,42}
  * modetest: add support for DRM_FORMAT_NV{24,42}
  * util: fix grey in YUV SMPTE patterns
  * modetest: fix mode_vrefresh() for interlace/dblscan/vscan
  * util: remove unused definitions of RED, GREEN, and BLUE
  * amdgpu: add marketing names from amd-5.4.6 (22.40.6)
  * amdgpu: add marketing names from amd-5.5.1 (23.10.1)
  * amdgpu: add marketing names from PRO Edition 23.Q3 W7000
  * amdgpu: add marketing names from Adrenalin 23.7.2
  * amdgpu: add marketing names from Adrenalin 23.9.1
  * modetest: document why no blob is created for linear gamma LUT
  * modetest: allocate and commit atomic request around set_property()
  * modetest: permit -r and -s to work together
  * modetest: allow using -r and -P
  * modetest: add support for writeback connector
  * amdgpu: amdgpu_drm.h for new GPUVM fault ioctl
  * amdgpu: add support for querying VM faults information
  * xf86drm: mark DRM_MAX_MINOR as deprecated
  * ci: bump FreeBSD to 13.2</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- use valgrind support only on 64bit platforms</changelog>
  <changelog author="sndirsch@suse.com" date="1700222400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 2.4.118:
  * improve SMPTE color LUT accuracy
  * util: factor out and optimize C8 SMPTE color LUT
  * util: add support for DRM_FORMAT_C[124]
  * util: store number of colors for indexed formats
  * util: add SMPTE pattern support for C4 format
  * util: add SMPTE pattern support for C1 format
  * util: add SMPTE pattern support for C2 format
  * modetest: add support for DRM_FORMAT_C[124]
  * modetest: add SMPTE pattern support for C[124] formats
  * intel: determine target endianness using meson
  * util: fix 32 bpp patterns on big-endian
  * util: fix 16 bpp patterns on big-endian
  * util: add missing big-endian RGB16 frame buffer formats
  * modetest: add support for parsing big-endian formats
  * util: add test pattern support for big-endian XRGB1555/RGB565
  * util: fix pwetty on big-endian
  * util: add pwetty support for big-endian RGB565
  * modetest: add support for big-endian XRGB1555/RGB565
  * modetest: add support for DRM_FORMAT_NV{15,20,30}
  * modetest: switch usage to proper options grammar
  * xf86drm: add drmGetNodeTypeFromDevId
  * Sync headers with drm-next
  * xf86drmMode: add drmModeCloseFB()</changelog>
  <changelog author="sndirsch@suse.com" date="1701172800">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build on sle15-sp6</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.4.119:
  * add amdgpu_va_get_start_addr</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build</changelog>
</package>
<package pkgid="7bd8e067fefa463d242598ea72ed6c3dd278f87a3b4b3e10b88a35ac9478720182d42e3efb195807d8cde608961747bff53f674d331ba03c750d12068fd864e7" name="libdrm_amdgpu1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.119" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to 2.4.116
  * nouveau: add interface to make buffer objects global
  * xf86drm: update DRM_NODE_NAME_MAX supporting more nodes
  * xf86drm: use drm device name to identify drm node type
  * meson: drop pthread-stubs dependency on BSDs
  * amdgpu: add marketing names from amd-5.4.3 (22.40.3)
  * tests/amdgpu: Fix Usage string
  * tests/amdgpu: Add all 9 options to the help output
  * tests/amdgpu: Allow to exclude a test or a suite of tests
  * amdgpu: add an environment variable that overrides the context priority
  * amdgpu: remove va::dev member
  * tests/amdgpu/vcn: change vbv_buffer name to input
  * tests/amdgpu/vcn: fix drm test failure
  * tests/amdgpu/vcn: fix session buffer issue for vcn1-vcn3
  * tests/amdgpu/vcn:update decoder unit test
  * xf86drm: bump DRM_MAX_MINOR to 64
  * xf86drm: drop control nodes implementation
  * Sync headers with drm-next
  * xf86drm: add drmSyncobjEventfd
  * build: bump version to 2.4.116
  * xf86drmMode: constify drmModeCrtcSetGamma
  * tests/util: Add vkms driver
  * test/amdgpu/hotunplug: add apu check for hotplug test</changelog>
  <changelog author="sndirsch@suse.com" date="1695211200">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to generated 2.4.116
  pkgconfig files in order to fix build against sle15/Leap 15.x</changelog>
  <changelog author="sndirsch@suse.com" date="1695297600">- provide/obsolete dropped packages libkms1/libkms-devel (bsc#1215526)</changelog>
  <changelog author="sndirsch@suse.com" date="1697803200">- Update to 2.4.117
  * modetest: print modifiers in hex as well
  * modetest: custom mode support
  * meson: fix intel requirements
  * meson: Use feature.require() and feature.allowed()
  * meson: replace deprecated program.path -&gt; program.full_path
  * modetest: avoid erroring if there's no gamma legacy support
  * amdgpu: Fix pointer/integer mismatch warning
  * amdgpu: Use PRI?64 to format uint64_t
  * util: add NV24 and NV42 frame buffer formats
  * util: add pattern support for DRM_FORMAT_NV{24,42}
  * modetest: add support for DRM_FORMAT_NV{24,42}
  * util: fix grey in YUV SMPTE patterns
  * modetest: fix mode_vrefresh() for interlace/dblscan/vscan
  * util: remove unused definitions of RED, GREEN, and BLUE
  * amdgpu: add marketing names from amd-5.4.6 (22.40.6)
  * amdgpu: add marketing names from amd-5.5.1 (23.10.1)
  * amdgpu: add marketing names from PRO Edition 23.Q3 W7000
  * amdgpu: add marketing names from Adrenalin 23.7.2
  * amdgpu: add marketing names from Adrenalin 23.9.1
  * modetest: document why no blob is created for linear gamma LUT
  * modetest: allocate and commit atomic request around set_property()
  * modetest: permit -r and -s to work together
  * modetest: allow using -r and -P
  * modetest: add support for writeback connector
  * amdgpu: amdgpu_drm.h for new GPUVM fault ioctl
  * amdgpu: add support for querying VM faults information
  * xf86drm: mark DRM_MAX_MINOR as deprecated
  * ci: bump FreeBSD to 13.2</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- use valgrind support only on 64bit platforms</changelog>
  <changelog author="sndirsch@suse.com" date="1700222400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 2.4.118:
  * improve SMPTE color LUT accuracy
  * util: factor out and optimize C8 SMPTE color LUT
  * util: add support for DRM_FORMAT_C[124]
  * util: store number of colors for indexed formats
  * util: add SMPTE pattern support for C4 format
  * util: add SMPTE pattern support for C1 format
  * util: add SMPTE pattern support for C2 format
  * modetest: add support for DRM_FORMAT_C[124]
  * modetest: add SMPTE pattern support for C[124] formats
  * intel: determine target endianness using meson
  * util: fix 32 bpp patterns on big-endian
  * util: fix 16 bpp patterns on big-endian
  * util: add missing big-endian RGB16 frame buffer formats
  * modetest: add support for parsing big-endian formats
  * util: add test pattern support for big-endian XRGB1555/RGB565
  * util: fix pwetty on big-endian
  * util: add pwetty support for big-endian RGB565
  * modetest: add support for big-endian XRGB1555/RGB565
  * modetest: add support for DRM_FORMAT_NV{15,20,30}
  * modetest: switch usage to proper options grammar
  * xf86drm: add drmGetNodeTypeFromDevId
  * Sync headers with drm-next
  * xf86drmMode: add drmModeCloseFB()</changelog>
  <changelog author="sndirsch@suse.com" date="1701172800">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build on sle15-sp6</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.4.119:
  * add amdgpu_va_get_start_addr</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build</changelog>
</package>
<package pkgid="ce9b000861f8694f09090128d968d36f60ca7c77242a708a54959dbcf7023cc0196af58f798ce9d973db214deb59dc94c4e66aedbe25749edf46eb8355a5ca84" name="libdrm_nouveau2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.119" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to 2.4.116
  * nouveau: add interface to make buffer objects global
  * xf86drm: update DRM_NODE_NAME_MAX supporting more nodes
  * xf86drm: use drm device name to identify drm node type
  * meson: drop pthread-stubs dependency on BSDs
  * amdgpu: add marketing names from amd-5.4.3 (22.40.3)
  * tests/amdgpu: Fix Usage string
  * tests/amdgpu: Add all 9 options to the help output
  * tests/amdgpu: Allow to exclude a test or a suite of tests
  * amdgpu: add an environment variable that overrides the context priority
  * amdgpu: remove va::dev member
  * tests/amdgpu/vcn: change vbv_buffer name to input
  * tests/amdgpu/vcn: fix drm test failure
  * tests/amdgpu/vcn: fix session buffer issue for vcn1-vcn3
  * tests/amdgpu/vcn:update decoder unit test
  * xf86drm: bump DRM_MAX_MINOR to 64
  * xf86drm: drop control nodes implementation
  * Sync headers with drm-next
  * xf86drm: add drmSyncobjEventfd
  * build: bump version to 2.4.116
  * xf86drmMode: constify drmModeCrtcSetGamma
  * tests/util: Add vkms driver
  * test/amdgpu/hotunplug: add apu check for hotplug test</changelog>
  <changelog author="sndirsch@suse.com" date="1695211200">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to generated 2.4.116
  pkgconfig files in order to fix build against sle15/Leap 15.x</changelog>
  <changelog author="sndirsch@suse.com" date="1695297600">- provide/obsolete dropped packages libkms1/libkms-devel (bsc#1215526)</changelog>
  <changelog author="sndirsch@suse.com" date="1697803200">- Update to 2.4.117
  * modetest: print modifiers in hex as well
  * modetest: custom mode support
  * meson: fix intel requirements
  * meson: Use feature.require() and feature.allowed()
  * meson: replace deprecated program.path -&gt; program.full_path
  * modetest: avoid erroring if there's no gamma legacy support
  * amdgpu: Fix pointer/integer mismatch warning
  * amdgpu: Use PRI?64 to format uint64_t
  * util: add NV24 and NV42 frame buffer formats
  * util: add pattern support for DRM_FORMAT_NV{24,42}
  * modetest: add support for DRM_FORMAT_NV{24,42}
  * util: fix grey in YUV SMPTE patterns
  * modetest: fix mode_vrefresh() for interlace/dblscan/vscan
  * util: remove unused definitions of RED, GREEN, and BLUE
  * amdgpu: add marketing names from amd-5.4.6 (22.40.6)
  * amdgpu: add marketing names from amd-5.5.1 (23.10.1)
  * amdgpu: add marketing names from PRO Edition 23.Q3 W7000
  * amdgpu: add marketing names from Adrenalin 23.7.2
  * amdgpu: add marketing names from Adrenalin 23.9.1
  * modetest: document why no blob is created for linear gamma LUT
  * modetest: allocate and commit atomic request around set_property()
  * modetest: permit -r and -s to work together
  * modetest: allow using -r and -P
  * modetest: add support for writeback connector
  * amdgpu: amdgpu_drm.h for new GPUVM fault ioctl
  * amdgpu: add support for querying VM faults information
  * xf86drm: mark DRM_MAX_MINOR as deprecated
  * ci: bump FreeBSD to 13.2</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- use valgrind support only on 64bit platforms</changelog>
  <changelog author="sndirsch@suse.com" date="1700222400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 2.4.118:
  * improve SMPTE color LUT accuracy
  * util: factor out and optimize C8 SMPTE color LUT
  * util: add support for DRM_FORMAT_C[124]
  * util: store number of colors for indexed formats
  * util: add SMPTE pattern support for C4 format
  * util: add SMPTE pattern support for C1 format
  * util: add SMPTE pattern support for C2 format
  * modetest: add support for DRM_FORMAT_C[124]
  * modetest: add SMPTE pattern support for C[124] formats
  * intel: determine target endianness using meson
  * util: fix 32 bpp patterns on big-endian
  * util: fix 16 bpp patterns on big-endian
  * util: add missing big-endian RGB16 frame buffer formats
  * modetest: add support for parsing big-endian formats
  * util: add test pattern support for big-endian XRGB1555/RGB565
  * util: fix pwetty on big-endian
  * util: add pwetty support for big-endian RGB565
  * modetest: add support for big-endian XRGB1555/RGB565
  * modetest: add support for DRM_FORMAT_NV{15,20,30}
  * modetest: switch usage to proper options grammar
  * xf86drm: add drmGetNodeTypeFromDevId
  * Sync headers with drm-next
  * xf86drmMode: add drmModeCloseFB()</changelog>
  <changelog author="sndirsch@suse.com" date="1701172800">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build on sle15-sp6</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.4.119:
  * add amdgpu_va_get_start_addr</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build</changelog>
</package>
<package pkgid="d0d4b20784c1ef0d3e0ac7c5c0f99cd8b87e9ff22d1a39e006d809127d40d467daec6babef3d8c08ffc7f33d9ef767a3d015ead69fa12b96042e07210fcea12a" name="libdrm_radeon1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.119" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@suse.com" date="1693051200">- Update to 2.4.116
  * nouveau: add interface to make buffer objects global
  * xf86drm: update DRM_NODE_NAME_MAX supporting more nodes
  * xf86drm: use drm device name to identify drm node type
  * meson: drop pthread-stubs dependency on BSDs
  * amdgpu: add marketing names from amd-5.4.3 (22.40.3)
  * tests/amdgpu: Fix Usage string
  * tests/amdgpu: Add all 9 options to the help output
  * tests/amdgpu: Allow to exclude a test or a suite of tests
  * amdgpu: add an environment variable that overrides the context priority
  * amdgpu: remove va::dev member
  * tests/amdgpu/vcn: change vbv_buffer name to input
  * tests/amdgpu/vcn: fix drm test failure
  * tests/amdgpu/vcn: fix session buffer issue for vcn1-vcn3
  * tests/amdgpu/vcn:update decoder unit test
  * xf86drm: bump DRM_MAX_MINOR to 64
  * xf86drm: drop control nodes implementation
  * Sync headers with drm-next
  * xf86drm: add drmSyncobjEventfd
  * build: bump version to 2.4.116
  * xf86drmMode: constify drmModeCrtcSetGamma
  * tests/util: Add vkms driver
  * test/amdgpu/hotunplug: add apu check for hotplug test</changelog>
  <changelog author="sndirsch@suse.com" date="1695211200">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to generated 2.4.116
  pkgconfig files in order to fix build against sle15/Leap 15.x</changelog>
  <changelog author="sndirsch@suse.com" date="1695297600">- provide/obsolete dropped packages libkms1/libkms-devel (bsc#1215526)</changelog>
  <changelog author="sndirsch@suse.com" date="1697803200">- Update to 2.4.117
  * modetest: print modifiers in hex as well
  * modetest: custom mode support
  * meson: fix intel requirements
  * meson: Use feature.require() and feature.allowed()
  * meson: replace deprecated program.path -&gt; program.full_path
  * modetest: avoid erroring if there's no gamma legacy support
  * amdgpu: Fix pointer/integer mismatch warning
  * amdgpu: Use PRI?64 to format uint64_t
  * util: add NV24 and NV42 frame buffer formats
  * util: add pattern support for DRM_FORMAT_NV{24,42}
  * modetest: add support for DRM_FORMAT_NV{24,42}
  * util: fix grey in YUV SMPTE patterns
  * modetest: fix mode_vrefresh() for interlace/dblscan/vscan
  * util: remove unused definitions of RED, GREEN, and BLUE
  * amdgpu: add marketing names from amd-5.4.6 (22.40.6)
  * amdgpu: add marketing names from amd-5.5.1 (23.10.1)
  * amdgpu: add marketing names from PRO Edition 23.Q3 W7000
  * amdgpu: add marketing names from Adrenalin 23.7.2
  * amdgpu: add marketing names from Adrenalin 23.9.1
  * modetest: document why no blob is created for linear gamma LUT
  * modetest: allocate and commit atomic request around set_property()
  * modetest: permit -r and -s to work together
  * modetest: allow using -r and -P
  * modetest: add support for writeback connector
  * amdgpu: amdgpu_drm.h for new GPUVM fault ioctl
  * amdgpu: add support for querying VM faults information
  * xf86drm: mark DRM_MAX_MINOR as deprecated
  * ci: bump FreeBSD to 13.2</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- use valgrind support only on 64bit platforms</changelog>
  <changelog author="sndirsch@suse.com" date="1700222400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 2.4.118:
  * improve SMPTE color LUT accuracy
  * util: factor out and optimize C8 SMPTE color LUT
  * util: add support for DRM_FORMAT_C[124]
  * util: store number of colors for indexed formats
  * util: add SMPTE pattern support for C4 format
  * util: add SMPTE pattern support for C1 format
  * util: add SMPTE pattern support for C2 format
  * modetest: add support for DRM_FORMAT_C[124]
  * modetest: add SMPTE pattern support for C[124] formats
  * intel: determine target endianness using meson
  * util: fix 32 bpp patterns on big-endian
  * util: fix 16 bpp patterns on big-endian
  * util: add missing big-endian RGB16 frame buffer formats
  * modetest: add support for parsing big-endian formats
  * util: add test pattern support for big-endian XRGB1555/RGB565
  * util: fix pwetty on big-endian
  * util: add pwetty support for big-endian RGB565
  * modetest: add support for big-endian XRGB1555/RGB565
  * modetest: add support for DRM_FORMAT_NV{15,20,30}
  * modetest: switch usage to proper options grammar
  * xf86drm: add drmGetNodeTypeFromDevId
  * Sync headers with drm-next
  * xf86drmMode: add drmModeCloseFB()</changelog>
  <changelog author="sndirsch@suse.com" date="1701172800">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build on sle15-sp6</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.4.119:
  * add amdgpu_va_get_start_addr</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- adjusted n_libdrm-drop-valgrind-dep-generic.patch,
  n_libdrm-drop-valgrind-dep-intel.patch to fix build</changelog>
</package>
<package pkgid="66c0e1f0edd8821391b10a6e0e0fbef021f73d24ec08bcfcac477f41ffdd6853a47657622db4155003cfdeedf1f7dd5f3f14970973287a1c9e95c8f0b795f73c" name="libduktape207-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.7.0" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 2.7.0:
  * Fix memory unsafe behavior when valstack size limit hit in
    call setup
  * Fix a realloc() memory leak triggered when (1) previous
    allocation exists, (2) new realloc size is 0, (3) GC is
    triggered before first realloc() attempt
  * Fix void pointer arithmetic in duk_alloc_pool.c, caused
    problems with MSVC
  * Fix broken bytecode dump on big endian architectures
  * Fix DUK_USE_GET_RANDOM_DOUBLE() argument handling
  * Use yaml.safe_load() instead of yaml.load() in Py2 tooling
  * Dist makefile and pkg-config improvements
  * Fix Makefile.jsoncbor build
  * Reformat source with clang-format-12
- Bump sover define following upstream changes.
- Rebase duktape-link-m.patch with quilt.
- Drop pc.in file, no longer needed.
- Pass the needed prefixes etc to make_build and make_install.
- Use ldconfig_scriptlets macro.</changelog>
</package>
<package pkgid="b590d07c0a907d2224c38b492bc3a61c22369d1c9bec9a69391105b6337c9bf4a1d3ed793066e011d7a9767f08189d7cdf76811ceda0202a6922da7a3a6fa62a" name="libdw1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.189" rel="slfo.1.1_1.5"/>
  <changelog author="mliska@suse.cz" date="1650974400">- Update to version 0.187:
  * debuginfod: Support -C option for connection thread pooling.
  * debuginfod-client: Negative cache file are now zero sized instead of
    no-permission files.
  * addr2line: The -A, --absolute option, which shows file names including
    the full compilation directory is now the default.  To get the
    old behavior use the new option --relative.
  * readelf, elflint: Recognize FDO Packaging Metadata ELF notes
  * libdw, debuginfo-client: Load libcurl lazily only when files need to
    be fetched remotely. libcurl is now never
    loaded when DEBUGINFOD_URLS is unset. And when
    DEBUGINFOD_URLS is set, libcurl is only loaded
    when the debuginfod_begin function is called.</changelog>
  <changelog author="mliska@suse.cz" date="1665748800">- Add RISC-V specific patches:
  * 0001-libelf-Sync-elf.h-from-glibc.patch
  * 0002-backends-Handle-new-RISC-V-specific-definitions.patch
  * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch
  * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch
  * 0005-backends-Add-RISC-V-object-attribute-printing.patch</changelog>
  <changelog author="mliska@suse.cz" date="1667822400">- Update to version 0.188:
  * readelf: Add -D, --use-dynamic option.
  * debuginfod-client: Add $DEBUGINFOD_HEADERS_FILE setting to supply
    outgoing debuginfod_find_section.
  * debuginfod: Add --disable-source-scan option.
  * libdwfl: Add new function dwfl_get_debuginfod_client.
    Add new function dwfl_frame_reg.
    Add new function dwfl_report_offline_memory.
- Remove upstreamed patches:
  * 0001-libelf-Sync-elf.h-from-glibc.patch
  * 0002-backends-Handle-new-RISC-V-specific-definitions.patch
  * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch
  * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch
  * PR29474-debuginfod.patch
  * config-Move-the-2-dev-null-inside-the-sh-c-quotes-fo.patch
  * support-nullglob-in-profile.-.in-files.patch</changelog>
  <changelog author="dmueller@suse.com" date="1667995200">- align patches section
- remove date/time handling weirdness, elfutils does no longer
  use __DATE__ or __TIME__ (as proven by the newly added -Werror=date-time)</changelog>
  <changelog author="mliska@suse.cz" date="1676376000">- Add support-DW_TAG_unspecified_type.patch that fixes PR30047.</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Fix build with libcurl version 7.88.0 for various deprecated
  constants. Add patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch</changelog>
  <changelog author="mliska@suse.cz" date="1677153600">- Disable a false-positive -Werror=use-after-free warning.</changelog>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="f6f0479dd62d0c9cb24373f106da1df8133a8911cd6128eb1a1ee10fdcd4ec3d0b62d67c1e18b37abdf148e6a137f047fcad03249ab9739537a8cce8e2c9796d" name="libebtc0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 2.0.11
  * Add --noflush command line support for ebtables-restore
  * Do not print IPv6 mask if it is all ones
  * Allow RETURN target rules in user defined chains
  * ebt_ip: add support for matching ICMP type and code
  * ebt_ip: add support for matching IGMP type
  * extensions: Add string filter to ebtables
  * Print IPv6 prefixes in CIDR notation
  * extensions: Add AUDIT target
  * Fix incorrect IPv6 prefix formatting
- Drop ebtables-v2.0.8-makefile.diff (no longer needed)
- Drop ebtables-v2.0.8-initscript.diff, include-linux-if.patch
  (not applicable)
- Drop ebtables-v2.0.10-4-audit.patch,
  0001-fix-compilation-warning.patch,
  0001-Use-flock-for-concurrent-option.patch,
  0002-Fix-locking-if-LOCKDIR-does-not-exist.patch (merged)</changelog>
  <changelog author="kstreitova@suse.com" date="1575979200">- add ebtables.keyring as a Source</changelog>
  <changelog author="kstreitova@suse.com" date="1578657600">- rename /usr/lib/ebtables helper file to /usr/lib/ebtables-helper
  otherwise it conflicts with /usr/lib/ebtables library directory
  on 32-bit systems [bsc#1159769]</changelog>
  <changelog author="kukuk@suse.com" date="1588161600">- Use /bin/sh for ebtables.systemd
- Don't hard require systemd, we don't need that in a container</changelog>
  <changelog author="kukuk@suse.com" date="1588680000">- Revert last /bin/bash -&gt; /bin/sh change</changelog>
  <changelog author="kstreitova@suse.com" date="1598961600">- replace /usr/lib with /usr/libexec in .service files to follow
  %_libexecdir macro changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1599048000">- Have the source .service file hold a placeholder for LIBEXECDIR,
  which we replace during build/install phase, allowing the package
  to be used no matter what value %{_libexecdir} has.</changelog>
  <changelog author="schubi@suse.de" date="1629460800">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * ebtables.service</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636632000">- Add build dependency on libalternatives
- Run spec-cleaner</changelog>
</package>
<package pkgid="19f3854e3b4587747f59db7fd194a55fab2f0f92bda3cafeb8913849ac8c95bcf8e030b8d7d6007ac1964d59d56a8764f5e9d660862af7b7469b675d6737fc18" name="libeconf-debugsource" arch="aarch64">
  <version epoch="0" ver="0.7.2" rel="slfo.1.1_1.3"/>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
  <changelog author="nico.krapp@suse.com" date="1698321600">- Update to version 0.5.2:
  * Add python bindings (#188)
  * docu version 0.5.2
  * Fix test (#185)
  * Plug memory leak (#186)</changelog>
  <changelog author="schubi@suse.com" date="1699012800">- Update to version 0.5.3:
  * Added bindings for python3 and C#</changelog>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
</package>
<package pkgid="2edfc4fe3688b0fd49de7f819c43a9bfef21df9fd855d5ad4e35ab82444533b59cffcad33a056dcd682539c3e29450b4e340d81b5fad57e4d3454c9e705fe511" name="libeconf0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.7.2" rel="slfo.1.1_1.3"/>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
  <changelog author="nico.krapp@suse.com" date="1698321600">- Update to version 0.5.2:
  * Add python bindings (#188)
  * docu version 0.5.2
  * Fix test (#185)
  * Plug memory leak (#186)</changelog>
  <changelog author="schubi@suse.com" date="1699012800">- Update to version 0.5.3:
  * Added bindings for python3 and C#</changelog>
  <changelog author="schubi@suse.com" date="1699444800">- Update to version 0.6.0:
  * Supporting Linux Userspace API (UAPI) Group
    chapter "Configuration Files Specification".
    See: https://uapi-group.org/specifications/specs/
    configuration_files_specification/</changelog>
  <changelog author="schubi@suse.com" date="1705924800">- Update to version 0.6.1:
  * reading lines which have a length greater than BUFSIZE (#195)
  * Improved data quote check in read_file (#193)</changelog>
  <changelog author="schubi@suse.com" date="1709726400">- Update to version 0.6.2:
  * version 0.6.2
  * Fix static analyzer detected issues (#196)</changelog>
  <changelog author="schubi@suse.com" date="1712923200">- Update to version 0.6.3:
  * Fix build with musl libc on ppc64le (#198)
  * Creating static library with new package libeconf-devel-static.
    This is needed for building package util-linux and btrfsprogs.</changelog>
  <changelog author="schubi@suse.com" date="1717502400">- Update to version 0.7.0:
  * Defining manual parsing directories (#209)
  * parsing config files in python style
  * econf_readConfig: set usr_subdir to empty string if it is NULL
  * Fix static analyzer detected issues (#202)
  * comment string can be in the parsed value which is defined with quotes (#207)
  * tst-comments2: comment sign in quoted string (#205)
  * Setting options via new econf_newKeyFile_with_options. (#206)</changelog>
  <changelog author="schubi@suse.com" date="1718020800">- Update to version 0.7.1:
  * Improved error handling while parsing values with the wrong format.
  Added new return value ECONF_VALUE_CONVERSION_ERROR.
  * Setting parsing options via econf_file struct.
  see econf_newKeyFile_with_options. These options will be used by
  econf_readConfig and econf_readConfigWithCallback.
  Following options are supported:
  JOIN_SAME_ENTRIES  (default 0)
    Parsed entries with the same name will not be replaces but
    will be joined to one entry.
  PYTHON_STYLE  (default 0)
    E.G. Identations will be handled like multiline entries.
  PARSING_DIRS (default /usr/etc/:/run:/etc)
    List of directories from which the configuration files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g.: "PARSING_DIRS=/usr/etc/:/run:/etc"
  CONFIG_DIRS (default &lt;empty&gt;)
    List of directory structures (with order) which describes the directories
    in which the files have to be parsed.
    The list is a string, divides by ":". The last entry has the highest
    priority. E.g. with the given list: "CONFIG_DIRS=.conf.d:.d" files in
    following directories will be parsed:
    "&lt;default_dirs&gt;/&lt;config_name&gt;.conf.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;config_name&gt;/"
  * CAUTION: From now on every econf_file element MUST be intialized if
    econf_readConfig and econf_readConfigWithCallback is used.
  Either with NULL or:
  econf_file *key_file = NULL;
  if (error = econf_newKeyFile_with_options(&amp;key_file, "PYTHON_STYLE=1"))
  {
    fprintf (stderr, "ERROR: couldn't create new key file: %s\n",
    econf_errString(error));
    return 1;
  }
  error = econf_readConfig (&amp;key_file,
    "foo",
    "/usr/lib",
    "example",
    "conf",
    "=", "#");</changelog>
  <changelog author="schubi@suse.com" date="1718366400">- Update to version 0.7.2:
  * Do not check errno while float conversion. This is a false
    alarm for S390 and PPC (#210)</changelog>
</package>
<package pkgid="1016d55b813589ca14f209a31a79219576422dba79d008747b31ee381e9867bd086a5ceef3c9884ec6e1f05f9495eac8a978596d2887004ad819711f13b34323" name="libedit-debugsource" arch="aarch64">
  <version epoch="0" ver="20210910.3.1" rel="slfo.1.1_1.3"/>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]
- Move development docu into -devel subpackage</changelog>
  <changelog author="dmueller@suse.com" date="1522238400">- move Changelog back to runtime package as it might not
  be only developer documentation</changelog>
  <changelog author="mpluskal@suse.com" date="1532347200">- Update to version 20180525-3.1:
  * Sync with upstream sources
- Drop no longer needed patches:
  * libedit-20100424-3.0-ncurses.patch
  * libedit-ocloexec.patch
  * libedit-visibility.patch
- Trim unused dependencies
- Drop %check section (there are no tests available)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1533556800">- Bump version tag.
- Make sure all manpages are prefixed with "el_" to avoid file
  conflicts with readline-doc:
  * Add libedit-20180525-manpage-conflicts.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Remove redundant --with-pic (only for static libs).
- Fix RPM groups.</changelog>
  <changelog author="idonmez@suse.com" date="1556625600">- Update to version 20190324-3.1:
  * Sync with upstream sources</changelog>
  <changelog author="fstrba@suse.com" date="1594641600">- Regenerate the build system before the build in order to avoid
  errors due to automake version mismatch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594900800">- autoreconf already runs libtoolize no need to run twice</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 20210910:
  * all: sync with upstream source
  * see http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libedit
- drop libedit-20180525-manpage-conflicts.patch (upstream)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1680696000">- libedit-hidden-symbols.patch: hide strlcpy and strlcat
  symbols
  * Both now part of POSIX, will appear in libc shortly.
  * Function names starting with ‘str’, ‘mem’, or ‘wcs’ followed
    by a lowercase letter are reserved.</changelog>
</package>
<package pkgid="5c63f56cc6ed81f0b2e9e3a6772b538d031fec1ef35ab89db8bb072e8b5c9da780f55776197de7751519ccc8e532ef55ed46e4899df01a95e64713f61dd09ceb" name="libedit0-debuginfo" arch="aarch64">
  <version epoch="0" ver="20210910.3.1" rel="slfo.1.1_1.3"/>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]
- Move development docu into -devel subpackage</changelog>
  <changelog author="dmueller@suse.com" date="1522238400">- move Changelog back to runtime package as it might not
  be only developer documentation</changelog>
  <changelog author="mpluskal@suse.com" date="1532347200">- Update to version 20180525-3.1:
  * Sync with upstream sources
- Drop no longer needed patches:
  * libedit-20100424-3.0-ncurses.patch
  * libedit-ocloexec.patch
  * libedit-visibility.patch
- Trim unused dependencies
- Drop %check section (there are no tests available)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1533556800">- Bump version tag.
- Make sure all manpages are prefixed with "el_" to avoid file
  conflicts with readline-doc:
  * Add libedit-20180525-manpage-conflicts.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Remove redundant --with-pic (only for static libs).
- Fix RPM groups.</changelog>
  <changelog author="idonmez@suse.com" date="1556625600">- Update to version 20190324-3.1:
  * Sync with upstream sources</changelog>
  <changelog author="fstrba@suse.com" date="1594641600">- Regenerate the build system before the build in order to avoid
  errors due to automake version mismatch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594900800">- autoreconf already runs libtoolize no need to run twice</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 20210910:
  * all: sync with upstream source
  * see http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libedit
- drop libedit-20180525-manpage-conflicts.patch (upstream)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1680696000">- libedit-hidden-symbols.patch: hide strlcpy and strlcat
  symbols
  * Both now part of POSIX, will appear in libc shortly.
  * Function names starting with ‘str’, ‘mem’, or ‘wcs’ followed
    by a lowercase letter are reserved.</changelog>
</package>
<package pkgid="f48dceded555a3b33809e206e3b0818bf7f928bbc77f3eefca35c60406184683d4d943ac1a41bdcdfa6f1b988af7bc7ec50a4b6c9349baa9db60633285bc2cf8" name="libefa1-debuginfo" arch="aarch64">
  <version epoch="0" ver="49.1" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
</package>
<package pkgid="1ad3e7ea08a99b6451775c6ad45e18a98f34b8afbc731ae289f28af3e4913effc94a4ab3089298446a5f3ddeac142158e6b5a7f047a2c5c9ee4ce61b61f7a1c3" name="libefivar1-debuginfo" arch="aarch64">
  <version epoch="0" ver="38" rel="slfo.1.1_1.2"/>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="glin@suse.com" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="glin@suse.com" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="mliska@suse.cz" date="1597406400">- Do not partition LTO as we may reach new GAS error:
  Error: invalid attempt to declare external version
  name as default in symbol `efi_set_variable@@LIBEFIVAR_0.24'</changelog>
  <changelog author="glin@suse.com" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault in non-EFI systems (bsc#1175989)</changelog>
  <changelog author="glin@suse.com" date="1623844800">- Add efivar-bsc1187386-fix-emmc-parsing.patch to fix the eMMC
  sysfs parsing (bsc#1187386)
- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
  <changelog author="glin@suse.com" date="1660132800">- Add efivar-bsc1202209-fix-glibc-2.36-build.patch to fix the build
  error against glibc 2.36 (bsc#1202209)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1671624000">- Update spec file to current standards</changelog>
  <changelog author="glin@suse.com" date="1676030400">- Update to 38
  + Rework some makefile bits to make overriding some options
    simpler
  + Handle /sys/devices/virtual/{nvme-fabrics,nvme-subsystem}
    devices
  + guids.S: Include &lt;cet.h&gt; when CET is enabled
  + Fix /sys/block sysfs parsing for eMMC-s
  + Properly check mmap return error
  + Fix s{yt,ty}le typo in efi_get_variable(3)
  + Handle NULL set_variable()
  + Fix parsing for nvme-subsystem devices
  + Attempt to fix the identified thread safety bugs
  + Make thread-test depend on libefivar.so
  + Upstream a local patch from rawhide
  + Fix conversion from UTF8 to UCS2
  + efivar: make docs match current code for 'efivar -A'
  + Add code of conduct
  + Misc minor fixes
  + Add efi_time_t declarations and helper functions
  + More misc fixes
  + Coverity fixes 20211208
  + Fix linux virtual root device parsing
  + efivar.spec.in: fix license to be valid SPDX
  + Add efisecdb tooling
  + Fix linker string comparison for dash
- Add efivar-bsc1206388-revamp-efi_well_known-variable-handling.patch
  to remove the ld script hack for efi_well_known_* variables
  that caused build failure with LTO (bsc#1206388)
- Add mandoc to BuildRequires to build efisecdb man page
- Add efivar-adjust-dependency.patch to avoid 'make install' from
  building the binaries again
- Add efivar-filter-gcc-march.patch to drop '-march=native' from
  HOST_CPPFLAGS for ppc64le and riscv64 due to the absence of the
  gcc parameter
- Refresh libefiboot-export-disk_get_partition_info.patch
  + Cast (uint8_t *) signature to (partition_signature_t *)
  + Update src/libefiboot.map.in
- Remove upstreamed patches
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
  + efivar-bsc1127544-fix-ucs2len.patch
  + efivar-bsc1175989-handle-NULL-set-variable.patch
  + efivar-bsc1181967-fix-nvme-parsing.patch
  + efivar-bsc1187386-fix-emmc-parsing.patch
  + efivar-fix-efidp_ipv4_addr-fields-assignment.patch
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch</changelog>
</package>
<package pkgid="67966aef6cb086bc9a9915e22531ad76009569eda24c6bc5ad8a1389e64c0bc4a208f14a586606771e06c7c25cca4ad0aa3d922b7965eb14520675d1381b7ef4" name="libelf1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.189" rel="slfo.1.1_1.5"/>
  <changelog author="mliska@suse.cz" date="1650974400">- Update to version 0.187:
  * debuginfod: Support -C option for connection thread pooling.
  * debuginfod-client: Negative cache file are now zero sized instead of
    no-permission files.
  * addr2line: The -A, --absolute option, which shows file names including
    the full compilation directory is now the default.  To get the
    old behavior use the new option --relative.
  * readelf, elflint: Recognize FDO Packaging Metadata ELF notes
  * libdw, debuginfo-client: Load libcurl lazily only when files need to
    be fetched remotely. libcurl is now never
    loaded when DEBUGINFOD_URLS is unset. And when
    DEBUGINFOD_URLS is set, libcurl is only loaded
    when the debuginfod_begin function is called.</changelog>
  <changelog author="mliska@suse.cz" date="1665748800">- Add RISC-V specific patches:
  * 0001-libelf-Sync-elf.h-from-glibc.patch
  * 0002-backends-Handle-new-RISC-V-specific-definitions.patch
  * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch
  * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch
  * 0005-backends-Add-RISC-V-object-attribute-printing.patch</changelog>
  <changelog author="mliska@suse.cz" date="1667822400">- Update to version 0.188:
  * readelf: Add -D, --use-dynamic option.
  * debuginfod-client: Add $DEBUGINFOD_HEADERS_FILE setting to supply
    outgoing debuginfod_find_section.
  * debuginfod: Add --disable-source-scan option.
  * libdwfl: Add new function dwfl_get_debuginfod_client.
    Add new function dwfl_frame_reg.
    Add new function dwfl_report_offline_memory.
- Remove upstreamed patches:
  * 0001-libelf-Sync-elf.h-from-glibc.patch
  * 0002-backends-Handle-new-RISC-V-specific-definitions.patch
  * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch
  * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch
  * PR29474-debuginfod.patch
  * config-Move-the-2-dev-null-inside-the-sh-c-quotes-fo.patch
  * support-nullglob-in-profile.-.in-files.patch</changelog>
  <changelog author="dmueller@suse.com" date="1667995200">- align patches section
- remove date/time handling weirdness, elfutils does no longer
  use __DATE__ or __TIME__ (as proven by the newly added -Werror=date-time)</changelog>
  <changelog author="mliska@suse.cz" date="1676376000">- Add support-DW_TAG_unspecified_type.patch that fixes PR30047.</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Fix build with libcurl version 7.88.0 for various deprecated
  constants. Add patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch</changelog>
  <changelog author="mliska@suse.cz" date="1677153600">- Disable a false-positive -Werror=use-after-free warning.</changelog>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="9e9cfe5430e75bb7d9d571f948b31ce7d053f8ba371a5e4153612d3e10dc9d8ac2b4ac37f844d28510f4a61cde63b66a11b8d62a861dc43f738fe9f9f79560bd" name="libepoxy-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.10" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.5.3:
  + Fix build with uClibc
  + Fix GLES3 symbol lookup
  + Fix conditional compilation
  + Require Meson 0.47
  + Fix Autotools build with EGL-X11 support
- Changes from version 1.5.2:
  + Fix the detection of the -z,relro linker flag
  + Query the EGL context version when bootstrapping on GLES
  + Avoid inadvertedly loading libraries when probing for them
  + Consistently use abort() instead of exit() for internal state
    checks
  + Fix a performance regression in the global function pointer
    trampolines introduced by using -Bsymbolic-functions
  + Improve performance when using GL function pointers like
    glAlphaFunc
- Changes from version 1.5.1:
  + Generalise checks for dlvsym
  + Add an option for disabling building the test suite
  + Typo fixes in the comments and documentation
  + Simplify the Meson configuration logic for EGL and GLX
  + Use assert when no context is found
  + Remove a test superceded by GLVND
  + Avoid Meson warnings when testing for linker arguments
- Pass tests=false to meson, ensure we do not build the test-suite.
- Drop la files removal, they are no longer built.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1555502400">- Remove pkgconfig dependecies for glesv1_cm and glesv2:
  Starting with mesa commit b01524fff05
  "meson: don't build libGLES*.so with GLVND" mesa stopped
  providing glesv1_cm.pc and glesv2.pc along. Let epoxy find the
  libraries directly instead.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578139200">- Update to version 1.5.4:
  + Don't build GLX tests if X11 support is disabled
  + Add unit tests for epoxy_gl_version()
  + Reduce the size of the binary by reusing static strings
  + Fix build on Solaris
  + Update the GL registries
- Only require python3-base package for building instead of
  full python3 package.
- Allow building with meson 0.46:
  Add Lower-the-minimum-required-version-of-Meson.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608638400">- Update to version 1.5.5:
  + Remove Python 2 support.
  + Remove Autotools support.
  + Use EGL_NO_X11 to disable X11 headers.
  + Use call convention for mock function.
  + Return correct version of GLSL on GLES2.
  + Rely on Meson's darwin_versions option.
- Drop Lower-the-minimum-required-version-of-Meson.patch: New
  minimum meson is 0.48.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621339200">- Update to version 1.5.7:
  * Remove type redefinition
- Includes changes from 1.5.6:
  * Fix issue loading OpenGL/GLX/EGL libraries
  * Expose dependency variables in pkg-config file
  * Close output objects when generating files</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1621598400">- Update to version 1.5.8:
  + Revert changes from PR #238 / #229
  + Fixes regressions: #240, #252, #253</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629028800">- Update to version 1.5.9:
  + Allow libopengl.so to be used when GLX_LIB is missing.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- needed for jira#SLE/SLE-19965, jira#SLE/SLE-19964, jira#SLE/SLE-18653</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 1.5.10:
  + Fix for building with MSVC on non-English locale.
  + Fix build on Android.
  + Add the right include paths for EGL and X11 headers.
- Upstream tarball url changed, probably by mistake, so leave old
  url in place, but disabled.</changelog>
  <changelog author="sndirsch@suse.com" date="1667822400">- needed by jira#PED-1174 (Mesa needs sync with Xserver, which
  then needs updated libepoxy)</changelog>
</package>
<package pkgid="f8b7109cce4de3c2b32b5b57e3023015fee0199fe99d3cf6877d86c3fc72e1109be00b5b0be9a5f86a20cda822cf1b4e6e6207351f6c82bbd0f4cbc1a2d95a2f" name="libepoxy0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.10" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.5.3:
  + Fix build with uClibc
  + Fix GLES3 symbol lookup
  + Fix conditional compilation
  + Require Meson 0.47
  + Fix Autotools build with EGL-X11 support
- Changes from version 1.5.2:
  + Fix the detection of the -z,relro linker flag
  + Query the EGL context version when bootstrapping on GLES
  + Avoid inadvertedly loading libraries when probing for them
  + Consistently use abort() instead of exit() for internal state
    checks
  + Fix a performance regression in the global function pointer
    trampolines introduced by using -Bsymbolic-functions
  + Improve performance when using GL function pointers like
    glAlphaFunc
- Changes from version 1.5.1:
  + Generalise checks for dlvsym
  + Add an option for disabling building the test suite
  + Typo fixes in the comments and documentation
  + Simplify the Meson configuration logic for EGL and GLX
  + Use assert when no context is found
  + Remove a test superceded by GLVND
  + Avoid Meson warnings when testing for linker arguments
- Pass tests=false to meson, ensure we do not build the test-suite.
- Drop la files removal, they are no longer built.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1555502400">- Remove pkgconfig dependecies for glesv1_cm and glesv2:
  Starting with mesa commit b01524fff05
  "meson: don't build libGLES*.so with GLVND" mesa stopped
  providing glesv1_cm.pc and glesv2.pc along. Let epoxy find the
  libraries directly instead.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578139200">- Update to version 1.5.4:
  + Don't build GLX tests if X11 support is disabled
  + Add unit tests for epoxy_gl_version()
  + Reduce the size of the binary by reusing static strings
  + Fix build on Solaris
  + Update the GL registries
- Only require python3-base package for building instead of
  full python3 package.
- Allow building with meson 0.46:
  Add Lower-the-minimum-required-version-of-Meson.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608638400">- Update to version 1.5.5:
  + Remove Python 2 support.
  + Remove Autotools support.
  + Use EGL_NO_X11 to disable X11 headers.
  + Use call convention for mock function.
  + Return correct version of GLSL on GLES2.
  + Rely on Meson's darwin_versions option.
- Drop Lower-the-minimum-required-version-of-Meson.patch: New
  minimum meson is 0.48.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621339200">- Update to version 1.5.7:
  * Remove type redefinition
- Includes changes from 1.5.6:
  * Fix issue loading OpenGL/GLX/EGL libraries
  * Expose dependency variables in pkg-config file
  * Close output objects when generating files</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1621598400">- Update to version 1.5.8:
  + Revert changes from PR #238 / #229
  + Fixes regressions: #240, #252, #253</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629028800">- Update to version 1.5.9:
  + Allow libopengl.so to be used when GLX_LIB is missing.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- needed for jira#SLE/SLE-19965, jira#SLE/SLE-19964, jira#SLE/SLE-18653</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 1.5.10:
  + Fix for building with MSVC on non-English locale.
  + Fix build on Android.
  + Add the right include paths for EGL and X11 headers.
- Upstream tarball url changed, probably by mistake, so leave old
  url in place, but disabled.</changelog>
  <changelog author="sndirsch@suse.com" date="1667822400">- needed by jira#PED-1174 (Mesa needs sync with Xserver, which
  then needs updated libepoxy)</changelog>
</package>
<package pkgid="83eb9a4c7ba3b7651981308f7ae9aa306a4585c1429b3019d9abecb6c5ed31c512dd01fcf9adcae51f178f618dbf66142c11b0f8e50e89ff8c22ac22a8f0ac23" name="libevent-2_1-7-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.12" rel="slfo.1.1_2.3"/>
  <changelog author="mrostecki@suse.com" date="1531224000">- Make use of %license macro</changelog>
  <changelog author="ddiss@suse.com" date="1558958400">- Update to 2.1.10 stable
  * evdns: add DNS_OPTION_NAMESERVERS_NO_DEFAULT /
    EVDNS_BASE_NAMESERVERS_NO_DEFAULT
  * Add support for EV_TIMEOUT to event_base_active_by_fd
  * kqueue: Avoid undefined behaviour.
  * Prevent integer overflow in kq_build_changes_list.
  * evdns: fix lock/unlock mismatch in evdns_close_server_port()
  * Protect min_heap_push_ against integer overflow.
  * le-proxy: initiate use of the Winsock DLL
  * Fix leaks in error path of the bufferevent_init_common_()
  * buffer: make evbuffer_prepend() of zero-length array no-op
  * Don't loose top error in SSL
  * Remove needless check for arc4_seeded_ok
  * Cleanup __func__ detection
  * Add convenience macros for user-triggered events
  * Notify event base if there are no more events, so it can exit without
    delay
  * Fix base unlocking in event_del() if event_base_set() runned in another
    thread
  * If precise_time is false, we should not set EVENT_BASE_FLAG_PRECISE_TIMER
  * Fix race in access to ev_res from event loop with event_active()
  * Return from event_del() after the last event callback termination
  * Preserve socket error from listen across closesocket cleanup
  * fix connection retries when there more then one request for connection
  * improve error path for bufferevent_{setfd,enable,disable}()
  * Fix conceivable UAF of the bufferevent in evhttp_connection_free()
  * Fix evhttp_connection_get_addr() fox incomming http connections
  * fix leaks in evhttp_uriencode()
  * CONNECT method only takes an authority
  * Allow bodies for GET/DELETE/OPTIONS/CONNECT
  * Do not crash when evhttp_send_reply_start() is called after a timeout.
  * Fix crashing http server when callback do not reply in place
  * fix handling of close_notify (ssl) in http with openssl bufferevents
  * use *_new_with_arg() to match function prototype
  * avoid NULL dereference on request is not EVHTTP_REQ_POST
  * bufferevent_socket_connect{,_hostname}() missing event callback and use
    ret code
  * don't fail be_null_filter if bytes are copied
  * Call underlying bev ctrl GET_FD on filtered bufferevents
  * be_openssl: avoid leaking of SSL structure
  * Add missing includes into openssl-compat.h
  * Explicitly call SSL_clear when reseting the fd.
  * sample/https-client: use host SSL certificate store by default
  * ipv6only socket bind support
  * evdns: handle NULL filename explicitly
  * Fix assert() condition in evbuffer_drain() for IOCP
  * fix incorrect unlock of the buffer mutex (for deferred callbacks)
  * Fix wrong assert in evbuffer_drain()
  * Port `event_rpcgen.py` and `test/check-dumpevents.py` to Python 3.
- rename python2-shebang.patch -&gt; python3-shebang.patch following port</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Fix name of library package (bsc#1138369)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="ddiss@suse.com" date="1566302400">- Update to 2.1.11 stable
  * Fix ABI breakage that had been introduced in 2.1.10. Strictly speaking
    this release breaks ABI again to make it compatible with &lt;= 2.1.9.
    + See git commit 18104973 for more details
  * evdns: add new options -- so-rcvbuf/so-sndbuf
  * various autotools and cmake build changes
  * buffer: fix possible NULL dereference in evbuffer_setcb() on ENOMEM
  * Warn if forked from the event loop during event_reinit()
  * evutil: set the have_checked_interfaces in evutil_check_interfaces()
  * https-client: correction error checking</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569326400">- Add upstream patches with the feature of "prepare" and "check"
  watchers. That feature is needed by envoy-proxy:
  * 0001-evwatch-Add-prepare-and-check-watchers.patch
  * 0002-evwatch-fix-race-condition.patch</changelog>
  <changelog author="ddiss@suse.com" date="1595937600">- Update to 2.1.12 stable
  * buffer: do not pass NULL to memcpy() from evbuffer_pullup()
  * http: fix undefined-shift in EVUTIL_IS*_ helpers
  * Check error code of evhttp_add_header_internal() in
    evhttp_parse_query_impl()
  * http: fix EVHTTP_CON_AUTOFREE in case of timeout
  * evdns: Add additional validation for values of dns options
  * Fix memory corruption in EV_CLOSURE_EVENT_FINALIZE with debug enabled
  * increase segment refcnt only if evbuffer_add_file_segment() succeeds
  * evdns: fix a crash when evdns_base with waiting requests is freed
  * event_base_once: fix potential null pointer threat
  * http: do not assume body for CONNECT
  * evbuffer_add_file: fix freeing of segment in the error path
  * Fix checking return value of the evdns_base_resolv_conf_parse()
  * Support EV_CLOSED on linux for poll(2)
  * Parse IPv6 scope IDs.
  * evutil_time: detect and use _gmtime64_s()/_gmtime64()
  * bufferevent: allow setting priority on socket and openssl type
  * Fix EV_CLOSED detection/reporting
  * Revert "Warn if forked from the event loop during event_reinit()"</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Drop insserv_prereq and fillup_prereq macros: there are no
  pre-scripts that would justify these dependencies.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1673784000">- Disable the select backend, this can be easily done by lying
  to configure. This is done due to:
  * using fd number &gt; 1024 on an fd_set results in a runtime
    fortify source assertion, preventing further doom.
  * select will not be changed to handle fd &gt; 1024.
  * this limit is unreasonable low for this century.</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="d2ab5a3291cdc1c49d07171c538f6ebac540baf4497ff7f57ad336ba04ba47388e65c4edd3792fdb66d55e59a0f61d933d1f947ad8ddc76b5463ec74461518b6" name="libevent-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1.12" rel="slfo.1.1_2.3"/>
  <changelog author="mrostecki@suse.com" date="1531224000">- Make use of %license macro</changelog>
  <changelog author="ddiss@suse.com" date="1558958400">- Update to 2.1.10 stable
  * evdns: add DNS_OPTION_NAMESERVERS_NO_DEFAULT /
    EVDNS_BASE_NAMESERVERS_NO_DEFAULT
  * Add support for EV_TIMEOUT to event_base_active_by_fd
  * kqueue: Avoid undefined behaviour.
  * Prevent integer overflow in kq_build_changes_list.
  * evdns: fix lock/unlock mismatch in evdns_close_server_port()
  * Protect min_heap_push_ against integer overflow.
  * le-proxy: initiate use of the Winsock DLL
  * Fix leaks in error path of the bufferevent_init_common_()
  * buffer: make evbuffer_prepend() of zero-length array no-op
  * Don't loose top error in SSL
  * Remove needless check for arc4_seeded_ok
  * Cleanup __func__ detection
  * Add convenience macros for user-triggered events
  * Notify event base if there are no more events, so it can exit without
    delay
  * Fix base unlocking in event_del() if event_base_set() runned in another
    thread
  * If precise_time is false, we should not set EVENT_BASE_FLAG_PRECISE_TIMER
  * Fix race in access to ev_res from event loop with event_active()
  * Return from event_del() after the last event callback termination
  * Preserve socket error from listen across closesocket cleanup
  * fix connection retries when there more then one request for connection
  * improve error path for bufferevent_{setfd,enable,disable}()
  * Fix conceivable UAF of the bufferevent in evhttp_connection_free()
  * Fix evhttp_connection_get_addr() fox incomming http connections
  * fix leaks in evhttp_uriencode()
  * CONNECT method only takes an authority
  * Allow bodies for GET/DELETE/OPTIONS/CONNECT
  * Do not crash when evhttp_send_reply_start() is called after a timeout.
  * Fix crashing http server when callback do not reply in place
  * fix handling of close_notify (ssl) in http with openssl bufferevents
  * use *_new_with_arg() to match function prototype
  * avoid NULL dereference on request is not EVHTTP_REQ_POST
  * bufferevent_socket_connect{,_hostname}() missing event callback and use
    ret code
  * don't fail be_null_filter if bytes are copied
  * Call underlying bev ctrl GET_FD on filtered bufferevents
  * be_openssl: avoid leaking of SSL structure
  * Add missing includes into openssl-compat.h
  * Explicitly call SSL_clear when reseting the fd.
  * sample/https-client: use host SSL certificate store by default
  * ipv6only socket bind support
  * evdns: handle NULL filename explicitly
  * Fix assert() condition in evbuffer_drain() for IOCP
  * fix incorrect unlock of the buffer mutex (for deferred callbacks)
  * Fix wrong assert in evbuffer_drain()
  * Port `event_rpcgen.py` and `test/check-dumpevents.py` to Python 3.
- rename python2-shebang.patch -&gt; python3-shebang.patch following port</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Fix name of library package (bsc#1138369)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="ddiss@suse.com" date="1566302400">- Update to 2.1.11 stable
  * Fix ABI breakage that had been introduced in 2.1.10. Strictly speaking
    this release breaks ABI again to make it compatible with &lt;= 2.1.9.
    + See git commit 18104973 for more details
  * evdns: add new options -- so-rcvbuf/so-sndbuf
  * various autotools and cmake build changes
  * buffer: fix possible NULL dereference in evbuffer_setcb() on ENOMEM
  * Warn if forked from the event loop during event_reinit()
  * evutil: set the have_checked_interfaces in evutil_check_interfaces()
  * https-client: correction error checking</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569326400">- Add upstream patches with the feature of "prepare" and "check"
  watchers. That feature is needed by envoy-proxy:
  * 0001-evwatch-Add-prepare-and-check-watchers.patch
  * 0002-evwatch-fix-race-condition.patch</changelog>
  <changelog author="ddiss@suse.com" date="1595937600">- Update to 2.1.12 stable
  * buffer: do not pass NULL to memcpy() from evbuffer_pullup()
  * http: fix undefined-shift in EVUTIL_IS*_ helpers
  * Check error code of evhttp_add_header_internal() in
    evhttp_parse_query_impl()
  * http: fix EVHTTP_CON_AUTOFREE in case of timeout
  * evdns: Add additional validation for values of dns options
  * Fix memory corruption in EV_CLOSURE_EVENT_FINALIZE with debug enabled
  * increase segment refcnt only if evbuffer_add_file_segment() succeeds
  * evdns: fix a crash when evdns_base with waiting requests is freed
  * event_base_once: fix potential null pointer threat
  * http: do not assume body for CONNECT
  * evbuffer_add_file: fix freeing of segment in the error path
  * Fix checking return value of the evdns_base_resolv_conf_parse()
  * Support EV_CLOSED on linux for poll(2)
  * Parse IPv6 scope IDs.
  * evutil_time: detect and use _gmtime64_s()/_gmtime64()
  * bufferevent: allow setting priority on socket and openssl type
  * Fix EV_CLOSED detection/reporting
  * Revert "Warn if forked from the event loop during event_reinit()"</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Drop insserv_prereq and fillup_prereq macros: there are no
  pre-scripts that would justify these dependencies.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1673784000">- Disable the select backend, this can be easily done by lying
  to configure. This is done due to:
  * using fd number &gt; 1024 on an fd_set results in a runtime
    fortify source assertion, preventing further doom.
  * select will not be changed to handle fd &gt; 1024.
  * this limit is unreasonable low for this century.</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="1a2b5e6131a054631c77a333675e543dbdf4d02935fc67d29b2ca5e81f52d70ba51c397286ea3e5383706b5fa35fa9fcfba6ccc90da9c6e7c881f8d736ef3cfd" name="libexpat1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.7.1" rel="slfo.1.1_4.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLFO-1.1
- deleted patches
  - expat-CVE-2024-45490.patch (upstreamed)
  - expat-CVE-2024-45491.patch (upstreamed)
  - expat-CVE-2024-45492.patch (upstreamed)
  - expat-CVE-2024-28757.patch (upstreamed)
  - expat-CVE-2024-50602.patch (upstreamed)
  - expat-fix-minicheck.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
</package>
<package pkgid="c9d256690f95d64d926fc72a34e814d305be461f27ef7eb4fdc1fb64ae3724a59776e3436f6e8fefae81ffa6bccc9f5a55fb1b8197fe427a569c402a1c409acb" name="libexslt0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.38" rel="slfo.1.1_6.1"/>
  <changelog author="pmonreal@suse.com" date="1636545600">- Add missing library .so files [bsc#1191771]</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646827200">- Update to version 1.1.35:
  * Security fixes:
    + [CVE-2021-30560] Use-after-free in xsltApplyTemplates;
    + A couple of memory leak and a double-free fixes.
  * A couple of regression fixes.
  * Many bug fixes.
  * New xsltproc --huge option, provided by libxml XML_PARSE_HUGE.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxslt 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.35.\
  news
- Switch libxml2-devel package with its pkgconfig module
  counterpart (libxml-2.0) to align with CONFIGURE script's checks.
- Add fdupes build requirement/macro to hard-link duplicate files
  in the DATADIR inside the buildroot.
- Add explicit 'gcc' build requirement to align with CONFIGURE
  checks.
- Update http://xmlsoft.org URL tag to Libxslt's new web home:
  https://gitlab.gnome.org/GNOME/libxslt.
- Update ftp://xmlsoft.org Source tag to Libxslt's new download
  host: https://download.gnome.org.
- Drop no longer needed/used libgpg-error-devel. Note that despite
  'lgpg-error' being linked against some libraries, there's no
  automatic generation of run-time requirements on libgpg-error*
  symbols our build system. And there's no mention of gpg-error in
  the whole source tarball at all.
- Drop no longer needed explicit libtool build requirement and
  `autoreconf` call in build section since we don't touch the build
  system scripts nor use checked out git trees anymore.
- Drop libxslt.keyring source file as the new download host doesn't
  offer GPG signatures.
- Drop fixed upstream patches:
  libxslt-config-fixes.patch (glgo#GNOME/libxslt!3);
  libxslt-Stop-using-maxParserDepth-XPath-limit.patch;
  libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch; and
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch.
- Use ldconfig_scriptlets macro for post(un) handling of ldconfig
  calls.</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 1.1.36:
  * Removals and deprecations
    + Remove SVN keyword anchors
    + Remove CVS and SVN-related code
    + Remove README.cvs-commits
    + Remove ChangeLog
    + Remove xsltwin32config.h
  * Improvements
    + Simplify xsltexports.h and exsltexports.h
    + Don't overlink executables with gcrypt
    + Fix quadratic behavior with variables and parameters
    + Remove case labels with XPointer location types
    + Add configure~ to .gitignore
    + Stop calling deprecated libxml2 functions
  * Portability
    + Use portable python shebangs (David Seifert)
    + Remove useless __CYGWIN__ checks
    + Remove cruft from win32config.h
    + crypto.c: Silence a compiler warning on Windows (Chun-wei Fan)
  * Build system
    + Add missing compile definition for static builds to CMake
    + Avoid obsolescent `test -a` constructs (David Seifert)
    + Only link libxml2 statically in purely static build
    + Set AC_CONFIG_MACRO_DIR
    + Allow AM_MAINTAINER_MODE to be disabled
    + Streamline and fix documentation installation
    + Don't try to recreate COPYING symlink
    + Remove special configuration for certain maintainers
    + configure.ac: produce tar.xz only (GNOME policy) (David Seifert)
    + Detect libm using libtool's macros (David Seifert)
    + configure.ac: disable static libraries by default (David Seifert)
    + python/Makefile.am: nest python docs in $(docdir) (David Seifert)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE (David Seifert)
    + configure.ac: remove useless AC_SUBST (David Seifert)
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings (David Seifert)
    + Change libxml2 Python config
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove --with-html-dir option
    + Also check for glibtoolize in autogen.sh
    + Rework documentation build system
    + Remove old website
    + CMake: Relax check for enabling crypto support on Windows (Chun-wei Fan)
    + Remove obsolete AC_HEADER_STDC autoconf macro (Vadim Zeitlin)
    + Remove special configuration for old maintainers
  * Test suite, CI
    + Remove test involving XPointer range-to function
    + Test recursion in EXSLT dynamic functions
    + Add CI job for static build
  * Documentation
    + Move tutorial images</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 1.1.37:
  * Improvements:
    + Don't use deprecated libxml2 macros
    + Don't mess with xmlDefaultSAXHandler
  * Build system:
    + Require automake-1.16.3 or later
    + Remove generated files from distribution
    + Add missing compile definition for static builds to Autotools</changelog>
  <changelog author="david.anes@suse.com" date="1683633600">- Removed patch 0009-Make-generate-id-deterministic.patch as it's
  already fixed upstream.
- Update to version 1.1.38:
  * Major changes:
  - About 40 memory errors in code paths handling malloc failures
    have been fixed.
  - While these issues shouldn't impact security, this improves
    robustness under memory pressure.
  - The result of generate-id() is now deterministic across
    multiple transformations fixing many issues with reproducible
    builds.
  - Most of the test suite has been ported to C.
  * Bug fixes:
  - Fix memory errors in code handling malloc failures
  - imports: Fix import/include cycle check
  - xsltlocale: Fix xsltNewLocale on macOS
  - Make xsl:sort thread-safe
  - Make generate-id() deterministic
  * Improvements
  - Stop using xmlStringCurrentChar
  - attributes.h needs to include xsltInternals.h (David Kilzer)
  - transform: Avoid null deref on documents without root node
  - numbers: Fix floating point overflows
  - date: Fix integer overflow in exsltDateFormatDuration
  - numbers: Fix harmless integer sign change
  - date: Add more overflow checks to formatting code (David Kilzer)
  - date: Fix rounding to make Windows tests pass
  - date: Rewrite duration and seconds formatting
  - xsltlocale: Make API platform-independent
  - Also accept application/xslt+xml media type in stylesheet PIs
  - warnings: Fix strict prototypes warning
  - xsltEvalUserParams() and xsltQuoteUserParams() are susceptible to integer
    overflow when iterating through const char** array (David Kilzer)
  - xslt: Return NULL stylesheet on attribute set errors
  - xsltproc: Fix unused variable warning
  - xslt: Remove declaration for old libxml2
  - Fix various compiler warnings
  - Fix compiler warnings in xsltGenerateIdFunction
  - Disable Python bindings for debugger
  - Don't declare disabled functions
  - Migrate from PyEval_ to PyObject_</changelog>
  <changelog author="pmonreal@suse.com" date="1742385600">- Security fixes:
  * Fix use-after-free of XPath context node [bsc#1239625, CVE-2025-24855]
  * Fix UAF related to excluded namespaces [bsc#1239637, CVE-2024-55549]
  * Make generate-id() deterministic [bsc#1238591, CVE-2023-40403]
    Just adding the reference here as this CVE was already fixed
    in 0009-Make-generate-id-deterministic.patch
  * Add patches:
  - libxslt-CVE-2024-55549.patch
  - libxslt-CVE-2025-24855.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752753600">- security update
- added patches
  CVE-2025-7424 [bsc#1246360], Type confusion in xmlNode.psvi between stylesheet and source nodes
  + libxslt-CVE-2025-7424.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]
- deleted patches
  * libxslt-CVE-2025-10911.patch</changelog>
</package>
<package pkgid="dcee7a656102330d59ab59eb94377d2ccccbd5b09bd6fce2edc1f0af2134eddaab6177dce178b4e3f46a1d7fb73411222db8d7f4404bee31348acdca73b61362" name="libext2fs2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.47.0" rel="slfo.1.1_1.2"/>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
</package>
<package pkgid="08ee94aaf3c25bd56741a28ca0e4c526bb3c989b6222dd556853da8a95c13bbfeabadde7108ac2ce33747976639fa126f1b077b97b0327e8b20ebc8523042295" name="libfa1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="f9c40777c9f2f67170269a9fac985e40774e6ac1eea47a1613197abe9e0bcd91dd46de823371db46f5c3f13e07f67ed7f6c237c182858a02db23f309a4e3b346" name="libfdisk1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.40.4" rel="slfo.1.1_4.1"/>
  <changelog author="jslaby@suse.cz" date="1715860800">- add support for pidfs in kernel 6.9 (bsc#1224285)
  * 0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch
  * 0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch
  * 0003-lsfd-Support-pidfs.patch
  * 0004-lsfd-test-Adapt-test-cases-for-pidfs.patch</changelog>
  <changelog author="dmueller@suse.com" date="1718020800">- disable libmagic in more(1) for binary detection (bsc#1225197)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1721131200">- uncomment "autoreconf --install" to use the new version of automake</changelog>
  <changelog author="sbrabec@suse.com" date="1722859200">- Update to version 2.40.2:
  * cfdisk: fix possible integer overflow
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
    (obsoletes
    0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch,
    0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch,
    0003-lsfd-Support-pidfs.patch,
    0004-lsfd-test-Adapt-test-cases-for-pidfs.patch)
  * mkswap.8.adoc: update note regarding swapfile creation
  * setpgid: make -f work
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Enable kernel mountfd API, as it should be already stable
  (PED-9752).
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.</changelog>
  <changelog author="sbrabec@suse.com" date="1729512000">- Disable mountfd API again.
  (https://github.com/util-linux/util-linux/issues/3158)</changelog>
  <changelog author="sbrabec@suse.com" date="1731844800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).
- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
</package>
<package pkgid="a4ef9053445ce4d5023ba44ccb258f4f1cc3684797b96d22f41a88ba67c20eeeec1ccc741d44e79a5541d434cabf78dfe35ceb36e9726f9b65eb59580b777edc" name="libfdt1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="slfo.1.1_1.2"/>
  <changelog author="dmueller@suse.com" date="1572436800">- update to 1.5.1:
  * Numerous assorted bugfixes
  * Add a new fdt_create_with_flags() function, and a
    FDT_CREATE_FLAG_NO_NAME_DEDUP flag which improves speed at the
    cost of tree size by not deduplicating property names in the
    strings section
  * Run tests against shared library, so it will catch the common
    mistake of not adding new symbols to the versioning script
  * Add a number of missing symbols to versioning script
  * Use Python3 by default for pylibfdt
  * New fdt_append_addrrange() function in libfdt
- remove dtc-license.patch (upstream)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1572436801">- Enable python3 binding in python3-libfdt</changelog>
  <changelog author="dmueller@suse.com" date="1572436802">- switch to building python3 bindings using setuptools to avoid
  patching</changelog>
  <changelog author="mliska@suse.cz" date="1575806400">- Use %make_build and recpect %optflags.</changelog>
  <changelog author="dmueller@suse.com" date="1579003200">- add dtc-no-common-conflict.patch (bsc#1160388)</changelog>
  <changelog author="info@paolostivanin.com" date="1583841600">- Update to 1.6.0 (no changelog)
- Removed dtc-no-common-conflict.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- explicitly pass -pie in CFLAGS, since the build system explicitly passes
  - fPIC, which breaks our gcc-PIE profile. This makes all packaged binaries
  PIE-executables (bsc#1184122).</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 1.6.1:
  * A number of bugfixes
  * Fix many warnings with -Wsign-compare
  * Add compilation with meson (not used by default so far)
  * Yet another revamp of how we handle unaligned accesses
  * Added a number of extra checks for common tree errors
  * Checks for interrupt providers
  * i2c reg properties
  * Tighten checking of gpio properties
  * Reduce dependencies when building libfdt only
  * Allow libfdt.h header to be used from C++ more easily
  * Accept .dtbo extension for overlays
  * Update valid node and property characters to match current devicetree spec
  * Add several checks for root node sanity in fdt_check_full()
  * Somewhat more robust type labelling for the benefit of yaml output</changelog>
  <changelog author="schwab@suse.de" date="1664193600">- makefile-bison-rule.patch: Makefile: fix infinite recursion by dropping
  non-existent `%.output`</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682424000">- update to 1.7.0:
  * dtc
  * Fix -Oasm output on PA-RISC by avoiding ';' separators
  * Put symbolic label references in -Odts output when possible
  * Add label relative path references
  * Don't incorrectly attempt to create fixups for reference to path
    in overlays
  * Warning rather than hard error if integer expression results are
    truncated due to cell size
  * libfdt
  * Add fdt_get_property_by_offset_w() function
  * pylibfdt
  * Fixed to work with Python 3.10
  * A number of extra methods
  * Fix out of tree build
  * fdtget
  * Add raw bytes output mode
  * General
  * Fixes for mixed-signedness comparison warnings
  * Assorted other warning fixes
  * Assorted updates to checks
  * Assorted bugfixes
  * Fix scripts to work with dash as well as bash
  * Allow static builds
  * Formalize Signed-off-by usage
- Update dtc.keyring
- Drop upstream patch:
  * makefile-bison-rule.patch</changelog>
</package>
<package pkgid="9a0f5081e5967f43f7e71d06c6a06456c3e724f0c5e0de88d59ff715d1159adde4f7fd43a750654aa767bf9412ab1890803aef7e5e8cdb5f3cd0183b93866752" name="libffi-debugsource" arch="aarch64">
  <version epoch="0" ver="3.4.6" rel="slfo.1.1_1.4"/>
  <changelog author="schwab@suse.de" date="1568808000">- Update to commit c2a6859
- gccbug.patch: Update check for gccbug target flag
- stdcall.patch: Fix FFI_STDCALL ABI
- libffi-riscv.patch: Removed
- libffi-include-location.patch: Removed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1570795200">- Workaround aarch64 bug (boo#1153573) with upstream patch
  https://github.com/libffi/libffi/pull/499 updated to apply
  on current sources (upstream will probably rework this patch
  so we need to monitor the issue for the proper fix):
  * aarch64.patch</changelog>
  <changelog author="rguenther@suse.com" date="1583841600">- Update to commit b844a9c7f1ca based on libffi 3.3 with the
  following changes:
    Add RISC-V support.
    New API in support of GO closures.
    Add IEEE754 binary128 long double support for 64-bit Power
    Default to Microsoft's 64 bit long double ABI with Visual C++.
    GNU compiler uses 80 bits (128 in memory) FFI_GNUW64 ABI.
    Add Windows on ARM64 (WOA) support.
    Add Windows 32-bit ARM support.
    Raw java (gcj) API deprecated.
    Add pre-built PDF documentation to source distribution.
    Many new test cases and bug fixes.
- SONAME change to libffi.so.8
- stdcall.patch is now upstream
- Adjust baselibs.conf for SONAME change
- Adjust aarch64.patch for upstream changes
- Drop gccbug.patch XFAILing testcases that now PASS with fixed
  GCC 9.3</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 3.4.2:
  * Add static trampoline support for Linux on x86_64 and ARM64.
  * Add support for Alibaba's CSKY architecture.
  * Add support for Kalray's KVX architecture.
  * Add support for Intel Control-flow Enforcement Technology (CET).
  * Add support for ARM Pointer Authentication (PA).
  * Fix 32-bit PPC regression.
  * Fix MIPS soft-float problem.
  * Enable tmpdir override with the $LIBFFI_TMPDIR environment variable.
  * Enable compatibility with MSVC runtime stack checking.
  * Reject float and small integer argument in ffi_prep_cif_var().
  * Callers must promote these types themselves.
- drop aarch64.patch: fixed upstream differently
- drop info dependency, uses file triggers now</changelog>
  <changelog author="dmueller@suse.com" date="1638360000">- disable static trampolines (bsc#1193272)</changelog>
  <changelog author="rguenther@suse.com" date="1663934400">- update to 3.4.3:
  * All struct args are passed by value, regardless of size, as per ABIs.
  * Enable static trampolines for Cygwin.
  * Add support for Loongson's LoongArch64 architecture.
  * Fix x32 static trampolines.
  * Fix 32-bit x86 stdcall stack corruption.
  * Fix ILP32 aarch64 support.
- includes fix for RISCV64
- disable LTO due to (ffi#733)</changelog>
  <changelog author="dmueller@suse.com" date="1665403200">- add riscv64-handle-big-structures.patch</changelog>
  <changelog author="schwab@suse.de" date="1666612800">- Update to libffi 3.4.4
  * Important aarch64 fixes, including support for linux builds
    with Link Time Optimization (-flto).
  * Fix x86 stdcall stack alignment.
  * Fix x86 Windows msvc assembler compatibility.
  * Fix moxie and or1k small structure args.
- drop riscv64-handle-big-structures.patch
- reenable LTO</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701864000">- Add upstream patches to fix BTI on aarch64:
  * 808.patch
  * 810.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1710849600">- Add patches to fix BTI on aarch64:
  * 830.patch
- Update to 3.4.6:
  * Fix long double regression on mips64 and alpha.
- Update to 3.4.5:
  * Add support for wasm32.
  * Add support for aarch64 branch target identification (bti).
  * Add support for ARCv3: ARC32 &amp; ARC64.
  * Add support for HPPA64, and many HPPA fixes.
  * Add support for Haikuos on PowerPC.
  * Fixes for AIX, loongson, MIPS, power, sparc64, and x86 Darwin.
- Drop upstreamed patches:
  * 808.patch
  * 810.patch</changelog>
</package>
<package pkgid="f1f96b05d5b5d24ff483895b1106469846c5e7a2044fe7048eb5d85bc0bbce4b5cb9372eb2bccf9a1042fff7214580c209710297775dae61fc084dd22d464bdd" name="libffi8-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.4.6" rel="slfo.1.1_1.4"/>
  <changelog author="schwab@suse.de" date="1568808000">- Update to commit c2a6859
- gccbug.patch: Update check for gccbug target flag
- stdcall.patch: Fix FFI_STDCALL ABI
- libffi-riscv.patch: Removed
- libffi-include-location.patch: Removed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1570795200">- Workaround aarch64 bug (boo#1153573) with upstream patch
  https://github.com/libffi/libffi/pull/499 updated to apply
  on current sources (upstream will probably rework this patch
  so we need to monitor the issue for the proper fix):
  * aarch64.patch</changelog>
  <changelog author="rguenther@suse.com" date="1583841600">- Update to commit b844a9c7f1ca based on libffi 3.3 with the
  following changes:
    Add RISC-V support.
    New API in support of GO closures.
    Add IEEE754 binary128 long double support for 64-bit Power
    Default to Microsoft's 64 bit long double ABI with Visual C++.
    GNU compiler uses 80 bits (128 in memory) FFI_GNUW64 ABI.
    Add Windows on ARM64 (WOA) support.
    Add Windows 32-bit ARM support.
    Raw java (gcj) API deprecated.
    Add pre-built PDF documentation to source distribution.
    Many new test cases and bug fixes.
- SONAME change to libffi.so.8
- stdcall.patch is now upstream
- Adjust baselibs.conf for SONAME change
- Adjust aarch64.patch for upstream changes
- Drop gccbug.patch XFAILing testcases that now PASS with fixed
  GCC 9.3</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 3.4.2:
  * Add static trampoline support for Linux on x86_64 and ARM64.
  * Add support for Alibaba's CSKY architecture.
  * Add support for Kalray's KVX architecture.
  * Add support for Intel Control-flow Enforcement Technology (CET).
  * Add support for ARM Pointer Authentication (PA).
  * Fix 32-bit PPC regression.
  * Fix MIPS soft-float problem.
  * Enable tmpdir override with the $LIBFFI_TMPDIR environment variable.
  * Enable compatibility with MSVC runtime stack checking.
  * Reject float and small integer argument in ffi_prep_cif_var().
  * Callers must promote these types themselves.
- drop aarch64.patch: fixed upstream differently
- drop info dependency, uses file triggers now</changelog>
  <changelog author="dmueller@suse.com" date="1638360000">- disable static trampolines (bsc#1193272)</changelog>
  <changelog author="rguenther@suse.com" date="1663934400">- update to 3.4.3:
  * All struct args are passed by value, regardless of size, as per ABIs.
  * Enable static trampolines for Cygwin.
  * Add support for Loongson's LoongArch64 architecture.
  * Fix x32 static trampolines.
  * Fix 32-bit x86 stdcall stack corruption.
  * Fix ILP32 aarch64 support.
- includes fix for RISCV64
- disable LTO due to (ffi#733)</changelog>
  <changelog author="dmueller@suse.com" date="1665403200">- add riscv64-handle-big-structures.patch</changelog>
  <changelog author="schwab@suse.de" date="1666612800">- Update to libffi 3.4.4
  * Important aarch64 fixes, including support for linux builds
    with Link Time Optimization (-flto).
  * Fix x86 stdcall stack alignment.
  * Fix x86 Windows msvc assembler compatibility.
  * Fix moxie and or1k small structure args.
- drop riscv64-handle-big-structures.patch
- reenable LTO</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701864000">- Add upstream patches to fix BTI on aarch64:
  * 808.patch
  * 810.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1710849600">- Add patches to fix BTI on aarch64:
  * 830.patch
- Update to 3.4.6:
  * Fix long double regression on mips64 and alpha.
- Update to 3.4.5:
  * Add support for wasm32.
  * Add support for aarch64 branch target identification (bti).
  * Add support for ARCv3: ARC32 &amp; ARC64.
  * Add support for HPPA64, and many HPPA fixes.
  * Add support for Haikuos on PowerPC.
  * Fixes for AIX, loongson, MIPS, power, sparc64, and x86 Darwin.
- Drop upstreamed patches:
  * 808.patch
  * 810.patch</changelog>
</package>
<package pkgid="1f4e6c6175b97337813b35d38f3c7cb33794bf1f464464cbf1003c3c40149f01439ac97e963f134bf62912b23debfd7a30b76d1e02f369eace1dd4aa5d10dc54" name="libfido2-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.13.0" rel="slfo.1.1_1.3"/>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="72e353945f0118017f51398f02071c725053eb95e786b6fa7fcd61f0fcba30c164d1b2b709cd88bac1af8482290306b6f55bc2c5f0319413d007d189573df476" name="libfido2-debugsource" arch="aarch64">
  <version epoch="0" ver="1.13.0" rel="slfo.1.1_1.3"/>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="d66faa73a0407b947bdc5e56bb9af0a526925f6298f652147db5dc9df580a2101f99d72039e0c7677c3da489f1cb79e8cf0cd973b37ecadd63bde58589e62097" name="libfile1_0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2022.10.16" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="14282bac2226e807293b914c181fb0ced43dd478c682ee24f2f151df194ddf999eb58e06712f4a79c364f90caf95142cb81dd056d8c3f776463a4840fd8ba8c9" name="libfind4_0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="61f4eae94d2ff3c04204526f9f3d8b720a1d9e48c94f62ab5209132b11c2fba3307fce823831cdc6c39d68a7cac6f093cd55851cee8eb2633552d8eb138ee334" name="libflashrom1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="slfo.1.1_1.2"/>
  <changelog author="glin@suse.com" date="1469534400">- Update to 0.9.9
  * Enable the dediprog module by default, add support for Dediprog
    SF600 and the new communication protocol of the SF100 with
    newer firmware
  * Add support to update the firmware of Promise UltraATA
    controllers
  * Support new programers: WCH CH341A, VIA VT8251
  * Support new chips:
    + ESI ES25P40, ES25P80, ES25P16
    + GigaDevice GD25VQ41B, GD25Q128C, GD25VQ21B, GD25VQ40C,
    GD25VQ80C and GD25VQ16C, GD25LQ40, GD25LQ80, GD25LQ16,
    GD25LQ64(B), GD25LQ128
    + PMC Pm25LQ020, Pm25LQ040, Pm25LQ080, Pm25LQ016, Pm25LQ032C
    + Sanyo LE25FU406C/LE25U40CMC
    + SST SST25WF020A, SST25WF040B, SST25WF080B
    + Winbond W29C512A/W29EE512
  * Allow to link flashrom statically (with make CONFIG_STATIC=yes)
  * Ease debugging of build problems with libraries
  * Ignore 0x00 as a flash chip manufacturer ID in the generic
    match to avoid ambiguous messages
  * Various improvements for serprog-based programmers
  * Add support for libftdi1
  * Add infrastructure for libusb1 and use it for new programmers
  * Rigorously check integrity of I/O stream data
  * Add make parameters for easier disabling/enabling of various
    classes of programmers</changelog>
  <changelog author="agraf@suse.com" date="1493208000">- Enable build for ARM</changelog>
  <changelog author="mardnh@gmx.de" date="1514980800">- Update to version 1.0
  * Support layouts for read and erase commands
  * New command line switch --noverify-all (-N) allows flashing of
    individual regions without reading the whole flash chip
    (particular useful with locked down Intel ME firmware)
  * New command line switch --ifd to read the layout from an
    Intel Firmware Descriptor on flash
  * We got rid of the delay-loop calibration (if the OS provides an
    accurate timer through clock_gettime())
  * Reading speed of USB programmers should have increased (reading
    bigger chunks at once, we reduce the overhead)
  * Support Intel 100 series PCHs (Sunrise Point, coupled with
    Skylake and Kaby Lake) and C620 series PCHs (Lewisburg paired
    with Workstation/Server versions of the former)
  * New programmers
    + Intel 100 series / C620 series PCHs
    + Intel I210 NICs (EEPROM and SPI)
    + AMD Merlin Falcon (FP4)
  * New chips
    + W25Q128.W
- Specfile cleanup
- Verify source signature</changelog>
  <changelog author="mardnh@gmx.de" date="1554033600">- Update to version 1.0.1
  * linux_spi: Reduce maximum read chunksize
  * Hardcode default spispeed of 2MHz
    Default speed of kernel drivers isn't always sane (any more).
  * Fix dmi_match string for ThinkPad X201
  * verification with sparse layouts
  * Fix erasing of unaligned regions</changelog>
  <changelog author="mardnh@gmx.de" date="1561291200">- Update to version 1.1
  New major user-visible features
  * 4-byte address support for many SPI programmers
  * New option to use a reference file for flash contents
    (--flash-contents)
  * Layout support for coreboot's FMAP format (--fmap, --fmap-file)
  * BAUD rate selection for Buspirate SPI
  * Support for the ENE Embedded Debug Interface (EDI), probably
    our first non-jedec SPI target
  * On Intel ME enabled systems, internal flashing is allowed by
    default
  New programmers
  * ENE Embedded Debug Interface EDI
  * Linux' MTD interface
  * Digilent SPI for the iCEblink40 development board
  * Developerbox/CP2104 bit banging
  * J-Link SPI
  * Dediprog firmwares &gt;= 7.2.30
  * Dediprog SF200
  * Intel Kabylake PCHs
  Support for lots of new chips</changelog>
  <changelog author="mardnh@gmx.de" date="1582200000">- Update to version 1.2
  - Meson support
  - Layout improvements/fixes and many, many code cleanups.
  - New chips: MX25U25635F, MX25L51245G, GD25Q256D, M95M02-A125,
    N25Q/MT25Q variants, W25Q128JW_DTR, AT25SF321, S25FL512S
  - New programmers: National Instruments USB-845x, Tin Can Tools
    Flyswatter/Flyswatter 2, STLINK V3, more Intel PCHs (Apollo
    Lake, Cannon Lake variants, Ice Lake U)
  - Reduced dependency on libusb0
  - Syntax: Added --flash-name and --flash-size arguments to print
    information about the flash chip</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606478400">- Fix build on aarch64 with upstream patch:
  * fix_aarch64.patch</changelog>
  <changelog author="schwab@suse.de" date="1631188800">- Enable build on riscv64
- Drop requires on dmidecode, no longer needed</changelog>
  <changelog author="mgorse@suse.com" date="1658664000">- Switch to meson
- Add flashrom-install-man-file.patch: install the man file when
  using meson.
- Add flashrom-j-link-spi.patch: Add missing meson option for
  J-Link SPI.
- Drop fix_aarch64.patch: no longer relevant.
- Package the library and headers.</changelog>
  <changelog author="adam@mizerski.pl" date="1695384000">- Update to 1.3.0
  - See changelog at https://www.flashrom.org/Flashrom/1.3
- Removed patches (merged upstream):
  - flashrom-install-man-file.patch
  - flashrom-j-link-spi.patch</changelog>
</package>
<package pkgid="9d6594f7333b8623caa1008dd5ca2fdf4cdcfcd54707b128e3eec3e86addff8a9487e3e7f6ecf87ee37a587f584daf26184f2166e2ff1387ef1666bb8ff77abb" name="libfmt9-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.1.0" rel="slfo.1.1_1.2"/>
  <changelog author="aloisio@gmx.com" date="1604491200">- Update to version 7.1.2
  * Fixed floating point formatting with large precision</changelog>
  <changelog author="aloisio@gmx.com" date="1606305600">- Update to version 7.1.3
  * Fixed handling of buffer boundaries in format_to_n
  * Fixed linkage errors when linking with a shared library
  * Reintroduced ostream support to range formatters
  * Worked around an issue with mixing std versions in gcc</changelog>
  <changelog author="aloisio@gmx.com" date="1624276800">- Update to version 8.0.0
  * Enabled compile-time format string check by default.
  * Added compile-time formatting.
  * Optimized handling of format specifiers during format string
    compilation.
  * Added the ``_cf`` user-defined literal to represent a
    compiled format string. It can be used instead of the
    ``FMT_COMPILE`` macro.
  * Format string compilation now requires ``format`` functions
    of ``formatter`` specializations for user-defined types to
    be ``const``.
  * Added UDL-based named argument support to format string
    compilation.
  * Added format string compilation support to ``fmt::print``.
  * Added initial support for compiling {fmt} as a C++20 module.
  * Made symbols private by default reducing shared library size
  * Optimized includes making the result of preprocessing
    ``fmt/format.h``.
  * Added support of ranges with non-const ``begin`` / ``end``
  * Added support of ``std::byte`` and other formattable types
    to ``fmt::join``.
  * Implemented the default format for
    ``std::chrono::system_clock``.
  * Made more chrono specifiers locale independent by default.
    Use the ``'L'`` specifier to get localized formatting.
  * Improved locale handling in chrono formatting.
  * Deprecated ``fmt/locale.h`` moving the formatting functions
    that take a locale to ``fmt/format.h`` (``char``) and
    ``fmt/xchar`` (other overloads). This doesn't introduce a
    dependency on ``&lt;locale&gt;`` so there is virtually no compile
    time effect.
  * Made parameter order in ``vformat_to`` consistent with
    ``format_to``.
  * Added support for time points with arbitrary durations.
  * Formatting floating-point numbers no longer produces
    trailing zeros by default.
    for consistency with ``std::format``.
  * Dropped a limit on the number of elements in a range and
    replaced ``{}`` with ``[]`` as range delimiters for
    consistency with Python's ``str.format``.
  * The ``'L'`` specifier for locale-specific numeric formatting
    can now be combined with presentation specifiers as in
    ``std::format``.
  * Made the ``0`` specifier ignored for infinity and NaN.
  * Made the hexfloat formatting use the right alignment by
    default.
  * Removed the deprecated numeric alignment (``'='``). Use the
    ``'0'`` specifier instead.
  * Removed the deprecated ``fmt/posix.h`` header that has been
    replaced with ``fmt/os.h``.
  * Removed the deprecated ``format_to_n_context``,
    ``format_to_n_args`` and ``make_format_to_n_args``. They
    have been replaced with ``format_context``, ``format_args`
    and ``make_format_args`` respectively.
  * Moved ``wchar_t``-specific functions and types to
    ``fmt/wchar.h``. You can define
    ``FMT_DEPRECATED_INCLUDE_WCHAR`` to automatically include
    ``fmt/wchar.h`` from ``fmt/format.h`` but this will be
    disabled in the next major release.
  * Fixed handling of the ``'+'`` specifier in localized
    formatting.
  * Added support for the ``'s'`` format specifier that gives
    textual representation of ``bool``.
  * Made ``fmt::ptr`` work with function pointers.
  * Fixed ``fmt::formatted_size`` with format string compilation
  * Fixed handling of empty format strings during format string
    compilation.
  * Fixed handling of enums in ``fmt::to_string``.
  * Improved width computation.
  * The experimental fast output stream (``fmt::ostream``) is
    now truncated by default for consistency with ``fopen``.
  * Fixed moving of ``fmt::ostream`` that holds buffered data
  * Replaced the ``fmt::system_error`` exception with a function
    of the same name that constructs ``std::system_error``.
  * Replaced the ``fmt::windows_error`` exception with a
    function of the same name that constructs
    ``std::system_error`` with the category returned by
    ``fmt::system_category()``.
  * Replaced ``fmt::error_code`` with ``std::error_code`` and
    made it formattable.
  * Added speech synthesis support.
  * Made ``format_to`` work with a memory buffer that has a
    custom allocator.
  * Added ``Allocator::max_size`` support to
    ``basic_memory_buffer``.
  * Added wide string support to ``fmt::join``
  * Made iterators passed to ``formatter`` specializations via a
    format context satisfy C++20 ``std::output_iterator``
    requirements.
  * Optimized the ``printf`` implementation.
  * Improved detection of ``constexpr`` ``char_traits``.
  * Fixed exception propagation from iterators.
  * Improved ``strftime`` error handling.
  * Stopped using deprecated GCC UDL template extension.
  * Added ``fmt/args.h`` to the install target.
  * Error messages are now passed to assert when exceptions are
    disabled.
  * Added the ``FMT_MASTER_PROJECT`` CMake option to control
    build and install targets when {fmt} is included via
    ``add_subdirectory``.
  * Improved build configuration.
  * Fixed various warnings and compilation issues.
  * Improved documentation.
  * Continuous integration and test improvements.
- Bump soversion to 8</changelog>
  <changelog author="aloisio@gmx.com" date="1625313600">- Update to version 8.0.1
  * Fixed the version number in the inline namespace.
  * Added a missing presentation type check for std::string.
  * Fixed a linkage error when mixing code built with clang and
    gcc.
  * Fixed documentation issues.
  * Removed dead code in FP formatter.
  * Fixed various warnings and compilation issues.</changelog>
  <changelog author="aloisio@gmx.com" date="1641211200">- Update to version 8.1.0
  * Optimized chrono formatting.
    + Processing of some specifiers such as %z and %Y is now up
    to 10-20 times faster, for example on GCC 11 with
    libstdc++.
  * Implemented subsecond formatting for chrono durations.
  * Fixed handling of precision 0 when formatting chrono
    durations.
  * Fixed an overflow on invalid inputs in the tm formatter.
  * Added fmt::group_digits that formats integers with a
    non-localized digit separator (comma) for groups of three
    digits.
  * Added support for faint, conceal, reverse and blink text
    styles.
  * Added experimental support for compile-time floating point
    formatting.
  * Added UDL-based named argument support to compile-time
    format string checks.
  * Implemented escaping of string range elements.
  * Switched to JSON-like representation of maps and sets for
    consistency with Python's str.format.
  * Extended fmt::join to support C++20-only ranges.
  * Optimized handling of non-const-iterable ranges and
    implemented initial support for non-const-formattable types.
  * Disabled implicit conversions of scoped enums to integers
    that was accidentally introduced in earlier versions.
  * Deprecated implicit conversion of [const] signed char* and
    [const] unsigned char* to C strings.
  * Deprecated _format, a legacy UDL-based format API.
  * Marked format, formatted_size and to_string as [[nodiscard]].
  * Added missing diagnostic when trying to format function and
    member pointers as well as objects convertible to pointers
    which is explicitly disallowed.
  * Optimized writing to a contiguous buffer with format_to_n.
  * Optimized writing to non-char buffers.
  * Decimal point is now localized when using the L specifier.
  * Improved floating point formatter implementation.
  * Fixed handling of very large precision in fixed format.
  * Made a table of cached powers used in FP formatting static.
  * Resolved a lookup ambiguity with C++20 format-related
    functions due to ADL.
  * Removed unnecessary inline namespace qualification.
  * Implemented argument forwarding in format_to_n.
  * Fixed handling of implicit conversions in fmt::to_string and
    format string compilation.
  * Changed the default access mode of files created by
    fmt::output_file to -rw-r--r-- for consistency with fopen.
  * Make fmt::ostream::flush public.
  * Improved C++14/17 attribute detection.
  * Improved documentation.
  * Improved fuzzers and added a fuzzer for chrono timepoint
    formatting.
  * Added the FMT_SYSTEM_HEADERS CMake option setting which
    marks {fmt}'s headers as system. It can be used to suppress
    warnings.
  * Added the Bazel build system support.
  * Improved build configuration and tests.
  * Fixed various warnings and compilation issues.</changelog>
  <changelog author="aloisio@gmx.com" date="1641556800">- Update to version 8.1.1
  * Restored ABI compatibility with version 8.0.x
  * Fixed chrono formatting on big-endian systems</changelog>
  <changelog author="jengelh@inai.de" date="1651320000">- Replace obsolete macro %make_jobs by %cmake_build</changelog>
  <changelog author="jengelh@inai.de" date="1657022400">- Update to release 9
  * Switched to the internal floating point formatter for all
    decimal presentation formats. In particular this results in
    consistent rounding on all platforms and removing the
    s[n]printf fallback for decimal FP formatting.
  * Compile-time floating point formatting no longer requires the
    header-only mode.
  * Disabled automatic std::ostream insertion operator
    (operator&lt;&lt;) discovery when fmt/ostream.h is included to
    prevent ODR violations. You can get the old behavior by
    defining FMT_DEPRECATED_OSTREAM.
  * Added fmt::ostream_formatter that can be used to write
    formatter specializations that perform formatting via
    std::ostream.
  * Added the fmt::streamed function that takes an object and
    formats it via std::ostream.
  * Added experimental std::variant formatting support.
  * Added experimental std::filesystem::path formatting support.
  * Added a std::thread::id formatter to fmt/std.h.
  * Added support for nested specifiers to range formatting.
- Add 0001-Fix-large-shift-in-uint128_fallback.patch
  0002-Use-FMT_USE_FLOAT128-instead-of-__SIZEOF_FLOAT128__.patch
  0001-Make-sure-the-correct-fmod-overload-is-called.patch</changelog>
  <changelog author="jengelh@inai.de" date="1661688000">- Update to release 9.1
  * fmt::formatted_size now works at compile time
  * Fixed handling of invalid UTF-8 (#3038)
  * Improved Unicode support in ostream overloads of print
  * Added support for wide streams to fmt::streamed
  * Added the n specifier that disables the output of delimiters
  when formatting ranges (#2981)
- Delete 0001-Fix-large-shift-in-uint128_fallback.patch
  0002-Use-FMT_USE_FLOAT128-instead-of-__SIZEOF_FLOAT128__.patch
  0001-Make-sure-the-correct-fmod-overload-is-called.patch (merged)</changelog>
  <changelog author="mliska@suse.cz" date="1678449600">- Use -ffloat-store as a fix for excessive precision provided
  by X87 on i686 target (https://github.com/fmtlib/fmt/issues/3337).</changelog>
</package>
<package pkgid="5a86ffd9e4451e4b3bb083d2de0e31ed4435b7a5d41f591bd30fa332e2d059923b71473693857c1152f9773ddbf9d86070c135cffc5abc85146ce37c63c9f225" name="libfontconfig1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1540987200">- Update to 2.13.1:
  * conf.d: Drop aliases for (URW)++ fonts
  * variable fonts support
  * Use uuid-based cache filename if uuid is assigned to dirs
  * Add new API to find out a font from current search path
  * Add FONTCONFIG_SYSROOT environment variable
  * [varfonts] Add FC_FONT_VARIATIONS
  * [varfonts] Add FC_VARIABLE
  * Add Simplified Chinese translations
  * Fix memory leaks, double frees etc.
  * See README for details
- Drop fontconfig-remove-debug-output.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Package AUTHORS, ChangeLog and README via standard doc macro.</changelog>
  <changelog author="ecsos@opensuse.org" date="1547294400">- Fix self obsoletion ipa-fonts-config and IPA-fonts-config.
- Fix build error in Leap 42.3.
- Fix location of fontconfig-devel.* doc-files.</changelog>
  <changelog author="jengelh@inai.de" date="1547294401">- Implement shared library packaging guideline
- Split documentation to soothe rpmlint's
  "W: package-with-huge-docs 86%"</changelog>
  <changelog author="badshah400@gmail.com" date="1549713600">- Add fontconfig-do-not-remove-UUID-file.patch: Removing .uuid
  files caused frequent rescanning of all system fonts causing
  intermittent CPU usage surges, for example, when browsing using
  firefox; patch taken from upstream commit (boo#1124816,
  https://gitlab.freedesktop.org/fontconfig/fontconfig/merge_requests/8).</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- adding bug reference to this changelog [bsc#1172301]</changelog>
  <changelog author="dmueller@suse.com" date="1650024000">- update to 2.14.0:
  * Fix endianness on generating MD5 cache name
  * Fix a typo in the description of FcWeightFromOpenTypeDouble
  * fc-validate: returns an error code when missing some glyphs
  * Fallback uuid-based name to read a cache if no MD5-based cache
  * fc-cache: Show font directories to generate cache with -v
  * Replace UUID file mechanism with per-directory 'map' attribute [v2]
  * memleak fixes
- drop fontconfig-do-not-remove-UUID-file.patch (obsolete)
- add skip-network-test.patch</changelog>
  <changelog author="sflees@suse.de" date="1651147200">- Seems we now need python3 for building</changelog>
  <changelog author="dmueller@suse.com" date="1667908800">- update to 2.14.1:
  * Bump the cache version to 8 in doc/fontconfig-user.sgm
  * Enable 10-sub-pixel-rgb.conf by default
  * build fixes and translation updates
  * Avoid misuse of ctype</changelog>
  <changelog author="dmueller@suse.com" date="1674907200">- update to 2.14.2:
  * Adjust indentation between programlisting in fontconfig-user.sgml
  * Add some missing constant names for weight
  * Report more detailed logs instead of assertion
  * Fix a typo in description for HAVE_STDATOMIC_PRIMITIVES
  * Ignore LC_CTYPE if set to "UTF-8"
  * add --with-default-sub-pixel-rendering option
  * Add FC_DESKTOP_NAME property</changelog>
</package>
<package pkgid="74c17c60f1528d9fe21328b037c00a24d3b222a400704587a00c4eac98886d1ff73dbee1bed4fe877c5243bcd3eb0cc99b06291167df2ead147a321ce7c04f3f" name="libfreebl3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.112.2" rel="slfo.1.1_1.1"/>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="906e148481a0cdf2b49a693048711ea40865c592ec7669a0fee709c0e663c133da331ea7eb66101afbd2096873a8c7296a909c9af6db99df9601f354da1cb7bf" name="libfreeipmi17-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.14" rel="slfo.1.1_1.2"/>
  <changelog author="kkaempf@suse.com" date="1599393600">- Update to 1.6.6
  o In libfreeipmi, fix segfault in SPMI parsing leading to immediate
    failures on some hardware across all tools.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- freeipmi 1.6.7:
  * Do not require IPMI access when running ipmi-fru with the
  - -fru-file option
  * Minor documentation updates
- the following fixes were upstreamed:
  * Fix default permissions of various config and system files,
    drop 1103311-service-files-mode.patch</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Fix: W: name-repeated-in-summary C FreeIPMI
- Fix: freeipmi-bmc-watchdog.x86_64:
  W: non-etc-or-var-file-marked-as-conffile /usr/share/fillup-templates/sysconfig.bmc-watchdog
  Declaring fillup files as conffile is not needed
- freeipmi 1.6.8
  * Fix incorrect sensor read corner case on BMCs that use non-default LUNs (LP#1926299).
  * Remove hard coded paths from system config files (i.e. mostly files
    in /etc).  Have paths updated based on options to configure.</changelog>
  <changelog author="kkaempf@suse.com" date="1642680000">- freeipmi 1.6.9
  * Support --with-systemconfigdir build option.
  * Fix build issue on musl where putmsg/getmsg are not available.
  * Fix build issue when inb/outb are not available on some systems.
  * Fix static build issues with gcrypt.
  * Add conserver documentation in faq.
  * Minor documentation updates.</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- Remove obsolete ExclusiveArch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676635200">- freeipmi 1.6.10
  * Support IPv6 Lan configuration in ipmi-config
    IPv6 configuration is supported in the new Lan6_Conf section
- add upstream signing key and source signature</changelog>
  <changelog author="kkaempf@suse.com" date="1686571200">- freeipmi 1.6.11
  * Fix double free corner case in ipmiseld.
  * Support ISO 8601 date inputs to date range options in ipmi-sel.
  * Support Xilinx OEM FRU records.
  * Fix corner case in libipmimonitoring, support sensor if units
    is "RPM per minute", but just return "RPM" as the units.
  * Fix portability compilation on cygwin.
  * Fix typo in fiid template field that could lead to packet
    interpretation errors.</changelog>
  <changelog author="kkaempf@suse.com" date="1706529600">- freeipmi 1.6.14
  * Fix build issue common to non-x86 systems.
- freeipmi 1.6.13
  * Fix build issues on systems where inb/outb are declared with inline
    assembly.
  * Add additional sensor/event interpretations.
- freeipmi 1.6.12
  * Use poll() over select() to avoid fd limit in openipmi driver.
  * Fix potential portability problems on systems without cbrt().
  * Minor documentation updates.</changelog>
  <changelog author="kkaempf@suse.com" date="1709812800">- fix gcc-14 build: gcc-14.patch (bsc#1220476)</changelog>
  <changelog author="kkaempf@suse.com" date="1717416000">- use %autosetup
- apply patches with -p1</changelog>
</package>
<package pkgid="b240bc8da3a304fd480da238f404232bbb027dea0c6d33cb0dd89251ed6e8f8b9abcb788361b03ae73d3a7820172135345ce3a5f209b4f14ba9ba8ada569a2bb" name="libfreetype6-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="slfo.1.1_1.1"/>
  <changelog author="meissner@suse.com" date="1677758400">- add devel requires to devel-32bit for brotli and bzip2 (indirect
  for Wine)</changelog>
  <changelog author="dmueller@suse.com" date="1678276800">- update to 2.13.0:
  * The 'COLR' v1 API is now considered as stable.
    https://learn.microsoft.com/en-us/typography/opentype/spec/colr
  * For  OpenType  Variable Fonts,  `avar`  table  format 2.0  is  now
    supported.  The code was contributed by Behdad Esfahbod.
    Note that this is an extension supported on recent Apple platforms
    and by HarfBuzz, but not yet in the OpenType standard!  See
    https://github.com/harfbuzz/boring-expansion-spec/blob/main/avar2.md
    for the specification.  To deactivate it, define the configuration
    macro 'TT_CONFIG_OPTION_NO_BORING_EXPANSION'.
  * A new API  `FT_GlyphSlot_Slant` to slant a glyph by  a given angle
    has been added.   Note that this function is  part of `ftsynth.h`,
    which is still considered to be in alpha stage.
  * TrueType interpreter version 38  (also known as 'Infinality') that
    was first introduced about 10 years  ago in FreeType 2.4.11 is now
    deprecated and slated to be removed in the next version.  TrueType
    interpreter version 40 has been FreeType's default version for six
    years now and provides an excellent alternative.  This is the last
    FreeType     version     with    TT_INTERPRETER_VERSION_38     and
    TT_INTERPRETER_VERSION_40 treated differently.
  * The  only  referenced  but never  documented  configuration  macro
    `FT_CONFIG_OPTION_NO_GLYPH_NAMES` has been removed.
  * To  avoid  reserved identifiers  that  are  globally defined,  the
    auto-hinter  debugging   macros  (which  are  only   available  if
    `FT_DEBUG_AUTOFIT` is defined)
    ```
    _af_debug_disable_horz_hints
    _af_debug_disable_vert_hints
    _af_debug_disable_blue_hints
    _af_debug_hints
    ```
    have been renamed to
    ```
    af_debug_disable_horz_hints_
    af_debug_disable_vert_hints_
    af_debug_disable_blue_hints_
    af_debug_hints_
    ```</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to FTL and GPL-2.0-only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1685016000">- Do not limit ftdump conflict to &lt; version-release, but only to
  version. Ftdump is built in a second build flavor and as such the
  release counters are not guaranteed to be in sync.</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 2.13.1:
  * New function  `FT_Get_Default_Named_Instance` to get the
    index of the default named instance of an OpenType Variation
    Font. A new load flag `FT_LOAD_NO_SVG` to make FreeType ignore
    glyphs in an 'SVG ' table.
  * New function  `FT_GlyphSlot_AdjustWeight` to adjust
    the glyph weight either  horizontally or  vertically.
    This is part of the `ftsynth.h` header file
  * TrueType interpreter  version 38 (also known  as
    'Infinality') has been deactivated; the value  of
    `TT_INTERPRETER_VERSION_38` is now the same as
    `TT_INTERPRETER_VERSION_40`.
  * Switching named instances on and  off in Variation Fonts
    was buggy if the design coordinates didn't change.
- drop enable-infinality-subpixel-hinting.patch (obsolete, infinality
  is deactivated)</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Update to version 2.13.2:
  - Better support for CFF2 variation fonts.
  - TrueType interpreter  version 38 (also known  as 'Infinality')
    has been removed.
  - Improved OpenVMS support.</changelog>
  <changelog author="dmueller@suse.com" date="1740484800">- update to 2.13.3:
  * Some  fields in the `FT_Outline` structure have been changed
    from signed to unsigned type, which better reflects the actual
    usage. It is also an additional means to protect against
    malformed input.
  * Rare double-free crashes in the cache subsystem have been fixed.
  * Excessive stack allocation in the autohinter has been fixed.
  * The B/W  rasterizer has received a major upkeep that results in
    large performance improvements.  The rendering speed has
    increased and even doubled for very complex glyphs.</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- package FTL.TXT and GPLv2.TXT [bsc#1252148]</changelog>
  <changelog author="dmueller@suse.com" date="1763380800">- update to 2.14.1:
  * The auto-hinter got new abilities. It can now better separate
    diacritic glyphs from base glyphs at small sizes  by
    artificially moving  diacritics up (or  down) if necessary
  * Tilde accent  glyphs get vertically stretched at small sizes so
    that they don't degenerate to horizontal lines.
  * Diacritics directly attached to a base glyph (like the ogonek in
    character 'ę') no longer distort the shape of the base glyph
  * The TrueType  instruction interpreter  was optimized to
    produce a 15% gain in the glyph loading speed.
  * Handling of Variation Fonts is now considerably faster
  * TrueType and CFF glyph loading speed has been improved by 5-10%
    on modern 64-bit platforms  as  a result of better handling of
    fixed-point multiplication.
  * The BDF driver now loads fonts 75% faster.</changelog>
  <changelog author="fstrba@suse.com" date="1772539200">- update to 2.14.2
- Important changes
  * Several changes related to LCD filtering are implemented to
    achieve better performance and encourage sound practices.
    + Instead of blanket LCD filtering over the entire bitmap, it
    is now applied only to non-zero spans using direct rendering.
    This speeds up the ClearType-like rendering by more than 40%
    at sizes above 32 ppem.
    + Setting the filter weights with FT_Face_Properties is no
    longer supported. The default and light filters are optimized
    to work with any face.
    + The legacy libXft LCD filter algorithm is no longer provided.
- Important bug fixes
  * A bunch of potential security problems have been found
    (bsc#1259118, CVE-2026-23865). All users should update.
  * The italic angle in `PS_FontInfo` is now stored as a fixed-point
    value in degrees for all Type 1 fonts and their derivatives,
    consistent with CFF fonts and common practices. The broken
    underline position and thickness values are fixed for CFF fonts.
- Miscellaneous
  * The `x` field in the `FT_Span` structure is now unsigned.
  * Demo program `ftgrid` got an option `-m` to select a start
    character to display.
  * Similarly, demo program `ftmulti` got an option `-m` to select a
    text string for rendering.
  * Option `-d` in the demo program `ttdebug` is now called `-a`,
    expecting a comma-separated list of axis values.  The user
    interface is also slightly improved.
  * The `ftinspect` demo program can now be compiled with Qt6, too.</changelog>
</package>
<package pkgid="c73a79f3ff114b4c00d56c6b1f3e8689b63e5861855459df11f2e4abef8dce288a278d383be7fae59b5d46e0e9bb74b7a6e27e2046cb7c907d0447db00430415" name="libfribidi0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.13" rel="slfo.1.1_1.2"/>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="dmueller@suse.com" date="1636804800">- update to 1.0.11:
  * Updated Unicode tables to version 14.
  * Skip isolates in fribidi_get_par_direction().
  * Various fuzzing fixes.
  * Various build fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 1.0.12:
  * Various fuzzing fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- update to 1.0.13:
  * Adding missing man pages to the tar release file.</changelog>
</package>
<package pkgid="04d60cc674e856289d54266abb834228558cea048b31051979e9d5c376c70c042bf2ef9ed961e5e54ffd8177cb3aea7dfc8439dd09cdf4a4df61464239d8deb6" name="libftdi1-2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.12+git.0684c1b" rel="slfo.1.1_1.4"/>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mardnh@gmx.de" date="1499342400">- Minor package cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Update to version 1.4:
  * New ftdi_usb_open_bus_addr() open function
  * Use BM/R series baud rate computation for FT230X
  * ftdi_get_error_string() now returns const char*
  * C++ API: Ability to open devices with empty descriptor strings
  * C++ API: Fix enumerations for buffer purge and modem controls
  * small build fixes and improvements in the python examples
  * ftdi_eeprom / eeprom handling:
    + New API function: ftdi_eeprom_get_strings()
    + Fix USE_SERIAL handling for 230X type chips
    + Make ftdi_read_eeprom_location() endianness independent
    + Fix flashing of FT245R
- Build python3 version of bindings on Factory
- Rename python bindings subpackage to match singlespec conventions
- Run spec-cleaner</changelog>
  <changelog author="foss@grueninger.de" date="1523102400">- Added patch libftdi-cmake.patch from upstream to make package
  compatible with CMake 3.11</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Smash libftdi-cmake.patch to make it work with cmake-3.11
  * Not to upstream the changes I did are pretty ugly</changelog>
  <changelog author="msuchanek@suse.com" date="1528804800">- Fix Leap 42.3 build - do not apply cmake 3.11 compat patch.</changelog>
  <changelog author="mpluskal@suse.com" date="1585137600">- Cleanup spec file - drop obsolete conditionals and use modern
  macros
- Run tests
- Dont build static libraries</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1610712000">- Update to version 1.5:
  * Implement tc[io]flush methods &amp; deprecate broken
    purge_buffers methods
  * Add program to test buffer flush (purge) functionality
  * Add kernel driver auto attach/detach.
    See new AUTO_DETACH_REATACH_SIO_MODULE option
  * Add ftdi_setflowctrl_xonxoff()
  * ftdi_eeprom / eeprom handling:
    + Unify handling of all boolean eeprom flags
    + Add device release number support
    + Add channel_a_driver support for type xxR chips
    + Add support for group0 drive levels on x232H chips
    + Fix handling of high_current_drive parameter
    + Fix inverted handling of VCP driver field for TYPE_R chips
    + New --verbose option for eeprom decode operation
  * Add example code for async mode
  * Add SPDX license identifiers to the core library &amp;
    ftdi_eeprom
  * Various python SWIG wrapper improvements
  * Various cmake file improvements
  * Fix small bugs in error code paths
- Drop upstream libftdi-cmake.patch
- Correct License, the library is LGPL-2.1-only (see SPDX headers),
  while various other parts are GPL-2.0-only (with and without
  linking exceptions).
- Add Fix-building-unit-tests-without-FTDIPP.patch</changelog>
  <changelog author="trenn@suse.de" date="1632744000">- Update to version 1.5.12+git.0684c1b:
  * Don't set EEPROM serial when it's not used.
  * Remove legacy EEPROM fields from FT4232H.
  * Don't fail reading missing strings.
  * Don't spam stderr when flashing FT232H eeprom
  * examples/bitbang_cbus.c: Check return value of fgets()
  ...
- Integrated mainline:
  D Fix-building-unit-tests-without-FTDIPP.patch</changelog>
  <changelog author="fvogt@suse.com" date="1678968000">- Add patch to fix random build failures:
  * 0001-Fix-race-during-build-of-python-bindings.patch</changelog>
</package>
<package pkgid="81bb1f382cef03b9c062dadbaa2347583b16e0a19d773900ad03c1fbe3ee24f5b4cceb0bef922f9d78e04170f9545c95b742dbf50be072ab905fd4c445390b73" name="libftdi1-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.12+git.0684c1b" rel="slfo.1.1_1.4"/>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mardnh@gmx.de" date="1499342400">- Minor package cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Update to version 1.4:
  * New ftdi_usb_open_bus_addr() open function
  * Use BM/R series baud rate computation for FT230X
  * ftdi_get_error_string() now returns const char*
  * C++ API: Ability to open devices with empty descriptor strings
  * C++ API: Fix enumerations for buffer purge and modem controls
  * small build fixes and improvements in the python examples
  * ftdi_eeprom / eeprom handling:
    + New API function: ftdi_eeprom_get_strings()
    + Fix USE_SERIAL handling for 230X type chips
    + Make ftdi_read_eeprom_location() endianness independent
    + Fix flashing of FT245R
- Build python3 version of bindings on Factory
- Rename python bindings subpackage to match singlespec conventions
- Run spec-cleaner</changelog>
  <changelog author="foss@grueninger.de" date="1523102400">- Added patch libftdi-cmake.patch from upstream to make package
  compatible with CMake 3.11</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Smash libftdi-cmake.patch to make it work with cmake-3.11
  * Not to upstream the changes I did are pretty ugly</changelog>
  <changelog author="msuchanek@suse.com" date="1528804800">- Fix Leap 42.3 build - do not apply cmake 3.11 compat patch.</changelog>
  <changelog author="mpluskal@suse.com" date="1585137600">- Cleanup spec file - drop obsolete conditionals and use modern
  macros
- Run tests
- Dont build static libraries</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1610712000">- Update to version 1.5:
  * Implement tc[io]flush methods &amp; deprecate broken
    purge_buffers methods
  * Add program to test buffer flush (purge) functionality
  * Add kernel driver auto attach/detach.
    See new AUTO_DETACH_REATACH_SIO_MODULE option
  * Add ftdi_setflowctrl_xonxoff()
  * ftdi_eeprom / eeprom handling:
    + Unify handling of all boolean eeprom flags
    + Add device release number support
    + Add channel_a_driver support for type xxR chips
    + Add support for group0 drive levels on x232H chips
    + Fix handling of high_current_drive parameter
    + Fix inverted handling of VCP driver field for TYPE_R chips
    + New --verbose option for eeprom decode operation
  * Add example code for async mode
  * Add SPDX license identifiers to the core library &amp;
    ftdi_eeprom
  * Various python SWIG wrapper improvements
  * Various cmake file improvements
  * Fix small bugs in error code paths
- Drop upstream libftdi-cmake.patch
- Correct License, the library is LGPL-2.1-only (see SPDX headers),
  while various other parts are GPL-2.0-only (with and without
  linking exceptions).
- Add Fix-building-unit-tests-without-FTDIPP.patch</changelog>
  <changelog author="trenn@suse.de" date="1632744000">- Update to version 1.5.12+git.0684c1b:
  * Don't set EEPROM serial when it's not used.
  * Remove legacy EEPROM fields from FT4232H.
  * Don't fail reading missing strings.
  * Don't spam stderr when flashing FT232H eeprom
  * examples/bitbang_cbus.c: Check return value of fgets()
  ...
- Integrated mainline:
  D Fix-building-unit-tests-without-FTDIPP.patch</changelog>
  <changelog author="fvogt@suse.com" date="1678968000">- Add patch to fix random build failures:
  * 0001-Fix-race-during-build-of-python-bindings.patch</changelog>
</package>
<package pkgid="ce50602fbc8b74069abebbee01e2a3daaec0899c276157c3250dabcd1aecc68a52ac674ba41425f5e8a195ea9724a9cd263cab2fcdbc320dcad2a86cb613fdbc" name="libfuse2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.9" rel="slfo.1.1_1.2"/>
  <changelog author="avindra@opensuse.org" date="1532779200">- fuse 2.9.8
  * SECURITY UPDATE: In previous versions of libfuse it was possible
    to for unprivileged users to specify the allow_other option even
    when this was forbidden in /etc/fuse.conf. The vulnerability is
    present only on systems where SELinux is active (including in
    permissive mode).
  * libfuse no longer segfaults when fuse_interrupted() is called
    outside the event loop.
  * The fusermount binary has been hardened in several ways to
    reduce potential attack surface. Most importantly, mountpoints
    and mount options must now match a hard-coded whitelist. It is
    expected that this whitelist covers all regular use-cases.
- cleanup with spec-cleaner
- update wiki urls to new location</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133101).</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.9.9:
  * Added OpenAFS to whitelist (so users can now mount FUSE filesystems on mountpoints within OpenAFS filesystems).
  * Added a test of seekdir to test_syscalls.
  * Fixed readdir bug when non-zero offsets are given to filler and the
  filesystem client, after reading a whole directory, re-reads it from a
  non-zero offset e. g. by calling seekdir followed by readdir.</changelog>
  <changelog author="lnussel@suse.de" date="1605009600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Modernize some older specfile constructs. Rediff patch4 as -p1.
- Update descriptions.</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133101) and use -ffat-lto-objects.</changelog>
  <changelog author="jengelh@inai.de" date="1629720000">- Add closefrom.patch [boo#1189086]</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="a203cba47fe19293710f976eb841b4ed5b426196f54e04fa22b40e23efc29b9764d62ae6a242b23090c588443861e9d5f3bcf7a4cf1ebb35a1854ba29502373f" name="libfuse3-3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.16.2" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1662638400">- Update to release 3.12.0
  * The max_idle_threads parameter has been deprecated in favor
    of the new max_threads* parameter
  * struct fuse_loop_config is now private and has to be
    constructed using fuse_loop_cfg_create()
  * fuse_session_loop_mt() now accepts struct fuse_loop_config *
    as NULL pointer.
  * fuse_parse_cmdline() now accepts a max_threads option.</changelog>
  <changelog author="jengelh@inai.de" date="1673611200">- Update to release 3.13
  * There is a new low-level API function fuse_session_custom_io
    that allows to implement a daemon with a custom io. This can
    be used to create a daemon that can process incoming FUSE
    requests to other destinations than /dev/fuse.
  * A deadlock when resolving paths in the high-level API has
    been fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1675684800">- Update to release 3.13.1
  * Fixed an issue that resulted in errors when attempting to
    compile against installed libfuse headers (because libc
    symbol versioning support was not detected correctly in this
    case).
- Add 0001-Split-config.h-into-private-and-public-config.patch
  to fix doubly-defined macros and build failure elsewhere.</changelog>
  <changelog author="jengelh@inai.de" date="1676635200">- Update to release 3.14
  * Split config.h into private and public config
- Delete 0001-Split-config.h-into-private-and-public-config.patch
  (merged).</changelog>
  <changelog author="jengelh@inai.de" date="1679832000">- Update to release 3.14.1
  * The extended attribute name passed to the setxattr() handler
    is no longer truncated at the beginning.
  * The additional setattr() flags introduced in 3.14 are no
    longer available for now. They will hopefully be reintroduced
    in the next release.</changelog>
  <changelog author="jsrain@suse.com" date="1684411200">- update the license tag matching the code (LGPL-2.1-only and
  GPL-2.0-only)</changelog>
  <changelog author="jengelh@inai.de" date="1686312000">- Update to release 3.15.0
  * Improved support for some less common systems (32-bit,
    alternative libcs)
  * Unsupported mount options are no longer silently accepted.
  * auto_unmount is now compatible with allow_other.</changelog>
  <changelog author="jengelh@inai.de" date="1688558400">- Update to release 3.15.1
  * Reduce default write size by half</changelog>
  <changelog author="jengelh@inai.de" date="1691496000">- Update to release 3.16.1
  * Readdir kernel cache can be enabled from high-level API.</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 3.16.2
  * Various minor bugfixes and improvements.</changelog>
</package>
<package pkgid="744c1af8ae6f8ed4615f9bf07e69e9fd88005d55fa28307be335a5bb9fe38ae2437fe451c9231756075f8035016ffb5bd3fb093c1afe10fa7b83baee05cd79c4" name="libfwupd2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.9.16" rel="slfo.1.1_1.2"/>
  <changelog author="info@paolostivanin.com" date="1701691200">- Update to version 1.9.10:
  + This release adds the following features:
  - Add support for not_hardware requirements
  - Add support for loongarch64
  - Add support for per-release priority attributes
  - Make USB claim retry count configurable across devices
  + This release fixes the following bugs:
  - Compare the HID report value when checking for duplicates
  - Consider the component priority when installing composite updates
  - Deploy the CCGX firmware correctly the first time
  - Do not export the 'main-system-firmware' and 'cpu' GUIDs
  - Enforce fwupd version requirements client side
  - Fix Genesys 'failed to get static tool info from device' error
  - Fix potential 'dereference before null check' in ccmx-dmc
  - Fix the 'already registered private FuMmDevice flag with value' warning
  - Fix the 'assertion backend_id != NULL failed' runtime warning
  - Fix Wacom USB device emulation by recording the composite phases
  - Generate generic request message text where possible
  - Hide HTTP passwords in fwupd debugging logs
  - Let the client know what interaction is expected
  - Make all critical warnings into backtraces for non-release builds
  - Never obsolete the wrong HSI attribute
  - Never show a HSI index that is impossible
  - Only apply fastboot plugin to modem devices supporting fastboot
  - Only send interactive requests when the sender is alive
  - Remove the now-obsolete Synaptics MST cascade device scanning
  - Replace the Redfish KCS user if required
  - Restrict mediatek-scaler devices on specific hardware only
  - Skip any recovery partitions when detecting ESP</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1704369600">- Update to version 1.9.11:
  + This release adds the following features:
  - Allow exporting 'offline' reports for manual upload
  + This release fixes the following bugs:
  - Add some recovery partition names to ignore for ESP selection
  - Check for CET and SMAP on non-Intel x86 processors too
  - Correctly mark the CPU as supported in the HSI tests
  - Do not fail on probing downstream Synaptics MST ports
  - Do not offer to change BIOS settings that are already set
  - Do not prefer msftdata when choosing the default ESP
  - Do not show spurious device request flags
  - Fix a missing build dependency to fwupdplugin-self-test
  - Fix a segfault when using zlib-ng instead of zlib
  - Fix updating Jabra 410, 510, 710 and 810 devices
  - Match more community-supported branches
  - Remove the Intel SPIBAR proxy support as the mtd module works
  - Show a better error when the ESP is missing
  - Show an error if the post-update version does not match exactly
  - Speed up Synaptics MST device enumeration
  + This release adds support for the following hardware:
  - Algoltek USB devices
  - Luxshare Quad USB4 Dock</changelog>
  <changelog author="dennis.tseng@suse.com" date="1705147200">- Fix build failure on s390x and ppc64le
  + This release modifies spec file
  - add s390x and ppc64le into default 'with efi_fw_update'
    so that old dbxtool version can be obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1706097600">- Update to version 1.9.12:
  + This release adds the following features:
  - Add remote modification support to fwupdtool
  - Add support for more modify-config options
  - Generate HTML pages for all man pages
  + This release fixes the following bugs:
  - Assume the legacy LVFS::UpdateRequestId tag is non-generic
  - Avoid crashing the daemon if not using udisks
  - Correctly mark the CPU as supported
  - Correctly match invalid EFI partitions
  - Do not change the device status until the action has
    completed
  - Do not require systemd for fwupdtool modify-config
  - Enable access to the home interface for snap
  - Fix an assertion when enabling lvfs-testing for the first
    time
  - Fix a possible crash in fwupdtool build-cabinet
  - Handle systems with more than one ccp device
  - Only check AMD CPUs for SHSTK, not IBT
  - Only write the mutable fwupd.conf with the current values
  - Re-evaluate supported every time pci-psp attributes are
    refreshed
  - Show "CET OS support" on AMD systems too
  + This release adds support for the following hardware:
  - AVer CAM340plus
  - AVer VB342 Pro
  - More Algoltek devices</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Update to version 1.9.13:
  + This release adds the following features:
  - Add a timer inhibit if the daemon took a long time to
    startup.
  - Add a concept of 'Test Mode' rather than enabling specific
    plugins.
  - Do not idle-quit the daemon if there is a connected D-Bus
    client.
  + This release fixes the following bugs:
  - Allow plugins to opt-out of the child-device first depsolve.
  - Allow setting multiple flags in LVFS::DeviceFlags.
  - Do not migrate config comments for removed keys.
  - Do not request the Advantech BMC to reboot.
  - Do not warn the user about ESP when using MBR.
  - Fix a critical warning when adding a PixArt wireless device.
  - Fix migration of legacy config files.
  - Only save config values to the mutable config file.
  - Parse DS-20 descriptors earlier in device setup.
  - Store the version format in the history database to fix
    offline reports.
  - Use the correct GUID for matching realtek-mst and
    parade-lspcon.
  + This release adds support for the following hardware:
  - GoodWay Acer Dock.</changelog>
  <changelog author="info@paolostivanin.com" date="1709035200">- Update to version 1.9.14:
  * Correctly detect ARM32 and RISC-V UEFI binaries.
  * Correctly migrate the database schema from very old fwupd versions.
  * Fix DS-20 descriptors by opening the GUsbDevice earlier.
  * Fix updating the fingerprint reader on the Framework 13 and 16 laptop.
  * Fix warning when probing devices using the metadata allowlist.
  * Only recover the version format for specific devices.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710244800">- Update to version 1.9.15:
  + This release adds the following features:
  - Allow loading in parameters for the test device from
    fwupd.conf.
  - Ensure LVFS remotes are changed from .gz to .xz.
  - Store the install duration in the history database.
  + This release fixes the following bugs:
  - Drop OverrideESPMountPoint references in uefi-capsule.
  - Fix a potential double-free when writing AVer firmware.
  - Only request the BOS descriptor when bcdUSB &gt; 0x0200.
  - Use the root device order when sorting device children.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712318400">- dbxtool is built unconditionally on all architectures: move it
  out of the condition in the files section and also
  unconditionally provide/obsolete the old version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1712577600">- Update to version 1.9.16:
  + This release adds the following features:
  - Prefer zstd over xz for metadata.
  - Relicense a few remaining plugin files to LGPL-2.1+.
  + This release fixes the following bugs:
  - Correctly record UEFI success if adding ESRT nodes.
  - Defer the DP Aux MST scanning on hotplug to workaround a
    kernel bug.
  - Do not do the post-update version check if the device
    needs-reboot.
  - Fix a fastboot warning when loading device.
  - Fix a possible warning in fwupdmgr when excluding releases.
  - Fix a qsi-dock warning when writing chunks.
  - Ignore attribute-changed to work around a regression in
    macOS.
  - Ignore ZFS zvols when finding the default ESP.
  - Mark Pluton TPMs as part of the main CPU.
  - Put the fwupd-efi verbose debugging in the journal.
  - Recognize zfsbootmenu in ESP detection heuristic.
  + This release adds support for the following hardware:
  - Acer T34 and U33 docks.
  - Qualcomm Series 5 Gen 1 and Gen 2 and Series 3 Gen 1 and
    Gen 2 devices.
  - Several Puya SPI chips.
  - VIA VL822 C0.</changelog>
</package>
<package pkgid="0b6ba602c31cd658fb679e32ce87147a6e6eb1509d0cd294c1413fca915dd5e9573992e1b70a8d3c0e1ef532feb111433ce5a884774d8e8a12fc2746b242a31f" name="libgbm1-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.3.4" rel="slfo.1.1_2.1"/>
  <changelog author="sndirsch@suse.com" date="1700481600">- buildrequire 'pkgconfig(SPIRV-Tools)' also with disabled rusticl
  (new dep since some time)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701432000">- Update to version 23.3.0:
  * It includes NVK, a new reverse-engineered Vulkan driver for
    Nvidia hardware. This driver is still in experimental phase,
    not quite ready for prime time yet, but adventurous users can
    give it a go!
  * New extensions &amp; features (in no particular order):
  - VK_EXT_pipeline_robustness on ANV
  - VK_KHR_maintenance5 on RADV
  - OpenGL ES 3.1 on Asahi
  - GL_ARB_compute_shader on Asahi
  - GL_ARB_shader_atomic_counters on Asahi
  - GL_ARB_shader_image_load_store on Asahi
  - GL_ARB_shader_image_size on Asahi
  - GL_ARB_shader_storage_buffer_object on Asahi
  - GL_ARB_sample_shading on Asahi
  - GL_OES_sample_variables on Asahi
  - GL_OES_shader_multisample_interpolation on Asahi
  - GL_OES_gpu_shader5 on Asahi
  - EGL_ANDROID_blob_cache works when disk caching is disabled
  - VK_KHR_cooperative_matrix on RADV/GFX11+
- Drop patches fixed upstream:
  * U_clover-llvm-move-to-modern-pass-manager.patch
  * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch
- Refresh patches with quilt.
- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="sndirsch@suse.com" date="1704542400">- Update to bugfix release 23.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.2.html</changelog>
  <changelog author="sndirsch@suse.com" date="1704974400">-  Update to bugfix release 23.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.3.html</changelog>
  <changelog author="sndirsch@suse.com" date="1705752000">- let Mesa-dri require libvulkan1 to get zink/swrast driver
  fallbacks working (hopefully); probably related:
  https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed1372cda6a7b55d964d</changelog>
  <changelog author="sndirsch@suse.com" date="1705752001">- u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch
  u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch
  python36-buildfix.patch
  * fixes build against python 3.6</changelog>
  <changelog author="sndirsch@suse.com" date="1705752002">- python36-buildfix.patch
  * src/freedreno/registers/gen_header.py: hopefully fixes aarch64
    build</changelog>
  <changelog author="sndirsch@suse.com" date="1705924800">- split python36-buildfix.patch into two patches python36-buildfix1.patch
  and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6
  since on newer python releases than 3.6 it changes behaviour to
  remove required=True option</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- Update to bugfix release 23.3.4
  - -&gt; https://docs.mesa3d.org/relnotes/23.3.4.html</changelog>
  <changelog author="sndirsch@suse.com" date="1752148800">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
</package>
<package pkgid="3a2964227d946c4c627873dcacaed583fca4c861ae8198a096eda23c8a57eefaa8d2b57e705153b0e2da978b32ceb9211c12e39bdab619df17a81a404515b703" name="libgcc_s1-debuginfo" arch="aarch64">
  <version epoch="0" ver="14.3.0+git11799" rel="slfo.1.1_1.1"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="6be227e8a257b2804890ab281e8c56f751897d1c967bb331865f18c2095aac25cc8b129d494bdb53a226769a479769babf2d1e2da51e1e5448fa0b8e3d503f49" name="libgcrypt-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10.3" rel="slfo.1.1_3.1"/>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to 1.10.1:
  * Bug fixes:
  - Fix minor memory leaks in FIPS mode.
  - Build fixes for MUSL libc.
  * Other:
  - More portable integrity check in FIPS mode.
  - Add X9.62 OIDs to sha256 and sha512 modules.
  * Add the hardware optimizations config file hwf.deny to
    the /etc/gcrypt/ directory. This file can be used to globally
    disable the use of hardware based optimizations.
  * Remove not needed separate_hmac256_binary hmac256 package</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="pmonreal@suse.com" date="1681214400">- Update to 1.10.2:
  * Bug fixes:
  - Fix Argon2 for the case output &gt; 64. [rC13b5454d26]
  - Fix missing HWF_PPC_ARCH_3_10 in HW feature. [rCe073f0ed44]
  - Fix RSA key generation failure in forced FIPS mode. [T5919]
  - Fix gcry_pk_hash_verify for explicit hash. [T6066]
  - Fix a wrong result of gcry_mpi_invm. [T5970]
  - Allow building with --disable-asm for HPPA. [T5976]
  - Allow building with -Oz. [T6432]
  - Enable the fast path to ChaCha20 only when supported. [T6384]
  - Use size_t to avoid counter overflow in Keccak when directly
    feeding more than 4GiB. [T6217]
  * Other:
  - Do not use secure memory for a DRBG instance. [T5933]
  - Do not allow PKCS#1.5 padding for encryption in FIPS mode. [T5918]
  - Fix the behaviour for child process re-seeding in the DRBG. [rC019a40c990]
  - Allow verification of small RSA signatures in FIPS mode. [T5975]
  - Allow the use of a shorter salt for KDFs in FIPS mode. [T6039]
  - Run digest+sign self tests for RSA and ECC in FIPS mode. [rC06c9350165]
  - Add function-name based FIPS indicator function.
    GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION. This is not considered
    an ABI changes because the new FIPS features were not yet
    approved. [rC822ee57f07]
  - Improve PCT in FIPS mode. [rC285bf54b1a, rC4963c127ae, T6397]
  - Use getrandom (GRND_RANDOM) in FIPS mode. [rCcf10c74bd9]
  - Disable RSA-OAEP padding in FIPS mode. [rCe5bfda492a]
  - Check minimum allowed key size in PBKDF in FIPS mode. [T6039,T6219]
  - Get maximum 32B of entropy at once in FIPS mode. [rCce0df08bba]
  - Prefer gpgrt-config when available. [T5034]
  - Mark AESWRAP as approved FIPS algorithm. [T5512]
  - Prevent usage of long salt for PSS in FIPS mode. [rCfdd2a8b332]
  - Prevent usage of X9.31 keygen in FIPS mode. [rC392e0ccd25]
  - Remove GCM mode from the allowed FIPS indicators. [rC1540698389]
  - Add explicit FIPS indicators for hash and MAC algorithms. [T6376]
  * Release-info: https://dev.gnupg.org/T5905
  * Rebase FIPS patches:
  - libgcrypt-FIPS-SLI-hash-mac.patch
  - libgcrypt-FIPS-SLI-kdf-leylength.patch
  - libgcrypt-FIPS-SLI-pk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684756800">- FIPS: Merge the libgcrypt20-hmac package into the library and
  remove the "module is complete" trigger file .fips [bsc#1185116]
  * Remove libgcrypt-1.10.0-use-fipscheck.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- POWER: performance enhancements for cryptography [jsc#PED-5088]
  * Optimize Chacha20 and Poly1305 for PPC P10 LE: [T6006]
  - Chacha20/poly1305: Optimized chacha20/poly1305 for
    P10 operation [rC88fe7ac33eb4]
  - ppc: enable P10 assembly with ENABLE_FORCE_SOFT_HWFEATURES
    on arch-3.00 [rC2c5e5ab6843d]
  * Add patches:
  - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch
  - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add libgcrypt-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1700049600">- Update to 1.10.3:
  * Bug fixes:
  - Fix public key computation for other EdDSA curves. [rC469919751d6e]
  - Remove out of core handler diagnostic in FIPS mode. [T6515]
  - Check that the digest size is not zero in gcry_pk_sign_md and
    gcry_pk_verify_md. [T6539]
  - Make store an s-exp with \0 is considered to be binary. [T6747]
  - Various constant-time improvements.
  * Portability:
  - Use getrandom call only when supported by the platform. [T6442]
  - Change the default for --with-libtool-modification to never. [T6619]
  * Release-info: https://dev.gnupg.org/T6817
  * Remove patch upstream libgcrypt-1.10.0-out-of-core-handler.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700568000">- Re-create HMAC checksum after RPM build strips the library
  (bsc#1217058)</changelog>
  <changelog author="angel.yankov@suse.com" date="1749470400">- Security fix [bsc#1221107, CVE-2024-2236]
  * Add --enable-marvin-workaround to spec to enable workaround
  * Fix  timing based side-channel in RSA implementation ( Marvin attack )
  * Add libgcrypt-CVE-2024-2236_01.patch
  * Add libgcrypt-CVE-2024-2236_02.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761652800">- Fix running the test suite in FIPS mode [bsc#1246934]
  * Add libgcrypt-fix-pkcs12-test-in-FIPS-mode.patch
  * Rebase libgcrypt-FIPS-SLI-kdf-leylength.patch</changelog>
</package>
<package pkgid="b4f79ce286daed0f2caa96efe4bc10a0bd287a7d0e6a90056f2b28e07d7d66dd9e3ed605aa09bf3b4380a7a6b31ab242930d51743e499d564f45d813e5d167c8" name="libgcrypt20-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10.3" rel="slfo.1.1_3.1"/>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to 1.10.1:
  * Bug fixes:
  - Fix minor memory leaks in FIPS mode.
  - Build fixes for MUSL libc.
  * Other:
  - More portable integrity check in FIPS mode.
  - Add X9.62 OIDs to sha256 and sha512 modules.
  * Add the hardware optimizations config file hwf.deny to
    the /etc/gcrypt/ directory. This file can be used to globally
    disable the use of hardware based optimizations.
  * Remove not needed separate_hmac256_binary hmac256 package</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="pmonreal@suse.com" date="1681214400">- Update to 1.10.2:
  * Bug fixes:
  - Fix Argon2 for the case output &gt; 64. [rC13b5454d26]
  - Fix missing HWF_PPC_ARCH_3_10 in HW feature. [rCe073f0ed44]
  - Fix RSA key generation failure in forced FIPS mode. [T5919]
  - Fix gcry_pk_hash_verify for explicit hash. [T6066]
  - Fix a wrong result of gcry_mpi_invm. [T5970]
  - Allow building with --disable-asm for HPPA. [T5976]
  - Allow building with -Oz. [T6432]
  - Enable the fast path to ChaCha20 only when supported. [T6384]
  - Use size_t to avoid counter overflow in Keccak when directly
    feeding more than 4GiB. [T6217]
  * Other:
  - Do not use secure memory for a DRBG instance. [T5933]
  - Do not allow PKCS#1.5 padding for encryption in FIPS mode. [T5918]
  - Fix the behaviour for child process re-seeding in the DRBG. [rC019a40c990]
  - Allow verification of small RSA signatures in FIPS mode. [T5975]
  - Allow the use of a shorter salt for KDFs in FIPS mode. [T6039]
  - Run digest+sign self tests for RSA and ECC in FIPS mode. [rC06c9350165]
  - Add function-name based FIPS indicator function.
    GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION. This is not considered
    an ABI changes because the new FIPS features were not yet
    approved. [rC822ee57f07]
  - Improve PCT in FIPS mode. [rC285bf54b1a, rC4963c127ae, T6397]
  - Use getrandom (GRND_RANDOM) in FIPS mode. [rCcf10c74bd9]
  - Disable RSA-OAEP padding in FIPS mode. [rCe5bfda492a]
  - Check minimum allowed key size in PBKDF in FIPS mode. [T6039,T6219]
  - Get maximum 32B of entropy at once in FIPS mode. [rCce0df08bba]
  - Prefer gpgrt-config when available. [T5034]
  - Mark AESWRAP as approved FIPS algorithm. [T5512]
  - Prevent usage of long salt for PSS in FIPS mode. [rCfdd2a8b332]
  - Prevent usage of X9.31 keygen in FIPS mode. [rC392e0ccd25]
  - Remove GCM mode from the allowed FIPS indicators. [rC1540698389]
  - Add explicit FIPS indicators for hash and MAC algorithms. [T6376]
  * Release-info: https://dev.gnupg.org/T5905
  * Rebase FIPS patches:
  - libgcrypt-FIPS-SLI-hash-mac.patch
  - libgcrypt-FIPS-SLI-kdf-leylength.patch
  - libgcrypt-FIPS-SLI-pk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684756800">- FIPS: Merge the libgcrypt20-hmac package into the library and
  remove the "module is complete" trigger file .fips [bsc#1185116]
  * Remove libgcrypt-1.10.0-use-fipscheck.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- POWER: performance enhancements for cryptography [jsc#PED-5088]
  * Optimize Chacha20 and Poly1305 for PPC P10 LE: [T6006]
  - Chacha20/poly1305: Optimized chacha20/poly1305 for
    P10 operation [rC88fe7ac33eb4]
  - ppc: enable P10 assembly with ENABLE_FORCE_SOFT_HWFEATURES
    on arch-3.00 [rC2c5e5ab6843d]
  * Add patches:
  - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch
  - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add libgcrypt-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1700049600">- Update to 1.10.3:
  * Bug fixes:
  - Fix public key computation for other EdDSA curves. [rC469919751d6e]
  - Remove out of core handler diagnostic in FIPS mode. [T6515]
  - Check that the digest size is not zero in gcry_pk_sign_md and
    gcry_pk_verify_md. [T6539]
  - Make store an s-exp with \0 is considered to be binary. [T6747]
  - Various constant-time improvements.
  * Portability:
  - Use getrandom call only when supported by the platform. [T6442]
  - Change the default for --with-libtool-modification to never. [T6619]
  * Release-info: https://dev.gnupg.org/T6817
  * Remove patch upstream libgcrypt-1.10.0-out-of-core-handler.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700568000">- Re-create HMAC checksum after RPM build strips the library
  (bsc#1217058)</changelog>
  <changelog author="angel.yankov@suse.com" date="1749470400">- Security fix [bsc#1221107, CVE-2024-2236]
  * Add --enable-marvin-workaround to spec to enable workaround
  * Fix  timing based side-channel in RSA implementation ( Marvin attack )
  * Add libgcrypt-CVE-2024-2236_01.patch
  * Add libgcrypt-CVE-2024-2236_02.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761652800">- Fix running the test suite in FIPS mode [bsc#1246934]
  * Add libgcrypt-fix-pkcs12-test-in-FIPS-mode.patch
  * Rebase libgcrypt-FIPS-SLI-kdf-leylength.patch</changelog>
</package>
<package pkgid="4b2f288d335aac321367f90639da9136300bcc908c7714cef6bf0922350f0847d2c9d70f9d8bf6c4e91ac34c51f3c88f362971b0f47e24f6b6c33870d91f0ffe" name="libgdbm6-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.23" rel="slfo.1.1_1.3"/>
  <changelog author="astieger@suse.com" date="1534939200">- update to 1.18:
  * Fix directory entry validation
  * Fix improper use of GDBM_DEBUG macro
  * Fix spurious error from gdbm_dump and gdbm_export
  * Make sure gdbm_sync always returns a meaningful value
- includes changes from 1.17:
  * Fix bug in gdbm_dump function, it did not clear the
    GDBM_ITEM_NOT_FOUND error marker, which is set upon its normal
    termination
- changes upstreamed:
  * gdbm_close() and gdbm_sync() now return 0 on success. On error,
    they return -1 and set gdbm_errno and errno to the appropriate
    error codes - drop gdbm-close-and-sync-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1540987200">- update to 1.18.1:
  * Fix debian bug 910911: This restores backward compatibility with
    databases created by version 1.8 (and some later versions, with
    mmapped I/O disabled).</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- added patches
  Build with -no-common, [bsc#1160872]
  + gdbm-no-common.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582372800">- No longer recommend -lang: supplements are in use. Also add a
  explicit %%{name] = %%{version} Provides to aid supplements to do
  the right thing. We will lose the lang package Recommends for the
  compat package, but normally nobody will have only the compat
  package installed without the current package.</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 1.19
  * Pre-read the memory mapped regions on systems that support it.
  This speeds up operations on big databases.
  * gdbmtool: tagged initialization of structured data
  Initializers for structured data can be given in tagged form, e.g.:
    store somekey { status=2, id={a,u,x}, name="foo" }
  * Bugfixes:
  * * Preserve locking type during database reorganization
- modified patches
  % gdbm-no-build-date.patch (refreshed)
- deleted patches
  - gdbm-no-common.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1628510400">- version update to 1.20
  * New bucket cache
    The bucket cache support has been rewritten from scratch.  The new
    bucket cache code provides for significant speed up of search
    operations.
  * Change mmap prereading strategy
    Pre-reading of the memory mapper regions, introduced in version 1.19
    can be advantageous only when doing intensive look-ups on a read-only
    database.  It degrades performance otherwise, especially if doing
    multiple inserts.  Therefore, this version introduces a new flag
    to gdbm_open: GDBM_PREREAD.  When given, it enables pre-reading of
    memory mapped regions.
- modified patches
  % gdbm-no-build-date.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 1.22
  * Fix file header validation
  * Fix key verification in sequential access
  * Fix testing with DejaGNU 1.6.3
  * Fix stack overflow in print_usage
  * Fix a leak of avail entry on pushing a new avail block
  * New gdbmtool variables: errorexit, errormask, trace, timing
  * etc. see CHANGES
- modified patches
  % gdbm-no-build-date.patch (refreshed)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644148800">- update to 1.23:
  * Bucket cache switched from balanced tree to hash table
  * Speed up flushing the changed buckets on disk
  * New option codes for gdbm_setopt
  * Enable or disable automatic cache adjustment
- remove obsolete texinfo packaging macros</changelog>
  <changelog author="danilo.spinella@suse.com" date="1691496000">- Fix bsc#1209583, gdbm_load and gdbm_dump receive a SEGFAULT if
  run without arguments
  bsc1209583.patch</changelog>
  <changelog author="kukuk@suse.com" date="1701864000">- libgdbm_compat4: Fix libgdbm version of Conflicts [bsc#1217727]</changelog>
</package>
<package pkgid="73275e567e49138cee56be8ad80e90d6c6abcbbdda6c6f58ed2daecbee7ea3b3d931ecaeb573abbac41f3bfe57bc60a08a6aaf9d74ac97a5030a58b2ee6e9fdb" name="libgdbm_compat4-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.23" rel="slfo.1.1_1.3"/>
  <changelog author="astieger@suse.com" date="1534939200">- update to 1.18:
  * Fix directory entry validation
  * Fix improper use of GDBM_DEBUG macro
  * Fix spurious error from gdbm_dump and gdbm_export
  * Make sure gdbm_sync always returns a meaningful value
- includes changes from 1.17:
  * Fix bug in gdbm_dump function, it did not clear the
    GDBM_ITEM_NOT_FOUND error marker, which is set upon its normal
    termination
- changes upstreamed:
  * gdbm_close() and gdbm_sync() now return 0 on success. On error,
    they return -1 and set gdbm_errno and errno to the appropriate
    error codes - drop gdbm-close-and-sync-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1540987200">- update to 1.18.1:
  * Fix debian bug 910911: This restores backward compatibility with
    databases created by version 1.8 (and some later versions, with
    mmapped I/O disabled).</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- added patches
  Build with -no-common, [bsc#1160872]
  + gdbm-no-common.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582372800">- No longer recommend -lang: supplements are in use. Also add a
  explicit %%{name] = %%{version} Provides to aid supplements to do
  the right thing. We will lose the lang package Recommends for the
  compat package, but normally nobody will have only the compat
  package installed without the current package.</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 1.19
  * Pre-read the memory mapped regions on systems that support it.
  This speeds up operations on big databases.
  * gdbmtool: tagged initialization of structured data
  Initializers for structured data can be given in tagged form, e.g.:
    store somekey { status=2, id={a,u,x}, name="foo" }
  * Bugfixes:
  * * Preserve locking type during database reorganization
- modified patches
  % gdbm-no-build-date.patch (refreshed)
- deleted patches
  - gdbm-no-common.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1628510400">- version update to 1.20
  * New bucket cache
    The bucket cache support has been rewritten from scratch.  The new
    bucket cache code provides for significant speed up of search
    operations.
  * Change mmap prereading strategy
    Pre-reading of the memory mapper regions, introduced in version 1.19
    can be advantageous only when doing intensive look-ups on a read-only
    database.  It degrades performance otherwise, especially if doing
    multiple inserts.  Therefore, this version introduces a new flag
    to gdbm_open: GDBM_PREREAD.  When given, it enables pre-reading of
    memory mapped regions.
- modified patches
  % gdbm-no-build-date.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 1.22
  * Fix file header validation
  * Fix key verification in sequential access
  * Fix testing with DejaGNU 1.6.3
  * Fix stack overflow in print_usage
  * Fix a leak of avail entry on pushing a new avail block
  * New gdbmtool variables: errorexit, errormask, trace, timing
  * etc. see CHANGES
- modified patches
  % gdbm-no-build-date.patch (refreshed)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644148800">- update to 1.23:
  * Bucket cache switched from balanced tree to hash table
  * Speed up flushing the changed buckets on disk
  * New option codes for gdbm_setopt
  * Enable or disable automatic cache adjustment
- remove obsolete texinfo packaging macros</changelog>
  <changelog author="danilo.spinella@suse.com" date="1691496000">- Fix bsc#1209583, gdbm_load and gdbm_dump receive a SEGFAULT if
  run without arguments
  bsc1209583.patch</changelog>
  <changelog author="kukuk@suse.com" date="1701864000">- libgdbm_compat4: Fix libgdbm version of Conflicts [bsc#1217727]</changelog>
</package>
<package pkgid="fc0c77dc11350ff350b90ffe48d333c27ce0774a4e73f36caeeea3539634ee05fd37da9a6cab7a1669a308176fd33d103002d05ece2dc4a0f3bf81d087b2a3a8" name="libgdk_pixbuf-2_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.12" rel="slfo.1.1_2.1"/>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
</package>
<package pkgid="9424a6786e46118859893edafd92d42c2cccbf839840baf42e830b4508cd26664093eb15376999a6cb445baf86523780305cc421f68288fdb9d17d075bbcc927" name="libgio-2_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="slfo.1.1_6.1"/>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="9cf70a6c32ad873e54013068484f255e3dabcb0c3c38b25111de96f0d21b46cb7267eb7b2afdaa8f632761398e707ac8d9d609b0229b5b83652e74ff0128da5d" name="libgirepository-1_0-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.78.1" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1677499200">- Update to version 1.75.6:
  + Documentation fixes.
  + Fix build when using GLib as a subproject.
  + Update the GIR data for GLib.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678795200">- Update to version 1.76.0:
  + Update the GIR data for GLib.
  + Documentation fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1678881600">- Update path regex used in gobjectintrospection.attr: the old one
  was not sufficiently escaped, which resulted in many more files
  being scanned than needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679486400">- Update to version 1.76.1:
  + Handle null default values.
  + Documentation fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680177600">- Run meson_test only on x86(_64) arches until upstream issue is
  fixed.
  https://gitlab.gnome.org/GNOME/gobject-introspection/-/issues/458</changelog>
  <changelog author="luc14n0@opensuse.org" date="1684670400">- Amend gi-find-deps.sh's javascript_pkg_requires function to
  extend GREP's filtering by passing the extended regex option flag
  (-E) and appending ? to the first two single quotes, accounting
  for quoted AND unquoted names before the colon. This should
  ensure that typelib() symbols provisioning are versioned where in
  some previous cases they weren't, but should've, causing a
  different version than the needed to be pulled. Those changes
  address the case where Sushi was requiring only
  typelib(GtkSource), rather than typelib(GtkSource) = 4. And
  without something else, in a default installation of openSUSE
  Tumbleweed, pulling in typelib-1_0-GtkSource-4, Sushi would fail
  to present previews in Nautilus (boo#1211546).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1685361600">- Adapt split_name_version2 function to deal with possible argument
  containing "pkg.require({" string before the wanted module name
  (a case from a JS script from gnome-weather). This is a side
  effect from the previous change to the pcre2grep regex in the
  javascript_pkg_requires function. Now, AWK should strip this
  string with the help of a sub() function call with the ^.*{
  regex.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 1.78.0:
  + Update the GIR data for GLib, GObject, and GIO
  + Add GObject as a dependency for the Cairo GIR
  + Add more tests for GI marshalling
  + Update regression test suite
  + Fix build on Windows for paths using '\' as a separator
  + Support different prefix for finding GIR data
  + Add GI_GIR_PATH environment variable for controlling GIR paths</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 1.78.1:
  + Avoid undefined behaviour in the Regress test suite</changelog>
  <changelog author="fcrozat@suse.com" date="1701259200">- Drop BuildRequires on pkgconfig(cairo)/pkgconfig(cairo-gobject),
  cairo is only needed for some tests.</changelog>
</package>
<package pkgid="624cdd2409245ddedb0c979fd1a42be69a506fccadbf80cf85f927da063d5106d7936e63d21705dc22b15d100d18cf8b7395a535df8e47c7ca3f4a4737217c0a" name="libglib-2_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="slfo.1.1_6.1"/>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="9207a85c1171a0a80f231056c5f22bf8ebf71ecdda364c93df698201485ae549c6a56a30baf012bb6cdffc5b72c04cf8db6975fa70dcbbe8086ccd856543e7a1" name="libglvnd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@suse.com" date="1634731200">- libglvnd.rpmlintrc
  * workaround for future buildcheck (boo#1191763)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637150400">- Disable asm on aarch64 Tumbleweed due to issue with BTI - boo#1188928</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 1.4.0:
  * tests cleanups
  * Update bin/symbols-check.py from mesa/mesa@6f854145
  * Remove extra paragraph from license text.
  * Add one more missing dep_x11_headers
  * Update uthash to v2.3.0
  * EGL: Add support for eglQueryDisplayAttribKHR and NV.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1642766400">- Re-enable asm on aarch64
- Add patch to fix run with BTI enabled on aarch64:
  * libglvnd-add-bti.patch - boo#1188928</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1645704000">- Update libglvnd-add-bti.patch from latest upstream submission</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- provide/obsolete Mesa-libGLESv1_CM1 and Mesa-libGLESv2-2 packages
  (bsc#1196576)</changelog>
  <changelog author="sndirsch@suse.com" date="1657800000">- let libglvnd require Mesa-dri so GL drivers are available on
  Wayland-only desktop installations (boo#1201474)</changelog>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 1.5.0:
  * Add BTI landing pads for aarch64
  * Set current thread state to NULL in teardown
  * Moving setspecific to before DestroyThreadState
  * Fix a memory leak in libGLdispatch
  * Use assembly stubs on armv6
- drop libglvnd-add-bti.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 1.6.0:
  * Read gl.symbols when generating stubs for libGL.so
  * Update GL headers and XML files
  * Add support for loongarch64
  * GLX: Fix assembly stubs for x32
  * Fix pthreads lookup on FreeBSD</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697025600">- Update to 1.7.0:
  * meson.build: error out on unsupported OSes
  * Update bin/symbols-check.py from mesa/mesa@9d42e31b
  * EGL/libeglcurrent: fix crash on library unload
  * HGL: add Haiku libGL.so implementation based on EGL
  * symbols-check: Add Haiku platform symbols
  * tests/egl: Fix LIBRARY_PATH on Haiku</changelog>
</package>
<package pkgid="c3e0b76ca4f4b87aab5b8886a718de90a5b180beaafa48faa0829b2fa5a3fd9440e19248cc3511e9cecc598210bbc2c158ede4a3b38048425a7332885f70a062" name="libglvnd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="slfo.1.1_1.2"/>
  <changelog author="sndirsch@suse.com" date="1634731200">- libglvnd.rpmlintrc
  * workaround for future buildcheck (boo#1191763)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637150400">- Disable asm on aarch64 Tumbleweed due to issue with BTI - boo#1188928</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 1.4.0:
  * tests cleanups
  * Update bin/symbols-check.py from mesa/mesa@6f854145
  * Remove extra paragraph from license text.
  * Add one more missing dep_x11_headers
  * Update uthash to v2.3.0
  * EGL: Add support for eglQueryDisplayAttribKHR and NV.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1642766400">- Re-enable asm on aarch64
- Add patch to fix run with BTI enabled on aarch64:
  * libglvnd-add-bti.patch - boo#1188928</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1645704000">- Update libglvnd-add-bti.patch from latest upstream submission</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- provide/obsolete Mesa-libGLESv1_CM1 and Mesa-libGLESv2-2 packages
  (bsc#1196576)</changelog>
  <changelog author="sndirsch@suse.com" date="1657800000">- let libglvnd require Mesa-dri so GL drivers are available on
  Wayland-only desktop installations (boo#1201474)</changelog>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 1.5.0:
  * Add BTI landing pads for aarch64
  * Set current thread state to NULL in teardown
  * Moving setspecific to before DestroyThreadState
  * Fix a memory leak in libGLdispatch
  * Use assembly stubs on armv6
- drop libglvnd-add-bti.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 1.6.0:
  * Read gl.symbols when generating stubs for libGL.so
  * Update GL headers and XML files
  * Add support for loongarch64
  * GLX: Fix assembly stubs for x32
  * Fix pthreads lookup on FreeBSD</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697025600">- Update to 1.7.0:
  * meson.build: error out on unsupported OSes
  * Update bin/symbols-check.py from mesa/mesa@9d42e31b
  * EGL/libeglcurrent: fix crash on library unload
  * HGL: add Haiku libGL.so implementation based on EGL
  * symbols-check: Add Haiku platform symbols
  * tests/egl: Fix LIBRARY_PATH on Haiku</changelog>
</package>
<package pkgid="48224798965320ec591de2d7fe04842fac97c8745894c25a110f2696e8060314d9922b8838463007a8b3cef482d14ad64e8e12107c0b2f76042568597f251c57" name="libgmodule-2_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="slfo.1.1_6.1"/>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="c4b6b702ca5e30cd9e4121c5161cc4ac8941de9d3e930de7e34c6c45341569bee0909ed9b6013da1065dcdd707bb61c29c91b45010e91510a0fc1bb9dd05991d" name="libgmp10-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.3.0" rel="slfo.1.1_1.5"/>
  <changelog author="andreas.stieger@gmx.de" date="1579435200">- GMP 6.2.0:
  * New C++ functions factorial, primorial and fibonacci for mpz_class
  * Functions to detect primality now substitute the first 24 Miller-Rabin
    iterations with the BPSW test
  * Mini-GMP: new functions mpz_2fac_ui and mpz_mfac_uiui.
  * Mini-GMP: mpz_sizeinbase, mpz_get_str, and mpz_set_str now support bases up
    to 62.
  * various bug fixes
  * Major speedup on AMD Ryzen and Epyc, IBM POWER9, 64-bit ARM CPUs
    from assembly code
  * Speedups from reimplementations
- drop patches:
  * gmp-6.1.2-conftest.patch, upstream
  * gmp-noexec.diff, upstream
  * floating-point-format-no-lto.patch, similar change</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Remove broken packaged libgmp.a just containing LTO bytecode.</changelog>
  <changelog author="coolo@suse.com" date="1590494400">- correct license statement (library itself is no GPL-3.0)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606996800">- GMP 6.2.1:
  * A possible overflow of type int is avoided for mpz_cmp on huge
    operands
  * Overflows are more carefully detected and reported for
    mpz_pow_ui
  * Fix a bug in longlong.h for aarch64 sub_ddmmss
  * mini-gmp: mpz_out_str and mpq_out_str now correctly handle out
    of range bases
  * C90 compliance
  * Support for more processors</changelog>
  <changelog author="rguenther@suse.com" date="1607515200">- Add gmp-6.2.1-arm64-invert_limb.patch [bsc#1179751]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1618056000">- do not break SLE 12 build when applying spec-cleaner</changelog>
  <changelog author="rguenther@suse.com" date="1618920000">- Compute FIPS hmac for libgmp.so.10 [bsc#1184555]</changelog>
  <changelog author="rguenther@suse.com" date="1637064000">- Add gmp-6.2.1-CVE-2021-43618.patch to fix buffer overflow on
  malformed input to mpz_inp_raw.  [bsc#1192717, CVE-2021-43618]</changelog>
  <changelog author="rguenther@suse.com" date="1691150400">- GMP 6.3.0
  * A possible overflow of type int is avoided for mpz_cmp on huge operands.
  * A possible error condition when a malformed file is read with mpz_inp_raw
    is now correctly handled.
  * New public function mpz_prevprime, companion of the existing mpz_nextprime.
  * New documented pointer types mpz_ptr, mpz_srcptr, and similar for other
    GMP types. Refer to the manual for full list and suggested usage. These
    types have been present in gmp.h at least since GMP-4.0, but previously
    not advertised to users.
  * Support for 64-bit Arm under Macos.
  * Support for the loongarch64 CPU family.
  * Support for building with LTO, link-time optimisations.
  * New special code for base = 2 in mpz_powm reduces the average time for
    the functions that test primality.
  * Speedup for the function mpz_nextprime on large operands.
  * Speedup for multiplications (some sizes only) thanks to new internal
    functions to compute small negacyclic products.
  * Special assembly code for IBM z13 and later "mainframe" CPUs, resulting
    in a huge speedup.
  * Improved assembly for several 64-bit x86 CPUs, Risc-V, 64-bit Arm.
- Removed gmp-6.2.1-CVE-2021-43618.patch which is included in the
  new release.</changelog>
  <changelog author="rguenther@suse.com" date="1692705600">- Add gmp-6.3.0-s390x-fix.patch to fix s390x optimized code on z13.</changelog>
</package>
<package pkgid="f9bb87c1990b9a3690153b1ff0e442f0542b6c8f23c8642199f0287234b157cd90abdde2d91ba61919d686a01636749bfdc67447a1885b0ee0d0a81b85a0bb28" name="libgnutls30-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.8.3" rel="slfo.1.1_6.1"/>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="efdcda7b7a83c311e53ea5a04cb31465170b544a3403beab94ba18784c09305faf49ccf705c1d383f8c3d98074fba6f13564b0978b76173e17127a0cbaabde71" name="libgobject-2_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="slfo.1.1_6.1"/>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="ad13e5dc4dce33f197d3403f728c701e549eab8c52786ca32200811ab77935925298e817339b6ba35f792a8483d48c1b3396e7015fd0e2cf5b16066251529f44" name="libgomp1-debuginfo" arch="aarch64">
  <version epoch="0" ver="14.3.0+git11799" rel="slfo.1.1_1.1"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="81682a8f6d3b98bde3e2c204d81fc8969a3369679fa777fde76f91760b0565274b2d0bb72f6ecafaf21859eab8c32ccf5a2df7c6aed61a484f93d2804a7e6f06" name="libgpg-error-debugsource" arch="aarch64">
  <version epoch="0" ver="1.47" rel="slfo.1.1_1.3"/>
  <changelog author="andreas.stieger@gmx.de" date="1590926400">- Update to 1.38:
  * New option parser features to implement system wide
    configuration files
  * New functions to build file names
  * New function to help reallocating arrays
  * Protect gpgrt_inc_errorcount against counter overflow
- drop needless autotools build dependencies that were added for
  gawk5.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Update to 1.39:
  * "gpg-error --lib-version" works again.
  * New function gpgrt_fcancel as alternative to gpgrt_close. This
    function avoid flushing out buffered data and also tries to delete
    a newly created file.
  * Update the gnupg project keyring
  * Interface changes relative to the 1.38 release:
  - gpgrt_fcancel: NEW.</changelog>
  <changelog author="dmueller@suse.com" date="1611576000">- update to 1.41:
  * Fixes another glitch in the "ignore" meta command.
  * Fixes two typos in the German translation.
  * New function gpgrt_access.
  * Make "ignore" meta command work correctly in the option parser.
  * Interface changes relative to the 1.39 release:
  gpgrt_access                     NEW.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 1.42:
  * Improve cross-compiling support
  * Improve $libdir determination by gpgrt-config
  * Support --disable-thread by gen-lock-obj.sh
  * Interface changes relative to the 1.40 release
    GPG_ERR_SOURCE_TPM2D</changelog>
  <changelog author="jengelh@inai.de" date="1624017600">- Drop --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pmonreal@suse.com" date="1636113600">- Update to 1.43:
  * Fix for building against GNU libc 2.34.
  * Fix gpgrt-config problems.
  * Fix gpgrt_free for legacy platforms.
  * Fix truncation of error message in the middle of a character.
  * Fix the --disable-threads configure options.
  * Improve lock-obj generation for cross-builds.
  * Improve cross-builds.
  * Improve gpgrt_wait_processes.</changelog>
  <changelog author="pmonreal@suse.com" date="1643803200">- Update to 1.44:
  * Fix dependency to gpg-error-config-test.sh.
  * Run the posix locking test only on supported platforms.
  * Detect Linux systems using musl.
  * Fix gpg-error-config-test for PKG_CONFIG_LIBDIR.
  * Fix returning of option attributes for options with args.
  * Add Turkish translations.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649332800">- update to 1.45:
  * gpgrt_access and gpgrt_mkdir now support file names longer than
    MAX_PATH</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Update to 1.46:
  * Support for bidirectional pipes under Windows.
  * REG_DWORD types are now support in the Windows Registry.
  * Added ES_SYSHD_SOCK support for gpgrt_sysopen under Windows.
  * Fixed gpgrt_log_get_fd for the file case.
  * Avoids header problem with C11 and "noreturn".
  * The gpg-error-config command is not installed by default, because
    it is now replaced by use of pkg-config/gpgrt-config with
    gpg-error.pc.  Supply --enable-install-gpg-error-config configure
    option, if it's really needed.
  * Fixed support of posix-lock for FreeBSD.
  * Build fixes for some Mingw tool chain versions.
  * Removed remaining support for WindowsCE.
  * Updated config.guess, config.sub, and config.rpath.
  * gpg-error-config is now only installed when enabled.
  * System paths are now stripped from --cflags --and --libs.</changelog>
  <changelog author="pmonreal@suse.com" date="1681300800">- Update to 1.47:
  * New error codes for PUKs and reset codes. [T6421]
  * Avoid segv in logging with improper use of the "socket://".
  * Fixed translation of argparse's internal option --help.
  * Interface changes relative to the 1.46 release:
  - GPG_ERR_SOURCE_TKD             NEW.
  - GPG_ERR_BAD_PUK                NEW.
  - GPG_ERR_NO_RESET_CODE          NEW.
  - GPG_ERR_BAD_RESET_CODE         NEW.
  - GPGRT_SPAWN_KEEP_STDIN         NEW.
  - GPGRT_SPAWN_KEEP_STDOUT        NEW.
  - GPGRT_SPAWN_KEEP_STDERR        NEW.
  - GPGRT_SPAWN_INHERIT_FILE       NEW.
  * Release-info: https://dev.gnupg.org/T6231</changelog>
</package>
<package pkgid="fce8c2bab175a77d2a09ce0ab38089928d8d598d6e5acfdb2d2e10d0292a2b8de1d625a1b487ce55573f325eaccb3f3a9da66d7c4be3b2bb71bb7b936c02246a" name="libgpg-error0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.47" rel="slfo.1.1_1.3"/>
  <changelog author="andreas.stieger@gmx.de" date="1590926400">- Update to 1.38:
  * New option parser features to implement system wide
    configuration files
  * New functions to build file names
  * New function to help reallocating arrays
  * Protect gpgrt_inc_errorcount against counter overflow
- drop needless autotools build dependencies that were added for
  gawk5.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Update to 1.39:
  * "gpg-error --lib-version" works again.
  * New function gpgrt_fcancel as alternative to gpgrt_close. This
    function avoid flushing out buffered data and also tries to delete
    a newly created file.
  * Update the gnupg project keyring
  * Interface changes relative to the 1.38 release:
  - gpgrt_fcancel: NEW.</changelog>
  <changelog author="dmueller@suse.com" date="1611576000">- update to 1.41:
  * Fixes another glitch in the "ignore" meta command.
  * Fixes two typos in the German translation.
  * New function gpgrt_access.
  * Make "ignore" meta command work correctly in the option parser.
  * Interface changes relative to the 1.39 release:
  gpgrt_access                     NEW.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 1.42:
  * Improve cross-compiling support
  * Improve $libdir determination by gpgrt-config
  * Support --disable-thread by gen-lock-obj.sh
  * Interface changes relative to the 1.40 release
    GPG_ERR_SOURCE_TPM2D</changelog>
  <changelog author="jengelh@inai.de" date="1624017600">- Drop --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pmonreal@suse.com" date="1636113600">- Update to 1.43:
  * Fix for building against GNU libc 2.34.
  * Fix gpgrt-config problems.
  * Fix gpgrt_free for legacy platforms.
  * Fix truncation of error message in the middle of a character.
  * Fix the --disable-threads configure options.
  * Improve lock-obj generation for cross-builds.
  * Improve cross-builds.
  * Improve gpgrt_wait_processes.</changelog>
  <changelog author="pmonreal@suse.com" date="1643803200">- Update to 1.44:
  * Fix dependency to gpg-error-config-test.sh.
  * Run the posix locking test only on supported platforms.
  * Detect Linux systems using musl.
  * Fix gpg-error-config-test for PKG_CONFIG_LIBDIR.
  * Fix returning of option attributes for options with args.
  * Add Turkish translations.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649332800">- update to 1.45:
  * gpgrt_access and gpgrt_mkdir now support file names longer than
    MAX_PATH</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Update to 1.46:
  * Support for bidirectional pipes under Windows.
  * REG_DWORD types are now support in the Windows Registry.
  * Added ES_SYSHD_SOCK support for gpgrt_sysopen under Windows.
  * Fixed gpgrt_log_get_fd for the file case.
  * Avoids header problem with C11 and "noreturn".
  * The gpg-error-config command is not installed by default, because
    it is now replaced by use of pkg-config/gpgrt-config with
    gpg-error.pc.  Supply --enable-install-gpg-error-config configure
    option, if it's really needed.
  * Fixed support of posix-lock for FreeBSD.
  * Build fixes for some Mingw tool chain versions.
  * Removed remaining support for WindowsCE.
  * Updated config.guess, config.sub, and config.rpath.
  * gpg-error-config is now only installed when enabled.
  * System paths are now stripped from --cflags --and --libs.</changelog>
  <changelog author="pmonreal@suse.com" date="1681300800">- Update to 1.47:
  * New error codes for PUKs and reset codes. [T6421]
  * Avoid segv in logging with improper use of the "socket://".
  * Fixed translation of argparse's internal option --help.
  * Interface changes relative to the 1.46 release:
  - GPG_ERR_SOURCE_TKD             NEW.
  - GPG_ERR_BAD_PUK                NEW.
  - GPG_ERR_NO_RESET_CODE          NEW.
  - GPG_ERR_BAD_RESET_CODE         NEW.
  - GPGRT_SPAWN_KEEP_STDIN         NEW.
  - GPGRT_SPAWN_KEEP_STDOUT        NEW.
  - GPGRT_SPAWN_KEEP_STDERR        NEW.
  - GPGRT_SPAWN_INHERIT_FILE       NEW.
  * Release-info: https://dev.gnupg.org/T6231</changelog>
</package>
<package pkgid="e16ab24eb0adb8959421895258c22597c03f65de9c3ca5159b80b035a2f9553c56f10c2cd5f72ac8aeff1b98e301ad20bac571c2433691af9cb7a3bbbb1b77ca" name="libgpgme11-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.23.0" rel="slfo.1.1_2.1"/>
  <changelog author="christophe@krop.fr" date="1681214400">- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets</changelog>
  <changelog author="pmonreal@suse.com" date="1682078400">- Update to 1.20.0:
  * On Windows, the gettext functions provided by gpgrt are switched
    into utf8 mode, so that all localized texts returned by GpgME or
    gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
  * Key::canSign now returns false for OpenPGP keys without signing
    (sub)key. [T6456]
  * The new macOS Homebrew location is now by default supported. [T6440]
  * Fix regression in 1.19.0.
  * Fix invocation of gpgtar on Windows.
  * Interface changes relative to the 1.19.0 release:
  - gpgme_subkey_t              EXTENDED: New field 'can_renc'.
  - gpgme_subkey_t              EXTENDED: New field 'can_timestamp'.
  - gpgme_subkey_t              EXTENDED: New field 'is_group_owned'.
  - cpp: Subkey::canRenc        NEW.
  - cpp: Subkey::canTimestamp   NEW.
  - cpp: Subkey::isGroupOwned   NEW.
  - cpp: Key::canReallySign     DEPRECATED.
  * Release-info: https://dev.gnupg.org/T6463</changelog>
  <changelog author="pmonreal@suse.com" date="1688990400">- Update to 1.21.0
  * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign
    to allow writing the output directly to a file. [T6530]
  * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the
    input data directly from files. [T6530]
  * For key signing and uid revoking allow an empty user id. [rMfbc3963d62]
  * Pass an input-size-hint also to the gpgsm engine. [T6534]
  * qt: Allow writing the created archives directly to a file. [T6530]
  * qt: Allow reading the signed/encrypted archive to decrypt
    or verify directly from a file. [T6530]
  * qt: Qt Jobs working with QIODeviceDataProvider now properly
    handle input-size hints and progress for files larger.
    2^32 bytes in 32 bit builds. [T6534]
  * cpp: Error::isCanceled now also returns true for error code
    GPG_ERR_FULLY_CANCELED. [T6510]
  * python: Fix wrong use of write. [T6501]
  * Interface changes relative to the 1.20.0 release:
  - cpp: Data::setFlag                            NEW.
  - cpp: Data::setSizeHint                        NEW.
  - qt: Job::startIt                              NEW.
  - qt: DecryptVerifyArchiveJob::setInputFile     NEW.
  - qt: DecryptVerifyArchiveJob::inputFile        NEW.
  - qt: EncryptArchiveJob::setRecipients          NEW.
  - qt: EncryptArchiveJob::recipients             NEW.
  - qt: EncryptArchiveJob::setInputPaths          NEW.
  - qt: EncryptArchiveJob::inputPaths             NEW.
  - qt: EncryptArchiveJob::setOutputFile          NEW.
  - qt: EncryptArchiveJob::outputFile             NEW.
  - qt: EncryptArchiveJob::setEncryptionFlags     NEW.
  - qt: EncryptArchiveJob::encryptionFlags        NEW.
  - qt: SignArchiveJob::setSigners                NEW.
  - qt: SignArchiveJob::signers                   NEW.
  - qt: SignArchiveJob::setInputPaths             NEW.
  - qt: SignArchiveJob::inputPaths                NEW.
  - qt: SignArchiveJob::setOutputFile             NEW.
  - qt: SignArchiveJob::outputFile                NEW.
  - qt: SignEncryptArchiveJob::setSigners         NEW.
  - qt: SignEncryptArchiveJob::signers            NEW.
  - qt: SignEncryptArchiveJob::setRecipients      NEW.
  - qt: SignEncryptArchiveJob::recipients         NEW.
  - qt: SignEncryptArchiveJob::setInputPaths      NEW.
  - qt: SignEncryptArchiveJob::inputPaths         NEW.
  - qt: SignEncryptArchiveJob::setOutputFile      NEW.
  - qt: SignEncryptArchiveJob::outputFile         NEW.
  - qt: SignEncryptArchiveJob::setEncryptionFlags NEW.
  - qt: SignEncryptArchiveJob::encryptionFlags    NEW.</changelog>
  <changelog author="schwab@suse.de" date="1691064000">- Run testsuite in qemu build</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Update to 1.22.0:
  * Prevent wrong plaintext when verifying clearsigned signature.
  * Return bad data error instead of general error on unexpected data.
  * Take care of offline mode for all operations of gpgsm engine.
  * Prepare the use of the forthcoming libassuan version 3.
  * New configure option --with-libtool-modification.
  * cpp: Expose gpgme_decrypt_result_t.is_mime.
  * qt: Clean up after failure or cancel of sign/encrypt archive operation.
  * qt: Add setInputEncoding to QGpgMe::EncryptJob.
  * qt: Make toLogString helper public.
  * Interface changes relative to the 1.21.0 release:
  - qt: EncryptJob::setInputEncoding           NEW.
  - qt: DecryptionResult::isMime               NEW.
  - qt: toLogString                            NEW.</changelog>
  <changelog author="pmonreal@suse.com" date="1692705601">- Fix builds with qt and qt6 [T6673]:
  * qt,tests: Fix build in source directory. Include Qt binding
    sources before C++ binding sources and C sources. This fixes
    the problem that the debug.h in the C sources was found before
    the one in the Qt bindings.
  * build: Suggest out-of-source build. Suggest to run configure
    from a build subdirectory.
  * Add patches:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="christophe@krop.fr" date="1695470400">- Use GCC 12 for building the Qt6 library. The default compiler
  is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="christophe@krop.fr" date="1695470401">- Use GCC 12 for building the Qt6 library on Leap 15. The
  default compiler is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1698235200">- Update to 1.23.0:
  * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559]
  * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705]
  * New key capability flags has_*. [T6748]
  * gpgme-tool: Support use of Windows HANDLE. [T6634]
  * qt: Support refreshing keys via WKD. [T6672]
  * qt: Handle cancel in changeexpiryjob. [T6754]
  * Remove patches fixed upstream:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="28a9f1efc3eba8a6416547ab03538bd34ad1bbd3248b9be3663d282b14a3e516f4fe949569bb5055cc3e683ae7b5152404affdaa63a9628ea1d750a3c8559055" name="libgraphene-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1519387200">- Update to version 1.8.0:
  + No new API, this cycle, but it's time to spin a new stable
    release.
  + The major news for this release is that we dropped the
    Autotools build from the repository; Graphene is now built
    exclusively with Meson.
  + We've added various fixes to the build on macOS, in order to
    maintain compatibility with the old Autotools build.
  + The variables in the pkg-config file that expose the SIMD
    functionality built inside Graphene have been updated, to
    ensure that they can be easily consumed by other projects;
    instead of a single string that needs to be split, we now
    expose boolean variables for all SIMD implementations.
  + We've also improved the ability to use Graphene as a Meson
    sub-project; this allows Meson to check out, build, and depend
    on Graphene when building complex projects, like GTK. This is
    really useful inside CI pipelines, as it minimises the amount
    of separate steps needed when setting up the build.
- Update options passed to meson, following upstream changes:
  gtk_doc=true, gobject_types=true, introspection=true,
  gcc_vector=true, sse2=true, arm-neon=true, tests=true and
  benchmarks=true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1528977600">- Update to version 1.8.2:
  + The main change is that we've now disabled SIMD optimisations
    on 32 bit Intel architectures; there aren't many of those left,
    and in general compilers have been less than stellar when
    supporting SIMD types on them. This is especially problematic
    when it comes to using Graphene types inside other allocated
    structures, where SIMD alignment rules break system allocators
    on platforms like Windows. To avoid introducing weird bugs, if
    you're on 32 bit IA, you're only going to have access to the
    scalar SIMD implementation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553515200">- Update to version 1.8.6:
  + Bug fixes, bug fixes everywhere! Also: documentation changes to
    clarify what we do behind the veil of the various matrix
    multiplication functions. Hopefully, this should help people
    using Graphene especially when it comes to integration with
    other libraries.
  + Fix matrix multiplication when the result matrix is also one of
    the operands.
  + Fix check when converting a 4x4 matrix into an affine
    transformation matrix.
  + Fix interpolation between matrices with a perspective
    component.
  + Documentation fixes for matrix/matrix and matrix/vector
    multiplication operators.
- Changes from version 1.8.4:
  + Mostly a bug fixing release, with an especially glaring bug fix
    in the point transformation function of graphene_matrix_t that
    was found thanks to GTK 4. Now the function is covered by the
    test suite, so it should not regress.
  + Another major fix is the ensuring that we have a description of
    the SIMD types through introspection, which means that language
    bindings can finally know how big every other structure using
    them is. The SIMD API is still not available through
    introspection, as it's a pure C convenience.
  + Require Meson ≥ 0.48.0.
  + Fix matrix/point transformation.
  + Build fixes for MSVC.
  + Introspection fixes for bool.
  + Fix the InitOnce checks on Windows.
  + Correctly parse SIMD types for introspection.
  + Build fixes for the pkg-config file.
  + Documentation fixes:
  - Clarify matrix/vector/point multiplication.
  - Clarify plane description.
  - Clarify the units for the matrix skew factors.
  - Document use of graphene-gobject with Meson.</changelog>
  <changelog author="luke@ljones.dev" date="1567771200">- Update to version 1.9.6:
  + Add radians based initialisers for graphene_euler_t.
  + Use pragma once for the header inclusion guard.
  + Remove unused function (#159)
  + Add multiply(), scale(), and add() operators to
    graphene_quaternion_t.
  + Add lerp() operator to all vector types.
  + Add graphene_plane_transform()
  + Documentation updates for graphene_ray_t.
  + Fix graphene_box_get_center() and.
    graphene_box_get_bounding_sphere() (#165)
  + Ensure that we detect empty or infinite boxes in the.
    graphene_box_t API.
- Changes from version 1.9.4:
  + Graphene now uses an ancillary library called µTest for its
    test suite; this means it's possible to build and run the test
    suite without necessarily depending on GLib.
  + the conversion of the Euler angles type to and from matrices and.
    quaternions has been rewritten from scratch, and should not only
    be finally correct, but it should also cover more use cases—namely
    the "proper" Euler angles as well as the Tait–Bryan angles.
  + the ARM NEON implementation of the SIMD types has been improved,
    fixed, and tested, so it's not marked as experimental any more.
  + Require Meson ≥ 0.50.1.
  + Fix graphene_quaternion_equal() to consider the orientation, not
    just the component equality.
  + Fix graphene_quaternion_slerp() to always interpolate along the
    shortest path.
  + Re-implement the conversion of graphene_euler_t to and from
    graphene_matrix_t and graphene_quaternion_t.
  + Add graphene_rectangle_get_area()
  + Document restrictions of graphene_rect_round(), and deprecate the function.
  + Add graphene_rect_round_extents()
  + Port the test suite from GLib's testing utilities to µTest.
  + Remove internal floating point comparisons.
  + Improve the NEON extensions detection code.
  + Fix comparison operators for graphene_simd4f_t on ARM using the
    NEON extensions.
  + Remove the "experimental" compiler warning from the ARM NEON
    implementation of graphene_simd4f_t.
- Changes from version 1.9.2:
  + Add graphene_rect_scale() method.
  + Fix warning from Meson by dropping unnecessary argument to.
    configure_file()
  + Clean up arguments of pkgconfig.generate()
  + Add equality operators to graphene_matrix_t.
  + Add getters for translation components of a graphene_matrix_t.
  + Use darwin_versions argument instead of rolling our own.
  + Add GRAPHENE_RECT_INIT_ZERO</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 1.10.0:
  + API additions, mostly driven by Gthree:
  - Add graphene_matrix_decompose().
  - Add intersection methods to graphene_ray_t.
  - graphene_triangle_init_from_float().
  - graphene_triangle_get_uv().
  + Fix graphene_ray_transform().
  + Documentation fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_libexecdir} instead of %{_prefix}/lib: follow the package
  installer definition.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1592913600">- Update to version 1.10.2:
  + Disable SSE on 32bit builds on Windows with MSVC
  + Add more documentation on the conventions used by matrix
    operations
  + Fix Euler angles/matrix conversion
  + Various bugs fixed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611835200">- Pass conditional Darm_neon=false instead of Darm-neon=true to
  meson, fix build for armv7.
- Stop passing Dbenchmarks=true, no longer recognized nor used.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618488000">- Update to version 1.10.6:
  + Hide GRAPHENE_SIMD_S from the introspection data.
  + Nudge ray axis when intersecting a box.
- Changes from version 1.10.4:
  + Add ARM NEON support when building with Visual Studio.
  + Build fix on ARM64 Windows.
  + Drop deprecated "python3" Meson module.
  + Fix detection of non-intersecting boxes.
  + Only enable SSE2 on x86_64.
  + Use the compiler-appropriate alignment attributes.
  + Change introspection option to a yielding feature.
- Change -Dintrospection=true meson parameter to
  - Dintrospection=enabled: follow upstream build system changes.
- Wrap -Dsse2=true meson parameter into %ifarch x86_64: 32bit
  builds for example do not support sse2 (likely boo#1184678).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 1.10.8:
  + ray:
  - simplify NaN checking.
  - Improve intersection
  + Build fixes.
  + SIMD:
  - Make reciprocal operations 0-safe.
  - Add simplified scalar reciprocal.
  + tests:
  - Fix installed introspection test.
  - Add ray intersection unit.
  + Fix detection of AArch64.
  + Documentation fixes.</changelog>
</package>
<package pkgid="27d265824fab5b0ca03c3c8c8503aadd938df827a75f395c43390558dd2fdbb717feb8cb304534e345d65191d389107c7be8d8de7689960d0cb1e6da7487ac0b" name="libgraphite2-3-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="slfo.1.1_1.4"/>
  <changelog author="schwab@suse.de" date="1518696000">- gcc8.patch: return correct value from stream operator</changelog>
  <changelog author="pgajdos@suse.com" date="1520856000">- Update to 1.3.11:
- removed patches (upstreamed or not needed)
  * gcc8.patch (code commeted out)
  * graphite-nonvoid-return.patch (code commented out)
  * graphite2-python3_tests.patch (upstreamed)
  * graphite2-python3_tests_cornercases.patch (upstreamed
- refreshed patch
  * link-gcc-shared.diff
- fixes security issue: CVE-2018-7999 [bsc#1084850]
  + graphite2-CVE-2018-7999.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Use python3 everywhere
- Drop fonttools test dep as it pulls TON of py3 packages</changelog>
  <changelog author="pgajdos@suse.com" date="1540468800">- Update to 1.3.12:
    . Graphite no longer does dumb rendering for fonts with no smarts
    . Segment caching code removed. Anything attempting to use the
    segment cache gets given a regular face instead
    . Add libfuzzer support
    . Builds now require C++11
    . Improvements to Windows 64 bit builds
    . Support different versions of python including 32 bit and python 3
    . Various minor bug fixes
- refreshed patch
  % link-gcc-shared.diff
- removed patch
  - graphite2-CVE-2018-7999.patch (upstreamed)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576411200">- BuildIgnore shared-mime-info, pulled in by libglib-2_0-0. Required
  by gvfs to do mime detection, but not required for building.</changelog>
  <changelog author="elimat@opensuse.org" date="1597233600">- Update to 1.3.13:
  * Resolve minor spacing issue in rtl non-overlap kerning
  * python3 for graphite.py
  * Better fuzzing
  * Better building on windows</changelog>
  <changelog author="elimat@opensuse.org" date="1597233601">- Update to 1.3.14:
  * Bug fixes
  * Allow features to be hidden (for aliases)
  * Move to python3
  * Rename doc files from .txt to .asc
- Run spec-cleaner
  * Remove rpm groups
  * Use make macros
  * Use license macro
- Refresh patches:
  * link-gcc-shared.diff
  * graphite2-1.2.0-cmakepath.patch</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
  <changelog author="fstrba@suse.com" date="1643284800">- Fix license header so that it corresponds to SPDX abbreviation</changelog>
  <changelog author="pgajdos@suse.com" date="1695643200">- fixed license string [bsc#1207676]:
  LGPL-2.1-or-later OR MPL-2.0 OR GPL-2.0-or-later</changelog>
</package>
<package pkgid="66797bce63b5cd1c288b85abdd40689229879d33f5203457d0292b390ba5fdaa28ac670133fcc088e0eff9cb29ae2d0f590aa2a9a1e850abfebb6ac47b902c8a" name="libgstallocators-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop gst-plugins-base-audiobasesink-gap.patch and
  gstreamer-plugins-base-CVE-2024-4453.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="jonaski@opensuse.org" date="1724241600">- Add gst-plugins-base-decodebin3-collection-identity-check.patch:
  - Fixes a assertion causing crash on track change. Upstream bug:
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3742</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + pbutils: descriptions: use subsampling factor to get YUV
    subsampling
  + rtspconnection: Handle invalid argument properly
  + urisourcebin:
  - Actually drop EOS on old-school pad switch
  - Don't hold lock when emitting about-to-finish
  + gst-launch deadlock with two playbin3s
  + xvimagesink: Fix crash in pool on error</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)
  + CVE-2024-47607.patch (boo#1234455 CVE-2024-47607)</changelog>
  <changelog author="mgorse@suse.com" date="1752494400">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="2f599a261b6438e6d6667353a643b1674e30c371a480a9a818f0264bc0706aa4dfb8b7868f5ecadcd6252fda164b5a59621614631ddb7ae618a2d8a6429f692d" name="libgstapp-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop gst-plugins-base-audiobasesink-gap.patch and
  gstreamer-plugins-base-CVE-2024-4453.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="jonaski@opensuse.org" date="1724241600">- Add gst-plugins-base-decodebin3-collection-identity-check.patch:
  - Fixes a assertion causing crash on track change. Upstream bug:
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3742</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + pbutils: descriptions: use subsampling factor to get YUV
    subsampling
  + rtspconnection: Handle invalid argument properly
  + urisourcebin:
  - Actually drop EOS on old-school pad switch
  - Don't hold lock when emitting about-to-finish
  + gst-launch deadlock with two playbin3s
  + xvimagesink: Fix crash in pool on error</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)
  + CVE-2024-47607.patch (boo#1234455 CVE-2024-47607)</changelog>
  <changelog author="mgorse@suse.com" date="1752494400">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="181a06a2f429c5ed821fe4603595f303292814a3afe321974dd358a9ce1032272b2528bab100a2dcd283b3742e0eb21c0f87e4774cd04c48067c32bc83c38fee" name="libgstaudio-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop gst-plugins-base-audiobasesink-gap.patch and
  gstreamer-plugins-base-CVE-2024-4453.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="jonaski@opensuse.org" date="1724241600">- Add gst-plugins-base-decodebin3-collection-identity-check.patch:
  - Fixes a assertion causing crash on track change. Upstream bug:
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3742</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + pbutils: descriptions: use subsampling factor to get YUV
    subsampling
  + rtspconnection: Handle invalid argument properly
  + urisourcebin:
  - Actually drop EOS on old-school pad switch
  - Don't hold lock when emitting about-to-finish
  + gst-launch deadlock with two playbin3s
  + xvimagesink: Fix crash in pool on error</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)
  + CVE-2024-47607.patch (boo#1234455 CVE-2024-47607)</changelog>
  <changelog author="mgorse@suse.com" date="1752494400">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="d84d8e104b320230e0e4126b800a675cc8bd8a59e34b48076332377d267684be0db13c387124f5c9a17ef8ef9b55ebf3341fc0b8eb511bc9bd3be52952ec0e4a" name="libgstgl-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop gst-plugins-base-audiobasesink-gap.patch and
  gstreamer-plugins-base-CVE-2024-4453.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="jonaski@opensuse.org" date="1724241600">- Add gst-plugins-base-decodebin3-collection-identity-check.patch:
  - Fixes a assertion causing crash on track change. Upstream bug:
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3742</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + pbutils: descriptions: use subsampling factor to get YUV
    subsampling
  + rtspconnection: Handle invalid argument properly
  + urisourcebin:
  - Actually drop EOS on old-school pad switch
  - Don't hold lock when emitting about-to-finish
  + gst-launch deadlock with two playbin3s
  + xvimagesink: Fix crash in pool on error</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)
  + CVE-2024-47607.patch (boo#1234455 CVE-2024-47607)</changelog>
  <changelog author="mgorse@suse.com" date="1752494400">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="8a6799f82d6276730e80ca9ae8d5f6c5dfa4f8b833da7d9221a016911984590669825d402f1005482b620917802aed72e48c7d14d96df756ef8f1cc7fad6995e" name="libgstpbutils-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop gst-plugins-base-audiobasesink-gap.patch and
  gstreamer-plugins-base-CVE-2024-4453.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="jonaski@opensuse.org" date="1724241600">- Add gst-plugins-base-decodebin3-collection-identity-check.patch:
  - Fixes a assertion causing crash on track change. Upstream bug:
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3742</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + pbutils: descriptions: use subsampling factor to get YUV
    subsampling
  + rtspconnection: Handle invalid argument properly
  + urisourcebin:
  - Actually drop EOS on old-school pad switch
  - Don't hold lock when emitting about-to-finish
  + gst-launch deadlock with two playbin3s
  + xvimagesink: Fix crash in pool on error</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)
  + CVE-2024-47607.patch (boo#1234455 CVE-2024-47607)</changelog>
  <changelog author="mgorse@suse.com" date="1752494400">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="d7f7405ea02a4b515dc05645ba8dc2f0fbf773b806f4ab29ff5e6977bc5321d4a91bfa57e75ba9ae61e418acd3f752ae3ba0de19dc92515c555e608e45e632c3" name="libgstreamer-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_2.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + Highlighted bugfixes in 1.22.9
  - More Security fixes for the AV1 video codec parser
  - va: fixes for Mesa Gallium drivers in Mesa versions older
    than v23.2
  - v4l2src: Consider framerate during caps selection
  - v4l2codec: decoder fixes
  - rtspsrc: multicast fixes
  - camerabin viewfinder fixes
  - various bug fixes, build fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer
  - aggregator: fix use-after-free in queries processing
  - multiqueue: Ignore queue fullness for most events
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Rebase patches:
  * gstreamer-pie.patch
  * gstreamer-rpm-prov.patch
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="alarrosa@suse.com" date="1710158400">- Add patch to remove the (wrong) check for relocated library which
  is making gstreamer fail to find the gst-plugin-scanner helper
  binary, thus using the installation path set at build time
  (boo#1221150):
  * force-find-gst-plugin-scanner.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710158401">- Add patch from upstream to not install ptp-helper test executable
  * 0001-ptp-Dont-install-test-executable.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Replace the quick fix for boo#1221150 with the version submitted
  to upstream at
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/6322:
  * 0001-Canonicalize-the-library-path-returned-by-dladdr.patch
- Remove previous version of the fix for boo#1221150:
  * force-find-gst-plugin-scanner.patch
- Fix sed command to set the gst-plugin-scanner suffix correctly
- Add preventive checks for the sed commands that set the binary
  suffix so that they don't silently fail anymore.</changelog>
  <changelog author="pgajdos@suse.com" date="1714392000">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop 0001-Canonicalize-the-library-path-returned-by-dladdr.patch
  and 0001-ptp-Dont-install-test-executable.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + Highlighted bugfixes:
  - Fix APE and Musepack audio file and GIF playback with FFmpeg
    7.0
  - playbin3: Fix potential deadlock with multiple playbin3s with
    glimagesink used in parallel
  - qt6: various qmlgl6src and qmlgl6sink fixes and improvements
  - rtspsrc: expose property to force usage of non-compliant
    setup URLs for RTSP servers where the automatic fallback
    doesn't work
  - urisourcebin: gapless playback and program switching fixes
  - v4l2: various fixes
  - va: Fix potential deadlock with multiple va elements used in
    parallel
  - meson: option to disable gst-full for static-library build
    configurations that do not need this
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + gstreamer:
  - bin: Don't keep the object lock while setting a GstContext
    when handling NEED_CONTEXT
  - core: Log pad name, not just the pointer</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add CVE-2024-47606.patch: avoid integer overflow when allocating
  sysmem (boo#1234449 CVE-2024-47606).</changelog>
</package>
<package pkgid="675d23201e2e4e7d74d4a4233c9a2234d0e2499bbb6cfb6ea41051e42d705fa8d7e4edb9cfed1f843a12a3904c375b1bc9f128f2ee8f911edc8210fc87ce12d9" name="libgstriff-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop gst-plugins-base-audiobasesink-gap.patch and
  gstreamer-plugins-base-CVE-2024-4453.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="jonaski@opensuse.org" date="1724241600">- Add gst-plugins-base-decodebin3-collection-identity-check.patch:
  - Fixes a assertion causing crash on track change. Upstream bug:
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3742</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + pbutils: descriptions: use subsampling factor to get YUV
    subsampling
  + rtspconnection: Handle invalid argument properly
  + urisourcebin:
  - Actually drop EOS on old-school pad switch
  - Don't hold lock when emitting about-to-finish
  + gst-launch deadlock with two playbin3s
  + xvimagesink: Fix crash in pool on error</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)
  + CVE-2024-47607.patch (boo#1234455 CVE-2024-47607)</changelog>
  <changelog author="mgorse@suse.com" date="1752494400">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="c6265e05adc1cb31f2ebfce6ac56de8d2a1c28cc40fa0b30c16ca16ed8ddd2decfc3d7489db16df32195c1f781766daea372b5c8b893088d18c5e49d853bad82" name="libgsttag-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop gst-plugins-base-audiobasesink-gap.patch and
  gstreamer-plugins-base-CVE-2024-4453.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="jonaski@opensuse.org" date="1724241600">- Add gst-plugins-base-decodebin3-collection-identity-check.patch:
  - Fixes a assertion causing crash on track change. Upstream bug:
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3742</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + pbutils: descriptions: use subsampling factor to get YUV
    subsampling
  + rtspconnection: Handle invalid argument properly
  + urisourcebin:
  - Actually drop EOS on old-school pad switch
  - Don't hold lock when emitting about-to-finish
  + gst-launch deadlock with two playbin3s
  + xvimagesink: Fix crash in pool on error</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)
  + CVE-2024-47607.patch (boo#1234455 CVE-2024-47607)</changelog>
  <changelog author="mgorse@suse.com" date="1752494400">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="660502e8b7ef5e748e6e75fa3bef411df9808bf12e8c92d7abd81eff3e8ce2bcb06c0643cbcbcce2622627c94ab142bf67a08e2d099a1c1ea4f87f8c4d007f35" name="libgstvideo-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.7" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1719489600">- Update to version 1.24.5:
  + Highlighted bugfixes:
  - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc
    encoders
  - AV1 RTP payloader/depayloader fixes to work correctly with
    Chrome and Pion WebRTC
  - av1parse, av1dec error handling/robustness improvements
  - av1enc: Handle force-keyunit events properly for WebRTC
  - decodebin3: selection and collection handling improvements
  - hlsdemux2: Various fixes for discontinuities, variant
    switching, playlist updates
  - qml6glsink: fix RGB format support
  - rtspsrc: more control URL handling fixes
  - v4l2src: Interpret V4L2 report of sync loss as video signal
    loss
  - d3d12 encoder, memory and videosink fixes
  - vtdec: more robust error handling, fix regression
  - ndi: support for NDI SDK v6
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements
- Please see https://gstreamer.freedesktop.org/releases/1.24/ for
  changes between 1.24.0 and this version and even more in-depth
  info.
- Refresh patches with quilt.
- Drop gst-plugins-base-audiobasesink-gap.patch and
  gstreamer-plugins-base-CVE-2024-4453.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update to version 1.24.6:
  + Highlighted bugfixes:
  - Fix compatibility with FFmpeg 7.0.
  - qmlglsink: Fix failure to display content on recent Android
    devices.
  - adaptivedemux: Fix handling of closed caption streams.
  - cuda: Fix runtime compiler loading with old CUDA tookit.
  - decodebin3 stream selection handling fixes.
  - d3d11compositor, d3d12compositor: Fix transparent background
    mode with YUV output.
  - d3d12converter: Make gamma remap work as intended.
  - h264decoder: Update output frame duration for interlaced
    video when second field frame is discarded.
  - macOS audio device provider now listens to audio devices
    being added/removed at runtime.
  - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink,
    livesync and webrtcsink fixes.
  - videoaggregator: preserve features in non-alpha caps for
    subclasses with non-system memory sink caps.
  - vtenc: Fix redistribute latency spam.
  - v4l2: fixes for complex video formats.
  - va: Fix strides when importing DMABUFs, dmabuf handle leaks,
    and blocklist unmaintained Intel i965 driver for encoding.
  - waylandsink: Fix surface cropping for rotated streams.
  - webrtcdsp: Enable multi_channel processing to fix handling of
    stereo streams.
  - Various bug fixes, memory leak fixes, and other stability and
    reliability improvements.</changelog>
  <changelog author="jonaski@opensuse.org" date="1724241600">- Add gst-plugins-base-decodebin3-collection-identity-check.patch:
  - Fixes a assertion causing crash on track change. Upstream bug:
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3742</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724414400">- Update to version 1.24.7:
  + pbutils: descriptions: use subsampling factor to get YUV
    subsampling
  + rtspconnection: Handle invalid argument properly
  + urisourcebin:
  - Actually drop EOS on old-school pad switch
  - Don't hold lock when emitting about-to-finish
  + gst-launch deadlock with two playbin3s
  + xvimagesink: Fix crash in pool on error</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)
  + CVE-2024-47607.patch (boo#1234455 CVE-2024-47607)</changelog>
  <changelog author="mgorse@suse.com" date="1752494400">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="cdb0ae7fd7f1c3119e84930e9cdceba3ebe7a03b714ca17460ffbbfdfdf71ca171abf8c9fef3dd5aeb75d0636699c71a5077571359298f9ff5ff24020703d866" name="libgtk-3-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.24.43" rel="slfo.1.1_2.1"/>
  <changelog author="yfjiang@suse.com" date="1696766400">- Revert RPM ternary operations on SLE where rpm version is not
  ready.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 3.24.38+111:
  + [gtk3] Support tiled windows from xdg-shell.
  + Fix a minor issue in the file portal test.
  + wayland: Be more careful when loading cursors.
  + gdk/wayland: Use g_warning_once for cursor scale mismatches.
  + gdk/wayland: Don't fall back directly to 1 for mismatched
    cursor sizes.
  + Updated translations.
- Drop upstream applied patch
  gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Update to version 3.24.39+23:
  * gdkdisplay-wayland: Init selection before roundtrips
  * Use consistent coordinates in get_toplevel_from_ns_event.
  * emoji: Update data to CLDR v44
  * emoji: Update data to CLDR v43
  * add hi-ja-et-fi-nb-th for gtkemojichooser
  * add bengali language bn.data for gtkemojichooser
  * emoji: Add more locales
  * emoji: Update data to CLDR v40
  * emoji: Fix the convert-emoji program
  * gtkgesture: Preserve accuracy when translating events
  * pathbar: Handle webdav where is the root is a path
  * GtkTooltip: Fix tooltip positioning on X11
  * gdkkeys-win32c: change registry key not found g_warning to g_debug
  * [gtk3/wayland] Expose XDG-shell suspended state via visibility events.
  * [gtk3/wayland] Only request v2 of xdg_wm_base.
  * test-msys2-meson: fix pipeline failure on GTK3
  * wayland: Fix wl_buffer size for custom cursors
  * GtkMenu: Fix positioning when attached to offscreen windows
  * gdk_display_get_monitor_at_window: Check for offscreen windows
  * GdkWindow: check for same impl class in set_transient_for ()
  * [gtk3] Cherry-pick gtkfilechoosernativeportal fixes from gtk4
  * wayland: Avoid more legacy cursor names
  * Fall back to the 'default' cursor</changelog>
  <changelog author="dimstar@opensuse.org" date="1705579200">- Update to version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Update to version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Update to version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1720699200">- Update to version 3.24.43:
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729166400">- Eliminate usage of update-alternatives: GTK2 no longer provides
  gtk-update-icon-cache, thus eliminating the need for this extra
  complexity.</changelog>
</package>
<package pkgid="f485d24624834f711954c6eaee3866037c01f86bbaa7c2e934997c6b8bc33ffc6bac803b6d2b6e28932022dce36ef08e436dafc5089012bcd7e9f324cec25e20" name="libgudev-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="238" rel="slfo.1.1_1.2"/>
  <changelog author="fbui@suse.com" date="1458648000">- Import libgudev from Factory to SLE (fate#320658):
  new versions of systemd doesn't ship libgudev anymore and a
  dedicated package has been created and should be used instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 231:
  + Fix a bug in the enumerator to ensure that client subsystems
    are implicitly matched.
  + Require a newer GLib to simplify some code.
- Add disabled pkgconfig(umockdev-1.0) BuildRequires, new
  optional dependency, that is enabled by default upstream, but
  unfortunatly not yet available in openSUSE.
- Following the above: pass --disable-umockdev to configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 232:
  + Fix crash on plenty of architectures in the test suite.
  + Add g_autoptr automatic clean up for libgudev objects.
- Tweak package description a bit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564833600">- Update to version 233:
  + Require glib 2.38.
  + Small documentation updates.
  + Remove gnome-common build dependency.
- Use modern macros.</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 234:
  * Clarify that _get_sysfs_attr() functions are cached
  * Add functions to get uncached sysfs attributes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629028800">- Update to version 237:
  + Fix reading double precision floats from sysfs attributes in
    locales that use comma as a separator
  + Fix compilation warning
  + Fix headers to help with build reproducibility
  + Clarify licensing information
- Changes from version 236:
  + Fix meson project name to match autotools.
- Changes from version 235:
  + Port build system to meson and remove autotools
  + Fix conversion of sysfs attributes to boolean.
- Add meson BuildRequires and macros following upstreams port.
- Enable pkgconfig(umockdev-1.0) BuildRequires and test macro.
- Update Licence tag to LGPL-2.1-or-later.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- add explicit glibc-locale buildrequires for passing the testsuite (bsc#1195390)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Add 2 upstream bug fix patches:
  * 71b2fda04dd71c637361e8ead103980ad6f27ed5.patch: gudev: Fix
    newline stripping by always reading using udev.
  * 4216ecd4513bd4c8af73543817a51d6f72f166cc.patch: build: let
    meson handle gir, vala, gtk-doc dependencies
- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 238:
  * Fix newline stripping
  * Add g_udev_device_get_current_tags()
  * Add a number of tests, and devel docs
  * Fix devhelp not being able to find the docs
  * Skip locale test with locale isn't available
- Drop patches fixed upstream:
  * 71b2fda04dd71c637361e8ead103980ad6f27ed5.patch
  * 4216ecd4513bd4c8af73543817a51d6f72f166cc.patch</changelog>
</package>
<package pkgid="baa6752d0ad8d6e5f4372beca70b29cd89f360f7c4855d74725219146090aae13927499e2843043c8d85576af03cb5803f03173f1ef9f53746410490e17fc6ff" name="libgudev-debugsource" arch="aarch64">
  <version epoch="0" ver="238" rel="slfo.1.1_1.2"/>
  <changelog author="fbui@suse.com" date="1458648000">- Import libgudev from Factory to SLE (fate#320658):
  new versions of systemd doesn't ship libgudev anymore and a
  dedicated package has been created and should be used instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 231:
  + Fix a bug in the enumerator to ensure that client subsystems
    are implicitly matched.
  + Require a newer GLib to simplify some code.
- Add disabled pkgconfig(umockdev-1.0) BuildRequires, new
  optional dependency, that is enabled by default upstream, but
  unfortunatly not yet available in openSUSE.
- Following the above: pass --disable-umockdev to configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 232:
  + Fix crash on plenty of architectures in the test suite.
  + Add g_autoptr automatic clean up for libgudev objects.
- Tweak package description a bit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564833600">- Update to version 233:
  + Require glib 2.38.
  + Small documentation updates.
  + Remove gnome-common build dependency.
- Use modern macros.</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 234:
  * Clarify that _get_sysfs_attr() functions are cached
  * Add functions to get uncached sysfs attributes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629028800">- Update to version 237:
  + Fix reading double precision floats from sysfs attributes in
    locales that use comma as a separator
  + Fix compilation warning
  + Fix headers to help with build reproducibility
  + Clarify licensing information
- Changes from version 236:
  + Fix meson project name to match autotools.
- Changes from version 235:
  + Port build system to meson and remove autotools
  + Fix conversion of sysfs attributes to boolean.
- Add meson BuildRequires and macros following upstreams port.
- Enable pkgconfig(umockdev-1.0) BuildRequires and test macro.
- Update Licence tag to LGPL-2.1-or-later.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- add explicit glibc-locale buildrequires for passing the testsuite (bsc#1195390)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Add 2 upstream bug fix patches:
  * 71b2fda04dd71c637361e8ead103980ad6f27ed5.patch: gudev: Fix
    newline stripping by always reading using udev.
  * 4216ecd4513bd4c8af73543817a51d6f72f166cc.patch: build: let
    meson handle gir, vala, gtk-doc dependencies
- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 238:
  * Fix newline stripping
  * Add g_udev_device_get_current_tags()
  * Add a number of tests, and devel docs
  * Fix devhelp not being able to find the docs
  * Skip locale test with locale isn't available
- Drop patches fixed upstream:
  * 71b2fda04dd71c637361e8ead103980ad6f27ed5.patch
  * 4216ecd4513bd4c8af73543817a51d6f72f166cc.patch</changelog>
</package>
<package pkgid="75f87538a248e17d3dc495a9df98dbee5b01e6b35bffa476159dd6cad2a5203678c8b4e9e45eadb91e70e52592397198bc8c2fb3adfb9c52611e97d197748539" name="libguestfs-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.52.0" rel="slfo.1.1_1.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Remove unused perl_gen_filelist</changelog>
  <changelog author="bwiedemann@suse.com" date="1702987200">- Provide a tar-wrapper that creates bit-reproducible output (boo#1218191)</changelog>
  <changelog author="carnold@suse.com" date="1704369600">- Update to version 1.52.0 (jsc#PED-6305)
  * The Python bindings now use bytes (instead of str) for the
    event callback message, since it may contain arbitrary 8 bit
    data
    Fix a rare crash, and avoid memory leaks in event callbacks
  * Support for OCaml 5, and OCaml ≥ 4.07 is now the minimum
  * The OCaml bindings now release the runtime lock around calls
    to guestfs_close, since that call might be long-running (for
    example it might have to shut down the appliance and synch disks).
  * Support OpencloudOS
  * SELinux relabelling now runs in parallel, meaning it's a lot
    quicker
  * Add support for lzma and zstd compression methods in tar APIs
    (like guestfs_tar_in)
  * guestfs_pvs_full previously didn't always return the correct
    device names. This has now been fixed.
  * guestfs_btrfs_filesystem_balance fixed so it now works with
    more modern btrfs tools (Jürgen Hötzel).
  * The guestfish(1) --key option now recognizes LVM names like
    /dev/mapper/rhel_bootp--73--75--123-root
  * guestfish --key option also supports a new --key all:...
    selector to try the same key on all devices.
  * In guestmount(1) avoid calling fclose(NULL) on error paths,
    which might have caused a crash on some platforms.</changelog>
  <changelog author="carnold@suse.com" date="1704974400">- Copy sorted packagelist to packages during supermin appliance
  setup. (bsc#1215586)
  libguestfs.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1706702400">- BuildRequire pkgconfig(libzstd) additionaly to zstd: we need the
  devel package. In the past, it was pulled in by indirect deps.</changelog>
  <changelog author="carnold@suse.com" date="1707134400">- bsc#1206361 - SLES 15 SP5 Beta2 - virt-customize ssh-inject fails
  (s390x/kvm/libvirt) (-&gt; Server-Applications module)
  use-rtc-driftfix-slew-for-x86-only.patch</changelog>
  <changelog author="carnold@suse.com" date="1711713600">- Upstream bug fixes
  Split-chown-parameter-on-character.patch
  Initialise-bar-fp-as-NULL.patch</changelog>
  <changelog author="carnold@suse.com" date="1713182400">- Require ntfs-3g for libguestfs-winsupport
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1715083200">- Switch Recommends to Requires for several packages in the
  libguestfs-appliance which is where the tools from these
  packages are used. (bsc#1223444)</changelog>
  <changelog author="carnold@suse.com" date="1715169600">- Set Recommends on zerofree and ntfsprogs for libguestfs-appliance
  (bsc#1223444)</changelog>
</package>
<package pkgid="100ca9e8d271eb20ba4886aa7aafee9ffff8b68e15c3b9bdbaa0b28c5d4affe5c9e8cae9da29caaf0aef738461bf3548d0a50a988f48a0a4d3edf5e5179506a2" name="libguestfs-debugsource" arch="aarch64">
  <version epoch="0" ver="1.52.0" rel="slfo.1.1_1.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Remove unused perl_gen_filelist</changelog>
  <changelog author="bwiedemann@suse.com" date="1702987200">- Provide a tar-wrapper that creates bit-reproducible output (boo#1218191)</changelog>
  <changelog author="carnold@suse.com" date="1704369600">- Update to version 1.52.0 (jsc#PED-6305)
  * The Python bindings now use bytes (instead of str) for the
    event callback message, since it may contain arbitrary 8 bit
    data
    Fix a rare crash, and avoid memory leaks in event callbacks
  * Support for OCaml 5, and OCaml ≥ 4.07 is now the minimum
  * The OCaml bindings now release the runtime lock around calls
    to guestfs_close, since that call might be long-running (for
    example it might have to shut down the appliance and synch disks).
  * Support OpencloudOS
  * SELinux relabelling now runs in parallel, meaning it's a lot
    quicker
  * Add support for lzma and zstd compression methods in tar APIs
    (like guestfs_tar_in)
  * guestfs_pvs_full previously didn't always return the correct
    device names. This has now been fixed.
  * guestfs_btrfs_filesystem_balance fixed so it now works with
    more modern btrfs tools (Jürgen Hötzel).
  * The guestfish(1) --key option now recognizes LVM names like
    /dev/mapper/rhel_bootp--73--75--123-root
  * guestfish --key option also supports a new --key all:...
    selector to try the same key on all devices.
  * In guestmount(1) avoid calling fclose(NULL) on error paths,
    which might have caused a crash on some platforms.</changelog>
  <changelog author="carnold@suse.com" date="1704974400">- Copy sorted packagelist to packages during supermin appliance
  setup. (bsc#1215586)
  libguestfs.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1706702400">- BuildRequire pkgconfig(libzstd) additionaly to zstd: we need the
  devel package. In the past, it was pulled in by indirect deps.</changelog>
  <changelog author="carnold@suse.com" date="1707134400">- bsc#1206361 - SLES 15 SP5 Beta2 - virt-customize ssh-inject fails
  (s390x/kvm/libvirt) (-&gt; Server-Applications module)
  use-rtc-driftfix-slew-for-x86-only.patch</changelog>
  <changelog author="carnold@suse.com" date="1711713600">- Upstream bug fixes
  Split-chown-parameter-on-character.patch
  Initialise-bar-fp-as-NULL.patch</changelog>
  <changelog author="carnold@suse.com" date="1713182400">- Require ntfs-3g for libguestfs-winsupport
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1715083200">- Switch Recommends to Requires for several packages in the
  libguestfs-appliance which is where the tools from these
  packages are used. (bsc#1223444)</changelog>
  <changelog author="carnold@suse.com" date="1715169600">- Set Recommends on zerofree and ntfsprogs for libguestfs-appliance
  (bsc#1223444)</changelog>
</package>
<package pkgid="40a953eb6eb10ec62ad8b3bbe9898c9d9c4eeaf58963712cb708b50a3b7bebb335416df0a453843c22a0ded83acc146a7e7dd874eb71fe05946c569bf778471a" name="libguestfs0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.52.0" rel="slfo.1.1_1.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Remove unused perl_gen_filelist</changelog>
  <changelog author="bwiedemann@suse.com" date="1702987200">- Provide a tar-wrapper that creates bit-reproducible output (boo#1218191)</changelog>
  <changelog author="carnold@suse.com" date="1704369600">- Update to version 1.52.0 (jsc#PED-6305)
  * The Python bindings now use bytes (instead of str) for the
    event callback message, since it may contain arbitrary 8 bit
    data
    Fix a rare crash, and avoid memory leaks in event callbacks
  * Support for OCaml 5, and OCaml ≥ 4.07 is now the minimum
  * The OCaml bindings now release the runtime lock around calls
    to guestfs_close, since that call might be long-running (for
    example it might have to shut down the appliance and synch disks).
  * Support OpencloudOS
  * SELinux relabelling now runs in parallel, meaning it's a lot
    quicker
  * Add support for lzma and zstd compression methods in tar APIs
    (like guestfs_tar_in)
  * guestfs_pvs_full previously didn't always return the correct
    device names. This has now been fixed.
  * guestfs_btrfs_filesystem_balance fixed so it now works with
    more modern btrfs tools (Jürgen Hötzel).
  * The guestfish(1) --key option now recognizes LVM names like
    /dev/mapper/rhel_bootp--73--75--123-root
  * guestfish --key option also supports a new --key all:...
    selector to try the same key on all devices.
  * In guestmount(1) avoid calling fclose(NULL) on error paths,
    which might have caused a crash on some platforms.</changelog>
  <changelog author="carnold@suse.com" date="1704974400">- Copy sorted packagelist to packages during supermin appliance
  setup. (bsc#1215586)
  libguestfs.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1706702400">- BuildRequire pkgconfig(libzstd) additionaly to zstd: we need the
  devel package. In the past, it was pulled in by indirect deps.</changelog>
  <changelog author="carnold@suse.com" date="1707134400">- bsc#1206361 - SLES 15 SP5 Beta2 - virt-customize ssh-inject fails
  (s390x/kvm/libvirt) (-&gt; Server-Applications module)
  use-rtc-driftfix-slew-for-x86-only.patch</changelog>
  <changelog author="carnold@suse.com" date="1711713600">- Upstream bug fixes
  Split-chown-parameter-on-character.patch
  Initialise-bar-fp-as-NULL.patch</changelog>
  <changelog author="carnold@suse.com" date="1713182400">- Require ntfs-3g for libguestfs-winsupport
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1715083200">- Switch Recommends to Requires for several packages in the
  libguestfs-appliance which is where the tools from these
  packages are used. (bsc#1223444)</changelog>
  <changelog author="carnold@suse.com" date="1715169600">- Set Recommends on zerofree and ntfsprogs for libguestfs-appliance
  (bsc#1223444)</changelog>
</package>
<package pkgid="8c5aa7f84b453ced5b113e8eb863b84b2c2ee9994c8c1873d602a8022ab3785eab8c499a3cbf864062d457806624732fd3326cc588bff0e78969dc57d9ab46de" name="libgusb-debugsource" arch="aarch64">
  <version epoch="0" ver="0.3.10" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1497355200">- Update to version 0.2.10:
  + Correctly detect removed devices when rescanning.
  + Fix a memory leak when using control tranfers.
  + Fix gtk-doc build when builddir != srcdir.
  + Fix symbol version table up to version 0.2.9.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 0.2.11:
  + New Features: Add g_usb_context_set_flags().
  + Bugfix: Fix the actual required GLib version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Update to version 0.3.0:
  + New Features:
  - Add Travis integration.
  - Allow changing the path to usb.ids file.
  - Port to the Meson build system.
  + Replace libusb-1.0/libusb.h with libusb.h.
- Port to meson build system:
  + Add meson BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install.
- Add gtk-doc BuildRequires: the meson-based tarball no longer
  ships pre-built documentation.
- Drop xz BuildRequires: this is implicit in all openSUSE
  buildroots.</changelog>
  <changelog author="dmueller@suse.com" date="1600084800">- update to 0.3.5:
  - Add a way to get iConfiguration (Benson Leung)
  - Allow building GtkDoc when building as a subproject (Richard Hughes)
  - Fix version script to be more portable (Laurent Bigonville, Ting-Wei Lan)
  - Include methods on plain structs in the version script (Simon McVittie)
  - This fixes the symbol version for g_usb_version_string() to be in the right
    place, so update this library alongside with external programs if you've
    already started using this symbol for example in fwupd. We've put a mechanism
    in place so this kind of thing can't happen again. Sorry!
  - Validate the exported symbol list during check (Richard Hughes)
  - Include the USB bus in the generated platform_id (Richard Hughes)
  - Add a thin glib wrapper around libusb_endpoint_descriptor (Emmanuel Pacaud)
  - Fix high number of wakeups when checking the GUsbContext (Richard Hughes)
  - Use '#pragma once' to reduce boilerplate (Richard Hughes)
  - Wrap the upstream libusb_strerror() (Richard Hughes)
  - Do not use deprecated libusb API (Richard Hughes)
  - Fix compilation on macOS (Richard Hughes)
  - Use a 1ms timeout in the Windows event thread (Richard Hughes)
  - Use has_link_argument() to detect linker flags (Richard Hughes)
  - Add g_usb_device_get_spec() (Richard Hughes)
  - Add g_usb_version_string() for fwupd (Richard Hughes)
  - Add -Wswitch-enum (Benjamin Berg)
  - Fix GI length introspection annotations (grindhold)
  - Make gir generation optional (maxice8)</changelog>
  <changelog author="dimstar@opensuse.org" date="1610107200">- Add baselibs.conf: build libgusb2-32bit, which is a dependency to
  libfprint-2-2-32bit. Due to a installcheck bot issue, this
  happened to be undetected for a while though.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.3.9:
  - Add g_usb_device_get_string_descriptor_bytes()
  - Do not double-reference USB devices
  - Fix hotplug handling and signal emission during enumerate
  - Add the GUsbEndpoint methods to the docs
  - Add g_usb_device_get_string_descriptor_bytes_full
  - Fix hotplug after threaded device removal
  - Don't hard-code the list of OS supporting --version-script</changelog>
  <changelog author="info@paolostivanin.com" date="1652097600">- Update to version 0.3.10:
  + New Features:
  - Add API to change the hotplug poll interval.</changelog>
  <changelog author="mcepl@suse.com" date="1659700800">- Add no-pkg-resources.patch:
  * Replaces pkg_resources with python-packaging
  * pkg_resources is provided by setuptools, but the previously
    transitive pull in of setuptools has been broken by
    gtk-doc --&gt; python3-Pygments -/-&gt; python3-setuptools</changelog>
</package>
<package pkgid="1591d8c7f468c19fdde277816283e7b98cd22eaf567acbca7affcdeeb6e4b9f6b18759211a9fae01856637c6e2a64511830103c4f018a2104f961c53d338f6a0" name="libgusb2-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.3.10" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1497355200">- Update to version 0.2.10:
  + Correctly detect removed devices when rescanning.
  + Fix a memory leak when using control tranfers.
  + Fix gtk-doc build when builddir != srcdir.
  + Fix symbol version table up to version 0.2.9.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 0.2.11:
  + New Features: Add g_usb_context_set_flags().
  + Bugfix: Fix the actual required GLib version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Update to version 0.3.0:
  + New Features:
  - Add Travis integration.
  - Allow changing the path to usb.ids file.
  - Port to the Meson build system.
  + Replace libusb-1.0/libusb.h with libusb.h.
- Port to meson build system:
  + Add meson BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install.
- Add gtk-doc BuildRequires: the meson-based tarball no longer
  ships pre-built documentation.
- Drop xz BuildRequires: this is implicit in all openSUSE
  buildroots.</changelog>
  <changelog author="dmueller@suse.com" date="1600084800">- update to 0.3.5:
  - Add a way to get iConfiguration (Benson Leung)
  - Allow building GtkDoc when building as a subproject (Richard Hughes)
  - Fix version script to be more portable (Laurent Bigonville, Ting-Wei Lan)
  - Include methods on plain structs in the version script (Simon McVittie)
  - This fixes the symbol version for g_usb_version_string() to be in the right
    place, so update this library alongside with external programs if you've
    already started using this symbol for example in fwupd. We've put a mechanism
    in place so this kind of thing can't happen again. Sorry!
  - Validate the exported symbol list during check (Richard Hughes)
  - Include the USB bus in the generated platform_id (Richard Hughes)
  - Add a thin glib wrapper around libusb_endpoint_descriptor (Emmanuel Pacaud)
  - Fix high number of wakeups when checking the GUsbContext (Richard Hughes)
  - Use '#pragma once' to reduce boilerplate (Richard Hughes)
  - Wrap the upstream libusb_strerror() (Richard Hughes)
  - Do not use deprecated libusb API (Richard Hughes)
  - Fix compilation on macOS (Richard Hughes)
  - Use a 1ms timeout in the Windows event thread (Richard Hughes)
  - Use has_link_argument() to detect linker flags (Richard Hughes)
  - Add g_usb_device_get_spec() (Richard Hughes)
  - Add g_usb_version_string() for fwupd (Richard Hughes)
  - Add -Wswitch-enum (Benjamin Berg)
  - Fix GI length introspection annotations (grindhold)
  - Make gir generation optional (maxice8)</changelog>
  <changelog author="dimstar@opensuse.org" date="1610107200">- Add baselibs.conf: build libgusb2-32bit, which is a dependency to
  libfprint-2-2-32bit. Due to a installcheck bot issue, this
  happened to be undetected for a while though.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.3.9:
  - Add g_usb_device_get_string_descriptor_bytes()
  - Do not double-reference USB devices
  - Fix hotplug handling and signal emission during enumerate
  - Add the GUsbEndpoint methods to the docs
  - Add g_usb_device_get_string_descriptor_bytes_full
  - Fix hotplug after threaded device removal
  - Don't hard-code the list of OS supporting --version-script</changelog>
  <changelog author="info@paolostivanin.com" date="1652097600">- Update to version 0.3.10:
  + New Features:
  - Add API to change the hotplug poll interval.</changelog>
  <changelog author="mcepl@suse.com" date="1659700800">- Add no-pkg-resources.patch:
  * Replaces pkg_resources with python-packaging
  * pkg_resources is provided by setuptools, but the previously
    transitive pull in of setuptools has been broken by
    gtk-doc --&gt; python3-Pygments -/-&gt; python3-setuptools</changelog>
</package>
<package pkgid="c382047cb42f197131c1b27ddc347eeae87392e005ad4088476e21194735fc559a5239e5dd1e04224468062b4d9c1b9507bab47c0a9dbd0048d75006755aa366" name="libharfbuzz-gobject0-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.2.0" rel="slfo.1.1_1.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1659528000">- harfbuzz 5.1.0:
  + More extensive buffer tracing messages
  + Fix hb-ft regression in bitmap fonts rendering
  + Support extension promotion of lookups in hb-subset-repacker
  + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use
    elongation (e.g. Arabic) to signify where it is safe to insert
    tatweel glyph without interrupting shaping
  + Add --safe-to-insert-tatweel to hb-shape tool
- add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch
  from upstream to fix ARM and PPC builds</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663675200">- Update to version 5.2.0:
  + Fix regressions in hb-ft font functions for FT_Faces with
    transformation matrix.
  + The experimental hb-repacker API now supports splitting several
    GPOS subtable types when needed.
  + The HarfBuzz extensions to OpenType font format are now opt-in
    behind build-time flags.
  + The experimental hb-subset variable fonts instantiation API can
    now instantiate more font tables and arbitrary axis locations.
  + Unicode 15 support.
  + Various documentation improvements.
  + The hb-view command line tool now detects WezTerm inline images
    support.
  + Fix FreeType and ICU dependency lookup with meson.
  + New API:
  - +HB_SCRIPT_KAWI
  - +HB_SCRIPT_NAG_MUNDARI
- Drop patch fixed upstream:
  + harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665316800">- Update to version 5.3.0:
  + Don’t add glyphs from dropped MATH or COLR tables to the subset
    glyphs
  + Map rlig to appropriate AAT feature selectors
  + Update USE data files to latest version
  + Check CBDT extents first before outline tables, to help with
    fonts that also include an empty glyf table
  + More work towards variable font instancing in the subsetter
  + Subsetter repacker improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666353600">- Update to version 5.3.1:
  + Subsetter repacker fixes
  + Adjust Grapheme clusters for Katakana voiced sound marks
  + New hb-subset option --preprocess-face
- Add harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fix failing
  tests.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1671278400">- Update to version 6.0.0:
  + Add API to pre-process the face and speed up future subsetting
    operations on that face. Provides up to a 95% reduction in
    subsetting times when the same face is subset more than once.
  + Shaping have been speedup by skipping entire lookups when the
    buffer contents don't intersect with the lookup. Shows up to a
    10% speedup in shaping some fonts
  + The HarfBuzz subsetter can now drop axes by pinning them to
    specific values (also referred to as instancing)
- Drop harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1675684800">- Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when
  looking back (boo#1207922 CVE-2023-25193).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- Update to version 7.0.0:
  + New hb-paint API that is designed mainly to paint COLRv1 glyphs,
    but can be also used as a unified API to paint any of the glyph
    representations supported by HarfBuzz (B/W outlines, color
    layers, or color bitmaps).
  + New hb-cairo API for integrating with cairo graphics library.
    This is provided as a separate harfbuzz-cairo library.
  + Support for instancing CFF2 table
  + Support font emboldening
  + Support feature ranges with AAT shaping
  + Experimental support to cubic curves in glyf table
  + Various subsetter improvements
  + Various documentation improvements
  + Significantly reduced memory use during shaping
  + Greatly reduced memory use during subsetting CFF table
  + New command line utility, hb-info, for querying various font
    information
  + New hb-shape/hb-view options: --glyphs, --color-palette,
  - -font-bold, --font-grade, and --named-instance
  + Miscellaneous fixes and improvements
- harfbuzz-CVE-2023-25193.patch dropped in favor of upstream
  consensus fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- Update to version 7.0.1:
  + Various build and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677844800">- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to version 7.2.0:
  + Improve Tifinagh glyph positioning
  + Fix 4.2.0 regression in applying across syllables in syllabic
    scripts.
  + Add flag to avoid glyph substitution closure during subsetting,
    and the corresponding “--no-layout-closure” option to
    “hb-subset” command line tool.
  + Support instancing COLRv1 table
  + Optimize handling of “gvar” table
  + Various subsetter bug fixes and improvements, documentation</changelog>
</package>
<package pkgid="151258c1c575d73bfcfdaef5ecfe2996bddf772492b0cbbf165f9b0269fe14027733dab7e014905c988b0edf46791c72a5ce8f7b817290e58634f5f0e637a250" name="libharfbuzz0-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.2.0" rel="slfo.1.1_1.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1659528000">- harfbuzz 5.1.0:
  + More extensive buffer tracing messages
  + Fix hb-ft regression in bitmap fonts rendering
  + Support extension promotion of lookups in hb-subset-repacker
  + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use
    elongation (e.g. Arabic) to signify where it is safe to insert
    tatweel glyph without interrupting shaping
  + Add --safe-to-insert-tatweel to hb-shape tool
- add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch
  from upstream to fix ARM and PPC builds</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663675200">- Update to version 5.2.0:
  + Fix regressions in hb-ft font functions for FT_Faces with
    transformation matrix.
  + The experimental hb-repacker API now supports splitting several
    GPOS subtable types when needed.
  + The HarfBuzz extensions to OpenType font format are now opt-in
    behind build-time flags.
  + The experimental hb-subset variable fonts instantiation API can
    now instantiate more font tables and arbitrary axis locations.
  + Unicode 15 support.
  + Various documentation improvements.
  + The hb-view command line tool now detects WezTerm inline images
    support.
  + Fix FreeType and ICU dependency lookup with meson.
  + New API:
  - +HB_SCRIPT_KAWI
  - +HB_SCRIPT_NAG_MUNDARI
- Drop patch fixed upstream:
  + harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665316800">- Update to version 5.3.0:
  + Don’t add glyphs from dropped MATH or COLR tables to the subset
    glyphs
  + Map rlig to appropriate AAT feature selectors
  + Update USE data files to latest version
  + Check CBDT extents first before outline tables, to help with
    fonts that also include an empty glyf table
  + More work towards variable font instancing in the subsetter
  + Subsetter repacker improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666353600">- Update to version 5.3.1:
  + Subsetter repacker fixes
  + Adjust Grapheme clusters for Katakana voiced sound marks
  + New hb-subset option --preprocess-face
- Add harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fix failing
  tests.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1671278400">- Update to version 6.0.0:
  + Add API to pre-process the face and speed up future subsetting
    operations on that face. Provides up to a 95% reduction in
    subsetting times when the same face is subset more than once.
  + Shaping have been speedup by skipping entire lookups when the
    buffer contents don't intersect with the lookup. Shows up to a
    10% speedup in shaping some fonts
  + The HarfBuzz subsetter can now drop axes by pinning them to
    specific values (also referred to as instancing)
- Drop harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1675684800">- Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when
  looking back (boo#1207922 CVE-2023-25193).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- Update to version 7.0.0:
  + New hb-paint API that is designed mainly to paint COLRv1 glyphs,
    but can be also used as a unified API to paint any of the glyph
    representations supported by HarfBuzz (B/W outlines, color
    layers, or color bitmaps).
  + New hb-cairo API for integrating with cairo graphics library.
    This is provided as a separate harfbuzz-cairo library.
  + Support for instancing CFF2 table
  + Support font emboldening
  + Support feature ranges with AAT shaping
  + Experimental support to cubic curves in glyf table
  + Various subsetter improvements
  + Various documentation improvements
  + Significantly reduced memory use during shaping
  + Greatly reduced memory use during subsetting CFF table
  + New command line utility, hb-info, for querying various font
    information
  + New hb-shape/hb-view options: --glyphs, --color-palette,
  - -font-bold, --font-grade, and --named-instance
  + Miscellaneous fixes and improvements
- harfbuzz-CVE-2023-25193.patch dropped in favor of upstream
  consensus fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- Update to version 7.0.1:
  + Various build and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677844800">- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to version 7.2.0:
  + Improve Tifinagh glyph positioning
  + Fix 4.2.0 regression in applying across syllables in syllabic
    scripts.
  + Add flag to avoid glyph substitution closure during subsetting,
    and the corresponding “--no-layout-closure” option to
    “hb-subset” command line tool.
  + Support instancing COLRv1 table
  + Optimize handling of “gvar” table
  + Various subsetter bug fixes and improvements, documentation</changelog>
</package>
<package pkgid="b7f3bc136aa31f13197ef7b90694f9d8c92d8b55f3f79b7f97927df8789490048f92e07317ef3f609a7302f0b8507e372a6772e4d6e6668217e593a102720906" name="libhd23-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.2" rel="slfo.1.1_1.2"/>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#114
- improve treatment of NVME devices (bsc#1200975)
- add new NVME hardware class and support it in hwinfo
- fix compiler warnings
- 22.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1660046400">- merge gh#openSUSE/hwinfo#117
- glibc 2.36+ includes fsconfig itself, make linux/fs.h inclusion
  conditional (bsc#1202213)
- 22.1</changelog>
  <changelog author="jengelh@inai.de" date="1666008000">- Implement shared library packaging guideline.
- Modernize specfile.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#126
- create xen usb controller device if necessary (bsc#1204294)
- 22.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#133
- avoid linking problems with libsamba (bsc#1212756)
- 22.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688558400">- merge gh#openSUSE/hwinfo#134
- restrict libhd exported symbols to the documented API
  (bsc#1212756)
- fix pppoe compile warning
- 23.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688558401">- merge gh#openSUSE/hwinfo#137
- adjust exported symbols to yast2-hardware-detection test case
- 23.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1689854400">- merge gh#openSUSE/hwinfo#128
- Add support for loongarch cpu
- 23.2</changelog>
</package>
<package pkgid="dceb37415c52ddaf4363a908b03b71076985be9761b38c41f67d85873b5c23ea7ae1aff4c42a4c4e3f5f0780eb65687bd9b59ba6674fcbce38be163b7962223c" name="libhidapi-hidraw0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="slfo.1.1_1.3"/>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1623240000">- Add 0001-configure.ac-remove-duplicate-AC_CONFIG_MACRO_DIR-22.patch:
  fix boo#1187056</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 0.11.0:
  * hidraw: (explicit) workaround to allow build with kernels older than 2.6.39
  * libusb: stabilize device path (uses same semantic as Linux kernel)
  * libusb: add platform-specific hid_libusb_wrap_sys_device
  * general: lots of documentation improvements
  * general: (Windows) DDK build files are obsolete
  * general: add CMake build system
  * general: deprecated Autotools build scripts
  * lots of other small fixes and improvements
- remove 0001-configure.ac-remove-duplicate-AC_CONFIG_MACRO_DIR-22.patch (obsolete)</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.12.0:
  * libusb: improved CMake dependency on Iconv (#405) - as a result, better support for NetBSD;
  * general: documentation improvements;
  * general: small code cleanups/improvements;
  * many windows specific fixes
- spec-cleaner cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1673179200">- update to 0.13.0:
  * general: add hid_get_device_info (#432);
  * general: Meson build script (as a wrapper over CMake) (#410);
  * general: add HID Bus Type in hid_device_info (#308);
  * libusb: primary usage_page/usage is now available with hid_get_device_info
    regardless of the compilation flags;
  * hidraw: Open files with O_CLOEXEC to not leak fds to child processes (#446);
  * hidraw: add support for HID over SPI (#486);
  * cmake: libusb: Ensure Iconv is found when provided via CFLAGS/LDFLAGS (#430);</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- update to 0.13.1:
  * hidraw: fix invalid read past the UDEV buffer</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 0.14.0:
  * general: add `hid_get_report_descriptor` API function (#451)
  * libusb: fix crash in hid_enumerate() caused by a stale device
    handle (#526)
  * fixes (mostly error handling) of issues found by
    Coverity Scan (#552/#554/#555/#559/#560/#561)
  * various fixes and improvements</changelog>
</package>
<package pkgid="971a20b3e98185a150ee888257e91dd4daaf81caf587c3b2d6a339780c5f41d916df12ceeef66ae7de0fb717c14ad08683ef639fb2eaf01acbdb99b40306051d" name="libhivex0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.23" rel="slfo.1.1_1.3"/>
  <changelog author="ohering@suse.de" date="1565265600">- disable lto
- Update to version 1.3.18
  * ocaml: Link the C bindings with LDFLAGS (RHBZ#1548536)
  * perl: fix format of croak for RLenValue
  * Update gnulib to latest.
  * lib: Reset errno to zero to avoid erroneously returning E2BIG</changelog>
  <changelog author="ohering@suse.de" date="1572609600">- Fix bytecode build
- Remove defattr and BuildRoot
- disablement of lto comes via ocaml macros</changelog>
  <changelog author="steven.kowalik@suse.com" date="1580904000">- Switch to building using Python 3, as a consequence rename python
  binding package to python3-hivex.
- Drop unneeded Recommends and Group lines.
- Make use of python3_sitearch macro to drop pyver variable.
- Use python3-config to determine CFLAGS and libraries.
- Run spec-cleaner against the specfile.</changelog>
  <changelog author="jgwang@suse.com" date="1610280000">- Update to version 1.3.19
  * ocaml: Throw exception if malloc returns NULL
  * ocaml: Cast return from String_val to (char *)
  * ocaml: Use caml_alloc_initialized_string
  * Remove extra @LIBS@ from pkg-config file
  * Win::Hivex::Regedit: Ignore comments
  * Win::Hivex::Regedit: Accept CRLF line endings</changelog>
  <changelog author="ohering@suse.de" date="1619006400">- Remove ocaml_native_compiler conditional
  build native target unconditionally</changelog>
  <changelog author="carnold@suse.com" date="1620129600">- Update to version 1.3.20
  * Fixes bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds
    check within hivex_open()
  * Increase HIVEX_MAX_VALUES
  * Updated translations</changelog>
  <changelog author="carnold@suse.com" date="1628251200">- bsc#1189060 - VUL-0: CVE-2021-3622: hivex: hivex: stack overflow
  due to recursive call of _get_children. Update to version 1.3.21
  hivex-1.3.21.tar.gz
  hivex-1.3.21.tar.gz.sig</changelog>
  <changelog author="ohering@suse.de" date="1632571200">- move all ocaml libraries to devel package to align with our
  OCaml packaging</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="carnold@suse.com" date="1674648000">- Update hivex to version 1.3.23
  * jsc#PED-2113
  * Updated langauge files
  * Various build fixes
  * Improved windows support</changelog>
</package>
<package pkgid="a855550879f25e4e106df9c28828d7026c5301e60dec96c3bf9d20ce5ef1ed08fbbec7139583fe127c679abcda9c46940b2dd30b95e7c7523982a60b7c3c66ce" name="libhogweed6-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.9.1" rel="slfo.1.1_1.2"/>
  <changelog author="info@paolostivanin.com" date="1623240000">- GNU Nettle 3.7.3: [CVE-2021-3580, bsc#1187060]
  * Fix crash for zero input to rsa_sec_decrypt and
    rsa_decrypt_tr. Potential denial of service vector.
  * Ensure that all of rsa_decrypt_tr and rsa_sec_decrypt return
    failure for out of range inputs, instead of either crashing,
    or silently reducing input modulo n. Potential denial of
    service vector.
  * Ensure that rsa_decrypt returns failure for out of range
    inputs, instead of silently reducing input modulo n.
  * Ensure that rsa_sec_decrypt returns failure if the message
    size is too large for the given key. Unlike the other bugs,
    this would typically be triggered by invalid local
    configuration, rather than by processing untrusted remote
    data.</changelog>
  <changelog author="pmonreal@suse.com" date="1642420800">- Provide s390x CPACF/SHA/AES Support for Crypto Libraries
  * Add libnettle-s390x-CPACF-SHA-AES-support.patch [jsc#SLE-20733]</changelog>
  <changelog author="gmbr3@opensuse.org" date="1655294400">- Make shared libraries executable</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 3.8:
  This release includes a couple of new features, and many
  performance improvements. It adds assembly code for two more
  architectures: ARM64 and S390x.
  The new version is intended to be fully source and binary
  compatible with Nettle-3.6. The shared library names are
  libnettle.so.8.5 and libhogweed.so.6.5, with sonames
  libnettle.so.8 and libhogweed.so.6.
  New features:
  * AES keywrap (RFC 3394), contributed by Nicolas Mora.
  * SM3 hash function, contributed by Tianjia Zhang.
  * New functions cbc_aes128_encrypt, cbc_aes192_encrypt,
    cbc_aes256_encrypt.
    On processors where AES is fast enough, e.g., x86_64 with
    aesni instructions, the overhead of using Nettle's general
    cbc_encrypt can be significant. The new functions can be
    implemented in assembly, to do multiple blocks with reduced
    per-block overhead.
    Note that there's no corresponding new decrypt functions,
    since the general cbc_decrypt doesn't suffer from the same
    performance problem.
  Bug fixes:
  * Fix fat builds for x86_64 windows, these appear to never
    have worked.
  Optimizations:
  * New ARM64 implementation of AES, GCM, Chacha, SHA1 and
    SHA256, for processors supporting crypto extensions. Great
    speedups, and fat builds are supported. Contributed by
    Mamone Tarsha.
  * New s390x implementation of AES, GCM, Chacha, memxor, SHA1,
    SHA256, SHA512 and SHA3. Great speedups, and fat builds are
    supported. Contributed by Mamone Tarsha.
  * New PPC64 assembly for ecc modulo/redc operations,
    contributed by Amitay Isaacs, Martin Schwenke and Alastair
    D´Silva.
  * The x86_64 AES implementation using aesni instructions has
    been reorganized with one separate function per key size,
    each interleaving the processing of two blocks at a time
    (when the caller processes multiple blocks with each call).
    This gives a modest performance improvement on some
    processors.
  * Rewritten and faster x86_64 poly1305 assembly.
- drop libnettle-s390x-CPACF-SHA-AES-support.patch (included in 3.8)</changelog>
  <changelog author="dmueller@suse.com" date="1659009600">- update to 3.8.1:
  * Avoid non-posix m4 argument references in the chacha
    implementation for arm64, powerpc64 and s390x. Reported by
    Christian Weisgerber, fix contributed by Mamone Tarsha.
  * Use explicit .machine pseudo-ops where needed in s390x
    assembly files. Bug report by Andreas K. Huettel, fix
    contributed by Mamone Tarsha.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1684152000">- update to 3.9
  * rewrite of the C and plain x86_64 assembly implementations of
    GHASH to use precomputed tables in a different way, with tables
    always accessed in the same sequential manner. This should make
    Nettle's GHASH implementation side-channel silent on all
    platforms, but considerably slower on platforms without carry-
    less mul instructions. E.g., benchmarks of the C implementation
    on x86_64 showed a slowdown of 3 times.
  * Fix bug in ecdsa and gostdsa signature verify operation, for
    the unlikely corner case that point addition really is point
    duplication.
  * Fix for chacha on Power7, nettle's assembly used an instruction
    only available on later processors
  * Add support for the SM4 block cipher
  * Add support for the Balloon password hash
  * Add support for SIV-GCM authenticated encryption mode
  * Add support for OCB authenticated encryption mode.
  * New exported functions md5_compress, sha1_compress,
    sha256_compress, sha512_compress
  * multiple performance optimizations
  * Delete all arcfour assembly code. Affects 32-bit x86, 32-bit
    and 64-bit sparc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1686139200">- update to 3.9.1: [bsc#1212112, CVE-2023-36660]
  * Fix bug in the new OCB code may be exploitable for denial of
    service or worse due to memory corruption</changelog>
  <changelog author="pmonreal@suse.com" date="1686225600">- Include the nettle library manual in HTML and PDF formats in
  the devel package.</changelog>
  <changelog author="pmonreal@suse.com" date="1686312000">- Add the architecture specific READMEs as provided by upstream.</changelog>
</package>
<package pkgid="18185cff1d33f66943ada147e39405747dc667dc379ba02dc96da2d88108431cc9794ca8cad9a85f73d2c466a9167a080e48d496978158b7a1ad1dfda4bc3c63" name="libibverbs-debuginfo" arch="aarch64">
  <version epoch="0" ver="49.1" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
</package>
<package pkgid="b3d7a6fe26512cacd01033235c823df670f298b77b75037afcc262a2dbf251e8b204858da7d951ddaf2c990456b0e14ca89f1aeeae4c0e2ab2194d7f98ee87b2" name="libibverbs1-debuginfo" arch="aarch64">
  <version epoch="0" ver="49.1" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
</package>
<package pkgid="597101c80f76e5bac2689d81d37f8fd233eec9b74292cf37cd4d6c92165e85242d86a790474b8abad8182ac0842666dab182402ae60610e816c1953d85243d65" name="libidn2-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="slfo.1.1_1.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="mpluskal@suse.com" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1574164800">- update to 2.3.0:
  * Update the data tables from Unicode 6.3.0 to Unicode 11.0
  * Turn _idn2_punycode_encode, _idn2_punycode_decode into compat
    symbols</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582372800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="coolo@suse.com" date="1590494400">- Fix license entry of the library - it's different than the rest</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620820800">- libidn2 2.3.1:
  * Implement full roundtrip for lookup functionality
  * Fix domain too long error
  * Updated gnulib files and various build fixes
  * verify source signature again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 2.3.2:
  * Upgrade TR46 tables from Unicode 11 to Unicode 13.
- Refresh libidn2.keyring</changelog>
  <changelog author="coolo@suse.com" date="1653393600">- Refresh libidn2.keyring</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657627200">- update to 2.3.3:
  * Upgrade IDNA Tables from Unicode 11 to 12
  * Upgrade TR46 Tables from Unicode 13 to 14
  * Updated gnulib files and various build fixes
  * Add self-check for the idn2 command line tool</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666699200">- update to 2.3.4:
  * Support for Unicode 15.0.0
  * Uses IDNA2008 from tables from unicode.org rather than IANA
    for consistency with other implementation and support for
    Unicode versions 12 through 15. This breaks backwards-
    compatibility regarding U+19DA and recent releases</changelog>
</package>
<package pkgid="dcb8092dec362a5feadd47932501ba1c0ebcaf47894724c73a51d32652e576ba980480a185d52b2d2f4a9fdb0726887c0db147f5969d839c33975766395f4b9c" name="libidn2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="slfo.1.1_1.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="mpluskal@suse.com" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1574164800">- update to 2.3.0:
  * Update the data tables from Unicode 6.3.0 to Unicode 11.0
  * Turn _idn2_punycode_encode, _idn2_punycode_decode into compat
    symbols</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582372800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="coolo@suse.com" date="1590494400">- Fix license entry of the library - it's different than the rest</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620820800">- libidn2 2.3.1:
  * Implement full roundtrip for lookup functionality
  * Fix domain too long error
  * Updated gnulib files and various build fixes
  * verify source signature again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 2.3.2:
  * Upgrade TR46 tables from Unicode 11 to Unicode 13.
- Refresh libidn2.keyring</changelog>
  <changelog author="coolo@suse.com" date="1653393600">- Refresh libidn2.keyring</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657627200">- update to 2.3.3:
  * Upgrade IDNA Tables from Unicode 11 to 12
  * Upgrade TR46 Tables from Unicode 13 to 14
  * Updated gnulib files and various build fixes
  * Add self-check for the idn2 command line tool</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666699200">- update to 2.3.4:
  * Support for Unicode 15.0.0
  * Uses IDNA2008 from tables from unicode.org rather than IANA
    for consistency with other implementation and support for
    Unicode versions 12 through 15. This breaks backwards-
    compatibility regarding U+19DA and recent releases</changelog>
</package>
<package pkgid="c51b46f302ec6167fa9f3a50bfa029f6018fc2d9d576bf09d999ebee90ac108c49999d613a82164088348b684f55c3545847da8098682d1b774763dca213e7d5" name="libini_config5-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="slfo.1.1_1.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="3dc5c74ac96f11a8979b23ba3bbf099011ac7c8c2f187bdac24ed2ece12b60c30bc07701bc1efc514c3d533fcd5374ae4dfbde00f7c9a45917a019151131264e" name="libinih0-debuginfo" arch="aarch64">
  <version epoch="0" ver="56" rel="slfo.1.1_1.3"/>
  <changelog author="marix@marix.org" date="1600344000">- Include static library</changelog>
  <changelog author="marix@marix.org" date="1600344001">- Fix the library not matching its soname</changelog>
  <changelog author="marix@marix.org" date="1600430400">- Execute upstream tests during package build</changelog>
  <changelog author="marix@marix.org" date="1600516800">- Following packaging guidelines, exclude static libraries again.</changelog>
  <changelog author="marix@marix.org" date="1602763200">- Update to version 52
  * Add INI_CUSTOM_ALLOCATOR to allow using a custom memory
    allocator.
- Drop workaround for library name not matching its soname as this
  was fixed upstream.</changelog>
  <changelog author="marix@marix.org" date="1608811200">- Make package conform to spec-cleaner.</changelog>
  <changelog author="jgwang@suse.com" date="1615464000">￼
- Update to version 53
  * Add architecture ppc64le to travis build (#122)
  * enable distro settings by default (#125)
  * meson: optionally depend on c++ (#124)
  * meson: add static compile args to inih_dep (#126)</changelog>
  <changelog author="marix@marix.org" date="1648209600">- Update to version 54
  * Improve quality of shared objects by explicitly defining symbol
    visibility.</changelog>
  <changelog author="marix@marix.org" date="1648209601">- Update to version 55
  * Include proper version in installed pkgconfig files.</changelog>
  <changelog author="marix@marix.org" date="1657972800">- Update to version 55
  * Fix redundant cast-to-int when INI_USE_STACK!=0
  * Make inline comments work on subsequent lines of multiline values</changelog>
</package>
<package pkgid="d030db3f32ded8462591273f5b0f506bf325debd111552ca9e86d0e4ac28ab5b39632433f36bd7e5f40962d816ef8a889138d9b3016f55c6507144499930d982" name="libip4tc2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.9" rel="slfo.1.1_2.1"/>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736164800">- Add iptables-1.8.9-fix-checking-existence-of-rule.patch
  * Fixes checking existence of rules. Fixes issues with rule creation
    with podman/netavark. (bsc#1235088, bsc#1234996)</changelog>
</package>
<package pkgid="4b3e54931fd60467d397817fc970d53708040155f280762b4769a1b03d2b0472cdef878239157089a0a566b88c6fe023395b7c859fa002ad5c1a70477af34e40" name="libip6tc2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.9" rel="slfo.1.1_2.1"/>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736164800">- Add iptables-1.8.9-fix-checking-existence-of-rule.patch
  * Fixes checking existence of rules. Fixes issues with rule creation
    with podman/netavark. (bsc#1235088, bsc#1234996)</changelog>
</package>
<package pkgid="7a288aca8cc0e6675abb9852b61a0a00d9664eee77751f337bfc9eb7390683190fe1da2346d78d8f38a8d45d66a6ef2e171ff80b64f225c76f40d0e82342e401" name="libiscsi-debugsource" arch="aarch64">
  <version epoch="0" ver="1.19.0+git.20230208" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1590494400">- Update to version 1.19.0+git.20200521:
  * test-tool, compare and write: Reduce maximum number of blocks from 256 to 255
  * test_compareandwrite_invalid_dataout_size: Simplify this test
  * test-tool: Use asprintf() in sg_send_scsi_cmd()
  * test-tool: Fix a comment in sg_send_scsi_cmd()
  * test-tool: Split send_scsi_command()
  * socket: fix rewrite cmdsn of immediate pdus
  * iser: eliminate unnecessary memory allocations
  * iser: use `login_resp_buf` until login is finished
  * init: free iscsi-&gt;opaque before check mallocs/frees counter
  * reconnect: collect mallocs/frees of the previous reconnection</changelog>
  <changelog author="mpluskal@suse.com" date="1597320000">- Update to version 1.19.0+git.20200812:
  * .travis.yml: Also build for the ppc64le architecture
  * iscsi-ls: Fix iser url scheme parsing
  * test-tool: Use block_size instead of hardcoded 512 bytes
  * examples/iscsi-dd: use common init function for src and dst endpoints
  * examples/iscsi-dd: use common iscsi_endpoint struct
  * iscsi-perf: Add explicit casts to avoid two warnings
  * socket: Make the pdu timeout handling aware of old iscsi context
  * libiscsi: Make the cancellation aware of the pdus in old iscsi context
  * pdu: Remove the checking for iscsi-&gt;is_loggedin in iscsi_cancel_pdus()
  * libiscsi: Avoid discontinuities in cmdsn ordering in some cases
  * test-tool: Use block_size instead of hardcoded 512 bytes
  * exclude ld_iscsi.so from RPM
  * include iser-private.h in make dist tarball</changelog>
  <changelog author="mpluskal@suse.com" date="1604577600">- Update to version 1.19.0+git.20201023:
  * test-tool: add COMPARE AND WRITE MiscompareSense test
  * lib: parse Information fixed sense field
  * lib: parse Information sense descriptor type
  * lib: check length for sense key specific sense data descriptors
  * lib: drop generic sense data descriptor VALID check
  * test-tool: add version descriptor checks for more SBC-3 versions
  * test-tool: Fix CmdSN tests
  * test-tool/test_async_lu_reset_simple: Move an assert statement
  * Remove an unused function from the iSER code
  * test-tool: add LogoutDuringIOAsync test case
  * test-tool: rename async write dispatch/complete counters
  * pdu: fix use after free during cancellation</changelog>
  <changelog author="mpluskal@suse.com" date="1609156800">- Update to version 1.19.0+git.20201217:
  * Revert "specify number of blocks in write_same command"
  * iser: fix segmentation fault when task management pdu is received
  * iser: fix segmentation fault when async message pdu is received</changelog>
  <changelog author="mpluskal@suse.com" date="1619092800">- Update to version 1.19.0+git.20210208:
  * test-tool: Change command_is_implemented from a global variable into an argument
  * test-tool: Move a logging statement into write_residuals_test()
  * test-tool: Add default clauses in recently modified switch statements
  * test-tool, residuals: Rename struct residuals_test_data members
  * test-tool: Add overwrite check for all test cases
  * test-tool: Change write residuals tests overwrite check according to FCP-4
  * test-tool: Refactoring residuals write tests
  * test-tool: Allow CHECK CONDITION in response to overflow/underflow
  * .travis.yml: Multiple changes
  * test-tool: add simple REPORT LUNS test
  * init: fix Wformat on 32-bit platforms</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version 1.19.0+git.20210523:
  * Port to MinGW
  * win32/win32_compat.c: Reformat this file
  * Enable -Wno-unused-parameter
  * Use __attribute__((format(printf, ...))) directly
  * build: Add -no-undefined where missing
  * build: Correct usage of LIBADD and LDADD
  * build: Remove bogus LDADD variables
  * Add header &lt;strings.h&gt; for strncasecmp</changelog>
  <changelog author="mpluskal@suse.com" date="1639051200">- Update to version 1.19.0+git.20210930:
  * iscsi-support: fix memory leak
  * add README.md to dist tarball
  * add libiscsi.syms.in to dist tarball
  * test-tool, xcopy: Fix target descriptor handling
  * iser: Fix a compiler warning triggered by the container_of() definition
  * configure: Remove -Wno-strict-aliasing
  * slist: Clean up the slist.h header file
  * slist: Make this header file compatible with C++
  * scsi-lowlevel.h: Include &lt;assert.h&gt;
  * examples/iscsi-dd: use stderr for all error text
  * examples/iscsi-dd: fix typos
  * ci: Add a github build action
  * test: fix ExtendedCopy.Large SKIPPED cases
  * configure.ac: Quote argument to m4_esyscmd() properly
  * Fixed several code style problems
  * test-tool: check that ReceiveCopyResults is implemented
  * lib: init version for 8Fh VPD page
  * ci: Enable MinGW
  * MinGW: Second step of porting to MinGW
  * configure.ac: Use AC_CONFIG_HEADERS() instead of AC_CONFIG_HEADER()
  * lib/libiscsi.syms: Sort alphabetically
  * ci: First phase of adding MingW support
  * configure.ac: Run autoupdate
  * README.md: Update
  * README: Rename into README.md
  * ci: Switch from Travis to AppVeyor
  * test-tool: Do not use empty initializers</changelog>
  <changelog author="mpluskal@suse.com" date="1647432000">- Update to version 1.19.0+git.20220303:
  * iscsi-command: Fix leak in iscsi_send_data_out
  * iscsi-pr: add persistent reservation tool
  * add iscsi_force_reconnect()
  * add libiscsi.syms to .gitignore</changelog>
  <changelog author="mpluskal@suse.com" date="1669636800">- Update to version 1.19.0+git.20221112:
  * ci/build.sh: Enable parallel compilation
  * ci: Fix the Appveyor Linux and Windows builds
  * ci: Add ci/install.bat
  * Add CodeQL workflow for GitHub code scanning
  * test-tool: remove a redundant semicolon
  * lib/scsi-lowlevel: Make the REPORT LUNS unmarshalling code more flexible
  * Fix segmentation fault problem.
  * Check return value of scsi_malloc in order to avoid dereferencing NULL return value.
  * fix iscsi-ls parameter parse
  * iscsi-swp: handle setting of debug_level correctly
  * Update iscsi-dd.c
  * iscsi-inq: handle setting of debug_level correctly
  * Retain the immediate data param during login processing</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Update to version 1.19.0+git.20230208:
  * iser: Remove unnecessary 'return;'
  * pdu: Remove temporary variables from functions
  * connect: Add check after malloc allocation
  * aros_compat: Add check after malloc allocation
- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
</package>
<package pkgid="200c6a9ae01bed7d13e5d16877b3fb2dfd369fd2569a9a48a7863b5259b284ffcb8019a18551beb368ba7a4fe0b9953b444845d3cf2f8ec904e4a543367dc353" name="libiscsi9-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.19.0+git.20230208" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1590494400">- Update to version 1.19.0+git.20200521:
  * test-tool, compare and write: Reduce maximum number of blocks from 256 to 255
  * test_compareandwrite_invalid_dataout_size: Simplify this test
  * test-tool: Use asprintf() in sg_send_scsi_cmd()
  * test-tool: Fix a comment in sg_send_scsi_cmd()
  * test-tool: Split send_scsi_command()
  * socket: fix rewrite cmdsn of immediate pdus
  * iser: eliminate unnecessary memory allocations
  * iser: use `login_resp_buf` until login is finished
  * init: free iscsi-&gt;opaque before check mallocs/frees counter
  * reconnect: collect mallocs/frees of the previous reconnection</changelog>
  <changelog author="mpluskal@suse.com" date="1597320000">- Update to version 1.19.0+git.20200812:
  * .travis.yml: Also build for the ppc64le architecture
  * iscsi-ls: Fix iser url scheme parsing
  * test-tool: Use block_size instead of hardcoded 512 bytes
  * examples/iscsi-dd: use common init function for src and dst endpoints
  * examples/iscsi-dd: use common iscsi_endpoint struct
  * iscsi-perf: Add explicit casts to avoid two warnings
  * socket: Make the pdu timeout handling aware of old iscsi context
  * libiscsi: Make the cancellation aware of the pdus in old iscsi context
  * pdu: Remove the checking for iscsi-&gt;is_loggedin in iscsi_cancel_pdus()
  * libiscsi: Avoid discontinuities in cmdsn ordering in some cases
  * test-tool: Use block_size instead of hardcoded 512 bytes
  * exclude ld_iscsi.so from RPM
  * include iser-private.h in make dist tarball</changelog>
  <changelog author="mpluskal@suse.com" date="1604577600">- Update to version 1.19.0+git.20201023:
  * test-tool: add COMPARE AND WRITE MiscompareSense test
  * lib: parse Information fixed sense field
  * lib: parse Information sense descriptor type
  * lib: check length for sense key specific sense data descriptors
  * lib: drop generic sense data descriptor VALID check
  * test-tool: add version descriptor checks for more SBC-3 versions
  * test-tool: Fix CmdSN tests
  * test-tool/test_async_lu_reset_simple: Move an assert statement
  * Remove an unused function from the iSER code
  * test-tool: add LogoutDuringIOAsync test case
  * test-tool: rename async write dispatch/complete counters
  * pdu: fix use after free during cancellation</changelog>
  <changelog author="mpluskal@suse.com" date="1609156800">- Update to version 1.19.0+git.20201217:
  * Revert "specify number of blocks in write_same command"
  * iser: fix segmentation fault when task management pdu is received
  * iser: fix segmentation fault when async message pdu is received</changelog>
  <changelog author="mpluskal@suse.com" date="1619092800">- Update to version 1.19.0+git.20210208:
  * test-tool: Change command_is_implemented from a global variable into an argument
  * test-tool: Move a logging statement into write_residuals_test()
  * test-tool: Add default clauses in recently modified switch statements
  * test-tool, residuals: Rename struct residuals_test_data members
  * test-tool: Add overwrite check for all test cases
  * test-tool: Change write residuals tests overwrite check according to FCP-4
  * test-tool: Refactoring residuals write tests
  * test-tool: Allow CHECK CONDITION in response to overflow/underflow
  * .travis.yml: Multiple changes
  * test-tool: add simple REPORT LUNS test
  * init: fix Wformat on 32-bit platforms</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version 1.19.0+git.20210523:
  * Port to MinGW
  * win32/win32_compat.c: Reformat this file
  * Enable -Wno-unused-parameter
  * Use __attribute__((format(printf, ...))) directly
  * build: Add -no-undefined where missing
  * build: Correct usage of LIBADD and LDADD
  * build: Remove bogus LDADD variables
  * Add header &lt;strings.h&gt; for strncasecmp</changelog>
  <changelog author="mpluskal@suse.com" date="1639051200">- Update to version 1.19.0+git.20210930:
  * iscsi-support: fix memory leak
  * add README.md to dist tarball
  * add libiscsi.syms.in to dist tarball
  * test-tool, xcopy: Fix target descriptor handling
  * iser: Fix a compiler warning triggered by the container_of() definition
  * configure: Remove -Wno-strict-aliasing
  * slist: Clean up the slist.h header file
  * slist: Make this header file compatible with C++
  * scsi-lowlevel.h: Include &lt;assert.h&gt;
  * examples/iscsi-dd: use stderr for all error text
  * examples/iscsi-dd: fix typos
  * ci: Add a github build action
  * test: fix ExtendedCopy.Large SKIPPED cases
  * configure.ac: Quote argument to m4_esyscmd() properly
  * Fixed several code style problems
  * test-tool: check that ReceiveCopyResults is implemented
  * lib: init version for 8Fh VPD page
  * ci: Enable MinGW
  * MinGW: Second step of porting to MinGW
  * configure.ac: Use AC_CONFIG_HEADERS() instead of AC_CONFIG_HEADER()
  * lib/libiscsi.syms: Sort alphabetically
  * ci: First phase of adding MingW support
  * configure.ac: Run autoupdate
  * README.md: Update
  * README: Rename into README.md
  * ci: Switch from Travis to AppVeyor
  * test-tool: Do not use empty initializers</changelog>
  <changelog author="mpluskal@suse.com" date="1647432000">- Update to version 1.19.0+git.20220303:
  * iscsi-command: Fix leak in iscsi_send_data_out
  * iscsi-pr: add persistent reservation tool
  * add iscsi_force_reconnect()
  * add libiscsi.syms to .gitignore</changelog>
  <changelog author="mpluskal@suse.com" date="1669636800">- Update to version 1.19.0+git.20221112:
  * ci/build.sh: Enable parallel compilation
  * ci: Fix the Appveyor Linux and Windows builds
  * ci: Add ci/install.bat
  * Add CodeQL workflow for GitHub code scanning
  * test-tool: remove a redundant semicolon
  * lib/scsi-lowlevel: Make the REPORT LUNS unmarshalling code more flexible
  * Fix segmentation fault problem.
  * Check return value of scsi_malloc in order to avoid dereferencing NULL return value.
  * fix iscsi-ls parameter parse
  * iscsi-swp: handle setting of debug_level correctly
  * Update iscsi-dd.c
  * iscsi-inq: handle setting of debug_level correctly
  * Retain the immediate data param during login processing</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Update to version 1.19.0+git.20230208:
  * iser: Remove unnecessary 'return;'
  * pdu: Remove temporary variables from functions
  * connect: Add check after malloc allocation
  * aros_compat: Add check after malloc allocation
- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
</package>
<package pkgid="9cd3cfd2f2b370d9b9ffcae6593ee86148c0a319ca6df5892e929530cae1671320a12fc1b305cde87c15d3d84b13bbab6ed342bb0b7a8398428b07e4941ad337" name="libisoburn-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="slfo.1.1_1.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to 1.4.2:
  * Bug fix: -backslash_codes "on" did not work outside quotes and
    with showing "\r"
  * New API calls isoburn_ropt_set_truncate_mode()
    isoburn_ropt_get_truncate_mode()
  * New options with isoburn_ropt_set_extensions():
    isoburn_ropt_map_*
  * New command -modesty_on_drive, new -as cdrecord -immed,
    minbuf=, modesty_on_drive=
  * New command -ecma119_map
  * New command -read_fs
  * New -boot_image action "replay"
  * New command -file_name_limit, -as mkisofs -file_name_limit
  * New -find test -name_limit_blocker.
  * Result of a Coverity audit: 50+ code changes, but no
    easy-to-trigger bugs</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: -as mkisofs did not unescape "\=" in the source part
    of pathspecs
  * Bug fix: -boot_image "any" "system_area=/dev/zero" did not
    zeroize loaded data
  * Bug fix: -pathspecs "on" did not properly handle "\\="
  * Bug fix: HFS+ production could cause MBR partition of type 0xEE
    without GPT
  * Bug fix: HFS+ directories could announce more children than
    they actually have
  * Bug fix: The HFS+ filesystem was not marked by in GPT of GRUB2
    hybrid layout
  * Bug fix: When reading an ISO filesystem, the presence of
  - -protective-msdos-label was not recognized if a partition is
    appended
  * Bug fix: xorrisofs option --protective-msdos-label did not work
    if no system area data were given by option -G or alike
  * Bug fix: -modesty_on_drive properties timeout_sec, min_usec,
    max_usec read wrong numbers from the parameter text
  * Letting -as mkisofs --norock revoke the special effect of -r
  * Letting -blank on overwritable media invalidate UDF extended
    descriptors
  * New -pathspecs mode "as_mkisofs"
  * New -boot_image setting mbr_force_bootable=, -as mkisofs
  - -mbr-force-bootable
  * New -boot_image bootspecs appended_part_as=apm,
    part_like_isohybrid=on
  * New -as mkisofs options -appended_part_as_apm,
  - part_like_isohybrid
  * New command -scsi_dev_family, new -as cdrecord option
    drive_scsi_dev_family=</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: The default setting of -compliance did not apply
    rec_mtime to Joliet and ISO:1999. mkisofs emulation was not
    affected by this bug.
  * Bug fix: -file_size_limit did not increase ISO level if
    necessary. Thanks Mattias Schlenker.
  * New API calls isoburn_igopt_set_gpt_guid(),
    isoburn_igopt_get_gpt_guid()
  * New command -use_immed_bit, new -as cdrecord option
    use_immed_bit=
  * New -volume_date mode "all_file_dates"
  * New -as mkisofs option --set_all_file_dates
  * New bootspec "gpt_disk_guid=", new -as mkisofs option
  - -gpt_disk_guid
  * New -report_system_area modes "gpt_disk_guid", "make_guid"
  * New environment variable SOURCE_DATE_EPOCH
  * New -find action "set_to_mtime"</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1487419200">- Added new build requirement libjte-devel for Tumbleweed and
  Leap &gt;= 42.3.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488024000">- Use sle_version &gt;= 120300 instead of leap_version &gt;= 420300
  (leap_version does not work).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: -as mkisofs -no-emul-boot without -boot-load-size
    defaulted to size 4, instead of full boot image size
  * Bug fix: -read_fs "norock" did not prevent reading of root Rock
    Ridge info
  * Bug fix: Mix of absolute and relative disk paths could cause
    SIGSEGV with pattern expansion
  * Bug fix: --mbr-force-bootable did not get into effect with
  - append_partition
  * Bug fix: Exit value of failed -mount command was reported as 0
  * Bug fix: -boot_image actions "keep" and "patch" did not work
    any more. Regression by libisofs 1.4.4.
  * New -find tests -maxdepth and -mindepth
  * New commands -update_lxi and -update_li
  * New API calls isoburn_igopt_set_iso_mbr_part_type(),
    isoburn_igopt_get_iso_mbr_part_type()
  * New -boot_image bootspec iso_mbr_part_type=
  * New -as mkisofs option -iso_mbr_part_type
  * New -as mkisofs option -eltorito-platform
  * Properly refusing on Pseudo Overwritable formatted BD-R</changelog>
  <changelog author="dimstar@opensuse.org" date="1522756800">- Split out xorriso-tcltk from xorriso: The frontend is advertised
  as proof-of-concept by upstream. Additionally, we can save a
  dependency on Tcl/Tk on the main xorriso package.
- Cleanup using spec-cleaner:
  + use SPDX3 license string.
  + Package licence files as license, not doc (boo#1082318).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1541073600">- Update to 1.5.0:
  * Bug fix: Multi-session emulation was not recognized with
    non-zero partition offset
  * New bit10 of isoburn_drive_aquire() to accept all xattr
    namespaces
  * New -xattr mode "any" to process all xattr namespaces of local
    filesystem
  * New -as mkisofs option --xattr-any
  * New -as mkisofs options -uid and -gid</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.5.2:
  * Bug fix: -disk_pattern on -add ./ -- mistook "./" for the root directory
  * Bug fix: -disk_pattern on -add "" -- yielded SIGSEGV
  * Bug fix: -osirrox "concat_split_on" worked only together with -split_size
  larger than 0. Thanks William Willems.
  * New API calls isoburn_igopt_set_part_type_guid(),
    isoburn_igopt_get_part_type_guid(), isoburn_igopt_set_iso_type_guid(),
    isoburn_igopt_get_iso_type_guid()
  * Enabled GPT type GUIDs with -append_partition,
  - boot_image any iso_mbr_part_type=, and -as mkisofs -iso_mbr_part_type
  * Made libisoburn and GNU xorriso ready for building out-of-source.
    Thanks Ross Burton.</changelog>
  <changelog author="dmueller@suse.com" date="1614081600">- update to 1.5.4:
  * Bug fix: -report_system_area as_mkisofs misrepresented GPT with appended
    partition and forced boot flag as -part_like_isohybrid
  * Bug fix: Boot catalog could get a wrong name if cat_path= is explicitely
    given but not containing a slash character
  * New helper script xorriso-dd-target
  * New command -truncate_overwritable
  * Switched to usage of libjte-2.0.0
  * New -jigdo parameters "checksum_algorithm", "demand_checksum", "-checksum-list"
  * New -as mkisofs options "-jigdo-checksum-algorithm", "-checksum-list", "-jigdo-force-checksum"
  * New -read_speed prefixes "soft_force:" and "soft_corr:"
  * New -check_media option data_to="-" for standard output
  * New -zisofs parameters version_2=, block_size_v2=, max_bpt=, max_bpt_f=,
    bpt_target=, bpt_free_ratio=, by_magic=v2, susp_z2=
  * New -as mkisofs options --zisofs-version-2, --zisofs2-susp-z2,
  - -zisofs2-susp-zf
  * Enabled recognition of zisofs by magic without zlib support
  * New -osirrox option sparse= controls extraction into sparse files
  * New libisoburn extension options isoburn_ropt_map_joliet_stripped and
    isoburn_ropt_map_joliet_unmapped
  * New command -joliet_map
  * New command -extract_boot_images
  * New API call isoburn_ropt_get_tree_loaded()</changelog>
</package>
<package pkgid="5c8f33b60b1f4cd8909418a6bb368ba5fdb17821d53364852dbd84e69f0084a61dde1aafa623eca18eab24c3de0985f6b3c30e8d2d255c6296fd9f5eae4498d0" name="libisoburn1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="slfo.1.1_1.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to 1.4.2:
  * Bug fix: -backslash_codes "on" did not work outside quotes and
    with showing "\r"
  * New API calls isoburn_ropt_set_truncate_mode()
    isoburn_ropt_get_truncate_mode()
  * New options with isoburn_ropt_set_extensions():
    isoburn_ropt_map_*
  * New command -modesty_on_drive, new -as cdrecord -immed,
    minbuf=, modesty_on_drive=
  * New command -ecma119_map
  * New command -read_fs
  * New -boot_image action "replay"
  * New command -file_name_limit, -as mkisofs -file_name_limit
  * New -find test -name_limit_blocker.
  * Result of a Coverity audit: 50+ code changes, but no
    easy-to-trigger bugs</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: -as mkisofs did not unescape "\=" in the source part
    of pathspecs
  * Bug fix: -boot_image "any" "system_area=/dev/zero" did not
    zeroize loaded data
  * Bug fix: -pathspecs "on" did not properly handle "\\="
  * Bug fix: HFS+ production could cause MBR partition of type 0xEE
    without GPT
  * Bug fix: HFS+ directories could announce more children than
    they actually have
  * Bug fix: The HFS+ filesystem was not marked by in GPT of GRUB2
    hybrid layout
  * Bug fix: When reading an ISO filesystem, the presence of
  - -protective-msdos-label was not recognized if a partition is
    appended
  * Bug fix: xorrisofs option --protective-msdos-label did not work
    if no system area data were given by option -G or alike
  * Bug fix: -modesty_on_drive properties timeout_sec, min_usec,
    max_usec read wrong numbers from the parameter text
  * Letting -as mkisofs --norock revoke the special effect of -r
  * Letting -blank on overwritable media invalidate UDF extended
    descriptors
  * New -pathspecs mode "as_mkisofs"
  * New -boot_image setting mbr_force_bootable=, -as mkisofs
  - -mbr-force-bootable
  * New -boot_image bootspecs appended_part_as=apm,
    part_like_isohybrid=on
  * New -as mkisofs options -appended_part_as_apm,
  - part_like_isohybrid
  * New command -scsi_dev_family, new -as cdrecord option
    drive_scsi_dev_family=</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: The default setting of -compliance did not apply
    rec_mtime to Joliet and ISO:1999. mkisofs emulation was not
    affected by this bug.
  * Bug fix: -file_size_limit did not increase ISO level if
    necessary. Thanks Mattias Schlenker.
  * New API calls isoburn_igopt_set_gpt_guid(),
    isoburn_igopt_get_gpt_guid()
  * New command -use_immed_bit, new -as cdrecord option
    use_immed_bit=
  * New -volume_date mode "all_file_dates"
  * New -as mkisofs option --set_all_file_dates
  * New bootspec "gpt_disk_guid=", new -as mkisofs option
  - -gpt_disk_guid
  * New -report_system_area modes "gpt_disk_guid", "make_guid"
  * New environment variable SOURCE_DATE_EPOCH
  * New -find action "set_to_mtime"</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1487419200">- Added new build requirement libjte-devel for Tumbleweed and
  Leap &gt;= 42.3.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488024000">- Use sle_version &gt;= 120300 instead of leap_version &gt;= 420300
  (leap_version does not work).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: -as mkisofs -no-emul-boot without -boot-load-size
    defaulted to size 4, instead of full boot image size
  * Bug fix: -read_fs "norock" did not prevent reading of root Rock
    Ridge info
  * Bug fix: Mix of absolute and relative disk paths could cause
    SIGSEGV with pattern expansion
  * Bug fix: --mbr-force-bootable did not get into effect with
  - append_partition
  * Bug fix: Exit value of failed -mount command was reported as 0
  * Bug fix: -boot_image actions "keep" and "patch" did not work
    any more. Regression by libisofs 1.4.4.
  * New -find tests -maxdepth and -mindepth
  * New commands -update_lxi and -update_li
  * New API calls isoburn_igopt_set_iso_mbr_part_type(),
    isoburn_igopt_get_iso_mbr_part_type()
  * New -boot_image bootspec iso_mbr_part_type=
  * New -as mkisofs option -iso_mbr_part_type
  * New -as mkisofs option -eltorito-platform
  * Properly refusing on Pseudo Overwritable formatted BD-R</changelog>
  <changelog author="dimstar@opensuse.org" date="1522756800">- Split out xorriso-tcltk from xorriso: The frontend is advertised
  as proof-of-concept by upstream. Additionally, we can save a
  dependency on Tcl/Tk on the main xorriso package.
- Cleanup using spec-cleaner:
  + use SPDX3 license string.
  + Package licence files as license, not doc (boo#1082318).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1541073600">- Update to 1.5.0:
  * Bug fix: Multi-session emulation was not recognized with
    non-zero partition offset
  * New bit10 of isoburn_drive_aquire() to accept all xattr
    namespaces
  * New -xattr mode "any" to process all xattr namespaces of local
    filesystem
  * New -as mkisofs option --xattr-any
  * New -as mkisofs options -uid and -gid</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.5.2:
  * Bug fix: -disk_pattern on -add ./ -- mistook "./" for the root directory
  * Bug fix: -disk_pattern on -add "" -- yielded SIGSEGV
  * Bug fix: -osirrox "concat_split_on" worked only together with -split_size
  larger than 0. Thanks William Willems.
  * New API calls isoburn_igopt_set_part_type_guid(),
    isoburn_igopt_get_part_type_guid(), isoburn_igopt_set_iso_type_guid(),
    isoburn_igopt_get_iso_type_guid()
  * Enabled GPT type GUIDs with -append_partition,
  - boot_image any iso_mbr_part_type=, and -as mkisofs -iso_mbr_part_type
  * Made libisoburn and GNU xorriso ready for building out-of-source.
    Thanks Ross Burton.</changelog>
  <changelog author="dmueller@suse.com" date="1614081600">- update to 1.5.4:
  * Bug fix: -report_system_area as_mkisofs misrepresented GPT with appended
    partition and forced boot flag as -part_like_isohybrid
  * Bug fix: Boot catalog could get a wrong name if cat_path= is explicitely
    given but not containing a slash character
  * New helper script xorriso-dd-target
  * New command -truncate_overwritable
  * Switched to usage of libjte-2.0.0
  * New -jigdo parameters "checksum_algorithm", "demand_checksum", "-checksum-list"
  * New -as mkisofs options "-jigdo-checksum-algorithm", "-checksum-list", "-jigdo-force-checksum"
  * New -read_speed prefixes "soft_force:" and "soft_corr:"
  * New -check_media option data_to="-" for standard output
  * New -zisofs parameters version_2=, block_size_v2=, max_bpt=, max_bpt_f=,
    bpt_target=, bpt_free_ratio=, by_magic=v2, susp_z2=
  * New -as mkisofs options --zisofs-version-2, --zisofs2-susp-z2,
  - -zisofs2-susp-zf
  * Enabled recognition of zisofs by magic without zlib support
  * New -osirrox option sparse= controls extraction into sparse files
  * New libisoburn extension options isoburn_ropt_map_joliet_stripped and
    isoburn_ropt_map_joliet_unmapped
  * New command -joliet_map
  * New command -extract_boot_images
  * New API call isoburn_ropt_get_tree_loaded()</changelog>
</package>
<package pkgid="5aff74e71e1d811bc56c9f13e4a1a317d7fbed97d6e214fd688c6afec1702327fe5ad7a2427378ab71f1ac92242d169a4c8a57eb16ec863c16eb1a98fd2b5f5e" name="libisofs-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="slfo.1.1_1.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to 1.4.2:
  * Bug fix: zisofs compression caused SIGSEGV (by reading) with
    files larger than 524160 KiB.
  * Bug fix: iso_node_get_name() of root node returned NULL pointer
    rather than an empty string
  * Bug fix: Names read from Joliet tree where stripped of trailing
    ";1"
  * Now sorting the data file content extents by ECMA-119 tree,
    rather than by the red-black tree which shall consolidate files
    with identical source object.
  * New API call iso_read_opts_set_ecma119_map().
  * New AAIP variable isofs.nt records name truncation parameters.
  * Rectified handling of oversized filenames by new API calls:
    iso_image_set_truncate_mode, iso_image_get_truncate_mode,
    iso_truncate_leaf_name, iso_image_set_node_name,
    iso_image_tree_clone, iso_image_add_new_dir,
    iso_image_add_new_file, iso_image_add_new_special,
    iso_image_add_new_symlink, iso_image_dir_get_node,
    iso_image_path_to_node
  * Result of a Coverity audit: 50+ code changes, but no
    easy-to-trigger bugs</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: HFS+ production could cause MBR partition of type 0xEE
    without GPT.
  * Bug fix: Protective MBR was not produced if no System Area data
    are given.
  * Bug fix: Protective MBR was not recognized if partition is
    appended.
  * Bug fix: The HFS+ filesystem was not marked in GPT of GRUB2
    hybrid layout.
  * Bug fix: HFS+ directories could announce more children than
    they actually have.
  * Bug fix: At image loading time GRUB2 MBR was not recognized if
    the partition table is not the protective one as described by
    UEFI.
  * Bug fix: Oversized text in ISO_SYSAREA_REPORT_DOC_ALPHA.
  * New pseudo path for El Torito boot images:
  - -interval:appened_partition_N:all::
  * New bit15 with options of iso_write_opts_set_system_area() to
    enforce MBR bootable/active flag.
  * New API calls iso_write_opts_set_appended_as_apm(),
    iso_write_opts_set_part_like_isohybrid().
  * Introduced image size tolerance of 300 kB in order to recognize
    SUN Disk Label that was generated by genisoimage -B "...".
  * Added "extern C" to libisofs.h
  * Removed option --silent from libtool runs.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: SIGSEGV by NULL when a data file was larger than ISO
    level allows.
  * Bug fix: Interpretation of 17 digit timestamps was wrong.
  * New API calls iso_generate_gpt_guid() and
    iso_write_opts_set_gpt_guid().
  * Made several pseudo-random ids reproducible by overriding
    volume modification time.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1487419200">- Added new build requirement libjte-devel for Tumbleweed and
  Leap &gt;= 42.3.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488024000">- Use sle_version &gt;= 120300 instead of leap_version &gt;= 420300
  (leap_version does not work).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: iso_read_opts_set_no_rockridge() did not prevent
    reading of root SUSP.
  * Bug fix: Non-SUSP data in System Use Area prevented image
    loading if Rock Ridge was enabled.
  * Bug fix: Protective MBR for GPT could emerge with boot flag
    set.
  * Bug fix: Appended partitions of size &gt;= 4 GiB led to abort with
    error message "FATAL : ISO overwrite".
  * Bug fix: Bit 15 of iso_write_opts_set_system_area did not work
    with generic MBR.
  * Bug fix: Keeping and patching of loaded boot images failed.
    Regression by version 1.4.4.
  * Bug fix: Program crashes by intentionally wrong ISO image
    input. Debian bug reports: deb#872372, deb#872475, deb#872545,
    deb#872590, deb#872761.
  * New API calls el_torito_set_full_load(),
    el_torito_get_full_load().
  * New API call iso_write_opts_set_iso_mbr_part_type().</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to 1.5.0:
  * Bug fix: Multi-session emulation was not recognized with non-zero partition
  * New bit10 of isoburn_drive_acquire() to accept all xattr namespaces
  * New -xattr mode "any" to process all xattr namespaces of local filesystem
  * New -as mkisofs option --xattr-any
  * New -as mkisofs options -uid and -gid</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 1.5.2
  * New API calls iso_write_opts_set_part_type_guid(),
    iso_write_opts_set_iso_type_guid()
  * New API call iso_nowtime()
  * New flag bit2 of iso_node_set_acl_text() to be verbous about
    failures
  * Made libisofs ready for building out-of-source.
  * Bug fix: Appended GPT partitions were not covered by the
    protective MBR partition
  * Bug fix: Multi-session emulation spoiled GPT production.
    "GPT partitions ... overlap". Regression towards 1.4.8
  * Bug fix: Appending partitions 5 to 8 caused damaged ISO
    filesystems if not for SUN disk label
  * Bug fix: SIGSEGV happened if options bit 14 of
    iso_write_opts_set_system_area() is set and no El Torito
    boot image is defined
- Add signature and keyring as sources
- Spec cleanup</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 1.5.4:
  * Bug fix: Large amounts of AAIP data or many long file names could cause
    with zisofs an unreadable filesystem after the warning "Calculated and
    written ECMA-119 tree end differ" Bug fix: Big-Endian MIPS Volume Header
    boot file size was rounded up to full 2048.
  * Bug fix: El Torito production failed if no catalog path is given and the
    first boot image path contains no slash
  * Bug fix: zisofs production was wrong on big-endian machines
  * Bug fix: Apple Partition Map entries wrote uninitialized data
  * Bug fix: Appended APM partitions without HFS+ production had start
    and size 1
  * Switched to usage of libjte-2.0.0
  * Implemented production and reading of zisofs2 for files larger than
    4 GiB - 1
  * New struct iso_zisofs_ctrl version 2
  * New API call iso_stream_get_zisofs_par()
  * New API call iso_stream_zisofs_discard_bpt()
  * New API call iso_image_zisofs_discard_bpt()
  * New flag bits 8 to 15 in API call iso_node_zf_by_magic()
  * New API call iso_zisofs_ctrl_susp_z2()
  * New API call iso_read_opts_set_joliet_map(), new default
    joliet_map=stripped
  * New API calls iso_read_image_features_tree_loaded() and
    iso_read_image_features_rr_loaded()</changelog>
  <changelog author="dimstar@opensuse.org" date="1615377600">- Support building against libjte-1 or libjte-2.</changelog>
</package>
<package pkgid="dcceedf7758b0e795aced141e27f98459793da3f68bb7ef3928270330cb32b831019c29405bdfbf5907afd37a5a799687437ee915a42c6daf82230d61fe1c9ed" name="libisofs6-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="slfo.1.1_1.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to 1.4.2:
  * Bug fix: zisofs compression caused SIGSEGV (by reading) with
    files larger than 524160 KiB.
  * Bug fix: iso_node_get_name() of root node returned NULL pointer
    rather than an empty string
  * Bug fix: Names read from Joliet tree where stripped of trailing
    ";1"
  * Now sorting the data file content extents by ECMA-119 tree,
    rather than by the red-black tree which shall consolidate files
    with identical source object.
  * New API call iso_read_opts_set_ecma119_map().
  * New AAIP variable isofs.nt records name truncation parameters.
  * Rectified handling of oversized filenames by new API calls:
    iso_image_set_truncate_mode, iso_image_get_truncate_mode,
    iso_truncate_leaf_name, iso_image_set_node_name,
    iso_image_tree_clone, iso_image_add_new_dir,
    iso_image_add_new_file, iso_image_add_new_special,
    iso_image_add_new_symlink, iso_image_dir_get_node,
    iso_image_path_to_node
  * Result of a Coverity audit: 50+ code changes, but no
    easy-to-trigger bugs</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: HFS+ production could cause MBR partition of type 0xEE
    without GPT.
  * Bug fix: Protective MBR was not produced if no System Area data
    are given.
  * Bug fix: Protective MBR was not recognized if partition is
    appended.
  * Bug fix: The HFS+ filesystem was not marked in GPT of GRUB2
    hybrid layout.
  * Bug fix: HFS+ directories could announce more children than
    they actually have.
  * Bug fix: At image loading time GRUB2 MBR was not recognized if
    the partition table is not the protective one as described by
    UEFI.
  * Bug fix: Oversized text in ISO_SYSAREA_REPORT_DOC_ALPHA.
  * New pseudo path for El Torito boot images:
  - -interval:appened_partition_N:all::
  * New bit15 with options of iso_write_opts_set_system_area() to
    enforce MBR bootable/active flag.
  * New API calls iso_write_opts_set_appended_as_apm(),
    iso_write_opts_set_part_like_isohybrid().
  * Introduced image size tolerance of 300 kB in order to recognize
    SUN Disk Label that was generated by genisoimage -B "...".
  * Added "extern C" to libisofs.h
  * Removed option --silent from libtool runs.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: SIGSEGV by NULL when a data file was larger than ISO
    level allows.
  * Bug fix: Interpretation of 17 digit timestamps was wrong.
  * New API calls iso_generate_gpt_guid() and
    iso_write_opts_set_gpt_guid().
  * Made several pseudo-random ids reproducible by overriding
    volume modification time.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1487419200">- Added new build requirement libjte-devel for Tumbleweed and
  Leap &gt;= 42.3.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488024000">- Use sle_version &gt;= 120300 instead of leap_version &gt;= 420300
  (leap_version does not work).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: iso_read_opts_set_no_rockridge() did not prevent
    reading of root SUSP.
  * Bug fix: Non-SUSP data in System Use Area prevented image
    loading if Rock Ridge was enabled.
  * Bug fix: Protective MBR for GPT could emerge with boot flag
    set.
  * Bug fix: Appended partitions of size &gt;= 4 GiB led to abort with
    error message "FATAL : ISO overwrite".
  * Bug fix: Bit 15 of iso_write_opts_set_system_area did not work
    with generic MBR.
  * Bug fix: Keeping and patching of loaded boot images failed.
    Regression by version 1.4.4.
  * Bug fix: Program crashes by intentionally wrong ISO image
    input. Debian bug reports: deb#872372, deb#872475, deb#872545,
    deb#872590, deb#872761.
  * New API calls el_torito_set_full_load(),
    el_torito_get_full_load().
  * New API call iso_write_opts_set_iso_mbr_part_type().</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to 1.5.0:
  * Bug fix: Multi-session emulation was not recognized with non-zero partition
  * New bit10 of isoburn_drive_acquire() to accept all xattr namespaces
  * New -xattr mode "any" to process all xattr namespaces of local filesystem
  * New -as mkisofs option --xattr-any
  * New -as mkisofs options -uid and -gid</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 1.5.2
  * New API calls iso_write_opts_set_part_type_guid(),
    iso_write_opts_set_iso_type_guid()
  * New API call iso_nowtime()
  * New flag bit2 of iso_node_set_acl_text() to be verbous about
    failures
  * Made libisofs ready for building out-of-source.
  * Bug fix: Appended GPT partitions were not covered by the
    protective MBR partition
  * Bug fix: Multi-session emulation spoiled GPT production.
    "GPT partitions ... overlap". Regression towards 1.4.8
  * Bug fix: Appending partitions 5 to 8 caused damaged ISO
    filesystems if not for SUN disk label
  * Bug fix: SIGSEGV happened if options bit 14 of
    iso_write_opts_set_system_area() is set and no El Torito
    boot image is defined
- Add signature and keyring as sources
- Spec cleanup</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 1.5.4:
  * Bug fix: Large amounts of AAIP data or many long file names could cause
    with zisofs an unreadable filesystem after the warning "Calculated and
    written ECMA-119 tree end differ" Bug fix: Big-Endian MIPS Volume Header
    boot file size was rounded up to full 2048.
  * Bug fix: El Torito production failed if no catalog path is given and the
    first boot image path contains no slash
  * Bug fix: zisofs production was wrong on big-endian machines
  * Bug fix: Apple Partition Map entries wrote uninitialized data
  * Bug fix: Appended APM partitions without HFS+ production had start
    and size 1
  * Switched to usage of libjte-2.0.0
  * Implemented production and reading of zisofs2 for files larger than
    4 GiB - 1
  * New struct iso_zisofs_ctrl version 2
  * New API call iso_stream_get_zisofs_par()
  * New API call iso_stream_zisofs_discard_bpt()
  * New API call iso_image_zisofs_discard_bpt()
  * New flag bits 8 to 15 in API call iso_node_zf_by_magic()
  * New API call iso_zisofs_ctrl_susp_z2()
  * New API call iso_read_opts_set_joliet_map(), new default
    joliet_map=stripped
  * New API calls iso_read_image_features_tree_loaded() and
    iso_read_image_features_rr_loaded()</changelog>
  <changelog author="dimstar@opensuse.org" date="1615377600">- Support building against libjte-1 or libjte-2.</changelog>
</package>
<package pkgid="eb80bd5833487293110d5ef44dfbecc3f53aad25623da72288c5c8410c289784bb928aca27e0a8cb333519a6b48540802b71c442a0d81708450009c384ca0e4d" name="libiw30-debuginfo" arch="aarch64">
  <version epoch="0" ver="30.pre9" rel="slfo.1.1_1.2"/>
  <changelog author="rmilasan@suse.com" date="1360929600">- Move iwlwifi-led.sh to where udev is installed using pkg-config.
  Apply the same thing also for 99-iwlwifi-led.rules (only
  openSUSE 12.3 and up).</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385640000">- install udev rules in _udevrulesdir.</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- Remove superfluous iwlagn module config (bnc#831819)
- Fix build with openSUSE 12.2 and SLE11</changelog>
  <changelog author="ledest@gmail.com" date="1413633600">- fix bashisms in install_*_scripts</changelog>
  <changelog author="ledest@gmail.com" date="1413633601">- update URL in install_intersil_firmware script</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1516622400">- improved install scripts (using install instead of mv and using $UID:
  * install_acx100_firmware
  * install_intersil_firmware
- updated URL in install_acx100_firmware script (bnc#1004577)
- improved spec file
  * removed obsolete openSUSE Versions checks
  * replaced bash variables with macros
  * removed obsolete tags and macros
  * cleaned spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1575115200">- Convert wireless-tools.changes to proper UTF-8 format: new
  version of RPM are getting strict in interpreting files.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files in %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mwilck@suse.com" date="1646740800">- Fix URLs (wireless-tools home page has been migrated to github.io)</changelog>
</package>
<package pkgid="480a7cda924bd7286717a358e1acda9ecdc043b9b849e737a4d687584bf619915ccf7124d5d534ff27b9973b12194a3d9f6539021ff76b2c6938124a1aff36d7" name="libjansson-debugsource" arch="aarch64">
  <version epoch="0" ver="2.14" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- update to new upstream release 2.11
  * New features:
  - Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
  - Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
  - Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
  - Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Bug Fixes:
  - Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
  - Make json_equal() const-correct (#344).
  - Fix incomplete stealing of references by `json_pack()` (#374)
- changelog from 2.9
  * New features:
  - Add JSON_EMBED encoding flag allowing arrays and objects to
    be encoded into existing streams (#329).
  - Add `json_dumpb()` function for dumping to a pre-allocated
    buffer (#328).
  - Add `json_dumpfd()` and `json_loadfd()` functions for dumping
    to streaming file descriptors (#328).
  - Add support for parsing buffers larger than 2GB (#309).</changelog>
  <changelog author="info@paolostivanin.com" date="1548331200">- update to new upstream release 2.12
  * Bug fixes:
  - Fix error message in `json_pack()` for NULL object (#409).
  - Avoid invalid memory read in `json_pack()` (#421).
  - Call va_end after va_copy in `json_vsprintf()` (#427).
  - Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
  - Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).</changelog>
  <changelog author="info@paolostivanin.com" date="1588939200">- Update to 2.13.1
  * New Features:
  - Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
  - Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
  - Add json_object_update_recursive()
  * Bug fixes:
  - Add infinite loop check in json_deep_copy()
  - Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
  - Update version detection for sphinx-build
  * Documentation improvements</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1642507200">- Update to 2.14:
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
  * Fixes:
    + Handle `sprintf` corner cases.
  * Build:
    + Symbol versioning for all exported symbols (gh#akheron/jansson#523).
    + Fix compiler warnings.
  * Documentation:
    + Small fixes.
    + Sphinx 3 compatibility (gh#akheron/jansson#530).
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Cleanup with spec-cleaner.
- Add check section.</changelog>
</package>
<package pkgid="3a21cb16085a7b09be598e96647adf2961c7f8f0cdc85eb4d02e4cc9aa6a94cd654f425cb3b7555e1f91ac4ecb5fa74086bbbde3c47220691764368845a8a77d" name="libjansson4-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.14" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- update to new upstream release 2.11
  * New features:
  - Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
  - Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
  - Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
  - Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Bug Fixes:
  - Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
  - Make json_equal() const-correct (#344).
  - Fix incomplete stealing of references by `json_pack()` (#374)
- changelog from 2.9
  * New features:
  - Add JSON_EMBED encoding flag allowing arrays and objects to
    be encoded into existing streams (#329).
  - Add `json_dumpb()` function for dumping to a pre-allocated
    buffer (#328).
  - Add `json_dumpfd()` and `json_loadfd()` functions for dumping
    to streaming file descriptors (#328).
  - Add support for parsing buffers larger than 2GB (#309).</changelog>
  <changelog author="info@paolostivanin.com" date="1548331200">- update to new upstream release 2.12
  * Bug fixes:
  - Fix error message in `json_pack()` for NULL object (#409).
  - Avoid invalid memory read in `json_pack()` (#421).
  - Call va_end after va_copy in `json_vsprintf()` (#427).
  - Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
  - Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).</changelog>
  <changelog author="info@paolostivanin.com" date="1588939200">- Update to 2.13.1
  * New Features:
  - Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
  - Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
  - Add json_object_update_recursive()
  * Bug fixes:
  - Add infinite loop check in json_deep_copy()
  - Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
  - Update version detection for sphinx-build
  * Documentation improvements</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1642507200">- Update to 2.14:
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
  * Fixes:
    + Handle `sprintf` corner cases.
  * Build:
    + Symbol versioning for all exported symbols (gh#akheron/jansson#523).
    + Fix compiler warnings.
  * Documentation:
    + Small fixes.
    + Sphinx 3 compatibility (gh#akheron/jansson#530).
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Cleanup with spec-cleaner.
- Add check section.</changelog>
</package>
<package pkgid="0aa49d248aa0b79ee470c48091dd9999b6cc24a15026cbfed4c9646db5b8ab88f6bab53dffc55283b678218dbf8729c0429fbba991e769f29511efa6bf33c3cf" name="libjbig2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1" rel="slfo.1.1_2.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- Makefile is not parallel-safe</changelog>
  <changelog author="pgajdos@suse.com" date="1750161600">- version update to 2.1
- added patches
  CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="0c6d6628eb4b6468b146032342c5596801f13f4909b578493fc33b27993d33940267fbb6f5740c9cbb75a89b626af7585327d99dcb07ebe356ca982a8ae319fc" name="libjcat-debugsource" arch="aarch64">
  <version epoch="0" ver="0.1.14" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1591704000">- Update to version 0.1.2+3:
  * Validate that gpgme_op_verify_result() returned at least one
    signature (CVE-2020-10759).</changelog>
  <changelog author="bwiedemann@suse.com" date="1593086400">- remove unreproducible signature file to make package build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1596110400">- Update to version 0.1.3:
  * Export the JcatBlobKind and JcatBlobMethod on the result
  * trivial: source the version header when including &lt;jcat.h&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1636804800">- update to 0.1.8:
  * Fix a warning when used in a subproject
  * Fix compilation on FreeBSD
  * Do not use help2man to build manual pages
  * Fall back to the AliasId for validation
  * Fix jcat_context_verify_blob() to use self verify for checksums
  * Allow verifying expired certificates with an additional argument
  * Allow compiling json-glib as a subproject
  * Export the old JCatEngine property to preserve internal ABI
  * Do not fail verification if compiled without an engine</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 0.1.9:
  * Set which backends are supported in the pkgconfig file
  * Use -Dcli=false to reduce the install size
  * Return an error if we try to self-sign no bytes of data
  * Show a more accurate output when not all engines are enabled</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 0.1.10:
  - Add ED25519 support (Richard Hughes)
  - Define three more types used for the firmware transparency log (Richard Hughes)
  - Include the pkgconfig variables in the subproject dependency (Richard Hughes)
  - Drop the use of setuptools in the test script for regenerating ld version file (Eli Schwartz)
  - Use the correct lookup method for the python3 script interpreter (Eli Schwartz)</changelog>
  <changelog author="dmueller@suse.com" date="1650542400">- update to 0.1.11:
  - Allow the user to get the runtime library version (Richard Hughes)
  - Fix incorrect certtool being called on macOS (Richard Hughes)</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 0.1.12:
  * Correctly export the AliasIds in all cases (Richard Hughes)
  * Install installed-test firmware.bin.ed25519 (Jan Tojnar)
  * Predate test cert activation date by 1 day (David Bonner)</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 0.1.13:
  * Add support for SHA512 checksums (Richard Hughes)
  * Add the ability to add and remove support for blob types
  * Fix header includes for clang-tidy (Richard Hughes)
  * Show the expected SHA checksum in the error (Richard
    Hughes)</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- update to 0.1.14:
  * Fix header includes (Daisuke Fujimura)
  * Fix prefix of LIBJCAT_CHECK_VERSION (Richard Hughes)
  * Use project_source_root to fix building as a subproject</changelog>
</package>
<package pkgid="a6b1fe1f96691e7101f568dfa5fcae9c5c791302c42e8572617bc79cbaa9f3a1f0b80a1d21ad5da390d6f3bb2935446ebc21dc89db25715bb107c91964c58d0f" name="libjcat1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.1.14" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1591704000">- Update to version 0.1.2+3:
  * Validate that gpgme_op_verify_result() returned at least one
    signature (CVE-2020-10759).</changelog>
  <changelog author="bwiedemann@suse.com" date="1593086400">- remove unreproducible signature file to make package build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1596110400">- Update to version 0.1.3:
  * Export the JcatBlobKind and JcatBlobMethod on the result
  * trivial: source the version header when including &lt;jcat.h&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1636804800">- update to 0.1.8:
  * Fix a warning when used in a subproject
  * Fix compilation on FreeBSD
  * Do not use help2man to build manual pages
  * Fall back to the AliasId for validation
  * Fix jcat_context_verify_blob() to use self verify for checksums
  * Allow verifying expired certificates with an additional argument
  * Allow compiling json-glib as a subproject
  * Export the old JCatEngine property to preserve internal ABI
  * Do not fail verification if compiled without an engine</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 0.1.9:
  * Set which backends are supported in the pkgconfig file
  * Use -Dcli=false to reduce the install size
  * Return an error if we try to self-sign no bytes of data
  * Show a more accurate output when not all engines are enabled</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 0.1.10:
  - Add ED25519 support (Richard Hughes)
  - Define three more types used for the firmware transparency log (Richard Hughes)
  - Include the pkgconfig variables in the subproject dependency (Richard Hughes)
  - Drop the use of setuptools in the test script for regenerating ld version file (Eli Schwartz)
  - Use the correct lookup method for the python3 script interpreter (Eli Schwartz)</changelog>
  <changelog author="dmueller@suse.com" date="1650542400">- update to 0.1.11:
  - Allow the user to get the runtime library version (Richard Hughes)
  - Fix incorrect certtool being called on macOS (Richard Hughes)</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- update to 0.1.12:
  * Correctly export the AliasIds in all cases (Richard Hughes)
  * Install installed-test firmware.bin.ed25519 (Jan Tojnar)
  * Predate test cert activation date by 1 day (David Bonner)</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 0.1.13:
  * Add support for SHA512 checksums (Richard Hughes)
  * Add the ability to add and remove support for blob types
  * Fix header includes for clang-tidy (Richard Hughes)
  * Show the expected SHA checksum in the error (Richard
    Hughes)</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- update to 0.1.14:
  * Fix header includes (Daisuke Fujimura)
  * Fix prefix of LIBJCAT_CHECK_VERSION (Richard Hughes)
  * Use project_source_root to fix building as a subproject</changelog>
</package>
<package pkgid="1b5c282f171eeedfd2b00a899ef27841fb577e84cb6e600712a4d635b9963878184cc0e859de1d353e4b1c79918caa1ba1243b516d831b9ac16f997ed48b2c82" name="libjpeg-turbo-debugsource" arch="aarch64">
  <version epoch="0" ver="3.0.2" rel="slfo.1.1_1.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1660564800">- update to 2.1.4:
  * Fixed a regression introduced in 2.1.3 that caused build failures with
    Visual Studio 2010.
  * The tjDecompressHeader3() function in the TurboJPEG C API and the
    TJDecompressor.setSourceImage() method in the TurboJPEG Java API now
    accept "abbreviated table specification" (AKA "tables-only") datastreams,
    which can be used to prime the decompressor with quantization and Huffman
    tables that can be used when decompressing subsequent "abbreviated image"
    datastreams.
  * libjpeg-turbo now performs run-time detection of AltiVec instructions on
    OS X/PowerPC systems if AltiVec instructions are not enabled at compile
    time. This allows both AltiVec-equipped (PowerPC G4 and G5) and
    non-AltiVec-equipped (PowerPC G3) CPUs to be supported using the same
    build of libjpeg-turbo.
  * Fixed an error ("Bogus virtual array access") that occurred when
    attempting to decompress a progressive JPEG image with a height less than
    or equal to one iMCU (8 * the vertical sampling factor) using
    buffered-image mode with interblock smoothing enabled. This was a
    regression introduced by 2.1 beta1[6(b)].
  * Fixed two issues that prevented partial image decompression from working
    properly with buffered-image mode:
  * Attempting to call jpeg_crop_scanline() after jpeg_start_decompress()
    but before jpeg_start_output() resulted in an error ("Improper call to
    JPEG library in state 207".)
  * Attempting to use jpeg_skip_scanlines() resulted in an error ("Bogus
    virtual array access") under certain circumstances.</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.4:
  * The `tjDecompressHeader3()` function in the TurboJPEG C API and the
    `TJDecompressor.setSourceImage()` method in the TurboJPEG Java API now accept
    "abbreviated table specification" (AKA "tables-only") datastreams, which can be
    used to prime the decompressor with quantization and Huffman tables that can be
    used when decompressing subsequent "abbreviated image" datastreams.
  * libjpeg-turbo now performs run-time detection of AltiVec instructions on
    OS X/PowerPC systems if AltiVec instructions are not enabled at compile time.
    This allows both AltiVec-equipped (PowerPC G4 and G5) and non-AltiVec-equipped
    (PowerPC G3) CPUs to be supported using the same build of libjpeg-turbo.
  * Fixed an error ("Bogus virtual array access") that occurred when attempting
    to decompress a progressive JPEG image with a height less than or equal to one
    iMCU (8 * the vertical sampling factor) using buffered-image mode with
    interblock smoothing enabled.
  * Fixed two issues that prevented partial image decompression from working
    properly with buffered-image mode:
  - Attempting to call `jpeg_crop_scanline()` after
  `jpeg_start_decompress()` but before `jpeg_start_output()` resulted in an error
  ("Improper call to JPEG library in state 207".)
  - Attempting to use `jpeg_skip_scanlines()` resulted in an error ("Bogus
  virtual array access") under certain circumstances.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1671883200">- Add explicit provides for jpegtran, so it can be installed easier</changelog>
  <changelog author="info@paolostivanin.com" date="1676980800">- update to 2.1.5.1:
  * Fixed a regression introduced by 2.0 beta1[15] that caused a buffer
    overrun in the progressive Huffman encoder when attempting to transform
    a specially-crafted malformed 12-bit-per-component JPEG image into a
    progressive 12-bit-per-component JPEG image using a 12-bit-per-component
    build of libjpeg-turbo.
  * Fixed an issue whereby, when using a 12-bit-per-component build of
    libjpeg-turbo (-DWITH_12BIT=1), passing samples with values greater than 4095
    or less than 0 to jpeg_write_scanlines() caused a buffer overrun or
    underrun in the RGB-to-YCbCr color converter.
  * Fixed a floating point exception that occurred when attempting to use
    the jpegtran -drop and -trim options to losslessly transform a
    specially-crafted malformed JPEG image.
  * Fixed an issue in tjBufSizeYUV2() whereby it returned a bogus result,
    rather than throwing an error, if the align parameter was not a power of 2.
  * Fixed a similar issue in tjCompressFromYUV() whereby it generated a corrupt
    JPEG image in certain cases, rather than throwing an error,
    if the align parameter was not a power of 2.
  * Fixed an issue whereby tjDecompressToYUV2(), which is a wrapper for
    tjDecompressToYUVPlanes(), used the desired YUV image dimensions
    rather than the actual scaled image dimensions when computing the plane
    pointers and strides to pass to tjDecompressToYUVPlanes().
    This caused a buffer overrun and subsequent segfault if the desired
    image dimensions exceeded the scaled image dimensions.
  * Fixed an issue whereby, when decompressing a 12-bit-per-component JPEG
    image (-DWITH_12BIT=1) using an alpha-enabled output color space such as
    JCS_EXT_RGBA, the alpha channel was set to 255 rather than 4095.
  * Fixed an issue whereby the Java version of TJBench did not accept a range
    of quality values.
  * Fixed an issue whereby, when -progressive was passed to TJBench,
    the JPEG input image was not transformed into a progressive JPEG image
    prior to decompression.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="pgajdos@suse.com" date="1687521600">- merge two spec files into one</changelog>
  <changelog author="dmueller@suse.com" date="1704110400">- update to 3.0.1 (bsc#1211542, CVE-2023-2804):
  * The x86-64 SIMD functions now use a standard stack frame,
    prologue, and epilogue so that debuggers and profilers can
    reliably capture backtraces from within the functions.
  * Fixed two minor issues in the interblock smoothing algorithm
    that caused mathematical (but not necessarily perceptible)
    edge block errors when decompressing progressive JPEG images
    exactly two MCU blocks in width or that use vertical
    chrominance subsampling.
  * The TurboJPEG API now supports 4:4:1 (transposed 4:1:1)
    chrominance subsampling, which allows losslessly transposed or
    rotated 4:1:1 JPEG images to be losslessly cropped, partially
    decompressed, or decompressed to planar YUV images.
  * Fixed various segfaults and buffer overruns (CVE-2023-2804)
  * that occurred when attempting to decompress various
    specially-crafted malformed 12-bit-per-component and
    16-bit-per-component lossless JPEG images using color
    quantization or merged chroma upsampling/color conversion.  The
    underlying cause of these issues was that the color
    quantization and merged chroma upsampling/color conversion
    algorithms were not designed with lossless decompression
    in mind.  Since libjpeg-turbo explicitly does not support color
    conversion when compressing or decompressing lossless JPEG
    images, merged chroma upsampling/color conversion never should
    have been enabled for such images.  Color quantization is a
    legacy feature that serves little or no purpose with lossless
    JPEG images, so it is also now disabled when decompressing such
    images.  (As a result, djpeg can no longer decompress a
    lossless JPEG image into a GIF image.)
  * Fixed an oversight in 1.4 beta1[8] that caused various
    segfaults and buffer overruns when attempting to decompress
    various specially-crafted malformed 12-bit-per-component JPEG
    images using djpeg with both color quantization and RGB565
    color conversion enabled.
  * Fixed an issue whereby `jpeg_crop_scanline()` sometimes
    miscalculated the downsampled width for components with 4x2 or
    2x4 subsampling factors if decompression scaling was enabled.
    This caused the components to be upsampled incompletely, which
    caused the color converter to read from uninitialized memory.
    With 12-bit data precision, this caused a buffer overrun or
    underrun and subsequent segfault if the sample value read from
    uninitialized memory was outside of the valid sample range.
  * Fixed a long-standing issue whereby the `tj3Transform()`
    function, when used with the `TJXOP_TRANSPOSE`,
    `TJXOP_TRANSVERSE`, `TJXOP_ROT90`, or `TJXOP_ROT270` transform
    operation and without automatic JPEG destination buffer
    (re)allocation or lossless cropping, computed the worst-case
    transformed JPEG image size based on the source image
    dimensions rather than the transformed image dimensions.  If a
    calling program allocated the JPEG destination buffer based on
    the transformed image dimensions, as the API documentation
    instructs, and attempted to transform a specially-crafted
    4:2:2, 4:4:0, 4:1:1, or 4:4:1 JPEG source image containing a
    large amount of metadata, the issue caused `tj3Transform()` to
    overflow the JPEG destination buffer rather than fail
    gracefully.  The issue could be worked around by setting
    `TJXOPT_COPYNONE`.  Note that, irrespective of this issue,
    `tj3Transform()` cannot reliably transform JPEG source images
    that contain a large amount of metadata unless automatic JPEG
    destination buffer (re)allocation is used or `TJXOPT_COPYNONE`
    is set.
  * Significantly sped up the computation of optimal Huffman
    tables. This speeds up the compression of tiny images by as
    much as 2x and provides a noticeable speedup for images as
    large as 256x256 when using optimal Huffman tables.
  * All deprecated fields, constructors, and methods in the
    TurboJPEG Java API have been removed.
  * Arithmetic entropy coding is now supported with
    12-bit-per-component JPEG images.
  * Overhauled the TurboJPEG API to address long-standing
    limitations and to make the API more extensible and intuitive.</changelog>
  <changelog author="schwab@suse.de" date="1705320000">- Do not require SIMD support when it does not exist</changelog>
  <changelog author="mardnh@gmx.de" date="1707134400">- Update to version 3.0.2
  * Fixed a signed integer overflow in the tj3CompressFromYUV8(),
    tj3DecodeYUV8(), tj3DecompressToYUV8(), and tj3EncodeYUV8()
    functions, detected by the Clang and GCC undefined behavior
    sanitizers, that could be triggered by setting the align
    parameter to an unreasonably large value. This issue did not
    pose a security threat, but removing the warning made it
    easier to detect actual security issues, should they arise in
    the future.
  * Introduced a new parameter (TJPARAM_MAXMEMORY in the
    TurboJPEG C API and TJ.PARAM_MAXMEMORY in the TurboJPEG Java
    API) and a corresponding TJBench option (-maxmemory) for
    specifying the maximum amount of memory (in megabytes) that
    will be allocated for intermediate buffers, which are used
    with progressive JPEG compression and decompression, optimized
    baseline entropy coding, lossless JPEG compression, and
    lossless transformation. The new parameter and option serve
    the same purpose as the max_memory_to_use field in the
    jpeg_memory_mgr struct in the libjpeg API, the JPEGMEM
    environment variable, and the cjpeg/djpeg/jpegtran -maxmemory
    option.
  * Introduced a new parameter (TJPARAM_MAXPIXELS in the TurboJPEG
    C API and TJ.PARAM_MAXPIXELS in the TurboJPEG Java API) and a
    corresponding TJBench option (-maxpixels) for specifying the
    maximum number of pixels that the decompression, lossless
    transformation, and packed-pixel image loading
    functions/methods will process.
  * Fixed an error ("Unsupported color conversion request") that
    occurred when attempting to decompress a 3-component lossless
    JPEG image without an Adobe APP14 marker. The decompressor
    now assumes that a 3-component lossless JPEG image without an
    Adobe APP14 marker uses the RGB colorspace if its component
    IDs are 1, 2, and 3.</changelog>
</package>
<package pkgid="4a0c80e00e2e2ddaa3269ba2bc95b6dd1a19a7ed1bad8f9d6aed6821c462fe5ae2bed25aab82e9983fc33a295793b180d8988e7341a598a193b65179e2ea4f32" name="libjpeg8-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.3.2" rel="slfo.1.1_1.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1660564800">- update to 2.1.4:
  * Fixed a regression introduced in 2.1.3 that caused build failures with
    Visual Studio 2010.
  * The tjDecompressHeader3() function in the TurboJPEG C API and the
    TJDecompressor.setSourceImage() method in the TurboJPEG Java API now
    accept "abbreviated table specification" (AKA "tables-only") datastreams,
    which can be used to prime the decompressor with quantization and Huffman
    tables that can be used when decompressing subsequent "abbreviated image"
    datastreams.
  * libjpeg-turbo now performs run-time detection of AltiVec instructions on
    OS X/PowerPC systems if AltiVec instructions are not enabled at compile
    time. This allows both AltiVec-equipped (PowerPC G4 and G5) and
    non-AltiVec-equipped (PowerPC G3) CPUs to be supported using the same
    build of libjpeg-turbo.
  * Fixed an error ("Bogus virtual array access") that occurred when
    attempting to decompress a progressive JPEG image with a height less than
    or equal to one iMCU (8 * the vertical sampling factor) using
    buffered-image mode with interblock smoothing enabled. This was a
    regression introduced by 2.1 beta1[6(b)].
  * Fixed two issues that prevented partial image decompression from working
    properly with buffered-image mode:
  * Attempting to call jpeg_crop_scanline() after jpeg_start_decompress()
    but before jpeg_start_output() resulted in an error ("Improper call to
    JPEG library in state 207".)
  * Attempting to use jpeg_skip_scanlines() resulted in an error ("Bogus
    virtual array access") under certain circumstances.</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.4:
  * The `tjDecompressHeader3()` function in the TurboJPEG C API and the
    `TJDecompressor.setSourceImage()` method in the TurboJPEG Java API now accept
    "abbreviated table specification" (AKA "tables-only") datastreams, which can be
    used to prime the decompressor with quantization and Huffman tables that can be
    used when decompressing subsequent "abbreviated image" datastreams.
  * libjpeg-turbo now performs run-time detection of AltiVec instructions on
    OS X/PowerPC systems if AltiVec instructions are not enabled at compile time.
    This allows both AltiVec-equipped (PowerPC G4 and G5) and non-AltiVec-equipped
    (PowerPC G3) CPUs to be supported using the same build of libjpeg-turbo.
  * Fixed an error ("Bogus virtual array access") that occurred when attempting
    to decompress a progressive JPEG image with a height less than or equal to one
    iMCU (8 * the vertical sampling factor) using buffered-image mode with
    interblock smoothing enabled.
  * Fixed two issues that prevented partial image decompression from working
    properly with buffered-image mode:
  - Attempting to call `jpeg_crop_scanline()` after
  `jpeg_start_decompress()` but before `jpeg_start_output()` resulted in an error
  ("Improper call to JPEG library in state 207".)
  - Attempting to use `jpeg_skip_scanlines()` resulted in an error ("Bogus
  virtual array access") under certain circumstances.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1671883200">- Add explicit provides for jpegtran, so it can be installed easier</changelog>
  <changelog author="info@paolostivanin.com" date="1676980800">- update to 2.1.5.1:
  * Fixed a regression introduced by 2.0 beta1[15] that caused a buffer
    overrun in the progressive Huffman encoder when attempting to transform
    a specially-crafted malformed 12-bit-per-component JPEG image into a
    progressive 12-bit-per-component JPEG image using a 12-bit-per-component
    build of libjpeg-turbo.
  * Fixed an issue whereby, when using a 12-bit-per-component build of
    libjpeg-turbo (-DWITH_12BIT=1), passing samples with values greater than 4095
    or less than 0 to jpeg_write_scanlines() caused a buffer overrun or
    underrun in the RGB-to-YCbCr color converter.
  * Fixed a floating point exception that occurred when attempting to use
    the jpegtran -drop and -trim options to losslessly transform a
    specially-crafted malformed JPEG image.
  * Fixed an issue in tjBufSizeYUV2() whereby it returned a bogus result,
    rather than throwing an error, if the align parameter was not a power of 2.
  * Fixed a similar issue in tjCompressFromYUV() whereby it generated a corrupt
    JPEG image in certain cases, rather than throwing an error,
    if the align parameter was not a power of 2.
  * Fixed an issue whereby tjDecompressToYUV2(), which is a wrapper for
    tjDecompressToYUVPlanes(), used the desired YUV image dimensions
    rather than the actual scaled image dimensions when computing the plane
    pointers and strides to pass to tjDecompressToYUVPlanes().
    This caused a buffer overrun and subsequent segfault if the desired
    image dimensions exceeded the scaled image dimensions.
  * Fixed an issue whereby, when decompressing a 12-bit-per-component JPEG
    image (-DWITH_12BIT=1) using an alpha-enabled output color space such as
    JCS_EXT_RGBA, the alpha channel was set to 255 rather than 4095.
  * Fixed an issue whereby the Java version of TJBench did not accept a range
    of quality values.
  * Fixed an issue whereby, when -progressive was passed to TJBench,
    the JPEG input image was not transformed into a progressive JPEG image
    prior to decompression.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="pgajdos@suse.com" date="1687521600">- merge two spec files into one</changelog>
  <changelog author="dmueller@suse.com" date="1704110400">- update to 3.0.1 (bsc#1211542, CVE-2023-2804):
  * The x86-64 SIMD functions now use a standard stack frame,
    prologue, and epilogue so that debuggers and profilers can
    reliably capture backtraces from within the functions.
  * Fixed two minor issues in the interblock smoothing algorithm
    that caused mathematical (but not necessarily perceptible)
    edge block errors when decompressing progressive JPEG images
    exactly two MCU blocks in width or that use vertical
    chrominance subsampling.
  * The TurboJPEG API now supports 4:4:1 (transposed 4:1:1)
    chrominance subsampling, which allows losslessly transposed or
    rotated 4:1:1 JPEG images to be losslessly cropped, partially
    decompressed, or decompressed to planar YUV images.
  * Fixed various segfaults and buffer overruns (CVE-2023-2804)
  * that occurred when attempting to decompress various
    specially-crafted malformed 12-bit-per-component and
    16-bit-per-component lossless JPEG images using color
    quantization or merged chroma upsampling/color conversion.  The
    underlying cause of these issues was that the color
    quantization and merged chroma upsampling/color conversion
    algorithms were not designed with lossless decompression
    in mind.  Since libjpeg-turbo explicitly does not support color
    conversion when compressing or decompressing lossless JPEG
    images, merged chroma upsampling/color conversion never should
    have been enabled for such images.  Color quantization is a
    legacy feature that serves little or no purpose with lossless
    JPEG images, so it is also now disabled when decompressing such
    images.  (As a result, djpeg can no longer decompress a
    lossless JPEG image into a GIF image.)
  * Fixed an oversight in 1.4 beta1[8] that caused various
    segfaults and buffer overruns when attempting to decompress
    various specially-crafted malformed 12-bit-per-component JPEG
    images using djpeg with both color quantization and RGB565
    color conversion enabled.
  * Fixed an issue whereby `jpeg_crop_scanline()` sometimes
    miscalculated the downsampled width for components with 4x2 or
    2x4 subsampling factors if decompression scaling was enabled.
    This caused the components to be upsampled incompletely, which
    caused the color converter to read from uninitialized memory.
    With 12-bit data precision, this caused a buffer overrun or
    underrun and subsequent segfault if the sample value read from
    uninitialized memory was outside of the valid sample range.
  * Fixed a long-standing issue whereby the `tj3Transform()`
    function, when used with the `TJXOP_TRANSPOSE`,
    `TJXOP_TRANSVERSE`, `TJXOP_ROT90`, or `TJXOP_ROT270` transform
    operation and without automatic JPEG destination buffer
    (re)allocation or lossless cropping, computed the worst-case
    transformed JPEG image size based on the source image
    dimensions rather than the transformed image dimensions.  If a
    calling program allocated the JPEG destination buffer based on
    the transformed image dimensions, as the API documentation
    instructs, and attempted to transform a specially-crafted
    4:2:2, 4:4:0, 4:1:1, or 4:4:1 JPEG source image containing a
    large amount of metadata, the issue caused `tj3Transform()` to
    overflow the JPEG destination buffer rather than fail
    gracefully.  The issue could be worked around by setting
    `TJXOPT_COPYNONE`.  Note that, irrespective of this issue,
    `tj3Transform()` cannot reliably transform JPEG source images
    that contain a large amount of metadata unless automatic JPEG
    destination buffer (re)allocation is used or `TJXOPT_COPYNONE`
    is set.
  * Significantly sped up the computation of optimal Huffman
    tables. This speeds up the compression of tiny images by as
    much as 2x and provides a noticeable speedup for images as
    large as 256x256 when using optimal Huffman tables.
  * All deprecated fields, constructors, and methods in the
    TurboJPEG Java API have been removed.
  * Arithmetic entropy coding is now supported with
    12-bit-per-component JPEG images.
  * Overhauled the TurboJPEG API to address long-standing
    limitations and to make the API more extensible and intuitive.</changelog>
  <changelog author="schwab@suse.de" date="1705320000">- Do not require SIMD support when it does not exist</changelog>
  <changelog author="mardnh@gmx.de" date="1707134400">- Update to version 3.0.2
  * Fixed a signed integer overflow in the tj3CompressFromYUV8(),
    tj3DecodeYUV8(), tj3DecompressToYUV8(), and tj3EncodeYUV8()
    functions, detected by the Clang and GCC undefined behavior
    sanitizers, that could be triggered by setting the align
    parameter to an unreasonably large value. This issue did not
    pose a security threat, but removing the warning made it
    easier to detect actual security issues, should they arise in
    the future.
  * Introduced a new parameter (TJPARAM_MAXMEMORY in the
    TurboJPEG C API and TJ.PARAM_MAXMEMORY in the TurboJPEG Java
    API) and a corresponding TJBench option (-maxmemory) for
    specifying the maximum amount of memory (in megabytes) that
    will be allocated for intermediate buffers, which are used
    with progressive JPEG compression and decompression, optimized
    baseline entropy coding, lossless JPEG compression, and
    lossless transformation. The new parameter and option serve
    the same purpose as the max_memory_to_use field in the
    jpeg_memory_mgr struct in the libjpeg API, the JPEGMEM
    environment variable, and the cjpeg/djpeg/jpegtran -maxmemory
    option.
  * Introduced a new parameter (TJPARAM_MAXPIXELS in the TurboJPEG
    C API and TJ.PARAM_MAXPIXELS in the TurboJPEG Java API) and a
    corresponding TJBench option (-maxpixels) for specifying the
    maximum number of pixels that the decompression, lossless
    transformation, and packed-pixel image loading
    functions/methods will process.
  * Fixed an error ("Unsupported color conversion request") that
    occurred when attempting to decompress a 3-component lossless
    JPEG image without an Adobe APP14 marker. The decompressor
    now assumes that a 3-component lossless JPEG image without an
    Adobe APP14 marker uses the RGB colorspace if its component
    IDs are 1, 2, and 3.</changelog>
</package>
<package pkgid="052fe7639d048c8fb1c57d202a803b9cc618d93d13a764ca3e447a525b7af160d5209f410d95b99fb8e11ef7d9dd0ebaad9599d281a0e80890c31eabbd10e5d9" name="libjq1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.1" rel="slfo.1.1_2.1"/>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- build without valgrind on riscv64 - does not exist (yet)</changelog>
  <changelog author="mardnh@gmx.de" date="1694088000">- Update to version 1.7
  * Make object key color configurable using JQ_COLORS environment
    variable.
  * Change the default color of null to Bright Black.
  * Respect NO_COLOR environment variable to disable color output.
  * Improved --help output. Now mentions all options and nicer
    order.
  * Fix multiple issues of exit code using --exit-code/-e option.
  * Add --raw-output0 for NUL (zero byte) separated output.
  * Fix assert crash and validate JSON for --jsonarg.
  * Remove deprecated --argfile option.
  Language changes
  * Use decimal number literals to preserve precision. Comparison
    operations respects precision but arithmetic operations might
    truncate.
  * Adds new builtin pick(stream) to emit a projection of the
    input object or array.
  * Adds new builtin debug(msgs) that works like debug but applies
    a filter on the input before writing to stderr.
  * Adds new builtin scan($re; $flags). Was documented but not
    implemented.
  * Adds new builtin abs to get absolute value. This potentially
    allows the literal value of numbers to be preserved as length
    and fabs convert to float.
  * Allow if without else-branch. When skipped the else-branch
    will be . (identity).
  * Allow use of $binding as key in object literals.
  * Allow dot between chained indexes when using .["index"]
  * Allow dot for chained value iterator .[], .[]?
  * Fix try/catch catches more than it should.
  * Speed up and refactor some builtins, also remove
    scalars_or_empty/0.
  * Now halt and halt_error exit immediately instead of continuing
    to the next input.
  * Fix issue converting string to number after previous convert
    error.
  * Fix issue representing large numbers on some platforms causing
    invalid JSON output.
  * Fix deletion using assigning empty against arrays.
  * Allow keywords to be used as binding name in more places.
  * Allow using nan as NaN in JSON.
  * Expose a module's function names in modulemeta.
  * Fix contains/1 to handle strings with NUL.
  * Fix stderr/0 to output raw text without any decoration.
  * Fix nth/2 to emit empty on index out of range.
  * Fix implode to not assert and instead replace invalid unicode
    codepoints.
  * Fix indices/1 and rindex/1 in case of overlapping matches in
    strings.
  * Fix sub/3 to resolve issues involving global search-and-replace
    (gsub) operations.
  * Fix empty regular expression matches.
  * Fix overflow exception of the modulo operator.
  * Fix string multiplication by 0 (and less than 1) to emit empty
    string.
  * Fix segfault when using libjq and threads.
  * Fix constant folding of division and reminder with zero
    divisor.
  * Fix error/0, error/1 to throw null error.
  * Simpler and faster transpose.
  * Simple and efficient implementation of walk/1.
  * Remove deprecated filters leaf_paths, recurse_down.
- Adjust URL/Source - new upstream
  https://github.com/stedolan/jq -&gt; https://github.com/jqlang</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1695816000">- switch to bootstrapped upstream tarball to fix version output
  [boo#1215737]</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- build with valgrind only on 64 bit architectures</changelog>
  <changelog author="mardnh@gmx.de" date="1702468800">- Update to version 1.7.1
  Security
  * Fix CVE-2023-50246 (boo#1218034)
    + Fix heap buffer overflow in jvp_literal_number_literal.
  * Fix CVE-2023-50268 (boo#1218038)
    fix stack-buffer-overflow if comparing nan with payload.
  CLI changes
  * Make the default background color more suitable for bright
    backgrounds.
  * Allow passing the inline jq script after --.
  * Fix possible uninitialised value dereference if jq_init() fails
  Language changes
  * Simplify paths/0 and paths/1.
  * Reject U+001F in string literals.
  * Remove unused nref accumulator in block_bind_library.
  * Remove a bunch of unused variables, and useless assignments.
  * main.c: Remove unused EXIT_STATUS_EXACT option.
  * Actually use the number correctly casted from double to int as
    index.
  * src/builtin.c: remove unnecessary jv_copy-s in
    type_error/type_error2.
  * Remove undefined behavior caught by LLVM 10 UBSAN.
  * Convert decnum to binary64 (double) instead of decimal64.
    This makes jq behave like the JSON specification suggests and
    more similar to other languages.
  * Fix memory leaks on invalid input for ltrimstr/1 and
    rtrimstr/1.
  * Fix memory leak on failed get for setpath/2.
  * Fix nan from json parsing also for nans with payload that
    start with 'n'.
  * Allow carriage return characters in comments.
  Documentation changes
  * Generate links in the man page.
  libjq
  * Add extern C for C++.</changelog>
  <changelog author="ncutler@suse.com" date="1747742400">- Add patch CVE-2024-53427.patch (CVE-2024-53427, bsc#1238078)</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
  <changelog author="ncutler@suse.com" date="1753963200">- Add patches CVE-2025-48060-1.patch and CVE-2025-48060-2.patch
  (CVE-2025-48060, bsc#1244116)</changelog>
</package>
<package pkgid="1ffa3b5c70e972dd8a5d9dbacdc8a1e25a18769dec13a6a29c17cf5dbbb6c06e77497168977089be48ffc6ba4c3a9d0dae957b184a167325ca636b1f6e85b6fb" name="libjson-c5-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.16" rel="slfo.1.1_1.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1411214400">- json-c 0.12
  Fixes for security issues contained in this release have been
  previously patched into this package, but listed for completeness:
  * Address security issues:
  * CVE-2013-6371: hash collision denial of service
  * CVE-2013-6370: buffer overflow if size_t is larger than int
- Further changes:
  * Avoid potential overflow in json_object_get_double
  * Eliminate the mc_abort() function and MC_ABORT macro.
  * Make the json_tokener_errors array local.  It has been deprecated for
    a while, and json_tokener_error_desc() should be used instead.
  * change the floating point output format to %.17g so values with
    more than 6 digits show up in the output.
  * Remove the old libjson.so name compatibility support.  The library is
    only created as libjson-c.so now and headers are only installed
    into the ${prefix}/json-c directory.
  * When supported by the linker, add the -Bsymbolic-functions flag.
  * Make strict mode more strict:
  * number must not start with 0
  * no single-quote strings
  * no comments
  * trailing char not allowed
  * only allow lowercase literals
  * Added a json_object_new_double_s() convenience function to allow
    an exact string representation of a double to be specified when
    creating the object and use it in json_tokener_parse_ex() so
    a re-serialized object more exactly matches the input.
  * Add support NaN and Infinity
- packaging changes:
  * json-c-hash-dos-and-overflow-random-seed-4e.patch is upstream
  * Move from json-c-lfs.patch which removed warning errors and
    autoconf call to json-c-0.12-unused_variable_size.patch from
    upstream which fixes the warning
  * except for SLE 11 where autoreconf call is required
  * add licence file to main package</changelog>
  <changelog author="rpm@fthiessen.de" date="1468843200">- Update to upstream release 0.12.1
- Removed upstream fixed json-c-0.12-unused_variable_size.patch
- Added fix-set-but-not-used.patch</changelog>
  <changelog author="mliska@suse.cz" date="1490270400">- Added gcc7-fix.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1514462400">- json-c 0.13
  + Deprecated and removed features:
  * Internal use of bits.h has been eliminated.
  * lh_abort() is deprecated
  + Behavior changes:
  * Tighten the number parsing algorithm to raise errors instead
    of truncating the results.  For example 12.3.4 or 2015-01-15,
    which now return null.
  * Use size_t for array length and size. Platforms where
    sizeof(size_t) != sizeof(int) may not be backwards compatible
  * Check for failue when allocating memory, returning NULL and
    errno=ENOMEM.
  * Change json_object_object_add() return type from void to int,
    and will return -1 on failures, instead of exiting. (Note:
    this is not an ABI change)
  + New features:
  * Aiming to follow RFC 7159 now.
  * Support for JSON pointer, RFC 6901 (see json_pointer.h)
  * Add a couple of additional option to json_object_to_json_string_ext:
  JSON_C_TO_STRING_PRETTY_TAB
  JSON_C_TO_STRING_NOSLASHESCAPE
  * json_object_object_add_ex() - better perf when certain
    constraints are known to be true
  * Serialization format of doubles now configurable
  * New functions
  - json_object_equal() - utility function for comparing
    json_objects
  - json_object_deep_copy() - a way to copy entire object
    trees
  - json_object_set_&lt;type&gt;() - modify the value of
    existing json_object's without the need to recreate them.
  Also add a json_object_int_inc function to adjust an int's'
  value.
  - json_util_get_last_err() - retrieve the string describing
    the cause of errors, instead of printing to stderr.
  - perllike hash function for strings
  * json_global_set_string_hash()
  * json_c_visit() - a way to iterate over a tree of json-c
    objects.
  + Notable bug fixes and other improvements:
  * Make reference increment and decrement atomic to allow
    passing json objects between threads.
  * Fix json_object_object_foreach to avoid uninitialized
    variable warnings.
  * Improve performance by removing unneeded data items from
    hashtable code and reducing duplicate hash computation.
  * Performance: store small strings inside json_object
  * Performance: of json_object_to_json_string by removing
    variadic printf
  * Fix parsing of "-Infinity", and avoid needlessly copying the
    input when doing so.
  * Fix stack buffer overflow in json_object_double_to_json_string_format()
  * Fix various potential null ptr deref and int32 overflows
  * Fix a long-standing bug in array_list_put_idx() where it
    would attempt to free previously free'd entries due to not
    checking the current array length.
  * use uselocale() instead of setlocale() in json_tokener to
    behave better in threaded environments.
  * Fix out of bounds read when handling unicode surrogate pairs.
  * Ensure doubles that happen to be a whole number are emitted
    with ".0"
  * Visual Studio: use a snprintf/vsnprintf wrapper that ensures
    the string is terminated.
  * Fix double to int cast overflow in json_object_get_int64.
  * Clamp double to int32 when narrowing in json_object_get_int.
  * Use strtoll() to parse ints - instead of sscanf
  * usual code linting
  + Build changes:
  * Add Appveyor and Travis build support
  * Support for MacOS and Windows through CMake
  * Silent build by default
  * Link against libm when needed
  * Add support for building with AddressSanitizer
  * Add support for building with Clang
  * Add a --enable-threading configure option, and only use the
    (slower) __sync_add_and_fetch()/__sync_sub_and_fetch()
    function when it is specified.
- cleanup with spec-cleaner
- remove fix-set-but-not-used.patch
  + fixed: https://github.com/json-c/json-c/issues/240
- remove gcc7-fix.patch
  + fixed in 014924ba899f659917bb64392bbff7d3c803afc2</changelog>
  <changelog author="avindra@opensuse.org" date="1520942400">- json-c 0.13.1
  * Add const size_t json_c_object_sizeof()
  * Avoid invalid free (and thus a segfault) when ref_count gets &lt; 0
  * Fix handling of custom double formats that include a ".0"
  * Avoid uninitialized variable warnings in json_object_object_foreach
  * Add a top level fuzz directory for fuzzers run by OSS-Fuzz
  * Fix build for certain uClibc based systems.
  * Bump sonum to 4.0 to avoid conflicts because some packagers made
    their own bump to ".so.3" for the older 0.12 release</changelog>
  <changelog author="info@paolostivanin.com" date="1588075200">- json-c 0.14:
  * bits.h has been removed
  * lh_abort() has been removed
  * lh_table_lookup() has been removed, use lh_table_lookup_ex() instead.
  * Remove TRUE and FALSE defines, use 1 and 0 instead.
  * Switch to cmake
  * Build fixes
  * Doc updates
  * Added a json_tokener_get_parse_end() function to replace
    direct access of tok-&gt;char_offset
  * json_tokener_parse_ex() now accepts a new JSON_TOKENER_VALIDATE_UTF8 flag
    to validate that input is UTF8
  * Add support for unsigned 64-bit integers
  * A total of 7 new functions were added:
  * json_object_get_uint64 ( struct json_object const* jso )
  * json_object_new_uint64 ( uint64_t i )
  * json_object_set_uint64 ( struct json_object* jso, uint64_t new_value )
  * json_parse_uint64 ( char const* buf, uint64_t* retval )
  * See description of uint64 support, above.
  * json_tokener_get_parse_end ( struct json_tokener* tok )
  * See details under "json_tokener changes", above.
  * json_object_from_fd_ex ( int fd, int in_depth )
  * Allows the max nesting depth to be specified.
  * json_object_new_null ( )
  * Simply returns NULL.  Its use is not recommended.
  * The size of struct json_object has decreased from 96 bytes to 88 bytes.</changelog>
  <changelog author="dcermak@suse.com" date="1592395200">- Add upstream fix for boo#1173022
  * Added patch 0001-Detect-broken-RDRAND-during-initialization.patch
  * use URL from the releases page on github
  * run spec-cleaner over the spec file</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 0.15:
  * Deprecate `array_list_new()` in favor of `array_list_new2()`
  * Remove the THIS_FUNCTION_IS_DEPRECATED define.
  * Remove config.h.win32
  * Add a `JSON_TOKENER_ALLOW_TRAILING_CHARS` flag to allow multiple objects
    to be parsed even when `JSON_TOKENER_STRICT` is set.
  * Add `json_object_new_array_ext(int)` and `array_list_new_2(int)` to allow
    arrays to be allocated with the exact size needed, when known.
  * Add `json_object_array_shrink()` (and `array_list_shrink()`) and use it in
    json_tokener to minimize the amount of memory used.
  * Add a json_parse binary, for use in testing changes (not installed, but
    available in the apps directory).
  * Split the internal json_object structure into several sub-types, one for
    each json_type (json_object_object, json_object_string, etc...).
    This improves memory usage and speed, with the benchmark under
    bench/ report 5.8% faster test time and 6%(max RSS)-12%(peak heap)
    less memory usage.
    Memory used just for json_object structures decreased 27%, so use cases
    with fewer arrays and/or strings would benefit more.
  * Minimize memory usage in array handling in json_tokener by shrinking
    arrays to the exact number of elements parsed.  On bench/ benchmark:
    9% faster test time, 39%(max RSS)-50%(peak heap) less memory usage.
    Add json_object_array_shrink() and array_list_shrink() functions.
  * #616 - Parsing of surrogate pairs in unicode escapes now properly handles
    incremental parsing.
  * Fix incremental parsing of numbers, especially those with exponents, e.g.
    so parsing "[0", "e+", "-]" now properly returns an error.
    Strict mode now rejects missing exponents ("0e").
  * Successfully return number objects at the top level even when they are
    followed by a "-", "." or "e".  This makes parsing things like "123-45"
    behave consistently with things like "123xyz".
  * #589 - Detect broken RDRAND during initialization; also, fix segfault
    in the CPUID check.
  * #592 - Fix integer overflows to prevert out of bounds write on large input.
  * Protect against division by zero in linkhash, when creaed with zero size.
  * #602 - Fix json_parse_uint64() internal error checking, leaving the retval
    untouched in more failure cases.
  * #614 - Prevent truncation when custom double formatters insert extra \0's
- remove 0001-Detect-broken-RDRAND-during-initialization.patch (upstream)</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Add -std=gnu99 to fix build with some gcc versions</changelog>
  <changelog author="info@paolostivanin.com" date="1650456000">- Update to 0.16:
  + Deprecated and removed features:
  * JSON_C_OBJECT_KEY_IS_CONSTANT is deprecated in favor of
    JSON_C_OBJECT_ADD_CONSTANT_KEY
  * Direct access to lh_table and lh_entry structure members is deprecated.
    Use access functions instead, lh_table_head(), lh_entry_next(), etc...
  * Drop REFCOUNT_DEBUG code.
  + Changes and bug fixes
  * Cap string length at INT_MAX to avoid various issues with very long strings.
  * json_object_deep_copy: fix deep copy of strings containing '\0'
  * Fix read past end of buffer in the "json_parse" command
  * Avoid out of memory accesses in the locally provided vasprintf() function
    (for those platforms that use it)
  * Handle allocation failure in json_tokener_new_ex
  * Fix use-after-free in json_tokener_new_ex() in the event of printbuf_new() returning NULL
  * printbuf_memset(): set gaps to zero - areas within the print buffer which
    have not been initialized by using printbuf_memset
  * printbuf: return -1 on invalid arguments (len &lt; 0 or total buffer &gt; INT_MAX)
  * sprintbuf(): propagate printbuf_memappend errors back to the caller
  * Validate size arguments in arraylist functions.
  * Use getrandom() if available; with GRND_NONBLOCK to allow use of json-c
    very early during boot, such as part of cryptsetup.
  * Use arc4random() if it's available.
  * random_seed: on error, continue to next method instead of exiting the process
  * Close file when unable to read from /dev/urandom in get_dev_random_seed()
  * Speed up parsing by replacing ctype functions with simplified, faster
    non-locale-sensitive ones in json_tokener and json_object_to_json_string.
  * Neither vertical tab nor formfeed are considered whitespace per the JSON spec
  * json_object: speed up creation of objects, calloc() -&gt; malloc() + set fields
  * Avoid needless extra strlen() call in json_c_shallow_copy_default() and
    json_object_equal() when the object is known to be a json_type_string.</changelog>
</package>
<package pkgid="170df52bae6cc82e74081851f5ba8f4f0b2b1316c67b78de328333825945cac07078cb6c2985495beb565c13df7b9b5cb239d72b6710358cff244167ed1d8d45" name="libjson-glib-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.6" rel="slfo.1.1_1.2"/>
  <changelog author="sbrabec@suse.com" date="1524744000">- Set gettext domain explicitly in translation-update-upstream,
  as it does not support complex meson.build expressions
  (bsc#1087076#c21).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.4.4:
  + Fix memory leaks.
  + Fix behaviour of JsonParser with immutable nodes for empty
    documents.
  + Clarify documentation.
  + Update autoptr macro for JsonNode to use json_node_unref().
  + Update the enumeration types template.
  + Perform fuzzy comparisons for floating point values in the test
    suite.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1590148800">- Require pkgconfig to create pkgconfig() provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 1.5.2:
  + Add getters with default fallback for JsonObject.
  + Clarify some expections of the json_object_get_*_member APIs.
  + Fix getting immutable root nodes from empty input.
  + Add `--output` option to json-glib-format.
  + Support loading files via memory mapping.
  + Add a symbol version to all exported symbols.
- Pass -Dgtk_doc=disabled to meson: keep the gtk-doc disabled for
  now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1599825600">- Update to version 1.6.0:
  + docs: Add missing index for 1.6 symbols.
  + Updated translations.
- Add gtk-doc BuildRequires and build gtk-doc api documentation and
  manpages via passing man=true and gtk_doc=enabled to meson.
- Add check section and run meson_test macro during build.
- Drop obsolete nuking of .la files, no longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1612872000">- Update to version 1.6.2:
  + Fix build reproducibility.
  + Fix parsing of UTF-16 surrogate pairs.
  + Ignore UTF-8 BOM.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629547200">- Update to version 1.6.4:
  + Discover linker flags on all toolchains
  + Fix memory leak
  + Use gi-docgen instead of gtk-doc for generating the API
    reference
  + Build against newer versions of GLib
- Pass gtk_doc=disabled to meson, no longer build API
  documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629892800">- Update to version 1.6.6:
  + New release with the documentation and gi-docgen included in
    the archive.
- Drop gtk-doc BuildRequires, no longer needed, nor used.
- Add docbook-xsl-stylesheets and libxslt-tools BuildRequires,
  needed for building of manpages.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
</package>
<package pkgid="a13916d38d2d5134577fc82401089fe5573ae7d2de48bf6208ff23f2979e606f93cf20386661333bb782be9cba66d3265a2b60161687db6e780d46e083f9a5e4" name="libjte2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.22" rel="slfo.1.1_1.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1485777600">- Initial rpm release.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1486036800">- Change %{_bindir}/* to an explicit binary list.</changelog>
  <changelog author="jengelh@inai.de" date="1486209600">- Use text from upstream readme as description.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1614686400">- Update to version 1.22:
  * Add support for SHA256 checksums, using jigdo format v2
    + Changes to libjte to generate the new format as an option -
    still defaults to v1 for cmpatibility for now
    + libjte updated to major version 2
    + Add support for v2 in jigdump, jigit-mkimage etc. too
    + Add new jigsum-sha256 program, for the base64-like output
    with sha256 checksums
  * jigdump now also understands jigdo .iso.tmp files
  * Misc small cleanups
  From version 1.21:
  * parallel-sums:
    + New utility for calculating checksums in parallel
  * Misc code cleanups
  * Misc man page cleanups
  * jigit-mkimage:
    + Print missing file names correctly</changelog>
</package>
<package pkgid="a9b53cc337e949b66ed64fe995e182e2e5610e1075f06796619ae9a9eac68aecde54cd2e1afa52c3482915a7029aeeda40cfd26733c0f91f02648b855cdc1eb1" name="libkcapi-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.0" rel="slfo.1.1_1.5"/>
  <changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
  <changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569585600">- Remove docbook-utils BuildRequires, xmlto is sufficient
- Spec file cleanup, use license macro, drop defattr, drop BuildRoot</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Use %make_build and respect %optflags.</changelog>
  <changelog author="meissner@suse.com" date="1578484800">- updated to 1.1.5:
  - Fix invocation of ansi_cprng in FIPS mode during testing
  - Fix testing on kernels &gt;= 5.0
  - Add virtualization test for kernel 5.1
  - Fix the limit between vmsplice() and sendmsg() by Christophe Leroy
  - Fix remove code duplication by Ondrej MosnÃ¡Äek
  - Fix potential memleak in speed-test
- updated to 1.1.4:
  - Fix: use sendmsg when processing more than 1&lt;&lt;16 bytes input data which improves performance on some architectures
- updated to 1.1.3:
  - Fix: default location of FIPS 140-2 HMAC control file is .&lt;orig file&gt;.hmac (was accidentally moved to &lt;orig file&gt;.hmac with 1.1.0)
- updated to 1.1.2:
  - Fix: Bug fixes for GCC 8.1.0 regarding string length checks by Krzysztof Kozlowski
  - Enhancement: ensure that tests execute on architectures other than X86 by Ondrej MosnÃ¡Äek
  - Fix: Bug fix to initialize FDs at the correct time in kcapi-kernel-if.c by Ondrej MosnÃ¡Äek
  - Test fix: Support test execution outside build environment by Ondrej MosnÃ¡Äek
- updated to 1.1.1:
  - Fix: Bug fixes for kcapi_hasher by Ondrej MosnÃ¡Äek
- updated to 1.1.0:
  - API Enhancement: Addition of kcapi_handle_reinit
  - Fix: simplify code by removing the internal *_fd functions from kcapi-kernel-if.c
  - Test enhancement: add IIV speed testing
  - Fix: add a loop around the read system call to always obtain all generated data
  - Fix: use host compiler for compiling docproc (reported by Christophe LEROY, fixed by BjÃ¶rn Esser)
  - Fix: make error handling of hashing applications consistent with coreutils applications (reported by Christophe LEROY)
  - Fix: support for zero length files (patched by Ondrej MosnÃ¡Äek)
  - Fix: support for zero message hashes on kernels &lt;= 4.9 (patched by Ondrej MosnÃ¡Äek)
  - Fix: Add Travis CI test system provided by Ondrej MosnÃ¡Äek
  - Fix: Add several fixes to kcapi-hasher by Ondrej MosnÃ¡Äek
  - Fix: Add additional tests for kcapi-hasher by Ondrej MosnÃ¡Äek
  - Fix: Apply unpadding only to last block of data by Ondrej MosnÃ¡Äek
  - Fix: Fix resource leaks in error code paths suggested by Ondrej MosnÃ¡Äek
  - Enhancement: achieve hmaccalc CLI equivalence by Ondrej MosnÃ¡Äek
- updated to 1.0.3:
  - Fix: support STDIN and --tag of sha*sum applications
  - Enhancement: Add small enhancements to support integration with distros -- reported by BjÃ¶rn Esser
- updated to 1.0.2:
  - Fix: hasher-test.sh on 32-bit systems
  - Fix: AIO return code handling on large number of requests -- reported by Jonathan Cameron
  - Enhancement: disable coredumps of library
  - Fix: remove unchecked -fstack-protector-strong from Makefile -- reported by Mathieu Malaterre
  - Fix: document that kcapi_cipher_stream_op must be called in a loop to collect all data in a multhreaded environment.
  - Test Fix: Update symmetric multithreaded stream test to invoke kcapi_cipher_stream_op in a loop to collect all data.
  - Fix: Initialize the cipher handle on stack with zeros as the library expects a zero-initialized cipher handle. This fixes a possible segfault where free() is called on a non-initialized memory location.
  - Fix: port algif_kpp and algif_akcipher to 4.15-rc3
- updated to 1.0.1:
  - Fix: constify AEAD cipher input data
  - Fix: use GCC byte swapping acceleration if present
  - Fix: KDF counter handling on little endian systems when generating more than 255 blocks
  - Use LD_PRELOAD for execution of test cases to force using of the freshly compiled binaries
  - Fix: return code handling of _kcapi_common_vmsplice_chunk_fd as reported by Christophe Leroy
  - Fix: return code handling in _kcapi_md_update
  - Fix: kcapi-hasher now supports files larger than 2GB
  - Fix: kcapi-dgst now supports files larger than 2GB
  - Fix: use stack protector
  - Fix: rename header guards to remove leading underscore as pointed out by Markus Elfring
  - Test Fix: Allow compiing the test code without asymmetric and KPP support
- updated to 1.0.0:
  - Fix: Small compile fixes for new checks of GCC 7
  - API Change: Rename all LOG_* enums to KCAPI_LOG_* to prevent namespace poisoning
  - Fix: soname and file name of library now compiles with conventions (thanks to Marcus Meissner)
  - Fix: kcapi-rng.c: unify FD/syscall read code and fix __NR_getrandom resolution
  - Enhancement: add kcapi-enc application to access symmetric encryption on command line
  - Fix: consolidate duplicate code in kcapi-hasher
  - Enhancement: add kcapi-dgst application to access hashes on command line
  - Enhancement: add kcapi-rng man page
  - Enhancement: add kcapi-rng --hex command line option
  - Fix: enable full symmetric AIO support
  - Fix: consolidate all test code into test/ and invoke all tests with test-invocation.sh
  - Fix: fix memleaks in error code paths as reported by clang
  - Fix: reduce memory footprint by rearranging data structures
  - Fix: kcapi-hasher is now fully FIPS 140-2 compliant as it now includes the integrity test for libkcapi.so
  - Enhancement: Add speed tests for MV-CESA accelerated ciphers and hash algorithms (thanks to Bastian Stender)
  - Test Enhancement: add kcapi-enc-test-large.c test testing edge conditions of AF_ALG
  - Test Enhancement: add virttest.sh - use of test system based on eudyptula-boot to test on linux-4.3.6, linux-4.4.86, linux-4.5, linux-4.7, linux-4.10, linux-4.12
  - Test Enhancement: add kcapi-fuzz-test.sh to support fuzzing the AF_ALG interfaces
  - Enhancement: add RPM SPEC file (tested with Fedora 26)
  - API Change: replace --disable-lib-asym with --enable-lib-asym as the algif_akcipher.c kernel interface is not likely to be added to the kernel anytime soon
  - API Enhancement: add KPP API which is not compiled by default, use --enable-lib-kpp (the algif_kpp.c kernel interface is not likely to be added to the Linux kernel any time soon)
  - Test Enhancement: Add KPP tests
  - Enhancement: Re-enable AIO support for symmetric and AEAD ciphers down to Linux kernels 4.1 and 4.7, respectively. This is due to integrating a fix against a kernel crash when using AIO.
  - Fix: simply KDF code base
  - API Enhancement: add message digest convenience functions kcapi_md_*sha*
  - API Enhancement: add cipher convenience functions kcapi_cipher_*_aes_*
  - API Enhancement: add rng convenience function kcapi_rng_get_bytes
  - API Change: remove kcapi_aead_getdata, use kcapi_aead_getdata_input and kcapi_aead_getdata_output instead
  - API Change: remove kcapi_aead_outbuflen, use kcapi_aead_outbuflen_enc and kcapi_aead_outbuflen_dec instead
- updated to 0.14.0:
  - AIO: fix tracking of completed IOCBs
  - speed-test: fix AEAD handling
  - speed-test: fix time calculation
  - compiler now warns a user of deprecated API calls
  - AIO: handle kernel errors for algif_skcipher gracefully
  - AIO: using multiple IOCB if algif_aead interface supports it
  - ASYM: add PKCS1 tests
  - AIO: add ASYM AIO support
  - AIO: fix AEAD AIO fallback
  - AIO: add AIO fallback testing
  - replace enforcement of symmetric cipher limits with a log message only (the underlying kernel implementations should catch any errors)
  - add fuzzing tests
  - use autotools build system as provided by Georges Savoundararadj with additional considerations from Marcin Nowakowski (thanks a lot)
  - ALG_MAX_PAGES restriction is gone with current AF_ALG interface
  - add HKDF (RFC5869)
  - add apps/kcapi-rng
  - add support for multiple accepts where the caller maintains the opfd
  - fix memleak in error case in PBKDF
  - add multithreaded symmetric cipher tests
  - enable full AIO support for kernels 4.13 and higher (fallback AIO implementation using synchronous support for earlier kernels) -- this is due to the broken AIO support for earlier kernels
  - Add tests for the AAD copy operation to be supported for kernel 4.13
- dropped libkcapi-use-external-fipshmac.patch (done differently in upstream)
- dropped reproduciblesort.patch (done differently upstream)
- dropped reproducibledate.patch: merged upstream
- libkcapi.keyring imported</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- update to 1.2.0:
  * enhancement: kcapi-hasher: add madvise and 64 bit support by Brandur Simonsen
  * fix: fix clang warnding in KDF implementation by Khem Raj
  * fix: fix inverted logic in kcapi-main test logic reported by Ondrej Mosnáček
  * fix: return error when iteration count is zero for PBKDF as reported by
  Guido Vranken
  * enhancement: add function kcapi_cipher_stream_update_last to indicate the
  last block of a symmetric cipher stream operation
  * disable XTS multithreaded tests as it triggers a race discussed in
  https://github.com/smuellerDD/libkcapi/issues/92. The conclusion is
  the following: xts(aes) doesn't support chaining requests like for other
  ciphers such as CBC (at least as implemented in the kernel Crypto API).
  That can be seen in `crypto/testmgr.h` - the ciphers that are expected to
  return IVs usable for chaining have the `.iv_out` entries filled in in their
  test vectors (and those that don't support it do not). One can see that only
  CTR and CBC test vectors have them, not XTS.
  Looking again at how XTS is defined, it seems one could implement
  transparent chaining by simply decrypting the final tweak using the tweak
  key and return it as the output IV... but I believe this has never been
  mandated nor implemented in the Crypto API (likely because of the overhead
  of the final tweak decryption, which would be pointless if you're not going
  to use the output IV - and there is currently no way to signal to the driver
  that you are going to need it).
  * disable AIO parallel tests due to undefined behavior</changelog>
  <changelog author="asn@cryptomilk.org" date="1627387200">- Update to version 1.3.1
  * fix: fix -Wconversion warnings (by Ondrej Mosnacek)
  * fix: fix bad data types in _kcapi_common_send_meta (by Ondrej Mosnacek)
  * fix: Version symbols to maintain ABI compatibility (by Simo Sorce)
  * fix: disable io_getevents on systems that do not support it (by Khem Raj)
  * fix: remove prctl PR_SET_DUMPABLE to allow library to be debugged - as the
    library does not store any sensitive data in data structures it owns, such
    security precautions may not be necessary considering the benefit of
    allowing regular debugging
  * fix: ensure that sendmsg is always used as fallback when vmsplice cannot be
    used
  * enhancement: add kcapi_set_maxsplicesize and kcapi_get_maxsplicesize
  * enhancement: the variable types are changed from int32_t to ssize_t and
    from uint32_t to size_t to match common POSIX and Linux APIs
- Added libkcapi-fix-lto.patch</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- use https url</changelog>
  <changelog author="meissner@suse.com" date="1650974401">- Update to version 1.4.0
  * fix: ensure that LTO is supported (by Simo Sorce)
  * fix: add LTO regression testing (by Ondrej Mosnacek)
  * enhancement: add sm3sum, sm3hmac tools, add APIs kcapi_md_sm3, kcapi_md_hmac_sm3
  * enhancement: add SM4 convenience functions
  * fix: support AEAD encryption of arbitrary size with kcapi-enc
- removed libkcapi-fix-lto.patch (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1678104000">- libkcapi was actually signed by the wrong key (bsc#1207892)</changelog>
</package>
<package pkgid="c5163f6086760cfd35207d790d88563eda13dceda91056661d17e228c36440cb77172b5a2ee1ba15c08e9347f63f35006f699082ff0b5ccf739f71a637664ea1" name="libkcapi-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.0" rel="slfo.1.1_1.5"/>
  <changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
  <changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569585600">- Remove docbook-utils BuildRequires, xmlto is sufficient
- Spec file cleanup, use license macro, drop defattr, drop BuildRoot</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Use %make_build and respect %optflags.</changelog>
  <changelog author="meissner@suse.com" date="1578484800">- updated to 1.1.5:
  - Fix invocation of ansi_cprng in FIPS mode during testing
  - Fix testing on kernels &gt;= 5.0
  - Add virtualization test for kernel 5.1
  - Fix the limit between vmsplice() and sendmsg() by Christophe Leroy
  - Fix remove code duplication by Ondrej MosnÃ¡Äek
  - Fix potential memleak in speed-test
- updated to 1.1.4:
  - Fix: use sendmsg when processing more than 1&lt;&lt;16 bytes input data which improves performance on some architectures
- updated to 1.1.3:
  - Fix: default location of FIPS 140-2 HMAC control file is .&lt;orig file&gt;.hmac (was accidentally moved to &lt;orig file&gt;.hmac with 1.1.0)
- updated to 1.1.2:
  - Fix: Bug fixes for GCC 8.1.0 regarding string length checks by Krzysztof Kozlowski
  - Enhancement: ensure that tests execute on architectures other than X86 by Ondrej MosnÃ¡Äek
  - Fix: Bug fix to initialize FDs at the correct time in kcapi-kernel-if.c by Ondrej MosnÃ¡Äek
  - Test fix: Support test execution outside build environment by Ondrej MosnÃ¡Äek
- updated to 1.1.1:
  - Fix: Bug fixes for kcapi_hasher by Ondrej MosnÃ¡Äek
- updated to 1.1.0:
  - API Enhancement: Addition of kcapi_handle_reinit
  - Fix: simplify code by removing the internal *_fd functions from kcapi-kernel-if.c
  - Test enhancement: add IIV speed testing
  - Fix: add a loop around the read system call to always obtain all generated data
  - Fix: use host compiler for compiling docproc (reported by Christophe LEROY, fixed by BjÃ¶rn Esser)
  - Fix: make error handling of hashing applications consistent with coreutils applications (reported by Christophe LEROY)
  - Fix: support for zero length files (patched by Ondrej MosnÃ¡Äek)
  - Fix: support for zero message hashes on kernels &lt;= 4.9 (patched by Ondrej MosnÃ¡Äek)
  - Fix: Add Travis CI test system provided by Ondrej MosnÃ¡Äek
  - Fix: Add several fixes to kcapi-hasher by Ondrej MosnÃ¡Äek
  - Fix: Add additional tests for kcapi-hasher by Ondrej MosnÃ¡Äek
  - Fix: Apply unpadding only to last block of data by Ondrej MosnÃ¡Äek
  - Fix: Fix resource leaks in error code paths suggested by Ondrej MosnÃ¡Äek
  - Enhancement: achieve hmaccalc CLI equivalence by Ondrej MosnÃ¡Äek
- updated to 1.0.3:
  - Fix: support STDIN and --tag of sha*sum applications
  - Enhancement: Add small enhancements to support integration with distros -- reported by BjÃ¶rn Esser
- updated to 1.0.2:
  - Fix: hasher-test.sh on 32-bit systems
  - Fix: AIO return code handling on large number of requests -- reported by Jonathan Cameron
  - Enhancement: disable coredumps of library
  - Fix: remove unchecked -fstack-protector-strong from Makefile -- reported by Mathieu Malaterre
  - Fix: document that kcapi_cipher_stream_op must be called in a loop to collect all data in a multhreaded environment.
  - Test Fix: Update symmetric multithreaded stream test to invoke kcapi_cipher_stream_op in a loop to collect all data.
  - Fix: Initialize the cipher handle on stack with zeros as the library expects a zero-initialized cipher handle. This fixes a possible segfault where free() is called on a non-initialized memory location.
  - Fix: port algif_kpp and algif_akcipher to 4.15-rc3
- updated to 1.0.1:
  - Fix: constify AEAD cipher input data
  - Fix: use GCC byte swapping acceleration if present
  - Fix: KDF counter handling on little endian systems when generating more than 255 blocks
  - Use LD_PRELOAD for execution of test cases to force using of the freshly compiled binaries
  - Fix: return code handling of _kcapi_common_vmsplice_chunk_fd as reported by Christophe Leroy
  - Fix: return code handling in _kcapi_md_update
  - Fix: kcapi-hasher now supports files larger than 2GB
  - Fix: kcapi-dgst now supports files larger than 2GB
  - Fix: use stack protector
  - Fix: rename header guards to remove leading underscore as pointed out by Markus Elfring
  - Test Fix: Allow compiing the test code without asymmetric and KPP support
- updated to 1.0.0:
  - Fix: Small compile fixes for new checks of GCC 7
  - API Change: Rename all LOG_* enums to KCAPI_LOG_* to prevent namespace poisoning
  - Fix: soname and file name of library now compiles with conventions (thanks to Marcus Meissner)
  - Fix: kcapi-rng.c: unify FD/syscall read code and fix __NR_getrandom resolution
  - Enhancement: add kcapi-enc application to access symmetric encryption on command line
  - Fix: consolidate duplicate code in kcapi-hasher
  - Enhancement: add kcapi-dgst application to access hashes on command line
  - Enhancement: add kcapi-rng man page
  - Enhancement: add kcapi-rng --hex command line option
  - Fix: enable full symmetric AIO support
  - Fix: consolidate all test code into test/ and invoke all tests with test-invocation.sh
  - Fix: fix memleaks in error code paths as reported by clang
  - Fix: reduce memory footprint by rearranging data structures
  - Fix: kcapi-hasher is now fully FIPS 140-2 compliant as it now includes the integrity test for libkcapi.so
  - Enhancement: Add speed tests for MV-CESA accelerated ciphers and hash algorithms (thanks to Bastian Stender)
  - Test Enhancement: add kcapi-enc-test-large.c test testing edge conditions of AF_ALG
  - Test Enhancement: add virttest.sh - use of test system based on eudyptula-boot to test on linux-4.3.6, linux-4.4.86, linux-4.5, linux-4.7, linux-4.10, linux-4.12
  - Test Enhancement: add kcapi-fuzz-test.sh to support fuzzing the AF_ALG interfaces
  - Enhancement: add RPM SPEC file (tested with Fedora 26)
  - API Change: replace --disable-lib-asym with --enable-lib-asym as the algif_akcipher.c kernel interface is not likely to be added to the kernel anytime soon
  - API Enhancement: add KPP API which is not compiled by default, use --enable-lib-kpp (the algif_kpp.c kernel interface is not likely to be added to the Linux kernel any time soon)
  - Test Enhancement: Add KPP tests
  - Enhancement: Re-enable AIO support for symmetric and AEAD ciphers down to Linux kernels 4.1 and 4.7, respectively. This is due to integrating a fix against a kernel crash when using AIO.
  - Fix: simply KDF code base
  - API Enhancement: add message digest convenience functions kcapi_md_*sha*
  - API Enhancement: add cipher convenience functions kcapi_cipher_*_aes_*
  - API Enhancement: add rng convenience function kcapi_rng_get_bytes
  - API Change: remove kcapi_aead_getdata, use kcapi_aead_getdata_input and kcapi_aead_getdata_output instead
  - API Change: remove kcapi_aead_outbuflen, use kcapi_aead_outbuflen_enc and kcapi_aead_outbuflen_dec instead
- updated to 0.14.0:
  - AIO: fix tracking of completed IOCBs
  - speed-test: fix AEAD handling
  - speed-test: fix time calculation
  - compiler now warns a user of deprecated API calls
  - AIO: handle kernel errors for algif_skcipher gracefully
  - AIO: using multiple IOCB if algif_aead interface supports it
  - ASYM: add PKCS1 tests
  - AIO: add ASYM AIO support
  - AIO: fix AEAD AIO fallback
  - AIO: add AIO fallback testing
  - replace enforcement of symmetric cipher limits with a log message only (the underlying kernel implementations should catch any errors)
  - add fuzzing tests
  - use autotools build system as provided by Georges Savoundararadj with additional considerations from Marcin Nowakowski (thanks a lot)
  - ALG_MAX_PAGES restriction is gone with current AF_ALG interface
  - add HKDF (RFC5869)
  - add apps/kcapi-rng
  - add support for multiple accepts where the caller maintains the opfd
  - fix memleak in error case in PBKDF
  - add multithreaded symmetric cipher tests
  - enable full AIO support for kernels 4.13 and higher (fallback AIO implementation using synchronous support for earlier kernels) -- this is due to the broken AIO support for earlier kernels
  - Add tests for the AAD copy operation to be supported for kernel 4.13
- dropped libkcapi-use-external-fipshmac.patch (done differently in upstream)
- dropped reproduciblesort.patch (done differently upstream)
- dropped reproducibledate.patch: merged upstream
- libkcapi.keyring imported</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- update to 1.2.0:
  * enhancement: kcapi-hasher: add madvise and 64 bit support by Brandur Simonsen
  * fix: fix clang warnding in KDF implementation by Khem Raj
  * fix: fix inverted logic in kcapi-main test logic reported by Ondrej Mosnáček
  * fix: return error when iteration count is zero for PBKDF as reported by
  Guido Vranken
  * enhancement: add function kcapi_cipher_stream_update_last to indicate the
  last block of a symmetric cipher stream operation
  * disable XTS multithreaded tests as it triggers a race discussed in
  https://github.com/smuellerDD/libkcapi/issues/92. The conclusion is
  the following: xts(aes) doesn't support chaining requests like for other
  ciphers such as CBC (at least as implemented in the kernel Crypto API).
  That can be seen in `crypto/testmgr.h` - the ciphers that are expected to
  return IVs usable for chaining have the `.iv_out` entries filled in in their
  test vectors (and those that don't support it do not). One can see that only
  CTR and CBC test vectors have them, not XTS.
  Looking again at how XTS is defined, it seems one could implement
  transparent chaining by simply decrypting the final tweak using the tweak
  key and return it as the output IV... but I believe this has never been
  mandated nor implemented in the Crypto API (likely because of the overhead
  of the final tweak decryption, which would be pointless if you're not going
  to use the output IV - and there is currently no way to signal to the driver
  that you are going to need it).
  * disable AIO parallel tests due to undefined behavior</changelog>
  <changelog author="asn@cryptomilk.org" date="1627387200">- Update to version 1.3.1
  * fix: fix -Wconversion warnings (by Ondrej Mosnacek)
  * fix: fix bad data types in _kcapi_common_send_meta (by Ondrej Mosnacek)
  * fix: Version symbols to maintain ABI compatibility (by Simo Sorce)
  * fix: disable io_getevents on systems that do not support it (by Khem Raj)
  * fix: remove prctl PR_SET_DUMPABLE to allow library to be debugged - as the
    library does not store any sensitive data in data structures it owns, such
    security precautions may not be necessary considering the benefit of
    allowing regular debugging
  * fix: ensure that sendmsg is always used as fallback when vmsplice cannot be
    used
  * enhancement: add kcapi_set_maxsplicesize and kcapi_get_maxsplicesize
  * enhancement: the variable types are changed from int32_t to ssize_t and
    from uint32_t to size_t to match common POSIX and Linux APIs
- Added libkcapi-fix-lto.patch</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- use https url</changelog>
  <changelog author="meissner@suse.com" date="1650974401">- Update to version 1.4.0
  * fix: ensure that LTO is supported (by Simo Sorce)
  * fix: add LTO regression testing (by Ondrej Mosnacek)
  * enhancement: add sm3sum, sm3hmac tools, add APIs kcapi_md_sm3, kcapi_md_hmac_sm3
  * enhancement: add SM4 convenience functions
  * fix: support AEAD encryption of arbitrary size with kcapi-enc
- removed libkcapi-fix-lto.patch (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1678104000">- libkcapi was actually signed by the wrong key (bsc#1207892)</changelog>
</package>
<package pkgid="0bc65a2b83b34888aba87308cdb1ccf6944224d8c525acf540cd5dd2d75018a85433ade687daa4f4a0a99d097b90747cdf25ef2d757db4502467ad13bda0ce91" name="libkcapi1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.0" rel="slfo.1.1_1.5"/>
  <changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
  <changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569585600">- Remove docbook-utils BuildRequires, xmlto is sufficient
- Spec file cleanup, use license macro, drop defattr, drop BuildRoot</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Use %make_build and respect %optflags.</changelog>
  <changelog author="meissner@suse.com" date="1578484800">- updated to 1.1.5:
  - Fix invocation of ansi_cprng in FIPS mode during testing
  - Fix testing on kernels &gt;= 5.0
  - Add virtualization test for kernel 5.1
  - Fix the limit between vmsplice() and sendmsg() by Christophe Leroy
  - Fix remove code duplication by Ondrej MosnÃ¡Äek
  - Fix potential memleak in speed-test
- updated to 1.1.4:
  - Fix: use sendmsg when processing more than 1&lt;&lt;16 bytes input data which improves performance on some architectures
- updated to 1.1.3:
  - Fix: default location of FIPS 140-2 HMAC control file is .&lt;orig file&gt;.hmac (was accidentally moved to &lt;orig file&gt;.hmac with 1.1.0)
- updated to 1.1.2:
  - Fix: Bug fixes for GCC 8.1.0 regarding string length checks by Krzysztof Kozlowski
  - Enhancement: ensure that tests execute on architectures other than X86 by Ondrej MosnÃ¡Äek
  - Fix: Bug fix to initialize FDs at the correct time in kcapi-kernel-if.c by Ondrej MosnÃ¡Äek
  - Test fix: Support test execution outside build environment by Ondrej MosnÃ¡Äek
- updated to 1.1.1:
  - Fix: Bug fixes for kcapi_hasher by Ondrej MosnÃ¡Äek
- updated to 1.1.0:
  - API Enhancement: Addition of kcapi_handle_reinit
  - Fix: simplify code by removing the internal *_fd functions from kcapi-kernel-if.c
  - Test enhancement: add IIV speed testing
  - Fix: add a loop around the read system call to always obtain all generated data
  - Fix: use host compiler for compiling docproc (reported by Christophe LEROY, fixed by BjÃ¶rn Esser)
  - Fix: make error handling of hashing applications consistent with coreutils applications (reported by Christophe LEROY)
  - Fix: support for zero length files (patched by Ondrej MosnÃ¡Äek)
  - Fix: support for zero message hashes on kernels &lt;= 4.9 (patched by Ondrej MosnÃ¡Äek)
  - Fix: Add Travis CI test system provided by Ondrej MosnÃ¡Äek
  - Fix: Add several fixes to kcapi-hasher by Ondrej MosnÃ¡Äek
  - Fix: Add additional tests for kcapi-hasher by Ondrej MosnÃ¡Äek
  - Fix: Apply unpadding only to last block of data by Ondrej MosnÃ¡Äek
  - Fix: Fix resource leaks in error code paths suggested by Ondrej MosnÃ¡Äek
  - Enhancement: achieve hmaccalc CLI equivalence by Ondrej MosnÃ¡Äek
- updated to 1.0.3:
  - Fix: support STDIN and --tag of sha*sum applications
  - Enhancement: Add small enhancements to support integration with distros -- reported by BjÃ¶rn Esser
- updated to 1.0.2:
  - Fix: hasher-test.sh on 32-bit systems
  - Fix: AIO return code handling on large number of requests -- reported by Jonathan Cameron
  - Enhancement: disable coredumps of library
  - Fix: remove unchecked -fstack-protector-strong from Makefile -- reported by Mathieu Malaterre
  - Fix: document that kcapi_cipher_stream_op must be called in a loop to collect all data in a multhreaded environment.
  - Test Fix: Update symmetric multithreaded stream test to invoke kcapi_cipher_stream_op in a loop to collect all data.
  - Fix: Initialize the cipher handle on stack with zeros as the library expects a zero-initialized cipher handle. This fixes a possible segfault where free() is called on a non-initialized memory location.
  - Fix: port algif_kpp and algif_akcipher to 4.15-rc3
- updated to 1.0.1:
  - Fix: constify AEAD cipher input data
  - Fix: use GCC byte swapping acceleration if present
  - Fix: KDF counter handling on little endian systems when generating more than 255 blocks
  - Use LD_PRELOAD for execution of test cases to force using of the freshly compiled binaries
  - Fix: return code handling of _kcapi_common_vmsplice_chunk_fd as reported by Christophe Leroy
  - Fix: return code handling in _kcapi_md_update
  - Fix: kcapi-hasher now supports files larger than 2GB
  - Fix: kcapi-dgst now supports files larger than 2GB
  - Fix: use stack protector
  - Fix: rename header guards to remove leading underscore as pointed out by Markus Elfring
  - Test Fix: Allow compiing the test code without asymmetric and KPP support
- updated to 1.0.0:
  - Fix: Small compile fixes for new checks of GCC 7
  - API Change: Rename all LOG_* enums to KCAPI_LOG_* to prevent namespace poisoning
  - Fix: soname and file name of library now compiles with conventions (thanks to Marcus Meissner)
  - Fix: kcapi-rng.c: unify FD/syscall read code and fix __NR_getrandom resolution
  - Enhancement: add kcapi-enc application to access symmetric encryption on command line
  - Fix: consolidate duplicate code in kcapi-hasher
  - Enhancement: add kcapi-dgst application to access hashes on command line
  - Enhancement: add kcapi-rng man page
  - Enhancement: add kcapi-rng --hex command line option
  - Fix: enable full symmetric AIO support
  - Fix: consolidate all test code into test/ and invoke all tests with test-invocation.sh
  - Fix: fix memleaks in error code paths as reported by clang
  - Fix: reduce memory footprint by rearranging data structures
  - Fix: kcapi-hasher is now fully FIPS 140-2 compliant as it now includes the integrity test for libkcapi.so
  - Enhancement: Add speed tests for MV-CESA accelerated ciphers and hash algorithms (thanks to Bastian Stender)
  - Test Enhancement: add kcapi-enc-test-large.c test testing edge conditions of AF_ALG
  - Test Enhancement: add virttest.sh - use of test system based on eudyptula-boot to test on linux-4.3.6, linux-4.4.86, linux-4.5, linux-4.7, linux-4.10, linux-4.12
  - Test Enhancement: add kcapi-fuzz-test.sh to support fuzzing the AF_ALG interfaces
  - Enhancement: add RPM SPEC file (tested with Fedora 26)
  - API Change: replace --disable-lib-asym with --enable-lib-asym as the algif_akcipher.c kernel interface is not likely to be added to the kernel anytime soon
  - API Enhancement: add KPP API which is not compiled by default, use --enable-lib-kpp (the algif_kpp.c kernel interface is not likely to be added to the Linux kernel any time soon)
  - Test Enhancement: Add KPP tests
  - Enhancement: Re-enable AIO support for symmetric and AEAD ciphers down to Linux kernels 4.1 and 4.7, respectively. This is due to integrating a fix against a kernel crash when using AIO.
  - Fix: simply KDF code base
  - API Enhancement: add message digest convenience functions kcapi_md_*sha*
  - API Enhancement: add cipher convenience functions kcapi_cipher_*_aes_*
  - API Enhancement: add rng convenience function kcapi_rng_get_bytes
  - API Change: remove kcapi_aead_getdata, use kcapi_aead_getdata_input and kcapi_aead_getdata_output instead
  - API Change: remove kcapi_aead_outbuflen, use kcapi_aead_outbuflen_enc and kcapi_aead_outbuflen_dec instead
- updated to 0.14.0:
  - AIO: fix tracking of completed IOCBs
  - speed-test: fix AEAD handling
  - speed-test: fix time calculation
  - compiler now warns a user of deprecated API calls
  - AIO: handle kernel errors for algif_skcipher gracefully
  - AIO: using multiple IOCB if algif_aead interface supports it
  - ASYM: add PKCS1 tests
  - AIO: add ASYM AIO support
  - AIO: fix AEAD AIO fallback
  - AIO: add AIO fallback testing
  - replace enforcement of symmetric cipher limits with a log message only (the underlying kernel implementations should catch any errors)
  - add fuzzing tests
  - use autotools build system as provided by Georges Savoundararadj with additional considerations from Marcin Nowakowski (thanks a lot)
  - ALG_MAX_PAGES restriction is gone with current AF_ALG interface
  - add HKDF (RFC5869)
  - add apps/kcapi-rng
  - add support for multiple accepts where the caller maintains the opfd
  - fix memleak in error case in PBKDF
  - add multithreaded symmetric cipher tests
  - enable full AIO support for kernels 4.13 and higher (fallback AIO implementation using synchronous support for earlier kernels) -- this is due to the broken AIO support for earlier kernels
  - Add tests for the AAD copy operation to be supported for kernel 4.13
- dropped libkcapi-use-external-fipshmac.patch (done differently in upstream)
- dropped reproduciblesort.patch (done differently upstream)
- dropped reproducibledate.patch: merged upstream
- libkcapi.keyring imported</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- update to 1.2.0:
  * enhancement: kcapi-hasher: add madvise and 64 bit support by Brandur Simonsen
  * fix: fix clang warnding in KDF implementation by Khem Raj
  * fix: fix inverted logic in kcapi-main test logic reported by Ondrej Mosnáček
  * fix: return error when iteration count is zero for PBKDF as reported by
  Guido Vranken
  * enhancement: add function kcapi_cipher_stream_update_last to indicate the
  last block of a symmetric cipher stream operation
  * disable XTS multithreaded tests as it triggers a race discussed in
  https://github.com/smuellerDD/libkcapi/issues/92. The conclusion is
  the following: xts(aes) doesn't support chaining requests like for other
  ciphers such as CBC (at least as implemented in the kernel Crypto API).
  That can be seen in `crypto/testmgr.h` - the ciphers that are expected to
  return IVs usable for chaining have the `.iv_out` entries filled in in their
  test vectors (and those that don't support it do not). One can see that only
  CTR and CBC test vectors have them, not XTS.
  Looking again at how XTS is defined, it seems one could implement
  transparent chaining by simply decrypting the final tweak using the tweak
  key and return it as the output IV... but I believe this has never been
  mandated nor implemented in the Crypto API (likely because of the overhead
  of the final tweak decryption, which would be pointless if you're not going
  to use the output IV - and there is currently no way to signal to the driver
  that you are going to need it).
  * disable AIO parallel tests due to undefined behavior</changelog>
  <changelog author="asn@cryptomilk.org" date="1627387200">- Update to version 1.3.1
  * fix: fix -Wconversion warnings (by Ondrej Mosnacek)
  * fix: fix bad data types in _kcapi_common_send_meta (by Ondrej Mosnacek)
  * fix: Version symbols to maintain ABI compatibility (by Simo Sorce)
  * fix: disable io_getevents on systems that do not support it (by Khem Raj)
  * fix: remove prctl PR_SET_DUMPABLE to allow library to be debugged - as the
    library does not store any sensitive data in data structures it owns, such
    security precautions may not be necessary considering the benefit of
    allowing regular debugging
  * fix: ensure that sendmsg is always used as fallback when vmsplice cannot be
    used
  * enhancement: add kcapi_set_maxsplicesize and kcapi_get_maxsplicesize
  * enhancement: the variable types are changed from int32_t to ssize_t and
    from uint32_t to size_t to match common POSIX and Linux APIs
- Added libkcapi-fix-lto.patch</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- use https url</changelog>
  <changelog author="meissner@suse.com" date="1650974401">- Update to version 1.4.0
  * fix: ensure that LTO is supported (by Simo Sorce)
  * fix: add LTO regression testing (by Ondrej Mosnacek)
  * enhancement: add sm3sum, sm3hmac tools, add APIs kcapi_md_sm3, kcapi_md_hmac_sm3
  * enhancement: add SM4 convenience functions
  * fix: support AEAD encryption of arbitrary size with kcapi-enc
- removed libkcapi-fix-lto.patch (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1678104000">- libkcapi was actually signed by the wrong key (bsc#1207892)</changelog>
</package>
<package pkgid="12ece43945c70421b06de996617d98f65e93637a2716cde4210ca0a663b8bbabde60d247c5a605e5c6bbe39d5491b5f913107ed7194d58bc955005f7b5c31cff" name="libkeyutils1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.3" rel="slfo.1.1_1.3"/>
  <changelog author="astieger@suse.com" date="1540814400">- add upstream signing key and verify source signature</changelog>
  <changelog author="dimstar@opensuse.org" date="1551700800">- Replace krb5-devel BuildRequires with pkgconfig(krb5): Allow OBS
  to shortcut the ring0 bootstrap cycle by also using krb5-mini.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1561982400">- updated to 1.6
  - Apply various specfile cleanups from Fedora.
  - request-key: Provide a command line option to suppress helper execution.
  - request-key: Find least-wildcard match rather than first match.
  - Remove the dependency on MIT Kerberos.
  - Fix some error messages
  - keyctl_dh_compute.3: Suggest /proc/crypto for list of available hashes.
  - Fix doc and comment typos.
  - Add public key ops for encrypt, decrypt, sign and verify (needs linux-4.20).
  - Add pkg-config support for finding libkeyutils.
- upstream isn't offering PGP signatures for the source tarballs anymore</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 1.6.3:
  * Revert the change notifications that were using /dev/watch_queue.
  * Apply the change notifications that use pipe2(O_NOTIFICATION_PIPE).
  * Allow "keyctl supports" to retrieve raw capability data.
  * Allow "keyctl id" to turn a symbolic key ID into a numeric ID.
  * Allow "keyctl new_session" to name the keyring.
  * Allow "keyctl add/padd/etc." to take hex-encoded data.
  * Add "keyctl watch*" to expose kernel change notifications on keys.
  * Add caps for namespacing and notifications.
  * Set a default TTL on keys that upcall for name resolution.
  * Explicitly clear memory after it's held sensitive information.
  * Various manual page fixes.
  * Fix C++-related errors.
  * Add support for keyctl_move().
  * Add support for keyctl_capabilities().
  * Make key=val list optional for various public-key ops.
  * Fix system call signature for KEYCTL_PKEY_QUERY.
  * Fix 'keyctl pkey_query' argument passing.
  * Use keyctl_read_alloc() in dump_key_tree_aux().
  * Various manual page fixes.
- spec-cleaner run (fixup failing homepage url)</changelog>
  <changelog author="meissner@suse.com" date="1609934400">- adjust the library license to be LPGL-2.1+ only (the tools are GPL2+,
  the library is just LGPL-2.1+) (bsc#1180603)</changelog>
  <changelog author="aplanas@suse.com" date="1624536000">- Add /etc/keys/ and /usr/etc/keys/ directory (bsc#1187654)</changelog>
  <changelog author="aplanas@suse.com" date="1655812800">- Add /etc/keys/evn and /usr/etc/keys/evm together with the IMA ones</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1679572800">- Drop pkgconfig(krb5) BuildRequires: this dependency was dropped
  upstream in commit f9c7b4e4 (2018-11-02).</changelog>
</package>
<package pkgid="a3f2003fcee841459944ca0ea7544b0a33f216e1d804cee91bcc127771b5febda2206d466b04f80800148dde62d8339593a6daa2bdc274a6f035a776ab54f55e" name="libkmod2-debuginfo" arch="aarch64">
  <version epoch="0" ver="32" rel="slfo.1.1_2.1"/>
  <changelog author="msuchanek@suse.de" date="1685102400">- On usrmerged system move kernel modules into /usr as well (boo#1211796)
  * usr-lib-modules.patch
  * testsuite-Move-setup-rootfs-logic-from-Makefile-to-s.patch
- Refresh usr-lib-modprobe.patch
- Refresh no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1688126400">- Fix up usrmerge patches to make the feature configurable (boo#1212835)
  * testsuite-Handle-different-sysconfdir.patch
  * testsuite-depmod-use-defines-for-the-rootfs-lib_modu.patch
  * depmod-Introduce-outdir-option.patch
  * man-depmod.d-Fix-incorrect-usr-lib-search-path.patch
  * kmod-Add-config-command-to-show-compile-time-configu.patch
- Refresh usr-lib-modprobe.patch
- Refresh usr-lib-modules.patch
- Refresh no-stylesheet-download.patch</changelog>
  <changelog author="jengelh@inai.de" date="1689508800">- Edit usr-lib-modules.patch to /lib/modules provide fallback
  behavior for successfully running `make modules_install` in
  pristine tarballs.</changelog>
  <changelog author="msuchanek@suse.de" date="1689595200">- Use pkgconfig for kmod configuration.
  * Delete kmod-Add-config-command-to-show-compile-time-configu.patch
  * Add kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch,
    Provide-fallback-for-successfully-running-make-modules_install.patch
    compat-module_directory-module_prefix.patch.
- Refresh usr-lib-modprobe.patch, usr-lib-modules.patch.
- Add configure-Detect-openssl-sm3-support.patch to
  fix build with older openssl without SM3 support.</changelog>
  <changelog author="msuchanek@suse.de" date="1690200000">- Remove compatibility patches, add README.usrmerge (boo#1212835).
  * Delete Provide-fallback-for-successfully-running-make-modules_install.patch
  * Delete compat-module_directory-module_prefix.patch</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 31
  * Allow passing a path to modprobe so the module is loaded from
    anywhere from the filesystem.
  * Use in-kernel decompression if available.
  * depmod learned a `-o &lt;dir&gt;` option to allow using a separate
    output directory.
- Delete depmod-Introduce-outdir-option.patch,
  testsuite-Handle-different-sysconfdir.patch,
  testsuite-depmod-use-defines-for-the-rootfs-lib_modu.patch,
  0001-testsuite-repair-read-of-uninitialized-memory.patch,
  testsuite-Move-setup-rootfs-logic-from-Makefile-to-s.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1697544000">- Fix tests
  * refresh configure-Detect-openssl-sm3-support.patch
  * refresh kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch
  * refresh usr-lib-modules.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1701864000">- Add upstream fixes since v31
  * tools-depmod-fix-Walloc-size.patch
  * libkmod-remove-pkcs7-obj_to_hash_algo.patch
  * configure-Check-that-provided-paths-are-absolute.patch
- Refresh usrmerge patches to upstream version (cosmetic change only)</changelog>
  <changelog author="msuchanek@suse.de" date="1712232000">- Update to release 32
  * Drop python bindings
  * Remove unmaintained experimental tool
- Drop upstreamed patches
  * configure-Detect-openssl-sm3-support.patch
  * man-depmod.d-Fix-incorrect-usr-lib-search-path.patch
  * usr-lib-modprobe.patch
  * kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch
  * tools-depmod-fix-Walloc-size.patch
  * libkmod-remove-pkcs7-obj_to_hash_algo.patch
  * usr-lib-modules.patch
  * configure-Check-that-provided-paths-are-absolute.patch
- Refresh no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1763553600">- man: modprobe.d: document the config file order handling (bsc#1253741)
  * man-modprobe.d-document-the-config-file-order-handling.patch</changelog>
</package>
<package pkgid="1eab08c6b9d6c1f146e0f58a6803cc104764a97a6debe525329bbdf11ad4293a45896be75d3e66fbd87d18e11d75a06677c4be5ac1740b23f9731e626fe9aa4d" name="libksba-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.4" rel="slfo.1.1_1.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589976000">- libksba 1.4.0:
  * Supports ECDSA and EdDSA certificate creation and parsing.
  * Supports ECDH enveloped data.
  * Supports ECDSA and EdDSA signed data.
  * Supports rsaPSS signature verification.
  * Supports standard file descriptors in ksba_reader_read.
  * Allows for optional elements in keyinfo objects.
  * Fixes error detection in the CMS parser.
  * Fixes memory leak in ksba_cms_identify.
  * New constants KSBA_VERSION and KSBA_VERSION_NUMBER.
  * New API to make creation of DER objects easy.
  * Interface changes relative to the 1.3.5 release:
  KSBA_VERSION                     NEW.
  KSBA_VERSION_NUMBER              NEW.
  KSBA_CT_SPC_IND_DATA_CTX         NEW.
  KSBA_CLASS_*                     NEW.
  KSBA_TYPE_*                      NEW.
  ksba_der_t                       NEW.
  ksba_der_release                 NEW.
  ksba_der_builder_new             NEW.
  ksba_der_builder_reset           NEW.
  ksba_der_add_ptr                 NEW.
  ksba_der_add_val                 NEW.
  ksba_der_add_int                 NEW.
  ksba_der_add_oid                 NEW.
  ksba_der_add_bts                 NEW.
  ksba_der_add_der                 NEW.
  ksba_der_add_tag                 NEW.
  ksba_der_add_end                 NEW.
  ksba_der_builder_get             NEW.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605873600">- libksba 1.5.0:
  * ksba_cms_identify now identifies OpenPGP keyblock content
  * Supports TR-03111 plain format ECDSA signature verification
  * Fixes a CMS signed data parser bug exhibited by a somewhat
  strange CMS message
- remove deprecated texinfo macros and update signing keyring</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1617796800">- libksba 1.5.1:
  * Support Brainpool curves specified by ECDomainParameters</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- libksba 1.6.0:
  * Limited support for the Authenticated-Enveloped-Data
    content type.
  * Support password based decryption.
  * Silence warnings from static analyzers.
  * Interface changes relative to the 1.5.0 release:
  - KSBA_CT_AUTHENVELOPED_DATA       NEW.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1663502400">- libksba 1.6.1:
  * Allow an OCSP server not to return the sent nonce
- fix rpmlint warnings</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- libksba 1.6.2: [bsc#1204357, CVE-2022-3515]
  * Fix integer overflow in the CRL parser.</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 1.6.3 (bsc#1206579, CVE-2022-47629):
  * Fix another integer overflow in the CRL parser.
  Release-info: https://dev.gnupg.org/T6304</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.6.4:
  * Correctly detect CMS write errors. [rK9ced7706f2]
  * Release-info: https://dev.gnupg.org/T6543</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Run autoreconf for the added patch and add the build
    dependecies on autoconf, automake and libtool.
  * Add libksba-nobetasuffix.patch [bsc#1216334]</changelog>
</package>
<package pkgid="cc3e6dfb854e86b9384fc111156979f4fce577072c802a0cdb2348f8afe0f6a725993bf9e3d4a1a2a3a161be5abb19ee04df22c314352a584d6ae9bc93eda51f" name="libksba8-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.4" rel="slfo.1.1_1.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589976000">- libksba 1.4.0:
  * Supports ECDSA and EdDSA certificate creation and parsing.
  * Supports ECDH enveloped data.
  * Supports ECDSA and EdDSA signed data.
  * Supports rsaPSS signature verification.
  * Supports standard file descriptors in ksba_reader_read.
  * Allows for optional elements in keyinfo objects.
  * Fixes error detection in the CMS parser.
  * Fixes memory leak in ksba_cms_identify.
  * New constants KSBA_VERSION and KSBA_VERSION_NUMBER.
  * New API to make creation of DER objects easy.
  * Interface changes relative to the 1.3.5 release:
  KSBA_VERSION                     NEW.
  KSBA_VERSION_NUMBER              NEW.
  KSBA_CT_SPC_IND_DATA_CTX         NEW.
  KSBA_CLASS_*                     NEW.
  KSBA_TYPE_*                      NEW.
  ksba_der_t                       NEW.
  ksba_der_release                 NEW.
  ksba_der_builder_new             NEW.
  ksba_der_builder_reset           NEW.
  ksba_der_add_ptr                 NEW.
  ksba_der_add_val                 NEW.
  ksba_der_add_int                 NEW.
  ksba_der_add_oid                 NEW.
  ksba_der_add_bts                 NEW.
  ksba_der_add_der                 NEW.
  ksba_der_add_tag                 NEW.
  ksba_der_add_end                 NEW.
  ksba_der_builder_get             NEW.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605873600">- libksba 1.5.0:
  * ksba_cms_identify now identifies OpenPGP keyblock content
  * Supports TR-03111 plain format ECDSA signature verification
  * Fixes a CMS signed data parser bug exhibited by a somewhat
  strange CMS message
- remove deprecated texinfo macros and update signing keyring</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1617796800">- libksba 1.5.1:
  * Support Brainpool curves specified by ECDomainParameters</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- libksba 1.6.0:
  * Limited support for the Authenticated-Enveloped-Data
    content type.
  * Support password based decryption.
  * Silence warnings from static analyzers.
  * Interface changes relative to the 1.5.0 release:
  - KSBA_CT_AUTHENVELOPED_DATA       NEW.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1663502400">- libksba 1.6.1:
  * Allow an OCSP server not to return the sent nonce
- fix rpmlint warnings</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- libksba 1.6.2: [bsc#1204357, CVE-2022-3515]
  * Fix integer overflow in the CRL parser.</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 1.6.3 (bsc#1206579, CVE-2022-47629):
  * Fix another integer overflow in the CRL parser.
  Release-info: https://dev.gnupg.org/T6304</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.6.4:
  * Correctly detect CMS write errors. [rK9ced7706f2]
  * Release-info: https://dev.gnupg.org/T6543</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Run autoreconf for the added patch and add the build
    dependecies on autoconf, automake and libtool.
  * Add libksba-nobetasuffix.patch [bsc#1216334]</changelog>
</package>
<package pkgid="147c678dc4d00e173d75b7b1aa382ca016d0474022040c2e21685e0e98b0e97ac7c3da6285c6778ae721d141bc1f82f6debd43a332d19b67ebc0511dc7b5a0f7" name="liblastlog2-2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.40.4" rel="slfo.1.1_4.1"/>
  <changelog author="jslaby@suse.cz" date="1715860800">- add support for pidfs in kernel 6.9 (bsc#1224285)
  * 0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch
  * 0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch
  * 0003-lsfd-Support-pidfs.patch
  * 0004-lsfd-test-Adapt-test-cases-for-pidfs.patch</changelog>
  <changelog author="dmueller@suse.com" date="1718020800">- disable libmagic in more(1) for binary detection (bsc#1225197)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1721131200">- uncomment "autoreconf --install" to use the new version of automake</changelog>
  <changelog author="sbrabec@suse.com" date="1722859200">- Update to version 2.40.2:
  * cfdisk: fix possible integer overflow
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
    (obsoletes
    0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch,
    0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch,
    0003-lsfd-Support-pidfs.patch,
    0004-lsfd-test-Adapt-test-cases-for-pidfs.patch)
  * mkswap.8.adoc: update note regarding swapfile creation
  * setpgid: make -f work
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Enable kernel mountfd API, as it should be already stable
  (PED-9752).
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.</changelog>
  <changelog author="sbrabec@suse.com" date="1729512000">- Disable mountfd API again.
  (https://github.com/util-linux/util-linux/issues/3158)</changelog>
  <changelog author="sbrabec@suse.com" date="1731844800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).
- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
</package>
<package pkgid="377bdf4aba8ac54232898107783f74c599fb388549c93daeda27a5a31168efcf5173b94b3e9d75d94dcce9e2eded6ca41cb87ba31ad5d207cf9a719428c85b5b" name="liblcms2-2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.16" rel="slfo.1.1_1.2"/>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to 2.11
  * Fixed __cpuid() on fast float plugin to allow gnu gcc
  * Fixed copy alpha bounds check
  * Fixed data race condition on contexts pool
  * Fixed LUT16 write matrix on multichannel V2 profiles
- Changes in 2.10
  * Added a compilation toggle to remove "register" keyword in API.
  * Previously commercial, fast_float plug-in is now released as open source
    under GPL3 license.
  * MD5 functions are now accesible through plug-in API.
  * Added support for Visual Studio 2019
  * Bug fixing.
- Drop lcms2-cgats-memory-allocation.patch, its now in upstream code
- Refresh patches
- Run spec-cleaner</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- update to 2.12:
  * Added build system for fast-float plugin (see plugin documentation)
  * Added new build-in sigmoidal tone curve
  * Added XCode 12 project
  * Added support for multichannel input up to 15 channels
  * Fix LUT8 write matrix
  * Fix version mess on 10/11
  * Fix tools &amp; samples xgetopt
  * Fix warnings on different function pointers
  * Fix matlab MEX compilation
  * plugin: cleanup and better SSE detection
  * plugin: add lab to any on float
  * plugin: it can now be compiled as C++
  * recover PDF documentation, but try to keep it under a resonable size.
  * Prevent a rare but possible out-of-bounds read in postscript generator
  * Fix some compiler warnings
  * Add named color profile building sample to testbed</changelog>
  <changelog author="info@paolostivanin.com" date="1643630400">- Update to 2.13:
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma function
  * configure now accepts --without-fastfloat to turn plugin off
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
- Rebase lcms2-visibility.patch</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 2.13.1:
  * Fix a bug on grayscale that made printing gray on white paper
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * Better documentation
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Travis CI discontinued, GitHub actions used instead
  * Added a very preliminary meson build script (thanks to xclaesse)
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma
  * configure now accepts --without-fastfloat to turn plugin off
  * autogen.sh has now a --distclean toggle to get rid of all autotools generated files
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
  * Fixed mem leaks and out-of bounds accesses as reported by fuzzer</changelog>
  <changelog author="christophe@krop.fr" date="1667908800">- Update to 2.14:
  * lcms2 now implements ICC specification 4.4
  * New multi-threaded plug-in
  * Several fixes to keep fuzzers happy
  * Removed check on DLL when CMS_NO_REGISTER_KEYWORD is used
  * Added more validation against broken profiles
  * Added more help to several tools
  * Revised documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1668168000">- Added reverse-0001-fix-memory-leaks-on-testbed.patch to fix
  colord's i586 build failure</changelog>
  <changelog author="davejplater@gmail.com" date="1668600000">- Removed reverse-0001-fix-memory-leaks-on-testbed.patch and added
  0001-fix-memory-corruption-when-unregistering-plugins.patch as
  final fix for https://github.com/hughsie/colord/issues/145</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) for alternative providers support</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 2.15:
  * New MESON build system, many thanks to amispark and Lovell
    Fuller for bringing this.
  * Fixed a bug that caused memory corruption on colord
  * cmsReadRawTag can read portions  of tags again. Removing this
    caused colord to segfault when dumping profiles
  * Added more checks based of fuzzer discoveries.
  * MSYS2 can now compile lcms2
  * Checked on Apple Silicon M1 and M2
  * Fixed a bug of fastfloat plug-in that affected Krita CMYK
    color selector
- drop 0001-fix-memory-corruption-when-unregistering-plugins.patch (upstream)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1701691200">- update to 2.16:
  * New: import .CUBE files as RGB device links
  * New: Read/Write MHC2 tags for Windows GPU access
  * New: Support for UTF8 on multi-localized Unicode functions
  * New: Support for OkLab color space, built-in and formatter.
  * Improved: floating point transforms float -&gt; integer are now
    honored as float
  * Improved: MSYS2, mingw is now supported
  * Improved: preferred CMM, platform and creator now survives profile
    edition.
  * Fixed: tificc now can deal with Lab TIFF
  * Fixed: code can now be compiled by a C++17 compiler, "register"
    keyword use detected at compile time.
  * Fixed: Reverted PostScript creation that corrupted some interpreters.
  * Bug fixing</changelog>
</package>
<package pkgid="85fb57870059d7439ca81e3d6e71774b52b58afb1f8ee0b9a5753e16da4fbd308a4e3fbd7e8c3c540cbe99cb1e23483cb8c36ee92377cb832d8406cdb0ac23d4" name="libldap2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.4" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@suse.com" date="1648296000">- Add _multibuild support to integrate the build of libldapcpp-devel
  to drop the outdated copy</changelog>
  <changelog author="jengelh@inai.de" date="1648900800">- Update to release 2.6.1
  * Ability to log directly to a file bypassing syslog
  * back-ndb is retired
  * back-sql and back-perl are deprecated
  * lloadd(8): Additional load balancing strategies.
  * lloadd(8): Additional options to improve coherence with certain
    controls and extended operations.</changelog>
  <changelog author="michael@stroeder.com" date="1649678400">- Use libargon2 instead of libsodium because it supports p&gt;1
- Added new contrib overlays: authzid, datamorph, variant, vc</changelog>
  <changelog author="william.brown@suse.com" date="1652356800">- bsc#1199277 - Resolve segfault when calling new ctx with global ctx
  * 0017-Resolve-error-handling-in-new-ctx-when-global.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653307200">- Update to release 2.6.2
  * Added support for OpenSSL 3.0 (ITS#9436)
  * Fixed ldapdelete to prune LDAP subentries (ITS#9737)
  * Fixed libldap to drop connection when non-LDAP data is
    received (ITS#9803)
  * Fixed libldap to allow newlines at end of included file
    (ITS#9811)
  * Fixed slapd slaptest conversion of olcLastBind (ITS#9808)
  * Fixed slapd to correctly init global_host earlier (ITS#9787)
  * Fixed slapd bconfig locking for cn=config replication
    (ITS#9584)
  * Fixed slapd usage of thread local counters (ITS#9789)
  * Fixed slapd to clear runqueue task correctly (ITS#9785)
  * Fixed slapd idletimeout handling (ITS#9820)
  * Fixed slapd syncrepl handling of new sessions (ITS#9584)
  * Fixed slapd to clear connections on bind (ITS#9799)
  * Fixed slapd to correctly advance connections index (ITS#9831)
  * Fixed slapd syncrepl ODSEE replication of unknown attr
    (ITS#9801)
  * Fixed slapd-asyncmeta memory leak in keepalive setting,
    slapd-ldap memory leak in keepalive setting, SEGV on config
    rewrite, ordering on config rewrite, memory leak in keepalive
    setting (ITS#9802)
  * Fixed slapo-pcache SEGV &amp; slapd-monitor SEGV on shutdown
    (ITS#9809)
  * Fixed slapd-monitor crash when hitting sizelimit (ITS#9832)
  * Fixed slapd-sql to properly escape filter value (ITS#9815)
  * Fixed slapo-dynlist dynamic group regression (ITS#9825)
  * Fixed slapo-ppolicy operation handling to be consistent
    (ITS#9794)
  * Fixed slapo-translucent to correctly duplicate substring
    filters (ITS#9818)
  * Contrib:
  * Update ppm module to the 2.1 release (ITS#9814)
  * Documentation:
  * admin26: Document new lloadd features (ITS#9780)
  * Fixed slapd.conf(5)/slapd-config(5) syncrepl
    sizelimit/timelimit documentation (ITS#9804)
  * Fixed slapd-sock(5) to clarify "sockresps result" behavior
    (ITS#8255)</changelog>
  <changelog author="michael@stroeder.com" date="1657800000">- removed obsolete 0017-Resolve-error-handling-in-new-ctx-when-global.patch
- update to 2.6.3
  * Fixed librewrite declaration of calloc (ITS#9841)
  * Fixed libldap to check for NULL ld (ITS#9157)
  * Fixed libldap memory leaks (ITS#9876)
  * Fixed lloadd to correctly tag Notice of Disconnection (ITS#9856)
  * Fixed slapd delta-sync DN leak on ADD ops (ITS#9866)
  * Fixed slapd replication with back-glue (ITS#9868)
  * Fixed slapd lastbind replication with chaining (ITS#9863)
  * Fixed slapd-ldap to correctly set authzid (ITS#9863)
  * Fixed slapd-mdb to check for stale readers on
    MDB_READERS_FULL (ITS#7165)
  * Fixed slapd-mdb indexer task with replicated config (ITS#9858)
  * Fixed slapo-accesslog onetime memory leak (ITS#9864)
  * Fixed slapo-ppolicy interaction with slapo-rwm (ITS#9871)
  * Fixed slapo-rwm to handle escaping special characters (ITS#9817)
  * Fixed slapo-syncprov memory leaks (ITS#9867)
  * Fixed slapo-syncprov fallback in delta-sync mode (ITS#9823)
  * Fixed slapo-unique to not release NULL entry (ITS#8245)
  * doc: Fixed ldap_get_option(3) to clarify ldap_get/set_option
    restrictions (ITS#9824)</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1202931 - CVE-2022-31253 - Openldap start script allowed the ldap user
  to privilege escalate to root due to unbound chown commands.</changelog>
  <changelog author="dmueller@suse.com" date="1670673600">- add reproducible.patch to avoid using compile-time specific date/time
  constructs</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 2.6.4:
  * Fixed client tools to remove 'h' and 'p' options
  * Fixed ldapsearch memory leak with paged results (ITS#9860)
  * Fixed libldap ldif_open_urlto check for failure (ITS#9904 CVE-2023-2953 boo#1211795)
  * Fixed libldap ldap_url_parsehosts check for failure
  * Fixed liblunicode UTF8bvnormalize buffer size (ITS#9955)
  * Fixed lloadd memory leaks (ITS#9907)
  * Fixed lloadd shutdown code to protect memory correctly
  * Fixed lloadd race in epoch.c (ITS#9947)
  * Fixed lloadd potential deadlock with cn=monitor (ITS#9951)
  * Fixed lloadd to keep listener base around when not active
  * Fixed lloadd object reclamation sequencing (ITS#9983)
  * Fixed slapd memory leak with olcAuthIDRewrite (ITS#6035)
  * Fixed slapd free of redundant cmdline option (ITS#9912)
  * Fixed slapd transactions extended operations cleanup after
  * Fixed slapd deadlock with replicated cn=config
  * Fixed slapd connection close logic (ITS#9991)
  * Fixed slapd bconfig locking of cn=config entries (ITS#9045)
  * Fixed slapd-mdb max number of index databases to 256
  * Fixed slapd-mdb to always release entries from ADD operations
  * Fixed slapd-mdb to fully init empty DN in tool_entry_get
  * Fixed slapd-monitor memory leaks with lloadd (ITS#9906)
  * Fixed slapd-monitor to free remembered cookies (ITS#9339)
  * Fixed slapo-accesslog reqStart ordering matching rule
  * Fixed slapo-deref memory leak (ITS#9924)
  * Fixed slapo-dynlist to ignore irrelevant objectClasses
  * Fixed slapo-dynlist to avoid unnecessary searches (ITS#9929)
  * Fixed slapo-dynlist to mark internal searches as such
  * Fixed slapo-pcache crash in consistency_check (ITS#9966)
  * Fixed slapo-remoteauth memory leaks (ITS#9438)
  * Fixed slapo-rwm memory leaks (ITS#9817)
  * Build Environment
  * Fixed ancient DOS related ifdef checks (ITS#9925)
  * Fixed build process to not use gmake specific features
  * Fixed source tree to remove symlinks (ITS#9926)
  * Fixed slapo-otp testdir creation (ITS#9437)
  * Fixed slapd-tester memory leak (ITS#9908)
  * Fixed usage of non-standard C syntax (ITS#9898, ITS#9899,
    ITS#9901)
  * Fixed usage of bashism (ITS#9900)
  * Fixed test suite portability (ITS#9931)
  * Documentation
  * Fixed ldap_bind(3) to document ber_bvfree in ldap_sasl_bind
    (ITS#9976)
  * Fixed slapo-asyncmeta(5) to clarify scheduling for target
    connections (ITS#9941)
  * Fixed slapo-dynlist(5) to clarify configuration settings
    (ITS#9957)
  * Fixed slapo-unique(5) to clarify when quoting should be used
    (ITS#9915)
  * Minor cleanup</changelog>
  <changelog author="kukuk@suse.com" date="1693915200">- Disable SLP by default for Factory and ALP (bsc#1214884)</changelog>
</package>
<package pkgid="cfd3367903da05ac25861fb3c0a14a1c90d8f9a67644985f73679246d793c978599c607ac55adb9bf009ed58a624471c2b7d39555672fbfc21b7bdfad88fc8e5" name="libldb2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.1" rel="slfo.1.1_1.2"/>
  <changelog author="scabrero@suse.de" date="1647950400">- Update to version 2.5.0
  + No code changes, just bump version for samba 4.16.0 release</changelog>
  <changelog author="scabrero@suse.de" date="1655380800">- Update to version 2.5.1
  + Fix build problems; (bso#15071);</changelog>
  <changelog author="scabrero@suse.de" date="1659355200">- Update to version 2.5.2;
  + CVE-2022-32746: Use-after-free occurring in database audit
    logging module; (bso#15009); (bsc#1201490);</changelog>
  <changelog author="nopower@suse.com" date="1663848000">- Update to version 2.6.1
  + CVE-2022-32746 Use-after-free occurring in database audit
    logging module; (bso#15009); (bsc#1201490);
- Update to version 2.6.0
  + ldb: bump version to 2.6.0 for Samba 4.17.x releases</changelog>
  <changelog author="nopower@suse.com" date="1678708800">- Update to version 2.7.1
  - Build fix for Solaris, after removal of tevent ports
    backend (bso#15298).
- Update to version 2.7.0
  - Support python 3.12
  * Have python functions operating on DNs raise LdbError
  * don't call comparison() directly in LDB_TYPESAFE_QSORT
  * Use ldb_ascii_toupper() for case folding to support
    tr_TR.UTF-8 and other dotless i locales; (bso#15248).</changelog>
  <changelog author="scabrero@suse.de" date="1679054400">- Update to 2.7.1
  * Build fix for Solaris, after removal of tevent ports backend
    (bso#15298)
- Changes from 2.7.0
  * Support python 3.12
  * Have python functions operating on DNs raise LdbError
  * Don't call comparison() directly in LDB_TYPESAFE_QSORT
  * Use ldb_ascii_toupper() for case folding to support
    tr_TR.UTF-8 and other dotless i locales (bso#15248)</changelog>
  <changelog author="nopower@suse.com" date="1680091200">- CVE-2023-0614: Access controlled AD LDAP attributes can be
    discovered  (bso#15270); (bsc#1209485).</changelog>
  <changelog author="nopower@suse.com" date="1695729600">-  Update to 2.8.0
  * CVE-2023-0614 Not-secret but access controlled LDAP attributes can be discovered (bug 15270)
  * pyldb: Raise an exception if ldb_dn_get_parent() fails
  * Implement ldap_whoami in pyldb and add the RFC4532 LDB_EXTENDED_WHOAMI_OID definition
  * Documentation and spelling fixes
  * Add ldb_val -&gt; bool,uint64,int64 parsing functions
  * Split out ldb_val_as_dn() helper function
  * add LDB_CHANGETYPE_MODRDN support to ldb_ldif_to_pyobject()
  * add LDB_CHANGETYPE_DELETE support to ldb_ldif_to_pyobject()
  * let ldb_ldif_parse_modrdn() handle names without 'rdn_name=' prefix
  * Don't create error string if there is no error
  * Avoid allocation and memcpy() for every wildcard match candidate
  * Make ldb_msg_remove_attr O(n)
  * pyldb: Throw error on invalid controls
  * pyldb: remove py2 ifdefs
  * Call tevent_set_max_debug_level(TEVENT_DEBUG_TRACE)</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to 2.9.0
  * documentation fixes
  * build with Python 3.12 (bso#15513)
  * a lot of additional error checking in the python bindings
  * minor code fixes
  * Update patch ldb-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="nopower@suse.com" date="1719576000">- Update to 2.9.1
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15569).</changelog>
</package>
<package pkgid="9e5c1ed3d0eaa9d9eb8b122d257350477be97c2990c9ae389bbf9e503e95ebb9136b69a4a447e9ca12108ee68d850d3bf461aaa7293548e9cdb0f57ae548b48d" name="libldm-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.2.4" rel="slfo.1.1_1.2"/>
  <changelog author="cbosdonnat@suse.com" date="1491480000">- Release 0.2.3
- Added patches:
  * werror-fixes.patch
  * cast_be64toh.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Properly assign RPM group to shlib package
- Replace %soname to %sover to better reflects its intent
- Replace -exec rm by _much simpler_ -delete
- Trim excess whitespace</changelog>
  <changelog author="cbosdonnat@suse.com" date="1491825600">- Fix license files</changelog>
  <changelog author="olaf@aepfle.de" date="1496145600">- fix double const</changelog>
  <changelog author="lyan@suse.com" date="1540641600">- fix deprecated api g_type_class_add_private()
- Added patches:
  * Remove-deprecated-g_type_class_add_private.patch</changelog>
  <changelog author="aginies@suse.com" date="1582632000">- update to version 0.2.4
- update patch Remove-deprecated-g_type_class_add_private.patch
- remove upstream merged patches (werror-fixes.patch, cast_be64toh.patch)
- fix buildrequires
- use localsource as the github repo doesnt include yet the built tarball
  for 0.2.4 release</changelog>
  <changelog author="olaf@aepfle.de" date="1609848000">- Adjust Remove-deprecated-g_type_class_add_private.patch to fix build</changelog>
</package>
<package pkgid="1d8c85e8ad5a7158cedd851ad7c60208e1e86e2431fb5b4d53e7511ee87e11616aa5dd32cc59aa2cbf096a80e512001f4bba77e6d03b516b8b37b3d683dfd169" name="liblldp_clif1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1+77.75e83b6fb98e" rel="slfo.1.1_1.2"/>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="lduncan@suse.com" date="1698408000">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="0caa5f6dea58ba8d93a8f7a25f30b60987d6e154b59b811ebb95e9bc1605b7899edfe425c2f6b0101eaf67cc3c069b3b14d14dcf19e2e56bbd03a6559872f225" name="libltdl7-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.7" rel="slfo.1.1_1.4"/>
  <changelog author="pth@suse.de" date="1438862400">- Remove spurious install_info_delete in postun (bsc#940773).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Fix install_info_{install,delete} usage: install-info does not
  allow file globbing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1525348800">- Drop libtool-no_host_name.patch for now: since we are upgrading
  to automake 1.16, we can't have any patch that would require us
  to bootstrap libtool, as this is not exactly trivial.
- Remove the line containing 'uname -m' from the libtool.m4 package
  after installation: this has the same effect as the patch above
  had.</changelog>
  <changelog author="bwiedemann@suse.com" date="1525867200">- Add libtool-reproducible-hostname.patch
  to make package build reproducible (boo#1084909)</changelog>
  <changelog author="meissner@suse.com" date="1544270400">- libtool baselib should require libltdl in baselib.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 2.4.7:
  - Libtool script now supports (configure-time and runtime) ARFLAGS
    variable, which obsoletes AR_FLAGS.  This is due to naming conventions
    among other *FLAGS and to be consistent with Automake's ARFLAGS.
  - Gnulib testsuite is enabled and run during 'make check'.
  - Support the Windows version of the Intel C Compiler (icl) in
    libtool script.
  - Pass '-fsanitize=*' flags for GCC and LLVM, and '-specs=*' for GCC
    to linker.
  - Pass '-Xassembler=*' and '-Wa,*' flag to compilers and linkers.
  - The variable 'FILECMD' with default value of '/usr/bin/file' was used to
    replace existing hard coded references to '/usr/bin/file'.
  - Add MidnightBSD support.
  - Libtool changed ARFLAGS/AR_FLAGS default from 'cru' to 'cr'.
  - Do not pass '-pthread' to Solaris linker.
  - 'libtool' and 'libtoolize' scripts now use '#! /usr/bin/env sh' shebang.
    Previously '#! /bin/sh' was used, which presents challenges for
    containerized environments.
  - Fix significant slowdown of libtoolize for certain projects (regression
    introduced in 2.4.3 release) caused by infinite m4 macro recursion.
  - Mitigate the slowdown of libtool script (introduced in v2.4.3) caused by
    increased number of calls to '$SED $sed_quote_subst' (bug#20006).
  - Properly parse and export TLS symbols on AIX.
  - Various bug fixes surrounding use of 'sed'.
  - Darwin systems set proper "allow undefined" flag on OSX 11, and
    PowerPC 10.5.
  - Removed some deprecated tests related to 'Makefile.inc' files.
- merge in testsuite, disable for now, isn't building for a while</changelog>
  <changelog author="dmueller@suse.com" date="1648555200">- add handle-Werror-return-type.patch
- disable lto, breaks libtool as seen in testsuite</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- allow tests to pass with GNU grep 3.8 boo#1203097
  add libtool-2.4.7-grep-3.8.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
</package>
<package pkgid="07bb01677be48072108793fe8a39a5c1fe331a11942e151d9074d8cd6830e7e17878b65183bca39fc757c94ad7badd2bb8484bc587d1b16257dd8770f23e49b2" name="liblttng-ctl0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.13.11" rel="slfo.1.1_1.4"/>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 2.10.2:
  * Do not flag consumer as disabled on relayd comm failure.
  * Cleanup inactive FDs in the consumer polling thread.
  * man: Document dead-peer detection for lttng-relayd.
  * lttng-relayd: Use the TCP keep-alive mechanism to detect a
    dead-peer.
  * Tests: race between consumer pause and trace start/stop.
  * Fix notification thread being not notified of channel creation
    on application error.
  * Fix using putenv() and free()-ing the value is invalid.
  * Fix unknown consumer type considered a libc error.
  * Fix that consumerd(64/32)_lib_dir can be NULL.
  * Fix a nonsensical message printed by lttng track/untrack.
  * Fix O_CLOEXEC being erroneously used on pipe creation.
  * Fix a wrong parameter to fcntl in pipe_set_flag.
  * Use lttng_clock_gettime instead of clock_gettime.
  * Close channel monitor pipe after killing the
    metadata_timer_thread.
  * Use file based synchronisation for python logging test.
  * Test: Add file based synchronisation point for the Python test
    application.
  * Fix wrong use of the relay_streams_sent in snapshot.
  * Fix the return code of lttcomm_send_unix_sock signed.
  * Fix a src/bin/lttng/utils.c: cast incompatible pointer warning.
  * Fix: src/common/pipe.h: include &lt;sys/types.h&gt; for ssize_t and
    mode_t.
  * Fix detect dlmopen() and disable corresponding tests if not
    available.
  * Use tmpdir for intermediary files.
  * Fix include scripts for distribution.
  * Fix a typo in lttng-consumerd file default.
  * Fix missing NULL checks in logging statements.
  * Test: Kernel testing for notification.
  * Kernel consumerd sock paths need rundir substitution.
  * Create lttng run dir regardless of user privilege.
  * Make version.h generation work with dash.
  * lttng-enable-event(1): filtering: Specify that `$ctx.cpu_id`
    is available.
  * Centralise sessiond config option handling.
  * Fix buffer overflow warning in python bindings.
  * Tests fix: BT2 does not output the metadata of a trace
    collection.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 2.10.4 (changes since 2.10.2):
  * Fix: Set errno with value from SO_ERROR on error.
  * Fix: Missing value handling for lttng_event_context_type.
  * Fix: Use SOL_SOCKET level for SO_KEEPALIVE on all platform.
  * Fix: Error out on leftover arguments.
  * Fix: Reply to version check even on protocol mismatch.
  * Fix: Error handling on relay version check.
  * Document add-context limitation for started session.
  * Fix: add-context cannot be performed after a session has been
    started.
  * Fix: Duplicated kernel consumer socket locking.
  * Fix: Remove unused event types in MI XML schema.
  * Tests: Cleanly exit from test apps on reception of SIGTERM.
  * Document consumer socket locking assumptions.
  * Fix: Consumer socket lock not held during snapshot record.
  * Fix: set_relayd_for_snapshot does not acquire the consumer
    socket lock.
  * Fix: send_channel_monitor_pipe does not take the consumer
    socket lock.
  * Document the locking assumptions of consumerd-relayd socket
    passing.
  * Assert that the consumer lock is held while sending FDs to
    consumerd.
  * Assert that the consumer socket lock is taken during
    communication.
  * Tests: Refuse to run test suite if lttng processes are present.
  * Fix: Metadata channel leak when using the snapshot tracing
    mode.
  * Fix build: in_git_repo is used before being set.
  * Add DBG statement for TCP keep-alive options.
  * Fix: Unprivilieged sessiond agent port clashes with root
    sessiond.
  * Fix: Erroneous use of extern keyword.
  * Fix: Failure to launch agent thread is not reported.
  * Fix: Agent may not be ready on launch.
  * Fix: Checking for existing session daemon is done after
    daemonising.
  * Fix: lttng logs nanoseconds.
  * Fix: stream_per_chan_id_ht should allow duplicates.
  * Fix: relayd send_command() util not logging on failure.
  * Fix: Create_output_path() relayd util is not
    const-correct.
  * Fix: Kernel snapshot handling of EAGAIN.
  * Fix validate_trace_empty test check.
  * Fix: Circular inclusion of lttng.h results in warning.
  * Fix: Channel lock must be taken to check for pending
    notifications.
  * Fix: Quiet option is not set in sessiond-config.
  * Fix: Hold consumer socket lock for consumer_send_msg.
  * Fix: Use off_t type for lseek function return value to avoid
    overflow.
  * Fix: Double similar condition.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.5:
  * Fix: missing context enum values in session xml schema.
  * Tests: add session auto-loading test cases.
  * Bash completion: ignore namespace for xmllint parsing.
  * Typo in ust consumer log message (channek -&gt; channel).
  * Fix: use signed variable for refcounting of
    consumer_relayd_sock_pair.
  * Fix: warning due to hash_key_str() being not const-correct.
  * Print consumerd32/64/kernel configuration.
  * Fix: calling ht_{hash, match}_enum with wrong argument.
  * Fix: probes should be compared strictly by events metadata.
  * Fix: test_ust-dl is generated at configure-time.
  * Fix: cmd line options overwrite env variable config options.
  * Fix: perform the initialization memory barrier out of loop body.
  * Port: fix format warnings on Cygwin.
  * Add missing include for ssize_t on Cygwin.
  * Fix: sessions with agent channels fail to load.
  * Fix: don't wait for the load thread before serving client
    commands.
  * Fix: sessiond fails to launch on --without-ust configuration.
  * Fix: agent thread poll set creation failure results in deadlock.
  * Fix: test uses sizeof() on the wrong operand of strncpy.
  * Fix: ret may be used uninitialized in sample_channel_positions().
- Add gpl-2.0.txt and lgpl-2.1.txt to the library packages with the
  %license tag.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.2:
  * See /usr/share/doc/packages/lttng-tools/ChangeLog
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.2
  Changelog: https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.12.2
  - Add signed bz2 support (keyring)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.1:
  * See https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.13.1
- Rebase lttng-tools-fix-pkgconfig.patch.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.7:
  * See https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.13.7</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.8
  * futex wait: handle spurious futex wakeups
  * agent port file was o+w when launching as root
  * sessiond: handle empty scheduled rotations
  * sessiond: size-based rotations never triggered
  * lttng-snapshot: fixed use after free of max size argument
  * liblttng-ctl: non-packed structure was used for tracker
    serialization
  * test: lttng kernel modules were still loaded after running
    test_clock_override
  * Plug some memory leaks</changelog>
  <changelog author="dmueller@suse.com" date="1674993600">- update to 2.13.9:
  * Fix: lttng: poptGetArg doesn't provide string ownership
  * Fix: relayd: missing space in trace creation logging statement
  * Fix: event field value: assertion fails on empty string
  * Build fix: rpath of test libraries results in non-reproducible build
  * Fix: never use 'no' in a command variable
  * Fix: sessiond: abort called on undefined client command
  * Fix: consumer: snapshot: assertion on subsequent snapshot
  * Fix: sessiond: instance uuid is not sufficiently unique</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.11:
  * docs: fix: Match stated automake requirement
  * Docs: Fix broken reference in lttng-add-trigger
  * Docs: Fix broken reference to lttng-concepts(7) man page
    disk space
  * Fix: lttng-add-context: leak of application context
    parameters
  * Fix: sessiond: bad fd used while rotating exiting app's
    buffers
  * Fix: consumerd: slow metadata push slows down application
    registration
  * event-rule: set event rule loglevel to domain specific value
    when unset
  * Fix: sessiond: preserve jul/log4j domain loglevels
  * Fix: sessiond: crash enabling event rules that differ only by
    loglevel type
  * Fix: sessiond: incorrect use of exclusions array leads to
    crash
  * Fix: sessiond: silent kernel notifier registration error
  * Fix: sessiond: size-based notification occasionally not
    triggered
  * Fix: adding a user space probe fails on thumb functions
  * Fix: Tests that assume CPU 0 is present
  * Fix: Wrong assumption about possible CPUs
  * Fix: lttng remove-trigger -h fails
  * Fix: ini parser: truncation of value name
  * Fix: truncated len in
    lttng_event_rule_user_tracepoint_serialize()</changelog>
</package>
<package pkgid="6b2ca0b90ee7558cf9af557fd7e89b0b7239080eadc4cc0b9b913d5afe1c89924a958b2f1d0c5c41789046744d9476e5262931393ba543677db0b8ddbf2616cf" name="liblttng-ust-ctl5-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.13.6" rel="slfo.1.1_1.3"/>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.2:
  * Fix: Add liblttng-ust dependency to liblttng-ust-fd.
  * Fix: Use LIBDL/LIBC_DL to select either libdl or libc.
  * Fix: AM_CONDITIONAL should be outside AS_IF block.
  * Fix: Build jni libs with openjdk &gt;= 10.
  * Fix: ustfork: Save and restore errno in syscall wrappers.
  * Fix: Cache the result of getpid() internally.
  * Fix: Reset cached vpid context on fork.
  * Fix: String comparison on incorrect length in context provider.
  * Fix: Remove for() loop initial declarations.
  * Use ust_lock during sock_info operations for atomicity against
    fork.
  * Force tracked fd to be bigger than STDERR_FILENO.
- Remove lttng-ust-copying.patch and add the licence file through
  the %license tag on the library package.</changelog>
  <changelog author="mliska@suse.cz" date="1569326400">- Update to version 2.10.5:
  * New tracef() instrumentation facility. Excerpt from
    the lttng-ust(3) man page.
  * Perf PMU counters support from user-space on x86.
  * Library base address dump is now stable
    (thanks to Mentor for their contribution).
  * fixes boo#1149704.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.0:
  * See /usr/share/doc/packages/lttng-ust/ChangeLog
- Add lttng-ust-2.11.0-fix-no-common.patch: Fix build with
  - fno-common (commit 21a934df, boo#1160400).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.0 (jsc#SLE-16189)
  Changelog: https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.12.0
  Delete patch: lttng-ust-2.11.0-fix-no-common.patch (upstream)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.0:
  * See https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.13.0
- Add liburcu requirement to the development package.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.2 (changes since 2.13.0):
  * Fix: ust-compiler: constructor/destructor build on g++ 4.8.
  * ust-compiler: constructor/destructor whitespaces layout and
    macro dependency.
  * Fix: ust-cancelstate: include string.h for strerror.
  * Fix: libnuma is prepended to LIBS.
  * Fix: Allow disabling some abi compat tests.
  * Fix: generate probe registration constructor as a C++
    constuctor.
  * Fix: nestable pthread cancelstate.
  * Fix: abort on decrement_sem_count during concurrent tracing
    start and teardown.
  * Fix: allocating C++ compound literal on heap with Clang.
  * Check for C++11 when building C++ probe providers.
  * fix: liblttng-ust-fd async-signal-safe close().
  * tracepoints: print debug message when lttng-ust-tracepoint.so
    is not found.
  * Fix: static_assert unavailable with glibc &lt; 2.16.
  * Fix: combined tracing of lttng-ust 2.12/2.13 generates
    corrupted traces.
  * doc/man: Document LTTNG_UST_ABORT_ON_CRITICAL variable.
  * Fix: remove autoconf features default value in help message.
  * Fix: add extern "C" to two header files.
  * Fix: __STDC_VERSION__ can be undefined in C++.
  * Fix: sample discarded events count before reserve.
  * Fix: ring buffer event counter.
  * Fix: concurrent exec(2) file descriptor leak.
  * Add "domain" parameter to the Log4j 2.x agent.
  * Fix: Convert custom loglevels in Log4j 2.x agent.
  * Fix: coverity reported null returns in Log4j2 agent.
  * Add a Log4j 2.x Java agent.
  * Fix: may be used uninitialised on powerpc.
  * Fix: doc/examples/java-log4j: fix paths to directories.
  * Fix: doc/examples/java-jul: fix paths to directories.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1660910400">- Update to version 2.13.3:
  * Document ust lock async-signal-safety.
  * Fix: don't use strerror() from ust lock nocheck.
  * Fix: remove non-async-signal-safe fflush from ERR().
  * Fix: Pointers are rejected by integer element compile time
    assertion for array and sequence.
  * Fix: statedump: invalid read during iter_end.
  * Fix: bytecode interpreter context_get_index() leaves byte order
    uninitialised.</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.4
  * Added missing closedir in _get_max_cpuid_from_sysfs()
  * File descriptor was leaked in get_possible_cpu_mask_from_sysfs
  * sessiond wait futex: handle spurious futex wakeups</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1664712000">- Update to version 2.13.5:
  * Fix: bytecode validator: reject specialised load field/context
    ref instructions.
  * Fix: bytecode validator: reject specialised load instructions.
  * Fix: event notification capture: validate buffer length.
  * Fix: event notification capture error handling.
  * Fix: lttng-ust-comm: wait on wrong child process.
  * fix: 'make dist' without javah.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.6:
  * Fix: segmentation fault on filter interpretation in "switch"
    mode
  * Fix: `ip` context is expressed as a base-10 field
  * Fix: c99: use __asm__ __volatile__
  * Fix: c99: static assert: clang build fails due to multiple
    typedef
  * Fix: Reevaluate LTTNG_UST_TRACEPOINT_DEFINE each time
    tracepoint.h is included
  * Fix: trace events in C++ constructors/destructors
  * Fix: trace events in C constructors/destructors
  * Fix: use unaligned pointer accesses for lttng_inline_memcpy</changelog>
</package>
<package pkgid="d84c230099a0ee572264e9e502d4c3b71f3701833ebc4a68471c2cb5a2ebecdb89c8b694772e67413a28857c10d076626a17052ee0b72729a640b42bf444e11e" name="liblttng-ust-python-agent1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.13.6" rel="slfo.1.1_1.3"/>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.2:
  * Fix: Add liblttng-ust dependency to liblttng-ust-fd.
  * Fix: Use LIBDL/LIBC_DL to select either libdl or libc.
  * Fix: AM_CONDITIONAL should be outside AS_IF block.
  * Fix: Build jni libs with openjdk &gt;= 10.
  * Fix: ustfork: Save and restore errno in syscall wrappers.
  * Fix: Cache the result of getpid() internally.
  * Fix: Reset cached vpid context on fork.
  * Fix: String comparison on incorrect length in context provider.
  * Fix: Remove for() loop initial declarations.
  * Use ust_lock during sock_info operations for atomicity against
    fork.
  * Force tracked fd to be bigger than STDERR_FILENO.
- Remove lttng-ust-copying.patch and add the licence file through
  the %license tag on the library package.</changelog>
  <changelog author="mliska@suse.cz" date="1569326400">- Update to version 2.10.5:
  * New tracef() instrumentation facility. Excerpt from
    the lttng-ust(3) man page.
  * Perf PMU counters support from user-space on x86.
  * Library base address dump is now stable
    (thanks to Mentor for their contribution).
  * fixes boo#1149704.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.0:
  * See /usr/share/doc/packages/lttng-ust/ChangeLog
- Add lttng-ust-2.11.0-fix-no-common.patch: Fix build with
  - fno-common (commit 21a934df, boo#1160400).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.0 (jsc#SLE-16189)
  Changelog: https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.12.0
  Delete patch: lttng-ust-2.11.0-fix-no-common.patch (upstream)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.0:
  * See https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.13.0
- Add liburcu requirement to the development package.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.2 (changes since 2.13.0):
  * Fix: ust-compiler: constructor/destructor build on g++ 4.8.
  * ust-compiler: constructor/destructor whitespaces layout and
    macro dependency.
  * Fix: ust-cancelstate: include string.h for strerror.
  * Fix: libnuma is prepended to LIBS.
  * Fix: Allow disabling some abi compat tests.
  * Fix: generate probe registration constructor as a C++
    constuctor.
  * Fix: nestable pthread cancelstate.
  * Fix: abort on decrement_sem_count during concurrent tracing
    start and teardown.
  * Fix: allocating C++ compound literal on heap with Clang.
  * Check for C++11 when building C++ probe providers.
  * fix: liblttng-ust-fd async-signal-safe close().
  * tracepoints: print debug message when lttng-ust-tracepoint.so
    is not found.
  * Fix: static_assert unavailable with glibc &lt; 2.16.
  * Fix: combined tracing of lttng-ust 2.12/2.13 generates
    corrupted traces.
  * doc/man: Document LTTNG_UST_ABORT_ON_CRITICAL variable.
  * Fix: remove autoconf features default value in help message.
  * Fix: add extern "C" to two header files.
  * Fix: __STDC_VERSION__ can be undefined in C++.
  * Fix: sample discarded events count before reserve.
  * Fix: ring buffer event counter.
  * Fix: concurrent exec(2) file descriptor leak.
  * Add "domain" parameter to the Log4j 2.x agent.
  * Fix: Convert custom loglevels in Log4j 2.x agent.
  * Fix: coverity reported null returns in Log4j2 agent.
  * Add a Log4j 2.x Java agent.
  * Fix: may be used uninitialised on powerpc.
  * Fix: doc/examples/java-log4j: fix paths to directories.
  * Fix: doc/examples/java-jul: fix paths to directories.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1660910400">- Update to version 2.13.3:
  * Document ust lock async-signal-safety.
  * Fix: don't use strerror() from ust lock nocheck.
  * Fix: remove non-async-signal-safe fflush from ERR().
  * Fix: Pointers are rejected by integer element compile time
    assertion for array and sequence.
  * Fix: statedump: invalid read during iter_end.
  * Fix: bytecode interpreter context_get_index() leaves byte order
    uninitialised.</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.4
  * Added missing closedir in _get_max_cpuid_from_sysfs()
  * File descriptor was leaked in get_possible_cpu_mask_from_sysfs
  * sessiond wait futex: handle spurious futex wakeups</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1664712000">- Update to version 2.13.5:
  * Fix: bytecode validator: reject specialised load field/context
    ref instructions.
  * Fix: bytecode validator: reject specialised load instructions.
  * Fix: event notification capture: validate buffer length.
  * Fix: event notification capture error handling.
  * Fix: lttng-ust-comm: wait on wrong child process.
  * fix: 'make dist' without javah.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.6:
  * Fix: segmentation fault on filter interpretation in "switch"
    mode
  * Fix: `ip` context is expressed as a base-10 field
  * Fix: c99: use __asm__ __volatile__
  * Fix: c99: static assert: clang build fails due to multiple
    typedef
  * Fix: Reevaluate LTTNG_UST_TRACEPOINT_DEFINE each time
    tracepoint.h is included
  * Fix: trace events in C++ constructors/destructors
  * Fix: trace events in C constructors/destructors
  * Fix: use unaligned pointer accesses for lttng_inline_memcpy</changelog>
</package>
<package pkgid="21019254ec6b8f8192e74ab37e3e47c28bd9a604176463282f8acac6d65539e0a771056b01dd75f6b2e1464b0568e7497b5392b0d46199e016cdafda47d3937c" name="liblttng-ust1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.13.6" rel="slfo.1.1_1.3"/>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.2:
  * Fix: Add liblttng-ust dependency to liblttng-ust-fd.
  * Fix: Use LIBDL/LIBC_DL to select either libdl or libc.
  * Fix: AM_CONDITIONAL should be outside AS_IF block.
  * Fix: Build jni libs with openjdk &gt;= 10.
  * Fix: ustfork: Save and restore errno in syscall wrappers.
  * Fix: Cache the result of getpid() internally.
  * Fix: Reset cached vpid context on fork.
  * Fix: String comparison on incorrect length in context provider.
  * Fix: Remove for() loop initial declarations.
  * Use ust_lock during sock_info operations for atomicity against
    fork.
  * Force tracked fd to be bigger than STDERR_FILENO.
- Remove lttng-ust-copying.patch and add the licence file through
  the %license tag on the library package.</changelog>
  <changelog author="mliska@suse.cz" date="1569326400">- Update to version 2.10.5:
  * New tracef() instrumentation facility. Excerpt from
    the lttng-ust(3) man page.
  * Perf PMU counters support from user-space on x86.
  * Library base address dump is now stable
    (thanks to Mentor for their contribution).
  * fixes boo#1149704.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.0:
  * See /usr/share/doc/packages/lttng-ust/ChangeLog
- Add lttng-ust-2.11.0-fix-no-common.patch: Fix build with
  - fno-common (commit 21a934df, boo#1160400).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.0 (jsc#SLE-16189)
  Changelog: https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.12.0
  Delete patch: lttng-ust-2.11.0-fix-no-common.patch (upstream)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.0:
  * See https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.13.0
- Add liburcu requirement to the development package.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.2 (changes since 2.13.0):
  * Fix: ust-compiler: constructor/destructor build on g++ 4.8.
  * ust-compiler: constructor/destructor whitespaces layout and
    macro dependency.
  * Fix: ust-cancelstate: include string.h for strerror.
  * Fix: libnuma is prepended to LIBS.
  * Fix: Allow disabling some abi compat tests.
  * Fix: generate probe registration constructor as a C++
    constuctor.
  * Fix: nestable pthread cancelstate.
  * Fix: abort on decrement_sem_count during concurrent tracing
    start and teardown.
  * Fix: allocating C++ compound literal on heap with Clang.
  * Check for C++11 when building C++ probe providers.
  * fix: liblttng-ust-fd async-signal-safe close().
  * tracepoints: print debug message when lttng-ust-tracepoint.so
    is not found.
  * Fix: static_assert unavailable with glibc &lt; 2.16.
  * Fix: combined tracing of lttng-ust 2.12/2.13 generates
    corrupted traces.
  * doc/man: Document LTTNG_UST_ABORT_ON_CRITICAL variable.
  * Fix: remove autoconf features default value in help message.
  * Fix: add extern "C" to two header files.
  * Fix: __STDC_VERSION__ can be undefined in C++.
  * Fix: sample discarded events count before reserve.
  * Fix: ring buffer event counter.
  * Fix: concurrent exec(2) file descriptor leak.
  * Add "domain" parameter to the Log4j 2.x agent.
  * Fix: Convert custom loglevels in Log4j 2.x agent.
  * Fix: coverity reported null returns in Log4j2 agent.
  * Add a Log4j 2.x Java agent.
  * Fix: may be used uninitialised on powerpc.
  * Fix: doc/examples/java-log4j: fix paths to directories.
  * Fix: doc/examples/java-jul: fix paths to directories.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1660910400">- Update to version 2.13.3:
  * Document ust lock async-signal-safety.
  * Fix: don't use strerror() from ust lock nocheck.
  * Fix: remove non-async-signal-safe fflush from ERR().
  * Fix: Pointers are rejected by integer element compile time
    assertion for array and sequence.
  * Fix: statedump: invalid read during iter_end.
  * Fix: bytecode interpreter context_get_index() leaves byte order
    uninitialised.</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.4
  * Added missing closedir in _get_max_cpuid_from_sysfs()
  * File descriptor was leaked in get_possible_cpu_mask_from_sysfs
  * sessiond wait futex: handle spurious futex wakeups</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1664712000">- Update to version 2.13.5:
  * Fix: bytecode validator: reject specialised load field/context
    ref instructions.
  * Fix: bytecode validator: reject specialised load instructions.
  * Fix: event notification capture: validate buffer length.
  * Fix: event notification capture error handling.
  * Fix: lttng-ust-comm: wait on wrong child process.
  * fix: 'make dist' without javah.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.6:
  * Fix: segmentation fault on filter interpretation in "switch"
    mode
  * Fix: `ip` context is expressed as a base-10 field
  * Fix: c99: use __asm__ __volatile__
  * Fix: c99: static assert: clang build fails due to multiple
    typedef
  * Fix: Reevaluate LTTNG_UST_TRACEPOINT_DEFINE each time
    tracepoint.h is included
  * Fix: trace events in C++ constructors/destructors
  * Fix: trace events in C constructors/destructors
  * Fix: use unaligned pointer accesses for lttng_inline_memcpy</changelog>
</package>
<package pkgid="deaac544e2b48f8c740dec1bd43f2294c7f07718ef08c452c8a3644379adb29fdb4dc58d121d9fe8c09c952d114878a0a0322ca1d88a9e071c324a06a51aeb24" name="liblua5_4-5-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.4.6" rel="slfo.1.1_1.3"/>
  <changelog author="gmbr3@opensuse.org" date="1661860800">- Add more upstream patches:
  * luabugs6.patch
  * luabugs7.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1671364800">- Added more numbered patches from upstream:
  * luabugs8.patch
  * luabugs9.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1674561600">- Do not use complex dependencies on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1679140800">- Added more numbered patches from upstream:
  * luabugs10.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1680609600">- Added more numbered patches from upstream:
  * luabugs11.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682856000">- Update to 5.4.5:
  - this is a bug-fix release.
  - Lua 5.4.5 also contains several internal improvements and
    includes a revised reference manual
- Remove upstreamed patches:
  - luabugs1.patch
  - luabugs10.patch
  - luabugs11.patch
  - luabugs2.patch
  - luabugs3.patch
  - luabugs4.patch
  - luabugs5.patch
  - luabugs6.patch
  - luabugs7.patch
  - luabugs8.patch
  - luabugs9.patch</changelog>
  <changelog author="mcepl@suse.com" date="1683633600">- Experimenting with lua 5.4.6-rc1 (release 5.4.5 has been
  effectively withdrawn).</changelog>
  <changelog author="mcepl@suse.com" date="1684756800">- Final release of 5.4.6. No change in the changelog.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685361600">- Library is always liblua5_4-5: due to SOVERSION leading digit
  being 5</changelog>
  <changelog author="mcepl@suse.com" date="1699963200">- Add skip-tests_big-endian.patch to skip little-endian-only
  tests (bsc#1216930).</changelog>
</package>
<package pkgid="85279ae7a61ae128965a5728550b9e89c50ddb3361127775287f96872cef658b58d97c23f4719f71201d52e49cc4ec61e979c888f3990d4f0a4005d51904a575" name="liblvm2cmd2_03-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.03.22" rel="slfo.1.1_1.3"/>
  <changelog author="heming.zhao@suse.com" date="1648641600">-  lvm2-monitor.service reported warning messages for udev didn't finish to set up device database (bsc#1197183)
  + 0025-vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Update lvm2 from LVM2.2.03.15 to LVM2.2.03.16
  * ** WHATS_NEW for 2.03.16 ***
  Version 2.03.16 - 18th May 2022
  ===============================
    Fix segfault when handling selection with historical LVs.
    Add support --vdosettings with lvcreate, lvconvert, lvchange.
    Filtering multipath devices respects blacklist setting from multipath configuration.
    lvmdevices support for removing by device id using --deviceidtype and --deldev.
    Display writecache block size with lvs -o writecache_block_size.
    Improve cachesettings description in man lvmcache.
    Fix lossing of delete message on thin-pool extension.
- Drop patches that have been merged into upstream
  - 0001-post-release.patch
  - 0002-asan-fix-some-reports-from-libasan.patch
  - 0003-make-generate.patch
  - 0004-tests-udev-pvscan-vgchange-fix-service-wait.patch
  - 0005-devices-file-do-not-clear-PVID-of-unread-devices.patch
  - 0006-tests-skip-vgchange-pvs-online.sh-on-rhel5.patch
  - 0007-dev_manager-fix-dm_task_get_device_list.patch
  - 0008-dev_manager-failing-status-is-not-internal-error.patch
  - 0009-clang-add-extra-check.patch
  - 0010-clang-possible-better-compilation-with-musl-c.patch
  - 0011-dev_manager-do-not-query-for-open_count.patch
  - 0012-dev_manager-use-list-info-for-preset-devs.patch
  - 0013-man-lvmcache-add-more-writecache-cachesettings-info.patch
  - 0014-man-update-cachesettings-option-description.patch
  - 0015-man-lvmcache-mention-writecache-memory-usage.patch
  - 0016-writecache-display-block-size-from-lvs.patch
  - 0017-devices-simplify-dev_cache_get_by_devt.patch
  - 0018-devices-drop-incorrect-paths-from-aliases-list.patch
  - 0019-devices-initial-use-of-existing-option.patch
  - 0020-devices-fix-dev_name-assumptions.patch
  - 0021-devices-use-dev-cache-aliases-handling-from-label-sc.patch
  - 0022-devices-only-close-PVs-on-LVs-when-scan_lvs-is-enabl.patch
  - 0023-writecache-check-memory-usage.patch
  - 0024-pvscan-don-t-use-udev-for-external-device-info.patch
  - 0025-vgchange-monitor-don-t-use-udev-info.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new man: lvm_import_vdo.8 dmfilemapd.8
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
- lvm.conf
  - align upstream style, comment out default values</changelog>
  <changelog author="heming.zhao@suse.com" date="1663761600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667476800">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695038400">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * ** WHATS_NEW from 2.03.17 to 2.03.22 ***
  version 2.03.22 - 02nd August 2023
  ==================================
    Fix pv_major/pv_minor report field types so they are integers, not strings.
    Add lvmdevices --delnotfound to delete entries for missing devices.
    Always use cachepool name for metadata backup LV for lvconvert --repair.
    Make metadata backup LVs read-only after pool's lvconvert --repair.
    Improve VDO and Thin support with lvmlockd.
    Handle 'lvextend --usepolicies' for pools for all activation variants.
    Fix memleak in vgchange autoactivation setup.
    Update py-compile building script.
    Support conversion from thick to fully provisioned thin LV.
    Cache/Thin-pool can use error and zero volumes for testing.
    Individual thin volume can be cached, but cannot take snapshot.
    Better internal support for handling error and zero target (for testing).
    Resize COW above trimmed maximal size is does not return error.
    Support parsing of vdo geometry format version 4.
    Add lvm.conf thin_restore and cache_restore settings.
    Handle multiple mounts while resizing volume with a FS.
    Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
    Enhance lvm_import_vdo and use snapshot when converting VDO volume.
    Fix parsing of VDO metadata.
    Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
    Allow snapshots of raid+integrity LV.
    Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  version 2.03.21 - 21st April 2023
  =================================
    Fix activation of vdo-pool for with 0 length headers (converted pools).
    Avoid printing internal init messages when creation integration devices.
    Allow (write)cache over raid+integrity LV.
  version 2.03.20 - 21st March 2023
  =================================
    Fix segfault if using -S|--select with log/report_command_log=1 setting.
    Configure now fails when requested lvmlockd dependencies are missing.
    Add some configure Gentoo enhancements for static builds.
  version 2.03.19 - 21st February 2023
  ====================================
    Configure supports --with-systemd-run executed from udev rules.
    Enhancement for build with MuslC systemd and non-bash system shells (dash).
    Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
    Ensure udev is processing origin LV before its thick snapshots LVs.
    Fix and improve runtime memory size detection for VDO volumes.
  version 2.03.18 - 22nd December 2022
  ====================================
    Fix issues reported by coverity scan.
    Fix warning for thin pool overprovisioning on lvextend (2.03.17).
    Add support for writecache metadata_only and pause_writeback settings.
    Fix missing error messages in lvmdbusd.
  Version 2.03.17 - 10th November 2022
  ====================================
    Add new options (--fs, --fsmode) for FS handling when resizing LVs.
    Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
    Fix lv_active field type to binary so --select and --binary applies properly.
    Switch to use mallinfo2 and use it only with glibc.
    Error out in lvm shell if using a cmd argument not supported in the shell.
    Fix lvm shell's lastlog command to report previous pre-command failures.
    Extend VDO and VDOPOOL without flushing and locking fs.
    Add --valuesonly option to lvmconfig to print only values without keys.
    Updates configure with recent autoconf tooling.
    Fix lvconvert --test --type vdo-pool execution.
    Add json_std output format for more JSON standard compliant version of output.
    Fix vdo_slab_size_mb value for converted VDO volume.
    Fix many corner cases in device_id, including handling of S/N duplicates.
    Fix various issues in lvmdbusd.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="b8c8afb574bf680aa7853619c5a1700b3813183812c03dbcdfe5e73e4775774a1cd33ef515fc00290cca22183e15d85fca35254ec96109864084bdf6abeaf746" name="liblz4-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.9.4" rel="slfo.1.1_1.2"/>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="jengelh@inai.de" date="1605528000">- Update to release 1.9.3
  * api: LZ4_decompress_safe_partial() now supports unknown
    compressed size
  * api: improved LZ4F_compressBound() with automatic flushing
  * cli: multiple files are compressed now using the legacy format</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version 1.9.3 fixes also CVE-2021-3520 [bsc#1185438]</changelog>
  <changelog author="jengelh@inai.de" date="1660651200">- Update to release 1.9.4
  * Decompression speed on high-end ARM64 platform is improved,
    by ~+20%.
  * For the specific scenario of data compressed with -BD4
    setting (small blocks, &lt;= 64 KB, linked) decompressed
    block-by-block into a flush buffer (like lz4 CLI does),
    decompression speed is improved ~+70%.
  * For compressed data employing the lz4frame format (native
    format of lz4 CLI), it's possible to ignore checksum
    validation during decompression, resulting in speed
    improvements of ~+40% . This capability is exposed at both
    CLI (see --no-crc) and library levels.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
</package>
<package pkgid="19e048309864caa7cf13162ea20427cf6021aaa36e50295221c71a49d3b13f67e59016dfea200c23e48d0ac78acc0ce3a291383f6104c05a296037f3f37278d0" name="liblzma5-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.4.3" rel="slfo.1.1_2.1"/>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to 5.2.8:
  * xz:
  - If xz cannot remove an input file when it should, this
    is now treated as a warning (exit status 2) instead of
    an error (exit status 1). This matches GNU gzip and it
    is more logical as at that point the output file has
    already been successfully closed.
  - Fix handling of .xz files with an unsupported check type.
    Previously such printed a warning message but then xz
    behaved as if an error had occurred (didn't decompress,
    exit status 1). Now a warning is printed, decompression
    is done anyway, and exit status is 2. This used to work
    slightly before 5.0.0. In practice this bug matters only
    if xz has been built with some check types disabled. As
    instructed in PACKAGERS, such builds should be done in
    special situations only.
  - Fix "xz -dc --single-stream tests/files/good-0-empty.xz"
    which failed with "Internal error (bug)". That is,
  - -single-stream was broken if the first .xz stream in
    the input file didn't contain any uncompressed data.
  - Fix displaying file sizes in the progress indicator when
    working in passthru mode and there are multiple input files.
    Just like "gzip -cdf", "xz -cdf" works like "cat" when the
    input file isn't a supported compressed file format. In
    this case the file size counters weren't reset between
    files so with multiple input files the progress indicator
    displayed an incorrect (too large) value.
  * liblzma:
  - API docs in lzma/container.h:
  * Update the list of decoder flags in the decoder
    function docs.
  * Explain LZMA_CONCATENATED behavior with .lzma files
    in lzma_auto_decoder() docs.
  - OpenBSD: Use HW_NCPUONLINE to detect the number of
    available hardware threads in lzma_physmem().
  - Fix use of wrong macro to detect x86 SSE2 support.
    __SSE2_MATH__ was used with GCC/Clang but the correct
    one is __SSE2__. The first one means that SSE2 is used
    for floating point math which is irrelevant here.
    The affected SSE2 code isn't used on x86-64 so this affects
    only 32-bit x86 builds that use -msse2 without -mfpmath=sse
    (there is no runtime detection for SSE2). It improves LZMA
    compression speed (not decompression).
  - Fix the build with Intel C compiler 2021 (ICC, not ICX)
    on Linux. It defines __GNUC__ to 10 but doesn't support
    the __symver__ attribute introduced in GCC 10.
  * Scripts: Ignore warnings from xz by using --quiet --no-warn.
  This is needed if the input .xz files use an unsupported
  check type.
  * Translations:
  - Updated Croatian and Turkish translations.
  - One new translations wasn't included because it needed
    technical fixes. It will be in upcoming 5.4.0. No new
    translations will be added to the 5.2.x branch anymore.
  - Renamed the French man page translation file from
    fr_FR.po to fr.po and thus also its install directory
    (like /usr/share/man/fr_FR -&gt; .../fr).
  - Man page translations for upcoming 5.4.0 are now handled
    in the Translation Project.
  * Update doc/faq.txt a little so it's less out-of-date.</changelog>
  <changelog author="jengelh@inai.de" date="1669896000">- Rename xz-static-devel -&gt; xz-devel-static to follow the general
  naming used in openSUSE.</changelog>
  <changelog author="dmueller@suse.com" date="1671278400">- update to 5.2.10:
  * xz: Don't modify argv[] when parsing the --memlimit* and
  - -block-list command line options. This fixes confusing
    arguments in process listing (like "ps auxf").
  * GNU/Linux only: Use __has_attribute(__symver__) to detect if
    that attribute is supported. This fixes build on Mandriva where
    Clang is patched to define __GNUC__ to 11 by default (instead
    of 4 as used by Clang upstream).
  * liblzma:
  - Fixed an infinite loop in LZMA encoder initialization
    if dict_size &gt;= 2 GiB.
  - Fixed two cases of invalid free() that can happen if
    a tiny allocation fails in encoder re-initialization
    or in lzma_filters_update(). These bugs had some
    similarities with the bug fixed in 5.2.7.
  - Fixed lzma_block_encoder() not allowing the use of
    LZMA_SYNC_FLUSH with lzma_code() even though it was
    documented to be supported. The sync-flush code in
    the Block encoder was already used internally via
    lzma_stream_encoder(), so this was just a missing flag
    in the lzma_block_encoder() API function.
  - GNU/Linux only: Don't put symbol versions into static
    liblzma as it breaks things in some cases (and even if
    it didn't break anything, symbol versions in static
    libraries are useless anyway). The downside of the fix
    is that if the configure options --with-pic or --without-pic
    are used then it's not possible to build both shared and
    static liblzma at the same time on GNU/Linux anymore;
    with those options --disable-static or --disable-shared
    must be used too.
- drop unused xz-devel-static which is no longer supported when using
  - -with-pic (which is needed for shared libs)</changelog>
  <changelog author="dmueller@suse.com" date="1672401600">- update to 5.4.0:
    This bumps the minor version of liblzma because new features were
    added. The API and ABI are still backward compatible with liblzma
    5.2.x and 5.0.x.
    Summary of new features added in the 5.3.x development releases:
  * liblzma:
  - Added threaded .xz decompressor lzma_stream_decoder_mt().
    It can use multiple threads with .xz files that have multiple
    Blocks with size information in Block Headers. The threaded
    encoder in xz has always created such files.
    Single-threaded encoder cannot store the size information in
    Block Headers even if one used LZMA_FULL_FLUSH to create
    multiple Blocks, so this threaded decoder cannot use multiple
    threads with such files.
    If there are multiple Streams (concatenated .xz files), one
    Stream will be decompressed completely before starting the
    next Stream.
  - A new decoder flag LZMA_FAIL_FAST was added. It makes the
    threaded decompressor report errors soon instead of first
    flushing all pending data before the error location.
  - New Filter IDs:
  * LZMA_FILTER_ARM64 is for ARM64 binaries.
  * LZMA_FILTER_LZMA1EXT is for raw LZMA1 streams that don't
    necessarily use the end marker.
  - Added lzma_str_to_filters(), lzma_str_from_filters(), and
    lzma_str_list_filters() to convert a preset or a filter chain
    string to a lzma_filter[] and vice versa. These should make
    it easier to write applications that allow users to specify
    custom compression options.
  - Added lzma_filters_free() which can be convenient for freeing
    the filter options in a filter chain (an array of lzma_filter
    structures).
  - lzma_file_info_decoder() to makes it a little easier to get
    the Index field from .xz files. This helps in getting the
    uncompressed file size but an easy-to-use random access
    API is still missing which has existed in XZ for Java for
    a long time.
  - Added lzma_microlzma_encoder() and lzma_microlzma_decoder().
    It is used by erofs-utils and may be used by others too.
    The MicroLZMA format is a raw LZMA stream (without end marker)
    whose first byte (always 0x00) has been replaced with
    bitwise-negation of the LZMA properties (lc/lp/pb). It was
    created for use in EROFS but may be used in other contexts
    as well where it is important to avoid wasting bytes for
    stream headers or footers. The format is also supported by
    XZ Embedded (the XZ Embedded version in Linux got MicroLZMA
    support in Linux 5.16).
    The MicroLZMA encoder API in liblzma can compress into a
    fixed-sized output buffer so that as much data is compressed
    as can be fit into the buffer while still creating a valid
    MicroLZMA stream. This is needed for EROFS.
  - Added lzma_lzip_decoder() to decompress the .lz (lzip) file
    format version 0 and the original unextended version 1 files.
    Also lzma_auto_decoder() supports .lz files.
  - lzma_filters_update() can now be used with the multi-threaded
    encoder (lzma_stream_encoder_mt()) to change the filter chain
    after LZMA_FULL_BARRIER or LZMA_FULL_FLUSH.
  - In lzma_options_lzma, allow nice_len = 2 and 3 with the match
    finders that require at least 3 or 4. Now it is internally
    rounded up if needed.
  - CLMUL-based CRC64 on x86-64 and E2K with runtime processor
    detection. On 32-bit x86 it currently isn't available unless
  - -disable-assembler is used which can make the non-CLMUL
    CRC64 slower; this might be fixed in the future.
  - Building with --disable-threads --enable-small
    is now thread-safe if the compiler supports
    __attribute__((__constructor__)).
  * xz:
  - Using -T0 (--threads=0) will now use multi-threaded encoder
    even on a single-core system. This is to ensure that output
    from the same xz binary is identical on both single-core and
    multi-core systems.
  - --threads=+1 or -T+1 is now a way to put xz into
    multi-threaded mode while using only one worker thread.
    The + is ignored if the number is not 1.
  - A default soft memory usage limit is now used for compression
    when -T0 is used and no explicit limit has been specified.
    This soft limit is used to restrict the number of threads
    but if the limit is exceeded with even one thread then xz
    will continue with one thread using the multi-threaded
    encoder and this limit is ignored. If the number of threads
    is specified manually then no default limit will be used;
    this affects only -T0.
    This change helps on systems that have very many cores and
    using all of them for xz makes no sense. Previously xz -T0
    could run out of memory on such systems because it attempted
    to reserve memory for too many threads.
    This also helps with 32-bit builds which don't have a large
    amount of address space that would be required for many
    threads. The default soft limit for -T0 is at most 1400 MiB
    on all 32-bit platforms.
  - Previously a low value in --memlimit-compress wouldn't cause
    xz to switch from multi-threaded mode to single-threaded mode
    if the limit cannot otherwise be met; xz failed instead. Now
    xz can switch to single-threaded mode and then, if needed,
    scale down the LZMA2 dictionary size too just like it already
    did when it was started in single-threaded mode.
  - The option --no-adjust no longer prevents xz from scaling down
    the number of threads as that doesn't affect the compressed
    output (only performance). Now --no-adjust only prevents
    adjustments that affect compressed output, that is, with
  - -no-adjust xz won't switch from multi-threaded mode to
    single-threaded mode and won't scale down the LZMA2
    dictionary size.
  - Added a new option --memlimit-mt-decompress=LIMIT. This is
    used to limit the number of decompressor threads (possibly
    falling back to single-threaded mode) but it will never make
    xz refuse to decompress a file. This has a system-specific
    default value because without any limit xz could end up
    allocating memory for the whole compressed input file, the
    whole uncompressed output file, multiple thread-specific
    decompressor instances and so on. Basically xz could
    attempt to use an insane amount of memory even with fairly
    common files. The system-specific default value is currently
    the same as the one used for compression with -T0.
    The new option works together with the existing option
  - -memlimit-decompress=LIMIT. The old option sets a hard limit
    that must not be exceeded (xz will refuse to decompress)
    while the new option only restricts the number of threads.
    If the limit set with --memlimit-mt-decompress is greater
    than the limit set with --memlimit-compress, then the latter
    value is used also for --memlimit-mt-decompress.
  - Added new information to the output of xz --info-memory and
    new fields to the output of xz --robot --info-memory.
  - In --lzma2=nice=NUMBER allow 2 and 3 with all match finders
    now that liblzma handles it.
  - Don't mention endianness for ARM and ARM-Thumb filters in
  - -long-help. The filters only work for little endian
    instruction encoding but modern ARM processors using
    big endian data access still use little endian
    instruction encoding. So the help text was misleading.
    In contrast, the PowerPC filter is only for big endian
    32/64-bit PowerPC code. Little endian PowerPC would need
    a separate filter.
  - Added decompression support for the .lz (lzip) file format
    version 0 and the original unextended version 1. It is
    autodetected by default. See also the option --format on
    the xz man page.
  - Sandboxing enabled by default:
  * Capsicum (FreeBSD)
  * pledge(2) (OpenBSD)
  * Scripts now support the .lz format using xz.
  * A few new tests were added.
  * The liblzma-specific tests are now supported in CMake-based
    builds too ("make test").</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- update to 5.4.1:
  * liblzma:
  - Fixed the return value of lzma_microlzma_encoder() if the
    LZMA options lc/lp/pb are invalid. Invalid lc/lp/pb options
    made the function return LZMA_STREAM_END without encoding
    anything instead of returning LZMA_OPTIONS_ERROR.
  * Tests:
  - Fixed test script compatibility with ancient /bin/sh
    versions. Now the five test_compress_* tests should
    no longer fail on Solaris 10.
  - Added and refactored a few tests.
  * Translations:
  - Updated the Catalan and Esperanto translations.
  - Added Korean and Ukrainian man page translations.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="mpluskal@suse.com" date="1679313600">- Update to version 5.4.2:
  * All fixes from 5.2.11 that were not included in 5.4.1.
  * If xz is built with support for the Capsicum sandbox but running
    in an environment that doesn't support Capsicum, xz now runs
    normally without sandboxing instead of exiting with an error.
  * liblzma:
  - Documentation was updated to improve the style, consistency,
    and completeness of the liblzma API headers.
  - The Doxygen-generated HTML documentation for the liblzma API
    header files is now included in the source release and is
    installed as part of "make install". All JavaScript is
    removed to simplify license compliance and to reduce the
    install size.
  - Fixed a minor bug in lzma_str_from_filters() that produced
    too many filters in the output string instead of reporting
    an error if the input array had more than four filters. This
    bug did not affect xz.
  * Build systems:
  - autogen.sh now invokes the doxygen tool via the new wrapper
    script doxygen/update-doxygen, unless the command line option
  - -no-doxygen is used.
  - Added microlzma_encoder.c and microlzma_decoder.c to the
    VS project files for Windows and to the CMake build. These
    should have been included in 5.3.2alpha.
  * Tests:
  - Added a test to the CMake build that was forgotten in the
    previous release.
  - Added and refactored a few tests.
  * Translations:
  - Updated the Brazilian Portuguese translation.
  - Added Brazilian Portuguese man page translation.</changelog>
  <changelog author="fcrozat@suse.com" date="1680782400">- Update license tag, there is GPL-3.0-or-later code too.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683288000">- Update to version 5.4.3:
  * Build system fixes
  * Translation updates: Croatian
- update signing key</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1750939200">- Fix CVE-2025-31115 (bsc#1240414)
  * CVE-2025-31115.patch</changelog>
</package>
<package pkgid="a690f4e3e60f24fa2e805704bd878e8e34b1bae2eaade0e1e5fbcb8da16bfb867886010deeab69b0f3033a88be63ff467dce6af258fe1e77e8809921072300d6" name="liblzo2-2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.10" rel="slfo.1.1_1.3"/>
  <changelog author="mpluskal@suse.com" date="1424779200">- Cleanup spec file with spec-cleaner
- Update to 2.09
  * Work around gcc bug #64516 that could affect architectures like
  armv4, armv5 and sparc.</changelog>
  <changelog author="dsterba@suse.cz" date="1490788800">- Update to 2.10
  * Improve CMake build support.
  * Add support for pkg-config.
  * Do not redefine "snprintf" so that the examples build with MSVC 2015.
  * Assorted cleanups.</changelog>
  <changelog author="dimstar@opensuse.org" date="1510660800">- Add pkgconfig BuildRequires: allow the rpm dep generator to
  inspect the shipped .pc file and produce requires/provides.</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Modernise spec file with spec-cleaner
- Move license to subpackage that will allways be installed</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Fix RPM groups.
- Trim sentence that has no comparison point.</changelog>
  <changelog author="mliska@suse.cz" date="1556280000">- Use FAT LTO objects in order to provide proper static library (boo#1133259).</changelog>
  <changelog author="mliska@suse.cz" date="1574251200">- Disable strict aliasing due to its violation
  (boo#1157271).</changelog>
  <changelog author="dmueller@suse.com" date="1611662400">- add lzo-2.08-rhbz1309225.patch to avoid aliasing issues</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dmueller@suse.com" date="1679054400">- adjust lzo-2.08-rhbz1309225.patch download reference</changelog>
</package>
<package pkgid="7344661f403cbfbdf827ee2714fcc3a3322b8ff0b580227a90074142f092e3a056b6b704c0f7b837895de40653f9a34950a745920e3eb2a9f5c05eadda6b0176" name="libmagic1-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.44" rel="slfo.1.1_1.4"/>
  <changelog author="werner@suse.de" date="1650974400">- Try to solve 32bit import dependency problems (boo#1198788)</changelog>
  <changelog author="werner@suse.de" date="1655121600">- Update to 5.42:
  * PR/348: add missing cases to prevent file from aborting on
    random magic files.
  * PR/351: octalify filenames when not raw before printing.
  * fix regex cacheing bug (Dirk Mueller)
  * merge file_regcomp and file_regerror() to simplify the code
    and reduce memory requirements for storing regexes (Dirk Mueller)
  * cache regex (Dirk Mueller)
  * detect filesystem full by flushing output (Dirk Mueller)
  * implement running decompressor programs using
    posix_spawnp(2) instead of vfork(2)
  * Add support for msdos dates and times
  * use the system byte swapping functions if available (Werner Fink)
- Port patches
  * file-5.17-option.dif
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.19-zip2.0.dif
  * file-5.28-btrfs-image.dif
  * file-secure_getenv.patch
- Remove patches now upstream
  * file-5.23-endian.patch
  * file-5.41-cache-regexps-locale-restore.patch
  * file-5.41-cache-regexps.patch
- Port and rename patch file-5.41.dif which is now file-5.42.dif</changelog>
  <changelog author="werner@suse.de" date="1657713600">- Add upstream patch to fix boo#1201350
  * file-boo1201350.patch which combines the commits
    c80065fe6900be5e794941e29b32440e9969b1c3
    7e59d34206d7c962e093d4239e5367a2cd8b7623
    f042050f59bfc037677871c4d1037c33273f5213
    d471022b2772071877895759f209f2c346757a4c
    441ac2b15508909e82ad467960df4ac0adf9644c</changelog>
  <changelog author="gmbr3@opensuse.org" date="1661428800">- Move magic files to /usr/share/file from /usr/share/misc, and
  then create symlinks from /usr/share/misc back to /usr/share/file
  as per FHS 3.0</changelog>
  <changelog author="dmueller@suse.com" date="1663070400">- update to 5.43:
  * Add octal indirect magic
  * avoid infinite loop in non-wide code
  * Obey MAGIC_CONTINUE with multiple magic files
  * Fix bug with large flist
  * PR/364: Detect non-nul-terminated core filenames from QEMU
  * PR/359: Add support for http://ndjson.org/
  * PR/362: Fix wide printing
  * PR/358: Fix width for -f -
- drop file-boo1201350.patch (upstream)</changelog>
  <changelog author="werner@suse.de" date="1663156800">- Add patch file-zstd.patch from upstream mailing list
  * Add zstd decompression support
- Run also upstream standard checks</changelog>
  <changelog author="werner@suse.de" date="1673265600">- Modifying patches
  * file-5.22-elf.dif
  * file-5.19-printf.dif
  * file-5.19-zip2.0.dif
  * file-5.19-biorad.dif
  * file-secure_getenv.patch
  * file-5.28-btrfs-image.dif
- Remove patch file-zstd.patch now upstream
- Port patch file-5.42.dif and rename it to file-5.44.dif
- Update to 5.44:
  * Handle nan's so that we don't get internal floating point exceptions
    when they are enabled (Vincent Mihalkovic)
  * PR/397: Restore the ability to process files from stdin immediately.
  * fixed various clustefuzz issues
  * Fix error detection for decompression code (Vincent Mihalkovic)
  * Add MAGIC_NO_COMPRESS_FORK and use it to produce a more
    meaningful error message if we are sandboxing.
  * Add built-in lzip decompression support (Michal Gorny)
  * Add built-in zstd decompression support (Martin Rodriguez Reboredo)</changelog>
  <changelog author="werner@suse.de" date="1673352000">- Use [Pp]atch0 explicit to avoid warning as python.magic build time</changelog>
  <changelog author="werner@suse.de" date="1673438400">- Add patch dc71304b.patch
  * Handle script executable Zip archives</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="a76ffbc5865f3c1e04cf0d71b1762634c3c3db8dce6d5a155bc110e17a2b94846045053dec6d500d49dcae4915e0773b7c7e3cc86ba97d176b0baa8cc01c5f9e" name="libmana1-debuginfo" arch="aarch64">
  <version epoch="0" ver="49.1" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
</package>
<package pkgid="91d4cefda13d754c4a3fcb708099e342c4d11ec8bdd1e2cb0b411f3735ef71b2690fd6db6225ba15ba509f020875856f53e71681c0eac82d59f7956714dafed6" name="libmbim-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.28.4" rel="slfo.1.1_1.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578139200">- Only require python3-base package for building instead of
  full python3 package.</changelog>
  <changelog author="mardnh@gmx.de" date="1579089600">- Update to version 1.22.0
  + libmbim-glib: Message parsing logic improved to avoid reading
    fields out of bounds, e.g. if the messages sent by the modem
    are malformed or not in line with the specs.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="mardnh@gmx.de" date="1592568000">- Update to version 1.24
  * Build now requires GLib/GObject/GIO 2.48.
  * Added new GObject Introspection support in the library, that
    can be explicitly requested during configure with
  - -enable-introspection=yes. With the new introspection support,
    the libmbim-glib library can now be used directly from e.g.
    python programs, as in the example included with the release.
  * Added release version information to all the types and methods
    of the public library API, and added new per-version indices
    in the documentation.
  * Added g_autoptr() support to all public types.
  * Several other minor improvements and fixes.
- Introduce subpackage for Introspection bindings</changelog>
  <changelog author="dimstar@opensuse.org" date="1597838400">- Upate to version 1.24.2:
  + libmbim-glib:
  - Fixed several issues in the logic that merges the service
    subscribe list.
  - Improved message reading logic to skip malformed MBIM
    messages (e.g. AT URCs emitted wrongly in the MBIM port by
    some Cinterion modules).</changelog>
  <changelog author="mardnh@gmx.de" date="1601640000">- Update to version 1.24.4:
  * libmbim-glib,device:
    + Added new mbim_device_get_transaction_id() to retrieve the
    transaction id currently being used.
  * libmbim-glib,proxy:
    + Fixed the transaction id used in fragments of the same
    request.
    + Avoid creating device context when it's already being
    untracked.
    + Fixed double GError free.
  * mbimcli:
    + Fixed missing EOL in error string when closing device.</changelog>
  <changelog author="mardnh@gmx.de" date="1611316800">- Update to version 1.24.6:
  * libmbim-glib,device:
    + Fixed a GSource use after free.
    + Avoid g_file_test() on NULL path.
    + Don't warn if descriptors file cannot be read.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- Update to version 1.26.2:
  + The GUdev optional build/runtime requirement is now fully
    dropped, it's no longer used.
  + Implemented new link management operations, exclusively for the
    cdc_mbim driver for now. These new operations allow creating or
    deleting VLAN network interfaces in order to run multiplexed
    data sessions over one single physical network interface.
  + Added support for the Microsoft-defined SAR service, including
    the following operations:
  - MBIM_CID_MS_SAR_CONFIG
  - MBIM_CID_MS_SAR_TRANSMISSION_STATUS
  + libmbim-glib:
  - Logic updated to make sure full packets are written at once,
    instead of writing them in chunks.
  - Updated the "LTE attach status" APIs in order to avoid
    creating unneeded struct types in the interface. The older
    methods have been deprecated and maintained in the library
    for compatibility purposes only.
  + Bugfixes.
- Drop pkgconfig(gudev-1.0) BuildRequires: no longer used.</changelog>
  <changelog author="dmueller@suse.com" date="1653825600">- update to 1.26.4:
  * meson: force building doc on normal builds, not only during install.
  * meson: fix 'export_packages' in GIR setup.
  * compat: deprecate the MbimLteAttachStatus type.
  * net-port-manager: use unaligned netlink attribute length.
  * include MBIM proxy control service in docs.
  * codegen: add section doc for each service.
  * utils: add missing short description in section.
  * compat: add missing MbimLteAttachStatus doc.
  * device: add missing mbim_device_list_links() doc.
  * device: fix MbimDevice 'device-in-session' property doc.
  * version: add missing MBIM_CHECK_VERSION() documentation.
  * device: fix wrong reference to QmiDevice
  * Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.28.4:
  + libmbim-glib:
  - Fixed context type conversions to consider all possible APN
    types.
  - Duplicate UTF-16 strings during processing to avoid alignment
    issues.
- Changes from version 1.28.2:
  + libmbim-glib: fixed validation of complete fragments to avoid
    reading out of bounds.
  + mbim-proxy: added --verbose-full flag to allow printing logs
    with personal info included.
- Changes from version 1.28:
  + This version includes support for most operations in MBIM
    Extensions v2 (for 5G NSA) and v3 (for 5G SA). The enabling of
    the updated extensions requires the user of the library to
    explicitly request what version wants to be used, via the new
    'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V2' or
    'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V3' flags in the device open
    request. Please note that if one process enables the v2 or v3
    support, it will apply to operations done by other processes as
    well. When using the proxy, the current version support is
    propagated to all clients of the proxy automatically.
  + The verbose message logging will now by default hide all fields
    that are considered personal information. Extended message
    logging including all field contents should be explicitly
    requested.
  + Build:
  - The GNU autotools (autoconf/automake/libtool) support has
    been fully removed, this release requires the use of the
    meson build system.
  - The 'instrospection' meson option is now a boolean.
  - New boolean 'man' meson option to allow disabling the man
    page generation.
  + Extended the Basic Connect service, including the following
    operations:
  - MBIM_CID_BASIC_CONNECT_REGISTER_STATE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_SIGNAL_STATE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_SUBCRIBER_READY_STATUS (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_CONNECT (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_IP_PACKET_FILTERS (MBIMEx v3.0)
  + Extended the Microsoft-defined Basic Connect Extensions
    service, including the following operations:
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LOCATION_INFO_STATUS
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_PROVISIONED_CONTEXTS
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_VERSION (MBIMEx v2.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_DEVICE_CAPS
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_MODEM_CONFIGURATION
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_REGISTRATION_PARAMETERS
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LTE_ATTACH_INFO
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_WAKE_REASON
    (MBIMEx v3.0)
  + Extended the Microsoft-defined UICC Low Level Access service,
    including the following operations:
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_APPLICATION_LIST
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_FILE_STATUS
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_BINARY
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_RECORD
  + New Microsoft-defined Voice Extensions service, including the
    following operations: MBIM_CID_MS_VOICE_EXTENSIONS_NITZ
  + Extended the Intel-defined Firmware Update service, including
    the following operations:
    MBIM_CID_INTEL_FIRMWARE_UPDATE_MODEM_REBOOT (MBIMEx v2.0)
  + New Intel-defined Thermal RF service, including the following
    operations: MBIM_CID_INTEL_THERMAL_RF_RFIM
  + Extended the QDU service, including the following operations:
  - MBIM_CID_QDU_QUECTEL_REBOOT
  - MBIM_CID_QDU_QUECTEL_READ_VERSION
  + libmbim-glib:
  - Updated the net link operations to support devices exposed by
    the wwan subsystem.
  - New mbim_message_get_printable_full() method to print the
    contents of a given message specifying the specific MBIMEx
    version in use.
  - New mbim_message_validate() method to validate the contents
    of the headers in a MBIM message, to be used before accessing
    its contents.
  - Updated all MbimMessage getters so that an implicit
    validation is done in the g_return_* macros. This validation
    will not be done if those macros are disabled during build.
  - New MBIM_DEVICE_CONSECUTIVE_TIMEOUTS signal in the MbimDevice
    to report the number of consecutive MBIM request timeouts
    detected.
  - New mbim_device_[get|set|check]_ms_mbimex_version() methods
    to manage the MBIMEx version support in the MbimDevice.
  - New MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_[V2|V3] flags in
    mbim_device_open_full() to allow enabling MBIMEx v2.0 or v3.0
    support.
  - New MbimTlv type to support the variable-sized fields in
    MBIMEx v3.0 operations.
  - Ensure CLOSED state always in mbim_device_close(), even on
    error.
  - Disallow device close if an open operation is ongoing.
  - Extended MbimDataClass with 5G NSA/SA values, used in MBIMEx
    v2.0, and added new MbimDataClassV3 and MbimDataSubclass
    types, used in MBIMEX v3.0.
  - Extended MbimCtrlCaps and MbimSubscriberReadyState with
    values reported in MBIMEX v3.0 extensions.
  - New MbimWakeType, MbimAccessMediaType,
    MbimModemConfigurationStatus, MbimFrequencyRange,
    MbimContextRoamingControl, MbimContextMediaType,
    MbimContextState, MbimContextOperation, MbimMicoMode,
    MbimLadnInfo, MbimDefaultPduActivationHint, MbimDrxCycle,
    MbimSubscriberReadyStatusFlag enums used in MBIMEx v3.0
    specific operations.
  - New MbimUiccApplicationType, MbimUiccFileAccessibility,
    MbimUiccFileType and MbimUiccFileStructure enums, used in the
    MS UICC Low Level Access service.
  - New MbimIntelServingCellInfo enum, used in the Intel Thermal
    RF service.
  - New MbimIntelBootMode enum, used in the Intel Firmware Update
    service.
  - New MbimQduQuectelRebootType and MbimQduQuectelVersionType
    enums used in the Quectel-defined QDU service updates.
  - Extended the list of MbimNwError values with values from the
    3GPP specs.
  - Deprecated MBIM_NW_ERROR_UNKNOWN, use NONE instead.
  - Deprecated
    MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_NETWORK_BLACKLIST, use
    NETWORK_DENYLIST instead.
  - Fixed the public format for CDMA language in the SMS service.
  + mbimcli:
  - New '--device-open-ms-mbimex-v2' option to request to enable
    MBIMEX v2.0 support.
  - New '--device-open-ms-mbimex-v3' option to request to enable
    MBIMEX v3.0support.
  - New '--verbose-full' option to request enabling logs that
    include personal information.
  - New '--set-ip-packet-filters' action.
  - New '--set-provisioned-contexts' action.
  - New '--set-signal-state' action.
  - New '--set-network-idle-hint' action.
  - New '--query-network-idle-hint' action.
  - New '--set-emergency-mode' action.
  - New '--query-emergency-mode' action.
  - New '--set-service-activation' action.
  - New '--ms-query-location-info-status' action.
  - New '--ms-query-provisioned-contexts' action.
  - New '--ms-set-provisioned-contexts' action.
  - New '--ms-query-base-stations' action
  - New '--ms-query-version' action.
  - New '--ms-query-registration-parameters' action.
  - New '--ms-set-registration-parameters' action.
  - New '--ms-query-modem-configuration' action.
  - New '--ms-query-wake-reason' action.
  - New '--ms-query-uicc-application-list' action.
  - New '--ms-query-uicc-file-status' action.
  - New '--ms-query-uicc-read-binary' action.
  - New '--ms-query-uicc-read-record' action.
  - New '--ms-set-uicc-open-channel' action.
  - New '--ms-set-uicc-close-channel' action.
  - New '--ms-query-uicc-atr' action.
  - New '--ms-set-uicc-apdu' action.
  - New '--ms-set-uicc-reset' action.
  - New '--ms-query-uicc-reset' action.
  - New '--ms-set-uicc-terminal-capability' action.
  - New '--ms-query-uicc-terminal-capability' action.
  - New '--ms-query-nitz' action.
  - New '--intel-query-rfim' action.
  - New '--intel-set-rfim' action.
  - Updated '--connect' action to deprecate 'apn' and prefer
    'access-string'.
  - Updated '--connect' action to support 'compression' and
    'context-type'.
  - Updated '--intel-modem-reboot' action to optionally receive
    the boot mode type argument.
  - Fixed the Quectel specific operations so that they have the
  - -quectel prefix and do not overwrite the ones in the Basic
    Connect service.
  + Several other improvements and fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Update URL and Source to new home.
- New dependencies: help2man
- Replace bash-comletion with pkgconfig(bash-completion)
  BuildRequires, meson checks for it. Update Supplements to current
  standard.
- Drop sed call to fix python env, already set to python3 upstream.
- Update Licenses, drop COPYING.LIB and COPYING, now named
  LICENSES.
- Use ldconfig_scriptlets macro.
- Build mbimcli-bash-completion as noarch.
- Add patches from upstream:
  + 0001-intel-mutual-authentication-new-service-fcc-lock.patch
  + 0002-intel-tools-new-service-trace-config.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="068008a5605b561745be19e2b8c9632b8185852132d3d22b00bbef79b16d2fa5cc7bddc9f38fa2bbc657e3481d92ff54149c9d9ad597988bf9626e5b65313be5" name="libmbim-debugsource" arch="aarch64">
  <version epoch="0" ver="1.28.4" rel="slfo.1.1_1.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578139200">- Only require python3-base package for building instead of
  full python3 package.</changelog>
  <changelog author="mardnh@gmx.de" date="1579089600">- Update to version 1.22.0
  + libmbim-glib: Message parsing logic improved to avoid reading
    fields out of bounds, e.g. if the messages sent by the modem
    are malformed or not in line with the specs.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="mardnh@gmx.de" date="1592568000">- Update to version 1.24
  * Build now requires GLib/GObject/GIO 2.48.
  * Added new GObject Introspection support in the library, that
    can be explicitly requested during configure with
  - -enable-introspection=yes. With the new introspection support,
    the libmbim-glib library can now be used directly from e.g.
    python programs, as in the example included with the release.
  * Added release version information to all the types and methods
    of the public library API, and added new per-version indices
    in the documentation.
  * Added g_autoptr() support to all public types.
  * Several other minor improvements and fixes.
- Introduce subpackage for Introspection bindings</changelog>
  <changelog author="dimstar@opensuse.org" date="1597838400">- Upate to version 1.24.2:
  + libmbim-glib:
  - Fixed several issues in the logic that merges the service
    subscribe list.
  - Improved message reading logic to skip malformed MBIM
    messages (e.g. AT URCs emitted wrongly in the MBIM port by
    some Cinterion modules).</changelog>
  <changelog author="mardnh@gmx.de" date="1601640000">- Update to version 1.24.4:
  * libmbim-glib,device:
    + Added new mbim_device_get_transaction_id() to retrieve the
    transaction id currently being used.
  * libmbim-glib,proxy:
    + Fixed the transaction id used in fragments of the same
    request.
    + Avoid creating device context when it's already being
    untracked.
    + Fixed double GError free.
  * mbimcli:
    + Fixed missing EOL in error string when closing device.</changelog>
  <changelog author="mardnh@gmx.de" date="1611316800">- Update to version 1.24.6:
  * libmbim-glib,device:
    + Fixed a GSource use after free.
    + Avoid g_file_test() on NULL path.
    + Don't warn if descriptors file cannot be read.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- Update to version 1.26.2:
  + The GUdev optional build/runtime requirement is now fully
    dropped, it's no longer used.
  + Implemented new link management operations, exclusively for the
    cdc_mbim driver for now. These new operations allow creating or
    deleting VLAN network interfaces in order to run multiplexed
    data sessions over one single physical network interface.
  + Added support for the Microsoft-defined SAR service, including
    the following operations:
  - MBIM_CID_MS_SAR_CONFIG
  - MBIM_CID_MS_SAR_TRANSMISSION_STATUS
  + libmbim-glib:
  - Logic updated to make sure full packets are written at once,
    instead of writing them in chunks.
  - Updated the "LTE attach status" APIs in order to avoid
    creating unneeded struct types in the interface. The older
    methods have been deprecated and maintained in the library
    for compatibility purposes only.
  + Bugfixes.
- Drop pkgconfig(gudev-1.0) BuildRequires: no longer used.</changelog>
  <changelog author="dmueller@suse.com" date="1653825600">- update to 1.26.4:
  * meson: force building doc on normal builds, not only during install.
  * meson: fix 'export_packages' in GIR setup.
  * compat: deprecate the MbimLteAttachStatus type.
  * net-port-manager: use unaligned netlink attribute length.
  * include MBIM proxy control service in docs.
  * codegen: add section doc for each service.
  * utils: add missing short description in section.
  * compat: add missing MbimLteAttachStatus doc.
  * device: add missing mbim_device_list_links() doc.
  * device: fix MbimDevice 'device-in-session' property doc.
  * version: add missing MBIM_CHECK_VERSION() documentation.
  * device: fix wrong reference to QmiDevice
  * Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.28.4:
  + libmbim-glib:
  - Fixed context type conversions to consider all possible APN
    types.
  - Duplicate UTF-16 strings during processing to avoid alignment
    issues.
- Changes from version 1.28.2:
  + libmbim-glib: fixed validation of complete fragments to avoid
    reading out of bounds.
  + mbim-proxy: added --verbose-full flag to allow printing logs
    with personal info included.
- Changes from version 1.28:
  + This version includes support for most operations in MBIM
    Extensions v2 (for 5G NSA) and v3 (for 5G SA). The enabling of
    the updated extensions requires the user of the library to
    explicitly request what version wants to be used, via the new
    'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V2' or
    'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V3' flags in the device open
    request. Please note that if one process enables the v2 or v3
    support, it will apply to operations done by other processes as
    well. When using the proxy, the current version support is
    propagated to all clients of the proxy automatically.
  + The verbose message logging will now by default hide all fields
    that are considered personal information. Extended message
    logging including all field contents should be explicitly
    requested.
  + Build:
  - The GNU autotools (autoconf/automake/libtool) support has
    been fully removed, this release requires the use of the
    meson build system.
  - The 'instrospection' meson option is now a boolean.
  - New boolean 'man' meson option to allow disabling the man
    page generation.
  + Extended the Basic Connect service, including the following
    operations:
  - MBIM_CID_BASIC_CONNECT_REGISTER_STATE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_SIGNAL_STATE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_SUBCRIBER_READY_STATUS (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_CONNECT (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_IP_PACKET_FILTERS (MBIMEx v3.0)
  + Extended the Microsoft-defined Basic Connect Extensions
    service, including the following operations:
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LOCATION_INFO_STATUS
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_PROVISIONED_CONTEXTS
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_VERSION (MBIMEx v2.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_DEVICE_CAPS
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_MODEM_CONFIGURATION
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_REGISTRATION_PARAMETERS
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LTE_ATTACH_INFO
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_WAKE_REASON
    (MBIMEx v3.0)
  + Extended the Microsoft-defined UICC Low Level Access service,
    including the following operations:
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_APPLICATION_LIST
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_FILE_STATUS
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_BINARY
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_RECORD
  + New Microsoft-defined Voice Extensions service, including the
    following operations: MBIM_CID_MS_VOICE_EXTENSIONS_NITZ
  + Extended the Intel-defined Firmware Update service, including
    the following operations:
    MBIM_CID_INTEL_FIRMWARE_UPDATE_MODEM_REBOOT (MBIMEx v2.0)
  + New Intel-defined Thermal RF service, including the following
    operations: MBIM_CID_INTEL_THERMAL_RF_RFIM
  + Extended the QDU service, including the following operations:
  - MBIM_CID_QDU_QUECTEL_REBOOT
  - MBIM_CID_QDU_QUECTEL_READ_VERSION
  + libmbim-glib:
  - Updated the net link operations to support devices exposed by
    the wwan subsystem.
  - New mbim_message_get_printable_full() method to print the
    contents of a given message specifying the specific MBIMEx
    version in use.
  - New mbim_message_validate() method to validate the contents
    of the headers in a MBIM message, to be used before accessing
    its contents.
  - Updated all MbimMessage getters so that an implicit
    validation is done in the g_return_* macros. This validation
    will not be done if those macros are disabled during build.
  - New MBIM_DEVICE_CONSECUTIVE_TIMEOUTS signal in the MbimDevice
    to report the number of consecutive MBIM request timeouts
    detected.
  - New mbim_device_[get|set|check]_ms_mbimex_version() methods
    to manage the MBIMEx version support in the MbimDevice.
  - New MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_[V2|V3] flags in
    mbim_device_open_full() to allow enabling MBIMEx v2.0 or v3.0
    support.
  - New MbimTlv type to support the variable-sized fields in
    MBIMEx v3.0 operations.
  - Ensure CLOSED state always in mbim_device_close(), even on
    error.
  - Disallow device close if an open operation is ongoing.
  - Extended MbimDataClass with 5G NSA/SA values, used in MBIMEx
    v2.0, and added new MbimDataClassV3 and MbimDataSubclass
    types, used in MBIMEX v3.0.
  - Extended MbimCtrlCaps and MbimSubscriberReadyState with
    values reported in MBIMEX v3.0 extensions.
  - New MbimWakeType, MbimAccessMediaType,
    MbimModemConfigurationStatus, MbimFrequencyRange,
    MbimContextRoamingControl, MbimContextMediaType,
    MbimContextState, MbimContextOperation, MbimMicoMode,
    MbimLadnInfo, MbimDefaultPduActivationHint, MbimDrxCycle,
    MbimSubscriberReadyStatusFlag enums used in MBIMEx v3.0
    specific operations.
  - New MbimUiccApplicationType, MbimUiccFileAccessibility,
    MbimUiccFileType and MbimUiccFileStructure enums, used in the
    MS UICC Low Level Access service.
  - New MbimIntelServingCellInfo enum, used in the Intel Thermal
    RF service.
  - New MbimIntelBootMode enum, used in the Intel Firmware Update
    service.
  - New MbimQduQuectelRebootType and MbimQduQuectelVersionType
    enums used in the Quectel-defined QDU service updates.
  - Extended the list of MbimNwError values with values from the
    3GPP specs.
  - Deprecated MBIM_NW_ERROR_UNKNOWN, use NONE instead.
  - Deprecated
    MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_NETWORK_BLACKLIST, use
    NETWORK_DENYLIST instead.
  - Fixed the public format for CDMA language in the SMS service.
  + mbimcli:
  - New '--device-open-ms-mbimex-v2' option to request to enable
    MBIMEX v2.0 support.
  - New '--device-open-ms-mbimex-v3' option to request to enable
    MBIMEX v3.0support.
  - New '--verbose-full' option to request enabling logs that
    include personal information.
  - New '--set-ip-packet-filters' action.
  - New '--set-provisioned-contexts' action.
  - New '--set-signal-state' action.
  - New '--set-network-idle-hint' action.
  - New '--query-network-idle-hint' action.
  - New '--set-emergency-mode' action.
  - New '--query-emergency-mode' action.
  - New '--set-service-activation' action.
  - New '--ms-query-location-info-status' action.
  - New '--ms-query-provisioned-contexts' action.
  - New '--ms-set-provisioned-contexts' action.
  - New '--ms-query-base-stations' action
  - New '--ms-query-version' action.
  - New '--ms-query-registration-parameters' action.
  - New '--ms-set-registration-parameters' action.
  - New '--ms-query-modem-configuration' action.
  - New '--ms-query-wake-reason' action.
  - New '--ms-query-uicc-application-list' action.
  - New '--ms-query-uicc-file-status' action.
  - New '--ms-query-uicc-read-binary' action.
  - New '--ms-query-uicc-read-record' action.
  - New '--ms-set-uicc-open-channel' action.
  - New '--ms-set-uicc-close-channel' action.
  - New '--ms-query-uicc-atr' action.
  - New '--ms-set-uicc-apdu' action.
  - New '--ms-set-uicc-reset' action.
  - New '--ms-query-uicc-reset' action.
  - New '--ms-set-uicc-terminal-capability' action.
  - New '--ms-query-uicc-terminal-capability' action.
  - New '--ms-query-nitz' action.
  - New '--intel-query-rfim' action.
  - New '--intel-set-rfim' action.
  - Updated '--connect' action to deprecate 'apn' and prefer
    'access-string'.
  - Updated '--connect' action to support 'compression' and
    'context-type'.
  - Updated '--intel-modem-reboot' action to optionally receive
    the boot mode type argument.
  - Fixed the Quectel specific operations so that they have the
  - -quectel prefix and do not overwrite the ones in the Basic
    Connect service.
  + Several other improvements and fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Update URL and Source to new home.
- New dependencies: help2man
- Replace bash-comletion with pkgconfig(bash-completion)
  BuildRequires, meson checks for it. Update Supplements to current
  standard.
- Drop sed call to fix python env, already set to python3 upstream.
- Update Licenses, drop COPYING.LIB and COPYING, now named
  LICENSES.
- Use ldconfig_scriptlets macro.
- Build mbimcli-bash-completion as noarch.
- Add patches from upstream:
  + 0001-intel-mutual-authentication-new-service-fcc-lock.patch
  + 0002-intel-tools-new-service-trace-config.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="866854625b339c186ce827061a3ee66d1e859dc26c5e028addf72ada2243ebd59f97f484cd28d164e925c9affe59a4811eeab3e60ef1331067e4a69ed01239d7" name="libmbim-glib4-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.28.4" rel="slfo.1.1_1.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578139200">- Only require python3-base package for building instead of
  full python3 package.</changelog>
  <changelog author="mardnh@gmx.de" date="1579089600">- Update to version 1.22.0
  + libmbim-glib: Message parsing logic improved to avoid reading
    fields out of bounds, e.g. if the messages sent by the modem
    are malformed or not in line with the specs.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="mardnh@gmx.de" date="1592568000">- Update to version 1.24
  * Build now requires GLib/GObject/GIO 2.48.
  * Added new GObject Introspection support in the library, that
    can be explicitly requested during configure with
  - -enable-introspection=yes. With the new introspection support,
    the libmbim-glib library can now be used directly from e.g.
    python programs, as in the example included with the release.
  * Added release version information to all the types and methods
    of the public library API, and added new per-version indices
    in the documentation.
  * Added g_autoptr() support to all public types.
  * Several other minor improvements and fixes.
- Introduce subpackage for Introspection bindings</changelog>
  <changelog author="dimstar@opensuse.org" date="1597838400">- Upate to version 1.24.2:
  + libmbim-glib:
  - Fixed several issues in the logic that merges the service
    subscribe list.
  - Improved message reading logic to skip malformed MBIM
    messages (e.g. AT URCs emitted wrongly in the MBIM port by
    some Cinterion modules).</changelog>
  <changelog author="mardnh@gmx.de" date="1601640000">- Update to version 1.24.4:
  * libmbim-glib,device:
    + Added new mbim_device_get_transaction_id() to retrieve the
    transaction id currently being used.
  * libmbim-glib,proxy:
    + Fixed the transaction id used in fragments of the same
    request.
    + Avoid creating device context when it's already being
    untracked.
    + Fixed double GError free.
  * mbimcli:
    + Fixed missing EOL in error string when closing device.</changelog>
  <changelog author="mardnh@gmx.de" date="1611316800">- Update to version 1.24.6:
  * libmbim-glib,device:
    + Fixed a GSource use after free.
    + Avoid g_file_test() on NULL path.
    + Don't warn if descriptors file cannot be read.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- Update to version 1.26.2:
  + The GUdev optional build/runtime requirement is now fully
    dropped, it's no longer used.
  + Implemented new link management operations, exclusively for the
    cdc_mbim driver for now. These new operations allow creating or
    deleting VLAN network interfaces in order to run multiplexed
    data sessions over one single physical network interface.
  + Added support for the Microsoft-defined SAR service, including
    the following operations:
  - MBIM_CID_MS_SAR_CONFIG
  - MBIM_CID_MS_SAR_TRANSMISSION_STATUS
  + libmbim-glib:
  - Logic updated to make sure full packets are written at once,
    instead of writing them in chunks.
  - Updated the "LTE attach status" APIs in order to avoid
    creating unneeded struct types in the interface. The older
    methods have been deprecated and maintained in the library
    for compatibility purposes only.
  + Bugfixes.
- Drop pkgconfig(gudev-1.0) BuildRequires: no longer used.</changelog>
  <changelog author="dmueller@suse.com" date="1653825600">- update to 1.26.4:
  * meson: force building doc on normal builds, not only during install.
  * meson: fix 'export_packages' in GIR setup.
  * compat: deprecate the MbimLteAttachStatus type.
  * net-port-manager: use unaligned netlink attribute length.
  * include MBIM proxy control service in docs.
  * codegen: add section doc for each service.
  * utils: add missing short description in section.
  * compat: add missing MbimLteAttachStatus doc.
  * device: add missing mbim_device_list_links() doc.
  * device: fix MbimDevice 'device-in-session' property doc.
  * version: add missing MBIM_CHECK_VERSION() documentation.
  * device: fix wrong reference to QmiDevice
  * Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.28.4:
  + libmbim-glib:
  - Fixed context type conversions to consider all possible APN
    types.
  - Duplicate UTF-16 strings during processing to avoid alignment
    issues.
- Changes from version 1.28.2:
  + libmbim-glib: fixed validation of complete fragments to avoid
    reading out of bounds.
  + mbim-proxy: added --verbose-full flag to allow printing logs
    with personal info included.
- Changes from version 1.28:
  + This version includes support for most operations in MBIM
    Extensions v2 (for 5G NSA) and v3 (for 5G SA). The enabling of
    the updated extensions requires the user of the library to
    explicitly request what version wants to be used, via the new
    'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V2' or
    'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V3' flags in the device open
    request. Please note that if one process enables the v2 or v3
    support, it will apply to operations done by other processes as
    well. When using the proxy, the current version support is
    propagated to all clients of the proxy automatically.
  + The verbose message logging will now by default hide all fields
    that are considered personal information. Extended message
    logging including all field contents should be explicitly
    requested.
  + Build:
  - The GNU autotools (autoconf/automake/libtool) support has
    been fully removed, this release requires the use of the
    meson build system.
  - The 'instrospection' meson option is now a boolean.
  - New boolean 'man' meson option to allow disabling the man
    page generation.
  + Extended the Basic Connect service, including the following
    operations:
  - MBIM_CID_BASIC_CONNECT_REGISTER_STATE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_SIGNAL_STATE (MBIMEx v2.0)
  - MBIM_CID_BASIC_CONNECT_SUBCRIBER_READY_STATUS (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_CONNECT (MBIMEx v3.0)
  - MBIM_CID_BASIC_CONNECT_IP_PACKET_FILTERS (MBIMEx v3.0)
  + Extended the Microsoft-defined Basic Connect Extensions
    service, including the following operations:
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LOCATION_INFO_STATUS
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_PROVISIONED_CONTEXTS
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
    (MBIMEx v1.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_VERSION (MBIMEx v2.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_DEVICE_CAPS
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_MODEM_CONFIGURATION
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_REGISTRATION_PARAMETERS
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LTE_ATTACH_INFO
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
    (MBIMEx v3.0)
  - MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_WAKE_REASON
    (MBIMEx v3.0)
  + Extended the Microsoft-defined UICC Low Level Access service,
    including the following operations:
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_APPLICATION_LIST
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_FILE_STATUS
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_BINARY
  - MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_RECORD
  + New Microsoft-defined Voice Extensions service, including the
    following operations: MBIM_CID_MS_VOICE_EXTENSIONS_NITZ
  + Extended the Intel-defined Firmware Update service, including
    the following operations:
    MBIM_CID_INTEL_FIRMWARE_UPDATE_MODEM_REBOOT (MBIMEx v2.0)
  + New Intel-defined Thermal RF service, including the following
    operations: MBIM_CID_INTEL_THERMAL_RF_RFIM
  + Extended the QDU service, including the following operations:
  - MBIM_CID_QDU_QUECTEL_REBOOT
  - MBIM_CID_QDU_QUECTEL_READ_VERSION
  + libmbim-glib:
  - Updated the net link operations to support devices exposed by
    the wwan subsystem.
  - New mbim_message_get_printable_full() method to print the
    contents of a given message specifying the specific MBIMEx
    version in use.
  - New mbim_message_validate() method to validate the contents
    of the headers in a MBIM message, to be used before accessing
    its contents.
  - Updated all MbimMessage getters so that an implicit
    validation is done in the g_return_* macros. This validation
    will not be done if those macros are disabled during build.
  - New MBIM_DEVICE_CONSECUTIVE_TIMEOUTS signal in the MbimDevice
    to report the number of consecutive MBIM request timeouts
    detected.
  - New mbim_device_[get|set|check]_ms_mbimex_version() methods
    to manage the MBIMEx version support in the MbimDevice.
  - New MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_[V2|V3] flags in
    mbim_device_open_full() to allow enabling MBIMEx v2.0 or v3.0
    support.
  - New MbimTlv type to support the variable-sized fields in
    MBIMEx v3.0 operations.
  - Ensure CLOSED state always in mbim_device_close(), even on
    error.
  - Disallow device close if an open operation is ongoing.
  - Extended MbimDataClass with 5G NSA/SA values, used in MBIMEx
    v2.0, and added new MbimDataClassV3 and MbimDataSubclass
    types, used in MBIMEX v3.0.
  - Extended MbimCtrlCaps and MbimSubscriberReadyState with
    values reported in MBIMEX v3.0 extensions.
  - New MbimWakeType, MbimAccessMediaType,
    MbimModemConfigurationStatus, MbimFrequencyRange,
    MbimContextRoamingControl, MbimContextMediaType,
    MbimContextState, MbimContextOperation, MbimMicoMode,
    MbimLadnInfo, MbimDefaultPduActivationHint, MbimDrxCycle,
    MbimSubscriberReadyStatusFlag enums used in MBIMEx v3.0
    specific operations.
  - New MbimUiccApplicationType, MbimUiccFileAccessibility,
    MbimUiccFileType and MbimUiccFileStructure enums, used in the
    MS UICC Low Level Access service.
  - New MbimIntelServingCellInfo enum, used in the Intel Thermal
    RF service.
  - New MbimIntelBootMode enum, used in the Intel Firmware Update
    service.
  - New MbimQduQuectelRebootType and MbimQduQuectelVersionType
    enums used in the Quectel-defined QDU service updates.
  - Extended the list of MbimNwError values with values from the
    3GPP specs.
  - Deprecated MBIM_NW_ERROR_UNKNOWN, use NONE instead.
  - Deprecated
    MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_NETWORK_BLACKLIST, use
    NETWORK_DENYLIST instead.
  - Fixed the public format for CDMA language in the SMS service.
  + mbimcli:
  - New '--device-open-ms-mbimex-v2' option to request to enable
    MBIMEX v2.0 support.
  - New '--device-open-ms-mbimex-v3' option to request to enable
    MBIMEX v3.0support.
  - New '--verbose-full' option to request enabling logs that
    include personal information.
  - New '--set-ip-packet-filters' action.
  - New '--set-provisioned-contexts' action.
  - New '--set-signal-state' action.
  - New '--set-network-idle-hint' action.
  - New '--query-network-idle-hint' action.
  - New '--set-emergency-mode' action.
  - New '--query-emergency-mode' action.
  - New '--set-service-activation' action.
  - New '--ms-query-location-info-status' action.
  - New '--ms-query-provisioned-contexts' action.
  - New '--ms-set-provisioned-contexts' action.
  - New '--ms-query-base-stations' action
  - New '--ms-query-version' action.
  - New '--ms-query-registration-parameters' action.
  - New '--ms-set-registration-parameters' action.
  - New '--ms-query-modem-configuration' action.
  - New '--ms-query-wake-reason' action.
  - New '--ms-query-uicc-application-list' action.
  - New '--ms-query-uicc-file-status' action.
  - New '--ms-query-uicc-read-binary' action.
  - New '--ms-query-uicc-read-record' action.
  - New '--ms-set-uicc-open-channel' action.
  - New '--ms-set-uicc-close-channel' action.
  - New '--ms-query-uicc-atr' action.
  - New '--ms-set-uicc-apdu' action.
  - New '--ms-set-uicc-reset' action.
  - New '--ms-query-uicc-reset' action.
  - New '--ms-set-uicc-terminal-capability' action.
  - New '--ms-query-uicc-terminal-capability' action.
  - New '--ms-query-nitz' action.
  - New '--intel-query-rfim' action.
  - New '--intel-set-rfim' action.
  - Updated '--connect' action to deprecate 'apn' and prefer
    'access-string'.
  - Updated '--connect' action to support 'compression' and
    'context-type'.
  - Updated '--intel-modem-reboot' action to optionally receive
    the boot mode type argument.
  - Fixed the Quectel specific operations so that they have the
  - -quectel prefix and do not overwrite the ones in the Basic
    Connect service.
  + Several other improvements and fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Update URL and Source to new home.
- New dependencies: help2man
- Replace bash-comletion with pkgconfig(bash-completion)
  BuildRequires, meson checks for it. Update Supplements to current
  standard.
- Drop sed call to fix python env, already set to python3 upstream.
- Update Licenses, drop COPYING.LIB and COPYING, now named
  LICENSES.
- Use ldconfig_scriptlets macro.
- Build mbimcli-bash-completion as noarch.
- Add patches from upstream:
  + 0001-intel-mutual-authentication-new-service-fcc-lock.patch
  + 0002-intel-tools-new-service-trace-config.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="5d29c468b81da4286fc6d1133baca7737954c1c3d030141177386f4817cb03d82ae3b87c186b8dbb119fb6b2e7d0120720b83e734267be36fa0a958ed437b51d" name="libmd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1468152000">- Initial package for version 0.0.0</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Description update</changelog>
  <changelog author="mpluskal@suse.com" date="1517572800">- Update to version 1.0.0:
  * build: Drop GCC specific compiler flag -include
  * build: Detect version script linker support at configure time
  * build: Use an export symbols file if there is no version script
    support
  * build: Do not override the default DEPENDENCIES for libmd
  * Stop using non-portable &lt;sys/param.h&gt;
  * Remove unused __RCSID macro usage
  * Remove unused NEWS file
  * Stop using non-portable &lt;sys/cdefs.h&gt;
  * build: Add -no-undefined libtool flag
  * build: Stop checking for malloc() and memset()
  * build: Switch to AC_C_BIGENDIAN defining WORD_BIGENDIAN</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Update to version 1.0.1:
  * Add missing compatibility macros for SHA384
  * Fix compatibility macros for SHA512
  * test: Refactor and extend message digest testing
  * Add compatibility with Aladdin Enterprises MD5 implementation
  * build: Invoke sed with portable regex</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Enable profile guided optimization</changelog>
  <changelog author="schwab@suse.de" date="1583323200">- Remove undefined macro</changelog>
  <changelog author="mpluskal@suse.com" date="1609761600">- Update to version 1.0.3
  * Import local-link header from libbsd
  * Switch SHA2 symbols from weak to strong aliases
  * build: Move local-link.h from libmd_la_helper_sources to libmd_la_SOURCES
  * build: Only depend on libmd.sym when using it
  * Remove duplicate Files entries from COPYING
  * build: Use &lt;unistd.h&gt; only if available
  * Remove unused weak symbol declarations for MD2 functions
  * build: Ignore release tarballs
  * build: Provide wrapper functions instead of aliases in DLL built with MSVC
  * build: Fix out of tree builds</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 1.0.4:
  * Place static keyword before const in function definitions
  * Declare local functions as static
  * Fix signedness type mismatch comparisons
  * test: Fix pointer type sign mismatch in DEF_TEST_DIGEST() macro
  * man: Document RIPEMD160 and SHA-1 security status
  * build system improvements</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">-  Update to version 1.1.0:
  * man: Add new libmd(7) man page
  * doc: Move mailing list reference to the end
  * build: Fix version script linker support detection
  * build: Switch to debian:latest Docker image
  * build: Fix configure.ac indentation
  * build: Require automake 1.11
  * build: Do not use strong aliases on macOS
  * On Darwin use assembler to support symbol aliases
  * build: Rename libmd_alias() to libmd_strong_alias()
  * Remove unused &lt;assert.h&gt;
  * Sync MD2 changes from NetBSD
  * Sync MD4 changes from OpenBSD
  * Sync MD5 changes from OpenBSD
  * Sync RMD160 changes from OpenBSD
  * Sync SHA1 changes from OpenBSD
  * Sync SHA2 changes from OpenBSD
  * test: Add a new test_eq() helper function
  * test: Add cases for SHA224 and SHA512-256
  * build: Terminate lists in variables with «# EOL»</changelog>
</package>
<package pkgid="6e3196677f3c1f5575a2676e2f34328a5b75c2269470ead92951c4140b518b4a18a1e3b48ee21356e72f3489c653a5e92d413dfde039208ddf0e6f3da1a1e1e4" name="libmd0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1468152000">- Initial package for version 0.0.0</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Description update</changelog>
  <changelog author="mpluskal@suse.com" date="1517572800">- Update to version 1.0.0:
  * build: Drop GCC specific compiler flag -include
  * build: Detect version script linker support at configure time
  * build: Use an export symbols file if there is no version script
    support
  * build: Do not override the default DEPENDENCIES for libmd
  * Stop using non-portable &lt;sys/param.h&gt;
  * Remove unused __RCSID macro usage
  * Remove unused NEWS file
  * Stop using non-portable &lt;sys/cdefs.h&gt;
  * build: Add -no-undefined libtool flag
  * build: Stop checking for malloc() and memset()
  * build: Switch to AC_C_BIGENDIAN defining WORD_BIGENDIAN</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Update to version 1.0.1:
  * Add missing compatibility macros for SHA384
  * Fix compatibility macros for SHA512
  * test: Refactor and extend message digest testing
  * Add compatibility with Aladdin Enterprises MD5 implementation
  * build: Invoke sed with portable regex</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Enable profile guided optimization</changelog>
  <changelog author="schwab@suse.de" date="1583323200">- Remove undefined macro</changelog>
  <changelog author="mpluskal@suse.com" date="1609761600">- Update to version 1.0.3
  * Import local-link header from libbsd
  * Switch SHA2 symbols from weak to strong aliases
  * build: Move local-link.h from libmd_la_helper_sources to libmd_la_SOURCES
  * build: Only depend on libmd.sym when using it
  * Remove duplicate Files entries from COPYING
  * build: Use &lt;unistd.h&gt; only if available
  * Remove unused weak symbol declarations for MD2 functions
  * build: Ignore release tarballs
  * build: Provide wrapper functions instead of aliases in DLL built with MSVC
  * build: Fix out of tree builds</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 1.0.4:
  * Place static keyword before const in function definitions
  * Declare local functions as static
  * Fix signedness type mismatch comparisons
  * test: Fix pointer type sign mismatch in DEF_TEST_DIGEST() macro
  * man: Document RIPEMD160 and SHA-1 security status
  * build system improvements</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">-  Update to version 1.1.0:
  * man: Add new libmd(7) man page
  * doc: Move mailing list reference to the end
  * build: Fix version script linker support detection
  * build: Switch to debian:latest Docker image
  * build: Fix configure.ac indentation
  * build: Require automake 1.11
  * build: Do not use strong aliases on macOS
  * On Darwin use assembler to support symbol aliases
  * build: Rename libmd_alias() to libmd_strong_alias()
  * Remove unused &lt;assert.h&gt;
  * Sync MD2 changes from NetBSD
  * Sync MD4 changes from OpenBSD
  * Sync MD5 changes from OpenBSD
  * Sync RMD160 changes from OpenBSD
  * Sync SHA1 changes from OpenBSD
  * Sync SHA2 changes from OpenBSD
  * test: Add a new test_eq() helper function
  * test: Add cases for SHA224 and SHA512-256
  * build: Terminate lists in variables with «# EOL»</changelog>
</package>
<package pkgid="37f5df0e94b2f084bb159630be934ee15e4a0a7e903637251dc3ad4b9dca4af78bcf7f5da9334a1e94c8b25bcee5215fadf2a2f4b06104cde358b11bcbd43672" name="libmetalink-debugsource" arch="aarch64">
  <version epoch="0" ver="0.1.3" rel="slfo.1.1_1.2"/>
  <changelog author="pascal.bleser@opensuse.org" date="1257163200">- initial package: 0.0.3</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1257681600">- add support for libxml2 and expat, which makes the build include
  all API functions, unlike the previous, crippled builds</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1316865600">- remove dependency on licenses, no longer in Factory</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1353412800">- Update to version 0.1.2
  * This release adds RFC 5854 Metalink 4.0 support
  * adds dynamic attribute of the origin element in Metalink
- libmetalink-autotools.patch : multiple pet peeves in autotools.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1353412801">- Fornat spec file for factory</changelog>
  <changelog author="p.drouand@gmail.com" date="1448971200">- Update to version 0.1.3
  * This release fixes the bug that signature element in metalink v4
    was not parsed correctly.
- Update libmetalink-autotools.patch
- Use download Url as source
- Perform a spec-cleaner
- Build with libxml2 and cunit support</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521633600">- libmetalink-autotools.patch: update, export only
  metalink_ symbols using -export-symbols-regex, there
  is an upstream configure option --enable-gcc-visibility
  but it is currently incomplete and cannot be used as is</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="af496b91ad1c445e402fd2f0cfb9689e6ca74fd0bfe5f70d2b9d8627833939e7f1ce990abdbc504be69e1f28995bd26883ceffda951baff56bfd689f824f91d9" name="libmetalink3-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.1.3" rel="slfo.1.1_1.2"/>
  <changelog author="pascal.bleser@opensuse.org" date="1257163200">- initial package: 0.0.3</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1257681600">- add support for libxml2 and expat, which makes the build include
  all API functions, unlike the previous, crippled builds</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1316865600">- remove dependency on licenses, no longer in Factory</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1353412800">- Update to version 0.1.2
  * This release adds RFC 5854 Metalink 4.0 support
  * adds dynamic attribute of the origin element in Metalink
- libmetalink-autotools.patch : multiple pet peeves in autotools.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1353412801">- Fornat spec file for factory</changelog>
  <changelog author="p.drouand@gmail.com" date="1448971200">- Update to version 0.1.3
  * This release fixes the bug that signature element in metalink v4
    was not parsed correctly.
- Update libmetalink-autotools.patch
- Use download Url as source
- Perform a spec-cleaner
- Build with libxml2 and cunit support</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521633600">- libmetalink-autotools.patch: update, export only
  metalink_ symbols using -export-symbols-regex, there
  is an upstream configure option --enable-gcc-visibility
  but it is currently incomplete and cannot be used as is</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="ffe2631886db4452777fc88e64de39a9a5c24fe2d39127141924fab96cc9f98fbaac8dff195c7bb3000590a9ba524ea9f5ee1a2d811bf8fe84720c3cd6f4e6fd" name="libmicrohttpd-debugsource" arch="aarch64">
  <version epoch="0" ver="0.9.77" rel="slfo.1.1_2.1"/>
  <changelog author="mardnh@gmx.de" date="1576411200">- update to 0.9.69:
  * If application suspends a connection before we could send
    100 CONTINUE, give application another shot at queuing a reply
    before the upload begins.</changelog>
  <changelog author="mardnh@gmx.de" date="1581249600">- Update to 0.9.70:
  * Fixed 100-continue handling for PATCH method
  * Fixed FTBFS from wrong #endif position for certain builds
  * Fixed connection overflow issue when combining
    MHD_USE_NO_LISTEN_SOCKET with MHD_USE_THREAD_PER_CONNECTION
  * Updated m4 script to fix FTBFS when using
  - Werror=unused-but-set-parameter
  * Adding fix for urlencoding of keys without values in
    post-processor logic.
  * Adding patch from Ethan Tuttle with test case for urlencoding
    in post-processor for keys without values.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593864000">- libmicrohttpd 0.9.71:
  * Fix buffer overflow issue in URL parser [boo#1173718]
  * Fixed PostProcessor bug
  * Documentation and example fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- libmicrohttpd 0.9.72:
  * improved performance with stay-alive HTTP and HTTPS connections
  * bug fixes
- remove deprecated texinfo macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621339200">- libmicrohttpd 0.9.73:
  * new function for vector-backed responses
  * compatibility with autoconf 2.70+
  * Implement ALPN support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640001600">- libmicrohttpd 0.9.74:
  * new experimental implementation of WebSockets disabled by default
  * improved compliance with the RFC HTTP specifications
  * new implementation of reply header forming
  * new implementation of request chunked encoding parsing
  * new automatic error replies
  * Keep-alive header is omitted by default for HTTP/1.1 connections.
    Use of header can be enforced by response flag.
  * Chunked encoding is used for HTTP/1.1 non-keep-alive connections
    for responses with unknown size. Previously MHD used "indication
    of the end of the response by closing connection" in such cases,
    however it is not correct for HTTP/1.1 connections as per HTTP
    RFC.
  * As required by HTTP RFC, use HTTP/1.1 version instead of HTTP/1.0
    in reply headers when client is HTTP/1.0 . HTTP/1.0 version can
    be enforced by response flag.
  * User response headers are used in replies in the same order as
    was added by application.
  * Allowed tab characters in response header values.
  * All custom "Connection:" response headers are automatically
    combined into single "Connection:" header.
  * "keep-alive" token silently dropped from custom "Connection:"
    response header. "Keep-alive" cannot be enforced and used
    automatically if possible.
  * Allow tab character in custom response header value.
  * Disallow space character in custom response header value.
  * Do not allow responses with 1xx codes for HTTP/1.0 requests.
  * Detected and reported incorrect "Upgrade" responses.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640606400">- libmicrohttpd 0.9.75:
  * fixes for where "monotonic" clock may jump back</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677585600">- libmicrohttpd 0.9.76
  * CVE-2023-27371: Fix potential DoS vector in MHD_PostProcessor
    (boo#1208745)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1685534400">- libmicrohttpd 0.9.77:
  * improvements for Digest and Basic authorizations
  * fix efficiency for TLS upgraded connections
  * fix processing of folded headers in requests
  * fix functionality with blocking sockets
- update upstream signing key</changelog>
  <changelog author="martin.schreiner@suse.com" date="1763726400">- Fix for the following bugs:
  * bsc#1253177 CVE-2025-59777
  * bsc#1253178 CVE-2025-62689
- Add patch:
  * CVE-2025-59777.patch
  * this same patch fixes both CVEs
  * git commit ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b</changelog>
</package>
<package pkgid="1732695b2a043dc701c1a031646a65c829dbd9f789ee2b74ce747970df023f1b40764843cb0da980e5f53b407ace0e4e90b287599c28837bdcc73aa66680c8ba" name="libmicrohttpd12-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.9.77" rel="slfo.1.1_2.1"/>
  <changelog author="mardnh@gmx.de" date="1576411200">- update to 0.9.69:
  * If application suspends a connection before we could send
    100 CONTINUE, give application another shot at queuing a reply
    before the upload begins.</changelog>
  <changelog author="mardnh@gmx.de" date="1581249600">- Update to 0.9.70:
  * Fixed 100-continue handling for PATCH method
  * Fixed FTBFS from wrong #endif position for certain builds
  * Fixed connection overflow issue when combining
    MHD_USE_NO_LISTEN_SOCKET with MHD_USE_THREAD_PER_CONNECTION
  * Updated m4 script to fix FTBFS when using
  - Werror=unused-but-set-parameter
  * Adding fix for urlencoding of keys without values in
    post-processor logic.
  * Adding patch from Ethan Tuttle with test case for urlencoding
    in post-processor for keys without values.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593864000">- libmicrohttpd 0.9.71:
  * Fix buffer overflow issue in URL parser [boo#1173718]
  * Fixed PostProcessor bug
  * Documentation and example fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- libmicrohttpd 0.9.72:
  * improved performance with stay-alive HTTP and HTTPS connections
  * bug fixes
- remove deprecated texinfo macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621339200">- libmicrohttpd 0.9.73:
  * new function for vector-backed responses
  * compatibility with autoconf 2.70+
  * Implement ALPN support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640001600">- libmicrohttpd 0.9.74:
  * new experimental implementation of WebSockets disabled by default
  * improved compliance with the RFC HTTP specifications
  * new implementation of reply header forming
  * new implementation of request chunked encoding parsing
  * new automatic error replies
  * Keep-alive header is omitted by default for HTTP/1.1 connections.
    Use of header can be enforced by response flag.
  * Chunked encoding is used for HTTP/1.1 non-keep-alive connections
    for responses with unknown size. Previously MHD used "indication
    of the end of the response by closing connection" in such cases,
    however it is not correct for HTTP/1.1 connections as per HTTP
    RFC.
  * As required by HTTP RFC, use HTTP/1.1 version instead of HTTP/1.0
    in reply headers when client is HTTP/1.0 . HTTP/1.0 version can
    be enforced by response flag.
  * User response headers are used in replies in the same order as
    was added by application.
  * Allowed tab characters in response header values.
  * All custom "Connection:" response headers are automatically
    combined into single "Connection:" header.
  * "keep-alive" token silently dropped from custom "Connection:"
    response header. "Keep-alive" cannot be enforced and used
    automatically if possible.
  * Allow tab character in custom response header value.
  * Disallow space character in custom response header value.
  * Do not allow responses with 1xx codes for HTTP/1.0 requests.
  * Detected and reported incorrect "Upgrade" responses.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640606400">- libmicrohttpd 0.9.75:
  * fixes for where "monotonic" clock may jump back</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677585600">- libmicrohttpd 0.9.76
  * CVE-2023-27371: Fix potential DoS vector in MHD_PostProcessor
    (boo#1208745)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1685534400">- libmicrohttpd 0.9.77:
  * improvements for Digest and Basic authorizations
  * fix efficiency for TLS upgraded connections
  * fix processing of folded headers in requests
  * fix functionality with blocking sockets
- update upstream signing key</changelog>
  <changelog author="martin.schreiner@suse.com" date="1763726400">- Fix for the following bugs:
  * bsc#1253177 CVE-2025-59777
  * bsc#1253178 CVE-2025-62689
- Add patch:
  * CVE-2025-59777.patch
  * this same patch fixes both CVEs
  * git commit ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b</changelog>
</package>
<package pkgid="9d0c7db4c81f1eb741b5a05d58f691c973fbf1bbbfe10d7d47d00e6fe348dc3621df2866120c67a88a9d71a16ec6161af2c86491360f623b1fe2fd450a33587f" name="libmlx4-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="49.1" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
</package>
<package pkgid="22c56341e8cc3256132ba2f11d0637b996d306969464aee1b1265703214aea2ed0f9cf5494cc447c32e2bd66acea72461728009f8b1978ea2ce785432888b3dc" name="libmlx5-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="49.1" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
</package>
<package pkgid="578e8655d96ad2245bdeaefb1e5a3ce6345d894f93a8460468089f77bc0dcc0df5ce4960ff937af3d78260562d9f403e48a82996981157fc0e1f37c152ad98e7" name="libmm-glib0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.20.6" rel="slfo.1.1_1.2"/>
  <changelog author="mardnh@gmx.de" date="1589025600">- Update to version 1.12.10:
  + mmcli:
  - Add missing 'allowed-auth' bearer property in the output.
  - Remove non-existent --list-bearers option from manpage.
  + introspection: Use the correct node name for the ModemManager1
    object.
  + Modem interface: Allow Command() while in Failed state.
  + MBIM: Fix segfault when loading capabilities.
  + Plugins: huawei: updated HCSQ regex to match unquoted response.</changelog>
  <changelog author="pvorel@suse.cz" date="1604318400">- Update to version 1.14.6:
  + Modem interface:
  - Added support for AT-based and/or QMI-based 5G devices
  - Deprecated the MM_MODEM_CAPABILITY_LTE_ADVANCED capability
  + Bearer interface:
  - Added additional 'attempts', 'failed-attempts', 'total-rx-bytes',
    'total-tx-bytes' and 'total-duration' values in the 'Stats' property
    exposed by the Bearer objects.
  + Daemon:
  - Switched to 'STRICT' filter mode by default.
  - Added a new implicit whitelist rules applicable in 'STRICT' filter mode.
  - Updated the probing logic to make sure we don't attempt a re-probe when
    the device is gone.
  - Updated daemon logging.
  + AT:
  - Moved the charset definition logic to the initialization phase instead
    of the enabling phase.
  - Updated manual registration operation
  + QMI:
  - Devices using the LOC service for GNSS will now also setup the list of
    required NMEA traces before starting the engine.
  - Update carrier code if registration changes from one roaming operator
    to another.
  - Explicitly disable autoconnect during modem enabling phase, because it
    interferes with our connection management logic.
  - Fallback to raw-ip if WDA Get Data Format requests arguments, as in most
    new 5G devices.
  - Updated to always use the asynchronous close() operation.
  - Handle disconnection indications during connection attempts.
  + MBIM:
  - Update carrier code if registration changes from one roaming operator to
    another.
  - Implement reset in Intel-based and Qualcomm-based devices.
  - Avoid LTE attach config/status if unsupported.
  - Updated to make sure all allocated QMI CIDs are released during shutdown.
  + SIM interface:
  - Don't allow sending PIN/PUK if not required.
  + 3GPP interface:
  - Fixed manual re-registration to the same operator.
  + CDMA interface:
  - Don't allow multiple concurrent activation attempts.
  - Disallow empty carrier code in automatic activation.
  + Bearer interface:
  - Updated to avoid connection checks or stats updates while disconnecting.
  + libmm-glib:
  - New 'mm_location_gps_nmea_get_traces()' method to retrieve a NULL
    terminated array of strings with all cached NMEA traces.
  - Deprecated the 'mm_location_gps_nmea_build_full()' method.
  + mmcli:
  - Added a new 'any' lookup keyword for the --modem and --sim options, useful
    when the system is only expected to have one single device.
  + Plugins:
  - broadmobi: new plugin, right now just with port type hints for the BM818.
  - foxconn: new plugin to support the T77W968 (both with and without eSIM).
  - dell,dw5821e: added support for the DW5821e with eSIM variant.
  - huawei: don't delay reporting network initiated disconnects.
  - huawei: try to read port type hints from interface descriptions.
  - huawei: avoid using the QCDM port during a voice call.
  - cinterion: skip sim ready check for modules that don't support it.
  - cinterion: implemented radio/band handling for LTE modems.
  - cinterion: added Signal interface support bsaed on AT^SMONI.
  - cinterion: added support for MBIM based devices like the PLS62-W.
  - quectel: updated to detect SIM hot swap via +QUSIM URCs.
  - fibocom: added support for QMI based devices like the FM150.
  - ublox: ignore error when disconnecting last LTE bearer.
  - ublox: implement support to enable and detect +UUDTMF URCs.
  - ublox: added blacklist rules for GPS modules in the plugin itself.
  - sierra: implement manual and automatic CDMA activation.
  - novatel: implement manual and automatic CDMA activation.
  + Build improvements
  + Update dependencies (mbim: &gt;= 1.24.0, qmi: &gt;= 1.26.0)
- Add BuildRequires libxslt-tools (xsltproc required)
- Update config file path: mm-dell-dw5821e-carrier-mapping.conf
  =&gt; mm-foxconn-t77w968-carrier-mapping.conf (see d7d2b910 ("foxconn: new
  plugin to support the T77W968"))</changelog>
  <changelog author="mardnh@gmx.de" date="1607256000">- Update to version 1.14.8:
  + Build:
  - Fixed distcheck with new gtk-doc releases.
  - ModemManager-names.h was being included in the dist tarball,
    but then removed on the 'clean' target. Fix that, by only
    removing it on the 'maintainer-clean' target. Therefore,
    'xsltproc' is now only needed in git builds, not needed when
    building from a dist tarball.
  + QMI:
  - Fix daemon crash when the device is removed during the
    initialization sequence.
  + Several other minor improvements and fixes.
- Drop libxslt-tools BuildRequires: No longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1628942400">- Switch bash completion subpackage to noarch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Update to version 1.18.6:
  + The ModemManager.service file for systemd integration provided
    in the sources is updated as follows:
    ++ 'CAP_NET_ADMIN' is now required in the
    'CapabilityBoundingSet' field.
    ++ 'AF_NETLINK' and 'AF_QIPCRTR' are now required in the
    'RestrictAddressFamilies' field.
  + The LEGACY and PARANOID filter types that were allowed
    options in the '--filter-policy' option in the ModemManager
    daemon were deprecated in version 1.16.0 and have now been
    completely removed, along with the vid:pid blacklist of
    devices and the vid:pid greylist of RS232&lt;-&gt;USB adapters.
  + The ModemManager daemon can run now in a 'quick suspend/resume'
    mode, in which no explicit data disconnection is triggered on
    suspend, and no explicit device re-probing from scratch is
    launched on resume. Instead, the daemon will try to refresh
    the state of all interfaces upon suspend, e.g. to see if the
    module keeps registered to the same operator, to see if it is
    still connected, and so on.
  + core: added support for the new 'WWAN' subsystem in Linux kernel
    5.13, enabling PCIe-only modules.
  + core: The charset conversion methods rework, including the
    avoiding of the iconv()
  + qmi: the logic managing allowed/preferred modes was fixed for
    multimode devices like the MC7304, making sure the acquisition
    order preference always had the same items.
  + serial: when modem is connected with AT+PPP, ignore forced
    disconnections, so that we don't take ownership of the PPP
    port before pppd has released it.
  + foxconn: added support for the T99W175 (SDX55) module,
    including built-in FCC unlock procedure.
  + foxconn: added new MBIM QDU firmware update method.
- Move the dbus-1 system.d file to /usr (bsc#1196170)
- Use source verification
- Update Supplements to new format
- Add BRs needed for new tests:
  * python3-gobject-Gdk
  * python3-dbus-python</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Enable QRTR support
  * Add BR pkgconfig(qrtr-glib)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1659787200">- Update to version 1.18.10:
  + Build: Require libqmi 1.30.8.
  + FCC unlock: Updated SDX55 unlock script to handle the new
    method introduced in the latest firmware releases.
  + Modem interface:
  - Set signal quality to 0% on shutdown.
  - Set signal quality as recent on init.
  + MBIM:
  - Fix task completion when peeking device fails.
  - Fix several GError double-frees.
  + mmcli: Don't print signal quality until modem is enabled.
  + Plugins: foxconn: remove carrier mapping table for T99W175.
  + Several other minor improvements and fixes.
- Changes from version 1.18.8:
  + A new connection status dispatcher setup is provided, where
    users can provide custom scripts that will be called on bearer
    connect/disconnect events. This dispatcher will make the netifd
    integration in openwrt work much better, as we'll be able to
    report network-initiated disconnections cleanly to netifd.
    There are no default connection status dispatcher scripts
    installed, but it's suggested distributions make sure the
    following directories exist:
  - ${sysconfdir}/ModemManager/connection.d/
  - ${libdir}/ModemManager/connection.d/
  + API: Add missing Simple interface definitions in
    ModemManager-names.h.
  + Build:
  - meson:
    . fix daemon enums dependencies.
    . fix port enums includes.
    . fix 'export_packages' in GIR setup.
    . fix simtech plugin module name.
  - systemd: don't run ModemManager in containers.
  + Core:
  - serial: ensure the port object is valid after BUFFER_FULL
    handling.
  - netlink:
    . use unaligned netlink attribute length.
    . only change IFF_UP flag.
  - bearer: match unknown auth to chap in loose comparisons.
  - charsets: return error if UTF-8 validation fails.
  - fcc-unlock: make scripts POSIX shell compatible.
  - modem-helpers:
    . consider minimum ID when choosing best profile.
    . fix reading &lt;Act&gt; given in COPS=? responses.
  - sms: prevent crash if date is out of range.
  - profile-manager: fix copy-paste error on tags for quarks.
  + QMI:
  - Ignore slot status indications until initial status is known.
  - Return error when loading capabilities if none is found.
  + MBIM:
  - Default initial EPS bearer's auth to chap when unknown.
  - Update default error when network error is out of range.
  + mmcli: Fix key length when printing list of items.
  + Plugins:
  - linktop: new port type hints.
  - cinterion: add support for PLSx3w modems.
  - huawei: disable +CPOL based features in Huawei E226.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661601600">- Disable make_check call, tests currently fails due to our switch
  to glib 2.73.2.
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/870
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/601
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/621</changelog>
  <changelog author="luc14n0@opensuse.org" date="1665230400">- Update to version 1.18.12:
  + This release fixes a few very critical issues that happpen when
    using a glib2 newer or equal than 2.73.2, plus numerous fixes
    for the Core, MBIM, QMI, 3GPP profile manager interface, SMS,
    libmm-glib, and mmcli.
  + Plugins:
  - sierra: disable +CPOL in the GL7600.
  - telit: add LE910Cx MBIM composition port hints.
  - telit: add port type hints for LN920 0x1060, 0x1061
    compositions.
  - icera: fix double free on %%IPSYS=? response processing
  - mtk: fix task completion when loading supported modes.
- Add new pkgconfig modules build requirements: gio-2.0, glib-2.0,
  gmodule-2.0, and gobject-2.0.
- Update ModemManager.keyring to the new upstream key:
  A814D09B9C5BC01945A64308AECE0239C6606AD5. Found at
  www.freedesktop.org/software/ModemManager/0xAECE0239C6606AD5.asc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.20.6:
  + build: New build option to allow disabling the installation of
    examples.
  + core:
  - Fix crash when uninhibiting partially removed device.
  - Fix crash when attempting to load an invalid shared utils
    library.
  + mmcli:
  - Allow JSON and key/value output when creating SMS messages.
  - Improved JSON output in network scan results.
  + libmm-glib:
  - Avoid using g_time_zone_new_offset() unless glib &gt;= 2.58.
  - Fix flags to string conversion utils to allow multiple flags.
  + MBIM:
  - Reset cached SIM info when SIM is unlocked.
  - Fix synchronizing the state of the SIM hot swap configured
    flag.
  - Fix bug cleaning up the LTE attach info unsolicited message
    handler.
  - Fallback from QMI UIM service only if unsupported.
  - Add missing support for 'emergency' APN type.
  + QMI:
  - Fix processing and exposing PCOs.
  - Fix power up on modems that don't support power state change
    indications.
  + plugins:
  - telit:
    . add additional support for 5G modems.
    . added port type hints for FN990 0x1070, 0x1071
    compositions.
    . increase allowed initial delay in AT ports.
    . fallback to AT commands if loading revision via MBIM fails.
  - quectel: add support for EC21-EUX usb modules.
  - xmm: fix crash parsing XACT? response.
- Changes from version 1.20.4:
  + build:
  - Don't hardcode building shared libraries, so that meson's
    default_library option can be used properly,
  - po: Added missing Georgian translation in LINGUAS.
  + QMI:
  - Fixed loading NR5G signal info.
  - Fixed memory leaks when processing signal info.
  - Correctly scaled the SNR value reported in NR5G.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  + MBIM:
  - Fixed processing MbimSmsStatusFlag as flags, not as an enum.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  - Chained up device notifications through the MMPortMbim
    object.
  + Messaging: Allowed Delete operation during enabling/disabling.
  + Core: Don't assume port tables always exist so that
    long-standing operations holding an object reference can finish
    cleanly even after the initial object disposal has already been
    run.
  + plugins:
  - quectel: added new firehose/sahara support udev tags in new
    models.
  - broadmobi: added MM_PLUGIN_REQUIRED_QCDM flag.
  - cinterion:
    . added a delay to the ^SWWAN? command.
    . added retry mechanism to the ^SWWAN? command.
- Changes from version 1.20.2:
  + build:
  - Fixed building without MBIM support.
  - Fixed building without tests support.
  - Disabled test interface in base manager if building without
    tests.
  - Updated intel plugin dependencies to require XMM shared
    utils.
  - Fixed templates to make build reproducible.
  + FCC unlock: Updated shell scripts to avoid requiring bash.
  + MBIM:
  - Ignored SIM related indications during a SIM slot switch
    operation.
  - Updated capabilities loading to use Microsoft Extensions if
    available.
  - Updated supported modes loading to use the CustomDataClass
    field contents.
  + SIM: Fixed length when reading GID1/GID2 using AT commands.
  + Several other minor improvements and fixes.
- Changes from version 1.20.0:
  + API:
  - New 'Modem.Sar' interface to allow the host to manage the SAR
    power level.
  - New 'Modem.GetCellInfo()' method, that allows querying
    information about the current serving and neighboring cells.
    Currently including 'cell-type' and 'serving' fields for all
    cell types, plus additional type-specific fields:
    . CDMA: 'nid', 'sid', 'base-station-id', 'ref-pn' and
    'pilot-strength'.
    . GSM: 'operator-id', 'lac', 'ci', 'timing-advance', 'arfcn',
    'base-station-id' and 'rx-level'.
    . UMTS: 'operator-id', 'lac', 'ci', 'frequency-fdd-ul',
    'frequency-fdd-dl', 'frequency-tdd', 'uarfcn', 'psc',
    'rscp', 'ecio' and 'path-loss'.
    . TDSCDMA: 'operator-id', 'lac', 'ci', 'uarfcn',
    'cell-parameter-id', 'timing-advance', 'rscp' and
    'path-loss'.
    . LTE: 'operator-id', 'tac', 'ci', 'physical-ci', 'earfcn',
    'rsrp', 'rsrq' and 'timing-advance'.
    . 5GNR: 'operator-id', 'tac', 'ci', 'physical-ci', 'nrarfcn',
    'rsrp', 'rsrq', 'sinr' and 'timing-advance'.
  - New 'access-type-preference', 'roaming-allowance',
    'profile-name', 'profile-enabled' and 'profile-source'
    fields in the 'Bearer.Properties' property, that can also be
    used in both 'Modem.Simple.Connect()' and
    'Modem.CreateBearer()'.
  - New 'Modem.Modem3gpp.SetPacketServiceState()' method and
    'Modem.Modem3gpp.PacketServiceState' property, which allow
    management the explicit attach or detach to packet service on
    the current registered network.
  - New 'Modem.Modem3gpp.SetNr5gRegistrationSettings()' method
    and 'Modem.Modem3gpp.Nr5gRegistrationSettings' property, to
    allow management of 5G specific settings like 'mico-mode' or
    'drx-cycle'.
  - New 'start-date', 'uplink-speed' and 'downlnk-speed' fields
    in the 'Bearer.Stats' property.
  - New 'Bearer.ReloadStatsSupported' property to indicate
    whether reloading ongoing stats is supported or not.
  - New 'Modem.Modem3gppProfileManager.IndexField' property, to
    indicate which field is to be used as unique index in the
    profile management operations.
  - New 'Sim.SimType', 'Sim.EsimStatus' and 'Sim.Removability'
    properties to improve the management of eSIM related
    operations.
  - New 'Sim.Gid1' and 'Sim.Gid2' properties, which allow
    identifying SIM cards that should have different settings
    applied.
  - New 'Modem.Signal.SetupThresholds() method,
    'Modem.Signal.RssiThreshold' and
    'Modem.Signal.ErrorRateThreshold' to allow configuring
    thresholds so that the modem emits indications whenever the
    signal quality values change based on those thresholds. For
    RSSI a delta amount of dBm can be given, and for error rate
    just a boolean to enable or disable the corresponding event.
  - New 'error-rate' fields in the 'Modem.Signal.Cdma',
    'Modem.Signal.Evdo', 'Modem.Signal.Gsm', 'Modem.Signal.Umts',
    'Modem.Signal.Lte' and 'Modem.Signal.Nr5g' properties.
  + Core:
  - Detecting an eSIM without an active profile in the current
    SIM slot will lead to the modem being in Failed state, in the
    same way as if the slot was for a physical SIM and no SIM was
    inserted.
  - Default amount of AT probing attempts is updated to 6, to
    cope with modems that are slower to boot.
  - New '--test-mbimex-profile-management' option in the daemon,
    to enable support for profile management operations using the
    Microsoft extensions. This is an optional feature because it
    requires using the 'apn-type' field as unique index, which
    not all users of the profile management API may expect.
  - Implemented some initial support to automatically hide
    personal details (e.g. phone numbers, SMS contents...) from
    logs, right now only applicable to QMI and MBIM logs. Updated
    support for this feature will keep on being integrated in
    future 1.20.x updates. The new '--log-personal-info' option
    in the daemon allows to disable this feature completely.
  - Added new filter match option for subsystem vendor id,
    required in several PCI based Qualcomm modules.
  - QCDM port probing will no longer automatically run for all
    plugins, only in those that explicitly require it.
  - Implemented support for suspend/resume detection based on
    ChromeOS' powerd daemon.
  - Added Cat-M and NB-IoT LPWA access technologies.
  + Modem interface: On 3GPP+3GPP2 multimode devices, a missing SIM
    card will now force the modem into Failed state, as if it was a
    3GPP-only device.
  + Simple interface: Explicitly wait for PS domain to be attached
    during a connection attempt.
  + 3GPP interface: Updated to report domain registration changes
    altogether whenever possible (e.g. when using the QMI or MBIM
    protocols).
  + MBIM:
  - Implemented support to use the Microsoft-defined MBIM
    extensions v2 and v3 whenever supported by the device. The
    ModemManager daemon will negotiate which version to use with
    the modem, so that the highest version supported is enabled.
    This negotiation applies to the whole device, so any other
    user of the MBIM device will automatically start using the
    newly agreed version.
  - Implemented current modes switching using MBIMEx v2.0
    extensions.
  - Trigger explicit disconnection if a connection attempt fails.
  - Modem will be flagged as unusable if 10 consecutive MBIM
    requests timeout.
  - Enabled multiplex support for devices in the WWAN subsystem.
  + QMI:
  - Updated logic to by default prefer 'Signal Info' over the
    deprecated 'Signal Strength' operations.
  - Updated logic to by default prefer 'System Info' over the
    deprecated 'Serving System' operations.
  - Updated power state transition logic to ensure the new state
    is reached before returning success to the user.
  - Implemented support for the 'Modem3gppProfileManager.Updated'
    signal using PDC refresh notifications.
  - Modem will be flagged as unusable if 10 consecutive QMI
    requests timeout.
  - Implemented DTMF support.
  - Implemented support for automatic SIM IMSI switch detection
    under certain roaming scenarios.
  - Updated the logic to move the PS domain state to 'registered'
    based on the DSD System Status indications.
  - Updated endpoint type detection logic to be based on the net
    driver.
  - Updated endpoint number selection to be based on the data
    port.
  - Updated connection logic to allocate separate WDS clients per
    endpoint.
  - Added support for PCO reporting.
  + plugins:
  - quectel: Added FCC unlock support for the EM05-G.
  - telit:
    . Band management updated to prefer using QMI whenever
    available, as well as to detect the #BND command format
    automatically.
    . Added support for LPWA modems.
  - fibocom:
    . Implemented optional support to power down and up the modem
    during the update of the initial EPS bearer settings.
    . Implemented initial EPS bearer settings management in the
    MA510.
  - intel: New generic plugin for Intel PCI devices with vid
    0x8086.
  - xmm: Prefer GNSS control ports explicitly tagged via udev
    tags.
  - foxconn: Use the new FOX QMI service to load firmware
    version.
  - cinterion: Added support for PCIe based devices.
- Use ldconfig_scriptlets macro.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add xsltproc and pkgconfig(bash-completion) BuildRequires: New
  dependencies.</changelog>
</package>
<package pkgid="220e0820b36a71b97cf1894f40182770f7924d5959e5633ef98b1c3b68043848a37fe84c97e04287841c128f5673397dea8cf8a83c70d5740ffa90f99f1c5365" name="libmnl-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1325160000">- SPDX format for License: tag
- Use separate include dir to detect compile errors</changelog>
  <changelog author="jengelh@medozas.de" date="1325505600">- Update to new upstream release 1.0.2
  * build and compile updates
  * header: fix invalid use of type void * in arithmetic of
  mnl_for_each_nest(...)
  * doc: fix wrong comment describing mnl_nlmsg_batch_stop</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.0.3
  * Added the "mnl_attr_for_each_payload" function, which allows to
  iterate over attributes for a given payload pointer.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline, source validator already
  does that</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Move include files to /usr/include/pkg, like done in many other
  packages</changelog>
  <changelog author="jengelh@inai.de" date="1418126400">- Remove extra directory pkg, one level is enough.</changelog>
  <changelog author="jengelh@inai.de" date="1467460800">- Update to new upstream release 1.0.4
  * Improvements in the netlink message printing function,
  attribute validation for MNL_TYPE_MSEC and MNL_TYPE_U64, clang
  compilation fixes, the new mnl_socket_open2() and
  mnl_socket_fdopen() functions, missing handling for
  NLM_F_DUMP_INTR and documentation updates.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1587038400">- package the license text</changelog>
  <changelog author="jengelh@inai.de" date="1649160000">- Update to release 1.0.5
  * New example program
  * "MNL_SOCKET_DUMP_SIZE" define, holding a recommended buffer
    size for netlink dumps.
  * Resolved compiler warnings</changelog>
</package>
<package pkgid="44284335caa15f57917a65a32c1fb843883f301674f29528e10f157b13629d593142873233fb770da2c2cd9b35b910e16ffbfcf805db5cda69276e0a651539b4" name="libmnl0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1325160000">- SPDX format for License: tag
- Use separate include dir to detect compile errors</changelog>
  <changelog author="jengelh@medozas.de" date="1325505600">- Update to new upstream release 1.0.2
  * build and compile updates
  * header: fix invalid use of type void * in arithmetic of
  mnl_for_each_nest(...)
  * doc: fix wrong comment describing mnl_nlmsg_batch_stop</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.0.3
  * Added the "mnl_attr_for_each_payload" function, which allows to
  iterate over attributes for a given payload pointer.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline, source validator already
  does that</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Move include files to /usr/include/pkg, like done in many other
  packages</changelog>
  <changelog author="jengelh@inai.de" date="1418126400">- Remove extra directory pkg, one level is enough.</changelog>
  <changelog author="jengelh@inai.de" date="1467460800">- Update to new upstream release 1.0.4
  * Improvements in the netlink message printing function,
  attribute validation for MNL_TYPE_MSEC and MNL_TYPE_U64, clang
  compilation fixes, the new mnl_socket_open2() and
  mnl_socket_fdopen() functions, missing handling for
  NLM_F_DUMP_INTR and documentation updates.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1587038400">- package the license text</changelog>
  <changelog author="jengelh@inai.de" date="1649160000">- Update to release 1.0.5
  * New example program
  * "MNL_SOCKET_DUMP_SIZE" define, holding a recommended buffer
    size for netlink dumps.
  * Resolved compiler warnings</changelog>
</package>
<package pkgid="9eb94c423e0b5923caca09e0a3e2ae00c51c53b776864220d02e00eb847ff0c4e0baa54b334ed4d0a3789c555de59b71667c97ee467187cdb6eaa7e4f33e58e4" name="libmount1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.40.4" rel="slfo.1.1_4.1"/>
  <changelog author="jslaby@suse.cz" date="1715860800">- add support for pidfs in kernel 6.9 (bsc#1224285)
  * 0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch
  * 0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch
  * 0003-lsfd-Support-pidfs.patch
  * 0004-lsfd-test-Adapt-test-cases-for-pidfs.patch</changelog>
  <changelog author="dmueller@suse.com" date="1718020800">- disable libmagic in more(1) for binary detection (bsc#1225197)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1721131200">- uncomment "autoreconf --install" to use the new version of automake</changelog>
  <changelog author="sbrabec@suse.com" date="1722859200">- Update to version 2.40.2:
  * cfdisk: fix possible integer overflow
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
    (obsoletes
    0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch,
    0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch,
    0003-lsfd-Support-pidfs.patch,
    0004-lsfd-test-Adapt-test-cases-for-pidfs.patch)
  * mkswap.8.adoc: update note regarding swapfile creation
  * setpgid: make -f work
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Enable kernel mountfd API, as it should be already stable
  (PED-9752).
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.</changelog>
  <changelog author="sbrabec@suse.com" date="1729512000">- Disable mountfd API again.
  (https://github.com/util-linux/util-linux/issues/3158)</changelog>
  <changelog author="sbrabec@suse.com" date="1731844800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).
- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
</package>
<package pkgid="c2e3ad4a37d78f1ee499eafe04664e21236caae937e5a91e087d510f8228421c1855910ef4d44fa9146285634db603e189c11ed8320ee399550e0f61e1e4f8ac" name="libmpath0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.10.0+103+suse.0fc97cd" rel="slfo.1.1_1.3"/>
  <changelog author="mwilck@suse.com" date="1707739200">- Update to version 0.9.7+148+suse.7d9953e.obscpio
  * This is a multipath-tools 0.9.8 pre-release
  * fix fast_io_fail for Infinibox (bsc#1219348)
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707912000">- Update to version 0.9.7+148+suse.9780ae0:
  * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
</package>
<package pkgid="fc1306d43692086f036b046b85e054d28ebfee2c8c10d93751879fdd48f4a293437d50fbd533ddb5be0bfb141daf4ed0bce57b8f0749a5101ff406a2ee771f54" name="libmpdec3-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.5.1" rel="slfo.1.1_1.4"/>
  <changelog author="skrah@bytereef.org" date="1628596800">- Initial package</changelog>
  <changelog author="mcepl@suse.com" date="1630584000">- Switch on _multibuild with the separate test step (to minimize
  dependencies).
- Add a basic baselibs.conf.</changelog>
</package>
<package pkgid="a416a87ebd0a2ec9f1ed70eadbaca5fe313ef0463a5e7cf7bdd1a002b17fd7ac152db63d6485bb00a3da78106e6effbfe15a4b4cd4e3a56bf835cc82596d1eda" name="libmpfr6-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="slfo.1.1_1.4"/>
  <changelog author="rguenther@suse.com" date="1594641600">- Update to mpfr 4.1.0
  * New function mpfr_get_str_ndigits about conversion to a string of digits.
  * New function mpfr_dot for the dot product (incomplete, experimental).
  * New functions mpfr_get_decimal128 and mpfr_set_decimal128 (available only
    when MPFR has been built with decimal float support).
  * New function mpfr_cmpabs_ui.
  * New function mpfr_total_order_p for the IEEE 754 totalOrder predicate.
  * The mpfr_out_str function now accepts bases from -2 to -36, in order to
    follow mpfr_get_str and GMP's mpf_out_str functions (these cases gave an
    assertion failure, as with other invalid bases).
  * Shared caches: cleanup; really detect lock failures (abort in this case).
  * The behavior of the formatted output functions (mpfr_printf, etc.) with
    an empty precision field has improved: trailing zeros are kept in a way
    similar to the formatted output functions from C.
  * Improved mpfr_add and mpfr_sub when all operands have a precision equal to
    twice the number of bits per word, e.g., 128 bits on a 64-bit platform.
  * Optimized the tuning parameters for various architectures.
  * Improved test coverage to 98.6% of code for x86_64.
  * Bug fixes.
  * MPFR manual: corrected/completed the mpfr_get_str description in order to
    follow the historical behavior and GMP's mpf_get_str function.
- Remove mpfr-4.0.2-p6.patch and floating-point-format-no-lto.patch</changelog>
  <changelog author="rguenther@suse.com" date="1613131200">- Add cummulative patch mpfr-4.1.0-p7.diff fixing various bugs.</changelog>
  <changelog author="rguenther@suse.com" date="1668772800">- Update to mpfr 4.1.1
  * Bug fixes (see &lt;https://www.mpfr.org/mpfr-4.1.0/#fixed&gt; and/or the
    ChangeLog file), in particular for macros implementing functions.
  * Improved manual formatting.
  * Accumulated bugfixes
- Remove mpfr-4.1.0-p7.diff, all patches are contained in the
  new version.
- Update mpfr.keyring</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1668859200">- package license files correctly</changelog>
  <changelog author="rguenther@suse.com" date="1669291200">- Add mpfr-4.1.1-patch01.patch to fix bug with code using
  the mpfr_custom_get_kind macro.</changelog>
  <changelog author="rguenther@suse.com" date="1673265600">- Update to mpfr 4.2.0
  * New functions mpfr_cosu, mpfr_sinu, mpfr_tanu, mpfr_acosu, mpfr_asinu,
    mpfr_atanu and mpfr_atan2u.
  * New functions mpfr_cospi, mpfr_sinpi, mpfr_tanpi, mpfr_acospi, mpfr_asinpi,
    mpfr_atanpi and mpfr_atan2pi.
  * New functions mpfr_log2p1, mpfr_log10p1, mpfr_exp2m1, mpfr_exp10m1 and
    mpfr_compound_si.
  * New functions mpfr_fmod_ui, mpfr_powr, mpfr_pown, mpfr_pow_uj, mpfr_pow_sj
    and mpfr_rootn_si (mpfr_pown is actually a macro defined as an alias for
    mpfr_pow_sj).
  * Bug fixes.
    In particular, for the formatted output functions (mpfr_printf, etc.),
    the case where the precision consists only of a period has been fixed
    to be like ".0" as specified in the ISO C standard, and the manual has
    been corrected and clarified.
    The macros of the custom interface have also been fixed: they now behave
    like functions (except a minor limitation for mpfr_custom_init_set).
- Remove mpfr-4.1.1-patch01.patch which is included in the new release.</changelog>
  <changelog author="schwab@suse.de" date="1675166400">- tests-tsprintf.patch: Avoid testsuite failure with glibc &gt;= 2.37</changelog>
  <changelog author="rguenther@suse.com" date="1681819200">- Add mpfr-4.2.0-cummulative.patch, cummulative patches for
  mpfr 4.2.0:
  * A test of the thousands separator in tsprintf.c is based on the
    output from the GNU C Library up to 2.36, which is incorrect.
  * The mpfr_ui_pow_ui function has infinite loop in case of overflow.
  * The tfprintf and tprintf tests may fail in locales where decimal_point
    has several bytes, such as ps_AF.
  * In particular cases that are very hard to round, mpfr_rec_sqrt may yield
    a stack overflow due to many small allocations in the stack, based on
    alloca().
- Remove tests-tsprintf.patch that's included in the above set.</changelog>
  <changelog author="rguenther@suse.com" date="1686139200">- Update mpfr-4.2.0-cummulative.patch, adds patches fixing the following bugs
  * the mpfr_reldiff function, which computes |b-c|/b, is buggy on special
    values, e.g. on the following (b,c) values: (+Inf,+Inf) gives ±0
    instead of NaN (like NaN/Inf); (+0,+0) gives 1 instead of NaN (like 0/0);
    (+0,1) gives 1 instead of Inf (like 1/0). Moreover, the sign of 0 for
    (+Inf,+Inf) or (-Inf,-Inf) is not set, i.e. it is just the sign of the
    destination before the call; as a consequence, results are not even
    consistent.
  * the reuse tests are incomplete: the sign of a result zero is not checked,
    so that it can miss bugs (one of the mpfr_reldiff bugs mentioned above,
    in particular).
  * the general code for the power function (mpfr_pow_general internal
    function) has two bugs in particular cases: the first one is an incorrect
    computation of the error bound when there has been an intermediate
    underflow or overflow (in such a case, the computation is performed
    again with a rescaling, thus with an additional error term, but there is
    a bug in the computation of this term), so that the result may be
    rounded incorrectly (in particular, a spurious overflow is possible);
    the second one occurs in a corner case (destination precision 1,
    rounding to nearest, and where the rounded result assuming an unbounded
    exponent range would be 2emin-2 and the exact result is larger than this
    value), with the only consequence being a missing underflow exception
    (the underflow flag is not set).
  * the mpfr_compound_si function can take a huge amount of memory and time
    in some cases (when the argument x is a large even integer and xn is
    represented exactly in the target precision) and does not correctly
    detect overflows and underflows
  * MPFR can crash when a formatted output function is called with
    %.2147483648Rg in the format string.</changelog>
  <changelog author="rguenther@suse.com" date="1692705600">- Update to mpfr 4.2.1
  * Includes all fixes from mpfr-4.2.0-cummulative.patch which is
    subsequently removed.
  * Improved MPFR manual.
  * Configure tests: replaced the test of the link with GMP, in order
    to avoid the use of a function without a prototype (Autoconf issue), as
    this is obsolescent in ISO C. The new test should be more robust.</changelog>
</package>
<package pkgid="5f5e70f197572ef4b008a63fad1f98ce957e4a7d7bb73b4d9f21a88acb33eb27f2cb2d63b6818f25009d754e23e037e32015b74d798c13f2a936e2af1d47c7d4" name="libncurses6-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.20240224" rel="slfo.1.1_1.5"/>
  <changelog author="werner@suse.de" date="1701691200">- Add ncurses patch 20231202
  + correct initial alignment of extended capabilities in infocmp, so
    that the "-u" option can be used for more than two terminal types.
  + improve formatting/style of manpages, changing environment variables
    to italics (patches by Branden Robinson).</changelog>
  <changelog author="werner@suse.de" date="1702296000">- Add ncurses patch 20231209
  + modify infocmp "-u" option to not report cancels in use'd chunks
    which are not mentioned in the top-level terminal description.
  + remove xterm+sm+1006 from tmux (Debian #1057688).
  + used "infocmp -u" to help trim redundant capabilities -TD
  + updated man/edit_man.sh to allow for "\%" markers embedded after
    bold font escapes in manpage cross-references (Debian #1057541).
  + reduce compiler-warnings in configure checks</changelog>
  <changelog author="werner@suse.de" date="1704715200">- Add ncurses patch 20240106
  + use ansi+arrows, ansi+apparrows, ansi+csr, ansi+erase, ansi+idc,
    ansi+idc1, ansi+idl, ansi+idl1, ansi+inittabs to trim -TD
  + minor manpage formatting changes for consistency.
  + modify doc-html test package's install-directory, per lintian.
  + add attr_get.3x to man_db.renames.in (patch by Sven Joachim).
- Add ncurses patch 20231230
  + improve formatting/style of manpages (patches by Branden Robinson).
  + add ms-vt100-16color, winconsole -TD
  + add rio, rio-direct -TD
  + add mostlike -TD
  + add wezterm, contour -TD
- Add ncurses patch 20231223
  + improve formatting/style of manpages (patches by Branden Robinson).
- Add ncurses patch 20231217
  + improve formatting/style of manpages (patches by Branden Robinson).
  + correct an assignment in infocmp "-u" for detecting if a boolean
    is unset in a base entry and set in a use'd chunk, i.e., if it was
    cancelled.
  + modify infocmp "-u" option to not report cancels for strings which
    were already cancelled in a use'd chunk.
  + join two lines in infotocap.3x to eliminate a spurious "description"
    link in installed manpages (report by Sven Joachim).
  + fix typo in NEWS (report by Sven Joachim).
- Port patches
  * ncurses-5.9-ibm327x.dif
  * ncurses-6.4.dif</changelog>
  <changelog author="lnussel@suse.com" date="1704801600">- Add foot to terminfo-base. It's the most compliant wayland
  terminal emulator according to
  https://github.com/dankamongmen/notcurses/blob/master/TERMINALS.md</changelog>
  <changelog author="werner@suse.de" date="1705320000">- Add ncurses patch 20240113
  + improve formatting/style of manpages (patches by Branden Robinson).
  + modify dist.mk to avoid passing developer's comments in manpages into
    the generated html documentation.
  + use ansi+local, ansi+local1, ansi+pp, ansi+rca, ansi+rca2, ansi+sgr
    to trim -TD
  + restore padding for wy520* and vt320-k311 (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1705924800">- Add ncurses patch 20240120
  + improve formatting/style of manpages (patches by Branden Robinson).
  + amend discussion of aliases in tput.1
  + use ansi+sgrbold, ansi+sgrdim, ansi+sgrso, ansi+sgrul, ansi+tabs
    ecma+color, ecma+sgr, vt100+4bsd, vt100+pfkeys, vt220+pcedit
    xterm+256color, xterm+acs, xterm+nopcfkeys, xterm+pcf2 to trim -TD
  + modify configure scripts/makefiles to omit KEY_RESIZE if the
    corresponding SIGWINCH feature is disabled.</changelog>
  <changelog author="werner@suse.de" date="1706529600">- Add ncurses patch 20240127
  + amend change to z39-a (report by Sven Joachim).
  + use xterm+nopcfkeys, vt52-basic, dec+pp, dec+sl, vt52+arrows,
    hp+pfk+cr, klone+acs, klone+color, klone+sgr, ncr160wy50+pp
    to trim -TD
  + NetBSD-related fixes for x68k and wsvt52 (patch by Thomas Klausner)</changelog>
  <changelog author="werner@suse.de" date="1707134400">- Add ncurses patch 20240203
  + minor changes to tracing and locale-checks.</changelog>
  <changelog author="werner@suse.de" date="1707739200">- Add ncurses patch 20240210
  + compiler-warning fixes, while investigating an optimizer bug in
    "gcc (MacPorts gcc13 13.2.0_4+stdlib_flag) 13.2.0"
    which results in only the first byte of a multibyte character being
    printed to the screen.
- Change order of use=vt100+4bsd and use=rxvt+pcfkeys in rxvt-basic
  to get correct arrow keys back (boo#1219626)</changelog>
  <changelog author="werner@suse.de" date="1708948800">- Add ncurses patch 20240217
  + add vt100+noapp, vt100+noapp+pc, xterm+app+pc, xterm+decedit from
    xterm #389 -TD
  + fix inconsistent description of wmouse_trafo() (Debian #1059778).
  + modify wenclose() to handle pads (Debian #1059783).
  + improve manpage discussion of mouseinterval() (Debian #1058560).
- Add ncurses patch 20240224
  + improve man/curs_mouse.3x style (Brandon Robinson, Sven Joachim).
  + provide for CCHARW_MAX greater than 1
  + eliminate use of PATH_MAX in lib_trace.c
  + work around misconfiguration of MacPorts gcc13, which exposes invalid
    definition of MB_LEN_MAX in gcc's fallback copy of limits.h (MacPorts
    [#69374]).</changelog>
</package>
<package pkgid="f7e7723f4fb4ad7e4aad1a1027057095092af19199496d7d34d40c6efe3583bf075b9a9ed5015f8b1d0c22ab6a25a85ec05a82631d554299f8ad83581edaa995" name="libndp-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8" rel="slfo.1.1_1.2"/>
  <changelog author="meissner@suse.com" date="1391860800">- library for neighbour discovery, for later use by NetworkManager</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907200">- Minor cleanups for inclusion into Factory:
  + Shared Library packages must only contain libraries (move
    binary file and man page to main package).
  + Adjust RPM Groups: Productivity/Networking/Other for the main
    package and System/Libraries for the shared library package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907201">- Update to version 1.3:
  + libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is
    used as parameter and destination in s[n]printf().
- No longer bootstrap: the tarball is complete.
- Remove libtool, automake and autoconf BuildRequires: no longer
  needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- Update to version 1.4:
  + libndp: fix buffer overflow in ndp_msg_opt_dnssl_domain().</changelog>
  <changelog author="mpluskal@suse.com" date="1463918400">- Update to version 1.6 (bsc#979645 CVE-2016-3698):
  * libndp: reject redirect and router advertisements from
    non-link-local
  * libndp: validate the IPv6 hop limit
- Changes for version 1.5:
  * ndptool: validate the IPv6 hop limit
- Small spec file adjustement:
  * Used spec-cleaner
  * Make building more verbose
  * Update describtion of subpackages
  * Use correct cathegory for subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.7
  * fix socket fd missing for O_CLOEXEC
  * Fix issue where not sending all IPs to an interface
  * typo in ndptool.c fixed</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 1.8:
  * libndp,ndptool: use poll() instead of select()
  * ndptool: avoid static buffer for string in ndptool
  * libndp: avoid static buffer for debug string in ndp_sock_recv()
  * libndp: use thread local variables for static return arguments
  * ndptool: fix printing dnssl lifetime in ndptool
  * ndptool: fix potential memory leak caused by strdup
  * libndp: close sockfd after using to avoid handle leak</changelog>
  <changelog author="mgorse@suse.com" date="1719489600">- Add libndp-CVE-2024-5564.patch: add a check on the route
  information option length field (bsc#1225771 CVE-2024-5564).</changelog>
</package>
<package pkgid="e3370ab28da9b57d071c87a2f5ae2c652750cff681682c2a3a7de563115c34799ca24cb693adeb1fd3e3f8e3a714d57aad2f82ff8fca1afa8e33c1b09e4d4a4a" name="libndp0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8" rel="slfo.1.1_1.2"/>
  <changelog author="meissner@suse.com" date="1391860800">- library for neighbour discovery, for later use by NetworkManager</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907200">- Minor cleanups for inclusion into Factory:
  + Shared Library packages must only contain libraries (move
    binary file and man page to main package).
  + Adjust RPM Groups: Productivity/Networking/Other for the main
    package and System/Libraries for the shared library package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907201">- Update to version 1.3:
  + libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is
    used as parameter and destination in s[n]printf().
- No longer bootstrap: the tarball is complete.
- Remove libtool, automake and autoconf BuildRequires: no longer
  needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- Update to version 1.4:
  + libndp: fix buffer overflow in ndp_msg_opt_dnssl_domain().</changelog>
  <changelog author="mpluskal@suse.com" date="1463918400">- Update to version 1.6 (bsc#979645 CVE-2016-3698):
  * libndp: reject redirect and router advertisements from
    non-link-local
  * libndp: validate the IPv6 hop limit
- Changes for version 1.5:
  * ndptool: validate the IPv6 hop limit
- Small spec file adjustement:
  * Used spec-cleaner
  * Make building more verbose
  * Update describtion of subpackages
  * Use correct cathegory for subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.7
  * fix socket fd missing for O_CLOEXEC
  * Fix issue where not sending all IPs to an interface
  * typo in ndptool.c fixed</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 1.8:
  * libndp,ndptool: use poll() instead of select()
  * ndptool: avoid static buffer for string in ndptool
  * libndp: avoid static buffer for debug string in ndp_sock_recv()
  * libndp: use thread local variables for static return arguments
  * ndptool: fix printing dnssl lifetime in ndptool
  * ndptool: fix potential memory leak caused by strdup
  * libndp: close sockfd after using to avoid handle leak</changelog>
  <changelog author="mgorse@suse.com" date="1719489600">- Add libndp-CVE-2024-5564.patch: add a check on the route
  information option length field (bsc#1225771 CVE-2024-5564).</changelog>
</package>
<package pkgid="a7ebd3bc322a0591a74732adf6c9e80de330fdc9288a81eaa7a1efcbcb3fcba0c463f88b5e9416b21b5e8555e80ac22243e72a28c585e9001c045d85bb79166d" name="libnetfilter_conntrack-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.9" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.0.3
  * Treat the ATTR_HELPER_INFO attribute as the variable-length type
  that it actually is.
  * Fix a use after free when nfct_clone was used with certain
  attribute data types.</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.0.4
  * This release includes connlabel support, one memleak fix and
  fixes in the comparison API.</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.0.5
  * conntrack: add mark event filter
  * conntrack: compare: relax MARK/ZONE attribute comparison</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.0.6
  * add support for IPv6 NAT
  * conntrack: add zone attribute to tuple</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.0.7
  * new synproxy support
  * don't crash on NULL labelmap
  * expose a copy of nf_conntrack_common.h</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.0.8
  * conntrack: support for IPS_OFFLOAD</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1644840000">- Update to release 1.0.9
  * This release comes with the new nfct_nlmsg_build_filter()
    function that allows to add metadata for kernel-side
    filtering of conntrack entries during conntrack table dump.
  * The nfct_query() API supports the new NFCT_Q_FLUSH_FILTER
    argument, it allows to flush only IPv6 or IPv4 entries from
    the connection tracking table.</changelog>
</package>
<package pkgid="fdd9fa14a2b89af42483674b6d3b23b5cfc1a5bd536da4cb98fe36426f53d744547172b9d2663090ec9faeb07cc479d6745b6927c685cd59800dbd2708d1ab7d" name="libnetfilter_conntrack3-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.9" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.0.3
  * Treat the ATTR_HELPER_INFO attribute as the variable-length type
  that it actually is.
  * Fix a use after free when nfct_clone was used with certain
  attribute data types.</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.0.4
  * This release includes connlabel support, one memleak fix and
  fixes in the comparison API.</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.0.5
  * conntrack: add mark event filter
  * conntrack: compare: relax MARK/ZONE attribute comparison</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.0.6
  * add support for IPv6 NAT
  * conntrack: add zone attribute to tuple</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.0.7
  * new synproxy support
  * don't crash on NULL labelmap
  * expose a copy of nf_conntrack_common.h</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.0.8
  * conntrack: support for IPS_OFFLOAD</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1644840000">- Update to release 1.0.9
  * This release comes with the new nfct_nlmsg_build_filter()
    function that allows to add metadata for kernel-side
    filtering of conntrack entries during conntrack table dump.
  * The nfct_query() API supports the new NFCT_Q_FLUSH_FILTER
    argument, it allows to flush only IPv6 or IPv4 entries from
    the connection tracking table.</changelog>
</package>
<package pkgid="f79d693512ab35881d0c04e7a75f358bc3718470d0f4d0970c388a8db1e2161cf89b340b0bfd2e75d9ad73069f412710c2570ce364271dd7af266e2e06053f2f" name="libnetfilter_cthelper-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1338811200">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1346414400">- Rectify baselibs.conf to include the right package name</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to initial official release 1.0.0
  * This library provides the infrastructure for the user-space
  helper infrastructure available since the Linux kernel 3.6.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="cshorler@googlemail.com" date="1417953600">- Add fix_h_expect_policy_free.patch to fix crash due to following
  a just-freed pointer [bnc#908875]</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Remove version from subinclude directory; it tends to break
  recompiles of third software after a library update.</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow build on uclinux
  * Resolve use-after-free in nfct_helper_free()
  * Resolve double free in nfct-helper-add example
  * Fixed incorrect netlink message building with multiple nfct
    helper policies
- Drop fix_h_expect_policy_free.patch (merged)</changelog>
</package>
<package pkgid="b99ab59faaf63bcb0f5e0b876ff6c99f8330f5c8c872e9468cdf5690311c07beedfe71c99468716a107879aba0120bb2f8260c086f10863bf512ede8fb360d1c" name="libnetfilter_cthelper0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1338811200">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1346414400">- Rectify baselibs.conf to include the right package name</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to initial official release 1.0.0
  * This library provides the infrastructure for the user-space
  helper infrastructure available since the Linux kernel 3.6.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="cshorler@googlemail.com" date="1417953600">- Add fix_h_expect_policy_free.patch to fix crash due to following
  a just-freed pointer [bnc#908875]</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Remove version from subinclude directory; it tends to break
  recompiles of third software after a library update.</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow build on uclinux
  * Resolve use-after-free in nfct_helper_free()
  * Resolve double free in nfct-helper-add example
  * Fixed incorrect netlink message building with multiple nfct
    helper policies
- Drop fix_h_expect_policy_free.patch (merged)</changelog>
</package>
<package pkgid="c108b5fab23be3cf2dca8ba496dd2b4c799547ab4f734a7d054b54d357d60f4c9cf18025a5e60d4f95a2077f9a245b8d16a87fb1834313e506b6d38cf5c49020" name="libnetfilter_cttimeout-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1330516800">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to first official tarball release 1.0.0
  * Add ICMPv6 support
  * add new parameter type to nfct_timeout_snprintf</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow building on uclinux</changelog>
</package>
<package pkgid="dbc864990154b3147dd977acb0a15bb3312c299a9594999d8f5abbfddf6e0da9b184f41ce123c970fbcc570529ec7fe1a7639ed5b68b51735b3f39dfe286dc86" name="libnetfilter_cttimeout1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1330516800">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to first official tarball release 1.0.0
  * Add ICMPv6 support
  * add new parameter type to nfct_timeout_snprintf</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow building on uclinux</changelog>
</package>
<package pkgid="200bb881e087198dcecfbd5000b05304508095f156db112756e31315147cac4726c6f7d96182b25c83a158cdb179a8ee1701b780e4a4d78c0dceab5cf4b5de9d" name="libnettle-debugsource" arch="aarch64">
  <version epoch="0" ver="3.9.1" rel="slfo.1.1_1.2"/>
  <changelog author="info@paolostivanin.com" date="1623240000">- GNU Nettle 3.7.3: [CVE-2021-3580, bsc#1187060]
  * Fix crash for zero input to rsa_sec_decrypt and
    rsa_decrypt_tr. Potential denial of service vector.
  * Ensure that all of rsa_decrypt_tr and rsa_sec_decrypt return
    failure for out of range inputs, instead of either crashing,
    or silently reducing input modulo n. Potential denial of
    service vector.
  * Ensure that rsa_decrypt returns failure for out of range
    inputs, instead of silently reducing input modulo n.
  * Ensure that rsa_sec_decrypt returns failure if the message
    size is too large for the given key. Unlike the other bugs,
    this would typically be triggered by invalid local
    configuration, rather than by processing untrusted remote
    data.</changelog>
  <changelog author="pmonreal@suse.com" date="1642420800">- Provide s390x CPACF/SHA/AES Support for Crypto Libraries
  * Add libnettle-s390x-CPACF-SHA-AES-support.patch [jsc#SLE-20733]</changelog>
  <changelog author="gmbr3@opensuse.org" date="1655294400">- Make shared libraries executable</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 3.8:
  This release includes a couple of new features, and many
  performance improvements. It adds assembly code for two more
  architectures: ARM64 and S390x.
  The new version is intended to be fully source and binary
  compatible with Nettle-3.6. The shared library names are
  libnettle.so.8.5 and libhogweed.so.6.5, with sonames
  libnettle.so.8 and libhogweed.so.6.
  New features:
  * AES keywrap (RFC 3394), contributed by Nicolas Mora.
  * SM3 hash function, contributed by Tianjia Zhang.
  * New functions cbc_aes128_encrypt, cbc_aes192_encrypt,
    cbc_aes256_encrypt.
    On processors where AES is fast enough, e.g., x86_64 with
    aesni instructions, the overhead of using Nettle's general
    cbc_encrypt can be significant. The new functions can be
    implemented in assembly, to do multiple blocks with reduced
    per-block overhead.
    Note that there's no corresponding new decrypt functions,
    since the general cbc_decrypt doesn't suffer from the same
    performance problem.
  Bug fixes:
  * Fix fat builds for x86_64 windows, these appear to never
    have worked.
  Optimizations:
  * New ARM64 implementation of AES, GCM, Chacha, SHA1 and
    SHA256, for processors supporting crypto extensions. Great
    speedups, and fat builds are supported. Contributed by
    Mamone Tarsha.
  * New s390x implementation of AES, GCM, Chacha, memxor, SHA1,
    SHA256, SHA512 and SHA3. Great speedups, and fat builds are
    supported. Contributed by Mamone Tarsha.
  * New PPC64 assembly for ecc modulo/redc operations,
    contributed by Amitay Isaacs, Martin Schwenke and Alastair
    D´Silva.
  * The x86_64 AES implementation using aesni instructions has
    been reorganized with one separate function per key size,
    each interleaving the processing of two blocks at a time
    (when the caller processes multiple blocks with each call).
    This gives a modest performance improvement on some
    processors.
  * Rewritten and faster x86_64 poly1305 assembly.
- drop libnettle-s390x-CPACF-SHA-AES-support.patch (included in 3.8)</changelog>
  <changelog author="dmueller@suse.com" date="1659009600">- update to 3.8.1:
  * Avoid non-posix m4 argument references in the chacha
    implementation for arm64, powerpc64 and s390x. Reported by
    Christian Weisgerber, fix contributed by Mamone Tarsha.
  * Use explicit .machine pseudo-ops where needed in s390x
    assembly files. Bug report by Andreas K. Huettel, fix
    contributed by Mamone Tarsha.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1684152000">- update to 3.9
  * rewrite of the C and plain x86_64 assembly implementations of
    GHASH to use precomputed tables in a different way, with tables
    always accessed in the same sequential manner. This should make
    Nettle's GHASH implementation side-channel silent on all
    platforms, but considerably slower on platforms without carry-
    less mul instructions. E.g., benchmarks of the C implementation
    on x86_64 showed a slowdown of 3 times.
  * Fix bug in ecdsa and gostdsa signature verify operation, for
    the unlikely corner case that point addition really is point
    duplication.
  * Fix for chacha on Power7, nettle's assembly used an instruction
    only available on later processors
  * Add support for the SM4 block cipher
  * Add support for the Balloon password hash
  * Add support for SIV-GCM authenticated encryption mode
  * Add support for OCB authenticated encryption mode.
  * New exported functions md5_compress, sha1_compress,
    sha256_compress, sha512_compress
  * multiple performance optimizations
  * Delete all arcfour assembly code. Affects 32-bit x86, 32-bit
    and 64-bit sparc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1686139200">- update to 3.9.1: [bsc#1212112, CVE-2023-36660]
  * Fix bug in the new OCB code may be exploitable for denial of
    service or worse due to memory corruption</changelog>
  <changelog author="pmonreal@suse.com" date="1686225600">- Include the nettle library manual in HTML and PDF formats in
  the devel package.</changelog>
  <changelog author="pmonreal@suse.com" date="1686312000">- Add the architecture specific READMEs as provided by upstream.</changelog>
</package>
<package pkgid="6702246b02af3fa6af7430a9bdb70c0d353193b368b21edb72987a11c7db57db167cef0cef099611bf455f54b481f6c762c72decbc6baf6ddf1ce89398b69011" name="libnettle8-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.9.1" rel="slfo.1.1_1.2"/>
  <changelog author="info@paolostivanin.com" date="1623240000">- GNU Nettle 3.7.3: [CVE-2021-3580, bsc#1187060]
  * Fix crash for zero input to rsa_sec_decrypt and
    rsa_decrypt_tr. Potential denial of service vector.
  * Ensure that all of rsa_decrypt_tr and rsa_sec_decrypt return
    failure for out of range inputs, instead of either crashing,
    or silently reducing input modulo n. Potential denial of
    service vector.
  * Ensure that rsa_decrypt returns failure for out of range
    inputs, instead of silently reducing input modulo n.
  * Ensure that rsa_sec_decrypt returns failure if the message
    size is too large for the given key. Unlike the other bugs,
    this would typically be triggered by invalid local
    configuration, rather than by processing untrusted remote
    data.</changelog>
  <changelog author="pmonreal@suse.com" date="1642420800">- Provide s390x CPACF/SHA/AES Support for Crypto Libraries
  * Add libnettle-s390x-CPACF-SHA-AES-support.patch [jsc#SLE-20733]</changelog>
  <changelog author="gmbr3@opensuse.org" date="1655294400">- Make shared libraries executable</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 3.8:
  This release includes a couple of new features, and many
  performance improvements. It adds assembly code for two more
  architectures: ARM64 and S390x.
  The new version is intended to be fully source and binary
  compatible with Nettle-3.6. The shared library names are
  libnettle.so.8.5 and libhogweed.so.6.5, with sonames
  libnettle.so.8 and libhogweed.so.6.
  New features:
  * AES keywrap (RFC 3394), contributed by Nicolas Mora.
  * SM3 hash function, contributed by Tianjia Zhang.
  * New functions cbc_aes128_encrypt, cbc_aes192_encrypt,
    cbc_aes256_encrypt.
    On processors where AES is fast enough, e.g., x86_64 with
    aesni instructions, the overhead of using Nettle's general
    cbc_encrypt can be significant. The new functions can be
    implemented in assembly, to do multiple blocks with reduced
    per-block overhead.
    Note that there's no corresponding new decrypt functions,
    since the general cbc_decrypt doesn't suffer from the same
    performance problem.
  Bug fixes:
  * Fix fat builds for x86_64 windows, these appear to never
    have worked.
  Optimizations:
  * New ARM64 implementation of AES, GCM, Chacha, SHA1 and
    SHA256, for processors supporting crypto extensions. Great
    speedups, and fat builds are supported. Contributed by
    Mamone Tarsha.
  * New s390x implementation of AES, GCM, Chacha, memxor, SHA1,
    SHA256, SHA512 and SHA3. Great speedups, and fat builds are
    supported. Contributed by Mamone Tarsha.
  * New PPC64 assembly for ecc modulo/redc operations,
    contributed by Amitay Isaacs, Martin Schwenke and Alastair
    D´Silva.
  * The x86_64 AES implementation using aesni instructions has
    been reorganized with one separate function per key size,
    each interleaving the processing of two blocks at a time
    (when the caller processes multiple blocks with each call).
    This gives a modest performance improvement on some
    processors.
  * Rewritten and faster x86_64 poly1305 assembly.
- drop libnettle-s390x-CPACF-SHA-AES-support.patch (included in 3.8)</changelog>
  <changelog author="dmueller@suse.com" date="1659009600">- update to 3.8.1:
  * Avoid non-posix m4 argument references in the chacha
    implementation for arm64, powerpc64 and s390x. Reported by
    Christian Weisgerber, fix contributed by Mamone Tarsha.
  * Use explicit .machine pseudo-ops where needed in s390x
    assembly files. Bug report by Andreas K. Huettel, fix
    contributed by Mamone Tarsha.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1684152000">- update to 3.9
  * rewrite of the C and plain x86_64 assembly implementations of
    GHASH to use precomputed tables in a different way, with tables
    always accessed in the same sequential manner. This should make
    Nettle's GHASH implementation side-channel silent on all
    platforms, but considerably slower on platforms without carry-
    less mul instructions. E.g., benchmarks of the C implementation
    on x86_64 showed a slowdown of 3 times.
  * Fix bug in ecdsa and gostdsa signature verify operation, for
    the unlikely corner case that point addition really is point
    duplication.
  * Fix for chacha on Power7, nettle's assembly used an instruction
    only available on later processors
  * Add support for the SM4 block cipher
  * Add support for the Balloon password hash
  * Add support for SIV-GCM authenticated encryption mode
  * Add support for OCB authenticated encryption mode.
  * New exported functions md5_compress, sha1_compress,
    sha256_compress, sha512_compress
  * multiple performance optimizations
  * Delete all arcfour assembly code. Affects 32-bit x86, 32-bit
    and 64-bit sparc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1686139200">- update to 3.9.1: [bsc#1212112, CVE-2023-36660]
  * Fix bug in the new OCB code may be exploitable for denial of
    service or worse due to memory corruption</changelog>
  <changelog author="pmonreal@suse.com" date="1686225600">- Include the nettle library manual in HTML and PDF formats in
  the devel package.</changelog>
  <changelog author="pmonreal@suse.com" date="1686312000">- Add the architecture specific READMEs as provided by upstream.</changelog>
</package>
<package pkgid="092eafed8542701ad98e9ed14c5cc58269896158272b0534525ebc1128ae8a9034cd834881cc7ff62712d46cc2ac61f1d79279ef5f51e8289ce9e84d8983677b" name="libnewt0_52-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.52.23" rel="slfo.1.1_1.2"/>
  <changelog author="mc@suse.com" date="1506254400">- build python3 subpackage</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups.</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Use current factory dependencies
- Always build python3 bindings
- Small cleanup with spec-clenaer</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Build without py2 if needed
- Fix upstream url</changelog>
  <changelog author="lars@linux-schulserver.de - 0.52.20" date="1553083200">- use new license string compatible with latest spdx.org changes
- ran spec-cleaner
- adjust spec file to be able to build for SLE-12 and below:
  + re-add BuildRoot definition
  + re-add defattr definitions
  + define python2_sitearch if the macro is not defined
- added newt-0.52.20-implicit-pointer-decl.patch to get rid of
  compiler warnings about implicit definitions of functions</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="mpluskal@suse.com" date="1587643200">- Update to version 0.52.21:
  * define env NEWT_NOFLOWCTRL to disable flow control (Robert Gill)
  * don't leak memory on errors in dialogboxes
  * fix radio button selection check in snack
  * fix plural forms in Lithuanian translation (#1568999)
  * fix parallel build (Émeric Dupont)
  * allow python versions to be specified with --with-python option</changelog>
  <changelog author="fvogt@suse.com" date="1591790400">- Split doc build into separate spec file
- As the example scripts are "pointless", just don't install them</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 0.52.23:
  * fix automatic height of menu/list in whiptail (broken in 0.52.22)
  * fix automatic width of whiptail --yesno box
  * fix automatic width in whiptail with unicode characters
  * fix automatic width with whiptail --noitem and --notags options
  * fix spacing with longer tags in whiptail
  * avoid overlapping backtitle in whiptail with automatic height
  * fix crash in whiptail with new libpopt
  * switch from usleep to nanosleep (Rosen Penev)
  * fix libnewt.pc to enable static linking (Alexey Sheplyakov)
  * fix LDFLAGS order in snack linking (Sam James)
  * use CFLAGS when compiling snack
  * improve configure.ac (Thomas Kuehne)
  * install header and libnewt.pc with shared library (Michael Olbrich)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="33ccf89d29ed8cf797a5076ea1c60be0dcd751b56032d9a8d824c5861b1e0eaf38f876afe1c3650b5745db0b8c1517923114e2d74f551aeacf0a4c0fc841b4b6" name="libnfnetlink-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1325332800">- Update to new git snapshot 1.0.0+git28
  * build updates, license update</changelog>
  <changelog author="cfarrell@suse.com" date="1328875200">- license update: GPL-2.0
  Look at e.g. src/iftable.c - please check if GPL-3.0 applications require
  this library</changelog>
  <changelog author="jengelh@inai.de" date="1346414400">- Update to new git snapshot 1.0.0+git35
  * Fix incomplete retrieval of the interface list,
  which causes conntrackd to not operate as desired
  (http://marc.info/?l=netfilter&amp;m=134458290414850&amp;w=2 )</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.1
  (no changes over 1.0.0+git35, this is just the official release)</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1649246400">- Update to release 1.0.2
  * Resolved Valgrind warnings due to uninitialized padding in
    netlink messages.</changelog>
</package>
<package pkgid="52c76980b0c020cd3ff0a78cba49a6d55e28257f9572ff8f636120c1c8e2c270d91c100f62331873539c2039f8f6808564f31740aeb25365901176876b43a8b7" name="libnfnetlink0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@medozas.de" date="1325332800">- Update to new git snapshot 1.0.0+git28
  * build updates, license update</changelog>
  <changelog author="cfarrell@suse.com" date="1328875200">- license update: GPL-2.0
  Look at e.g. src/iftable.c - please check if GPL-3.0 applications require
  this library</changelog>
  <changelog author="jengelh@inai.de" date="1346414400">- Update to new git snapshot 1.0.0+git35
  * Fix incomplete retrieval of the interface list,
  which causes conntrackd to not operate as desired
  (http://marc.info/?l=netfilter&amp;m=134458290414850&amp;w=2 )</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.1
  (no changes over 1.0.0+git35, this is just the official release)</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1649246400">- Update to release 1.0.2
  * Resolved Valgrind warnings due to uninitialized padding in
    netlink messages.</changelog>
</package>
<package pkgid="134a0e654a85db5c953e2fe82794633ab4568901ab011075e79f4ea2083f19f161b67e66bdc13f34f913e31a54443899e682195ad7c162f9ba4b56b21a9df153" name="libnfs-debugsource" arch="aarch64">
  <version epoch="0" ver="5.0.2" rel="slfo.1.1_1.2"/>
  <changelog author="zaitor@opensuse.org" date="1461326400">- Inital packaging, version 1.10.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1469275200">- Obsolete libnfs from PMBS</changelog>
  <changelog author="olaf@aepfle.de" date="1470571200">- Add also Release to really obsolete libnfs</changelog>
  <changelog author="zaitor@opensuse.org" date="1489147200">- Update to version 1.11.0:
  + Reduce the number of memory allocations in the ZDR layer.
  + Check both seconds and nanoseconds field when validating dir
    cache.
  + Invalidate the dir cache immediately if we do something that
    would cause it to become stale, such as adding/removing objects
    from the cache.
  + Add options to enable/disable dir caching.
  + Discard readahead cache on [p]write and truncate.
  + Android fixes.
  + Windows fixes.
  + Support timeouts for sync functions.
  + Add an internal pagecache.
  + Add nfs_rewinddir(), nfs_seekdir() and nfs_telldir().
  + Fix crash in nfs_truncate().
  + Fix segfault that can trigger if we rpc_disconnect() during the
    mount.
  + Add support to bind to a specific interface (linux only).
- Pass --disable-werror to configure, needed after glibc 2.25
  update.</changelog>
  <changelog author="zaitor@opensuse.org" date="1508241600">- Update to version 2.0.0:
  + Bug fixes:
  - Fix NULL pointer crash in nfs_link().
  - Clamp read/write size for servers (Ganesha) that offer very
    large io sizes instead of failing to connect to the export.
  - Tell the server to commit all data to stable storage when we
    close files.
  - Double free fix: don't call rpc_free_pdu() after
    rpc_queue_pdu() failure.
  - Fix for memory leak in rpc_allocate_*().
  - Abort the mount process correctly if MOUNT/MNT returns error
    or is cancelled.
  - Fix memory leak in error path in nfs_create_2_cb().
  - Fix leak of rpc-&gt;inbuf if we destroy the context while we
    have still PDUs in flight.
  + New features:
  - Add O_NOFOLLOW support for nfs_open().
  - Add a new mkdir2 command that also takes a mode argument.
  - Add a new readlink2 command that avoids having to preallocate
    the buffer.
  - Add support for RPC timeouts for both the sync and async
    interfaces.
  - Use SOCK_CLOEXEC for the sockets.
  - Make rpc_set{g|u}id() public.
  - Performance optimization: socket: Batch pdu read in
    rpc_read_from_socket.
  - Low level support for NFSv4 some and examples.
  - Support for building RPC servers.
- Bump soname to 11 following upstream changes.
- Stop passing disable-werror to configure, no longer needed.</changelog>
  <changelog author="aloisio@gmx.com" date="1541678400">- Update to version 3.0.0
  * NFSv4 support.
  * lockf() support (NFSv4 only).
  * fcntl() support for locking (NFSv4 only).
  * Add CMake support.
  * URL arguments to select NFS version.
  * URL argument to set nfsport. This allows NFSv4 to work for
    servers without portmapper support.
  * URL argument to set he mount port.
  * NFSv4: use getpwnam to map NFSv4 (Ganesha) when passing
    uid/gid as a user/group name insead of as a uid/gid.
  * Added nfs-fh: a simle utility to print the filehandle for a
    nfs file.
  * Add a new open2() function that takes a mode argument.
  * Add a testsuite for libnfs.
- Spec cleanup</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 4.0.0:
  + Fix the versioning in makerpms.sh.
  + Fix some compile issues in the test programs.
  + NFSv3: skip commit on close if the file has not been written
    to.
  + Add nfs_umount() to NFSv3.
  + Add nfs_statvfs64().
  + Fix invalid shift of pid_t when generating rpc-&gt;xid.
  + Compile fixes for Mac OSX.
  + Fix for dup2() on Windows.
  + NFSv4 fix for directory handling.
  + Improvements to configure/building.
- Bump sover to 13 following upstream.
- Use modern macros.
- Pass explicit --enable-utils to configure, ensure we build the
  utils.</changelog>
  <changelog author="info@paolostivanin.com" date="1652097600">- Update to version 5.0.1:
  * Multithread support for Linux and Windows
  * Fix NFS4 behavior of chmod/chown/utimes
  * Add marshalling / unmarshalling of various NFSv4.1 structures (but not 4.1 support)
  * PS3 support
  * PS2 EE support
  * Support escaped characters in the URL</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.0.2:
  * Various small multithreading fixes
  * Add opaque pointer to service_proc to make it easier to build server apps.
  * BSD compile fix
  * OpenBSD support
  * fix double free in nfs3_pread_mcb()</changelog>
</package>
<package pkgid="15dba35fb92c54688092ab40f08b74ceb8d3ffb11ff8f5cd36773acba4c011c007be024c8a041db34b0cf2fb83a5ebc8c064499fdae93503479847a8ceb94a60" name="libnfs14-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.0.2" rel="slfo.1.1_1.2"/>
  <changelog author="zaitor@opensuse.org" date="1461326400">- Inital packaging, version 1.10.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1469275200">- Obsolete libnfs from PMBS</changelog>
  <changelog author="olaf@aepfle.de" date="1470571200">- Add also Release to really obsolete libnfs</changelog>
  <changelog author="zaitor@opensuse.org" date="1489147200">- Update to version 1.11.0:
  + Reduce the number of memory allocations in the ZDR layer.
  + Check both seconds and nanoseconds field when validating dir
    cache.
  + Invalidate the dir cache immediately if we do something that
    would cause it to become stale, such as adding/removing objects
    from the cache.
  + Add options to enable/disable dir caching.
  + Discard readahead cache on [p]write and truncate.
  + Android fixes.
  + Windows fixes.
  + Support timeouts for sync functions.
  + Add an internal pagecache.
  + Add nfs_rewinddir(), nfs_seekdir() and nfs_telldir().
  + Fix crash in nfs_truncate().
  + Fix segfault that can trigger if we rpc_disconnect() during the
    mount.
  + Add support to bind to a specific interface (linux only).
- Pass --disable-werror to configure, needed after glibc 2.25
  update.</changelog>
  <changelog author="zaitor@opensuse.org" date="1508241600">- Update to version 2.0.0:
  + Bug fixes:
  - Fix NULL pointer crash in nfs_link().
  - Clamp read/write size for servers (Ganesha) that offer very
    large io sizes instead of failing to connect to the export.
  - Tell the server to commit all data to stable storage when we
    close files.
  - Double free fix: don't call rpc_free_pdu() after
    rpc_queue_pdu() failure.
  - Fix for memory leak in rpc_allocate_*().
  - Abort the mount process correctly if MOUNT/MNT returns error
    or is cancelled.
  - Fix memory leak in error path in nfs_create_2_cb().
  - Fix leak of rpc-&gt;inbuf if we destroy the context while we
    have still PDUs in flight.
  + New features:
  - Add O_NOFOLLOW support for nfs_open().
  - Add a new mkdir2 command that also takes a mode argument.
  - Add a new readlink2 command that avoids having to preallocate
    the buffer.
  - Add support for RPC timeouts for both the sync and async
    interfaces.
  - Use SOCK_CLOEXEC for the sockets.
  - Make rpc_set{g|u}id() public.
  - Performance optimization: socket: Batch pdu read in
    rpc_read_from_socket.
  - Low level support for NFSv4 some and examples.
  - Support for building RPC servers.
- Bump soname to 11 following upstream changes.
- Stop passing disable-werror to configure, no longer needed.</changelog>
  <changelog author="aloisio@gmx.com" date="1541678400">- Update to version 3.0.0
  * NFSv4 support.
  * lockf() support (NFSv4 only).
  * fcntl() support for locking (NFSv4 only).
  * Add CMake support.
  * URL arguments to select NFS version.
  * URL argument to set nfsport. This allows NFSv4 to work for
    servers without portmapper support.
  * URL argument to set he mount port.
  * NFSv4: use getpwnam to map NFSv4 (Ganesha) when passing
    uid/gid as a user/group name insead of as a uid/gid.
  * Added nfs-fh: a simle utility to print the filehandle for a
    nfs file.
  * Add a new open2() function that takes a mode argument.
  * Add a testsuite for libnfs.
- Spec cleanup</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 4.0.0:
  + Fix the versioning in makerpms.sh.
  + Fix some compile issues in the test programs.
  + NFSv3: skip commit on close if the file has not been written
    to.
  + Add nfs_umount() to NFSv3.
  + Add nfs_statvfs64().
  + Fix invalid shift of pid_t when generating rpc-&gt;xid.
  + Compile fixes for Mac OSX.
  + Fix for dup2() on Windows.
  + NFSv4 fix for directory handling.
  + Improvements to configure/building.
- Bump sover to 13 following upstream.
- Use modern macros.
- Pass explicit --enable-utils to configure, ensure we build the
  utils.</changelog>
  <changelog author="info@paolostivanin.com" date="1652097600">- Update to version 5.0.1:
  * Multithread support for Linux and Windows
  * Fix NFS4 behavior of chmod/chown/utimes
  * Add marshalling / unmarshalling of various NFSv4.1 structures (but not 4.1 support)
  * PS3 support
  * PS2 EE support
  * Support escaped characters in the URL</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.0.2:
  * Various small multithreading fixes
  * Add opaque pointer to service_proc to make it easier to build server apps.
  * BSD compile fix
  * OpenBSD support
  * fix double free in nfs3_pread_mcb()</changelog>
</package>
<package pkgid="62d93d414988f5f75bb90076fcb8c2d45c4dc83d7dd39d105c81643094e0162b6af106ea20c4c8a8c66604d0f147dab3c6cc43f1949d57aaf10876b50d388bad" name="libnfsidmap1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0" rel="slfo.1.1_1.3"/>
  <changelog author="meissner@suse.com" date="1651924800">- switch to https urls</changelog>
  <changelog author="nfbrown@suse.com" date="1654776000">- 0001-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)
- 0002-Update-autoconfig-files-to-work-with-v2.71.patch
- 0003-autoconf-change-tirpc-to-check-for-a-file-not-for-an.patch
  Update for latest autoconf</changelog>
  <changelog author="nfbrown@suse.com" date="1657540800">- 0004-modprobe-protect-against-sysctl-errors.patch
  0005-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Suppress any errors from /sbin/sysctl, if for example, it isn't
  installed
  (bsc#1200710)</changelog>
  <changelog author="pvorel@suse.cz" date="1660305600">- Update to version 2.6.2
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.2/2.6.2-Changelog
- Remove patches from this release:
  - gcc12-fix.patch
  - 0001-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  - 0002-Update-autoconfig-files-to-work-with-v2.71.patch
  - 0003-autoconf-change-tirpc-to-check-for-a-file-not-for-an.patch
  - 0004-modprobe-protect-against-sysctl-errors.patch
- Refresh nfs-utils-1.0.7-bind-syntax.patch
- Added files:
  - /usr/lib/udev/rules.d/99-nfs.rules
  - /usr/libexec/nfsrahead
  - /usr/sbin/rpcctl
  - /usr/share/man/man5/nfsrahead.5.gz
  - /usr/share/man/man8/rpcctl.8.gz
- Sort man page entries in %files section</changelog>
  <changelog author="nfbrown@suse.com" date="1661515200">- sysconfig.nfs, nfs.conf: allow NFSv4 grace time to be set
  via sysconfig.
  SLE12 allowed this, SLE15 lost the ability.  Add it back
  with the name NFSV4GRACETIME.  Also improve description
  for NFSV4LEASETIME.
  (bsc#1202592)</changelog>
  <changelog author="nfbrown@suse.com" date="1669118400">- Add 0006-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Allow server scope to be set - removes the need to run nfsd
  inside a private UTS namespace for fail-over applications
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="dimstar@opensuse.org" date="1679918400">- Add explicit pkgconfig(libkeyutils) BuildRequires: nfs-utils
  requires this for nfsv4 and we should not rely on the devel
  package being brought in by other deps.</changelog>
  <changelog author="nfbrown@suse.com" date="1680004800">- Add 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0008-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be sed in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="pvorel@suse.cz" date="1681992000">- Update to version 2.6.3
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.3/2.6.3-Changelog
- Remove patches from this release:
  - 0006-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  - 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  - 0008-nfsd.man-fix-typo-in-section-on-scope.patch
- Remove systemd/50-nfs.conf (was removed in upstream in d8d29f85)
  and the realted patch (bsc#1200710).
  0005-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch.
- New file /usr/lib/udev/rules.d/60-nfs.rules (which replaced in upstream
  systemd/50-nfs.conf in 9466df03).
- Add fsidd:
  - /usr/lib/systemd/system/fsidd.service
  - /usr/lib/udev/rules.d/60-nfs.rules
  - /usr/sbin/fsidd</changelog>
</package>
<package pkgid="2270f9ecb0401b9880c243233004564713f762944d742ab1aeeb21a4af995bd39c538a25ead899b4df5c4956d4d008945512cb4c107f8fa4429c8f0bd3c138c9" name="libnftables1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="slfo.1.1_1.6"/>
  <changelog author="jengelh@inai.de" date="1621944000">- Update to release 0.9.9
  * Flowtable hardware offload support
  * Support for the table owner flag.
  * 802.1ad (QinQ) support
  * cgroupsv2 support.
  * match on SCTP packet chunks (dependent on Linux 5.14)
  * Allow to use verdict in set/map typeof definitions</changelog>
  <changelog author="jengelh@inai.de" date="1629374400">- Update to release 1.0.0
  * Catch-all set element support.
  * The command-line option --define is now recognized.
  * Stateful expressions in maps.
  * Allow combination of jhash, symhash and numgen expressions with
    the queue statement.
  * Allow combination of verdict maps with interval concatenations.</changelog>
  <changelog author="jengelh@inai.de" date="1637236800">- Update to release 1.0.1
  * Reduce memory footprint when loading large sets/maps.
  * Speed up reload of large sets/maps.
  * Speed up listing of specific tables in large ruleset, e.g.
    large ruleset with ~100k lines.
  * Speed up --terse option when listing a ruleset large sets/maps.
  * Print raw payload expression in hexadecimal, e.g.
    "@ll,0,8 &amp; 0x80 == 0x80"
  * egress hook support (available since 5.16-rc1).
  * Allow matching and update bytes at inner header/payload
    offset (available since 5.16-rc1).</changelog>
  <changelog author="jengelh@inai.de" date="1645531200">- Update to release 1.0.2
  * New ruleset optimization -o/--optimize option.
  * Support for IP and TCP options and SCTP chunks in sets.
  * Support for tcp fastopen, md5sig and mptcp options.
  * MP-TCP subtype matching support.
  * JSON support for flowtables.
- Add 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch</changelog>
  <changelog author="jengelh@inai.de" date="1653998400">- Update to release 1.0.3
  * Support for wildcard interface name matching with sets
  * Support for runtime auto-merge of set elements.
  * Enhancements for the ruleset optimization -o/--optimize
    option which allows to coalesce several NAT rules into map.
  * Support for raw expressions in concatenations.
  * Support for integer type protocol header fields in concatenations.
  * Allow to reset TCP options (requires Linux kernel &gt;= 5.18)
- Drop 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch</changelog>
  <changelog author="jengelh@inai.de" date="1654603200">- Update to release 1.0.4
  * Fixed a segfault in -o/--optimize with unsupported statements.
  * Bogus datatype mismatch error report in sets was fixed.</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 1.0.5:
  * Fixes for the -o/--optimize, run this --optimize option to automagically
    compact your ruleset using sets, maps and concatenations
  * Fix ethernet and vlan concatenations, eg. define a dynamic set which
    is populated from the packet path
  * Fix ruleset listing with interface wildcard map
  * Fix several regressions in the input lexer which broke valid rulesets.
  * Fix slowdown with large lists of singleton interval elements.
  * Fix set automerge feature for large lists of singleton interval elements.
  * Fix bogus error reporting for exact overlaps.
  * Fix segfault when adding elements to invalid set.
  * fix device parsing in netdev family in json.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Update to release 1.0.6
  * Fix bytecode generation for concatenation of intervals where
    selectors use different byteorder datatypes, e.g. IPv4
    (network byte order).
  * Fix match of uncommon protocol matches with raw expressions
  * Unbreak insertion of rules with intervals ("sport {
    3478-3497, 16384-16387 }")</changelog>
  <changelog author="jengelh@inai.de" date="1678708800">- Update to release 1.0.7
  * Support for vxlan/geneve/gre/gretap matching
  * auto-merge support for partial set element deletion
  * Allow for NAT mapping with concatenation and ranges
  * Support for quota in sets</changelog>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 1.0.8
  * Support for setting meta and ct mark from other fields in
    rules, e.g. set meta mark to ip dscp header field.
  * Enhacements for -o/--optimize to deal with NAT statements, to
    compact masquerade statements.
  * Support for stateful statements in anonymous maps, such as
    counters.
  * Support for resetting stateful expressions in sets, maps and
    elements, e.g. counters.
  * broute support to short-circuit bridge logic from the bridge
    prerouting hook and pass up packets to the local IP stack.
  * JSON support for table and chain comments.
- Added 0001-Revert-py-replace-distutils-with-setuptools.patch</changelog>
</package>
<package pkgid="05d06f367f9977c2bdabb40cbd9ed946e0a5c33f982a23b57ce43b6248fd1f859c5e9a2aa24fb19df2d91626c7ca5103690ac6181b677838704d30e6963ba315" name="libnftnl-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.1.7
  * udata: add NFTNL_UDATA_SET_DATA_INTERVAL</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 1.1.8
  * libnftnl: export nftnl_set_elem_fprintf
  * examples: add support for NF_PROTO_INET family
  * table: add userdata support
  * object: add userdata and comment support
  * chain: add userdata and comment support
  * src: add support for chain ID attribute</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.1.9
  * Improve formatting of registers in bitwise dumps.</changelog>
  <changelog author="jengelh@inai.de" date="1621944000">- Update to release 1.2.0
  * table: add table owner support
  * expr: socket: add cgroups v2 support</changelog>
  <changelog author="jengelh@inai.de" date="1637236800">- Update to release 1.2.1
  * expr: add last match time support
  * expr: missing netlink attribute in last expression</changelog>
  <changelog author="jengelh@inai.de" date="1654603200">- Update to release 1.2.2
  * exthdr: tcp option reset support</changelog>
  <changelog author="jengelh@inai.de" date="1660046400">- Update to release 1.2.3
  * This release includes a compile time bugfix with clang and
  - D_FORTIFY_SOURCE=2.</changelog>
  <changelog author="jengelh@inai.de" date="1668081600">- Update to release 1.2.4
  * rule, set_elem: remove trailing \n in userdata snprintf
  * libnftnl: Fix res_id byte order</changelog>
  <changelog author="jengelh@inai.de" date="1678363200">- Update to release 1.2.5
  * expr: add inner support</changelog>
  <changelog author="jengelh@inai.de" date="1689076800">- Update to release 1.2.6
  * expr: meta: introduce broute meta expression</changelog>
</package>
<package pkgid="37b389745ae99335bf860dde95c673fb6dfebfb55ceb7943010080c164ae6022754c3872517e1601c890190ebd3180ba0de47fe631a88cf672be94fdc6151da2" name="libnftnl11-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.1.7
  * udata: add NFTNL_UDATA_SET_DATA_INTERVAL</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 1.1.8
  * libnftnl: export nftnl_set_elem_fprintf
  * examples: add support for NF_PROTO_INET family
  * table: add userdata support
  * object: add userdata and comment support
  * chain: add userdata and comment support
  * src: add support for chain ID attribute</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.1.9
  * Improve formatting of registers in bitwise dumps.</changelog>
  <changelog author="jengelh@inai.de" date="1621944000">- Update to release 1.2.0
  * table: add table owner support
  * expr: socket: add cgroups v2 support</changelog>
  <changelog author="jengelh@inai.de" date="1637236800">- Update to release 1.2.1
  * expr: add last match time support
  * expr: missing netlink attribute in last expression</changelog>
  <changelog author="jengelh@inai.de" date="1654603200">- Update to release 1.2.2
  * exthdr: tcp option reset support</changelog>
  <changelog author="jengelh@inai.de" date="1660046400">- Update to release 1.2.3
  * This release includes a compile time bugfix with clang and
  - D_FORTIFY_SOURCE=2.</changelog>
  <changelog author="jengelh@inai.de" date="1668081600">- Update to release 1.2.4
  * rule, set_elem: remove trailing \n in userdata snprintf
  * libnftnl: Fix res_id byte order</changelog>
  <changelog author="jengelh@inai.de" date="1678363200">- Update to release 1.2.5
  * expr: add inner support</changelog>
  <changelog author="jengelh@inai.de" date="1689076800">- Update to release 1.2.6
  * expr: meta: introduce broute meta expression</changelog>
</package>
<package pkgid="f3daf6e1ef9904d83ef3cdf7d09d9406f6b849636395631cc491e9a397f5483e48e1956b1929f1a56b22b623a34faaecbaf17b0ed3cae99688b786835331a4ba" name="libnghttp2-14-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.52.0" rel="slfo.1.1_1.4"/>
  <changelog author="dmueller@suse.com" date="1639828800">- update to 1.46.0:
  * see https://nghttp2.org/blog/2021/07/18/nghttp2-v1-44-0/
  * see https://nghttp2.org/blog/2021/09/20/nghttp2-v1-45-0/
  * see https://nghttp2.org/blog/2021/10/19/nghttp2-v1-46-0/</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 1.47.0:
  * see https://nghttp2.org/blog/2022/02/23/nghttp2-v1-47-0/</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 1.48.0:
  * lib: Allow server to override RFC 9218 stream priority
  * lib: Add a server option to fallback to RFC 7540 priorities
  * lib: Add PRIORITY_UPDATE frame support
  * lib: Implement RFC 9218 extensible prioritization scheme
  * lib: Do not verify host field specific characters for response field
  * lib: No rfc7540 priorities
  * lib: Fix stream stall when initial window size is decreased
  * doc: Document how to change stream prioritization scheme
  * build: Compile with libressl 3.5
  * build: EXTRA_DIST: List mruby files explicitly
  * build: Bump ngtcp2 and nghttp3
  * build: Do not check application libraries if --enable-lib-only is given
  * src: Update default TLS cipher suites
  * nghttpx, h2load: Better pack UDP packets in one GSO write
  * nghttpx, h2load: Quic error handling
  * nghttpx, h2load: Fix QUIC performance regression
  * nghttp, nghttpd, nghttpx: Add ktls support
  * h2load: Send more packets without GSO per event loop
  * h2load: Add ktls support
  * nghttpd: Fix TLS read stall
  * nghttpx: Disable RFC 7540 priorities
  * nghttpx: Client always uses simpler TLS handshake
  * nghttpx: Add affinity-cookie-stickiness backend parameter
  * nghttpx: Fix broken session affinity
  * nghttpx: Limit CONNECTION_CLOSE and Retry under server amplification limit
  * integration: Go update
  * integration: Add go.mod
  * third-party: Bump llhttp to 75b45129db961e1fb3c56044e1b8f7721bfaee5d
  * third-party: Bump libbpf to v0.8.0
  * third-party: Bump mruby to 3.1.0
  * third-party: Bump neverbleed based on the latest head (GH-1708)</changelog>
  <changelog author="dmueller@suse.com" date="1661169600">- update to 1.49.0:
  * https://nghttp2.org/blog/2022/08/22/nghttp2-v1-49-0/</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- disable asio by default as it is deprecated by upstream and
  will be removed in the next release</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 1.50.0:
  * https://nghttp2.org/blog/2022/09/21/nghttp2-v1-50-0/
  This release adds
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation which disables
  checking leading and trailing white spaces against HTTP field value.</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 1.51.0:
  * https://nghttp2.org/blog/2022/11/13/nghttp2-v1-51-0/
  This release fixes affinity-cookie-stickiness parameter handling.</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- update to 1.52.0:
  * https://nghttp2.org/blog/2023/02/13/nghttp2-v1-52-0/
  * sphinx_rtd_theme has been removed from the repository
    and archive.
  * The deprecated Python bindings has been removed.
  * The deprecated libnghttp2_asio has been removed.
  * llhttp and neverbleed have been updated.
  * This release fixes the bug that stalls TLS connection.
  * This release adds more http3 integration tests.
- drop nghttp2-remove-python-build.patch: obsolete as the code got removed</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712232000">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
</package>
<package pkgid="88412566778acfc9408e39c2d671bbfc0278648aaf8ea6f07d5e2cc63ccf4759e8c9354cf671dfa0cc61d15e38ee55ce64ccdd715403a146a70e3e5a36b7f266" name="libnl3-200-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 3.2.29
  * nl-addr: avoid read-out-of-bound in nl_addr_fill_sockaddr()
  * lib: add utility function nl_strerror_l()
  * lib/route: allow override of message type during link change
  * lib/route: set IFLA_PROTINFO attribute in request message
  * lib/route: Add port state translation functions
  * lib/route: Extend Bridge Flags
  * lib/route: Allow override of IFLA_AF_SPEC nesting
  * lib/route: Support IFLA_BRIDGE_MODE
  * macvlan: add support for "source" mode
  * macvlan: adjust types and merge MACVLAN_HAS_MACCOUNT and
  MACVLAN_HAS_MACDATA
  * vxlan: add support for additional VXLAN attributes
  * lib/route: SRIOV Parse, Read, Clone support
  * Add PPP support
  * route/act: add gact tc action
  * link: add support for IFLA_CARRIER_CHANGES, IFLA_PHYS_PORT_NAME,
  IFLA_PHYS_SWITCH_ID, IFLA_GSO_MAX_SEGS and IFLA_GSO_MAX_SIZE</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Add nla-reserve.diff [boo#1020123]</changelog>
  <changelog author="jengelh@inai.de" date="1489752000">- Update to new upstream release 3.3.0~rc1
  * sriov: fix crash in rtnl_link_sriov_parse_vflist
  * sriov: avoid buffer overrun in rtnl_link_sriov_parse_vflist()
  * use O_CLOEXEC
  * lib/attr.c: check for valid length argument in nla_reserve()
  * route: neigh: use NDA_MASTER for neigh-&gt;n_master if available
  * xfrm: allow quering optional arguments from xfrmnl_sp_get_sec_ctx()
- Drop nla-reverse.diff (included upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1496836800">- Update to final release 3.3.0
  * No changes</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Update to new upstream release 3.4.0 [boo#1082756]
  * route/link: add accessor API for IPv6 flags
  * Provide accessors for actions (rtnl_act).
  * rule: Add support for l3mdev in FIB rules
  * addr: add AF_VSOCK to translation table
  * addr: Add support for AF_MPLS
  * route: Add support for MPLS address family
  * route: Add support for TTL propagation in MPLS routes
  * route: Add support for lwtunnel and MPLS  encapsulations</changelog>
  <changelog author="jengelh@inai.de" date="1576756800">- Update to release 3.5.0
  * route/qdisc: add 64-bit rate/ceil support for htb class
  * xfrmi: introduce XFRM interfaces support
  * xfrm: fix memory corruption (dangling pointer) when when
    setting xfrmnl_sa
  * route/link: avoid dangling pointer in rtnl_link_set_slave_type()
  * nla_ok: fix overrun in attribute iteration.
  * route:act: add vlan action
  * route:tc: allow to set chain index for tc objects
  * route:qdisc: add MQPRIO Qdisc
  * if_tunnel: update IFLA defines up to FWMARK
  * Add support for cloning cgroup filter objects
  * neigh: cache updates as well query AF_BRIDGE neigh
  * route:cls: add matchall classifier
  * neigh: support bridge entries for vxlan interfaces
  * rule: add support for protocol and port ranges
  * link: add Geneve support</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1629720000">- Add 0001-route-link-add-RTNL_LINK_REASM_OVERLAPS-stat.patch
  [boo#1189451]</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Update to release 3.6.0
  * route/mdb: add support for MAC multicast entries
  * mdb: support bridge multicast database notification
  * Support Hardware offload capability for MACsec
  * nflog: add CT support
  * Add IPv6 GRE support
  * Add IPv6 VTI support
  * Add support for team devices
- Drop 0001-route-link-add-RTNL_LINK_REASM_OVERLAPS-stat.patch
  (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1657108800">- Update to release 3.7
  * route/mdb: fix buffer overflow in mdb_msg_parser()
  * route/act: add NAT action</changelog>
</package>
<package pkgid="1ec6c7ff6269a856b579855a84a7cb3cdea83e29a3b06cf2e19477dfe5e943bc0842f32f6ce6673152e63680a99972781ce53b14c2692bad49b19cdc401adf18" name="libnl3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 3.2.29
  * nl-addr: avoid read-out-of-bound in nl_addr_fill_sockaddr()
  * lib: add utility function nl_strerror_l()
  * lib/route: allow override of message type during link change
  * lib/route: set IFLA_PROTINFO attribute in request message
  * lib/route: Add port state translation functions
  * lib/route: Extend Bridge Flags
  * lib/route: Allow override of IFLA_AF_SPEC nesting
  * lib/route: Support IFLA_BRIDGE_MODE
  * macvlan: add support for "source" mode
  * macvlan: adjust types and merge MACVLAN_HAS_MACCOUNT and
  MACVLAN_HAS_MACDATA
  * vxlan: add support for additional VXLAN attributes
  * lib/route: SRIOV Parse, Read, Clone support
  * Add PPP support
  * route/act: add gact tc action
  * link: add support for IFLA_CARRIER_CHANGES, IFLA_PHYS_PORT_NAME,
  IFLA_PHYS_SWITCH_ID, IFLA_GSO_MAX_SEGS and IFLA_GSO_MAX_SIZE</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Add nla-reserve.diff [boo#1020123]</changelog>
  <changelog author="jengelh@inai.de" date="1489752000">- Update to new upstream release 3.3.0~rc1
  * sriov: fix crash in rtnl_link_sriov_parse_vflist
  * sriov: avoid buffer overrun in rtnl_link_sriov_parse_vflist()
  * use O_CLOEXEC
  * lib/attr.c: check for valid length argument in nla_reserve()
  * route: neigh: use NDA_MASTER for neigh-&gt;n_master if available
  * xfrm: allow quering optional arguments from xfrmnl_sp_get_sec_ctx()
- Drop nla-reverse.diff (included upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1496836800">- Update to final release 3.3.0
  * No changes</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Update to new upstream release 3.4.0 [boo#1082756]
  * route/link: add accessor API for IPv6 flags
  * Provide accessors for actions (rtnl_act).
  * rule: Add support for l3mdev in FIB rules
  * addr: add AF_VSOCK to translation table
  * addr: Add support for AF_MPLS
  * route: Add support for MPLS address family
  * route: Add support for TTL propagation in MPLS routes
  * route: Add support for lwtunnel and MPLS  encapsulations</changelog>
  <changelog author="jengelh@inai.de" date="1576756800">- Update to release 3.5.0
  * route/qdisc: add 64-bit rate/ceil support for htb class
  * xfrmi: introduce XFRM interfaces support
  * xfrm: fix memory corruption (dangling pointer) when when
    setting xfrmnl_sa
  * route/link: avoid dangling pointer in rtnl_link_set_slave_type()
  * nla_ok: fix overrun in attribute iteration.
  * route:act: add vlan action
  * route:tc: allow to set chain index for tc objects
  * route:qdisc: add MQPRIO Qdisc
  * if_tunnel: update IFLA defines up to FWMARK
  * Add support for cloning cgroup filter objects
  * neigh: cache updates as well query AF_BRIDGE neigh
  * route:cls: add matchall classifier
  * neigh: support bridge entries for vxlan interfaces
  * rule: add support for protocol and port ranges
  * link: add Geneve support</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1629720000">- Add 0001-route-link-add-RTNL_LINK_REASM_OVERLAPS-stat.patch
  [boo#1189451]</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Update to release 3.6.0
  * route/mdb: add support for MAC multicast entries
  * mdb: support bridge multicast database notification
  * Support Hardware offload capability for MACsec
  * nflog: add CT support
  * Add IPv6 GRE support
  * Add IPv6 VTI support
  * Add support for team devices
- Drop 0001-route-link-add-RTNL_LINK_REASM_OVERLAPS-stat.patch
  (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1657108800">- Update to release 3.7
  * route/mdb: fix buffer overflow in mdb_msg_parser()
  * route/act: add NAT action</changelog>
</package>
<package pkgid="28ff1e9df35a686ec96da0a46f5de7b1fead29fe65de9e00a67d6a98c3b8329d56cd3c2517f80760e1749ca8c451c8fe4c98e77ffe3a8b57a40e546358d5f0c2" name="libnm0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.42.6" rel="slfo.1.1_2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1671537600">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
</package>
<package pkgid="4b2e7cc065dec454ca1b348d488464c5131c315e8a13565f5593c4754f5f73a84df63721c80e93f939a0de7a5f5488381dbad932b9ef9df98555906a7c19adad" name="libnpth0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6" rel="slfo.1.1_1.2"/>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1411300800">- npth 1.0:
  * improvements to the build system
  * restore sigmask at fork
- spec file cleanup:
  * gpg-offline covered by source_validator
  * use source URLs</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414929600">- npth 1.1:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- npth 1.2:
  * Fix possible clobbering of ERRNO.</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- update to 1.3:
  * Bypass npth_protect/npth_unprotect iff the library has not yet
    been initialized.
  * Improve detection of clock_gettime
- use reproducible build timestamp</changelog>
  <changelog author="astieger@suse.com" date="1494936000">- update to 1.4:
  * fixes for platforms other than GNU/Linux
  * New function npth_is_protected to help debugging.
  * Change license from LGPLv3+/GPLv2+ to LGPLv2+.
- run tests
- update signing keyring
- package license text and other information</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- update to 1.5:
  * Fix the busy waiting emulation of pthread_mutex_timedlock for
    Unices lacking that function</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1531742400">- Update to 1.6:
  * Fix library requirements for HPUX.</changelog>
  <changelog author="jengelh@inai.de" date="1599220800">- Remove old specfile constructs and doubleshipping of docs.</changelog>
</package>
<package pkgid="b7c43d25401853bdc0ba8023122fd05168fe6135bcd310c6049ac7c4c50e40b60764e31e70daab6a3804dfab20e7ca9c4a7f00c457ebcba88eb8397438a0d388" name="libnscd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.2" rel="slfo.1.1_1.2"/>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="crrodriguez@suse.de" date="1241697600">- disable static libraries</changelog>
  <changelog author="jengelh@medozas.de" date="1260792000">- add baselibs.conf as a source</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1328616000">- put library back into %{_libdir} , /usr merge.</changelog>
  <changelog author="jengelh@inai.de" date="1373112000">- Implement shlib package naming guidelines
- Remove redundant %clean section</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes in baselibs.conf</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Drop ineffective --with-pic. Replace old RPM macros by new
  constructs. The package summary was updated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="9e3d2bdd27d19213a03a398d78d23fff54a872d34d200803c43338592307f783e38e0c56e364b352e533993ef3362f9847c1de9691cfd5c9d159d992c40f930f" name="libnscd1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.2" rel="slfo.1.1_1.2"/>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="crrodriguez@suse.de" date="1241697600">- disable static libraries</changelog>
  <changelog author="jengelh@medozas.de" date="1260792000">- add baselibs.conf as a source</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1328616000">- put library back into %{_libdir} , /usr merge.</changelog>
  <changelog author="jengelh@inai.de" date="1373112000">- Implement shlib package naming guidelines
- Remove redundant %clean section</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes in baselibs.conf</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Drop ineffective --with-pic. Replace old RPM macros by new
  constructs. The package summary was updated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="f16248ab14a76246de60531dc9eff4d529aa8edbd7cdb784d6709542bee0b30356087e7b4e2c3a9293a1b8754e447a644ef2ac823731d80fac9463d8193ea358" name="libnss_usrfiles-debugsource" arch="aarch64">
  <version epoch="0" ver="2.27" rel="slfo.1.1_1.3"/>
  <changelog author="kukuk@suse.com" date="1490011200">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1490097600">- Filter out GLIBC_PRIVATE</changelog>
  <changelog author="kukuk@suse.de" date="1490184000">- Move Requires to correct sub-package</changelog>
  <changelog author="kukuk@suse.de" date="1490616000">- Add docu and /usr/etc as directory
- Adjust nsswitch.conf on openSUSE, too</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- RPM group correction</changelog>
  <changelog author="kukuk@suse.de" date="1515412800">- The default nsswitch.conf has changed again back to the old
  values [bsc#1074515]</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1549108800">- Update to version 2.27
  - Sync with glibc 2.27 source code
  - Add support for alias, ethers, protocols, services and rpc
- Add usrfiles to /etc/nsswitch.conf only on first installation,
  remove it during de-installation.</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove post %install section to make it generic useable</changelog>
  <changelog author="kukuk@suse.com" date="1632916800">- Install into _libdir [bsc#1191070]</changelog>
</package>
<package pkgid="66a9bfbcb3a090e84b34e58da7f69c044f853481b202df846ddf9d180e7a7ef29cb93607d64f6f2fb5bdd35868be79bb535334773e3a0e6ad48df234187d4f24" name="libnss_usrfiles2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.27" rel="slfo.1.1_1.3"/>
  <changelog author="kukuk@suse.com" date="1490011200">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1490097600">- Filter out GLIBC_PRIVATE</changelog>
  <changelog author="kukuk@suse.de" date="1490184000">- Move Requires to correct sub-package</changelog>
  <changelog author="kukuk@suse.de" date="1490616000">- Add docu and /usr/etc as directory
- Adjust nsswitch.conf on openSUSE, too</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- RPM group correction</changelog>
  <changelog author="kukuk@suse.de" date="1515412800">- The default nsswitch.conf has changed again back to the old
  values [bsc#1074515]</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1549108800">- Update to version 2.27
  - Sync with glibc 2.27 source code
  - Add support for alias, ethers, protocols, services and rpc
- Add usrfiles to /etc/nsswitch.conf only on first installation,
  remove it during de-installation.</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove post %install section to make it generic useable</changelog>
  <changelog author="kukuk@suse.com" date="1632916800">- Install into _libdir [bsc#1191070]</changelog>
</package>
<package pkgid="894ee4846437100ba8c0a360b81bb74f8860c388431dffc88119046763982b6117190404763438eef900f808ede41c10b8716c902fb8c19de835307be33d974e" name="libnuma1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.18.0.g3871b1c" rel="slfo.1.1_1.2"/>
  <changelog author="trenn@suse.de" date="1626696000">- Update to version 2.0.14.17.g498385e:
  * numactl.c: fix use after free
  * sysfs.c: prevent mem leak in sysfs_node_read()
  * sysfs.c: don't leak fd if fail in sysfs_read()
  * shm.c: fix memleak in verify_shm()
  * shm.c: fix memleak in dump_shm()
  * fix description for numa_node_size64 in man as well
  * fix numa_node_size definition in manpage numa.3
  * link with -latomic if needed
  * libnuma: make numa_police_memory() free of race
  * numademo: Use first two nodes instead of node 0 and 1
- Enhance _service magic
- Enable automake</changelog>
  <changelog author="trenn@suse.de" date="1630497600">- Update to version 2.0.14.20.g4ee5e0c:
  * Fix system call numbers on s390x
  * numactl.c: fixed debug verify for --preferred option
  * numactl.c: Fixed description for the usage of numactl</changelog>
  <changelog author="moritz.kodytek@suse.com" date="1652184000">- Update to version 2.0.14.39.g8b18345:
  * numa(3): Fix typos and punctuation
  * Avoid libnuma.so dependency on util.o
  * test/prefered: add test cases for new 'preferred-many' policy
  * test/prefered: fix compiling problem
  * numa(3): Update the man page
  * Update to support multiple nodes
  * numademo: Add a new test for multiple-preferred-nodes policy
  * numactl: Simplify preferred selection
  * libnuma: Export interface to set/get preferred nodes
  * util: Add new preferred-many type</changelog>
  <changelog author="trenn@suse.de" date="1662724800">- Update to version 2.0.15.0.g01a39cb:
  * Create codeql.yml
  * Create makefile.yml
  * Fix crash when memhog uses local policy
  * Fix memhog uses the wrong policy but still works properly
  * Fix the example usage in the man manual.
  * fix memory and file handle leaks
  * Do not reuse variable names in subscopes and delete useless blank lines
  * Delete unused header files
  * Limit the scope of function
  * avoid declaring a global variable
  * Fix build error on riscv64 by linking libatomic</changelog>
  <changelog author="trenn@suse.de" date="1673179200">- jsc#PED-3367
- Remove unneeded defattr(root,root) statements from spec file from dmueller
- Replace deletion of *.la files with a more general version from dmueller
- Update to version 2.0.16.14.gc09fefd:
  * numactl.c: Remove unused variable
  * shm.c: Replace stat64/fstat64/ftruncate64mmap64 with normal functions
  * configure: Check for largefile support
  * numastat: Update system hugepages memory info from sysfs/node/hugepages directory
  * numastat: statistical errors occur when huge pages is used
  * fix wrong nodemask_sz when CONFIG_NODES_SHIFT is less than 5
  * libnuma: clear errno at the end of numa_init
  * numastat: Add SwapCached to list of known fields in meminfo
  * numastat: Add SecPageTables to list of known fields in meminfo
  * numastat: Add ShadowCallStack to list of known fields in meminfo
  * numastat: Add FileHugePages/FilePmdMapped to list of known fields in meminfo
  * numactl: 'numactl --length=xxx --shm xxx -px' doesn't work
  * numactl: Fix shm verfiy for preferred policy
  * link with -latomic if needed (again ...)
  * Release numactl 2.0.16
  * add cut-release github workflow (#142)
  * when preferred_many is not supported, fall back to preferred will report error.
  * fix the memory leak of numa_preferred api
  * build: Refactor autotools setup to store version in separate file
  * Revert "numademo: fix error on 32bit system"</changelog>
  <changelog author="trenn@suse.de" date="1682424000">- Update to version 2.0.16.21.g693fee1:
  * fix typo
  * Add fuzzer for OSS-Fuzz integration
  * numactl.c: Fix merging of neighboring pages' policies in dump_shm
  * memhog: Update memhog usage
  * feat: Add minimum permissions to makefile.yml
  * feat: Add minimum permissions to cut-release.yml
  * feat: Add minimum permissions to codeql.yml</changelog>
  <changelog author="trenn@suse.de" date="1706616000">- Update to version 2.0.17.4.g63befa8:
  * Fix CodeQl Warn: Wrong type of arguments to formatting function
  * libnuma: Fix incorrect print and exit of numa_preferred/_many APIs
  * libnuma: Fix unexpected output
  * Fix README.md
  * Increase version number
  * Fix build badge
  * Fix README.md
  * Update README.md
  * Add configure file for release
  * Fix unused function return warning in numastat
  * fix complain() fuction print newline
  * Document that numa_police_memory may cause data races
  * Add numastat_diff from jirka-h
  * Enable v1 compatibility for unused getnodemask test
  * libnuma: Handle initialization without sysfs
  * Support empty memory nodes
  * numactl: Add --version option to print version
  * Remove obsolete numamon file
  * numactl: Use standard tab indent for print_node_cpus
  * Avoid using /proc/cpuinfo in test suite
  * numact: Add --cpu-compress option
  * Pin release workflow script to minimize risk of supply chain attacks
  * move_pages: Fix warning (missing hunk from earlier revert)
  * numastat: Remove unused functions
  * distance: Remove unused variable (NFC)
  * numademo: Adjust memcpy test bandwidth calculation
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * Refactor print_node_cpus to display CPU ranges instead of individual CPUs
  * numactl: Fix manual for --preferred and --preferred-many
  * Revert "Fix build error on riscv64 by linking libatomic"
  * Include &lt;fcntl.h&gt; instead of &lt;sys/fcntl.h&gt;
  * Fix the example usage in the numactl manual
  * Fix issue #190 about numa_exit_on_warn does not work
  * Create SECURITY.md
  * fix: fix memory leaks when run with -H
  * use mems allowed nodes to test prefer_many policy.
  * fix typo in memhog.8
  * Update move_pages.c
  * migspeed don't have to be linked against librt
  * Add MPOL_F_RELATIVE/STATIC_NODES</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707134400">- Update to version 2.0.17.8.g67984e5:
  * numastat: Print package version number instead of own.
  * numastat: Remove commented out perl code
  * Check for MPOL_PREFERRED_MANY lazily
  * libnuma: add numa_set_mempolicy_home_node API</changelog>
  <changelog author="trenn@suse.de" date="1707393600">- Update to version 2.0.18.0.g3871b1c:
  * Increase version number to 2.0.18
  * man pages: fix table include preprocessor</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="06d1fef592e3995b361f748da19ac5c02d59cd32e72f278a140fd75701db4fd42dd736fb0f9f9727b2bfbd6888784bd91a561715adf075e68e10965877911e93" name="libnvme-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8+0.gbff7dda" rel="slfo.1.1_1.3"/>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
</package>
<package pkgid="749b9c541bacf26d96afaafa4b1ad4f2b2f764d3a8e09d80f05e24cd0c9799279ca2bf9955565f7fde66fbed0ce96c90daa3d3e11611115a1fcc2000a94310ab" name="libnvme-mi1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8+0.gbff7dda" rel="slfo.1.1_1.3"/>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
</package>
<package pkgid="4ec6207d8c3c9912277fa84c1dd80432f8ecbdc348b415f5bf4c4100ce4a8010dc215fc9c466b1af210a686a03c02629a0edf19994299c0cb863b4d73ba34f1f" name="libnvme1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8+0.gbff7dda" rel="slfo.1.1_1.3"/>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
</package>
<package pkgid="17e5fdf565636420ca99e0c011fa16d19b21e06239ea4b20d84f37358275de3b36756109dc1dd28c75eb58645514e936cfaa0c1b44132ca2c229058e1ce43071" name="liboath0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.11.12" rel="slfo.1.1_2.1"/>
  <changelog author="schwab@suse.de" date="1533556800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="mardnh@gmx.de" date="1609243200">- Update to version 2.6.5
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.
    KEY and OTP may now be given as '-' to mean stdin, or @FILE to
    read from a particular file.  This is recommended on multi-user
    systems, since secrets as command line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.
  * Doc fixes.
- Update to version 2.6.4
  * libpskc: New --with-xmlsec-crypto-engine to hard-code crypto
    engine.  Use it like --with-xmlsec-crypto-engine=gnutls or
  - -with-xmlsec-crypto-engine=openssl if the default dynamic
    loading fails because of runtime linker search path issues.
  * oathtool --totp --verbose now prints TOTP hash mode.
  * oathtool: Hash names (e.g., SHA256) for --totp are now upper
    case.  Lower/mixed case hash names are supported for
    compatibility.
  * pam_oath: Fail gracefully for missing users.
    This allows you to incrementally add support for OATH
    authentication instead of forcing it on all users.
  * Fix libpskc memory corruption bug.
  * Fix man pages.
  * Build fixes.
- Update to version 2.6.3
  * pam_oath: Fix self-tests.
- Drop not longer needed patches:
  * 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch
  * 0003-pam_oath-assign-safe-default-to-alwaysok-config-memb.patch
  * 0002-update_gnulibs_files.patch
  * gnulib-libio.patch
- Use source verification
- Use proper source URLs</changelog>
  <changelog author="mardnh@gmx.de" date="1611144000">- Update to version 2.6.6
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.  KEY and OTP may now be given as '-' to mean
    stdin, or @FILE to read from a particular file.  This is
    recommended on multi-user systems, since secrets as command
    line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.</changelog>
  <changelog author="mardnh@gmx.de" date="1619956800">- Update to version 2.6.7
  * pam_oath: Support variables in usersfile string parameter.
    These changes introduce the ${USER} and ${HOME} placeholder
    values for the usersfile string in the pam_oath configuration
    file. The placeholder values allow the user credentials file
    to be stored in a file path that is relative to the user, and
    mimics similar behavior found in google-authenticator-libpam.
    The motivation for these changes is to allow for
    non-privileged processes to use pam_oath (e.g., for 2FA with
    xscreensaver). Non-privileged and non-suid programs are
    unable to use pam_oath. These changes are a proposed
    alternative to a suid helper binary as well.
  * doc: Fix project URL in man pages.
  * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config.
  * build: Modernize autotools usage.
    Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE
    to make rebuilding from source more safe with future automake
    versions.
  * Updated gnulib files.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- url -&gt; https</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659441600">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="mardnh@gmx.de" date="1688904000">- Update to version 2.6.8
  * libpskc: Fixes for recent libxmlsec releases.
  * pam_oath: Provide fallback pam_modutil_getpwnam implementation.
  * pam_oath: Don't fail authentication when pam_modutil_getpwnam
  doesn't ** know the user when usersfile don't include ${USER}
  or ${HOME}.
  * pam_oath: Self-test improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.6.11
  * liboath: Handle invalid base32 encoded secrets.  Fixes: #41.
  * Various build fixes including updated gnulib files.
  * Improve compatibility with recent libxmlsec.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726228800">- Fix security issue CVE-2024-47191 by adding
  0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch .
- Add patch to implement new null_usersfile_okay argument
  42-null_usersfile_okay.patch .
- Makes this version 2.6.11.12 to be able to depend on it.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1729080000">- Update 0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch
  with bsc#1231699 improvements for security fix CVE-2024-47191</changelog>
</package>
<package pkgid="68808fd56b4dc14ddb52a8395276177ec635ce4c031bfc3ae4de880e7fa4a357bff6eb0d471a3a0476c6645221d00e457ec0cb99ed9154fbc41f6823ffc4a4de" name="libogg-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.5" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@suse.com" date="1315569600">- replace _service with real file</changelog>
  <changelog author="reddwarf@opensuse.org" date="1321790400">- updated to version 1.3.0
  * Add ogg_stream_flush_fill() call
    This produces longer packets on flush, similar to
    what ogg_stream_pageout_fill() does for single pages.
- run spec-cleaner on it
- remove "SLES10 -&gt; SLES11 upgrade path" parts since the upgrade
  already happened and anyway the entry in bugzilla is not public</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level does not exist, use -O3</changelog>
  <changelog author="coolo@suse.com" date="1324814401">- own aclocal directory</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libogg 1.3.1
  * Guard against very large packets.
  * Respect the configure --docdir override.
  * Documentation fixes.
- fix SLE build</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 1.3.2
  * Fix an bug in oggpack_writecopy().</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Orthographic fixes to descriptions. RPM group fix.</changelog>
  <changelog author="9+suse@cirno.systems" date="1522152000">- Use %license macro
- Update to version 1.3.3
  * Fix an issue with corrupt continued packet handling.</changelog>
  <changelog author="jengelh@inai.de" date="1567339200">- Update to release 1.3.4
  * Faster slice-by-8 CRC32 implementation.
    See https://lwn.net/Articles/453931/ for motivation.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 1.3.5:
  * Fix unsigned typedef problem on macOS.
  * Fix overflow check in ogg_sync_buffer.
  * Clean up cmake and autotools build files.
  * Remove Symbian and Apple XCode build files.
  * Fix documentation cross-reference links.</changelog>
</package>
<package pkgid="9fd2901a6414e5ec0644081f946f201455a2b8be0db139d9ca29c9cc4fdc42c7b0e2e4670db7949e05069410d581f83f457dadeb2edecea4d46d8d7ac35ee9fe" name="libogg0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.5" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@suse.com" date="1315569600">- replace _service with real file</changelog>
  <changelog author="reddwarf@opensuse.org" date="1321790400">- updated to version 1.3.0
  * Add ogg_stream_flush_fill() call
    This produces longer packets on flush, similar to
    what ogg_stream_pageout_fill() does for single pages.
- run spec-cleaner on it
- remove "SLES10 -&gt; SLES11 upgrade path" parts since the upgrade
  already happened and anyway the entry in bugzilla is not public</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level does not exist, use -O3</changelog>
  <changelog author="coolo@suse.com" date="1324814401">- own aclocal directory</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libogg 1.3.1
  * Guard against very large packets.
  * Respect the configure --docdir override.
  * Documentation fixes.
- fix SLE build</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 1.3.2
  * Fix an bug in oggpack_writecopy().</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Orthographic fixes to descriptions. RPM group fix.</changelog>
  <changelog author="9+suse@cirno.systems" date="1522152000">- Use %license macro
- Update to version 1.3.3
  * Fix an issue with corrupt continued packet handling.</changelog>
  <changelog author="jengelh@inai.de" date="1567339200">- Update to release 1.3.4
  * Faster slice-by-8 CRC32 implementation.
    See https://lwn.net/Articles/453931/ for motivation.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 1.3.5:
  * Fix unsigned typedef problem on macOS.
  * Fix overflow check in ogg_sync_buffer.
  * Clean up cmake and autotools build files.
  * Remove Symbian and Apple XCode build files.
  * Fix documentation cross-reference links.</changelog>
</package>
<package pkgid="435062a54a343c0c88e9e1a05a0dd1a7c4545fc54173508cacc17b64ede794eb108da4c74af8de9798b7b56810211d71ad24ac40102d13e643c72c396cea886f" name="libonig5-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.9.8" rel="slfo.1.1_1.2"/>
  <changelog author="i@marguerite.su" date="1410004800">- update version 5.9.5
  * [impl] escape warnings for -Wall.
  * [impl] remove unused variable.
- changes in 5.9.4
  * [dist] add oniguruma.pc.in file
- changes in 5.9.3
  * fix print_tree ENCLOSE_OPTION bug</changelog>
  <changelog author="i@marguerite.su" date="1445428800">- update version 5.9.6
  * [impl] add onigenc_end_unicode().
  * [impl] add onig_add_end_call().</changelog>
  <changelog author="mrueckert@suse.de" date="1456833600">- remove ruby build requires. seems unused.</changelog>
  <changelog author="mrueckert@suse.de" date="1502107200">- Version 6.5.0
  - [new] support Absent clear (Absent functions)
  - abolish configure option: --enable-combination-explosion-check
  - [new] support Absent functions (?~...)
  - fix #65: SIZEOF_SIZE_T doesn't exist on certain architecutres
  - [new] support \O (true anychar)
  - [new] support \K (keep)
  - add new node type: NODE_GIMMICK
  - [new] support \N (no newline)
  - [new] support \R (general newline)
  - [new] support if-then-else syntax
  - [new] support backref validity checker
- Version 6.4.0
  - fix memory leaks
  - change encoding of doc/XXXX.ja from EUC-JP to UTF-8
  - update doc/RE, and doc/RE.ja
  - fix fatal bug of endless repeat check on Windows
  - PR #62 : add check for return values
  - [new] support call zero (\g{0})
  - [new] support relative call by positive number
  - [new] support relative back-reference by positive number
  - fix #60 : check value type
  - change output format for ONIG_DEBUG_COMPILE and
    ONIG_DEBUG_MATCH
- Version 6.3.0
  - fix #60 : invalid state(CCS_VALUE) in parse_char_class()
  - fix #59 : access to invalid address by reg-&gt;dmax value
  - fix invalid increment of start position in onig_scan()
  - fix #58 : access to invalid address by reg-&gt;dmin value
  - fix #57 : DATA_ENSURE() check must be before data access
  - fix #56 : return invalid result for codepoint 0xFFFFFFFF
  - [new] add \o{17777777777} syntax.
  - fix #55 : Byte value expressed in octal must be smaller than
    256
- Version 6.2.0
  - fix: size in xmemcpy in stack_double (PR #51)
  - Initialize return value
  - NEW API: add onig_set_capture_num_limit()
  - change MemNumType from short int to int
  - fix: [0-9-a] was not allowed as [0-9\-a]
  - fix: illegal capture after recursive call
  - fix: problem with optimization of \z
  - fix: .* optimization
  - Set a limit of parser recursion
  - fix; that warnings are not shown properly
  - fix: /[a-c#]+\W/ =~ "def#" fails when encoding is UTF-16/32
  - fix: /[\x{0}-X]/i doesn't match properly when UTF-16/32 is
    used.
- Version 6.1.3
  - fix: Syntax error: redirection unexpected (expecting word) #35
- Version 6.1.2
  - allow word bound, word begin and word end in look-behind.
  - add ONIG_OPTION_CHECK_VALIDITY_OF_STRING option.
  - fix use after free node.
  - fix memory leaks after parsing regexp error.
  - implement many of is_valid_mbc_string().
- Version 6.1.1
  - fix segfault /W.?{888}{888}{888}\x00/ (found by libfuzzer)
  - fix error unmatched close parenthesis for %{(.*?)} #23
- Version 6.1.0
  - add contributed/libfuzzer-onig.cpp  (thanks hannob)
  - update LTVERSION 4:0:0
  - NEW API: onigenc_is_valid_mbc_string().
  - add is_valid_mbc_string() member into OnigEncodingType.
  - fix out of bounds read.
  - disable USE_INVALID_CODE_SCHEME.
  - doc/RE improved.
  - add onig_scan() into doc/API.
  - fix bug: Out of bounds read in onig_strcpy() #17
  - fix bug: infinite loop of backreference and group.
  - fix out of bounds read in mbc_to_code() #16
  - doc/RE refinements.
  - add onig_scan() (NEW API)
  - reimplement match stack allocation for case too many repeat
  - and too many captures in regexp.
  - number of captures &lt;= 32767 for bytecode representation.
  - don't use int_map_backward for thread-safe.
  - fix case of enclosed option in look-behind.
  - fix ignore case in look-behind.
  - fix memory leak in onig_unicode_define_user_property()
  - declare variables at the top of scope.  (thanks nmaya)
- Version 6.0.0
  - add NEW API: onig_unicode_define_user_property()
  - update Unicode data to 8.0.0
  - change OnigCodePoint type to unsigned int.
  - add doc/UNICODE_PROPERTIES.
  - add error code ONIGERR_FAIL_TO_INITIALIZE.
  - add make_win64/32.bat.
  - fix bug of uninitialized regex_t value on error.
  - reimplement Unicode case folding.
  - update LTVERSION = 3.0.0
  - remove all THREAD_ macro.
  - add init member into OnigEncoding. (add onig_initialize())
  - remove state member of regex.
  - move source files into src/
  - rename configre.in to configure.ac.
  - fix memory leak. (thanks pigzang)
  - change mail address.</changelog>
  <changelog author="avindra@opensuse.org" date="1514030400">- Version 6.7.0
  - add ONIG_SYNTAX_ONIGURUMA (default syntax)
  - restructure StackType
  - implement subexp calls (?R), (?&amp;name), (?-n), (?+n) for Perl
    syntax
  - use string pool of gperf for Unicode Property lookup function
  - fix an empty greedy regex and a word boundary (.*\b) fails
  - remove a stack type STK_POS
  - add a declaration of onig_end()
  - fix compilation failure in out-of-source build
  - [new] hexadecimal codepoint \uHHHH
- Version 6.6.1
  - fix definition of \X to (?&gt;\O(?:\Y\O)*)
- Version 6.6.0
  - rename Absent clear to Range clear
  - [new] Extended Grapheme Cluster \X and boundary \y, \Y
  - fix: invalid index(ctype) value assigned to Unicode Block
    properties
  - --enable-crnl-as-line-terminator to be deprecated
  - [new] ASCII only mode options (?WDSP)
  - [new] ONIG_OPTION_XXXX_IS_ASCII  options
  - disable OP_CCLASS_NODE
  - [spec] Absent clear restore previous range value at backtrack
  - optimize for simple one char repetition in Absent expression
  - fix: invalid impl. for reluctant repetition in Absent expression
  - remove compile switch USE_NAMED_GROUP
  - Visual Studio 2005 compilation fixed
- cleanup with spec-cleaner</changelog>
  <changelog author="mrueckert@suse.de" date="1583323200">- Update to version 6.9.4
  - NEW API: RegSet (set of regexes)
  - Fixed CVE-2019-19012 (boo# 1156984)
  - Fixed CVE-2019-19203 (boo# 1164550) (Does not affect UTF-8,
    UTF-16 and UTF-32 encodings)
  - Fixed CVE-2019-19204 (boo# 1164569) (Affects only PosixBasic,
    Emacs and Grep syntaxes)
  - Fixed CVE-2019-19246 (boo# 1157805)
  - Fixed some problems (found by libFuzzer test)
- changes from 6.9.3
  - Fixed CVE-2019-13224 (boo# 1142847)
  - Fixed CVE-2019-13225 (boo# 1141157)
  - Fixed many problems (found by libfuzzer programs)
- changes from 6.9.2
  - Update Unicode version 12.1.0
  - NEW: Unicode Text Segment mode option (?y{g}) (?y{w}) g:
    Extended Grapheme Cluster mode / w: Word mode
  - Fix Issue #139
- changes from 6.9.1
  - Speed improvement (* especially UTF-8)
- changes from 6.9.0
  - Update Unicode version 11.0.0
  - NEW: add Emoji properties
- changes from 6.8.2
  - Fix: #80 UChar in header causes issue
  - NEW API: onig_set_callout_user_data_of_match_param() (*
    omission in 6.8.0)
  - add doc/CALLOUTS.API and doc/CALLOUTS.API.ja
- changes from 6.8.1
  - Update shared library version to 5.0.0 for API incompatible
    changes from 6.7.1
- changes from 6.8.0
  - Retry-limit-in-match function enabled by default
  - NEW: configure option --enable-posix-api=no (* enabled by
    default)
  - NEW API: onig_search_with_param(), onig_match_with_param()
  - NEW: Callouts of contents (?{...contents...}) (?{...}[X&lt;&gt;])
    (?{{....}})
  - NEW: Callouts of name (*name) (*name[tag]{args...})
  - NEW: Builtin callouts (*FAIL) (*MISMATCH) (*ERROR{n}) (*COUNT)
    (*MAX{n}) etc..
  - (* Callout function API is experimental level and isn't fixed
    definitely yet. Undocumented now)
- changes from 6.7.1
  - NEW: Mechanism of try-in-match-limit (* disabled by default)
  - #73: Update for automake 1.15.1</changelog>
  <changelog author="mrueckert@suse.de" date="1592222400">- Update to 6.9.5.1
  - Fixed Issue #192
  - POSIX API disabled by default for Unix (* Enabled by: configure
  - -enable-posix-api=yes)
  - Update Unicode version 13.0.0
  - NEW: Code point sequence notation \x{HHHH HHHH ...}, \o{OOOO
    OOOO ...}
  - NEW API: retry limit in search functions
  - NEW API: maximum nesting level of subexp call
  - Fixed behavior of isolated options in Perl and Java syntaxes.
    /...(?i).../
  - fix a problem (found by oss-fuzz test on my PC)
- add --enable-posix-api to keep the posix API enabled.</changelog>
  <changelog author="mrueckert@suse.de" date="1604577600">- Update to 6.9.6
  - When using configure script, if you have the POSIX API enabled
    in an earlier version (disabled by default in 6.9.5) and you
    need application binary compatibility with the POSIX API,
    specify "--enable-binary-compatible-posix-api=yes" instead of
    "--enable-posix-api=yes". Starting in 6.9.6,
    "--enable-posix-api=yes" only supports source-level
    compatibility for 6.9.5 and earlier about POSIX API. (Issue
    [#210])
  - NEW: configure option
  - -enable-binary-compatible-posix-api=[yes/no]
  - NEW API: Limiting the maximum number of calls of subexp-call
  - NEW API: ONIG_OPTION_NOT_BEGIN_STRING / NOT_END_STRING /
    NOT_BEGIN_POSITION
  - Fixed behavior of ONIG_OPTION_NOTBOL / NOTEOL
  - Fixed many problems found by OSS-Fuzz
  - Fixed many problems found by Coverity
  - Fixed CVE-2020-26159 (This turned out not to be a problem
    later. #221)
  - Under cygwin and mingw, generate and install the libonig.def
    file (Issue #220)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622721600">- Update to 6.9.7.1
  * NEW API: ONIG_OPTION_CALLBACK_EACH_MATCH
  * NEW API: ONIG_OPTION_IGNORECASE_IS_ASCII
  * NEW API: ONIG_SYNTAX_PYTHON
  * Fixed some problems found by OSS-Fuzz
- Enable tests</changelog>
  <changelog author="mrueckert@suse.de" date="1651752000">- Update to 6.9.8
  - Update Unicode version 14.0.0
  - Whole options
  - (?C) : ONIG_OPTION_DONT_CAPTURE_GROUP
  - (?I) : ONIG_OPTION_IGNORECASE_IS_ASCII
  - (?L) : ONIG_OPTION_FIND_LONGEST
  - Fixed some problems found by OSS-Fuzz</changelog>
</package>
<package pkgid="ee0fa66539a3a42c593dcb4249c71823414aebd51543daa14cb6f9394b1a518baa3591625e87f1713cf1139620964fe9034b84ca2b3cbace8a1f7218e4bc3a8f" name="libopeniscsiusr0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="slfo.1.1_1.2"/>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="1a40fdfa1b17591aa56f7e94529a5511737a310744b80b68ebd16220cc18622b44bb44018aa50b78a9b2840700cddac0b4171e753b309278ad2d95af5b9be499" name="libopenssl-3-fips-provider-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.4" rel="slfo.1.1_8.1"/>
  <changelog author="pmonreal@suse.com" date="1721217600">- Build with enabled sm2 and sm4 support [bsc#1222899]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used
  * Added openssl-CVE-2024-41996.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1737633600">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1749124800">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1749643200">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1758801600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch
- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
</package>
<package pkgid="301b63e4747979853c5321cc51049202e4af257507024412b4d48134a8d8d0424fdc6a1521330fb0d84c1acbaaa59c0424ebcc5c293e904206c51035266d61e9" name="libopenssl3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.4" rel="slfo.1.1_8.1"/>
  <changelog author="pmonreal@suse.com" date="1721217600">- Build with enabled sm2 and sm4 support [bsc#1222899]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used
  * Added openssl-CVE-2024-41996.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1737633600">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1749124800">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1749643200">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1758801600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch
- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
</package>
<package pkgid="f9867d003600585a550d4134fdf763bf79b833cf1a11eb879034b400476fb9897890aa38e6d635b0fb5d038e8a1800401c11f037e14c767b457ceada718f2756" name="libopenvswitch-3_1-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.7" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1659528000">- update to 2.17.2:
  - Bug fixes
  - DPDK:
  * OVS validated with DPDK 21.11.1.  It is recommended to use this version
    until further releases.
  - Bug fixes
  - libopenvswitch API change:
  * To fix the Undefined Behavior issue causing the compiler to incorrectly
    optimize important parts of code, container iteration macros (e.g.,
    LIST_FOR_EACH) have been re-implemented in a UB-safe way.
  * Backwards compatibility has mostly been preserved, however the
    user-provided pointer is now set to NULL after the loop (unless it
    exited via "break;")
  * Users of libopenvswitch will need to double-check the use of such loop
    macros before compiling with a new version.
  * Since the change is limited to the definitions within the headers, the
    ABI is not affected.
- refresh 0001-openvswitch-merge-compiler.h-files-into-one-file.patch
  0002-build-Seperated-common-used-headers.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662984000">- fix tests with GNU grep 3.8 boo#1203239
  add openvswitch-2.17.2-Fix-tests-with-GNU-grep-3.8.patch</changelog>
  <changelog author="dmueller@suse.com" date="1664452800">- add a77ad9693c8b49055389559187fe74eddb619746.patch to avoid
  the cpu detection code being compiled with AVX512 enabled
- add 0001-m4-Test-avx512-for-x86-only.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1680696000">- Update OVS version to v3.1.0 and OVN version to v23.03.0
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
  - Removed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * 0001-openvswitch-merge-compiler.h-files-into-one-file.patch
  * openvswitch-CVE-2021-36980.patch
  * 0002-build-Seperated-common-used-headers.patch
  * a77ad9693c8b49055389559187fe74eddb619746.patch
  * 0001-m4-Test-avx512-for-x86-only.patch
  * openvswitch-2.17.2-Fix-tests-with-GNU-grep-3.8.patch
  - Renamed and rebased patches,
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  - Added ovsb tool install patch,
  * install-ovsdb-tools.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683028800">- Remove python/ovs/dirs.py prior to building: have this
  re-generated based on the shipped template (boo#1210479).</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1694088000">- Fix CVE-2023-3153 [bsc#1212125], VUL-0: CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited
- Added patch,
    CVE-2023-3152.patch</changelog>
  <changelog author="ana.guerrero@suse.com" date="1701691200">- Add BuildRequires on python-setuptools. Previously this was pulled
  by python-Sphinx in the build environment.</changelog>
  <changelog author="dmueller@suse.com" date="1702555200">- convert to sysuser generated users</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1764158400">- OpenvSwitch upstream bugfix updates:
  * https://www.openvswitch.org/releases/NEWS-3.1.7.txt
  * v3.1.7
  - Bug fixes
  - OVS validated with DPDK 22.11.7.
  * v3.1.6
  - Bug fixes
  - OVS validated with DPDK 22.11.6.
  * v3.1.5
  - Bug fixes
  - OVS validated with DPDK 22.11.5.
  * v3.1.4
  - Bug fixes
  - Fixed vulnerabilities CVE-2023-3966 (bsc#1219465)
    and CVE-2023-5366 (bsc#1216002).
  - OVS validated with DPDK 22.11.4.
  * v3.1.3
  - Bug fixes
  * v3.1.2
  - Bug fixes
  * v3.1.1
  - Bug fixes
  - Fixed vulnerability CVE-2023-1668 (bsc#1210054)
  - Remove included patches:
    CVE-2023-1668.patch
- OVN upstream bugfix updates:
  * https://github.com/ovn-org/ovn/blob/branch-23.03/NEWS
  - Fix CVE-2025-0650 (bsc#1236353) ovn: egress ACLs may be bypassed
    via specially crafted UDP packet (CVE-2025-0650.patch)
  * v23.03.3
  - Bug fixes
  - Add "garp-max-timeout-sec" config option to vswitchd external-ids to
    cap the time between when ovn-controller sends gARP packets.
  - Security: Fixed vulnerability CVE-2024-2182 (bsc#1255435).
  - Updated patches
    install-ovsdb-tools.patch
  * v23.03.2
  - Bug fixes
  * v23.03.1
  - Bug fixes
  - CT entries are not flushed by default anymore whenever a load balancer
    backend is removed.  A new, per-LB, option 'ct_flush' can be used to
    restore the previous behavior.  Disabled by default.
  - Always allow IPv6 Router Discovery, Neighbor Discovery, and Multicast
    Listener Discovery protocols, regardless of ACLs defined.
  - Send ICMP Fragmentation Needed packets back to offending ports when
    communicating with multichassis ports using frames that don't fit through a
    tunnel. This is done only for logical switches that are attached to a
    physical network via a localnet port, in which case multichassis ports may
    have an effective MTU different from regular ports and hence may need this
    mechanism to maintain connectivity with other peers in the network.
  - ECMP routes use L4_SYM dp-hash by default if the datapath supports it.
    Existing sessions might get re-hashed to a different ECMP path when
    OVN detects the algorithm support in the datapath during an upgrade
    or restart of ovn-controller.
  - Add CoPP for the svc_monitor_mac. This addresses CVE-2023-3153
    (bsc#1212125).
  - Remove included patches:
    CVE-2023-3152.patch</changelog>
</package>
<package pkgid="37e5af60fca7e35da7f40e5e5645162fa898f9336b2ce672d67d7963032149b425bc0df6374e0d81ef3969c39b4cda322b26f3af21db233d3d413b03e06f9501" name="libopus0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4" rel="slfo.1.1_1.2"/>
  <changelog author="idonmez@suse.com" date="1495972800">- Update to version 1.1.5
  + This release backports the surround encoder bug fix from
    1.2-beta branch</changelog>
  <changelog author="aloisio@gmx.com" date="1497960000">- Update to version 1.2
  + Speech quality improvements especially in the 12-20 kbit/s
    range
  + Improved VBR encoding for hybrid mode
  + More aggressive use of wider speech bandwidth, including
    fullband speech starting at 14 kbit/s
  + Music quality improvements in the 32-48 kb/s range
  + Generic and SSE CELT optimizations
  + Support for directly encoding packets up to 120 ms
  + DTX support for CELT mode
  + SILK CBR improvements
  + Support for all of the fixes in
    draft-ietf-codec-opus-update-06 (the mono downmix and the
    folding fixes need --enable-update-draft)
  + Many bug fixes, including integer wrap-arounds discovered
    through fuzzing (no security implications)
- Removed static package</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Cleanup with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.2.1:
  + This fixes an issue where the encoder can misdetect that the
    signal is SWB instead of FB, lowpassing the signal. This patch
    makes the encoder much more careful about doing that.</changelog>
  <changelog author="mcepl@suse.com" date="1539864000">- Update to 1.3:
  - improved speech/music detection based on a neural network
  - low-bitrate speech improvements
  - support for immersive audio using ambisonics
  - tone quality improvements
  - updates to the Opus standard (rfc 8251) are on by default
  - security improvements
- Clean up SPEC to the latest standards</changelog>
  <changelog author="aloisio@gmx.com" date="1558785600">- Update to version 1.3.1
  * This release fixes an issue with the analysis on files with
    digital silence (all zeros), especially on x87 builds
    (mostly affects 32-bit builds).
  * Two new features:
    + A new OPUS_GET_IN_DTX query to know if the encoder is in
    DTX mode (last frame was either a comfort noise frame or
    not encoded at all)
    + A new (and still experimental) CMake-based build system
    that is eventually meant to replace the VS2015 build
    system (the autotools one will stay).</changelog>
  <changelog author="dimstar@opensuse.org" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565870400">- Add 2 upstream bug fixes for Silk:
  * opus-Silk-CNG-adapts-faster.patch: Silk CNG adapts faster to
    received packets with lower gains.
  * opus-Silk-fix-arm-optimization.patch: Avoid processing LPC
    coeffs beyond the given order in NEON optimizations.</changelog>
  <changelog author="gboiko@suse.com" date="1586952000">- Backport of an upstream fix for celt decoder:
  * opus-Fix-celt-decoder-assertion-when-using-OPUS_CUSTOM.patch: When
    using OPUS_CUSTOM, `CELTDecoder-&gt;end` can be larger than 21.
    Assert against 25 instead in OPUS_CUSTOM builds.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.4:
  * Improved tuning of the Opus in-band FEC (LBRR). See the
    https://gitlab.xiph.org/xiph/opus/-/issues/2360 for details
  * Added a OPUS_SET_INBAND_FEC(2) option that turns on FEC, but
    does not force SILK mode (FEC will be disabled in CELT mode)
  * Improved tuning and various fixes to DTX
  * Added Meson support, improved CMake support
- Change Source to new home on github.
- Use autosetup, make_build and ldconfig_scriptlets macros.
- Move AUTHORS and README docs to devel package.
- Drop patches fixed upstream:
  * opus-Fix-celt-decoder-assertion-when-using-OPUS_CUSTOM.patch
  * opus-Silk-CNG-adapts-faster.patch
  * opus-Silk-fix-arm-optimization.patch</changelog>
</package>
<package pkgid="320e6d384d749476b1154fee10f901aa8085652e44465d082954d3db922e85660626789677562fe75962fd2093aa63e5929065c157e9fad803cf81efb8007bed" name="liborc-0_4-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.4.34" rel="slfo.1.1_2.1"/>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Switch to the meson build system, which knows how to cope with
  GTK 1.26+:
  + Use the tarball published on github (the automake bootstrapped
    one does not contain the meson build system).
  + Add meson BuildRequires and switch configure/make/make_install
    macros to the relevant meson/meson_build/meson_install
    variants.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511179200">- Update to version 0.4.28:
  + Numerous undefined behaviour fixes.
  + Ability to disable tests.
  + Fix meson dist behaviour.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 0.4.29:
  + PowerPC: Support ELFv2 ABI (A. Wilcox) and ppc64le.
  + Mips backend: only enable if the DSPr2 ASE is present.
  + Windows and MSVC build fixes.
  + orccpu-arm: Allow 'cpuinfo' fallback on non-android.
  + pkg-config file for orc-test library.
  + orcc: add --decorator command line argument to add function
    decorators in header files.
  + meson:
  - Make orcc detectable from other subprojects.
  - Add options to disable tests, docs, benchmarks, examples,
    tools, etc.
  - Misc. other fixes.
- Pass orc-test=disabled, examples=disabled and tests=disabled to
  meson, and drop meson_tests. Tests consistantly fails on the
  buildservice and consistantly succedes when building locally,
  hence trying to build them on the obs is pointless.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 0.4.30:
  + Don't always generate static library but default to shared-only
  + Work around false positives in Microsoft UWP certification kit
  + Add endbr32/endbr64 instructions on x86/x86-64 for indirect
    branch tracking
  + Fix gtk-doc build when orc is used as a meson subproject
  + Switch float comparison in tests to ULP method to fix spurious
    failures
  + Fix flushing of ARM icache when using dual map
  + Use float constants/parameters when testing float opcodes
  + Add support for Hygon Dhyana processor
  + Fix PPC/PPC64 CPU family detection
  + Add little-endian PPC support
  + Fix compiler warnings with clang
  + Mark exec mapping writable in debug mode for allowing
    breakpoints
  + Various codegen refactorings
  + autotools support has been dropped in favour of Meson as build
    system.
  + Fix PPC CPU feature detection and add support for VSX/v2.07
  + Add double/int64 support for PPC
- No longer remove static file in install section, no longer needed
  as it's not built by default anymore.</changelog>
  <changelog author="dimstar@opensuse.org" date="1578398400">- Update to version 0.4.31:
  + Fix OrcTargetPowerPCFlags enum typedef to revert API change on
    macOS/iOS.
  + Fixes for various PowerPC issues.
  + Enable flush-to-zero mode for float programs on ARM/neon.
  + Fix some opcodes to support x2/x4 processing on PowerPC.</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- Update to version 0.4.32:
  + Add support for JIT code generation in Universal Windows
    Platform apps.
  + Minor Meson build system fixes and improvements.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669032000">- Update to version 0.4.33:
  + Add support for aarch64 (64-bit ARM) architecture.
  + aarch32: Implement loadupdb instruction used e.g. for video
    pixel format packing/unpacking/conversions.
  + neon: Fix unsigned only implementation of loadoffb, loadoffw
    and loadoffl.
  + neon: Fix testsuite not passing on arm CPUs.
  + orccodemem: Fix use-after-free in error paths.
  + orccpu-powerpc: Fix build with kernel &lt; 4.11.
  + Add support for macOS Hardened Runtime.
  + Enable only SSE and MMX backends for Windows.
  + Fix ORC_RESTRICT definition for MSVC.
  + pkgconfig: add -DORC_STATIC_COMPILATION flag to .pc file for
    static-only builds.</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- Update to version 0.4.34
  + Thread-safety improvements around orc codemem
    allocation/freeing
  + Add orc_parse_code() with more detailed error reporting
  + Implement Orc function lazy initialization correctly via atomic
    operations
  + orc program parser fixes and improvements
  + build fixes and compiler warning fixes
  + coverity and clang scan-build static code analysis fixes
  + meson: Do not always generate static library for test library
  + ci improvements</changelog>
  <changelog author="alarrosa@suse.com" date="1721649600">- Add patch from upstream to fix a stack-based buffer overflow
  in the Orc compiler when formatting error messages (bsc#1228184,
  CVE-2024-40897):
  * 0001-Use-vasprintf-if-available-for-error-messages-and.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1738238400">- follow up of CVE-2024-40897 fix [bsc#1228184]
- added patches
  fix https://gitlab.freedesktop.org/gstreamer/orc/-/commit/13ad22b4bc75feb71cefc6b9c0c9cb81ff8c73c4
  + orc-check-return-value-of-vasprintf.patch</changelog>
</package>
<package pkgid="e98f209a8daae6ac4cf98f3044e1aa2416ea3661359abf8caaac1cc6d36db3eab9542fd669692b2d1bb760b39b1018b01245cc02fc49184a2f1db9fa09ae1278" name="libosinfo-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="carnold@suse.com" date="1591012800">- Update to version 1.8.0
  Changes in this release include:
  * Several CI improvements
  * Several release scripts improvements
  * Several translations improvements
  * Several syntax-check improvements
  * Code cleanup in order to modernize the GObject usage
  * Add API to get whether a firmware is supported or not
  * Add API to get "cloud-image-username"</changelog>
  <changelog author="dimstar@opensuse.org" date="1597752000">- Explicitly call %meson_build in the %build section: It was never
  needed (but should have been there) before as the %meson_install
  macro would perform a project rebuild. However, most recent
  versions of meson have changed the %meson_install macro to use
  `--no-rebuild`, exposing then this issue on our spec file.</changelog>
  <changelog author="carnold@suse.com" date="1614686400">- Update to version 1.9.0
  Changes in this release include:
  * Improve on the osinfo-tools' and osinfo-detect's help
  * Several CI improvements
  * Several translations improvements
  * Improve on debuggability of the loader code
  * Fix build when using clang</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to version 1.10.0
  Changes in this release include:
  * Add API for resolving multiple tree matches
  * Add API for resolving multiple media matches
  * Add API to match between two OsinfoTree
  * Add API to match between two OsinfoMedia
  * Add API to get a complete list of firmwares
  * Add missing documentation of osinfo_os_add_firmware()
  * Add release status to osinfo-query
  * Add --all flag to all tools to report all matches
  * Fix hiding database entries
  * Adapt to libsoup3 which is now preferred over libsoup2
  * Several CI improvements
  * Several translations improvements</changelog>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1197769 - FTBFS: libosinfo won't compile on SP4
  libosinfo.spec</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Add 3a0fef72.patch: build: Add option to select libsoup ABI.
  Following this, add conditional pkgconfig(libsoup-3.0)
  BuildRequires.
- Modernize spec, use ldconfig_scriptlets macro for post(un)
  handling, package COPYING with license macro.</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1699876800">- Update to version 1.11.0 (jsc#PED-6305)
  Changes in this release include:
  * Several minor memory leak fixes
  * Several CI improvements
  * Several translations improvements
- Drop 3a0fef72.patch as it is now part of the tarball</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
</package>
<package pkgid="738b5f622ffced5976d44c631d713bff204c5a755f3e1cb6624caf135945bfb788675e57185abc0c0b15956ecb57a11503f0d66df87eec9a9cdbe36c0773d2d8" name="libosinfo-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="carnold@suse.com" date="1591012800">- Update to version 1.8.0
  Changes in this release include:
  * Several CI improvements
  * Several release scripts improvements
  * Several translations improvements
  * Several syntax-check improvements
  * Code cleanup in order to modernize the GObject usage
  * Add API to get whether a firmware is supported or not
  * Add API to get "cloud-image-username"</changelog>
  <changelog author="dimstar@opensuse.org" date="1597752000">- Explicitly call %meson_build in the %build section: It was never
  needed (but should have been there) before as the %meson_install
  macro would perform a project rebuild. However, most recent
  versions of meson have changed the %meson_install macro to use
  `--no-rebuild`, exposing then this issue on our spec file.</changelog>
  <changelog author="carnold@suse.com" date="1614686400">- Update to version 1.9.0
  Changes in this release include:
  * Improve on the osinfo-tools' and osinfo-detect's help
  * Several CI improvements
  * Several translations improvements
  * Improve on debuggability of the loader code
  * Fix build when using clang</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to version 1.10.0
  Changes in this release include:
  * Add API for resolving multiple tree matches
  * Add API for resolving multiple media matches
  * Add API to match between two OsinfoTree
  * Add API to match between two OsinfoMedia
  * Add API to get a complete list of firmwares
  * Add missing documentation of osinfo_os_add_firmware()
  * Add release status to osinfo-query
  * Add --all flag to all tools to report all matches
  * Fix hiding database entries
  * Adapt to libsoup3 which is now preferred over libsoup2
  * Several CI improvements
  * Several translations improvements</changelog>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1197769 - FTBFS: libosinfo won't compile on SP4
  libosinfo.spec</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Add 3a0fef72.patch: build: Add option to select libsoup ABI.
  Following this, add conditional pkgconfig(libsoup-3.0)
  BuildRequires.
- Modernize spec, use ldconfig_scriptlets macro for post(un)
  handling, package COPYING with license macro.</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1699876800">- Update to version 1.11.0 (jsc#PED-6305)
  Changes in this release include:
  * Several minor memory leak fixes
  * Several CI improvements
  * Several translations improvements
- Drop 3a0fef72.patch as it is now part of the tarball</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
</package>
<package pkgid="9d3c4abdd4d26b5c72bc1da0e4f8ee0b06a5754bcb762699a3339993741811e9168f45ece1fefbe49cc166aa8e57432d7502a3f57b6d13d11d8d1a169e73b4c7" name="libosinfo-debugsource" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="carnold@suse.com" date="1591012800">- Update to version 1.8.0
  Changes in this release include:
  * Several CI improvements
  * Several release scripts improvements
  * Several translations improvements
  * Several syntax-check improvements
  * Code cleanup in order to modernize the GObject usage
  * Add API to get whether a firmware is supported or not
  * Add API to get "cloud-image-username"</changelog>
  <changelog author="dimstar@opensuse.org" date="1597752000">- Explicitly call %meson_build in the %build section: It was never
  needed (but should have been there) before as the %meson_install
  macro would perform a project rebuild. However, most recent
  versions of meson have changed the %meson_install macro to use
  `--no-rebuild`, exposing then this issue on our spec file.</changelog>
  <changelog author="carnold@suse.com" date="1614686400">- Update to version 1.9.0
  Changes in this release include:
  * Improve on the osinfo-tools' and osinfo-detect's help
  * Several CI improvements
  * Several translations improvements
  * Improve on debuggability of the loader code
  * Fix build when using clang</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to version 1.10.0
  Changes in this release include:
  * Add API for resolving multiple tree matches
  * Add API for resolving multiple media matches
  * Add API to match between two OsinfoTree
  * Add API to match between two OsinfoMedia
  * Add API to get a complete list of firmwares
  * Add missing documentation of osinfo_os_add_firmware()
  * Add release status to osinfo-query
  * Add --all flag to all tools to report all matches
  * Fix hiding database entries
  * Adapt to libsoup3 which is now preferred over libsoup2
  * Several CI improvements
  * Several translations improvements</changelog>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1197769 - FTBFS: libosinfo won't compile on SP4
  libosinfo.spec</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Add 3a0fef72.patch: build: Add option to select libsoup ABI.
  Following this, add conditional pkgconfig(libsoup-3.0)
  BuildRequires.
- Modernize spec, use ldconfig_scriptlets macro for post(un)
  handling, package COPYING with license macro.</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1699876800">- Update to version 1.11.0 (jsc#PED-6305)
  Changes in this release include:
  * Several minor memory leak fixes
  * Several CI improvements
  * Several translations improvements
- Drop 3a0fef72.patch as it is now part of the tarball</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
</package>
<package pkgid="3c8cd4da5ef4513b097eeef2841d6959341ac6a3cb4c7d0811c530593a89a0524ccbc23ddb743cd3d5735ab63348ee09c7d75effdfc8528254634244beffec67" name="libp11-kit0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.25.3" rel="slfo.1.1_1.2"/>
  <changelog author="lnussel@suse.de" date="1639396800">- Enable systemd support</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 0.24.0:
  * Use inclusive language on certificate distrust. Note: This
    changes the directory and attribute names to distrust certain
    CAs to "blocklist".
  * Fix issues spotted by coverity and ASan.
  * Integrate gettext with tools more tightly.
  * rpc: Forbid use of array of attributes.
  * Build fixes.
- Change dirs from blacklist to blocklist ref upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643112000">- Update to version 0.24.1:
  * rpc: Support protocol version negotiation.
  * proxy: Support copying attribute array recursively.
  * Link libp11-kit so that it cannot unload.
  * Translation improvements.
  * Build fixes.</changelog>
  <changelog author="lnussel@suse.de" date="1646827200">- make sure p11-kit components have matching versions (boo#1196812)</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip testsuite on qemu arches, it fails</changelog>
  <changelog author="pmonreal@suse.com" date="1695211200">- Update to 0.25.0:
  * add PKCS#11 3.0 support
  * add support for profile objects
  * add ability to adjust module and config paths at run-time via
    system environmental exports
  * make terminal output nicer
  * p11-kit: add command to print merged configuration
  * p11-kit: add commands to list, add and delete profiles of a token
  * trust: add command to check format of .p11-kit files
  * virtual: fix libffi type signatures for PKCS#11 3.0 functions
  * server: fix umask setting when --group is specified
  * server: check SHELL only when neither --sh nor --csh is specified
  * rpc: use space string in C_InitToken
  * rpc: fix two off-by-one errors identified by asan
  * modules: make logging message more translatable
  * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms
  * pkcs11.h: add IBM specific mechanism and attributes
  * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms
  * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption
  * po: update translations from Transifex
- Update upstream p11-kit.keyring file
- Add missing lang files
- Switch to using Meson as the build system</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211201">- Add d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch: Fix probing
  of C_GetInterface.</changelog>
  <changelog author="pmonreal@suse.com" date="1698408000">- Update to 0.25.1:
  * fix probing of C_GetInterface [#535]
  * p11-kit: add command to list tokens [#581]
  * p11-kit: add command to list mechanisms supported by a token [#576]
  * p11-kit: add command to generate private-public keypair on a token
    [#551, #582]
  * p11-kit: add commands to import/export certificates and public
    keys into/from a token [#543, #549, #568, #588]
  * p11-kit: add commands to list and delete objects of a token
    [#533, #544, #571]
  * p11-kit: add --login option to login into a token with object
    and profile management commands [#587]
  * p11-kit: adjust behavior of PKCS#11 profile management commands
    [#558, #560, #583, #591]
  * p11-kit: print PKCS#11 URIs in list-modules [#532]
  * bug and build fixes [#528 #529, #534, #537, #540, #541, #545,
    [#547], #550, #557, #572, #575, #579, #585, #586, #590]
  * test fixes [#553, #580]
  * Remove patch fixed upstream:
  - d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698926400">- Update to 0.25.2:
  * fix error code checking of readpassphrase for --login option [#595]
  * build fixes [#594]
  * test fixes [#596]</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 0.25.3:
  * rpc: fix serialization of NULL mechanism pointer [#601]
  * fix meson build failure in macOS (appleframeworks not found) [#603]</changelog>
</package>
<package pkgid="55ca10683f9e2865cc966e5713b2dff37e69fddeca3ea23d2d67358a607a704202fbd7334c24ee61b8f1fb1ea0308a542bcab5bfe9c98a5ae10955e76de2cd90" name="libpango-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.50.14" rel="slfo.1.1_1.3"/>
  <changelog author="bjorn.lie@gmail.com" date="1647691200">- Update to version 1.50.6:
  + Drop hb-glib dependency.
  + Fix test font configuration.
  + Maintain order in pango_attr_list_change.
  + Fix a use-after-free in pango_attr_list_change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650888000">- Update to version 1.50.7:
  + coretext: Fix the build.
  + editing: Fix moving across paragraph boundaries in rtl.
  + layout: Try harder to survive without fonts.
  + Windows:
  - Register a sans-serif font.
  - Try harder to load a font.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1656849600">- Update to version 1.50.8:
  + Add some properties to fontmap and family.
  + Fix handling of ligature carets in mixed directions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660132800">- Update to version 1.50.9:
  + Apply show flags to line separators.
  + Fix a thread-safety problem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663329600">- Update to version 1.50.10:
  + Avoid some unnecessary strdups.
  + Fix line height computations with a non-trivial CTM.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1664107200">- Add 639.patch: layout: Fix crash when no font is installed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1664884800">- Update to version 1.50.11:
  + Don't crash for lack of fonts.
  + Avoid a crash in shaping.
- Drop 639.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669809600">- Update to version 1.50.12:
  + Fix weight conversion on MacOS.
  + Update to Unicode 15.
  + Some introspection annotation fixes.
  + Improve PangoAttrList serialization.
  + Fix char offset calculatiosn in multi-paragraph layouts.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676980800">- Update to version 1.50.13:
  + win32:
  - Add back fallback for empty fontsets
  - Improve DirectWrite support
  + Fix word segmentation for Japanese
  + Don't set backspace-deletes-char for math symbols
  + coretext: Fix a crash
  + cairo: Apply metrics hinting to underlines too
  + Treat COLRv1 fonts as color fonts</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677758400">- Update to version 1.50.14:
  + Fix underline thickness in scaled contexts.</changelog>
</package>
<package pkgid="029726f387c8f1396fd10186775faeed77ca616dd3c49008207ab04e85fdafd45b85c2d96a6fa81a9c499a548811f2ff331ea199cb6cf78bbef9ec550de0d585" name="libparted-fs-resize0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="ro@suse.de" date="1598356800">- re-add missing hunk to fix bsc#1164907
  parted-type-accept-hex.patch
  type on the cmdline could be specified in hex as 0x82</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
  <changelog author="aschnell@suse.com" date="1627300800">- update to version 3.4:
  * Add new partition type flags chromeos_kernel and bls_boot.
  * Add support for the F2FS filesystem.
  refreshed patches:
  - dummy-bootcode-only-for-x86.patch
  - parted-fix-resizepart-and-rm-command.patch
  - parted-type.patch
  - parted-wipeaix.patch
  - tests-adapt-to-SUSE.patch
  removed patches:
  - parted-fix-end_input-usage.patch
  - parted-resize-alias-to-resizepart.patch</changelog>
  <changelog author="aschnell@suse.com" date="1632139200">- run checks during build
- added patches:
  tests-disable.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- BuildRequire python3-base: Fix execution of test suite. Otherwise
  we fail with
  ./t0282-gpt-move-backup.sh: /usr/bin/python3: bad interpreter: No
  such file or directory.</changelog>
  <changelog author="aschnell@suse.com" date="1634644801">- fixed name of shared library package and split off
  libparted-fs-resize (bsc#1191778)</changelog>
  <changelog author="aschnell@suse.com" date="1650456000">- update to version 3.5:
  * Add support for JSON output.
  * Add support for linux-home flag for GPT.
  * Add --fix option.
  added patches:
  - direct-handling-of-partition-type-id-and-uuid.patch
  - parted-json-no-type-flag.patch
  refreshed patches:
  - libparted-open-the-device-RO-and-lazily-switch-to-RW.patch
  - parted-2.4-ncursesw6.patch
  - parted-add-ignore-busy-option.patch
  - parted-fix-resizepart-and-rm-command.patch
  - parted-implement-wipesignatures-option.patch
  - parted-print-max-partitions-for-yast.patch
  - parted-type.patch
  - tests-disable.patch
  removed patches:
  - parted-escape-printed-device-path.patch
  - parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="aschnell@suse.com" date="1652875200">- add new type command from upstream
  added patches:
  - type-command.patch</changelog>
  <changelog author="dmueller@suse.com" date="1654084800">- use static keyring file (and switch to the release team keyring)</changelog>
  <changelog author="aschnell@suse.com" date="1655985600">- drop type flag (SUSE specific) to fix bsc#1190847
  refreshed patches:
  - parted-mac.patch
  - tests-adapt-to-SUSE.patch
  drop patches:
  - parted-type.patch
  - parted-type-accept-hex.patch
  - parted-json-no-type-flag.patch</changelog>
</package>
<package pkgid="b26aac7efe6c95d626853d80063f2d6c6cb85172113f1a5a3589e8cf57129be7c6a595d81d79edf5e80721acb8bc762da519438d4ab3f530d8a62ba8f44db6f7" name="libparted2-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="ro@suse.de" date="1598356800">- re-add missing hunk to fix bsc#1164907
  parted-type-accept-hex.patch
  type on the cmdline could be specified in hex as 0x82</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
  <changelog author="aschnell@suse.com" date="1627300800">- update to version 3.4:
  * Add new partition type flags chromeos_kernel and bls_boot.
  * Add support for the F2FS filesystem.
  refreshed patches:
  - dummy-bootcode-only-for-x86.patch
  - parted-fix-resizepart-and-rm-command.patch
  - parted-type.patch
  - parted-wipeaix.patch
  - tests-adapt-to-SUSE.patch
  removed patches:
  - parted-fix-end_input-usage.patch
  - parted-resize-alias-to-resizepart.patch</changelog>
  <changelog author="aschnell@suse.com" date="1632139200">- run checks during build
- added patches:
  tests-disable.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- BuildRequire python3-base: Fix execution of test suite. Otherwise
  we fail with
  ./t0282-gpt-move-backup.sh: /usr/bin/python3: bad interpreter: No
  such file or directory.</changelog>
  <changelog author="aschnell@suse.com" date="1634644801">- fixed name of shared library package and split off
  libparted-fs-resize (bsc#1191778)</changelog>
  <changelog author="aschnell@suse.com" date="1650456000">- update to version 3.5:
  * Add support for JSON output.
  * Add support for linux-home flag for GPT.
  * Add --fix option.
  added patches:
  - direct-handling-of-partition-type-id-and-uuid.patch
  - parted-json-no-type-flag.patch
  refreshed patches:
  - libparted-open-the-device-RO-and-lazily-switch-to-RW.patch
  - parted-2.4-ncursesw6.patch
  - parted-add-ignore-busy-option.patch
  - parted-fix-resizepart-and-rm-command.patch
  - parted-implement-wipesignatures-option.patch
  - parted-print-max-partitions-for-yast.patch
  - parted-type.patch
  - tests-disable.patch
  removed patches:
  - parted-escape-printed-device-path.patch
  - parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="aschnell@suse.com" date="1652875200">- add new type command from upstream
  added patches:
  - type-command.patch</changelog>
  <changelog author="dmueller@suse.com" date="1654084800">- use static keyring file (and switch to the release team keyring)</changelog>
  <changelog author="aschnell@suse.com" date="1655985600">- drop type flag (SUSE specific) to fix bsc#1190847
  refreshed patches:
  - parted-mac.patch
  - tests-adapt-to-SUSE.patch
  drop patches:
  - parted-type.patch
  - parted-type-accept-hex.patch
  - parted-json-no-type-flag.patch</changelog>
</package>
<package pkgid="fa98dd1623bd357afe3ae6439b28e958432e4b6486c66720b78a61d384b8d045b718064c93ef4c06f1c31d5a724790dc2bb22b500b4e7d2c812edf64bc1d9ff4" name="libpath_utils1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.2.1" rel="slfo.1.1_1.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="b832fdda237203eddb836ea820b961aebb00d070407c45310b2e65f481fe670daa97f5e5600880b8b5df3e14c501235fe7e4e269fcfb432311a50dba16fde33e" name="libpcap-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10.4" rel="slfo.1.1_2.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pmonreal@suse.com" date="1725624000">- Security fix: [bsc#1230020, CVE-2023-7256]
  * libpcap: double free via addrinfo in sock_initaddress()
  * Add libpcap-CVE-2023-7256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725624001">- Security fix: [bsc#1230034, CVE-2024-8006]
  * libpcap: NULL pointer derefence in pcap_findalldevs_ex()
  * Add libpcap-CVE-2024-8006.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767614400">- Security fix: [bsc#1255765, CVE-2025-11961]
  * Fix out-of-bound-write and out-of-bound-read in pcap_ether_aton()
    due to missing validation of provided MAC-48 address string
  * Add libpcap-CVE-2025-11961.patch</changelog>
</package>
<package pkgid="8318defec3393354a9fe7d6bec177c12509e4276ecb90b353b11be22c23e01bae54f60e286091fb5bdea3bc49a7ea0bdea6e4848e84d3e356f35e9781ebb4006" name="libpcap1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10.4" rel="slfo.1.1_2.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pmonreal@suse.com" date="1725624000">- Security fix: [bsc#1230020, CVE-2023-7256]
  * libpcap: double free via addrinfo in sock_initaddress()
  * Add libpcap-CVE-2023-7256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725624001">- Security fix: [bsc#1230034, CVE-2024-8006]
  * libpcap: NULL pointer derefence in pcap_findalldevs_ex()
  * Add libpcap-CVE-2024-8006.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767614400">- Security fix: [bsc#1255765, CVE-2025-11961]
  * Fix out-of-bound-write and out-of-bound-read in pcap_ether_aton()
    due to missing validation of provided MAC-48 address string
  * Add libpcap-CVE-2025-11961.patch</changelog>
</package>
<package pkgid="a4c2e0f802727d2f7b364273f5c059fcca1dd0dd89b5543410e4ec5e22b04593598e2bb821c14f1830d389eae2ef871ec6c29722fbbdb095c003f7a8334a21c9" name="libpci3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.0" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1585828800">- Update to version 3.6.4:
  * A new back-end for the GNU Hurd was contributed by Joan Lledó.
  * When printing VPD item identifiers, non-ASCII characters are escaped.
- Changes for version 3.6.3
  * `lspci -t' (tree mode) can be combined with `-s' to show a sub-tree.
    We also fixed potential buffer overflows in the tree dumper.
  * Cleaned messy code for dumping of I/O, memory, and ROM regions.
    This helped fixing a bug, which caused some 64-bit regions to be
    reported as virtual. All flags are now printed after the address
    (previously, "[virtual]" and "[enhanced]" were before it for no good
    reason).
  * Added pci_find_cap_nr() to the library, which handles capabilities
    which occur multiple times in a single device.
  * Minor improvements in printing of PCIe capabilities.
  * We now decode the Multicast and Secondary PCI Express extended
    capabilities.
  * The list of capability names available to setpci was updated.
  * Minor bugs were fixed in FreeBSD and Solaris ports.
  * We now prefer HTTPS URLs in all documentation
  * The pci.ids file has a man page.
  * As usually, updated pci.ids to the current snapshot of the database.
- Drop no longer relevant pciutils-3.2.0_update-dist.patch
- Do not ship update-pciids script - they are provided via hwdata
  package and we dont want to override data by other packages</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- Update to 3.7.0:
  * Add or improved the following capabilities:
    Designated Vendor-Specific, Compute eXpress Link,
    Resizable BARs, VF Resizable BARs, Link Capabilities 2,
    Link Status 2
  * On Linux, lspci can show IOMMU groups
  * setpci can be asked to skip bus scan and operate on a device
    completely specified by its domain/bus/dev/func address
  * back-ends which do not support domains now correctly fail when
    trying to access devices outside domain 0
- Add upstream keyging to verify source signature</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1620734400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642939200">- Set sbindir to /usr/bin to fix Steam issues
  (rh#1858437, gh#ValveSoftware/steam-for-linux#3306)
- Add symlinks from /usr/sbin to /usr/bin</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to 3.8.0:
  * Filters can now match devices based on partially specified
  class code and also on the programming interface.
  * Reporting of link speeds, power limits, and virtual function tags
  has been updated to the current PCIe specification.
  * We decode the Data Object Exchange capability.
  * Bus mapping mode works in non-zero domains.
  * pci_fill_info() can fetch more fields: bridge bases, programming
  interface, revision, subsystem vendor and device ID, OS driver,
  and also parent bridge. Internally, the implementation was rewritten,
  significantly reducing the number of corner cases to be handled.
  * If the configuration space is not readable for some reason
  (e.g., the cfgmgr32 back-end, but also badly implemented sleep mode
  of some devices), lspci prints only information provided by the OS.
  * The Hurd back-end was greatly improved thanks to Joan Lledó.
  * Various minor bug fixes and improvements.
  * As usually, updated pci.ids to the current snapshot of the database.
- Rebase pciutils-3.1.9_pkgconfig.patch
- Rebase pciutils-ocloexec.patch
- Rebase pciutils-endianh.patch
- Drop pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1652356800">- Make shared library executable</changelog>
  <changelog author="dmueller@suse.com" date="1669982400">- update to 3.9.0:
  * We decode Compute Express Link (CXL) capabilities.
  * The tree mode of lspci is now compatible with filtering options.
  * When setpci is used with a named register, it checks whether
    the register is present in the particular header type.
  * Linux: The intel-conf[12] back-ends prefer to use ioperm() instead
    of iopl() to gain access to I/O ports.
  * mmio-conf1(-ext): Added a new back-end implementing the intel-conf1
    interface over MMIO. This is useful on some ARM machines, but it
    requires manual configuration of the MMIO addresses.
  * As usually, updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1683806400">- Update to 3.10.0:
  - Fixed bug in definition of versioned symbol aliases
    in shared libpci, which made compiling with link-time
    optimization fail.
  - Filters now accept "0x..." syntax for backward compatibility.
  - Windows: The cfgmgr32 back-end which provides the list of devices
    can be combined with another back-end which provides access
    to configuration space.
  - ECAM (Enhanced Configuration Access Mechanism), which is defined
    by the PCIe standard, is now supported. It requires root privileges,
    access to physical memory, and also manual configuration on some
    systems.
  - lspci: Tree view now works on multi-domain systems. It now respects
    filters properly.
  - Last but not least, pci.ids were updated to the current snapshot
    of the database. This includes overall cleanup of entries with
    non-ASCII characters in their names -- such characters are allowed,
    but only if they convey interesting information (e.g., umlauts
    in German company names, but not the "registered trade mark" sign).</changelog>
</package>
<package pkgid="2e93c506d882eb26975f187f47e6f87b3570052354f38e4c6716f11b9a48288825e54f567fedc5e8ad2f8a47e3ef9fc7aa8f11bdf0a5ee61c43dd403b35be452" name="libpciaccess-debugsource" arch="aarch64">
  <version epoch="0" ver="0.17" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="sndirsch@suse.com" date="1375444800">- u_libpciaccess-vgaarb-add-function-to-get-default-vga-device-and-it.patch:
  Reenable default device when shutting down VGA arbitration.
  (bnc#714677, bnc#832973).</changelog>
  <changelog author="zaitor@opensuse.org" date="1376740800">- Update to version 0.13.2:
  + Fix Sun bug #7035791: scanpci should report 64 bit registers.
  + Resync COPYING file with copyrights/licenses from code.
  + pci_device_solx_devfs_probe: implicit conversion changes
    signedness warnings.
  + pci_device_solx_devfs_read: fix sign conversion/comparison
    warnings.
  + Support more pci functions on NetBSD.
  + Update NetBSD support and fix build on NetBSD-4.
  + Enable boot_vga support only if WSDISPLAYIO_GET_BUSID is
    defined. Fixes build on NetBSD-5.
  + Add legacy IO routines for FreeBSD (fdo#63583).
  + pci_id_file_open: move variable inside the #ifndef that uses
    it.
  + Define PCI_MATCH_ANY as an unsigned int.
  + Move 'const' to correct place, so it has meaning.
  + Protect config.h like usual.
  + autogen.sh: Implement GNOME Build API
  + configure: Remove AM_MAINTAINER_MODE
  + PCI: set correct mask value when matching for bridges.
  + scanpci: print meaningful info on BASEROM
  + libpciaccess:
  - sparc rom read fix
  - implementation of boot_vga in Solaris
  - fix memory usage errors
  + Implement legacy io &amp; map for x86 backend
  + Solaris:
  - Refactor pci_device_solx_devfs_map_range to reduce code
    duplication.
  - Implement map_legacy &amp; legacy_io functions.
  - Probe improvement.
  - Add domain support for sparc platform.
  - Remove #defines for Ultra 45 southbridge device ids.</changelog>
  <changelog author="sndirsch@suse.com" date="1423483200">- Update to version 0.13.3
  * This release provides a number of platform-specific improvements
    for various platforms, including Linux, Solaris, OpenBSD, NetBSD,
    and Hurd, plus the addition of some support for Cygwin.
- added baselibs.conf as source to specfile in order to make factory
  checkin policy happy</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">-  Update to version 0.13.4
  * Add missing guards around config.h inclusion
  * Check for __linux__ instead of linux during compilation
  * Include the POSIX fcntl.h instead of sys/fcntl.h
  * Include config.h before any other headers.
  * Bug 89151: Fix build on NetBSD/alpha and NetBSD/sparc64.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1491652800">- Update to version 0.13.5:
  This release includes musl build fixes, improvements to the
  Solaris backend and allows parsing separate sysfs files rather
  than reading the config file on newer kernels.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 0.14:
  This release adds support for 32-bit PCI domain IDs, which are common in
  virtualized environments. This support has been tested on Linux, and probably
  also "just works" on FreeBSD and Solaris, to the extent that the underlying
  OS supports it.</changelog>
  <changelog author="sndirsch@suse.com" date="1562932800">- Update to version 0.15
  * Updates for FreeBSD and Hurd support
  * Fixed multifunction bridge enumeration
  * Fixed a crash when no PCI bus exists</changelog>
  <changelog author="sndirsch@suse.com" date="1563796800">- Update to version 0.16
  * This release brings a compilation fix on 32-bit arm with newer
    glibc, and fixes the raw x86 backend's memory mapping to handle
    writes correctly.</changelog>
  <changelog author="sndirsch@suse.com" date="1666094400">- Update to version 0.17
  * Fix spelling/wording issues
  * meson: install man page in mandir/man1/, not mandir/1/
  * gitlab CI: add a basic build test for both autotools and meson
  * gitlab CI: stop requiring Signed-off-by in commits
  * configure.ac: Use pkg-config to find zlib dependency info
  * Obtain correct value of is_64 and is_prefetchable PCI device fields
  * hurd_pci: Use __pci_conf_ variants of pci_conf_
  * x86: Use gnumach device instead of /dev/mem on GNU systems &amp;&amp; factorise ifdefs
  * x86: Remove mapping of regions during probe - otherwise remapping later fails
  * x86: Remove probe during create, other backends don't do this
  * hurd: device_open(pci), /servers/bus/pci fallback
  * x86: Sort devices by B/D/F due to recursive scan
  * hurd: Don't necessarily look up _SERVERS_BUS_PCI
  * Add a meson build system
  * autoconf: Add meson files to dist tarball
  * pciaccess.pc.in: add Libs.Private
  * Hurd: avoid using the deprecated RPC pci_get_ndevs()
  * hurd: Implement device memory mapping
  * Hurd: Fix initialization order
  * Add pci_device_disable() function
  * missed library installation in meson
  * hurd: Add missing round up size in map_dev_mem
  * hurd: Fix letting map_dev_mem map anywhere
  * hurd: Fix map_dev_mem from non-zero address
  * hurd: Restore initialization order
  * hurd: Fix pci_device_hurd_map_legacy
  * Add support for building on macOS w/o X11, using endian code from "portable_endian.h"...
  * Add parentheses to the macro definition
  * pci_sys set NULL after free
  * Add header protection macro in linux_devmem.h
  * Delete redundant symbols ';'
- switched to meson build system</changelog>
</package>
<package pkgid="5d5eb1db4492603cb88fb59ef6a18ca27e45c6a6767de9687fe872f9948b1cfe53c19862598e0acf36503b6ec44834e70e4684f1fbe1056c572f3dda2834555f" name="libpciaccess0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.17" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="sndirsch@suse.com" date="1375444800">- u_libpciaccess-vgaarb-add-function-to-get-default-vga-device-and-it.patch:
  Reenable default device when shutting down VGA arbitration.
  (bnc#714677, bnc#832973).</changelog>
  <changelog author="zaitor@opensuse.org" date="1376740800">- Update to version 0.13.2:
  + Fix Sun bug #7035791: scanpci should report 64 bit registers.
  + Resync COPYING file with copyrights/licenses from code.
  + pci_device_solx_devfs_probe: implicit conversion changes
    signedness warnings.
  + pci_device_solx_devfs_read: fix sign conversion/comparison
    warnings.
  + Support more pci functions on NetBSD.
  + Update NetBSD support and fix build on NetBSD-4.
  + Enable boot_vga support only if WSDISPLAYIO_GET_BUSID is
    defined. Fixes build on NetBSD-5.
  + Add legacy IO routines for FreeBSD (fdo#63583).
  + pci_id_file_open: move variable inside the #ifndef that uses
    it.
  + Define PCI_MATCH_ANY as an unsigned int.
  + Move 'const' to correct place, so it has meaning.
  + Protect config.h like usual.
  + autogen.sh: Implement GNOME Build API
  + configure: Remove AM_MAINTAINER_MODE
  + PCI: set correct mask value when matching for bridges.
  + scanpci: print meaningful info on BASEROM
  + libpciaccess:
  - sparc rom read fix
  - implementation of boot_vga in Solaris
  - fix memory usage errors
  + Implement legacy io &amp; map for x86 backend
  + Solaris:
  - Refactor pci_device_solx_devfs_map_range to reduce code
    duplication.
  - Implement map_legacy &amp; legacy_io functions.
  - Probe improvement.
  - Add domain support for sparc platform.
  - Remove #defines for Ultra 45 southbridge device ids.</changelog>
  <changelog author="sndirsch@suse.com" date="1423483200">- Update to version 0.13.3
  * This release provides a number of platform-specific improvements
    for various platforms, including Linux, Solaris, OpenBSD, NetBSD,
    and Hurd, plus the addition of some support for Cygwin.
- added baselibs.conf as source to specfile in order to make factory
  checkin policy happy</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">-  Update to version 0.13.4
  * Add missing guards around config.h inclusion
  * Check for __linux__ instead of linux during compilation
  * Include the POSIX fcntl.h instead of sys/fcntl.h
  * Include config.h before any other headers.
  * Bug 89151: Fix build on NetBSD/alpha and NetBSD/sparc64.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1491652800">- Update to version 0.13.5:
  This release includes musl build fixes, improvements to the
  Solaris backend and allows parsing separate sysfs files rather
  than reading the config file on newer kernels.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 0.14:
  This release adds support for 32-bit PCI domain IDs, which are common in
  virtualized environments. This support has been tested on Linux, and probably
  also "just works" on FreeBSD and Solaris, to the extent that the underlying
  OS supports it.</changelog>
  <changelog author="sndirsch@suse.com" date="1562932800">- Update to version 0.15
  * Updates for FreeBSD and Hurd support
  * Fixed multifunction bridge enumeration
  * Fixed a crash when no PCI bus exists</changelog>
  <changelog author="sndirsch@suse.com" date="1563796800">- Update to version 0.16
  * This release brings a compilation fix on 32-bit arm with newer
    glibc, and fixes the raw x86 backend's memory mapping to handle
    writes correctly.</changelog>
  <changelog author="sndirsch@suse.com" date="1666094400">- Update to version 0.17
  * Fix spelling/wording issues
  * meson: install man page in mandir/man1/, not mandir/1/
  * gitlab CI: add a basic build test for both autotools and meson
  * gitlab CI: stop requiring Signed-off-by in commits
  * configure.ac: Use pkg-config to find zlib dependency info
  * Obtain correct value of is_64 and is_prefetchable PCI device fields
  * hurd_pci: Use __pci_conf_ variants of pci_conf_
  * x86: Use gnumach device instead of /dev/mem on GNU systems &amp;&amp; factorise ifdefs
  * x86: Remove mapping of regions during probe - otherwise remapping later fails
  * x86: Remove probe during create, other backends don't do this
  * hurd: device_open(pci), /servers/bus/pci fallback
  * x86: Sort devices by B/D/F due to recursive scan
  * hurd: Don't necessarily look up _SERVERS_BUS_PCI
  * Add a meson build system
  * autoconf: Add meson files to dist tarball
  * pciaccess.pc.in: add Libs.Private
  * Hurd: avoid using the deprecated RPC pci_get_ndevs()
  * hurd: Implement device memory mapping
  * Hurd: Fix initialization order
  * Add pci_device_disable() function
  * missed library installation in meson
  * hurd: Add missing round up size in map_dev_mem
  * hurd: Fix letting map_dev_mem map anywhere
  * hurd: Fix map_dev_mem from non-zero address
  * hurd: Restore initialization order
  * hurd: Fix pci_device_hurd_map_legacy
  * Add support for building on macOS w/o X11, using endian code from "portable_endian.h"...
  * Add parentheses to the macro definition
  * pci_sys set NULL after free
  * Add header protection macro in linux_devmem.h
  * Delete redundant symbols ';'
- switched to meson build system</changelog>
</package>
<package pkgid="8801830babc6d8f6fc70196ecde1741efcfd7abaebcf559d319c5570695a929085be787635f8653309af86ac4329cb9111188ecab10658d286f57819e0ed6027" name="libpcp3-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="slfo.1.1_4.1"/>
  <changelog author="dimstar@opensuse.org" date="1700222400">- Only auto-trigger pcp-pmda-postfix for automatic installation
  when pcp and postfix are present. Supplementing pcp alone would
  auto-install postfix on all systems.
- Supplement pcp-pmda-rsyslog against pcp and rsyslog.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1701172800">- This version *does not* break API or ABI compatibility with the
  previous 5.2.5 release.
- Remove 0009-remove-rundir-install.patch. Obsoleted.
- Remove 0011-Revert-systemd-remove-Wants-pmcd-from-pmlogger-and-p.patch.
  Obsoleted.
- Various minor changes/improvements to the RPM spec file.
- Upgrade to 5.3.7. This is the latest release in the 5.X series.
  Changes from 5.3.7:
  - Client tools and utilities:
    pcp2elasticsearch: implement authentication support
    pcp-ss: fixed incorrect client-side filtering
    pcp-ss: fixed reporting of IPv6 sockets in LISTEN state
    pmrep: 'iostat-multipath-wwid' for multipath disk monitoring
  - PMDA additions, enhancements and bug fixes:
    pmdalinux: add disk.wwid.* aggregated multipath metrics
    pmdalinux: add new MPTCP metrics from latest Linux kernel versions
    pmdalinux: fix up TTY metrics on s390x platform
    pmdalinux: add network.tcp.tcploss metric
    pmdamssql: fix config file logic, python string handling
    pmdadenki: fix crash in labels callback with multiple instances
    pmdasockets: changed default filter in sockets PMDA to "state all"
  - Server-side utilities and log management scripts:
    pmlogconf: correctly handle metric state transitions on (re-)probe
    pmie systemd: add missing systemd configuration and shell code
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_web: resolve a number of small memory leaks
  - Security Enhanced Linux:
    selinux: use interface calls instead of a simple rule
    selinux: add several more obscure missing selinux rules
    selinux: additional debugfs policy requirement for pmdakvm
    selinux: resolve an AVC observed on el8 with pmdashping
  - Misc build, infrastructure and packaging updates:
    rpms: switch to conditional selinux dependency for containers
    debs: reproducible build updates
  - Documentation and QA infrastructure:
    docs: add section to pcpcompat(1) about python2
    docs: update notes about sar2pcp, iostat2pcp in pcpcompat(1)
    docs: improve pmproxy --timeseries and pmseries --load documentation
    CI: disable cppcheck for pcp-atop temporarily due to a cppcheck bug
  Changes from 5.3.6:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L468
  Changes from 5.3.5:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L497
  Changes from 5.3.4:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L557
  Changes from 5.3.3:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L606
  Changes from 5.3.2:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L665
  Changes from 5.3.1:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L753
  Changes from 5.3.0:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L854</changelog>
  <changelog author="mls@suse.de" date="1702555200">- declare the users/groups we create in the preinstall scripts
  (this is needed for newer rpm versions)</changelog>
  <changelog author="tina.mueller@suse.com" date="1706788800">- Change YAML::XS::LibYAML to YAML::XS as this is the module to be used</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1711972800">- Upgrade to 6.2.0 (bsc#1217826 CVE-2023-6917, bsc#1217783):
  * Changes from pcp-6.2.0:
  - Client tools and utilities:
    pmlogger: default to creating version 3 PCP archives
    pmie, pmlogger, pmcd, pmproxy: init script hardening to
    run less as root:root, more as pcp:pcp and more safely
    pcp-reboot-init: new systemd service for $PCP_RC_DIR setup
    pcp2arrow: new, export metrics to parquet format for pandas
    pcp-atop: deterministic process sort when handling NULLs
    pcp-atop: update to v2.10.0 upstream code
    pcp-htop: update to latest upstream fixes
    pcp-geolocate: function with older versions of python
    pcp-meminfo: resolve possible 'broken pipe' diagnostics
    pcp-ss: fix handling of listening state sockets to match ss
    pcp-ss: fix the UDP UNCONN vs LISTEN state handling
  - PMDA additions, enhancements and bug fixes:
    pmdaproc: improvements for process accounting metrics
    pmdalinux: add pgpromote* and pgdemote* memory metrics
    pmdalinux: add metric sysfs.module.zswap.max_pool_percent
    pmdalinux: add new SNMP metric network.ip.outtransmits
    pmdasummary: send state change 0 (no change) back to pmcd
    pmdapostgresql: support the psycopg3 python module as well
    pmdaopenmetrics: kepler support - live metrics and logging
  - Server-side utilities and log management scripts:
    pmlogrewrite, pmlogredact: fix for missing data volumes
    pmcd: cosmetic change to avoid pipe2 name clash
    runaspcp: new helper utility for unprivileged rc scripts
    pmnsmerge: be more defensive in qsort comparison routine
    pmlogsize: fix qsort comparison function handling of equality
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: pmOpenLog refactor for handling previous log files
    libpcp: new __pmCleanMapDir routine to aid log culling
    libpcp &amp; pmcd: READY-NOT-READY hardening
    libpcp: avoid possible thread issues (coverity)
    libpcp: refactor pmDupContext for thread safety
    libpcp_import: add guard in pmiPutMark to prevent SIGSEGV
  - Build, infrastructure and packaging updates:
    build: changes to re-enable builds for FreeBSD 12, 13, 14
    build: add diffutils rpm dep as pmdaproc script uses diff
    build: add main.yml for building and publishing container
    build: resolve compiler warnings in various tools/libraries
    packaging: use tmpfiles.d method to create PCP_RUN_DIR
    build: packaging changes for openSUSE 15.5 and 15.6
    debian: do not ship empty directory /usr/lib/pkgconfig
    build: el10 systemd-presets for pmcd/pmie/pmlogger enabling
    build: drop rpm dep on bpftool as local version used only
    build: change perl YAML::XS::LibYAML module to YAML::XS
  - Security Enhanced Linux:
    selinux: policy improvements for CentOS/RHEL 7 and 8
  - Documentation:
    docs: Fedora 39 found some tbl(1)/troff(1) issues, fix
    docs: add an explicit code-of-conduct for PCP
    docs: pmns(5) note that metric names must only contain ASCII
    docs: update the BPF README to describe bpftool reality
  * Changes from pcp-6.1.1:
  - Client tools and utilities:
    pmie: add -o/--format to control output format with archives
    pcp-geolocate: automatic latitude and longitude metric labels
    pcp-atop: fix segv encountered on a multi-node NUMA system
    pcp-atop: add last level cache support using pmdaresctrl
    pcp-htop: updated with latest fixes from htop.dev
    pcp-netstat: without time options report one sample only
    pcp-netstat: add machine header info
    pcp-meminfo: without time options report one sample only
    pcp-meminfo: add machine header info
    pcp-buddyinfo: resolve a key issue when using python v2
    pcp-zoneinfo: ensure determinism in pcp-zoneinfo output
    pcp-zoneinfo: fix failure with older PCP metric instances
  - PMDA additions, enhancements and bug fixes:
    pmdaresctrl: new PMDA for x86_64 last level cache metrics
    pmdafarm: new Seagate Field Access Reliability Metrics PMDA
    pmdadarwin: updated for changes in NFS stats management
    pmdalinux: new mem.util metrics from recent kernel versions
    pmdalinux: new networking metrics relating to MPTcpExt
    pmdasockets: allow sockets with duplicate sources to exist
    pmdabpftrace: rework exit/wait handling to avoid errors
    pmdahaproxy: fixed connect script handling of string quoting
    pmdastatsd: fixed metadata for a couple of metrics
    pmdalinux: fixed semantics for mem.vmstat.nr_free_cma metric
    pmdadenki: simplification and refactoring of metrics
    pmdagfs2: correct permissions of several installed files
    pmdakvm: fixed semantics for kvm.largepages metric
  - Server-side utilities and log management scripts:
    pmproxy: add support for HTTP compression
    pmlogger: rework heuristic for Latest folio creation
    pmlogctl: fix incorrect rewriting of PCP_ARCHIVE_DIR
    pmlogredact: add latitude and longitude labels to redacted set
    pmlogrewrite: resolve a small memory leak
    pmlogrewrite: use PM_CTXFLAG_METADATA_ONLY for speed
    pmcd: add $PMCD_CREDS_TIMEOUT as an alternative to -q
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: new PM_CTXFLAG_METADATA_ONLY flag for pmNewContext
    libpcp: fix a couple of derived metric bugs
    libpcp_web: implement config override by canonical env vars
  - Misc build, infrastructure and packaging updates:
    build: new CI build to keep PCP for MacOS up-to-date
    build: several fixes to tools when compiling with clang
    build: install pmlog[redact,reduce,rewrite] on default PATH
    build: default to using a path-prefixed PCP_PYTHON_PROG
    build: update the Fedora container to f38
    build: drop of i386/i686 architectures from Fedora builds
    build: enable build of pmdalibvirt on CentOS 7 platform
    build: enable Qt6 in Fedora and post-RHEL-9 rpm spec files
    build: add pyodbc rpm dep for pcp-pmda-mssql in RHEL 9
  - Security Enhanced Linux:
    selinux: allow pmproxy use the io_uring API
    selinux: policy fixes for recent AVCs on RHEL 7.9
    selinux: add netlink_kobject_uevent_socket getattr (bpftrace)
  - Documentation:
    man pages: change all to map font CW -&gt; CR for latest groff
    man: note pmseries Redis timeseries load order limitation
  * Changes from pcp-6.1.0:
  - pmlogredact: new command for archive anonymisation
  - pcp-atop: new bar graph visualisation mode
  - pcp-atop: update to atoptool.nl 2.9.1 sources
  - pcp-htop: support dynamic screens (user-configurable tabs)
  - pcp-htop: update to latest upstream source
  - pcp-htop: default screens for filesystems, disks and cgroups
  - pcp-htop: non-default screens for several libbpf modules
  - pcp-htop: fix mishandling of some process argument shading
  - pcp-buddyinfo: new tool reporting Linux buddyinfo stats
  - pcp-meminfo: new tool reporting Linux kernel memory stats
  - pcp-netstat: new tool reporting networking statistics
  - pcp-slabinfo: new tool reporting Linux slabinfo kernel stats
  - pcp-zoneinfo: new tool reporting Linux zoneinfo kernel stats
  - pmsleep,pmpause: add -w where option for systemd annotation
  - pmieconf: move test_action from primary into a separate group
  - pmieconf: update webhook action for better EDA integration
  - pmlogconf: remove latency-inducing fsync on config write
  - pmlogconf: updates for new metrics used in pcp-atop
  - pmdalinux: add three new /proc/vmstat pscan/pgsteal metrics
  - pmdalinux: fix bug when lsb-release is only /etc/*-release file
  - pmdabpf: add -q/--tryload command line option
  - pmdaopenmetrics: reduce transient instance logs, improve labels
  - libpcp: improved SSL error reporting
  - selinux: add policy updates for pmproxy (io_uring,ipc_lock)
  - build: support for Qt6, drop remaining Qt4 configure-support
  - build: updated licence strings in spec files to follow SPDX
  - build: default to using a path-prefixed PCP_PYTHON_PROG
  - build: fix several makefile clean targets for deb packagers
  - build: configure.ac update to autoconf 2.71
  - build: add tarball upload to release workflow
  - docs: pmie updates to explain action behaviour with archives
  - docs: retire "archive log" phrase from man pages and books
  - docs: transition Artifactory (no free service) to Packagecloud
  * Changes from pcp-6.0.5:
  - pmie: ensure pmie.log.YYYYMMDD is owned by pcp:pcp
  - pcp2json: extend pcp2json with an option to send HTTP POSTs
  - pmlogger: fix pidfile update; pmlogger.pid is for primary only
  - pmdumptext: fix scaling when -i command line option is used
  - pmlogextract: improve resilience in corner-case conditions
  - pmdasmart: additional NVME power state metrics
  - pmdasmart: additional NVME disk information metrics
  - pmdasmart: update help with proper description of DC status
  - pmdasmart: filter out zram devices when probing for devices
  - pmdahacluster: handle pacemaker 2.1.5 crm_mon output changes
  - pmcd: improve debugging flags and diagnostics in general
  - libpcp_pmda: refactor and improve library diagnostics
  - selinux: updates to policy for pmlogger and pmlogger_daily
  - build: switch rpm spec files to SPDX license identifiers
  - build, qa: numerous updates to improve PCP on OpenBSD
  - build: switch from registry.centos.org to quay.io for el6/el7
  - ci: add centos6 back into the fold as its on quay.io now
  - ci: add Debian 12, drop Ubuntu 16 and Fedora 35
  * Changes from pcp-6.0.4:
  - pmcd: propogate a new PMCD_HOSTNAME_CHANGE flag to clients
  - pmdumplog: support preferred alternate name pmlogdump
  - pmlogger: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmlogger_janitor: new script called from pmlogger_check
  - pmlogger: add -d directory argument for alternate naming schemes
  - pmlogrewrite: fix remaining corner case for indom renumbering
  - pmie: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmie: catching SIGUSR1 triggers a pending task dump
  - pmie_{check,daily}: change pmie.log handling regime
  - pmieconf: add support for a webhook action to pmieconf
  - pmieconf: add a wall rule action for adm group members
  - pmieconf: add support for an action testing rule
  - pmieconf: use correct pmieconf percent type for thermal throttle
  - pmieconf: add minimum pct conjunction to entropy for small poolsizes
  - pminfo: use -b to batch pmDesc retrievals as well as pmResult
  - pmstat: fix corner case handling of automatic pmcd reconnect
  - pcp2influxdb: add requests.post timeout to avoid hangs
  - pcp-dstat: fixes CSV output to show all (not visible) plugins
  - pcp-htop: support File Descriptor Meter
  - pcp-htop: sync latest fixes from upstream htop
  - pcp-mpstat: fixed broken pipe issue
  - pcp-ps: fix exception handling for process name
  - rc scripts: ensure pmcd.conf not rewritten unnecessarily
  - pmdalinux: add a couple of new /proc/net/snmp ICMP metrics
  - pmdalinux: add new network.tcp.tcpplbrehash metric
  - pmdaproc: add new proc.smaps.pss_dirty metric
  - pmdarabbitmq: add timeout handling to http requests
  - pmdastatsd: stats and blocklisted metric names alignment
  - libpcp: new pmAddDerivedText API for derived metric help text
  - libpcp: check level parameter on entry to pmLookupText
  - libpcp: new PMAPI error code addition for bad API arguments
  - libpcp: allow derived metrics semantics of 'similar' indoms
  - selinux: add missing context information on farm services
  - build: fix a number of Debian sub-package dependency issues
  * Changes from pcp-6.0.3:
  - build: fix Debian postinst script handling of missing systemctl
  - pmdaproc: support per-cgroup IRQ PSI metrics in recent kernels
  - pmdalinux: support for system wide IRQ PSI metrics in recent kernels
  - pmlogrewrite: improved handling of unused instance domains
  * Changes from pcp-6.0.2:
  - Client tools and utilities:
    pcp-atop: update to latest upstream atoptool.nl sources
    pcp-atop: cgroup, NUMA memory and NUMA CPU support
    pcp-htop: update to latest upstream htop.dev sources
    pcp-dstat: fix handling of --swap with -f (full) option
    pcp-dstat: fix columns for --net-packets
    pcp-mpstat: fix handling of log-once summary metric values
    pcp-mpstat: improve error handling for the current values
    pcp-ps: added capabilities to show N samples with archives
    pcp-ps: fix handling of the -o option
    pcp-ps: fix broken pipe errors when piping to head(1)
    pcp-ps: fix process "START" column calculation and rounding
    pcp-pidstat: fix broken pipe errors when piping to head(1)
    pmdumplog: extend -x so -xxx reports timestamps in Epoch format
    pmlogger: refactor getting FQDN for local host
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set config default for biosnoop module to disabled
    pmdabpf: port forward to latest vendored libbpf-tools code
    pmdalinux: boolean metric network.interface.virtual from sysfs
    pmdalinux: more careful slabinfo 32/64 bit type multiplication
    pmdalinux: add NUMA external fragmentation metric via sysfs
    pmdalinux: fix pmid numbering issue with hinv.map.scsi_id
    pmdanfsclient: fix srcport handling for RDMA and UDP mounts
    pmdaopenmetrics: validate all names before using them for metrics
    pmdaoverhead: new PMDA to measure overhead for groups of processes
    pmdastatsd: static metric memory leak fix
    pmdastatsd: ragel parser refactor and fix
  - Server-side utilities and log management scripts:
    pmieconf: new pmie rule checking file descriptor limits
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: fix buffer issue for user/group name lookups
    libpcp_web: improve error handling in pmseries AST parser
  - Misc build, infrastructure and packaging updates:
    configure.ac: fixes for improved C99 compatibility
    configure.ac: use QTDIR search path only when given
    MacOS: build: fix shared library builds on modern Macs
    OpenBSD: build updates for clang, Qt and openssl
    libbpf: updated minimium version to 0.8.0, ARM and PPC support
    Qt: update minimum required versions for libqwt
    Drop no-longer-used pmlogger_daily_report systemd rpm spec code
    Determine clang version without optional llvm-config utility
    Another attempt to get the man/man-db/mandoc stuff sorted
  - Security Enhanced Linux:
    Policy updates for pmdastatsd
  - Documentation and QA infrastructure:
    Add help text for some OpenBSD kernel instance domains
    Provide more detailed explanation for default PMLOGGER_INTERVAL
    pmdaChildren(3): clarify the memory allocation scheme
    pcp-ps(1) man page fixes.
  * Changes from pcp-6.0.1:
  - Security Enhanced Linux:
    selinux: rework policy to use optional_policy
    selinux: rework policy to use an independent policy
    selinux: new cluster_exec_t policy handling for pmdahacluster(1)
    selinux: retire those parts of the build affecting CentOS 6
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set perf_buffer__poll timeout to 0 for optimal sampling
    pmdabpf: add CO-RE biosnoop
    pmdabpf: no BPF debug messages unless debugging (-Ddev0)
    pmdalinux: add "squashfs" to the list of ignored filesystem types
    pmdasnmp: install agent specific configuration file to PMDATMPDIR
    pmdakvm: initialise perf_event interface only if/when needed
  - Client tools and utilities:
    pcp-ps: initial version of a PCP implementation of ps(1)
    pcp-dstat: add --nomissed command line option for large systems
    pmfind, libpcp_web: MMV and shutdown memory management fixes
    pmlogreduce: fix corner-case in temporal index generation
    pmlogcheck: tighten some pmlogcheck pass0 checks
    pmseries: fix sampling when start &lt; first sample or series has gaps
    shell completion: improve pmrep/zsh instance completion in live mode
    shell tools: convert fgrep and egrep over to grep -F and -E
  - Server-side utilities and log management scripts:
    pmlogger_daily_report: no longer needs any systemd support now
    pmlogger_daily.sh: fix pmlogger_daily_report test for zeroconf
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_web: fix race conditions affecting pmproxy
    libpcp_web: allow scalar operands in pmseries expressions
    libpcp_web: add pmseries float multiplication
  - Misc build, infrastructure and packaging updates:
    build: add PCP archive analysis container
    build: updates to fix Windows platform builds
    build: update configure.ac to allow builds on Mac M1 (arm64)
    build: make openSUSE spec file builds work again
    containers: remove /build directory
    debian: use deb-systemd-helper if available
    build: fix libpcp check-statics regexp error with objects in subdirs
    build: podman PMDA no longer has deps, make it unconditional
    build: don't package and install pmrep xtract-names helper
    build: updates to hiredis code for pmseries and pmproxy
    build: updates to hiredis-cluster code for pmseries and pmproxy
    build: fix Makepkgs handling of argument parameters
    build: use vendored github.com/libbpf/bpftool/libbpf and update
    build: use vendored github.com/iovisor/bcc/libbpf-tools
    build: use vendored git.code.sf.net/p/qwt and update
    build: fix bpf PMDA inclusion check
    build: fix windows default pmcd.conf entry, dup path component
    build: rework Python3 and Python2 configure.ac logic
    packaging: fix rpm systemd-sysusers on f37 and rawhide
  - Documentation and QA infrastructure:
    docs: small typo fixes relating to secure connections
    docs: fix sheet2pcp(1) man page quoting in examples
    pmdasample: additional metrics for testing cases
  * Changes from pcp-6.0.0:
  - Major changes:
    1. Add version 3 PCP archive support: instance domain change-deltas,
    Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary
    timezones support, 64-bit file offsets used throughout for larger
    (beyond 2GB) individual volumes.
  * * Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting. **
  * * Version 2 archives remain the default (for next few years). **
    2. Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
    this impacts on libpcp, PMAPI clients and PMCD use of encryption;
    these are now configured and used consistently with pmproxy HTTPS
    support and redis-server, which were both already using OpenSSL.
    3. New nanosecond precision timestamp PMAPI calls for PCP library
    interfaces that make use of timestamps.  These are all optional,
    and full backward compatibility is preserved for existing tools.
  - Client tools and utilities:
    pcp2elasticsearch: implement authentication support
    pcp-dstat: implement support for the top-alike plugins
    pcp-dstat: add plugin configuration for ZFS metrics
    pcp-dstat: battery charge remaining config using denki metrics
    pcp-htop: update to latest stable upstream release
    pcp-htop: initial support for screen tabs in the user interface
    pcp-pidstat: correct operation of the -p ALL|SELF options
    pmlogger: small changes for handling derived metrics better
    pmlogger, import: support configurable default archive version
    pcp2xxx: ignore pmrep-specific options
    pmlogger: extra hardening, backtrace symbol improvements
    pmlogger: add -V (output archive version) command line option
    pmseries: add sum(), avg() and stdev() functions
    pmseries: add nth_percentile() and topk() functions
    pmseries: add max_inst() and max_sample() functions
    pmseries: add min_inst() and min_sample() functions
    pmseries: be more defensive during shutdown error paths
    pmseries: fix assumption that any 40-character string is a SID
    pmseries: allow reporting values from SIDs (not just queries)
    sheet2pcp: add -V (output archive version) command line option
    ganglia2pcp: add -V (output archive version) command line option
    iostat2pcp: add -V (output archive version) command line option
  - PMDA additions, enhancements and bug fixes:
    pmdaapache: do time_t manipulation with sufficient space
    pmdabcc: sync bcc PMDA modules with upstream bcc tools
    pmdabpf: adds CO-RE (Compile Once - Run Everywhere) modules
    (exitsnoop, oomkill, bashreadline, mountsnoop, vfsstat,
    opensnoop, fsslower, statsnoop, tcpconnlat, tcpconnect)
    pmdabpf: support x86, arm and powerpc
    pmdabpf: fixed persistence of indom and cluster identifiers
    pmdabpf: rework setrlimit() logic for some small memory hosts
    pmdabpftrace: move example autostart scripts to /usr/share
    pmdabpftrace: update biolatency example script for kernel 5.16+
    pmdadenki: fix battery detection for non-intel systems
    pmdadenki: add support for multiple active batteries
    pmdadenki: support the -D option for debugging
    pmdadenki: improve labels associated with metrics
    pmdadenki: add battery capacity metric
    pmdadenki: add separate indom help text
    pmdalinux: add new MpTcpExt metrics from latest Linux 5.x kernels
    pmdalinux: updates for latest /proc/net/netstat kernel changes
    pmdalinux: improve network metrics help text
    pmdalinux: fix of tty metrics on s390x platform
    pmdamailq: update to ensure Y2038-safe time_t handling
    pmdammv: use highest available timestamp resolution
    pmdaopenvswitch: additional interface and coverage stats
    pmdapostfix: harden against a not-yet-running postfix
    pmdaproc: fix psargs string for processes with very large PIDs
    pmdaproc: fix cgroup cpu metrics refresh structures
    pmdasockets: prevent string overwrite of ss_stats_t fields
    pmdasockets: add checking to the pmStore filter strings
    pmdastatsd: fix detection of failure memory allocation
  - Server-side utilities and log management scripts:
    pmproxy: allow request parameters to be sent in the request body
    pmproxy: fix race on teardown of pcp protocol proxy clients
    pmproxy: improve error checking, check uv_pipe_bind result
    pmproxy: harden logging interfaces, racing with startup
    pmieconf: add several pmie rules for Open vSwitch metrics
    pmlogrewrite: subtle change in semantics for error checking
    pmlogreduce: allow sub-second values for -t option
    pmlogreduce: temporal index, add entries after 100k of data volume
    pmlogcheck: beef up pass 0 to check metadata record types
    pmlogconf: fix reprobing with interactive changes
    pmlogmv: fallback to copy for cross-mount case when link fails
    pmlogmv: add -c (paranoid checksum) option
    pmlogger_farm: add default configuration file for farm loggers
    pmlogger_check: increase PMLOGGER_REQUEST_TIMEOUT from 2 to 10 secs
    pmlogger_daily: callbacks for extra daily log processing tasks
    pmlogger_daily, pmlogger_check: additional systemd-driven changes
    pmlogger_daily: move redirection of stdout+stderr earlier in script
    pmlogger_daily: abandom use of fmt(1) - not portable - uses awk now
    pmlogger_daily_report.sh: some major efficiency improvements
    pmlogger_daily_report: re-enabled for rpm and deb builds
    pmie_check: avoid leaving lock file and temp dir behind
    pm{log,ie}ctl: handle embedded shell syntax in control lines
    pm{log,ie}ctl: add -C args option to pass "args" to pm{logger,ie}_check
    systemd units: pmlogger and pmie farm conditional use of type=exec
    rc-pmcd: reorder the systemd paths attempted in migrate_pid_cgroup
    dbpmda: fix an overlapping copy and add error handling
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_archive: new library for apps that write PCP archives
    libpcp: optimize indom handling in fetchgroup code
    libpcp: drop time_t abuse in getdate.y, use safe sizes
    libpcp: add __pmDumpPDUTrace() and circular trace buffer
    libpcp: add PM_ERR_FEATURE, PM_ERR_TLS error codes
    libpcp: refactor __pmDumpStack(), improve direct calling tools
    libpcp_qmc: require Qt5.6 as the minimum version for builds
    libpcp_qmc: resolve the Qt::endl warning more cleanly
    libpcp_web: stop Redis initialization if Redis version tool old
    libpcp_web: honour config settings that disable redis completely
    libpcp_web: fix memory leaks in discovery, query parsing and APIs
    libpcp_web: honor exclude.metrics setting in pmseries --load
    libpcp_web: run pmFetchArchive(3) in a worker thread
    libpcp_web: fix race condition tearing down load baton
    libpcp_pmda: ensure indom cache write handles time_t safely
    libpcp_import: add interface for setting output log version
    libpcp_import: interfaces for samples with high-resolution timestamps
    python api: updates to allow building from outside git repo
    python api: allow tools using pmconfig module to ignore options
    python api: add python wrappers for highres PMAPI routines
    python api: correct refcounting on pmParseMetricSpec source buffer
  - Security Enhanced Linux:
    selinux: additional policy rules, esp glusterd_log_t
    selinux: bcc PMDA policy to exec private memfd ctypes/libffi objects
    selinux: make use of syslogd_var_run_t map rule conditional
    selinux: policy updates needed for the pmdasockets metrics
    selinux: fine-tune netlink_tcpdiag_socket policy for all platforms
  - Misc build, infrastructure and packaging updates:
    build: latest distros supported (ubuntu 22.04, fedora 37, rhel9, etc)
    build: reproducible debian build efforts
    build: use standard dpkg buildflags variables.
    build: add BuildRequires: python*-pymongo to mongodb PMDA
    build: detect libbpf version for the BPF PMDA
    build: do not transform symlink targets when generating the source tarball
    build: update artifactory deploy script, add recalculate_metadata subtask
    build: update configure script for python2 retirement in rhel9
    build: convert libpcp check-statics to using readelf if available
    build: updates to libpcp check-statics for OpenBSD
    build: fix configure detection of backtrace() and associated hooks
    build: fixed source dependencies within libpcp_web makefile
    build: add rpm conflicts lines on postgresql-pgpool-II
    build: remove pmclient reliance on libpcp.h for timed sleep
    build: remove mmvdump reliance on libpcp.h for mmap wrapper
    build: make perl truly conditional in the PCP build
    build: drop no-longer-needed NSS/NSPR package deps
    build: resolve ostree non-writable /var for pmieconf
    packaging: update rpm specs to solve systemd warnings
    container: bump base image version
    Makepkgs: fix for Debian build (and Qt packaging failure in CI)
    vendor: switch to git-subtree for iovisor/bcc libbpf-tools code
  - Documentation and QA infrastructure:
    docs: update notes about sar2pcp, iostat2pcp in pcpcompat(1)
    docs: add section to pcpcompat(1) about python2
    docs: add fix for readthedocs compilation error
    docs: updates to the Quick Guide documents
    docs: clatifications to pmrep et al: man pages
    docs: improve pmproxy timeseries and pmseries load documentation
    docs: further improvements and fixes to the INSTALL doc
    docs: add pmlogger(1) -V, describe $PCP_ARCHIVE_VERSION in pcp.conf.
    docs: small fixes to the pcp-pidstat man page
    docs: fix webapi documentation typo around polltimeout
    pylint: numerous issues resolved, tracking latest versions
    qa: regression tests for bpftrace PMDA: check probes
    qa: pmdabcc pylint fixups
    qa: rework Redis PING-PONG checks
    qa/check: run tests under timeout(1) control if possible
    qa-summary: allow unified reporting from CI and QA Farm
    qa/admin/show-me-all &amp; qa/show-me: changes for CI integration
    qa/check: add support for "triaged" tests
    ci: send report to Slack when QA workflow is triggered manually
    ci: add required packages to enable bpf PMDA on CentOS Stream 9
    ci: run CodeQL daily and for each PR
    ci: run full QA on pull requests, save history
    ci: unset XDG_RUNTIME_DIR when invoking podman
- Refresh patches:
  * 0001-Install-libraries-without-exec-permission.patch
  * 0002-Remove-CPAN-rpaths.patch
  * 0003-Remove-runlevel-4-from-init-scripts.patch
  * 0010-services-switch-logutil-and-pmieutil-scripts-from-ty.patch
- Change dependency from openssl-devel &gt;= 1.1.1 to openssl-devel &gt;= 1.0.2p.
  Required for SLE-12, builds just fine.
- Disable 'pmda-infiniband' subpackage for SLE-12.
  Required so it builds cleanly.
- Introduce pmda-resctrl package, disabled for architectures other
  than x86_64.
- Change the architecture for various subpackages to 'noarch' as they
  contain no binaries, this lowers rpmlint's badness score
  substantially.
- Disable 'pmda-mssql', as it fails to build.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712145600">- Add fix for bsc#1222121 CVE-2024-3019:
  * 0011-disable-redis-proxying-by-default.patch</changelog>
  <changelog author="dmueller@suse.com" date="1713182400">- move pmlogger_daily into main package (bsc#1222815)
- fix compile flags conflusion</changelog>
  <changelog author="ddiss@suse.com" date="1726660800">- Fix symlink race; CVE-2024-45770; (bsc#1230552)
  + 0012-src-pmpost-pmpost.c-guard-against-possible-symlink-a.patch
- Fix pmstore corruption; CVE-2024-45769 (bsc#1230551)
  + 0013-src-libpcp-src-p_result.c-correct-buffer-over-run-te.patch
  + 0014-src-libpcp-src-p_result.c-hardening-of-the-result-PD.patch
  + 0015-src-libpcp-src-p_result.c-hardening-of-result-PDU-ev.patch
  + 0016-src-libpcp-src-p_result.c-rework-PDU-integrity-check.patch
  + 0017-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0018-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0019-src-libpcp-src-p_result.c-32-bit-fix-for-SUSE-Issue-.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742904000">- Enable custom pcp-selinux module (bsc#1237260)</changelog>
</package>
<package pkgid="502f5e6de339ad511754642ad581cba7410050d54781bd054b84cfe2a3317e3854dd9d218e87bf701b9f3c2e44ec96a76a4d6f6bddab7e88bfdaabd5618155bc" name="libpcp_import1-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="slfo.1.1_4.1"/>
  <changelog author="dimstar@opensuse.org" date="1700222400">- Only auto-trigger pcp-pmda-postfix for automatic installation
  when pcp and postfix are present. Supplementing pcp alone would
  auto-install postfix on all systems.
- Supplement pcp-pmda-rsyslog against pcp and rsyslog.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1701172800">- This version *does not* break API or ABI compatibility with the
  previous 5.2.5 release.
- Remove 0009-remove-rundir-install.patch. Obsoleted.
- Remove 0011-Revert-systemd-remove-Wants-pmcd-from-pmlogger-and-p.patch.
  Obsoleted.
- Various minor changes/improvements to the RPM spec file.
- Upgrade to 5.3.7. This is the latest release in the 5.X series.
  Changes from 5.3.7:
  - Client tools and utilities:
    pcp2elasticsearch: implement authentication support
    pcp-ss: fixed incorrect client-side filtering
    pcp-ss: fixed reporting of IPv6 sockets in LISTEN state
    pmrep: 'iostat-multipath-wwid' for multipath disk monitoring
  - PMDA additions, enhancements and bug fixes:
    pmdalinux: add disk.wwid.* aggregated multipath metrics
    pmdalinux: add new MPTCP metrics from latest Linux kernel versions
    pmdalinux: fix up TTY metrics on s390x platform
    pmdalinux: add network.tcp.tcploss metric
    pmdamssql: fix config file logic, python string handling
    pmdadenki: fix crash in labels callback with multiple instances
    pmdasockets: changed default filter in sockets PMDA to "state all"
  - Server-side utilities and log management scripts:
    pmlogconf: correctly handle metric state transitions on (re-)probe
    pmie systemd: add missing systemd configuration and shell code
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_web: resolve a number of small memory leaks
  - Security Enhanced Linux:
    selinux: use interface calls instead of a simple rule
    selinux: add several more obscure missing selinux rules
    selinux: additional debugfs policy requirement for pmdakvm
    selinux: resolve an AVC observed on el8 with pmdashping
  - Misc build, infrastructure and packaging updates:
    rpms: switch to conditional selinux dependency for containers
    debs: reproducible build updates
  - Documentation and QA infrastructure:
    docs: add section to pcpcompat(1) about python2
    docs: update notes about sar2pcp, iostat2pcp in pcpcompat(1)
    docs: improve pmproxy --timeseries and pmseries --load documentation
    CI: disable cppcheck for pcp-atop temporarily due to a cppcheck bug
  Changes from 5.3.6:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L468
  Changes from 5.3.5:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L497
  Changes from 5.3.4:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L557
  Changes from 5.3.3:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L606
  Changes from 5.3.2:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L665
  Changes from 5.3.1:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L753
  Changes from 5.3.0:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L854</changelog>
  <changelog author="mls@suse.de" date="1702555200">- declare the users/groups we create in the preinstall scripts
  (this is needed for newer rpm versions)</changelog>
  <changelog author="tina.mueller@suse.com" date="1706788800">- Change YAML::XS::LibYAML to YAML::XS as this is the module to be used</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1711972800">- Upgrade to 6.2.0 (bsc#1217826 CVE-2023-6917, bsc#1217783):
  * Changes from pcp-6.2.0:
  - Client tools and utilities:
    pmlogger: default to creating version 3 PCP archives
    pmie, pmlogger, pmcd, pmproxy: init script hardening to
    run less as root:root, more as pcp:pcp and more safely
    pcp-reboot-init: new systemd service for $PCP_RC_DIR setup
    pcp2arrow: new, export metrics to parquet format for pandas
    pcp-atop: deterministic process sort when handling NULLs
    pcp-atop: update to v2.10.0 upstream code
    pcp-htop: update to latest upstream fixes
    pcp-geolocate: function with older versions of python
    pcp-meminfo: resolve possible 'broken pipe' diagnostics
    pcp-ss: fix handling of listening state sockets to match ss
    pcp-ss: fix the UDP UNCONN vs LISTEN state handling
  - PMDA additions, enhancements and bug fixes:
    pmdaproc: improvements for process accounting metrics
    pmdalinux: add pgpromote* and pgdemote* memory metrics
    pmdalinux: add metric sysfs.module.zswap.max_pool_percent
    pmdalinux: add new SNMP metric network.ip.outtransmits
    pmdasummary: send state change 0 (no change) back to pmcd
    pmdapostgresql: support the psycopg3 python module as well
    pmdaopenmetrics: kepler support - live metrics and logging
  - Server-side utilities and log management scripts:
    pmlogrewrite, pmlogredact: fix for missing data volumes
    pmcd: cosmetic change to avoid pipe2 name clash
    runaspcp: new helper utility for unprivileged rc scripts
    pmnsmerge: be more defensive in qsort comparison routine
    pmlogsize: fix qsort comparison function handling of equality
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: pmOpenLog refactor for handling previous log files
    libpcp: new __pmCleanMapDir routine to aid log culling
    libpcp &amp; pmcd: READY-NOT-READY hardening
    libpcp: avoid possible thread issues (coverity)
    libpcp: refactor pmDupContext for thread safety
    libpcp_import: add guard in pmiPutMark to prevent SIGSEGV
  - Build, infrastructure and packaging updates:
    build: changes to re-enable builds for FreeBSD 12, 13, 14
    build: add diffutils rpm dep as pmdaproc script uses diff
    build: add main.yml for building and publishing container
    build: resolve compiler warnings in various tools/libraries
    packaging: use tmpfiles.d method to create PCP_RUN_DIR
    build: packaging changes for openSUSE 15.5 and 15.6
    debian: do not ship empty directory /usr/lib/pkgconfig
    build: el10 systemd-presets for pmcd/pmie/pmlogger enabling
    build: drop rpm dep on bpftool as local version used only
    build: change perl YAML::XS::LibYAML module to YAML::XS
  - Security Enhanced Linux:
    selinux: policy improvements for CentOS/RHEL 7 and 8
  - Documentation:
    docs: Fedora 39 found some tbl(1)/troff(1) issues, fix
    docs: add an explicit code-of-conduct for PCP
    docs: pmns(5) note that metric names must only contain ASCII
    docs: update the BPF README to describe bpftool reality
  * Changes from pcp-6.1.1:
  - Client tools and utilities:
    pmie: add -o/--format to control output format with archives
    pcp-geolocate: automatic latitude and longitude metric labels
    pcp-atop: fix segv encountered on a multi-node NUMA system
    pcp-atop: add last level cache support using pmdaresctrl
    pcp-htop: updated with latest fixes from htop.dev
    pcp-netstat: without time options report one sample only
    pcp-netstat: add machine header info
    pcp-meminfo: without time options report one sample only
    pcp-meminfo: add machine header info
    pcp-buddyinfo: resolve a key issue when using python v2
    pcp-zoneinfo: ensure determinism in pcp-zoneinfo output
    pcp-zoneinfo: fix failure with older PCP metric instances
  - PMDA additions, enhancements and bug fixes:
    pmdaresctrl: new PMDA for x86_64 last level cache metrics
    pmdafarm: new Seagate Field Access Reliability Metrics PMDA
    pmdadarwin: updated for changes in NFS stats management
    pmdalinux: new mem.util metrics from recent kernel versions
    pmdalinux: new networking metrics relating to MPTcpExt
    pmdasockets: allow sockets with duplicate sources to exist
    pmdabpftrace: rework exit/wait handling to avoid errors
    pmdahaproxy: fixed connect script handling of string quoting
    pmdastatsd: fixed metadata for a couple of metrics
    pmdalinux: fixed semantics for mem.vmstat.nr_free_cma metric
    pmdadenki: simplification and refactoring of metrics
    pmdagfs2: correct permissions of several installed files
    pmdakvm: fixed semantics for kvm.largepages metric
  - Server-side utilities and log management scripts:
    pmproxy: add support for HTTP compression
    pmlogger: rework heuristic for Latest folio creation
    pmlogctl: fix incorrect rewriting of PCP_ARCHIVE_DIR
    pmlogredact: add latitude and longitude labels to redacted set
    pmlogrewrite: resolve a small memory leak
    pmlogrewrite: use PM_CTXFLAG_METADATA_ONLY for speed
    pmcd: add $PMCD_CREDS_TIMEOUT as an alternative to -q
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: new PM_CTXFLAG_METADATA_ONLY flag for pmNewContext
    libpcp: fix a couple of derived metric bugs
    libpcp_web: implement config override by canonical env vars
  - Misc build, infrastructure and packaging updates:
    build: new CI build to keep PCP for MacOS up-to-date
    build: several fixes to tools when compiling with clang
    build: install pmlog[redact,reduce,rewrite] on default PATH
    build: default to using a path-prefixed PCP_PYTHON_PROG
    build: update the Fedora container to f38
    build: drop of i386/i686 architectures from Fedora builds
    build: enable build of pmdalibvirt on CentOS 7 platform
    build: enable Qt6 in Fedora and post-RHEL-9 rpm spec files
    build: add pyodbc rpm dep for pcp-pmda-mssql in RHEL 9
  - Security Enhanced Linux:
    selinux: allow pmproxy use the io_uring API
    selinux: policy fixes for recent AVCs on RHEL 7.9
    selinux: add netlink_kobject_uevent_socket getattr (bpftrace)
  - Documentation:
    man pages: change all to map font CW -&gt; CR for latest groff
    man: note pmseries Redis timeseries load order limitation
  * Changes from pcp-6.1.0:
  - pmlogredact: new command for archive anonymisation
  - pcp-atop: new bar graph visualisation mode
  - pcp-atop: update to atoptool.nl 2.9.1 sources
  - pcp-htop: support dynamic screens (user-configurable tabs)
  - pcp-htop: update to latest upstream source
  - pcp-htop: default screens for filesystems, disks and cgroups
  - pcp-htop: non-default screens for several libbpf modules
  - pcp-htop: fix mishandling of some process argument shading
  - pcp-buddyinfo: new tool reporting Linux buddyinfo stats
  - pcp-meminfo: new tool reporting Linux kernel memory stats
  - pcp-netstat: new tool reporting networking statistics
  - pcp-slabinfo: new tool reporting Linux slabinfo kernel stats
  - pcp-zoneinfo: new tool reporting Linux zoneinfo kernel stats
  - pmsleep,pmpause: add -w where option for systemd annotation
  - pmieconf: move test_action from primary into a separate group
  - pmieconf: update webhook action for better EDA integration
  - pmlogconf: remove latency-inducing fsync on config write
  - pmlogconf: updates for new metrics used in pcp-atop
  - pmdalinux: add three new /proc/vmstat pscan/pgsteal metrics
  - pmdalinux: fix bug when lsb-release is only /etc/*-release file
  - pmdabpf: add -q/--tryload command line option
  - pmdaopenmetrics: reduce transient instance logs, improve labels
  - libpcp: improved SSL error reporting
  - selinux: add policy updates for pmproxy (io_uring,ipc_lock)
  - build: support for Qt6, drop remaining Qt4 configure-support
  - build: updated licence strings in spec files to follow SPDX
  - build: default to using a path-prefixed PCP_PYTHON_PROG
  - build: fix several makefile clean targets for deb packagers
  - build: configure.ac update to autoconf 2.71
  - build: add tarball upload to release workflow
  - docs: pmie updates to explain action behaviour with archives
  - docs: retire "archive log" phrase from man pages and books
  - docs: transition Artifactory (no free service) to Packagecloud
  * Changes from pcp-6.0.5:
  - pmie: ensure pmie.log.YYYYMMDD is owned by pcp:pcp
  - pcp2json: extend pcp2json with an option to send HTTP POSTs
  - pmlogger: fix pidfile update; pmlogger.pid is for primary only
  - pmdumptext: fix scaling when -i command line option is used
  - pmlogextract: improve resilience in corner-case conditions
  - pmdasmart: additional NVME power state metrics
  - pmdasmart: additional NVME disk information metrics
  - pmdasmart: update help with proper description of DC status
  - pmdasmart: filter out zram devices when probing for devices
  - pmdahacluster: handle pacemaker 2.1.5 crm_mon output changes
  - pmcd: improve debugging flags and diagnostics in general
  - libpcp_pmda: refactor and improve library diagnostics
  - selinux: updates to policy for pmlogger and pmlogger_daily
  - build: switch rpm spec files to SPDX license identifiers
  - build, qa: numerous updates to improve PCP on OpenBSD
  - build: switch from registry.centos.org to quay.io for el6/el7
  - ci: add centos6 back into the fold as its on quay.io now
  - ci: add Debian 12, drop Ubuntu 16 and Fedora 35
  * Changes from pcp-6.0.4:
  - pmcd: propogate a new PMCD_HOSTNAME_CHANGE flag to clients
  - pmdumplog: support preferred alternate name pmlogdump
  - pmlogger: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmlogger_janitor: new script called from pmlogger_check
  - pmlogger: add -d directory argument for alternate naming schemes
  - pmlogrewrite: fix remaining corner case for indom renumbering
  - pmie: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmie: catching SIGUSR1 triggers a pending task dump
  - pmie_{check,daily}: change pmie.log handling regime
  - pmieconf: add support for a webhook action to pmieconf
  - pmieconf: add a wall rule action for adm group members
  - pmieconf: add support for an action testing rule
  - pmieconf: use correct pmieconf percent type for thermal throttle
  - pmieconf: add minimum pct conjunction to entropy for small poolsizes
  - pminfo: use -b to batch pmDesc retrievals as well as pmResult
  - pmstat: fix corner case handling of automatic pmcd reconnect
  - pcp2influxdb: add requests.post timeout to avoid hangs
  - pcp-dstat: fixes CSV output to show all (not visible) plugins
  - pcp-htop: support File Descriptor Meter
  - pcp-htop: sync latest fixes from upstream htop
  - pcp-mpstat: fixed broken pipe issue
  - pcp-ps: fix exception handling for process name
  - rc scripts: ensure pmcd.conf not rewritten unnecessarily
  - pmdalinux: add a couple of new /proc/net/snmp ICMP metrics
  - pmdalinux: add new network.tcp.tcpplbrehash metric
  - pmdaproc: add new proc.smaps.pss_dirty metric
  - pmdarabbitmq: add timeout handling to http requests
  - pmdastatsd: stats and blocklisted metric names alignment
  - libpcp: new pmAddDerivedText API for derived metric help text
  - libpcp: check level parameter on entry to pmLookupText
  - libpcp: new PMAPI error code addition for bad API arguments
  - libpcp: allow derived metrics semantics of 'similar' indoms
  - selinux: add missing context information on farm services
  - build: fix a number of Debian sub-package dependency issues
  * Changes from pcp-6.0.3:
  - build: fix Debian postinst script handling of missing systemctl
  - pmdaproc: support per-cgroup IRQ PSI metrics in recent kernels
  - pmdalinux: support for system wide IRQ PSI metrics in recent kernels
  - pmlogrewrite: improved handling of unused instance domains
  * Changes from pcp-6.0.2:
  - Client tools and utilities:
    pcp-atop: update to latest upstream atoptool.nl sources
    pcp-atop: cgroup, NUMA memory and NUMA CPU support
    pcp-htop: update to latest upstream htop.dev sources
    pcp-dstat: fix handling of --swap with -f (full) option
    pcp-dstat: fix columns for --net-packets
    pcp-mpstat: fix handling of log-once summary metric values
    pcp-mpstat: improve error handling for the current values
    pcp-ps: added capabilities to show N samples with archives
    pcp-ps: fix handling of the -o option
    pcp-ps: fix broken pipe errors when piping to head(1)
    pcp-ps: fix process "START" column calculation and rounding
    pcp-pidstat: fix broken pipe errors when piping to head(1)
    pmdumplog: extend -x so -xxx reports timestamps in Epoch format
    pmlogger: refactor getting FQDN for local host
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set config default for biosnoop module to disabled
    pmdabpf: port forward to latest vendored libbpf-tools code
    pmdalinux: boolean metric network.interface.virtual from sysfs
    pmdalinux: more careful slabinfo 32/64 bit type multiplication
    pmdalinux: add NUMA external fragmentation metric via sysfs
    pmdalinux: fix pmid numbering issue with hinv.map.scsi_id
    pmdanfsclient: fix srcport handling for RDMA and UDP mounts
    pmdaopenmetrics: validate all names before using them for metrics
    pmdaoverhead: new PMDA to measure overhead for groups of processes
    pmdastatsd: static metric memory leak fix
    pmdastatsd: ragel parser refactor and fix
  - Server-side utilities and log management scripts:
    pmieconf: new pmie rule checking file descriptor limits
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: fix buffer issue for user/group name lookups
    libpcp_web: improve error handling in pmseries AST parser
  - Misc build, infrastructure and packaging updates:
    configure.ac: fixes for improved C99 compatibility
    configure.ac: use QTDIR search path only when given
    MacOS: build: fix shared library builds on modern Macs
    OpenBSD: build updates for clang, Qt and openssl
    libbpf: updated minimium version to 0.8.0, ARM and PPC support
    Qt: update minimum required versions for libqwt
    Drop no-longer-used pmlogger_daily_report systemd rpm spec code
    Determine clang version without optional llvm-config utility
    Another attempt to get the man/man-db/mandoc stuff sorted
  - Security Enhanced Linux:
    Policy updates for pmdastatsd
  - Documentation and QA infrastructure:
    Add help text for some OpenBSD kernel instance domains
    Provide more detailed explanation for default PMLOGGER_INTERVAL
    pmdaChildren(3): clarify the memory allocation scheme
    pcp-ps(1) man page fixes.
  * Changes from pcp-6.0.1:
  - Security Enhanced Linux:
    selinux: rework policy to use optional_policy
    selinux: rework policy to use an independent policy
    selinux: new cluster_exec_t policy handling for pmdahacluster(1)
    selinux: retire those parts of the build affecting CentOS 6
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set perf_buffer__poll timeout to 0 for optimal sampling
    pmdabpf: add CO-RE biosnoop
    pmdabpf: no BPF debug messages unless debugging (-Ddev0)
    pmdalinux: add "squashfs" to the list of ignored filesystem types
    pmdasnmp: install agent specific configuration file to PMDATMPDIR
    pmdakvm: initialise perf_event interface only if/when needed
  - Client tools and utilities:
    pcp-ps: initial version of a PCP implementation of ps(1)
    pcp-dstat: add --nomissed command line option for large systems
    pmfind, libpcp_web: MMV and shutdown memory management fixes
    pmlogreduce: fix corner-case in temporal index generation
    pmlogcheck: tighten some pmlogcheck pass0 checks
    pmseries: fix sampling when start &lt; first sample or series has gaps
    shell completion: improve pmrep/zsh instance completion in live mode
    shell tools: convert fgrep and egrep over to grep -F and -E
  - Server-side utilities and log management scripts:
    pmlogger_daily_report: no longer needs any systemd support now
    pmlogger_daily.sh: fix pmlogger_daily_report test for zeroconf
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_web: fix race conditions affecting pmproxy
    libpcp_web: allow scalar operands in pmseries expressions
    libpcp_web: add pmseries float multiplication
  - Misc build, infrastructure and packaging updates:
    build: add PCP archive analysis container
    build: updates to fix Windows platform builds
    build: update configure.ac to allow builds on Mac M1 (arm64)
    build: make openSUSE spec file builds work again
    containers: remove /build directory
    debian: use deb-systemd-helper if available
    build: fix libpcp check-statics regexp error with objects in subdirs
    build: podman PMDA no longer has deps, make it unconditional
    build: don't package and install pmrep xtract-names helper
    build: updates to hiredis code for pmseries and pmproxy
    build: updates to hiredis-cluster code for pmseries and pmproxy
    build: fix Makepkgs handling of argument parameters
    build: use vendored github.com/libbpf/bpftool/libbpf and update
    build: use vendored github.com/iovisor/bcc/libbpf-tools
    build: use vendored git.code.sf.net/p/qwt and update
    build: fix bpf PMDA inclusion check
    build: fix windows default pmcd.conf entry, dup path component
    build: rework Python3 and Python2 configure.ac logic
    packaging: fix rpm systemd-sysusers on f37 and rawhide
  - Documentation and QA infrastructure:
    docs: small typo fixes relating to secure connections
    docs: fix sheet2pcp(1) man page quoting in examples
    pmdasample: additional metrics for testing cases
  * Changes from pcp-6.0.0:
  - Major changes:
    1. Add version 3 PCP archive support: instance domain change-deltas,
    Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary
    timezones support, 64-bit file offsets used throughout for larger
    (beyond 2GB) individual volumes.
  * * Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting. **
  * * Version 2 archives remain the default (for next few years). **
    2. Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
    this impacts on libpcp, PMAPI clients and PMCD use of encryption;
    these are now configured and used consistently with pmproxy HTTPS
    support and redis-server, which were both already using OpenSSL.
    3. New nanosecond precision timestamp PMAPI calls for PCP library
    interfaces that make use of timestamps.  These are all optional,
    and full backward compatibility is preserved for existing tools.
  - Client tools and utilities:
    pcp2elasticsearch: implement authentication support
    pcp-dstat: implement support for the top-alike plugins
    pcp-dstat: add plugin configuration for ZFS metrics
    pcp-dstat: battery charge remaining config using denki metrics
    pcp-htop: update to latest stable upstream release
    pcp-htop: initial support for screen tabs in the user interface
    pcp-pidstat: correct operation of the -p ALL|SELF options
    pmlogger: small changes for handling derived metrics better
    pmlogger, import: support configurable default archive version
    pcp2xxx: ignore pmrep-specific options
    pmlogger: extra hardening, backtrace symbol improvements
    pmlogger: add -V (output archive version) command line option
    pmseries: add sum(), avg() and stdev() functions
    pmseries: add nth_percentile() and topk() functions
    pmseries: add max_inst() and max_sample() functions
    pmseries: add min_inst() and min_sample() functions
    pmseries: be more defensive during shutdown error paths
    pmseries: fix assumption that any 40-character string is a SID
    pmseries: allow reporting values from SIDs (not just queries)
    sheet2pcp: add -V (output archive version) command line option
    ganglia2pcp: add -V (output archive version) command line option
    iostat2pcp: add -V (output archive version) command line option
  - PMDA additions, enhancements and bug fixes:
    pmdaapache: do time_t manipulation with sufficient space
    pmdabcc: sync bcc PMDA modules with upstream bcc tools
    pmdabpf: adds CO-RE (Compile Once - Run Everywhere) modules
    (exitsnoop, oomkill, bashreadline, mountsnoop, vfsstat,
    opensnoop, fsslower, statsnoop, tcpconnlat, tcpconnect)
    pmdabpf: support x86, arm and powerpc
    pmdabpf: fixed persistence of indom and cluster identifiers
    pmdabpf: rework setrlimit() logic for some small memory hosts
    pmdabpftrace: move example autostart scripts to /usr/share
    pmdabpftrace: update biolatency example script for kernel 5.16+
    pmdadenki: fix battery detection for non-intel systems
    pmdadenki: add support for multiple active batteries
    pmdadenki: support the -D option for debugging
    pmdadenki: improve labels associated with metrics
    pmdadenki: add battery capacity metric
    pmdadenki: add separate indom help text
    pmdalinux: add new MpTcpExt metrics from latest Linux 5.x kernels
    pmdalinux: updates for latest /proc/net/netstat kernel changes
    pmdalinux: improve network metrics help text
    pmdalinux: fix of tty metrics on s390x platform
    pmdamailq: update to ensure Y2038-safe time_t handling
    pmdammv: use highest available timestamp resolution
    pmdaopenvswitch: additional interface and coverage stats
    pmdapostfix: harden against a not-yet-running postfix
    pmdaproc: fix psargs string for processes with very large PIDs
    pmdaproc: fix cgroup cpu metrics refresh structures
    pmdasockets: prevent string overwrite of ss_stats_t fields
    pmdasockets: add checking to the pmStore filter strings
    pmdastatsd: fix detection of failure memory allocation
  - Server-side utilities and log management scripts:
    pmproxy: allow request parameters to be sent in the request body
    pmproxy: fix race on teardown of pcp protocol proxy clients
    pmproxy: improve error checking, check uv_pipe_bind result
    pmproxy: harden logging interfaces, racing with startup
    pmieconf: add several pmie rules for Open vSwitch metrics
    pmlogrewrite: subtle change in semantics for error checking
    pmlogreduce: allow sub-second values for -t option
    pmlogreduce: temporal index, add entries after 100k of data volume
    pmlogcheck: beef up pass 0 to check metadata record types
    pmlogconf: fix reprobing with interactive changes
    pmlogmv: fallback to copy for cross-mount case when link fails
    pmlogmv: add -c (paranoid checksum) option
    pmlogger_farm: add default configuration file for farm loggers
    pmlogger_check: increase PMLOGGER_REQUEST_TIMEOUT from 2 to 10 secs
    pmlogger_daily: callbacks for extra daily log processing tasks
    pmlogger_daily, pmlogger_check: additional systemd-driven changes
    pmlogger_daily: move redirection of stdout+stderr earlier in script
    pmlogger_daily: abandom use of fmt(1) - not portable - uses awk now
    pmlogger_daily_report.sh: some major efficiency improvements
    pmlogger_daily_report: re-enabled for rpm and deb builds
    pmie_check: avoid leaving lock file and temp dir behind
    pm{log,ie}ctl: handle embedded shell syntax in control lines
    pm{log,ie}ctl: add -C args option to pass "args" to pm{logger,ie}_check
    systemd units: pmlogger and pmie farm conditional use of type=exec
    rc-pmcd: reorder the systemd paths attempted in migrate_pid_cgroup
    dbpmda: fix an overlapping copy and add error handling
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_archive: new library for apps that write PCP archives
    libpcp: optimize indom handling in fetchgroup code
    libpcp: drop time_t abuse in getdate.y, use safe sizes
    libpcp: add __pmDumpPDUTrace() and circular trace buffer
    libpcp: add PM_ERR_FEATURE, PM_ERR_TLS error codes
    libpcp: refactor __pmDumpStack(), improve direct calling tools
    libpcp_qmc: require Qt5.6 as the minimum version for builds
    libpcp_qmc: resolve the Qt::endl warning more cleanly
    libpcp_web: stop Redis initialization if Redis version tool old
    libpcp_web: honour config settings that disable redis completely
    libpcp_web: fix memory leaks in discovery, query parsing and APIs
    libpcp_web: honor exclude.metrics setting in pmseries --load
    libpcp_web: run pmFetchArchive(3) in a worker thread
    libpcp_web: fix race condition tearing down load baton
    libpcp_pmda: ensure indom cache write handles time_t safely
    libpcp_import: add interface for setting output log version
    libpcp_import: interfaces for samples with high-resolution timestamps
    python api: updates to allow building from outside git repo
    python api: allow tools using pmconfig module to ignore options
    python api: add python wrappers for highres PMAPI routines
    python api: correct refcounting on pmParseMetricSpec source buffer
  - Security Enhanced Linux:
    selinux: additional policy rules, esp glusterd_log_t
    selinux: bcc PMDA policy to exec private memfd ctypes/libffi objects
    selinux: make use of syslogd_var_run_t map rule conditional
    selinux: policy updates needed for the pmdasockets metrics
    selinux: fine-tune netlink_tcpdiag_socket policy for all platforms
  - Misc build, infrastructure and packaging updates:
    build: latest distros supported (ubuntu 22.04, fedora 37, rhel9, etc)
    build: reproducible debian build efforts
    build: use standard dpkg buildflags variables.
    build: add BuildRequires: python*-pymongo to mongodb PMDA
    build: detect libbpf version for the BPF PMDA
    build: do not transform symlink targets when generating the source tarball
    build: update artifactory deploy script, add recalculate_metadata subtask
    build: update configure script for python2 retirement in rhel9
    build: convert libpcp check-statics to using readelf if available
    build: updates to libpcp check-statics for OpenBSD
    build: fix configure detection of backtrace() and associated hooks
    build: fixed source dependencies within libpcp_web makefile
    build: add rpm conflicts lines on postgresql-pgpool-II
    build: remove pmclient reliance on libpcp.h for timed sleep
    build: remove mmvdump reliance on libpcp.h for mmap wrapper
    build: make perl truly conditional in the PCP build
    build: drop no-longer-needed NSS/NSPR package deps
    build: resolve ostree non-writable /var for pmieconf
    packaging: update rpm specs to solve systemd warnings
    container: bump base image version
    Makepkgs: fix for Debian build (and Qt packaging failure in CI)
    vendor: switch to git-subtree for iovisor/bcc libbpf-tools code
  - Documentation and QA infrastructure:
    docs: update notes about sar2pcp, iostat2pcp in pcpcompat(1)
    docs: add section to pcpcompat(1) about python2
    docs: add fix for readthedocs compilation error
    docs: updates to the Quick Guide documents
    docs: clatifications to pmrep et al: man pages
    docs: improve pmproxy timeseries and pmseries load documentation
    docs: further improvements and fixes to the INSTALL doc
    docs: add pmlogger(1) -V, describe $PCP_ARCHIVE_VERSION in pcp.conf.
    docs: small fixes to the pcp-pidstat man page
    docs: fix webapi documentation typo around polltimeout
    pylint: numerous issues resolved, tracking latest versions
    qa: regression tests for bpftrace PMDA: check probes
    qa: pmdabcc pylint fixups
    qa: rework Redis PING-PONG checks
    qa/check: run tests under timeout(1) control if possible
    qa-summary: allow unified reporting from CI and QA Farm
    qa/admin/show-me-all &amp; qa/show-me: changes for CI integration
    qa/check: add support for "triaged" tests
    ci: send report to Slack when QA workflow is triggered manually
    ci: add required packages to enable bpf PMDA on CentOS Stream 9
    ci: run CodeQL daily and for each PR
    ci: run full QA on pull requests, save history
    ci: unset XDG_RUNTIME_DIR when invoking podman
- Refresh patches:
  * 0001-Install-libraries-without-exec-permission.patch
  * 0002-Remove-CPAN-rpaths.patch
  * 0003-Remove-runlevel-4-from-init-scripts.patch
  * 0010-services-switch-logutil-and-pmieutil-scripts-from-ty.patch
- Change dependency from openssl-devel &gt;= 1.1.1 to openssl-devel &gt;= 1.0.2p.
  Required for SLE-12, builds just fine.
- Disable 'pmda-infiniband' subpackage for SLE-12.
  Required so it builds cleanly.
- Introduce pmda-resctrl package, disabled for architectures other
  than x86_64.
- Change the architecture for various subpackages to 'noarch' as they
  contain no binaries, this lowers rpmlint's badness score
  substantially.
- Disable 'pmda-mssql', as it fails to build.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712145600">- Add fix for bsc#1222121 CVE-2024-3019:
  * 0011-disable-redis-proxying-by-default.patch</changelog>
  <changelog author="dmueller@suse.com" date="1713182400">- move pmlogger_daily into main package (bsc#1222815)
- fix compile flags conflusion</changelog>
  <changelog author="ddiss@suse.com" date="1726660800">- Fix symlink race; CVE-2024-45770; (bsc#1230552)
  + 0012-src-pmpost-pmpost.c-guard-against-possible-symlink-a.patch
- Fix pmstore corruption; CVE-2024-45769 (bsc#1230551)
  + 0013-src-libpcp-src-p_result.c-correct-buffer-over-run-te.patch
  + 0014-src-libpcp-src-p_result.c-hardening-of-the-result-PD.patch
  + 0015-src-libpcp-src-p_result.c-hardening-of-result-PDU-ev.patch
  + 0016-src-libpcp-src-p_result.c-rework-PDU-integrity-check.patch
  + 0017-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0018-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0019-src-libpcp-src-p_result.c-32-bit-fix-for-SUSE-Issue-.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742904000">- Enable custom pcp-selinux module (bsc#1237260)</changelog>
</package>
<package pkgid="6c54f0b91831b8f3d2f588e463c04ec53300b9ccd6141d82cffcbee63cd35ad031c779f1a3e3e045780636573903c6bb27a9c9aa8384307a8bdbccfb120c759d" name="libpcre1-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.45" rel="slfo.1.1_1.4"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1523793600">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
  <changelog author="astieger@suse.com" date="1536062400">- pcre 8.42:
  * Fix outdated real_pcre definitions in pcre.h.in
  * pcregrep was truncating components of file names to 128
    characters when processing files with the -r option, and also
    truncating path names to 512 characters. There is now a check on
    the absolute length of full path file names, which may be up to
    2047 characters long
  * Using pcre_dfa_exec(), in UTF mode when UCP support was not
    defined, there was the possibility of a false positive match when
    caselessly matching a "not this character" item such as
    [^\x{1234}] (with a code point greater than 127) because the
    "other case" variable was not being initialized
  * Although pcre_jit_exec checks whether the pattern is compiled
    in a given mode, it was also expected that at least one mode is
    available. This is fixed and pcre_jit_exec returns with
    PCRE_ERROR_JIT_BADOPTION when the pattern is not optimized by JIT
    at all.
  * The line number and related variables such as match counts in
    pcregrep were all int variables, causing overflow when files with
    more than 2147483647 lines were processed (assuming 32-bit ints).
    They have all been changed to unsigned long ints.
  * If a backreference with a minimum repeat count of zero was first in
    a pattern, apart from assertions, an incorrect first matching
    character could be recorded. For example, for the pattern
    /(?=(a))\1?b/, "b" was incorrectly set as the first character of
    a match.
  * Fix out-of-bounds read for partial matching of /./ against an
    empty string when the newline type is CRLF.
  * When matching using the the REG_STARTEND feature of the POSIX
    API with a non-zero starting offset, unset capturing groups
    with lower numbers than a group that did capture something were
    not being correctly returned as "unset" (that is, with offset
    values of -1).
  * Matching the pattern /(*UTF)\C[^\v]+\x80/ against an 8-bit
    string containing multi-code-unit characters caused bad
    behaviour and possibly a crash. This issue was fixed for other
    kinds of repeat in release 8.37 by change 38, but repeating
    character classes were overlooked.
  * A small fix to pcregrep to avoid compiler warnings for
  - Wformat-overflow=2.
  * Added --enable-jit=auto support to configure.ac.
  * Fix misleading error message in configure.ac.</changelog>
  <changelog author="lauffer@ph-freiburg.de" date="1540468800">- pcreposix patch taken from debian. Solves cyrus-imapd issue #1731, too.
  pcre-8.42-pcreposix.patch</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="mpluskal@suse.com" date="1586952000">- Update to version 8.44:
  * This is a bug-fix release.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1613390400">- package testsuite in a separate RPM (boo#1182235)</changelog>
  <changelog author="schwab@suse.de" date="1613995200">- Copy pcre_jit_test only if jit is enabled</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 8.45:
  * This is the final PCRE1 release. A very few small issues have been fixed.</changelog>
  <changelog author="jsikes@suse.com" date="1652270400">- Added pcre-8.45-bsc1199232-unicode-property-matching.patch
  * bsc#1199232
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="4118d2915fdc35a7960bd0fdd7c580f2bdd40ea974f698af4775dd9bde67ab7726d0fcf71c62eabe17258520c67023fdf1861b163382df2d9cdd4ef2835df3f3" name="libpcre2-8-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.42" rel="slfo.1.1_1.4"/>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- pcre2 10.37:
  * removal of the actual POSIX names regcomp etc. from the POSIX
    wrapper library because these have caused issues for some
    applications, replacing pcre2-symbol-clash.patch
  * fix a hypothetical NULL dereference
  * fix two bugs related to over-large numbers so the behaviour is
    now the same as Perl
  * Fix propagation of \K back from the full pattern recursion
  * Restore single character repetition optimization in JIT</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1635076800">- pcre2 10.38:
  * Following Perl's lead, \K is now locked out in lookaround
    assertions by default, but an option is provided to re-enable
    the previous behaviour</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636113600">- pcre2 10.39:
  * Fix incorrect detection of alternatives in first character
    search in JIT
  * Update to Unicode 14.0.0</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1650110400">- pcre2 10.40:
  * Added support for Bidi_Class and a number of binary Unicode
    properties, including Bidi_Control.
  * A number of changes to script matching for \p and \P:
    speed improvements, add the syntax \p{script:xxx} and
    \p{script_extensions:xxx} (synonyms sc and scx), Changed
    \p{scriptname} from being the same as \p{sc:scriptname} to
    being the same as \p{scx:scriptname}, recognize the standard
    Unicode 4-letter abbreviations for script names, implement
    Unicode and Perl's "loose matching" rules on property names</changelog>
  <changelog author="pgajdos@suse.com" date="1651752000">- enable jit for s390x [bsc#1199196]</changelog>
  <changelog author="pgajdos@suse.com" date="1651752001">- do not enable jit-sealloc [bsc#1182864] [bsc#1199208]</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Fix the profiling call to be non-parallel again (fighting spec cleaner)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670328000">- pcre2 10.41:
  * pcre2grep behaves more like GNU grep for multiple patterns that
    match more than once on a line</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670846401">- pcre2 10.42:
  * Fix 10.41 regression that added the default definition of
    PCRE2_CALL_CONVENTION to pcre2posix.c instead of pcre2posix.h,
    which meant that programs including pcre2posix.h but not pcre2.h
    couldn't compile
  * Fix an intermittent JIT fault and minor issues</changelog>
</package>
<package pkgid="7a16cea9c2c48609fc5cf2f9e1598cbe1e71808498d69c8ef02d01e53dc7de68aab7cd357e2436fc7b9d0f5eaf421efd0bfd20e7987bec59d757e3bcdc5f5cf4" name="libpcsclite1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.1" rel="slfo.1.1_1.3"/>
  <changelog author="jsegitz@suse.com" date="1634558400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_pcscd.service.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636804800">- Change to systemd-sysusers</changelog>
  <changelog author="axel.braun@gmx.de" date="1638619200">- version 1.9.5
  * pcscd: autoexit even if no client connects
  * Fix variable substitution in systemd units
  * fix potential race conditions with powerState handling
  * Add and use tag TAG_IFD_DEVICE_REMOVED
  * UnitaryTests: port code to Python 3</changelog>
  <changelog author="axel.braun@gmx.de" date="1652356800">- version 1.9.6
  * do not fail reader removal in some specific cases (USB/Thunderbolt port)
  * improve documentation regarding /etc/reader.conf.d/
  * SCardGetStatusChange: speedup the case DISABLE_AUTO_POWER_ON
  * configure:
  . add --disable-strict option
    By default the compiler arguments are now:
  - Wall -Wextra -Wno-unused-parameter -Werror ${CFLAGS}
  . fail if flex is not found
  * fix different data races
  * pcscdaemon: -v displays internal constants values:
    MAX_READERNAME &amp; PCSCLITE_MAX_READERS_CONTEXTS
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1652443200">- version 1.9.7
  * disable strict compilation by default
  * fix 3 warnings</changelog>
  <changelog author="axel.braun@gmx.de" date="1655035200">- version 1.9.8
  * Install install_spy.sh &amp; uninstall_spy.sh scripts in docdir
  * SCardTransmit(): do not fail if receive buffer is "too large"
  * SCardControl(): do not fail if receive buffer is "too large"
  * fix some memory leaks on shutdown
  * use a better random number generator
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1662897600">- version 1.9.9
  * SCardEstablishContext() may return SCARD_W_SECURITY_VIOLATION if
    refused by Polkit
  * Fix SCardReleaseContext() failure on orphan handles
  * Fix SCardDisconnect() on orphan handle
  * pcsc-spy: log the pioSendPci &amp; pioRecvPci SCardTransmit() parameters
  * Improve the log from pcscd: log the return code in text instead of hex
  * Some other minor improvements</changelog>
  <changelog author="meissner@suse.com" date="1677931200">- add a 32 bit -devel package for use by wine development with wine 8.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1686312000">- Version 2.0.0
  * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
  * Add '--disable-polkit' option
  * Reset eventCounter when a reader is removed
  * Add "polkit" in "pcscd -v" output if enabled
  * Doxygen: document SCARD_E_INVALID_VALUE for some functions
  * use secure_getenv(3) if available
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1700913600">- version 2.0.1
  * SCardConnect(): return SCARD_W_SECURITY_VIOLATION when needed (polkit)
  * SCardCancel(): return SCARD_S_SUCCESS even if the client already finished
  * polkit is enabled by default
  * libpcscspy: fix a crash with NULL pointers
  * Doxygen: fix SCardBeginTransaction() documentation
  * fix pcscd internal thread safety issues (clang -fsanitize=thread)
  * Some other minor improvements</changelog>
</package>
<package pkgid="8786161121b4fb2e81724ee32e0df862b4746019f312e2e4e8e6578eac26f38da664143a7940e0ddc5f1980acbe592ddc3f94a3b9f2f724e32b223558d80c04d" name="libpipeline-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="slfo.1.1_1.2"/>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 1.4.0
  * Various portability fixes for Solaris. This includes a
    PIPELINE_QUIET environment variable which suppresses the error
    message normally emitted when a subprocess is terminated by a signal.
  * Add `pipecmd_fchdir', which is analogous to `pipecmd_chdir' but
    takes an open file descriptor rather than a path.</changelog>
  <changelog author="mpluskal@suse.com" date="1436702400">- Add gpg signature
- Cleanup spec file with spec-cleaner
- Add missing dependency on pkg-config</changelog>
  <changelog author="p.drouand@gmail.com" date="1447070400">- Update to version 1.4.1
  * Fix test failure with Check 0.10.0.</changelog>
  <changelog author="werner@suse.de" date="1542974400">- Update to version 1.5.0
  * Add `pipecmd_pre_exec' to install a pre-exec handler for a single command.
  * Fix EOF detection in get_line.</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 1.5.3:
  * Fix implementation-defined behaviour while handling read/write errors.
  * Port tests to the modern Check API.
  * `pipecmd_exec' now calls `_exit' rather than `exit', to avoid bugs such as
  * functions registered using `atexit' being called multiple times.
  * Document that standard FDs must be open before calling `pipeline_start'.
  * Building libpipeline now requires Autoconf &gt;= 2.63 and Automake &gt;= 1.11.2.
  * Various portability improvements, via Gnulib.</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 1.5.4:
  * Building libpipeline now requires Autoconf &gt;= 2.64.
  * Developmed moved to Gitlab</changelog>
  <changelog author="werner@suse.de" date="1639742400">- Use autoconf</changelog>
  <changelog author="werner@suse.de" date="1641902400">- Update to 1.5.5:
  * Move release process to GitLab CI.
- Back to download from savannah.nongnu.org for a fully bootstrapped
  tar ball without the need of autoconfig and gl
  Compare https://gitlab.com/cjwatson/libpipeline/-/releases
  and     https://gitlab.com/cjwatson/libpipeline/-/packages/4425007</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 1.5.6:
  * Fix handling of leading whitespace in `pipecmd_new_argstr` and
  `pipecmd_argstr`.</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 1.5.7:
  * Add notes to libpipeline(3) of when functions were added.
  * Transferred Git repository to https://gitlab.com/libpipeline/libpipeline.
  * Make `socketpair` tests used by `./configure --enable-socketpair-pipe`
    compatible with C23.</changelog>
</package>
<package pkgid="9170637ec318e03c524c7023ff64a82f7fa60345f6a8f3926f56aa0e37a22d2b6e4f4fd211dda5048d1b7bb58cab8bce82f151560b1b4bdedd8d3c3fe82d3d5a" name="libpipeline1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="slfo.1.1_1.2"/>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 1.4.0
  * Various portability fixes for Solaris. This includes a
    PIPELINE_QUIET environment variable which suppresses the error
    message normally emitted when a subprocess is terminated by a signal.
  * Add `pipecmd_fchdir', which is analogous to `pipecmd_chdir' but
    takes an open file descriptor rather than a path.</changelog>
  <changelog author="mpluskal@suse.com" date="1436702400">- Add gpg signature
- Cleanup spec file with spec-cleaner
- Add missing dependency on pkg-config</changelog>
  <changelog author="p.drouand@gmail.com" date="1447070400">- Update to version 1.4.1
  * Fix test failure with Check 0.10.0.</changelog>
  <changelog author="werner@suse.de" date="1542974400">- Update to version 1.5.0
  * Add `pipecmd_pre_exec' to install a pre-exec handler for a single command.
  * Fix EOF detection in get_line.</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 1.5.3:
  * Fix implementation-defined behaviour while handling read/write errors.
  * Port tests to the modern Check API.
  * `pipecmd_exec' now calls `_exit' rather than `exit', to avoid bugs such as
  * functions registered using `atexit' being called multiple times.
  * Document that standard FDs must be open before calling `pipeline_start'.
  * Building libpipeline now requires Autoconf &gt;= 2.63 and Automake &gt;= 1.11.2.
  * Various portability improvements, via Gnulib.</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 1.5.4:
  * Building libpipeline now requires Autoconf &gt;= 2.64.
  * Developmed moved to Gitlab</changelog>
  <changelog author="werner@suse.de" date="1639742400">- Use autoconf</changelog>
  <changelog author="werner@suse.de" date="1641902400">- Update to 1.5.5:
  * Move release process to GitLab CI.
- Back to download from savannah.nongnu.org for a fully bootstrapped
  tar ball without the need of autoconfig and gl
  Compare https://gitlab.com/cjwatson/libpipeline/-/releases
  and     https://gitlab.com/cjwatson/libpipeline/-/packages/4425007</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 1.5.6:
  * Fix handling of leading whitespace in `pipecmd_new_argstr` and
  `pipecmd_argstr`.</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 1.5.7:
  * Add notes to libpipeline(3) of when functions were added.
  * Transferred Git repository to https://gitlab.com/libpipeline/libpipeline.
  * Make `socketpair` tests used by `./configure --enable-socketpair-pipe`
    compatible with C23.</changelog>
</package>
<package pkgid="e65b0e8e72532bcb1bb78008d4e75b82314c8c500a6ee43a4e92ac9c878aa2d0fb976585cb9d9261188c52d793f7fb95f597a2d674ccb36745d3b619f527f9b7" name="libpixman-1-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.42.2" rel="slfo.1.1_1.2"/>
  <changelog author="zaitor@opensuse.org" date="1445947200">- Update to version 0.33.4:
  + Important security fix to prevent stack buffer overflow.
  + POWER: New fast-paths and optimizations to existing fast-paths.
  + ARMv6: New fast-path.
  + Tests: New cover and fence-image-self tests.
  + Remove redundant corrections in various calculations for
    COVER-CLIP and COVER analysis.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451736000">- Update to version 0.33.6:
  + configura.ac: fix test for SSE2 &amp; SSSE3 assembler support.
  + mmx: Improve detection of support for "K" constraint.
  + Revert "mmx: Use MMX2 intrinsics from xmmintrin.h directly".</changelog>
  <changelog author="zaitor@opensuse.org" date="1454328000">- Update to version 0.34.0:
  + No changes from last version, stable version release only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459771200">- Add pixman-private-correct-include.patch: pixman-private: include
  &lt;float.h&gt; only in C code, patch from upstream git.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="mvetter@suse.com" date="1542974400">- Update to version 0.36.0:
  + Add tests for (a)rgb floating point formats
  + Add support for argb/xrgb float formats, v5
  + Fix stride calculation in stress-test
  + Adjust for clang's removal of __builtin_shuffle
  + Fix vector loads on ppc64le
  + Promote unsigned short to unsigned int explicitly
  + pixman-filter: Made Gaussian a bit wider
  + pixman-filter: Nested polynomial for cubic
  + pixman-filter: Fix several issues related to normalization
  + pixman-filter: Speed up BOX/BOX filter
  + pixman-filter: integral splitting is only needed for triangle
    filterdd
  + pixman-filter: Correct Simpsons integration
  + pixman-filter: reduce amount of malloc/free/memcpy to generate
    filter
  + pixman-image: Added enable-gnuplot config to view filters in
    gnuplot
  + pixman-fast-path.c: Pick NEAREST affine fast paths before
    BILINEAR ones
  + pixman-private: include &lt;float.h&gt; only in C code
- Remove pixman-private-correct-include.patch: upstreamed</changelog>
  <changelog author="info@paolostivanin.com" date="1587384000">- Update to version 0.40.0:
  + Meson build system improvements
  + Supporting optimizations on Hygon Dhyana processors
    to match what is enabled for Intel/AMD CPUs.
  + A few Loongson fixes/improvements.
  + Lots of other fixes</changelog>
  <changelog author="mgorse@suse.com" date="1667563200">- Update to version 0.42.2 (boo#1205033 CVE-2022-44638):
  + This version contains a fix for a heap overflow.
- Update URL, and tweak source URI.</changelog>
</package>
<package pkgid="5b449af6aa4120c0d7b3f4dbfed52458f3444278b4f1a5aabf6e5797b07517891686675e579f59221a0022880df9d8e51ad4460dd399fa68e107ab1db1270470" name="libpkgconf3-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="slfo.1.1_1.5"/>
  <changelog author="ngompa13@gmail.com" date="1563192000">- Fix license tag for pkgconf-m4</changelog>
  <changelog author="ngompa13@gmail.com" date="1565006400">- Add missing -gnu ABI suffix to platform names in pkgconf-pkg-config (boo#1144318)</changelog>
  <changelog author="ngompa13@gmail.com" date="1565352000">- Co-own aclocal directory to avoid requiring autoconf-archive</changelog>
  <changelog author="ngompa13@gmail.com" date="1565611200">- Update to 1.6.3
  + Fixed a memory leak when deduplicating paths.
  + Fixed strndup-related build regression on Windows.
  + Added --modversion description to pkgconf(1) man page.
  + Properly tokenize versions. Versions cannot logically contain
    whitespace, as dependency-lists would not properly tokenize if
    they could. A diagnostic is generated for malformed version
    strings containing whitespace when --validate is used.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592222400">- Update to 1.7.3
  - Bug fixes:
  + Fix a possible out of boundary write when evaluating dependencies.
    Patch by Tobias Stöckmann.
  + Fix escaping logic on Windows.  Patch by Vincent Torri.
  + Fix out of boundary reads and writes with a malformed fragment.
    Patches by Tobias Stöckmann.
  + Fix a possible out of boundary write when evaluating tuples.
    Patch by Tobias Stöckmann.
  + Fix a windows-specific crash relating to path fixups.
  + Fix a possible out of boundary access in the parser for the
    cross-compile database.  Patch by Tobias Stöckmann.
  + Missing files for building with Meson are now included in the
    tarball.  Patch by Neal Gompa.
  + Fix calculation of package atoms on Windows with paths that
    use both directory separator characters.
  + Fix a possible buffer overflow involving newline escaping.
    Patch by Tobias Stöckmann.
  + Fix an out of boundary access in the parser.
    Patch by Tobias Stöckmann.
  + Fix leakage of strcmp() result value in pkgconf_compare_version()
    responses.
  + Return the default personality if loading a cross-compile
    personality file failed.
  + Do not complain about newlines when validating package versions.
  + Properly detect strndup() on Windows when building with Meson.
  - Enhancements:
  + A new --shared option and WantDefaultStatic cross-compile
    configuration option have been added.  This allows for toolchains
    to specify that static linking should be used by default.
  + Support for the PKG_CONFIG_MSVC_SYNTAX environment variable has
    been added.  Patch by Dan Kegel.
  + Support for the PKGCONF_PKG_PKGF_DONT_MERGE_SPECIAL_FRAGMENTS
    client flag which disables emulation of freedesktop.org pkg-config
    fragment merging semantics has been added.
    Patch by Karen Arutyunov.</changelog>
  <changelog author="ngompa13@gmail.com" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds (boo#1175039)</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- do not own directories provided by filesystem
- small cleanups inspired by spec-cleaner</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625054400">- Update to 1.7.4
  + Add PKG_CONFIG_DONT_DEFINE_PREFIX environment variable
  + Handle platforms where realpath(3) requires a pre-allocated
    buffer
  + Fix null-dereference crash when pulling a malformed
    'uninstalled' .pc file into a dependency tree.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1629720000">- Update to version 1.8.0:
  + Fix a minor memory leak relating to cross-personalities
  + Fix some edge cases with --redefine-prefix
  + Do not prepend sysroot_dir if the .pc file does not exist
    in the sysroot
  + Do not perform path filtering on default system include
    and library path lists.</changelog>
  <changelog author="qzhao@suse.com" date="1674993600">- Add pkgconf-CVE-2023-24056.patch: Backport commit 628b2b2baf from
  upstream, test for, and stop string processing, on truncation
  (bsc#1207394 CVE-2023-24056).</changelog>
</package>
<package pkgid="c5fe24a98da7659ed2d5391cf1eb926dc1b9726c10fe36f6cec430fe0ce0946ec2acde3e0fcad4fe649f384dc882020021e29b0344d22771aea9e92cf6a5add5" name="libpng16-16-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.43" rel="slfo.1.1_3.1"/>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="yann.boyer742@gmail.com" date="1708171200">- Update to version 1.6.42:
  * Fixed the implementation of the macro function "png_check_sig".
  This was an API regression, introduced in libpng-1.6.41.
  (Reported by Matthieu Darbois)</changelog>
  <changelog author="pgajdos@suse.com" date="1709812800">- version update to 1.6.43
  * Fixed the row width check in png_check_IHDR().
    This corrected a bug that was specific to the 16-bit platforms,
    and removed a spurious compiler warning from the 64-bit builds.
    (Reported by Jacek Caban; fixed by John Bowler)
  * Added eXIf chunk support to the push-mode reader in pngpread.c.
    (Contributed by Chris Blume)
  * Added contrib/pngexif for the benefit of the users who would like
    to inspect the content of eXIf chunks.
  * Added contrib/conftest/basic.dfa, a basic build-time configuration.
    (Contributed by John Bowler)
  * Fixed a preprocessor condition in pngread.c that broke build-time
    configurations like contrib/conftest/pngcp.dfa.
    (Contributed by John Bowler)
  * Added CMake build support for LoongArch LSX.
    (Contributed by GuXiWei)
  * Fixed a CMake build error that occurred under a peculiar state of the
    dependency tree. This was a regression introduced in libpng-1.6.41.
    (Contributed by Dan Rosser)
  * Marked the installed libpng headers as system headers in CMake.
    (Contributed by Benjamin Buch)
  * Updated the build support for RISCOS.
    (Contributed by Cameron Cawley)
  * Updated the makefiles to allow cross-platform builds to initialize
    conventional make variables like AR and ARFLAGS.
  * Added various improvements to the CI scripts in areas like version
    consistency verification and text linting.
  * Added version consistency verification to pngtest.c also.</changelog>
  <changelog author="pgajdos@suse.com" date="1764331200">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
</package>
<package pkgid="73e45ae05b2f3d820448078ff1c37aef9685676f54d35e2cfdf55aa1b0b371b6160ec81c85f985722f8784aa2811f8e3d5c1ad77e0fc29661fbd09c68fb800b5" name="libpng16-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.43" rel="slfo.1.1_3.1"/>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="yann.boyer742@gmail.com" date="1708171200">- Update to version 1.6.42:
  * Fixed the implementation of the macro function "png_check_sig".
  This was an API regression, introduced in libpng-1.6.41.
  (Reported by Matthieu Darbois)</changelog>
  <changelog author="pgajdos@suse.com" date="1709812800">- version update to 1.6.43
  * Fixed the row width check in png_check_IHDR().
    This corrected a bug that was specific to the 16-bit platforms,
    and removed a spurious compiler warning from the 64-bit builds.
    (Reported by Jacek Caban; fixed by John Bowler)
  * Added eXIf chunk support to the push-mode reader in pngpread.c.
    (Contributed by Chris Blume)
  * Added contrib/pngexif for the benefit of the users who would like
    to inspect the content of eXIf chunks.
  * Added contrib/conftest/basic.dfa, a basic build-time configuration.
    (Contributed by John Bowler)
  * Fixed a preprocessor condition in pngread.c that broke build-time
    configurations like contrib/conftest/pngcp.dfa.
    (Contributed by John Bowler)
  * Added CMake build support for LoongArch LSX.
    (Contributed by GuXiWei)
  * Fixed a CMake build error that occurred under a peculiar state of the
    dependency tree. This was a regression introduced in libpng-1.6.41.
    (Contributed by Dan Rosser)
  * Marked the installed libpng headers as system headers in CMake.
    (Contributed by Benjamin Buch)
  * Updated the build support for RISCOS.
    (Contributed by Cameron Cawley)
  * Updated the makefiles to allow cross-platform builds to initialize
    conventional make variables like AR and ARFLAGS.
  * Added various improvements to the CI scripts in areas like version
    consistency verification and text linting.
  * Added version consistency verification to pngtest.c also.</changelog>
  <changelog author="pgajdos@suse.com" date="1764331200">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
</package>
<package pkgid="adda688fb3aade2a4f41baeba0270d97fed0d91299940fd761f1b5e39b75142dedf2179fbded4c51cf3c34c2c616b37a9ea18651e5d2ea051e851fd20197fc45" name="libpolkit-agent-1-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="121" rel="slfo.1.1_2.1"/>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="aschnell@suse.com" date="1667995200">- read actions also from /etc/polkit-1/actions (jsc#PED-1405)
  added polkit-actions-in-etc.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
  <changelog author="meissner@suse.com" date="1752580800">- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
  added 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch</changelog>
</package>
<package pkgid="c45da0a86b910a5cc02f8152190b040d388d8d3a78ae0d0a8bf150235c07a25d68d6ed27477eb20b8f83d89323512cef6864c897f10197e327b5da585cc1ee8c" name="libpolkit-gobject-1-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="121" rel="slfo.1.1_2.1"/>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="aschnell@suse.com" date="1667995200">- read actions also from /etc/polkit-1/actions (jsc#PED-1405)
  added polkit-actions-in-etc.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
  <changelog author="meissner@suse.com" date="1752580800">- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
  added 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch</changelog>
</package>
<package pkgid="66910010f5c06104a90b64f1c673a66a172328c002a38d7a16a6d7846968e72ba88d04a4596830980339fd2ac3eef2934bf5fdf82318a660208831bddc6f746e" name="libpopt0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.19" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1373198400">- Fix typo in popt-libc-updates.patch that prevented it to work
  with glibc before 2.17.
- More robust make install call; remove redundant %clean section</changelog>
  <changelog author="schwab@suse.de" date="1381147200">- popt-alignment-checks.patch: fix alignment checks</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Remove --with-pic which is only for static libs.
- Fix RPM groups.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="meissner@suse.com" date="1548504000">- build a 32bit library generically, for use by 32bit fuzzing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- fix URLs, rpm5.org is no more</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1593172800">- Update to version 1.18:
  * fix an ugly and ancient security issue with popt failing to drop privileges on alias exec from a SUID/SGID program
  * perform rudimentary sanity checks when reading in popt config files
  * collect accumulated misc fixes (memleaks etc) from distros
  * convert translations to utf-8 encoding
  * convert old postscript documentation to pdf
  * dust off ten years worth of autotools sediment
  * reorganize and clean up the source tree for clarity
  * remove the obnoxious splint annotations from the sources
- popt-alignment-checks.patch removed: contained in upstream
- popt-libc-updates.patch changed: to be compatible with new version.</changelog>
  <changelog author="jengelh@inai.de" date="1598270400">- Update homepage URL.
- Drop old rpm constructs.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654603200">- Create lang subpackage</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1663416000">- popt 1.19:
  * various build system fixes
  * various developer visible fixes
  * Fix the handling of superfluous args passed with =
  * Fix multiple resource and memory leaks
  * Fix '=' getting shown for short options
  * Improve random number handling
  * translation updates and documentation improvements
- refresh spec file, run tests, package license in every package,
  and treat all compiler warnings and errors</changelog>
</package>
<package pkgid="713bbb46f5fa3c3ecdfcb6f6dca44ff9e7107e68caf7c8d4df66a09cf043740569af61d19896996d9cb7ef9b814a8a34515786d417a7981dbad69e2c833492dc" name="libprocps8-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.3.17" rel="slfo.1.1_1.2"/>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="kukuk@suse.com" date="1698667200">- procps-ng-3.3.17-logind.patch: Fix crash of "w -s -h"</changelog>
  <changelog author="kukuk@suse.com" date="1702555200">- procps-3.3.17-ignore-sysctl_conf.patch: ignore dangling symlink
  to missing /etc/sysctl.conf file [bsc#1217990]</changelog>
</package>
<package pkgid="f7ba7d6d71443d285bb74ab03fd76fd7231c5b19f0056b6d7e072a811292e5678b53689a1d1157553f91097f424236dde8891eddcbf36e1c7c486ea1310f9792" name="libprotobuf-c1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="slfo.1.1_1.4"/>
  <changelog author="adam.majer@suse.de" date="1585828800">- Update to new upstream release 1.3.3
  * Fixes cmake endiness check</changelog>
  <changelog author="jengelh@inai.de" date="1621425600">- Update to release 1.4.0
  * protoc-c: Add custom options support
  * Fix packed repeated bool parsing</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637323200">- Fold main package into devel package, as it needed its own
  devel-package, add a protobuf-c = version Provides to devel
  sub-package. (bsc#1213443)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Drop no longer needed rpmlintrc.
- Also add a protobuf-c =&lt; version Obsoletes to devel sub-package.</changelog>
  <changelog author="adam.majer@suse.de" date="1657022400">- Do not build static libraries
- Run unit tests
- Explicit files and directories for includedir, so we can detect
  what we actually install there
- 508.patch: fixes invalid arithmetic shift (bsc#1200908, CVE-2022-33070)</changelog>
  <changelog author="jengelh@inai.de" date="1657540800">- Update to release 1.4.1 (jsc#PED-5634)
  * Fixed unsigned integer overflow (GH#499, bsc#1210323, CVE-2022-48468)
  * Avoid shifting signed values (GH#508)
- Remove 508.patch (merged)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO again.</changelog>
  <changelog author="adam.majer@suse.de" date="1682337600">- Add protobuf-devel to devel package recommends as the binary there
  is required to actually generated protobuf headers.</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- limit to protobuf &lt; 22 as it is not compatible with newer
  versions (gh#protobuf-c#544)</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 1.5.0:
  * Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
  * remove deprecated functionality
  * Avoid "unused variable" compiler warning
  * Update autotools
  * Support for new Google protobuf 22.x, 23.x releases
  * Remove protobuf 2.x support</changelog>
</package>
<package pkgid="1c857ba9ef36f4d0d62eeeac8c43b73a706092f44d272da91b989e981e246b1f22f44f46be2c428abbcab68aa8f9c9c5628b3c17c6b0341db427c0e3ef86016f" name="libproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="0.4.18" rel="slfo.1.1_1.3"/>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
  <changelog author="dimstar@opensuse.org" date="1607083200">- Update to version 0.4.16:
  + Port to, and require, SpiderMonkey 6.
  + Use closesocket() instead of close() on Windows.
  + Add symbol versions - be ready to introduce new APIs as needed.
  + Add public px_proxy_factory_free_proxies function.
  + Add PacRunner config backend (largely untested; feedback
    welcome!).
  + Small performance improvements.
  + pxgsettings: use the correct syntax to connect to the changed
    signal (silences annoying output on console).
  + Support python3 up to version 3.9.
  + Fix buffer overflow when PAC is enabled (CVE-2020-26154).
  + Rewrite url::recvline to be nonrecursive (CVE-2020-25219).
  + Remove nonfunctional and crashy pacrunner caching.
  + Never use system libmodman (no other consumers, not
    maintained).
- Drop upstream merged patches:
  + libproxy-python3.7.patch
  + libproxy-pxgsettings.patch
  + libproxy-CVE-2020-25219.patch
  libproxy-fix-pac-buffer-overflow.patch
- Create new sub-package libproxy1-config-pacrunner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607947200">- Add 147.patch: python bindings: fix "TypeError: _argtypes_ must
  be a sequence of types".</changelog>
  <changelog author="dimstar@opensuse.org" date="1609243200">- Update to version 0.4.17:
  + python bindings: fix "TypeError: argtypes must be a sequence of
    types".
- Drop 147.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1626177600">- Do no longer BuildRequire libmodman-devel: libproxy 0.4.17 was
  changed upstream to only support to internal version (no other
  consumer of libmodman exists).
- No longer pass -DFORCE_SYSTEM_LIBMODMAN=ON to cmake: not
  understood anymore (boo#1188265).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Drop gconf2-devel BuildRequires: libproxy was ported to gsettings
  quite some time ago.
- Update our Supplements to current standard.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Add libproxy-python-310.patch: Detect python 3.10.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655726400">- Update to version 0.4.18:
  + build: Allow configuration of sysconfig module.
  + config_envvar: Add environment variable for pacrunner
    debugging.
  + build: disable mozjs by default.
  + python: Support Python 3.10 and above.
  + Add Duktape pacrunner module.
  + config_kde: Compute list of config file locations ourselves.
  + cpmfog_gnome3: Add gnome-wayland to permitted DESKTOP_SESSION.
- Drop libproxy-python-310.patch: fixed upstream.
- Build duktape pacrunner module:
  + Add pkgconfig(duktape): new dependency.
  + Split new subpackage libproxy1-pacrunner-duktape.
  + Suggest duktape pacrunner for config modules recommending a
    pacrunner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655812800">- Add libproxy-perl-cflags.patch: perl: Use ccflags from %Config
  for libproxy module compilation; fixes perl test suite on i586.</changelog>
  <changelog author="fcrozat@suse.com" date="1685620800">- Only build mono support on openSUSE, not SLE nor SUSE ALP.</changelog>
</package>
<package pkgid="e786f3e40b2224a335eaa85925280e6d83a045dbcf923207616a38b20c8f4fe1f48623ef21ecc5cfb8b6058414ce986b8bd0b71c2d3e9a63c1ecf19563af55e1" name="libproxy1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.4.18" rel="slfo.1.1_1.3"/>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
  <changelog author="dimstar@opensuse.org" date="1607083200">- Update to version 0.4.16:
  + Port to, and require, SpiderMonkey 6.
  + Use closesocket() instead of close() on Windows.
  + Add symbol versions - be ready to introduce new APIs as needed.
  + Add public px_proxy_factory_free_proxies function.
  + Add PacRunner config backend (largely untested; feedback
    welcome!).
  + Small performance improvements.
  + pxgsettings: use the correct syntax to connect to the changed
    signal (silences annoying output on console).
  + Support python3 up to version 3.9.
  + Fix buffer overflow when PAC is enabled (CVE-2020-26154).
  + Rewrite url::recvline to be nonrecursive (CVE-2020-25219).
  + Remove nonfunctional and crashy pacrunner caching.
  + Never use system libmodman (no other consumers, not
    maintained).
- Drop upstream merged patches:
  + libproxy-python3.7.patch
  + libproxy-pxgsettings.patch
  + libproxy-CVE-2020-25219.patch
  libproxy-fix-pac-buffer-overflow.patch
- Create new sub-package libproxy1-config-pacrunner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607947200">- Add 147.patch: python bindings: fix "TypeError: _argtypes_ must
  be a sequence of types".</changelog>
  <changelog author="dimstar@opensuse.org" date="1609243200">- Update to version 0.4.17:
  + python bindings: fix "TypeError: argtypes must be a sequence of
    types".
- Drop 147.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1626177600">- Do no longer BuildRequire libmodman-devel: libproxy 0.4.17 was
  changed upstream to only support to internal version (no other
  consumer of libmodman exists).
- No longer pass -DFORCE_SYSTEM_LIBMODMAN=ON to cmake: not
  understood anymore (boo#1188265).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Drop gconf2-devel BuildRequires: libproxy was ported to gsettings
  quite some time ago.
- Update our Supplements to current standard.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Add libproxy-python-310.patch: Detect python 3.10.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655726400">- Update to version 0.4.18:
  + build: Allow configuration of sysconfig module.
  + config_envvar: Add environment variable for pacrunner
    debugging.
  + build: disable mozjs by default.
  + python: Support Python 3.10 and above.
  + Add Duktape pacrunner module.
  + config_kde: Compute list of config file locations ourselves.
  + cpmfog_gnome3: Add gnome-wayland to permitted DESKTOP_SESSION.
- Drop libproxy-python-310.patch: fixed upstream.
- Build duktape pacrunner module:
  + Add pkgconfig(duktape): new dependency.
  + Split new subpackage libproxy1-pacrunner-duktape.
  + Suggest duktape pacrunner for config modules recommending a
    pacrunner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655812800">- Add libproxy-perl-cflags.patch: perl: Use ccflags from %Config
  for libproxy module compilation; fixes perl test suite on i586.</changelog>
  <changelog author="fcrozat@suse.com" date="1685620800">- Only build mono support on openSUSE, not SLE nor SUSE ALP.</changelog>
</package>
<package pkgid="70f70e7aa8fe29d910df474dbcb0a47dbe4db137dbbdaebdf038be15255253e435bec5e17123b3ab66a36242c6e5016a7c2175aa8d0bf41a88a478fe10a61fea" name="libpskc0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.11.12" rel="slfo.1.1_2.1"/>
  <changelog author="schwab@suse.de" date="1533556800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="mardnh@gmx.de" date="1609243200">- Update to version 2.6.5
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.
    KEY and OTP may now be given as '-' to mean stdin, or @FILE to
    read from a particular file.  This is recommended on multi-user
    systems, since secrets as command line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.
  * Doc fixes.
- Update to version 2.6.4
  * libpskc: New --with-xmlsec-crypto-engine to hard-code crypto
    engine.  Use it like --with-xmlsec-crypto-engine=gnutls or
  - -with-xmlsec-crypto-engine=openssl if the default dynamic
    loading fails because of runtime linker search path issues.
  * oathtool --totp --verbose now prints TOTP hash mode.
  * oathtool: Hash names (e.g., SHA256) for --totp are now upper
    case.  Lower/mixed case hash names are supported for
    compatibility.
  * pam_oath: Fail gracefully for missing users.
    This allows you to incrementally add support for OATH
    authentication instead of forcing it on all users.
  * Fix libpskc memory corruption bug.
  * Fix man pages.
  * Build fixes.
- Update to version 2.6.3
  * pam_oath: Fix self-tests.
- Drop not longer needed patches:
  * 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch
  * 0003-pam_oath-assign-safe-default-to-alwaysok-config-memb.patch
  * 0002-update_gnulibs_files.patch
  * gnulib-libio.patch
- Use source verification
- Use proper source URLs</changelog>
  <changelog author="mardnh@gmx.de" date="1611144000">- Update to version 2.6.6
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.  KEY and OTP may now be given as '-' to mean
    stdin, or @FILE to read from a particular file.  This is
    recommended on multi-user systems, since secrets as command
    line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.</changelog>
  <changelog author="mardnh@gmx.de" date="1619956800">- Update to version 2.6.7
  * pam_oath: Support variables in usersfile string parameter.
    These changes introduce the ${USER} and ${HOME} placeholder
    values for the usersfile string in the pam_oath configuration
    file. The placeholder values allow the user credentials file
    to be stored in a file path that is relative to the user, and
    mimics similar behavior found in google-authenticator-libpam.
    The motivation for these changes is to allow for
    non-privileged processes to use pam_oath (e.g., for 2FA with
    xscreensaver). Non-privileged and non-suid programs are
    unable to use pam_oath. These changes are a proposed
    alternative to a suid helper binary as well.
  * doc: Fix project URL in man pages.
  * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config.
  * build: Modernize autotools usage.
    Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE
    to make rebuilding from source more safe with future automake
    versions.
  * Updated gnulib files.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- url -&gt; https</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659441600">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="mardnh@gmx.de" date="1688904000">- Update to version 2.6.8
  * libpskc: Fixes for recent libxmlsec releases.
  * pam_oath: Provide fallback pam_modutil_getpwnam implementation.
  * pam_oath: Don't fail authentication when pam_modutil_getpwnam
  doesn't ** know the user when usersfile don't include ${USER}
  or ${HOME}.
  * pam_oath: Self-test improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.6.11
  * liboath: Handle invalid base32 encoded secrets.  Fixes: #41.
  * Various build fixes including updated gnulib files.
  * Improve compatibility with recent libxmlsec.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726228800">- Fix security issue CVE-2024-47191 by adding
  0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch .
- Add patch to implement new null_usersfile_okay argument
  42-null_usersfile_okay.patch .
- Makes this version 2.6.11.12 to be able to depend on it.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1729080000">- Update 0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch
  with bsc#1231699 improvements for security fix CVE-2024-47191</changelog>
</package>
<package pkgid="4456ad22d691feeffbd7bd7e68255ab8b1291beb7be966d0d7ba69f4d0909a5fb9b80b7962484f7d86f01e25320ec4a09036669dbe30ceaaf4f043323e4e863c" name="libpsl-debugsource" arch="aarch64">
  <version epoch="0" ver="0.21.2" rel="slfo.1.1_1.2"/>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="astieger@suse.com" date="1524916800">- update to 0.20.2:
  * Fix non srcdir builds
  * Add API decoration
  * Detection fallback from libidn2 to libcu, libidn</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1558267200">- update to 0.21.0:
  * Add -b/--batch to 'psl' to suppress printing the domain</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594987200">- update to 0.21.1:
  * fix build with recent platform.sh changes to publicsuffix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672142400">- update to 0.21.2:
  * Increased internal label size
  * Fix undefined behavior in library code
  * Ensure that calls to fopen() and stat() can handle largefiles
- add multibuild definition</changelog>
</package>
<package pkgid="c6ca739bfdcc89126a7174381b0b3cb74e515fe13dd073c4a56d225c49ba8472a58ceac94805ab1ee6efac588000ea63d1cad18c93c1dc4fd66602e0b76637b2" name="libpsl5-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.21.2" rel="slfo.1.1_1.2"/>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="astieger@suse.com" date="1524916800">- update to 0.20.2:
  * Fix non srcdir builds
  * Add API decoration
  * Detection fallback from libidn2 to libcu, libidn</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1558267200">- update to 0.21.0:
  * Add -b/--batch to 'psl' to suppress printing the domain</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594987200">- update to 0.21.1:
  * fix build with recent platform.sh changes to publicsuffix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672142400">- update to 0.21.2:
  * Increased internal label size
  * Fix undefined behavior in library code
  * Ensure that calls to fopen() and stat() can handle largefiles
- add multibuild definition</changelog>
</package>
<package pkgid="902eb570faeedd2a6ffe7f777642d99c2b3bb39dcaa3edf531889cad3161d478f14715b7aae089a957fe86e29d31f1c719d654d5d1d1225a5e41bf8f6b6c18ea" name="libpwquality-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.5" rel="slfo.1.1_1.2"/>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568894401">- Update to version 1.4.1:
  + Minor bugfix update of the library.
- Drop libpwquality-pythons.patch: Fixed upstream. Following this,
  drop autoconf, automake and libtool BuildRequires and autoreconf
  call.
- Use modern macros.</changelog>
  <changelog author="kukuk@suse.com" date="1588334400">- Add baselibs.conf</changelog>
  <changelog author="fvogt@suse.com" date="1589803200">- Register with pam-config in %post(un)</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.4.2:
  * Fix regression in handling retry, enforce_for_root, and
    local_users_only options introduced with the previous
    release.</changelog>
  <changelog author="dsauer@suse.com" date="1602849600">- update to 1.4.4
  * e11f2bd Fix regression with enabling cracklib check
  * 02e6728 Use make macros in rpm spec file
  * xxxxxxx Translated using Weblate (Polish, Turkish, Ukrainian)
- update to 1.4.3
  * 1213d33 Update translation files
  * a951fbe Add --disable-cracklib-check configure parameter
  * 6a8845b fixup static compilation
  * 92c6066 python: Add missing getters/setters for newly added settings
  * bfef79d Add usersubstr check
  * 09a2e65 pam_pwquality: Add debug message for the local_users_only option
  * a6f7705 Fix some gcc warnings
  * 8c8a260 pwmake: Properly validate the bits parameter.
  * 7be4797 we use Fedora Weblate now
  * xxxxxxx Translated using Weblate (Azerbaijani, Bulgarian,
    Chinese (Simplified), Czech, French, Friulian, Hungarian, Italian,
    Japanese, Norwegian Bokmål, Persian, Russian, Spanish, Turkish)</changelog>
  <changelog author="josef.moellers@suse.com" date="1609848000">- Do not use macro %make_build pre SLE-15
  Use "make -O %{?_smp_mflags}" instead
  [libpwquality.spec]</changelog>
  <changelog author="dimstar@opensuse.org" date="1632830400">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
  (boo#1191042).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Add python-rpm-macros to BuildRequires (boo#1194757).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672056000">- Update to version 1.4.5:
  + Minor bug fixes and documentation enhancements.
  + Updated translations.</changelog>
</package>
<package pkgid="3f646d35c4abb7b5dbaa2e665d07848e6a90b98307a1c04cd3efe12897ae15e782644060805811a82098000ad46f3816fb9365c6d026435e4a8c34bef59c5f5f" name="libpwquality-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.5" rel="slfo.1.1_1.2"/>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568894401">- Update to version 1.4.1:
  + Minor bugfix update of the library.
- Drop libpwquality-pythons.patch: Fixed upstream. Following this,
  drop autoconf, automake and libtool BuildRequires and autoreconf
  call.
- Use modern macros.</changelog>
  <changelog author="kukuk@suse.com" date="1588334400">- Add baselibs.conf</changelog>
  <changelog author="fvogt@suse.com" date="1589803200">- Register with pam-config in %post(un)</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.4.2:
  * Fix regression in handling retry, enforce_for_root, and
    local_users_only options introduced with the previous
    release.</changelog>
  <changelog author="dsauer@suse.com" date="1602849600">- update to 1.4.4
  * e11f2bd Fix regression with enabling cracklib check
  * 02e6728 Use make macros in rpm spec file
  * xxxxxxx Translated using Weblate (Polish, Turkish, Ukrainian)
- update to 1.4.3
  * 1213d33 Update translation files
  * a951fbe Add --disable-cracklib-check configure parameter
  * 6a8845b fixup static compilation
  * 92c6066 python: Add missing getters/setters for newly added settings
  * bfef79d Add usersubstr check
  * 09a2e65 pam_pwquality: Add debug message for the local_users_only option
  * a6f7705 Fix some gcc warnings
  * 8c8a260 pwmake: Properly validate the bits parameter.
  * 7be4797 we use Fedora Weblate now
  * xxxxxxx Translated using Weblate (Azerbaijani, Bulgarian,
    Chinese (Simplified), Czech, French, Friulian, Hungarian, Italian,
    Japanese, Norwegian Bokmål, Persian, Russian, Spanish, Turkish)</changelog>
  <changelog author="josef.moellers@suse.com" date="1609848000">- Do not use macro %make_build pre SLE-15
  Use "make -O %{?_smp_mflags}" instead
  [libpwquality.spec]</changelog>
  <changelog author="dimstar@opensuse.org" date="1632830400">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
  (boo#1191042).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Add python-rpm-macros to BuildRequires (boo#1194757).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672056000">- Update to version 1.4.5:
  + Minor bug fixes and documentation enhancements.
  + Updated translations.</changelog>
</package>
<package pkgid="80296d8823c0cc3e915f5b662c2b2ce493ab113fe57a16889858810ca2f56462871cda6500cbbe3ad9a5f7b821d9274917db9f537cce5209ddf0134b7951a5ba" name="libpwquality1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.5" rel="slfo.1.1_1.2"/>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568894401">- Update to version 1.4.1:
  + Minor bugfix update of the library.
- Drop libpwquality-pythons.patch: Fixed upstream. Following this,
  drop autoconf, automake and libtool BuildRequires and autoreconf
  call.
- Use modern macros.</changelog>
  <changelog author="kukuk@suse.com" date="1588334400">- Add baselibs.conf</changelog>
  <changelog author="fvogt@suse.com" date="1589803200">- Register with pam-config in %post(un)</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.4.2:
  * Fix regression in handling retry, enforce_for_root, and
    local_users_only options introduced with the previous
    release.</changelog>
  <changelog author="dsauer@suse.com" date="1602849600">- update to 1.4.4
  * e11f2bd Fix regression with enabling cracklib check
  * 02e6728 Use make macros in rpm spec file
  * xxxxxxx Translated using Weblate (Polish, Turkish, Ukrainian)
- update to 1.4.3
  * 1213d33 Update translation files
  * a951fbe Add --disable-cracklib-check configure parameter
  * 6a8845b fixup static compilation
  * 92c6066 python: Add missing getters/setters for newly added settings
  * bfef79d Add usersubstr check
  * 09a2e65 pam_pwquality: Add debug message for the local_users_only option
  * a6f7705 Fix some gcc warnings
  * 8c8a260 pwmake: Properly validate the bits parameter.
  * 7be4797 we use Fedora Weblate now
  * xxxxxxx Translated using Weblate (Azerbaijani, Bulgarian,
    Chinese (Simplified), Czech, French, Friulian, Hungarian, Italian,
    Japanese, Norwegian Bokmål, Persian, Russian, Spanish, Turkish)</changelog>
  <changelog author="josef.moellers@suse.com" date="1609848000">- Do not use macro %make_build pre SLE-15
  Use "make -O %{?_smp_mflags}" instead
  [libpwquality.spec]</changelog>
  <changelog author="dimstar@opensuse.org" date="1632830400">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
  (boo#1191042).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Add python-rpm-macros to BuildRequires (boo#1194757).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672056000">- Update to version 1.4.5:
  + Minor bug fixes and documentation enhancements.
  + Updated translations.</changelog>
</package>
<package pkgid="8b04dc229b83e67c2c401b8c15a4e5b55543c43b975bf9284157e292c1d2c6a001510b8ea9b09c9e9d0a53b48d6e35f206db8f308a4d26b8fa444e67531ac4e0" name="libpython3_11-1_0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.11.15" rel="slfo.1.1_1.1"/>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="dimstar@opensuse.org" date="1758196800">- Require AppStream to validate appdata file instead of deprecated
  appstream-glib.
- Update idle3.appdata.xml to pass the more pedantic appstreamcli.</changelog>
  <changelog author="dimstar@opensuse.org" date="1758283200">- Drop AppStream buildrequires and don't run appstreamcli validate
  as part of the build process: the appdata.xml is not updated by
  source directly, so we have more contol. Having Appstream or the
  deprecated appstream-glib result in a build cycle.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1759147200">- Add gh139257-Support-docutils-0.22.patch to fix build with latest
  docutils (&gt;=0.22) gh#python/cpython#139257</changelog>
  <changelog author="daniel.garcia@suse.com" date="1760529600">- Update to 3.11.14:
  - Security
  - gh-139700: Check consistency of the zip64 end of central
    directory record. Support records with “zip64 extensible data”
    if there are no bytes prepended to the ZIP file
    (CVE-2025-8291, bsc#1251305).
  - gh-139400: xml.parsers.expat: Make sure that parent Expat
    parsers are only garbage-collected once they are no longer
    referenced by subparsers created by
    ExternalEntityParserCreate(). Patch by Sebastian Pipping.
  - gh-135661: Fix parsing start and end tags in
    html.parser.HTMLParser according to the HTML5 standard.
  * Whitespaces no longer accepted between &lt;/ and the tag name. E.g.
    &lt;/ script&gt; does not end the script section.
  * Vertical tabulation (\v) and non-ASCII whitespaces no longer
    recognized as whitespaces. The only whitespaces are \t\n\r\f and
    space.
  * Null character (U+0000) no longer ends the tag name.
  * Attributes and slashes after the tag name in end tags are now
    ignored, instead of terminating after the first &gt; in quoted
    attribute value. E.g. &lt;/script/foo="&gt;"/&gt;.
  * Multiple slashes and whitespaces between the last attribute and
    closing &gt; are now ignored in both start and end tags. E.g. &lt;a
    foo=bar/ //&gt;.
  * Multiple = between attribute name and value are no longer
    collapsed. E.g. &lt;a foo==bar&gt; produces attribute “foo” with value
    “=bar”.
  - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser
    according to the HTML5 standard: ] ]&gt; and ]] &gt; no longer end the
    CDATA section. Add private method _set_support_cdata() which can
    be used to specify how to parse &lt;[CDATA[ — as a CDATA section in
    foreign content (SVG or MathML) or as a bogus comment in the
    HTML namespace.
  - gh-102555: Fix comment parsing in html.parser.HTMLParser
    according to the HTML5 standard. --!&gt; now ends the comment. -- &gt;
    no longer ends the comment. Support abnormally ended empty
    comments &lt;--&gt; and &lt;---&gt;.
  - gh-135462: Fix quadratic complexity in processing specially
    crafted input in html.parser.HTMLParser. End-of-file errors are
    now handled according to the HTML5 specs – comments and
    declarations are automatically closed, tags are ignored.
  - gh-118350: Fix support of escapable raw text mode (elements
    “textarea” and “title”) in html.parser.HTMLParser.
  - gh-86155: html.parser.HTMLParser.close() no longer loses data
    when the &lt;script&gt; tag is not closed. Patch by Waylan Limberg.
  - Library
  - gh-139312: Upgrade bundled libexpat to 2.7.3
  - gh-138998: Update bundled libexpat to 2.7.2
  - gh-130577: tarfile now validates archives to ensure member
    offsets are non-negative. (Contributed by Alexander Enrique
    Urieles Nieto in gh-130577.)
  - gh-135374: Update the bundled copy of setuptools to 79.0.1.
- Drop upstreamed patches:
  - CVE-2025-8194-tarfile-no-neg-offsets.patch
  - CVE-2025-6069-quad-complex-HTMLParser.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Readjusted patches:
  - CVE-2023-52425-libexpat-2.6.0-backport.patch
  - CVE-2023-52425-remove-reparse_deferral-tests.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
  <changelog author="mcepl@suse.com" date="1770811200">- CVE-2025-11468: preserving parens when folding comments in
  email headers (bsc#1257029, gh#python/cpython#143935).
  CVE-2025-11468-email-hdr-fold-comment.patch
- CVE-2026-0672: rejects control characters in http cookies.
  (bsc#1257031, gh#python/cpython#143919)
  CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
- CVE-2026-0865: rejecting control characters in
  wsgiref.headers.Headers, which could be abused for injecting
  false HTTP headers. (bsc#1257042, gh#python/cpython#143916)
  CVE-2026-0865-wsgiref-ctrl-chars.patch
- CVE-2025-15366: basically the same as the previous patch for
  IMAP protocol. (bsc#1257044, gh#python/cpython#143921)
  CVE-2025-15366-imap-ctrl-chars.patch
- CVE-2025-15282: basically the same as the previous patch for
  urllib library. (bsc#1257046, gh#python/cpython#143925)
  CVE-2025-15282-urllib-ctrl-chars.patch
- CVE-2025-15367: basically the same as the previous patch for
  poplib library. (bsc#1257041, gh#python/cpython#143923)
  CVE-2025-15367-poplib-ctrl-chars.patch
- CVE-2025-12781: fix decoding with non-standard Base64 alphabet
  (bsc#1257108, gh#python/cpython#125346)
  CVE-2025-12781-b64decode-alt-chars.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1772798400">- Update to 3.11.15:
  - Security
  - gh-144125: BytesGenerator will now refuse to serialize
    (write) headers that are unsafely folded or delimited; see
    verify_generated_headers. (Contributed by Bas Bloemsaat and
    Petr Viktorin in gh-121650).
  - gh-143935: Fixed a bug in the folding of comments when
    flattening an email message using a modern email policy.
    Comments consisting of a very long sequence of non-foldable
    characters could trigger a forced line wrap that omitted
    the required leading space on the continuation line,
    causing the remainder of the comment to be interpreted as
    a new header field. This enabled header injection with
    carefully crafted inputs (bsc#1257029 CVE-2025-11468).
  - gh-143925: Reject control characters in data: URL media
    types (bsc#1257046, CVE-2025-15282).
  - gh-143919: Reject control characters in http.cookies.Morsel
    fields and values (bsc#1257031, CVE-2026-0672).
  - gh-143916: Reject C0 control characters within
    wsgiref.headers.Headers fields, values, and parameters
    (bsc#1257042, CVE-2026-0865).
  - gh-142145: Remove quadratic behavior in xml.minidom node ID
    cache clearing. In order to do this without breaking
    existing users, we also add the ownerDocument attribute to
    xml.dom.minidom elements and attributes created by directly
    instantiating the Element or Attr class. Note that this way
    of creating nodes is not supported; creator functions like
    xml.dom.Document.documentElement() should be used instead
    (bsc#1254997, CVE-2025-12084).
  - gh-137836: Add support of the “plaintext” element, RAWTEXT
    elements “xmp”, “iframe”, “noembed” and “noframes”, and
    optionally RAWTEXT element “noscript” in
    html.parser.HTMLParser.
  - gh-136063: email.message: ensure linear complexity for
    legacy HTTP parameters parsing. Patch by Bénédikt Tran.
  - gh-136065: Fix quadratic complexity in
    os.path.expandvars() (bsc#1252974, CVE-2025-6075).
  - gh-119451: Fix a potential memory denial of service in the
    http.client module. When connecting to a malicious server,
    it could cause an arbitrary amount of memory to be
    allocated. This could have led to symptoms including
    a MemoryError, swapping, out of memory (OOM) killed
    processes or containers, or even system crashes
    (CVE-2025-13836, bsc#1254400).
  - gh-119452: Fix a potential memory denial of service in the
    http.server module. When a malicious user is connected to
    the CGI server on Windows, it could cause an arbitrary
    amount of memory to be allocated. This could have led to
    symptoms including a MemoryError, swapping, out of memory
    (OOM) killed processes or containers, or even system
    crashes.
  - gh-119342: Fix a potential memory denial of service in the
    plistlib module. When reading a Plist file received from
    untrusted source, it could cause an arbitrary amount of
    memory to be allocated. This could have led to symptoms
    including a MemoryError, swapping, out of memory (OOM)
    killed processes or containers, or even system crashes
    (bsc#1254401, CVE-2025-13837).
  - Library
  - gh-144833: Fixed a use-after-free in ssl when SSL_new()
    returns NULL in newPySSLSocket(). The error was reported
    via a dangling pointer after the object had already been
    freed.
  - gh-144363: Update bundled libexpat to 2.7.4
  - gh-90949: Add SetAllocTrackerActivationThreshold() and
    SetAllocTrackerMaximumAmplification() to xmlparser objects
    to prevent use of disproportional amounts of dynamic memory
    from within an Expat parser. Patch by Bénédikt Tran.
  - Core and Builtins
  - gh-120384: Fix an array out of bounds crash in
    list_ass_subscript, which could be invoked via some
    specificly tailored input: including concurrent
    modification of a list object, where one thread assigns
    a slice and another clears it.
  - gh-120298: Fix use-after free in list_richcompare_impl
    which can be invoked via some specificly tailored evil
    input.
  Remove upstreamed patches:
  - CVE-2025-11468-email-hdr-fold-comment.patch
  - CVE-2025-12084-minidom-quad-search.patch
  - CVE-2025-13836-http-resp-cont-len.patch
  - CVE-2025-13837-plistlib-mailicious-length.patch
  - CVE-2025-6075-expandvars-perf-degrad.patch
  - CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
  - CVE-2026-0865-wsgiref-ctrl-chars.patch
  - CVE-2025-15282-urllib-ctrl-chars.patch</changelog>
</package>
<package pkgid="af001c8265d908ce9d81582b3ebbb0412d0c3185115483675124ba463db70ce73064b7d239cfa3c8895e58898c9f01aa7e487df97fcdba0b2e29ff4825377180" name="libqmi-debugsource" arch="aarch64">
  <version epoch="0" ver="1.32.4" rel="slfo.1.1_1.2"/>
  <changelog author="mardnh@gmx.de" date="1621080000">- Update to version 1.28.4
  * libqmi-glib:
  - Add 'wwan' subsystem support.
  - Plug memleak when allocating new links.
  - Plug memleak when QmiDevice is opened multiple times.
  - Fix build when ARPHRD_RAWIP isn't defined in libc.
  * gir:
  - Flag all output TLV readers as optional.
  - Add explicit ownership information in the string and
    struct return annotations.
  * collections:
  - basic: added WMS Send ACK
  * qmicli:
  - Fix double GError when both 'Extended List' and 'Bandwidth
    List' are missing in --nas-get-rf-band-info.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.28.6
  * New request/responses:
  - dms: implement "Foxconn Set FCC authentication"
    request/response.
  * libqmi-glib:
  - Fix transport detection in the 'wwan' subsystem.
  * build:
  - Fix build with GCC 11 and -Wincompatible-pointer-types.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="mardnh@gmx.de" date="1629892800">- Update to version 1.28.8
  * libqmi-glib:
  - Fix CTL "Set Data Format" output TLV prerequisites.
  - Fix double free in the qmiwwan based net port manager.</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 1.30.2:
  * libqmi-glib:
  * * Added support for 'hsic', 'bam-dmux' and 'unknown' endpoint types.
  * * Added support for QMAPv2, QMAPv3 and QMAPv4 data aggregation types.
  * * Added support for 'NGRAN' access technology identifier.
  * * New 'qmi_device_add_link_with_flags()' method, in order to give e.g. rmnet
  specific checksum offload related flags when creating a new link.
  * qmicli:
  * * New '--nas-get-preferred-networks' command.
  * * New '--nas-set-preferred-networks' command.
  * * New '--uim-get-configuration' command.
  * * New '--uim-depersonalization' command.
  * * New '--wms-get-routes' command.
  * * New '--dpm-open-port' command.
  * * New '--dpm-close-port' command.
  * * Updated '--wds-create-profile' with an additional 'apn-type-mask' setting.
  * * Updated '--wds-modify-profile' with an additional 'apn-type-mask' setting.
  * * Updated '--link-add' with an additional optional 'flags' setting.
  * qmi-network:
  * * New PROFILE configuration setting to allow specifying which WDS profile to
  use when connecting.
  * * New IP-TYPE configuration setting to allow selecting the IP type requested
  * collections:
  * * basic: added voice call management operations.
  * * basic: added voice supplementary service related operations.
  * * basic: added NAS preferred networks related operations.
  * * basic: added NAS network reject indications.
  * * basic: added UIM depersonalization related operations.
  * Several other minor improvements and fixes.
- add gpg validation</changelog>
  <changelog author="mardnh@gmx.de" date="1640001601">- Mention libqmi.keyring</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 1.30.4:
  * * meson: switch to use the new python module in meson.
  * * meson: added a new boolean 'man' option in the meson setup to explicitly
    enable or disable building the man pages.
  * * meson: removed the option to detect if rmnet is supported.
  * * meson: multiple updates to use newer meson features like install_dir(),
    install_mode() or summary().
  * * meson: options 'mbim_qmux' and 'qrtr' are enabled by default and must be
    explicitly disabled if they're not needed, there is no attempt to
    autodetect whether they can be enabled or not.
  * qmi-proxy:
  * * Remove assert when attempting to close ghost device.
  * qmi-firmware-update:
  * * Use defaults if FLASH variables not reported, enabling support to flash
    the new Sierra Wireless EM9190 and EM9191 modules.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="christophe@krop.fr" date="1651752000">- Update to 1.30.6
  * meson: fix 'export_packages' in GIR setup.
  * net-port-manager: use unaligned netlink attribute length.
- Drop the unneeded rpmlintrc file</changelog>
  <changelog author="gmbr3@opensuse.org" date="1653480000">- Enable QRTR support</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- update to 1.30.8:
  * dms: new 'Foxconn FCC authentication v2' request/response.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680523200">- Update to version 1.32.4:
  * libqmi-glib: Schedule indications with G_PRIORITY_DEFAULT to
    ensure correct processing order between responses and
    ndications.
  * build: If QRTR enabled the pkg-config should publicly require
    libqrtr-glib.
- Changes from version 1.32.2:
  * libqmi-glib: fixed message header validation to avoid reading
    out of bounds.
  * qmi-proxy: added --verbose-full flag to allow printing logs
    with personal info included.
- Changes from version 1.32.0:
  * There is no longer an upstream-provided source tarball, please
    use the signed git tag '1.32.0' instead to refer to the sources
    of this release.
  * The verbose message logging will now by default hide all fields
    that are considered personal information. Extended message
    logging including all field contents should be explicitly
    requested.
  * Build:
  - The GNU autotools (autoconf/automake/libtool) support has
    been fully removed, this release requires the use of the
    meson build system.
  - The 'instrospection' meson option is now a boolean.
  - New boolean 'man' meson option to allow disabling the man
    page generation.
  * New services: New 'FOX' service for operations defined by
    Foxconn, including "Get Firmware Version" for now.
  * qmicli:
  - New '--verbose-full' option to request enabling logs that
    include personal information.
  - New '--pdc-monitor-refresh' command.
  - New '--gas-dms-set-usb-composition' and
    '--gas-dms-get-usb-composition' commands.
  - New '--wms-set-routes' command.
  - New '--dsd-get-system-status' command.
  - Updated the '--wda-set-data-format' command with new optional
    fields to configure the uplink data aggregation max size and
    max datagrams.
  * Several other minor improvements and fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add help2man, pkgconfig(bash-completion) and
  pkgconfig(gobject-introspection-1.0) BuildRequires: New
  dependencies.
- Use ldconfig_scriptlets macro.
- New home, URL and Source.
- Drop sig and keyfile, no longer available.</changelog>
</package>
<package pkgid="2aae6d2f0b417259740d00def0b615a6e500d1d489b21c52dcca06ba3d5d90c92fa62974dcba59af39a0108f289b8ae6ee1c9321a5357b8750d487e1bb457be3" name="libqmi-glib5-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.32.4" rel="slfo.1.1_1.2"/>
  <changelog author="mardnh@gmx.de" date="1621080000">- Update to version 1.28.4
  * libqmi-glib:
  - Add 'wwan' subsystem support.
  - Plug memleak when allocating new links.
  - Plug memleak when QmiDevice is opened multiple times.
  - Fix build when ARPHRD_RAWIP isn't defined in libc.
  * gir:
  - Flag all output TLV readers as optional.
  - Add explicit ownership information in the string and
    struct return annotations.
  * collections:
  - basic: added WMS Send ACK
  * qmicli:
  - Fix double GError when both 'Extended List' and 'Bandwidth
    List' are missing in --nas-get-rf-band-info.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.28.6
  * New request/responses:
  - dms: implement "Foxconn Set FCC authentication"
    request/response.
  * libqmi-glib:
  - Fix transport detection in the 'wwan' subsystem.
  * build:
  - Fix build with GCC 11 and -Wincompatible-pointer-types.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="mardnh@gmx.de" date="1629892800">- Update to version 1.28.8
  * libqmi-glib:
  - Fix CTL "Set Data Format" output TLV prerequisites.
  - Fix double free in the qmiwwan based net port manager.</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 1.30.2:
  * libqmi-glib:
  * * Added support for 'hsic', 'bam-dmux' and 'unknown' endpoint types.
  * * Added support for QMAPv2, QMAPv3 and QMAPv4 data aggregation types.
  * * Added support for 'NGRAN' access technology identifier.
  * * New 'qmi_device_add_link_with_flags()' method, in order to give e.g. rmnet
  specific checksum offload related flags when creating a new link.
  * qmicli:
  * * New '--nas-get-preferred-networks' command.
  * * New '--nas-set-preferred-networks' command.
  * * New '--uim-get-configuration' command.
  * * New '--uim-depersonalization' command.
  * * New '--wms-get-routes' command.
  * * New '--dpm-open-port' command.
  * * New '--dpm-close-port' command.
  * * Updated '--wds-create-profile' with an additional 'apn-type-mask' setting.
  * * Updated '--wds-modify-profile' with an additional 'apn-type-mask' setting.
  * * Updated '--link-add' with an additional optional 'flags' setting.
  * qmi-network:
  * * New PROFILE configuration setting to allow specifying which WDS profile to
  use when connecting.
  * * New IP-TYPE configuration setting to allow selecting the IP type requested
  * collections:
  * * basic: added voice call management operations.
  * * basic: added voice supplementary service related operations.
  * * basic: added NAS preferred networks related operations.
  * * basic: added NAS network reject indications.
  * * basic: added UIM depersonalization related operations.
  * Several other minor improvements and fixes.
- add gpg validation</changelog>
  <changelog author="mardnh@gmx.de" date="1640001601">- Mention libqmi.keyring</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 1.30.4:
  * * meson: switch to use the new python module in meson.
  * * meson: added a new boolean 'man' option in the meson setup to explicitly
    enable or disable building the man pages.
  * * meson: removed the option to detect if rmnet is supported.
  * * meson: multiple updates to use newer meson features like install_dir(),
    install_mode() or summary().
  * * meson: options 'mbim_qmux' and 'qrtr' are enabled by default and must be
    explicitly disabled if they're not needed, there is no attempt to
    autodetect whether they can be enabled or not.
  * qmi-proxy:
  * * Remove assert when attempting to close ghost device.
  * qmi-firmware-update:
  * * Use defaults if FLASH variables not reported, enabling support to flash
    the new Sierra Wireless EM9190 and EM9191 modules.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="christophe@krop.fr" date="1651752000">- Update to 1.30.6
  * meson: fix 'export_packages' in GIR setup.
  * net-port-manager: use unaligned netlink attribute length.
- Drop the unneeded rpmlintrc file</changelog>
  <changelog author="gmbr3@opensuse.org" date="1653480000">- Enable QRTR support</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- update to 1.30.8:
  * dms: new 'Foxconn FCC authentication v2' request/response.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680523200">- Update to version 1.32.4:
  * libqmi-glib: Schedule indications with G_PRIORITY_DEFAULT to
    ensure correct processing order between responses and
    ndications.
  * build: If QRTR enabled the pkg-config should publicly require
    libqrtr-glib.
- Changes from version 1.32.2:
  * libqmi-glib: fixed message header validation to avoid reading
    out of bounds.
  * qmi-proxy: added --verbose-full flag to allow printing logs
    with personal info included.
- Changes from version 1.32.0:
  * There is no longer an upstream-provided source tarball, please
    use the signed git tag '1.32.0' instead to refer to the sources
    of this release.
  * The verbose message logging will now by default hide all fields
    that are considered personal information. Extended message
    logging including all field contents should be explicitly
    requested.
  * Build:
  - The GNU autotools (autoconf/automake/libtool) support has
    been fully removed, this release requires the use of the
    meson build system.
  - The 'instrospection' meson option is now a boolean.
  - New boolean 'man' meson option to allow disabling the man
    page generation.
  * New services: New 'FOX' service for operations defined by
    Foxconn, including "Get Firmware Version" for now.
  * qmicli:
  - New '--verbose-full' option to request enabling logs that
    include personal information.
  - New '--pdc-monitor-refresh' command.
  - New '--gas-dms-set-usb-composition' and
    '--gas-dms-get-usb-composition' commands.
  - New '--wms-set-routes' command.
  - New '--dsd-get-system-status' command.
  - Updated the '--wda-set-data-format' command with new optional
    fields to configure the uplink data aggregation max size and
    max datagrams.
  * Several other minor improvements and fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add help2man, pkgconfig(bash-completion) and
  pkgconfig(gobject-introspection-1.0) BuildRequires: New
  dependencies.
- Use ldconfig_scriptlets macro.
- New home, URL and Source.
- Drop sig and keyfile, no longer available.</changelog>
</package>
<package pkgid="54cde5c08dc390b0bee24a47ca38ca7aa4ebeade387b641a0a73d20400affcd1c6ade39be0ecf4193896726e3b75181381a02d7d4061fab666563ed9f451ac1f" name="libqmi-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.32.4" rel="slfo.1.1_1.2"/>
  <changelog author="mardnh@gmx.de" date="1621080000">- Update to version 1.28.4
  * libqmi-glib:
  - Add 'wwan' subsystem support.
  - Plug memleak when allocating new links.
  - Plug memleak when QmiDevice is opened multiple times.
  - Fix build when ARPHRD_RAWIP isn't defined in libc.
  * gir:
  - Flag all output TLV readers as optional.
  - Add explicit ownership information in the string and
    struct return annotations.
  * collections:
  - basic: added WMS Send ACK
  * qmicli:
  - Fix double GError when both 'Extended List' and 'Bandwidth
    List' are missing in --nas-get-rf-band-info.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.28.6
  * New request/responses:
  - dms: implement "Foxconn Set FCC authentication"
    request/response.
  * libqmi-glib:
  - Fix transport detection in the 'wwan' subsystem.
  * build:
  - Fix build with GCC 11 and -Wincompatible-pointer-types.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="mardnh@gmx.de" date="1629892800">- Update to version 1.28.8
  * libqmi-glib:
  - Fix CTL "Set Data Format" output TLV prerequisites.
  - Fix double free in the qmiwwan based net port manager.</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 1.30.2:
  * libqmi-glib:
  * * Added support for 'hsic', 'bam-dmux' and 'unknown' endpoint types.
  * * Added support for QMAPv2, QMAPv3 and QMAPv4 data aggregation types.
  * * Added support for 'NGRAN' access technology identifier.
  * * New 'qmi_device_add_link_with_flags()' method, in order to give e.g. rmnet
  specific checksum offload related flags when creating a new link.
  * qmicli:
  * * New '--nas-get-preferred-networks' command.
  * * New '--nas-set-preferred-networks' command.
  * * New '--uim-get-configuration' command.
  * * New '--uim-depersonalization' command.
  * * New '--wms-get-routes' command.
  * * New '--dpm-open-port' command.
  * * New '--dpm-close-port' command.
  * * Updated '--wds-create-profile' with an additional 'apn-type-mask' setting.
  * * Updated '--wds-modify-profile' with an additional 'apn-type-mask' setting.
  * * Updated '--link-add' with an additional optional 'flags' setting.
  * qmi-network:
  * * New PROFILE configuration setting to allow specifying which WDS profile to
  use when connecting.
  * * New IP-TYPE configuration setting to allow selecting the IP type requested
  * collections:
  * * basic: added voice call management operations.
  * * basic: added voice supplementary service related operations.
  * * basic: added NAS preferred networks related operations.
  * * basic: added NAS network reject indications.
  * * basic: added UIM depersonalization related operations.
  * Several other minor improvements and fixes.
- add gpg validation</changelog>
  <changelog author="mardnh@gmx.de" date="1640001601">- Mention libqmi.keyring</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 1.30.4:
  * * meson: switch to use the new python module in meson.
  * * meson: added a new boolean 'man' option in the meson setup to explicitly
    enable or disable building the man pages.
  * * meson: removed the option to detect if rmnet is supported.
  * * meson: multiple updates to use newer meson features like install_dir(),
    install_mode() or summary().
  * * meson: options 'mbim_qmux' and 'qrtr' are enabled by default and must be
    explicitly disabled if they're not needed, there is no attempt to
    autodetect whether they can be enabled or not.
  * qmi-proxy:
  * * Remove assert when attempting to close ghost device.
  * qmi-firmware-update:
  * * Use defaults if FLASH variables not reported, enabling support to flash
    the new Sierra Wireless EM9190 and EM9191 modules.
  * Several other minor improvements and fixes.</changelog>
  <changelog author="christophe@krop.fr" date="1651752000">- Update to 1.30.6
  * meson: fix 'export_packages' in GIR setup.
  * net-port-manager: use unaligned netlink attribute length.
- Drop the unneeded rpmlintrc file</changelog>
  <changelog author="gmbr3@opensuse.org" date="1653480000">- Enable QRTR support</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- update to 1.30.8:
  * dms: new 'Foxconn FCC authentication v2' request/response.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680523200">- Update to version 1.32.4:
  * libqmi-glib: Schedule indications with G_PRIORITY_DEFAULT to
    ensure correct processing order between responses and
    ndications.
  * build: If QRTR enabled the pkg-config should publicly require
    libqrtr-glib.
- Changes from version 1.32.2:
  * libqmi-glib: fixed message header validation to avoid reading
    out of bounds.
  * qmi-proxy: added --verbose-full flag to allow printing logs
    with personal info included.
- Changes from version 1.32.0:
  * There is no longer an upstream-provided source tarball, please
    use the signed git tag '1.32.0' instead to refer to the sources
    of this release.
  * The verbose message logging will now by default hide all fields
    that are considered personal information. Extended message
    logging including all field contents should be explicitly
    requested.
  * Build:
  - The GNU autotools (autoconf/automake/libtool) support has
    been fully removed, this release requires the use of the
    meson build system.
  - The 'instrospection' meson option is now a boolean.
  - New boolean 'man' meson option to allow disabling the man
    page generation.
  * New services: New 'FOX' service for operations defined by
    Foxconn, including "Get Firmware Version" for now.
  * qmicli:
  - New '--verbose-full' option to request enabling logs that
    include personal information.
  - New '--pdc-monitor-refresh' command.
  - New '--gas-dms-set-usb-composition' and
    '--gas-dms-get-usb-composition' commands.
  - New '--wms-set-routes' command.
  - New '--dsd-get-system-status' command.
  - Updated the '--wda-set-data-format' command with new optional
    fields to configure the uplink data aggregation max size and
    max datagrams.
  * Several other minor improvements and fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add help2man, pkgconfig(bash-completion) and
  pkgconfig(gobject-introspection-1.0) BuildRequires: New
  dependencies.
- Use ldconfig_scriptlets macro.
- New home, URL and Source.
- Drop sig and keyfile, no longer available.</changelog>
</package>
<package pkgid="95533c372b4d3e614a641d001f667f45cbd6aaac1ddf56bfdb7694b22e5f2ee19b939de19e67531ca680089a00541f70c1b064da059d81242438ae63657f27bd" name="libqrencode4-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.1" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1360929600">- build also against libpng16
  * libpng16.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1374840000">- Update to 3.4.2:
  * Memory leak bug has been fixed.
  * Micro QR Code encoding bug has been fixed.
  * String splitting has been improved.
- Removed qrencode-libpng16.patch (fixed upstream).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1384603200">- Update to 3.4.3:
  * New option "--rle" has been added to the command line tool.
  * Bug fixes in the library and command line tool.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf, needed for kdebase4-workspace-libs-32bit</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1412337600">- Update to 3.4.4
  * Bugfix release. See the changelog file for the list of changes.
  * New option "--verbose" has been added to the command line tool.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to github as an url so people can see the progress
  * web is not really up-to-date
- Remove compat support for sle11</changelog>
  <changelog author="christophe@krop.fr" date="1516795200">- Update to 4.0.0
  * EPS output now supports foreground and background color
  * XPM and PNG32 support added
  * CMake support added
  * Various bugs and performance fixes
- Add qrencode-fix-installation.patch. Fixes installation for x86_64
  targets.</changelog>
  <changelog author="aloisio@gmx.com" date="1567771200">- Update to version 4.0.2
  * Build script fixes. (Thanks to @mgorny)
  version 4.0.1
  * CMake support improved.
  * New test scripts have been added.
  * Some compile time warnings have been fixed.
- Refreshed qrencode-fix-installation.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599912000">- update to 4.1.0:
  * Command line tool "qrencode" has been improved:
  * New option "--inline" has been added. (Thanks to @jp-bennett)
  * New option "--strict-version" has been added.
  * UTF8 mode now supports ANSI256 color. (Thanks to András Veres-
    Szentkirályi)
  * Micro QR Code no longer requires to specify the version number.
  * 'make check' allows to run the test programs. (Thanks to Jan Tojnar)
  * Some compile time warnings have been fixed.
  * Various CMake support improvements. (Thanks to @mgorny and @sdf5)
  * Some minor bug fixes. (Thanks to Lonnie Abelbeck and Frédéric Wang)
  * Some documentation/manpage improvements. (Thanks to Dan Jacobson)
  * Some performance improvements. (Thanks to @4061N and Mika Lindqvist)
- remove qrencode-fix-installation.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1602763200">- update to 4.1.1:
  * Some minor bugs in Micro QR Code generation have been fixed.
  * The data capacity calculations are now correct. These bugs probably did not
    affect the Micro QR Code generation.</changelog>
</package>
<package pkgid="72599d46d6341e481c65f5457b904f21b721c08c4149cb88c5c1165dfde26d353d1e2e3c483bdfc4c36f1452bc72a155170e63cea2dcac9cae5dbe5c0856dd54" name="libqrtr-glib-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="slfo.1.1_1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1653134400">- Initial package version 1.2.2</changelog>
</package>
<package pkgid="5c8a7d97f3cd3a497731b7c1db3eb6b3689e5a92f64ed40952395c7c916ec7809135f43ef048eda688b51713022853509f5ca45d44685ab0ddeda5c446d63190" name="libqrtr-glib0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="slfo.1.1_1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1653134400">- Initial package version 1.2.2</changelog>
</package>
<package pkgid="708b2d5fc44efe6053d01199997a77b77ad8a26b3c9f22348625212bbb83b19b9c9632f21b8da29644b1057f73d7b23b9ebf6155ad2e08cbf1ea34ba9d3b49c3" name="librados2-debuginfo" arch="aarch64">
  <version epoch="0" ver="16.2.14.66+g7aa6ce9419f" rel="slfo.1.1_1.6"/>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
  <changelog author="ana.guerrero@suse.com" date="1692187200">- restrict to older Cython</changelog>
  <changelog author="tserong@suse.com" date="1694433600">- Update to 16.2.14-66-g7aa6ce9419f:
  + (bsc#1207765) rgw/rados: check_quota() uses real bucket owner
  + (bsc#1212559) pacific: os/bluestore: cumulative bluefs backport
    This notably includes:
  * os/bluestore: BlueFS fine grain locking
  * os/bluestore/bluefs: Fix improper vselector tracking in _flush_special()
  * os/bluestore: enable 4K allocation unit for BlueFS
  * os/bluestore/bluefs: Fix sync compactionA
  + (bsc#1213217) ceph.spec.in: Require fmt-devel &lt; 10
  + ceph.spec.in: enable build on riscv64 for openSUSE Factory
  + ceph.spec.in: Require Cython &gt;= 0.29 but &lt; 3
  + cephadm: update to the latest container images:
  * registry.suse.com/ses/7.1/ceph/prometheus-server:2.37.6
  * registry.suse.com/ses/7.1/ceph/prometheus-node-exporter:1.5.0
  * registry.suse.com/ses/7.1/ceph/grafana:8.5.22
  * registry.suse.com/ses/7.1/ceph/haproxy:2.0.31
- Drop ceph-test.changes (no longer necessary since using _multibuild)</changelog>
  <changelog author="dimstar@opensuse.org" date="1702987200">- Add ceph-cmake-3.28.patch: Fix build with cmake 3.28 and no git
  command found (https://github.com/ceph/ceph/pull/54963,
  boo#1218111).</changelog>
</package>
<package pkgid="317f3e86da38cb8310a7883a4887824a05483e803960855cce32629dd86fe2eb686747cab6da027e9244d8f2b16e2322ada59ca7536b300e4e52ea84576c3a8d" name="librbd1-debuginfo" arch="aarch64">
  <version epoch="0" ver="16.2.14.66+g7aa6ce9419f" rel="slfo.1.1_1.6"/>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
  <changelog author="ana.guerrero@suse.com" date="1692187200">- restrict to older Cython</changelog>
  <changelog author="tserong@suse.com" date="1694433600">- Update to 16.2.14-66-g7aa6ce9419f:
  + (bsc#1207765) rgw/rados: check_quota() uses real bucket owner
  + (bsc#1212559) pacific: os/bluestore: cumulative bluefs backport
    This notably includes:
  * os/bluestore: BlueFS fine grain locking
  * os/bluestore/bluefs: Fix improper vselector tracking in _flush_special()
  * os/bluestore: enable 4K allocation unit for BlueFS
  * os/bluestore/bluefs: Fix sync compactionA
  + (bsc#1213217) ceph.spec.in: Require fmt-devel &lt; 10
  + ceph.spec.in: enable build on riscv64 for openSUSE Factory
  + ceph.spec.in: Require Cython &gt;= 0.29 but &lt; 3
  + cephadm: update to the latest container images:
  * registry.suse.com/ses/7.1/ceph/prometheus-server:2.37.6
  * registry.suse.com/ses/7.1/ceph/prometheus-node-exporter:1.5.0
  * registry.suse.com/ses/7.1/ceph/grafana:8.5.22
  * registry.suse.com/ses/7.1/ceph/haproxy:2.0.31
- Drop ceph-test.changes (no longer necessary since using _multibuild)</changelog>
  <changelog author="dimstar@opensuse.org" date="1702987200">- Add ceph-cmake-3.28.patch: Fix build with cmake 3.28 and no git
  command found (https://github.com/ceph/ceph/pull/54963,
  boo#1218111).</changelog>
</package>
<package pkgid="8caa712b2b27f79ad997d577618e45113bcaba2f0b4794b09dc91c49ab852996449a5e9df9d79b31108875f21c7fd0e4b944414579a34cb75b21961a2f395f2b" name="librdmacm1-debuginfo" arch="aarch64">
  <version epoch="0" ver="49.1" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
</package>
<package pkgid="ea97a875c9f8acfddf520ae7a13888f2cd872b4655ed2fb5ce9c570eea9d951d0c397690b942b29fe95e3d43ad2d120f0021585937b12702358bbad813c8a172" name="libreadline8-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2" rel="slfo.1.1_1.4"/>
  <changelog author="werner@suse.de" date="1610366400">- Update to final readline-8.1
  which is mainly rc3
- Remove obsolate patches and the signatures
  * readline80-001
  * readline80-001.sig
  * readline80-002
  * readline80-002.sig
  * readline80-003
  * readline80-003.sig
  * readline80-004
  * readline80-004.sig
- Port patches
  * readline-5.2-conf.patch
  * readline-6.2-metamode.patch
  * readline-6.3-destdir.patch
  * readline-6.3-input.dif
  * readline-6.3-rltrace.patch
  * readline-7.0-screen.patch
- Port and rename patch readline-8.0.dif which is now readline-8.1.dif</changelog>
  <changelog author="werner@suse.de" date="1620216000">- Add official patch readline81-001 and its signature
  * The code to check readline versions in an inputrc file had the sense of the
    comparisons reversed.</changelog>
  <changelog author="werner@suse.de" date="1642161600">- Add official patch readline81-002 and its signature
  * There are some characters (e.g., cyrillic) that can't be displayed using
    certain single-byte encodings (e.g., cp1251) because the negative signed
    int is interpreted as EOF and not displayed.</changelog>
  <changelog author="werner@suse.de" date="1651147200">- Update to readline-8.2-beta
  a. There is now an HS_HISTORY_VERSION containing the version number of the
    history library for applications to use.
  b. History expansion better understands multiple history expansions that may
    contain strings that would ordinarily inhibit history expansion (e.g.,
    `abc!$!$').
  c. There is a new framework for readline timeouts, including new public
    functions to set timeouts and query how much time is remaining before a
    timeout hits, and a hook function that can trigger when readline times
    out. There is a new state value to indicate a timeout.
  d. Automatically bind termcap key sequences for page-up and page-down to
    history-search-backward and history-search-forward, respectively.
  e. There is a new `fetch-history' bindable command that retrieves the history
    entry corresponding to its numeric argument. Negative arguments count back
    from the end of the history.
  f. `vi-undo' is now a bindable command.
  g. There is a new option: `enable-active-region'. This separates control of
    the active region and bracketed-paste. It has the same default value as
    bracketed-paste, and enabling bracketed paste enables the active region.
    Users can now turn off the active region while leaving bracketed paste
    enabled.
  h. rl_completer_word_break_characters is now `const char *' like
    rl_basic_word_break_characters.
  i. Readline looks in $LS_COLORS for a custom filename extension
    (*.readline-colored-completion-prefix) and uses that as the default color
    for the common prefix displayed when `colored-completion-prefix' is set.
  j. Two new bindable string variables: active-region-start-color and
    active-region-end-color. The first sets the color used to display the
    active region; the second turns it off. If set, these are used in place
    of terminal standout mode.
  k. New readline state (RL_STATE_EOF) and application-visible variable
    (rl_eof_found) to allow applications to detect when readline reads EOF
    before calling the deprep-terminal hook.
  l. There is a new configuration option: --with-shared-termcap-library, which
    forces linking the shared readline library with the shared termcap (or
    curses/ncurses/termlib) library so applications don't have to do it.
- Remove upstream patches and their signatures now obsolete
  * readline81-001
  * readline81-001.sig
  * readline81-002
  * readline81-002.sig
- Port patches
  * readline-5.2-conf.patch
  * readline-6.2-metamode.patch
  * readline-6.2-xmalloc.dif
  * readline-6.3-input.dif
  * readline-6.3-rltrace.patch
  * readline-7.0-screen.patch
- Port patch readline-8.1.dif and rename it to readline-8.2.dif</changelog>
  <changelog author="werner@suse.de" date="1655899200">- use https:// for source urls
- Update to readline-8.2-rc1</changelog>
  <changelog author="werner@suse.de" date="1658923200">- Update to readline-8.2-rc2</changelog>
  <changelog author="werner@suse.de" date="1663070400">- Update to readline-8.2-rc4
  m. Readline now checks for changes to locale settings (LC_ALL/LC_CTYPE/LANG)
    each time it is called, and modifies the appropriate locale-specific display
    and key binding variables when the locale changes.
- Port patch readline-8.2.dif</changelog>
  <changelog author="werner@suse.de" date="1664280000">- Update to final readline-8.2
  r. When replacing a history entry, make sure the existing entry has a non-NULL
    timestamp before copying it; it may have been added by the application, not
    the history library.</changelog>
  <changelog author="werner@suse.de" date="1665057600">- Add patch readline82-001 and its signing readline82-001
  * Starting a readline application with an invalid locale
    specification for LC_ALL/LANG/LC_CTYPE can cause it crash on
    the first call to readline.</changelog>
  <changelog author="werner@suse.de" date="1666353600">- Extend version linker map file to detect usage of new symbols (boo#1204336)</changelog>
</package>
<package pkgid="d0afbcd967736b22c1f49d60eede285d6642c003574528dcccfc68328efc68307d2c6bae7bd37506487bb9cfb093c3d59395ce678afedbe3b8a34f732ab2528f" name="libref_array1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.1.5" rel="slfo.1.1_1.2"/>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Update to 0.6.1:
  * No upstream changelog
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560859200">- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1687262400">- Update to 0.6.2:
  * Minor maintenance update:
    INI: Silent ini_argument match failures
    INI: Fix detection of error message
- Remove patches fixed upstream
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
  * INI-Remove-definiton-of-TRACE_LEVEL.patch
- Use github sources</changelog>
</package>
<package pkgid="485c3b8d4ec6f17a362e4b7e88a8162e00b3afebcbc2247070e0c566561b1107718a163900cf7ba8895ff48fde087e6ad7e732ec1a2aa3c8007b2c774f2f8382" name="librpmbuild9-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="slfo.1.1_2.1"/>
  <changelog author="mls@suse.de" date="1669982400">- update to rpm-4.18.0
  * documentation updates
  * fix query arguments containing ^ not working
  * add downgrade (--oldpackage) support to --freshe
  * add --path query for support for stateless file information
  * add --shell option for interactive macro shell to rpmspec
  * add --justdb counterpart --nodb option and matching API flag
  * fix intermediate symlinks not verified (CVE-2021-35939)
  * fix unowned directories created unsafely (bsc#1157880)
    (CVE-2021-35938)
  * fix %posttrans argument on upgrade
  * fix package build tree not getting removed on successful build
  * add new %conf spec section for build configuration
  * add %bcond macro as a nicer way of defining build conditionals
  * add new rpmuncompress cli tool
  * deprecate implicit "%patch number zero" syntax
- refreshed patches:
  * brp-compress-no-img.patch
  * brp.diff
  * brpcompress.diff
  * db_conversion.diff
  * findsupplements.diff
  * headeradddb.diff
  * nextiteratorheaderblob.diff
  * posttrans.diff
  * rpmqpack.diff
  * rpmrc.diff
  * selinux_transactional_update.patch
- removed patches:
  * dbrointerruptable.diff
  * leave-malloc-check-set.diff</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- add x86_64-microarchitectures.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="fvogt@suse.com" date="1678363200">- add cpuid_lzcnt.patch</changelog>
  <changelog author="mliska@suse.cz" date="1678968000">- Add upstream patch libmagic-exceptions.patch that speeds up libreoffice
  package build.</changelog>
  <changelog author="jsrain@suse.com" date="1685448000">- add _multibuild for multiple .spec-files</changelog>
  <changelog author="dmueller@suse.com" date="1691496000">- add remove-awk-dependency.patch to be able to drop awk dependency
  from containers</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1724328000">- Add patches to enable reproducible builds by default (bsc#1148824). For
  upstream versions see:
  https://github.com/rpm-software-management/rpm/pull/2880
  0001-Add-option-to-set-mtime-of-files-in-rpms.patch
  0002-log-build-time-if-it-is-set-from-SOURCE_DATE_EPOCH.patch
  0003-Error-out-on-a-missing-changelog-date.patch</changelog>
  <changelog author="mls@suse.de" date="1752667200">- fix --runposttrans not working correctly with the --root
  option [bnc#1216091]
  * updated patch: posttrans.diff
  * added "rpm_fixed_runposttrans" provides for libzypp
- print scriptlet messages in --runposttrans
  * needed to fix leaking tmp files [bsc#1218459]
  * updated patch: posttrans.diff
- fix memory leak in str2locale [bsc#1241052]
  * updated patch: localetag.diff</changelog>
</package>
<package pkgid="c6d47293912f3263a9500435e24a69f1d9e923dd436b50c57eed07ad4518277251cf9d6c75390d13590dc63aa09f48d5a88e1ac1a9a3e7a1cab3bcc7d91616d5" name="librscg1_0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2022.10.16" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="0385ba9e8f854a67670757cab8b1b8dc50f1c68525343f04742b8bce38ab70da22429aa3432c32a3488c0f2bbd8dac2b5a7fe80c04584b91d29983728a550c59" name="librsvg-2-2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.56.3" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 2.55.92:
  + Update to cssparser 0.29.6; this adds support for hwb() color
    syntax, from the CSS Color Module Level 4 spec
    (https://drafts.csswg.org/css-color-4/#changes). Note that
    values inside hwb() are *not* comma-separated, just whitespace.
  + Fix panic when a requested font-size is too big.
  + Validate all clipPath and mask transforms.
  + Add a performance tracking framework. This is part of an
    Outreachy internship.
  + Slight improvements in the size of generated code and memory
    consumption.
  + The Rust crate is now called "rsvg", for consistency with other
    crates that don't usually have a "lib" prefix.
  + The Rust API documentation is now available at
    https://gnome.pages.gitlab.gnome.org/librsvg/doc/rsvg/index.html
- Add minimum harddisk size of 9G for x86_64 to constraints. The
  cargo test uses a lot of disk space.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Pass --skip filter_morphology_from_reference_page_svg to
  cargo_test, filter out new test that fails when building against
  cairo-1.17.8.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054401">- Update to version 2.56.0:
  + Fix crash when XML files get recursively included through
    XInclude.
  + When running the suite of reference tests, you can now use the
    TESTS_OUTPUT_DIR environment variable to specify where results
    for failures get written. See tests/README.md for details.
  + The minimum supported Rust version (MSRV) is 1.64.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681560000">- Use __rustflags macro and drop no longer needed rustflags global.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Update licence tag, there is no longer any Apache licensed code.</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for the various architectures.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685534400">- Update to version 2.56.1:
  + The minimum supported Rust version (MSRV) is 1.65.
    Unfortunately the assert_cmd crate, used in the test suite,
    bumped its MSRV and is forcing us to do the same.
  + Shrink the shared library by telling the linker to omit unused
    code.
  + Updates to dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1686744000">- Use %__default_rustflags instead of the deprecated %__rustflags
  macro. Requires at least cargo-packaging 1.2.0+2 (boo#1212333).</changelog>
  <changelog author="dimstar@opensuse.org" date="1687348800">- Use %build_rustflags instead of the deprecated
  %__default_rustflags macro. Requires at least cargo-packaging
  1.2.0+3 (boo#1212333).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689940800">- Update to version 2.56.3:
  + This is a security release for bug glgo#GNOME/librsvg#996.
  - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has
    special characters.
  - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being
    referenced from use elements.</changelog>
</package>
<package pkgid="843b1f3009c39810597326a6bbf0115b0970e4ba4ffec83dc850cfe56fe2940ed93f020d3f6266115dc216b8f17e8f9921fa215f1afbc960b48d455aa902dd77" name="librsvg-debugsource" arch="aarch64">
  <version epoch="0" ver="2.56.3" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 2.55.92:
  + Update to cssparser 0.29.6; this adds support for hwb() color
    syntax, from the CSS Color Module Level 4 spec
    (https://drafts.csswg.org/css-color-4/#changes). Note that
    values inside hwb() are *not* comma-separated, just whitespace.
  + Fix panic when a requested font-size is too big.
  + Validate all clipPath and mask transforms.
  + Add a performance tracking framework. This is part of an
    Outreachy internship.
  + Slight improvements in the size of generated code and memory
    consumption.
  + The Rust crate is now called "rsvg", for consistency with other
    crates that don't usually have a "lib" prefix.
  + The Rust API documentation is now available at
    https://gnome.pages.gitlab.gnome.org/librsvg/doc/rsvg/index.html
- Add minimum harddisk size of 9G for x86_64 to constraints. The
  cargo test uses a lot of disk space.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Pass --skip filter_morphology_from_reference_page_svg to
  cargo_test, filter out new test that fails when building against
  cairo-1.17.8.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054401">- Update to version 2.56.0:
  + Fix crash when XML files get recursively included through
    XInclude.
  + When running the suite of reference tests, you can now use the
    TESTS_OUTPUT_DIR environment variable to specify where results
    for failures get written. See tests/README.md for details.
  + The minimum supported Rust version (MSRV) is 1.64.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681560000">- Use __rustflags macro and drop no longer needed rustflags global.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Update licence tag, there is no longer any Apache licensed code.</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for the various architectures.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685534400">- Update to version 2.56.1:
  + The minimum supported Rust version (MSRV) is 1.65.
    Unfortunately the assert_cmd crate, used in the test suite,
    bumped its MSRV and is forcing us to do the same.
  + Shrink the shared library by telling the linker to omit unused
    code.
  + Updates to dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1686744000">- Use %__default_rustflags instead of the deprecated %__rustflags
  macro. Requires at least cargo-packaging 1.2.0+2 (boo#1212333).</changelog>
  <changelog author="dimstar@opensuse.org" date="1687348800">- Use %build_rustflags instead of the deprecated
  %__default_rustflags macro. Requires at least cargo-packaging
  1.2.0+3 (boo#1212333).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689940800">- Update to version 2.56.3:
  + This is a security release for bug glgo#GNOME/librsvg#996.
  - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has
    special characters.
  - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being
    referenced from use elements.</changelog>
</package>
<package pkgid="b5990bae722d06126dc2373946acbbf4ad1e451fac75cd8823101a28707141f28b748137e61ccb0e2b3167af282b4dfae06ad3227606ef17573d905f2a3732f8" name="libsasl2-3-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.28" rel="slfo.1.1_1.2"/>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="1b92645ce590515172032269eadc8a4e0289ec4be3bb25e64a743a9e00b6379f586217208e81cc9feec76c7b0d676230c6fc84f9bfedbfae51dcb0c02c1b8289" name="libscg1_0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2022.10.16" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="e3923a5f915f1fcfd2455ae67dd4c44e37d82cb02400ba04a9a423324a9592fe9bf80766abb4dce7834cfd6b91acd04fa8536307cacc7ad39fcc54a216e9b39f" name="libscgcmd1_0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2022.10.16" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="4e4174973fef67e9351ad39d945e95a11e1e8d19bfae1d6737bdecdda915e68dcd00183cde8884e853e91ba2363033c54e723f02e848e449956bae3c3a2763d2" name="libschily2_0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2022.10.16" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="0f131fd54939ea04ff686a392b516ecd9ec694ce9f01e803a0b29d2078f984f2ab0f4c26f8d6960c5d1d1f5d151bd7204d7f9e9e4bce674f283791cd093955e7" name="libseccomp-debugsource" arch="aarch64">
  <version epoch="0" ver="2.5.4" rel="slfo.1.1_1.4"/>
  <changelog author="dmueller@suse.com" date="1605960000">- update to 2.5.1:
  * Fix a bug where seccomp_load() could only be called once
  * Change the notification fd handling to only request a notification fd if
  * the filter has a _NOTIFY action
  * Add documentation about SCMP_ACT_NOTIFY to the seccomp_add_rule(3) manpage
  * Clarify the maintainers' GPG keys
- remove testsuite-riscv64-missing-syscalls.patch</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2.5.2
  * Update the syscall table for Linux v5.14-rc7
  * Add a function, get_notify_fd(), to the Python bindings to
    get the nofication file descriptor.
  * Consolidate multiplexed syscall handling for all
    architectures into one location.
  * Add multiplexed syscall support to PPC and MIPS
  * The meaning of SECCOMP_IOCTL_NOTIF_ID_VALID changed within
    the kernel. libseccomp's fd notification logic was modified
    to support the kernel's previous and new usage of
    SECCOMP_IOCTL_NOTIF_ID_VALID.</changelog>
  <changelog author="schwab@suse.de" date="1631534400">- Skip 11-basic-basic_errors test on qemu linux-user emulation</changelog>
  <changelog author="jengelh@inai.de" date="1636286400">- Update to release 2.5.3
  * Update the syscall table for Linux v5.15
  * Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2
  * Document that seccomp_rule_add() may return -EACCES</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- reenable python bindings at least for the distro default python3
  package:
  - adds make-python-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1642420800">- buildrequire python-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1650542400">- Update to release 2.5.4
  * Update the syscall table for Linux v5.17.
  * Fix minor issues with binary tree testing and with empty
    binary trees.
  * Minor documentation improvements including retiring the
    mailing list.</changelog>
  <changelog author="jengelh@inai.de" date="1651320000">- Deactive python3 by default, it's just not a good idea for ring0.</changelog>
  <changelog author="rfrohl@suse.com" date="1656504000">- Use multibuild to get python3 support back</changelog>
  <changelog author="mrueckert@suse.de" date="1656676800">- fix build of python3 bindings so that the debug* package names do
  not overlay with the main package</changelog>
</package>
<package pkgid="ec8814a29f1181019a690c3621773fd9f96d47e56189113693d9139bfe1afd80f881bbda063d63de329771e57afa1de0f3e47f9819c325a2ddcad04ae4e19a8c" name="libseccomp2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.5.4" rel="slfo.1.1_1.4"/>
  <changelog author="dmueller@suse.com" date="1605960000">- update to 2.5.1:
  * Fix a bug where seccomp_load() could only be called once
  * Change the notification fd handling to only request a notification fd if
  * the filter has a _NOTIFY action
  * Add documentation about SCMP_ACT_NOTIFY to the seccomp_add_rule(3) manpage
  * Clarify the maintainers' GPG keys
- remove testsuite-riscv64-missing-syscalls.patch</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2.5.2
  * Update the syscall table for Linux v5.14-rc7
  * Add a function, get_notify_fd(), to the Python bindings to
    get the nofication file descriptor.
  * Consolidate multiplexed syscall handling for all
    architectures into one location.
  * Add multiplexed syscall support to PPC and MIPS
  * The meaning of SECCOMP_IOCTL_NOTIF_ID_VALID changed within
    the kernel. libseccomp's fd notification logic was modified
    to support the kernel's previous and new usage of
    SECCOMP_IOCTL_NOTIF_ID_VALID.</changelog>
  <changelog author="schwab@suse.de" date="1631534400">- Skip 11-basic-basic_errors test on qemu linux-user emulation</changelog>
  <changelog author="jengelh@inai.de" date="1636286400">- Update to release 2.5.3
  * Update the syscall table for Linux v5.15
  * Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2
  * Document that seccomp_rule_add() may return -EACCES</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- reenable python bindings at least for the distro default python3
  package:
  - adds make-python-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1642420800">- buildrequire python-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1650542400">- Update to release 2.5.4
  * Update the syscall table for Linux v5.17.
  * Fix minor issues with binary tree testing and with empty
    binary trees.
  * Minor documentation improvements including retiring the
    mailing list.</changelog>
  <changelog author="jengelh@inai.de" date="1651320000">- Deactive python3 by default, it's just not a good idea for ring0.</changelog>
  <changelog author="rfrohl@suse.com" date="1656504000">- Use multibuild to get python3 support back</changelog>
  <changelog author="mrueckert@suse.de" date="1656676800">- fix build of python3 bindings so that the debug* package names do
  not overlay with the main package</changelog>
</package>
<package pkgid="f44613b4b52855244399761cf33ad5871039a6ce28dd3c819361a5bd8e904992da7beb42bcfd5fa92efc299b89d3b6732eb606fbc8037d9e2680a6c6d2216da6" name="libselinux-bindings-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * Ignore the stem when looking up all matches in file context
  * Save digest of all partial matches for directory
  * Use Python distutils to install SELinux python bindings
  * ensure that digest_len is not zero
  * fix string conversion of unknown perms
  * mark all exported function "extern"</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated
  * Refreshed python3.8-compat.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2:
  * Use mmap()'ed kernel status page instead of netlink by default.
    See "KERNEL STATUS PAGE" section in avc_init(3) for more details.
  * New log callback levels for enforcing and policy load notices -
    SELINUX_POLICYLOAD, SELINUX_SETENFORCE
  * Changed userspace AVC setenforce and policy load messages to audit
    format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Switch to pcre2:
  + Replace pcre-devel BuildRequires with pkgconfig(libpcre2-8)
  + Pass USE_PCRE2=y to make.</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Refreshed python3.8-compat.patch
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine now.</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Add python-wheel build dependency to build correctly with latest
  python-pip version.</changelog>
</package>
<package pkgid="de77983fa12467c00992b2c3a52a421ca29673c9ff11712533814c065eea8a9d72ecaf94eb100580578744880755d2bc59ae5d3ea30433efc71d84c5837f9576" name="libselinux-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.3"/>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Add missing libselinux-utils Provides to selinux-tools so that
  %selinux_requires works</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1644926400">- Add Requires for exact libselinux1 version for selinux-tools
- Simplyfied check for correct boot paramaters in selinux-ready
  (bsc#1195361)</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1653998400">- Added restorecon_pin_file.patch. Fixes issus when running
  fixfiles/restorecon</changelog>
  <changelog author="jsegitz@suse.com" date="1657195200">- Fixed initrd check in selinux-ready (bnc#1186127)</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine now.</changelog>
  <changelog author="jsegitz@suse.com" date="1679659200">- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="f46c84d215f2bd62303a97e3761f2e77e0c6f3e69dbc1c85bbb37b087279638e0c9d38c67628d3464c79287d727021430e74eb8eed7f11070d2e78ba73e18a99" name="libselinux1-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.3"/>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Add missing libselinux-utils Provides to selinux-tools so that
  %selinux_requires works</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1644926400">- Add Requires for exact libselinux1 version for selinux-tools
- Simplyfied check for correct boot paramaters in selinux-ready
  (bsc#1195361)</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1653998400">- Added restorecon_pin_file.patch. Fixes issus when running
  fixfiles/restorecon</changelog>
  <changelog author="jsegitz@suse.com" date="1657195200">- Fixed initrd check in selinux-ready (bnc#1186127)</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine now.</changelog>
  <changelog author="jsegitz@suse.com" date="1679659200">- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="5575b1eca1acc2fdc06d2315219470b6c67155705a36c9dd5e81da69faf0180cd0b60af70182978003c43bcfefdc2923c2245ca8479797d99925abb9fe95798a" name="libsemanage-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.3"/>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * Improved manpage
  * fsync final files before rename</changelog>
  <changelog author="jsegitz@suse.com" date="1594814400">- Remove libsemanage-update-map-file.patch to prevent checkers from declining
  the submission. Keeping the snippet in the spec file in case we try to
  enable LTO again</changelog>
  <changelog author="kukuk@suse.com" date="1596024000">- Add /var/lib/selinux</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * dropped old and deprecated symbols and functions
    libsemanage version was bumped to libsemanage.so.2
  * libsemanage tries to sync data to prevent empty files in SELinux module
    store</changelog>
  <changelog author="jsegitz@suse.com" date="1615982400">- Move configuration file to separate libsemanage-conf package to allow
  for parallel installation in future versions</changelog>
  <changelog author="jsegitz@suse.com" date="1616068800">- Link to correct so version
- Minor spec file cleanups</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * Fixed use-after-free in parse_module_store()
  * Fixed use_after_free in semanage_direct_write_langext()</changelog>
  <changelog author="jsegitz@suse.com" date="1644494400">- Drop Buildrequires for libustr-devel, not needed anymore</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * Optionally rebuild policy when modules are changed externally
  * Fix USE_AFTER_FREE (CWE-672) in semanage_direct_get_module_info()
  * Allow spaces in user/group names</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)</changelog>
</package>
<package pkgid="aeaf69512d63f3f1692a2bc7730da7964bc74168f76e9f537db68af246253383e8b163bedfdbe7def5b65a375c0a6ac35068dda010e86f515c81887d96e6f244" name="libsemanage2-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.3"/>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * Improved manpage
  * fsync final files before rename</changelog>
  <changelog author="jsegitz@suse.com" date="1594814400">- Remove libsemanage-update-map-file.patch to prevent checkers from declining
  the submission. Keeping the snippet in the spec file in case we try to
  enable LTO again</changelog>
  <changelog author="kukuk@suse.com" date="1596024000">- Add /var/lib/selinux</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * dropped old and deprecated symbols and functions
    libsemanage version was bumped to libsemanage.so.2
  * libsemanage tries to sync data to prevent empty files in SELinux module
    store</changelog>
  <changelog author="jsegitz@suse.com" date="1615982400">- Move configuration file to separate libsemanage-conf package to allow
  for parallel installation in future versions</changelog>
  <changelog author="jsegitz@suse.com" date="1616068800">- Link to correct so version
- Minor spec file cleanups</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * Fixed use-after-free in parse_module_store()
  * Fixed use_after_free in semanage_direct_write_langext()</changelog>
  <changelog author="jsegitz@suse.com" date="1644494400">- Drop Buildrequires for libustr-devel, not needed anymore</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * Optionally rebuild policy when modules are changed externally
  * Fix USE_AFTER_FREE (CWE-672) in semanage_direct_get_module_info()
  * Allow spaces in user/group names</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)</changelog>
</package>
<package pkgid="8d85b789f954b38fb6286c03db1ce1ebb0b9a33b0e30d083e9d5b571eeb83f150615a4378e79acdb60b3a76190c738475934cb57c97f549a04a04355da81dd2b" name="libsensors4-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.6.0" rel="slfo.1.1_1.2"/>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1551614400">- Join %service_* lines to generate less scriptlet boilerplate.</changelog>
  <changelog author="smar@smar.fi" date="1575374400">- Removed upstreamed patch lm_sensors-3.4.0-sensors-detect-ppc64le.patch
- Update to version 3.6.0:
  + configs: Added a number of new configuration files
  + fancontrol: AVERAGE env variable can be used to set the number of previous readings to average
  + Makefile: The MACHINE variable has been renamed to ARCH
  + sensord: Add an option -1/--oneline to print chip and adapter on the same line
  + sensors: Fixed a stray comma bug in the JSON output
  * Fixed Fahrenheit conversion with raw and JSON output
  * Scale voltage and current values in the default output format
  + sensors-detect: Add detection of AMD Family 17h, models 30h, 70h
  * Add detection of some AMD Family 15h models
  * Add detection of AMD Family 16h model 30h power sensors
  * Add detection of Hygon Family 18h thermal sensors
  * Add detection of Nuvoton NCT6797D
  * Add detection of Nuvoton NCT6798D
  * Add detection of Nuvoton NCT6112D/NCT6114D/NCT6116D
  * Fix printing CPU info on non-x86 arches
  * Fix printing lm_sensors version
  * Mark Fintek F75387SG/RG as supported by the f75375s driver</changelog>
  <changelog author="jdelvare@suse.com" date="1589284800">- lm_sensors-3.6.0-sensors-detect-fix-driver-for-w83677hgi.patch:
  Point owners of Nuvoton W83677HG-I and compatible chipsets to
  the nct6775 driver, as support was just removed from the
  w83627ehf driver (bsc#1169316).</changelog>
  <changelog author="jdelvare@suse.com" date="1613044800">- pwmconfig-handle-fan-input-error.patch: pwmconfig: Deal
  gracefully with unreadable fan inputs (boo#1181890).
- pwmconfig-raise-fan-threshold.patch: pwmconfig: Further raise the
  fan threshold (boo#1181890).</changelog>
  <changelog author="jdelvare@suse.com" date="1619438400">- change-pidfile-path-from-var-run-to-run.patch: Change PIDFile
  path from /var/run to /run (bsc#1185183).
- var-run-deprecated.patch: /var/run is deprecated (bsc#1185183).</changelog>
  <changelog author="jengelh@inai.de" date="1629460800">- Trim ExcludeArch, package build is successful.</changelog>
  <changelog author="jsegitz@suse.com" date="1637064000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_fancontrol.service.patch
  * harden_lm_sensors.service.patch
  * harden_sensord.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1638187200">- Remove ProtectKernelTunables from harden_lm_sensors.service.patch,
  breaks service (boo#1193149)</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Also remove ProtectKernelTunables from harden_fancontrol.service.patch,
  breaks service (boo#1193149)</changelog>
</package>
<package pkgid="10b321e867f6f659806520e89cc4cb927b7256b32b6a1cd676c086d34c581bc454589440593f5a093a632eb2358f1ade756911e72f6e1c3d618282383944165a" name="libsepol-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.3"/>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * cil: Allow validatetrans rules to be resolved
  * cil: Report disabling an optional block only at high verbose levels
  * cil: do not dereference perm_value_to_cil when it has not been allocated
  * cil: fix mlsconstrain segfault
  * Further improve binary policy optimization
  * Make an unknown permission an error in CIL
  * Remove cil_mem_error_handler() function pointer
  * Use LIBSEPOL_3.0 and fix sepol_policydb_optimize symbol mapping
  * Add a function to optimize kernel policy
  * Add ebitmap_for_each_set_bit macro
  Dropped fnocommon.patch as it's included upstream</changelog>
  <changelog author="mliska@suse.cz" date="1587988800">- Enable -fcommon in order to fix boo#1160874.</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * Add support for new polcap genfs_seclabel_symlinks
  * Initialize the multiple_decls field of the cil db
  * Return error when identifier declared as both type and attribute
  * Write CIL default MLS rules on separate lines
  * Sort portcon rules consistently
  * Remove leftovers of cil_mem_error_handler
  * Drop remove_cil_mem_error_handler.patch, is included</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- install to /usr (boo#1029961)</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * more space-efficient form of storing filename transitions in the binary
    policy and reduced the size of the binary policy
  * dropped old and deprecated symbols and functions. Version was bumped to
    libsepol.so.2</changelog>
  <changelog author="jsegitz@suse.com" date="1625486400">- Fix use-after-free in __cil_verify_classperms (CVE-2021-36085, 1187965).
  Added CVE-2021-36085.patch
- Fix use-after-free in cil_reset_classpermission (CVE-2021-36086, 1187964).
  Added CVE-2021-36086.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1626868800">- Fix heap-based buffer over-read in ebitmap_match_any (CVE-2021-36087, 1187928.
  Added CVE-2021-36087.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
</package>
<package pkgid="d7c4eece5d47a9d9902e8b9f76f8c36cf6c0dc30b2f8c0742474b0c1ff50552ad12d3e09a8a44ca4f04d7df1dea657ddde4f2836e98a414d77c49d2717c8b0ed" name="libsepol2-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.3"/>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * cil: Allow validatetrans rules to be resolved
  * cil: Report disabling an optional block only at high verbose levels
  * cil: do not dereference perm_value_to_cil when it has not been allocated
  * cil: fix mlsconstrain segfault
  * Further improve binary policy optimization
  * Make an unknown permission an error in CIL
  * Remove cil_mem_error_handler() function pointer
  * Use LIBSEPOL_3.0 and fix sepol_policydb_optimize symbol mapping
  * Add a function to optimize kernel policy
  * Add ebitmap_for_each_set_bit macro
  Dropped fnocommon.patch as it's included upstream</changelog>
  <changelog author="mliska@suse.cz" date="1587988800">- Enable -fcommon in order to fix boo#1160874.</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * Add support for new polcap genfs_seclabel_symlinks
  * Initialize the multiple_decls field of the cil db
  * Return error when identifier declared as both type and attribute
  * Write CIL default MLS rules on separate lines
  * Sort portcon rules consistently
  * Remove leftovers of cil_mem_error_handler
  * Drop remove_cil_mem_error_handler.patch, is included</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- install to /usr (boo#1029961)</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * more space-efficient form of storing filename transitions in the binary
    policy and reduced the size of the binary policy
  * dropped old and deprecated symbols and functions. Version was bumped to
    libsepol.so.2</changelog>
  <changelog author="jsegitz@suse.com" date="1625486400">- Fix use-after-free in __cil_verify_classperms (CVE-2021-36085, 1187965).
  Added CVE-2021-36085.patch
- Fix use-after-free in cil_reset_classpermission (CVE-2021-36086, 1187964).
  Added CVE-2021-36086.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1626868800">- Fix heap-based buffer over-read in ebitmap_match_any (CVE-2021-36087, 1187928.
  Added CVE-2021-36087.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * Dropped CVE-2021-36085.patch, CVE-2021-36086.patch, CVE-2021-36087.patch
    are all included
  * Lot of smaller fixes identified by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * Add 'ioctl_skip_cloexec' policy capability
  * Add sepol_av_perm_to_string
  * Add policy utilities
  * Support IPv4/IPv6 address embedding
  * Hardened/added many validations
  * Add support for file types in writing out policy.conf
  * Allow optional file type in genfscon rules</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)</changelog>
</package>
<package pkgid="ebef22864d18505f45a217024c65c957abe56d35d22ee3cbfa37e2361ee6a641af8f057b092f625efacde7f49f733c713345468caf5d92a0f39ee7e08e5ebddb" name="libsgutils2-1_48-2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.48~20221101+1.142dace" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option; sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
</package>
<package pkgid="2df7a884e215d78cad4e1b5c734a77104381a90112b97dec5391d0d84b420c2c8f0e700b829f8cbdfdf2687ad6eb1b0ac1f44c632a955aea525031e225573ddf" name="libsha1detectcoll1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.3" rel="slfo.1.1_1.2"/>
  <changelog author="astieger@suse.com" date="1488283200">- CLI to check for SHA-1 collisions bsc#1026646 - CVE-2005-4900
- initial package (cli only)</changelog>
  <changelog author="astieger@suse.com" date="1491825600">- update to 1.0.3:
  * SIMD code removed
  * performance improvements
- package library
- conflicts with libmd-devel</changelog>
  <changelog author="astieger@suse.com" date="1495454400">- better printing of errors, and allow hashing stdin
  add sha1collisiondetection-1.0.3-io-fixes.patch</changelog>
  <changelog author="tiwai@suse.de" date="1501848000">- Fix include header path to /usr/include/sha1dc/sha1.h as supposed
  by upstream installation
- Remove conflicts with libmd-devel, as we changed the header path</changelog>
  <changelog author="ro@suse.de" date="1517400000">- add sha1collisiondetection-endian_detection.patch
  fix detection of endianness at compile time</changelog>
  <changelog author="ro@suse.de" date="1517400001">- cleaner solution for the endian detection issue:
  include the proper header file</changelog>
</package>
<package pkgid="72ae8750c2587b342d873d4aeae2626035b2638f4a1b67dc4e009cad0efacc6c222701f4415ba49ef782927d9239c3941d98a0bf83c347367747837a66d384db" name="libsigc++2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.12.0" rel="slfo.1.1_1.3"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543579200">- Update to version 2.10.1:
  + signal_impl::clear(): Don't clear the slot list during signal
    emission, to prevent a segfault. And add a test for this.
  + slot_base::set_parent(): Create a dummy slot_rep if necessary.
  + Avoid compiler warnings from function pointer conversions.
  + Build:
  - Make --disable-benchmark work.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Add MSVC_NMake/README.txt for Visual Studio builds.
  + Documentation:
  - signal_base: Warn against deletion during emission.
  - Update links in README, configure.ac, libsigcplusplus.doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585137600">- Update to version 2.10.3:
  + Add Meson build, alongside the existing Autotools build.
  + Improve MSVC builds on Windows.
  + meson.build: Check if .git is a directory or file.
  + docs/reference/meson.build: Check if perl is found.
  + README: Describe building with Meson and Autotools.
  + Tests: Make test_track_obj.cc compile with clang++.</changelog>
  <changelog author="dimstar@opensuse.org" date="1601985600">- Update to version 2.10.4:
  + Build:
  - Meson build: Set default value of the 'warnings' option to
    'min'
  - NMake Makefiles: Several improvements
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Updated documentation.
- Switch to meson build system:
  + Add meson, and remove m4 BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install macros.
  + No longer ship the htmldoc as part of the devel package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1606305600">- Update to version 2.10.6:
  + Build: Meson build: Fix versioning on macOS.
  + Documentation:
  - sigc++/sigc++.h: Describe how to use libsigc++ with Meson.
  - Update links to the web page, now at
    libsigcplusplus.github.io/libsigcplusplus.</changelog>
  <changelog author="dimstar@opensuse.org" date="1621598400">- Update to version 2.10.7:
  + Meson build:
  - Make it possible to use sigc++ as a subproject.
  - Fix dependency on files generated from .h.m4 files.
  - No implicit_include_directories.
  - Make quiet installations possible.
  - Fix build as subproject without building documentation.
  + Documentation fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.10.8:
  + Build:
  - Meson build: Perl is not required by new versions of
    mm-common
  - NMake Makefiles: Support building with VS2022
  + Documentation: Upgrade the manual from DocBook 4.1 to DocBook
    5.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1677499200">- Update to version 2.12.0:
  + Add track_object(), deprecate track_obj().
  + Examples, tests:
  - examples/member_method: Make on_print() non-virtual.
  - test_limit_reference.cc: Don't use auto where a slot is
    required.
  + Build:
  - Meson:
    . Avoid configuration warnings.
    . Detect if we build from a git subtree.
    . Simplify lookup of python command.
    . Add build_tests option.
  - Meson, MSVC: Compensate for the lack of
    msvc_recommended_pragmas.h.
  - Fix build with -Dbuild-deprecated-api=false.</changelog>
</package>
<package pkgid="81ffe9cf1663c2fcb54d291e52f23d5692a9359f7a26d54be60bb7463f863b6c1108535cc1407b47fb104cf87cc558c7a6e14b2482b080ca1efe0abd36a33340" name="libsigc-2_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.12.0" rel="slfo.1.1_1.3"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543579200">- Update to version 2.10.1:
  + signal_impl::clear(): Don't clear the slot list during signal
    emission, to prevent a segfault. And add a test for this.
  + slot_base::set_parent(): Create a dummy slot_rep if necessary.
  + Avoid compiler warnings from function pointer conversions.
  + Build:
  - Make --disable-benchmark work.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Add MSVC_NMake/README.txt for Visual Studio builds.
  + Documentation:
  - signal_base: Warn against deletion during emission.
  - Update links in README, configure.ac, libsigcplusplus.doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585137600">- Update to version 2.10.3:
  + Add Meson build, alongside the existing Autotools build.
  + Improve MSVC builds on Windows.
  + meson.build: Check if .git is a directory or file.
  + docs/reference/meson.build: Check if perl is found.
  + README: Describe building with Meson and Autotools.
  + Tests: Make test_track_obj.cc compile with clang++.</changelog>
  <changelog author="dimstar@opensuse.org" date="1601985600">- Update to version 2.10.4:
  + Build:
  - Meson build: Set default value of the 'warnings' option to
    'min'
  - NMake Makefiles: Several improvements
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Updated documentation.
- Switch to meson build system:
  + Add meson, and remove m4 BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install macros.
  + No longer ship the htmldoc as part of the devel package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1606305600">- Update to version 2.10.6:
  + Build: Meson build: Fix versioning on macOS.
  + Documentation:
  - sigc++/sigc++.h: Describe how to use libsigc++ with Meson.
  - Update links to the web page, now at
    libsigcplusplus.github.io/libsigcplusplus.</changelog>
  <changelog author="dimstar@opensuse.org" date="1621598400">- Update to version 2.10.7:
  + Meson build:
  - Make it possible to use sigc++ as a subproject.
  - Fix dependency on files generated from .h.m4 files.
  - No implicit_include_directories.
  - Make quiet installations possible.
  - Fix build as subproject without building documentation.
  + Documentation fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.10.8:
  + Build:
  - Meson build: Perl is not required by new versions of
    mm-common
  - NMake Makefiles: Support building with VS2022
  + Documentation: Upgrade the manual from DocBook 4.1 to DocBook
    5.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1677499200">- Update to version 2.12.0:
  + Add track_object(), deprecate track_obj().
  + Examples, tests:
  - examples/member_method: Make on_print() non-virtual.
  - test_limit_reference.cc: Don't use auto where a slot is
    required.
  + Build:
  - Meson:
    . Avoid configuration warnings.
    . Detect if we build from a git subtree.
    . Simplify lookup of python command.
    . Add build_tests option.
  - Meson, MSVC: Compensate for the lack of
    msvc_recommended_pragmas.h.
  - Fix build with -Dbuild-deprecated-api=false.</changelog>
</package>
<package pkgid="5e7e7ed2122554a4062f2238f208795b6a12c6f30663286b17c3ab08566c1e722d7cb861782a481b4ef2859e7f427b489399d5a228e5d58567ff12eb8abab340" name="libslang2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.3.3" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1497009600">- Rectify RPM groups. Trim filler wording from description.</changelog>
  <changelog author="werner@suse.de" date="1518177600">- Add upstream commit 6dd5ade9a97b52ace4ac033779a6d3c1c51db4d1 as
  patch git-6dd5ade9a97b52ace4ac033779a6d3c1c51db4d1.patch (boo#1079543)
  * Added support for the new ncurses 32-bit terminfo database entries</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519992000">- BuildRequire default libpng on the system, builds and test
  pass fine. (drops slang-libpng12-linker-flag.patch)</changelog>
  <changelog author="ro@suse.de" date="1521115200">- handle s390 like s390x</changelog>
  <changelog author="schwab@suse.de" date="1537790400">- overflow.patch: fix overflow checks not to depend on undefined behaviour</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="adam.majer@suse.de" date="1586174400">- slang 2.3.2:
  * It is now possible to use reserved words as struct
  field names without quoting them.  For example, it is now possible
  to write
    s = struct { public = value };
  Previously, this required the field name to be quoted:
    s = struct { "public" = value };
- drop static library and its LTO workaround
- git-6dd5ade9a97b52ace4ac033779a6d3c1c51db4d1.patch: upstreamed
- slang-fsuid.patch: refreshed</changelog>
  <changelog author="coolo@suse.com" date="1664193600">- slang 2.3.3:
  * This version includes a number of backward-compatible enhancements to
    the interpreter and its modules, as well as support for so-called
    user-defined terminfo extensions.  It is also binary compatible with
    prior 2.x.y versions of the library.
  * See changes.txt
- obsolete overflow.patch and rebase autoconf.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709294400">- Drop slsh/lib/test/test_timestamp.sl: Do not test timestamps but
  trust on upstream (calculations in leap years are off in the
  test).</changelog>
</package>
<package pkgid="c8647f1e3d656446826861c1e1be45f9a5c3429df67f421543a8e092a836e106114729a82f83dc90d8edf3cdcec0403f55416c6b72e7ec33df49e99f0f00151b" name="libslirp-debugsource" arch="aarch64">
  <version epoch="0" ver="4.8.0+2" rel="slfo.1.1_1.3"/>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release
- fixes [bsc#1201551]</changelog>
  <changelog author="novell@tower-net.de" date="1626436800">- Update to version 4.6.0:
  * build-sys: forgot to bump version to 4.6.0
  * changelog: post-release
  * Release v4.6.0
  * udp: check upd_input buffer size
  * tftp: introduce a header structure
  * tftp: check tftp_input buffer size
  * upd6: check udp6_input buffer size
  * bootp: check bootp_input buffer size
  * bootp: limit vendor-specific area to input packet memory buffer
  * Revert "Set macOS deployment target to macOS 10.4"
- fixes CVE-2021-3592 [bsc#1187364], CVE-2021-3593 [bsc#1187365],
    CVE-2021-3594 [bsc#1187367],CVE-2021-3595[bsc#1187366]</changelog>
  <changelog author="mrostecki@suse.com" date="1626868800">- Update to version 4.6.1:
  * Release v4.6.1
  * Fix "DHCP broken in libslirp v4.6.0"
- fixes [bsc#1198773]</changelog>
  <changelog author="fvogt@suse.com" date="1626955200">- Update to version 4.6.1+7:
  * Haiku: proper path to resolv.conf for DNS server
  * Fix for Haiku
  * dhcp: Always send DHCP_OPT_LEN bytes in options
- Commit _servicedata to fix changelogs
- Don't include .git in source archive, not needed
- Run set_version together with obs_scm</changelog>
  <changelog author="fvogt@suse.com" date="1658145600">- Update to version 4.7.0+44 (current git master):
  * Fix vmstate regression
  * msvc: use char* for pointer arithmetic
  * Align outgoing packets
  * Bump incoming packet alignment to 8 bytes
  * msvc: fix some gcc-specific pragma warnings
  * msvc: enable vmstate code on !gnuc
  * vmstate: only enable when building under GNU C
  * ncsitest: Fix build with msvc
  * Avoid running git-version-gen when building with MS VC
  * windows: export symbols
  * win32: replace strcasecmp with g_ascii_strcasecmp
  * Drop spurious inline
  * Avoid returning void
  * Fix arithmetic on void *
  * Avoid using ##__VA_ARGS__ gcc extension
  * Fix bitfields order for MSVC
  * Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
  * Do not use ssize_t on Windows
  * Do not include unistd.h on windows, it does not have it
  * Accept build-aux/git-version-gen failing to run
  * container_of: avoid using __extension__
  * ncsi: Add Mellanox Get Mac Address handler
  * slirp: Add out-of-band ethernet address
  * ncsi: Add OEM command handler
  * ncsi: Add basic test for Get Version ID response
  * ncsi: Use response header for payload length
  * ncsi: Pass command header to response handlers
  * src/slirp.h: Bump the minimum Windows version to Windows 7
  * ncsi: Add Get Version ID command
  * ncsi: Pass Slirp structure to response handlers
  * slirp: Add manufacturer's ID
  * Add support for Haiku to meson.build
  * meson: add extra warnings
  * win32: declare some local functions as static
  * Include &lt;sys/socket.h&gt; and &lt;arpa/inet.h&gt; for AF_INET6 and inet_pton
  * Release v4.7.0
  * bump ABI version and age
  * slirp: invoke client callback before creating timers
  * pingtest: port to timer_new_opaque
  * introduce timer_new_opaque callback
  * introduce slirp_timer_new wrapper
  * icmp6: make ndp_send_ra static
  * Add sanitizers CI runs
  * socket: Handle ECONNABORTED from recv
  * bootp: fix g_str_has_prefix warning/critical
  * slirp: Don't duplicate packet in tcp_reass
  * Rename insque/remque -&gt; slirp_[ins|rem]que
  * mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
  * Replace inet_ntoa() with safer inet_ntop()
  * Add VMS_END marker
  * bootp: add support for UEFI HTTP boot
  * IPv6 DNS proxying support
  * Add missing scope_id in caching
  * Drop fixed TODO
  * socket: Move closesocket(so-&gt;s_aux) to sofree
  * socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
  * socket: Add s_aux field to struct socket for storing auxilliary socket
  * socket: Initialize so_type in socreate
  * socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
  * Allow to disable internal DHCP server
  * slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
  * CI: run integration tests with slirp4netns
  * socket: Check address family for Unix-to-inet accept translation
  * socket: Add debug args for tcpx_listen (inet and Unix sockets)
  * socket: Restore original definition of fhost
  * socket: Move &lt;sys/un.h&gt; include to socket.h
  * Support Unix sockets in hostfwd
  * resolv: fix IPv6 resolution on Darwin
  * Use the exact sockaddr size in getnameinfo call
  * Initialize sin6_scope_id to zero
  * slirp_socketpair_with_oob: Connect pair through 127.0.0.1
  * resolv: fix memory leak when using libresolv
  * pingtest: Add a trivial ping test
  * icmp: Support falling back on trying a SOCK_RAW socket</changelog>
  <changelog author="pgajdos@suse.com" date="1668168000">- added patches
  fix https://gitlab.freedesktop.org/slirp/libslirp/-/issues/64
  + libslirp-semicolon.patch</changelog>
  <changelog author="lnussel@suse.com" date="1702468800">- Update to version 4.7.0+60:
  * Avoid including &lt;sys/param.h&gt; on windows
  * Document functions
  * icmp: Handle ICMP packets as IPPROTO_IP on BSD
  * ip: Enforce strict aliasing
  * Fix including BaseTsd.h on mingw
  * Use SSIZE_T from BaseTsd.h on windows
  * Detach UDP socket if errno is ENOTCONN (Socket is not connected)
  * slirp: use localhost as dns when /etc/resolv.conf empty
  * missing semicolon
  * Drop unused UDP_UDPDATALEN macro
  * Reject domain-search when any entry ends with ".."
  * Use target address from Neighbor Advertisement
- removed libslirp-semicolon.patch, now included</changelog>
  <changelog author="pgajdos@suse.com" date="1716292800">- Update to version 4.8.0+2:
  * Fix actually linking the library
  * Use simpler test linker script for detectiong --version-script option
  * Release v4.8.0
  * Explicit that -Dstatic=True is not meant for distributing a static library
  * icmp6: Add echo request forwarding support
  * fuzz: Fix icmp6 matching and checksum computation
  * fuzz: Drop debugging
  * fuzz: Drop debugging
  * fuzz: Add ARP and NDP cases
  * fuzz: Add IPv6 cases
  * mbuf: Do not reallocate when the requested size already fits exactly
  * mbuf: Fix copying headers
  * oss-fuzz: Fix udp-h and tcp-h corpuses
  * fuzz: comment coherency
  * fuzz: Simplify TCP checksum code
  * Note changes that can probably be security issues
  * Add changelog for next release
  * eth: pad ethernet frames to 60 bytes
  * udp: Make cleanup loop clearer
  * fuzz: Fix tftp fuzz actually receiving a file
  * tftp: cleanup sessions remaining at slirp shutdown
  * tftp: Fix use-after-free
  * Add fuzzing CI
  * fuzz: Add ip filtering
  * tcp: hack syn/ack
  * fuzzing: Increase coverage
  * First attempt at fuzzing with libFuzzer based on @elmarco work
  * Start some fuzzing test
  * tcp: Fix testing for last fragment
  * icmp: Fix msg duplication for debugging
  * tcp: Fix allocating room
  * mbuf: Be extra careful with freed pointer
  * mbuf: remove '#define if*' member accessors
  * m_cleanup_list: Fix missing cleanup packets from the same session
  * tcp-input: inline TCP_REASS
  * ip: remove second argument from ip_stripoptions()
  * Document endianness of slirp_add_hostfwd parameters</changelog>
</package>
<package pkgid="7be24eada65461f9654e901dc40b959e0860fa785bcd719384ced11a18cc61e237cf7d68d7476d1b700ac34dad9708d3685332b3c79ed4d7f7abb9a3b335ce07" name="libslirp0-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.8.0+2" rel="slfo.1.1_1.3"/>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release
- fixes [bsc#1201551]</changelog>
  <changelog author="novell@tower-net.de" date="1626436800">- Update to version 4.6.0:
  * build-sys: forgot to bump version to 4.6.0
  * changelog: post-release
  * Release v4.6.0
  * udp: check upd_input buffer size
  * tftp: introduce a header structure
  * tftp: check tftp_input buffer size
  * upd6: check udp6_input buffer size
  * bootp: check bootp_input buffer size
  * bootp: limit vendor-specific area to input packet memory buffer
  * Revert "Set macOS deployment target to macOS 10.4"
- fixes CVE-2021-3592 [bsc#1187364], CVE-2021-3593 [bsc#1187365],
    CVE-2021-3594 [bsc#1187367],CVE-2021-3595[bsc#1187366]</changelog>
  <changelog author="mrostecki@suse.com" date="1626868800">- Update to version 4.6.1:
  * Release v4.6.1
  * Fix "DHCP broken in libslirp v4.6.0"
- fixes [bsc#1198773]</changelog>
  <changelog author="fvogt@suse.com" date="1626955200">- Update to version 4.6.1+7:
  * Haiku: proper path to resolv.conf for DNS server
  * Fix for Haiku
  * dhcp: Always send DHCP_OPT_LEN bytes in options
- Commit _servicedata to fix changelogs
- Don't include .git in source archive, not needed
- Run set_version together with obs_scm</changelog>
  <changelog author="fvogt@suse.com" date="1658145600">- Update to version 4.7.0+44 (current git master):
  * Fix vmstate regression
  * msvc: use char* for pointer arithmetic
  * Align outgoing packets
  * Bump incoming packet alignment to 8 bytes
  * msvc: fix some gcc-specific pragma warnings
  * msvc: enable vmstate code on !gnuc
  * vmstate: only enable when building under GNU C
  * ncsitest: Fix build with msvc
  * Avoid running git-version-gen when building with MS VC
  * windows: export symbols
  * win32: replace strcasecmp with g_ascii_strcasecmp
  * Drop spurious inline
  * Avoid returning void
  * Fix arithmetic on void *
  * Avoid using ##__VA_ARGS__ gcc extension
  * Fix bitfields order for MSVC
  * Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
  * Do not use ssize_t on Windows
  * Do not include unistd.h on windows, it does not have it
  * Accept build-aux/git-version-gen failing to run
  * container_of: avoid using __extension__
  * ncsi: Add Mellanox Get Mac Address handler
  * slirp: Add out-of-band ethernet address
  * ncsi: Add OEM command handler
  * ncsi: Add basic test for Get Version ID response
  * ncsi: Use response header for payload length
  * ncsi: Pass command header to response handlers
  * src/slirp.h: Bump the minimum Windows version to Windows 7
  * ncsi: Add Get Version ID command
  * ncsi: Pass Slirp structure to response handlers
  * slirp: Add manufacturer's ID
  * Add support for Haiku to meson.build
  * meson: add extra warnings
  * win32: declare some local functions as static
  * Include &lt;sys/socket.h&gt; and &lt;arpa/inet.h&gt; for AF_INET6 and inet_pton
  * Release v4.7.0
  * bump ABI version and age
  * slirp: invoke client callback before creating timers
  * pingtest: port to timer_new_opaque
  * introduce timer_new_opaque callback
  * introduce slirp_timer_new wrapper
  * icmp6: make ndp_send_ra static
  * Add sanitizers CI runs
  * socket: Handle ECONNABORTED from recv
  * bootp: fix g_str_has_prefix warning/critical
  * slirp: Don't duplicate packet in tcp_reass
  * Rename insque/remque -&gt; slirp_[ins|rem]que
  * mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
  * Replace inet_ntoa() with safer inet_ntop()
  * Add VMS_END marker
  * bootp: add support for UEFI HTTP boot
  * IPv6 DNS proxying support
  * Add missing scope_id in caching
  * Drop fixed TODO
  * socket: Move closesocket(so-&gt;s_aux) to sofree
  * socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
  * socket: Add s_aux field to struct socket for storing auxilliary socket
  * socket: Initialize so_type in socreate
  * socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
  * Allow to disable internal DHCP server
  * slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
  * CI: run integration tests with slirp4netns
  * socket: Check address family for Unix-to-inet accept translation
  * socket: Add debug args for tcpx_listen (inet and Unix sockets)
  * socket: Restore original definition of fhost
  * socket: Move &lt;sys/un.h&gt; include to socket.h
  * Support Unix sockets in hostfwd
  * resolv: fix IPv6 resolution on Darwin
  * Use the exact sockaddr size in getnameinfo call
  * Initialize sin6_scope_id to zero
  * slirp_socketpair_with_oob: Connect pair through 127.0.0.1
  * resolv: fix memory leak when using libresolv
  * pingtest: Add a trivial ping test
  * icmp: Support falling back on trying a SOCK_RAW socket</changelog>
  <changelog author="pgajdos@suse.com" date="1668168000">- added patches
  fix https://gitlab.freedesktop.org/slirp/libslirp/-/issues/64
  + libslirp-semicolon.patch</changelog>
  <changelog author="lnussel@suse.com" date="1702468800">- Update to version 4.7.0+60:
  * Avoid including &lt;sys/param.h&gt; on windows
  * Document functions
  * icmp: Handle ICMP packets as IPPROTO_IP on BSD
  * ip: Enforce strict aliasing
  * Fix including BaseTsd.h on mingw
  * Use SSIZE_T from BaseTsd.h on windows
  * Detach UDP socket if errno is ENOTCONN (Socket is not connected)
  * slirp: use localhost as dns when /etc/resolv.conf empty
  * missing semicolon
  * Drop unused UDP_UDPDATALEN macro
  * Reject domain-search when any entry ends with ".."
  * Use target address from Neighbor Advertisement
- removed libslirp-semicolon.patch, now included</changelog>
  <changelog author="pgajdos@suse.com" date="1716292800">- Update to version 4.8.0+2:
  * Fix actually linking the library
  * Use simpler test linker script for detectiong --version-script option
  * Release v4.8.0
  * Explicit that -Dstatic=True is not meant for distributing a static library
  * icmp6: Add echo request forwarding support
  * fuzz: Fix icmp6 matching and checksum computation
  * fuzz: Drop debugging
  * fuzz: Drop debugging
  * fuzz: Add ARP and NDP cases
  * fuzz: Add IPv6 cases
  * mbuf: Do not reallocate when the requested size already fits exactly
  * mbuf: Fix copying headers
  * oss-fuzz: Fix udp-h and tcp-h corpuses
  * fuzz: comment coherency
  * fuzz: Simplify TCP checksum code
  * Note changes that can probably be security issues
  * Add changelog for next release
  * eth: pad ethernet frames to 60 bytes
  * udp: Make cleanup loop clearer
  * fuzz: Fix tftp fuzz actually receiving a file
  * tftp: cleanup sessions remaining at slirp shutdown
  * tftp: Fix use-after-free
  * Add fuzzing CI
  * fuzz: Add ip filtering
  * tcp: hack syn/ack
  * fuzzing: Increase coverage
  * First attempt at fuzzing with libFuzzer based on @elmarco work
  * Start some fuzzing test
  * tcp: Fix testing for last fragment
  * icmp: Fix msg duplication for debugging
  * tcp: Fix allocating room
  * mbuf: Be extra careful with freed pointer
  * mbuf: remove '#define if*' member accessors
  * m_cleanup_list: Fix missing cleanup packets from the same session
  * tcp-input: inline TCP_REASS
  * ip: remove second argument from ip_stripoptions()
  * Document endianness of slirp_add_hostfwd parameters</changelog>
</package>
<package pkgid="5aa95b447dea128400b69271bc7a021f4ba878c7b13c7753ec14fc72946b145a6e67374178558a20d9fa0b06fdd9a24351b6bc4a348ccdada6a7dd70559ff355" name="libsmartcols1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.40.4" rel="slfo.1.1_4.1"/>
  <changelog author="jslaby@suse.cz" date="1715860800">- add support for pidfs in kernel 6.9 (bsc#1224285)
  * 0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch
  * 0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch
  * 0003-lsfd-Support-pidfs.patch
  * 0004-lsfd-test-Adapt-test-cases-for-pidfs.patch</changelog>
  <changelog author="dmueller@suse.com" date="1718020800">- disable libmagic in more(1) for binary detection (bsc#1225197)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1721131200">- uncomment "autoreconf --install" to use the new version of automake</changelog>
  <changelog author="sbrabec@suse.com" date="1722859200">- Update to version 2.40.2:
  * cfdisk: fix possible integer overflow
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
    (obsoletes
    0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch,
    0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch,
    0003-lsfd-Support-pidfs.patch,
    0004-lsfd-test-Adapt-test-cases-for-pidfs.patch)
  * mkswap.8.adoc: update note regarding swapfile creation
  * setpgid: make -f work
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Enable kernel mountfd API, as it should be already stable
  (PED-9752).
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.</changelog>
  <changelog author="sbrabec@suse.com" date="1729512000">- Disable mountfd API again.
  (https://github.com/util-linux/util-linux/issues/3158)</changelog>
  <changelog author="sbrabec@suse.com" date="1731844800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).
- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
</package>
<package pkgid="06538946eca57f184f5956651b7da3ff887d4fea758f9989fc29e857503f13e1215663b293b250f987dc31e624a7171f997303e2cee1cf84b27c8a5393a1f000" name="libsnapper7-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.11.2" rel="slfo.1.1_1.2"/>
  <changelog author="aschnell@suse.com" date="1710849600">- improved error message (gh#openSUSE/snapper#864)
  Sat  9 Mar 09:44:17 GMT 2024 - infinity0@pwned.gg
- add support for quarterly snapshots</changelog>
  <changelog author="aschnell@suse.com" date="1711022400">- improved log message (see gh#openSUSE/snapper#866)</changelog>
  <changelog author="aschnell@suse.com" date="1712577600">- avoid excessive logging (gh#openSUSE/snapper#892)</changelog>
  <changelog author="aschnell@suse.com" date="1713268800">- disable qgroup if it does not exist to avoid failure creating
  snapshots with kernel 6.8.4 (gh#openSUSE/snapper#894)</changelog>
  <changelog author="aschnell@suse.com" date="1713355200">- run cleanup service every hour (gh#openSUSE/snapper#885)</changelog>
  <changelog author="aschnell@suse.com" date="1713355201">- reverted some parts of PR#884 to fix build in obs</changelog>
  <changelog author="aschnell@suse.com" date="1713441600">- async cleanup of stale btrfs qgroups (bsc#1222847)
- version 0.11.0</changelog>
  <changelog author="aschnell@suse.com" date="1716379200">- fixed error message (gh#openSUSE/snapper#907)</changelog>
  <changelog author="aschnell@suse.com" date="1720180800">- handle content-length of stomp in zypper plugin
  (gh#openSUSE/snapper#918)
- version 0.11.1</changelog>
  <changelog author="aschnell@suse.com" date="1724932800">- use .snapshots dir for 'btrfs qgroup clear-stale' (bsc#1229904)
- version 0.11.2</changelog>
</package>
<package pkgid="f8cb8e661c66e231550eab723b409f907e6ed65b22d186b4f23664875c8676adf64b8ea04c5080d83973caab158ef99ebaf4ae6741f4966bc350d8661b3c34a7" name="libsnappy1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.10" rel="slfo.1.1_1.3"/>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626177600">- Update to 1.1.9:
  * Performance improvements
- Add fix-always-inline.patch
- Add use-system-test-libs.patch
- Add a hardcoded snappy.pc file</changelog>
  <changelog author="tserong@suse.com" date="1635336000">- Re-enable RTTI, without which other applications can't subclass
  snappy::Source (this breaks Ceph, as one example)
- Add reenable-rtti.patch</changelog>
  <changelog author="dmueller@suse.com" date="1699617600">- update to 1.1.10:
  * Performance improvements
  * Compilation fixes for various environments
- drop fix-always-inline.patch (obsolete)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711368000">- Fix build with GTest 1.14.0 by using C++14, bsc#1221872</changelog>
</package>
<package pkgid="1d9b5e444076d8d1f8a7a2440975aadd79bae1045b0d776a90b89871b472df8dac336ddaf079f518a0e04c98ea6a5da2e1c5eaa45be23d526c91115eefd9e5e7" name="libsnmp40-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.9.4" rel="slfo.1.1_2.1"/>
  <changelog author="schubi@suse.com" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="abergmann@suse.com" date="1656936000">- update to 5.9.2 (bsc#1201103):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
- Refactor two patches to work with version number 5.9.2:
  delete:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  add:
  * net-snmp-5.9.2-pie.patch
  * net-snmp-5.9.2-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1657627200">- Rename libsnmp40 subpackage to libsnmp39: the libraries are all
  having soversion 39.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="abergmann@suse.com" date="1663761600">- update to 5.9.3:
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.</changelog>
  <changelog author="abergmann@suse.com" date="1664280000">- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1664798400">- change egrep/fgrep to grep -E/-F to avoid warnings boo#1203096
  add net-snmp-5.9.3-grep.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).
- Use new MFD rewrites of mib modules, where available.
- Disable legacy DES encryption and MD5 authentication protocols.</changelog>
  <changelog author="abergmann@suse.com" date="1731585600">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  * net-snmp-5.9.3-grep.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.2-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.2-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
- logrotate should use reload instead of restart (bsc#1232030)</changelog>
  <changelog author="abergmann@suse.com" date="1768219200">- Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).
  Add net-snmp-5.9.4-fix-out-of-bounds-trapOid-access.patch</changelog>
</package>
<package pkgid="41b93a24ab159022631a292b007c24cf226d4d1e520283b5c07323d3085f8044ff874811a3d73de49cac446beaea0f3dc97830e2399113f6d7b424744ff1a7dd" name="libsodium-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.18" rel="slfo.1.1_3.1"/>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
  <changelog author="ecsos@opensuse.org" date="1549108800">- Update to 1.0.17
  - Bug fix: sodium_pad() didn't properly support block sizes
    &gt;= 256 bytes.
  - JS/WebAssembly: some old iOS versions can't instantiate the
    WebAssembly module; fall back to Javascript on these.
  - JS/WebAssembly: compatibility with newer Emscripten versions.
  - Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and
    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't
    returnEINVAL` on input strings with a short length, unlike
    their high-level counterpart.
  - Added a workaround for Visual Studio 2010 bug causing CPU
    features not to be detected.
  - Portability improvements.
  - Test vectors from Project Wycheproof have been added.
  - New low-level APIs for arithmetic mod the order of the prime
    order group:
  - crypto_core_ed25519_scalar_random(),
    crypto_core_ed25519_scalar_reduce(),
  - crypto_core_ed25519_scalar_invert(),
    crypto_core_ed25519_scalar_negate(),
  - crypto_core_ed25519_scalar_complement(),
    crypto_core_ed25519_scalar_add() and
    crypto_core_ed25519_scalar_sub().
  - New low-level APIs for scalar multiplication without clamping:
    crypto_scalarmult_ed25519_base_noclamp() and
    crypto_scalarmult_ed25519_noclamp().
    These new APIs are especially useful for blinding.
  - sodium_sub() has been implemented.
  - Support for WatchOS has been added.
  - getrandom(2) is now used on FreeBSD 12+.
  - The nonnull attribute has been added to all relevant
    prototypes.
  - More reliable AVX512 detection.
  - Javascript/Webassembly builds now use dynamic memory growth.</changelog>
  <changelog author="ecsos@opensuse.org" date="1560686400">- Update to 1.0.18
  - Enterprise versions of Visual Studio are now supported.
  - Visual Studio 2019 is now supported.
  - 32-bit binaries for Visual Studio 2010 are now provided.
  - A test designed to trigger an OOM condition didn't work on
    Linux systems with memory overcommit turned on. It has been
    removed in order to fix Ansible builds.
  - Emscripten: print and printErr functions are overridden to send
    errors to the console, if there is one.
  - Emscripten: UTF8ToString() is now exported since
    Pointer_stringify() has been deprecated.
  - Libsodium version detection has been fixed in the CMake recipe.
  - Generic hashing got a 10% speedup on AVX2.
  - New target: WebAssembly/WASI
    (compile with dist-builds/wasm32-wasi.sh).
  - New functions to map a hash to an edwards25519 point
    or get a random point:
    core_ed25519_from_hash() and core_ed25519_random().
  - crypto_core_ed25519_scalar_mul() has been implemented for
    scalar*scalar (mod L) multiplication.
  - Support for the Ristretto group has been implemented for
    interoperability with wasm-crypto.
  - Improvements have been made to the test suite.
  - Portability improvements have been made.
  - getentropy() is now used on systems providing this system call.
  - randombytes_salsa20 has been renamed to randombytes_internal.
  - Support for NativeClient has been removed.
  - Most ((nonnull)) attributes have been relaxed to allow 0-length
    inputs to be NULL.
  - The -ftree-vectorize and -ftree-slp-vectorize compiler switches
    are now used, if available, for optimized builds.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">-  Add libsodium_configure_cpuid_chg.patch and call autoconf
  to regenerate configure script with proper CPUID checking.
  Required at least for PowerPC and ARM now that LTO enabled.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566820800">-  Revert previous change about cpuid as previous change rejected
  in https://build.opensuse.org/request/show/724809
-  Disable LTO as bypass boo#1148184</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767873600">- Security fix: [bsc#1256070, CVE-2025-15444, bsc#1255764, CVE-2025-69277]
  * check Y==Z in addition to X==0
  * Add patch libsodium-CVE-2025-15444.patch</changelog>
</package>
<package pkgid="23aa12a95c0153b99c09c1aace0d6c7adb56f4c0e9506f761d05220d1d2204989eef5267539c0b90d2b5cd9cbfe27ccb99bb0393dc1818c9e0cffe8a2bd3cf6b" name="libsodium23-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.18" rel="slfo.1.1_3.1"/>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
  <changelog author="ecsos@opensuse.org" date="1549108800">- Update to 1.0.17
  - Bug fix: sodium_pad() didn't properly support block sizes
    &gt;= 256 bytes.
  - JS/WebAssembly: some old iOS versions can't instantiate the
    WebAssembly module; fall back to Javascript on these.
  - JS/WebAssembly: compatibility with newer Emscripten versions.
  - Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and
    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't
    returnEINVAL` on input strings with a short length, unlike
    their high-level counterpart.
  - Added a workaround for Visual Studio 2010 bug causing CPU
    features not to be detected.
  - Portability improvements.
  - Test vectors from Project Wycheproof have been added.
  - New low-level APIs for arithmetic mod the order of the prime
    order group:
  - crypto_core_ed25519_scalar_random(),
    crypto_core_ed25519_scalar_reduce(),
  - crypto_core_ed25519_scalar_invert(),
    crypto_core_ed25519_scalar_negate(),
  - crypto_core_ed25519_scalar_complement(),
    crypto_core_ed25519_scalar_add() and
    crypto_core_ed25519_scalar_sub().
  - New low-level APIs for scalar multiplication without clamping:
    crypto_scalarmult_ed25519_base_noclamp() and
    crypto_scalarmult_ed25519_noclamp().
    These new APIs are especially useful for blinding.
  - sodium_sub() has been implemented.
  - Support for WatchOS has been added.
  - getrandom(2) is now used on FreeBSD 12+.
  - The nonnull attribute has been added to all relevant
    prototypes.
  - More reliable AVX512 detection.
  - Javascript/Webassembly builds now use dynamic memory growth.</changelog>
  <changelog author="ecsos@opensuse.org" date="1560686400">- Update to 1.0.18
  - Enterprise versions of Visual Studio are now supported.
  - Visual Studio 2019 is now supported.
  - 32-bit binaries for Visual Studio 2010 are now provided.
  - A test designed to trigger an OOM condition didn't work on
    Linux systems with memory overcommit turned on. It has been
    removed in order to fix Ansible builds.
  - Emscripten: print and printErr functions are overridden to send
    errors to the console, if there is one.
  - Emscripten: UTF8ToString() is now exported since
    Pointer_stringify() has been deprecated.
  - Libsodium version detection has been fixed in the CMake recipe.
  - Generic hashing got a 10% speedup on AVX2.
  - New target: WebAssembly/WASI
    (compile with dist-builds/wasm32-wasi.sh).
  - New functions to map a hash to an edwards25519 point
    or get a random point:
    core_ed25519_from_hash() and core_ed25519_random().
  - crypto_core_ed25519_scalar_mul() has been implemented for
    scalar*scalar (mod L) multiplication.
  - Support for the Ristretto group has been implemented for
    interoperability with wasm-crypto.
  - Improvements have been made to the test suite.
  - Portability improvements have been made.
  - getentropy() is now used on systems providing this system call.
  - randombytes_salsa20 has been renamed to randombytes_internal.
  - Support for NativeClient has been removed.
  - Most ((nonnull)) attributes have been relaxed to allow 0-length
    inputs to be NULL.
  - The -ftree-vectorize and -ftree-slp-vectorize compiler switches
    are now used, if available, for optimized builds.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">-  Add libsodium_configure_cpuid_chg.patch and call autoconf
  to regenerate configure script with proper CPUID checking.
  Required at least for PowerPC and ARM now that LTO enabled.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566820800">-  Revert previous change about cpuid as previous change rejected
  in https://build.opensuse.org/request/show/724809
-  Disable LTO as bypass boo#1148184</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767873600">- Security fix: [bsc#1256070, CVE-2025-15444, bsc#1255764, CVE-2025-69277]
  * check Y==Z in addition to X==0
  * Add patch libsodium-CVE-2025-15444.patch</changelog>
</package>
<package pkgid="5b98715381375421c9651e2fa697aaedebe952cfaf73f55a0833a3c1d1a0e2f622258e91d7a13c51f01e5dafbf713e06e9383688adac08d12a68753c32d5cac9" name="libsoftokn3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.112.2" rel="slfo.1.1_1.1"/>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="54cc4c737f97ef00003de30d923596cd960cb04f608cc23b95657ee718ecd69b9cc3c492fa1433e3b45e103d5defdea6cd1a127a01756574e26729a020c768cf" name="libsolv-debugsource" arch="aarch64">
  <version epoch="0" ver="0.7.36" rel="slfo.1.1_1.1"/>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
  <changelog author="mls@suse.de" date="1754308800">- fixed rare crash in the handling of allowuninstall in combination
  with forcebest updates
- new pool_satisfieddep_map feature to test if a set of packages
  satisfies a dependency
- bump version to 0.7.35</changelog>
  <changelog author="mls@suse.de" date="1773316800">- respect the "default" attribute in environment optionlist in
  the comps parser
- support suse namespace deps in boolean dependencies [bsc#1258193]
- support for the Elbrus2000 (e2k) architecture
- support language() suse namespace rewriting
- bump version to 0.7.36</changelog>
</package>
<package pkgid="863e01f345d53e54357472510aa7878a3fd37bb9c7fe5a96d20d13920e7d247f96646ac818fe32190992e0ba1614d7c5974f427636790fd2b90274b39e72c57d" name="libsolv-tools-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.7.36" rel="slfo.1.1_1.1"/>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
  <changelog author="mls@suse.de" date="1754308800">- fixed rare crash in the handling of allowuninstall in combination
  with forcebest updates
- new pool_satisfieddep_map feature to test if a set of packages
  satisfies a dependency
- bump version to 0.7.35</changelog>
  <changelog author="mls@suse.de" date="1773316800">- respect the "default" attribute in environment optionlist in
  the comps parser
- support suse namespace deps in boolean dependencies [bsc#1258193]
- support for the Elbrus2000 (e2k) architecture
- support language() suse namespace rewriting
- bump version to 0.7.36</changelog>
</package>
<package pkgid="c6df4f70ffff3f64a1fa8d0f52acaa27ad6353fa64591a87526c9970a7b9a499bc02d3946908ae378c3e2467fdce9312b9c58c4d05480b36f8acdaeed2258997" name="libsoup-3_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.4.4" rel="slfo.1.1_8.1"/>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
  <changelog author="mgorse@suse.com" date="1772712000">- Update libsoup-CVE-2026-0716.patch to incorporate
  glgo#GNOME/libsoup!518. The original fix was incomplete
  (bsc#1256418 CVE-2026-0716 glgo#GNOME/libsoup#476).</changelog>
  <changelog author="mgorse@suse.com" date="1773230400">- Refresh some patches to match the output from gitlab.gnome.org.</changelog>
</package>
<package pkgid="495f48227e67b6ad6a9ab4510b2cde6dbce33504d59ba7c5e4865575cafdf86969d33859e837d2479010e6e887da4744205b063912e27c64c1efa7e652c9e1e0" name="libsoup-debugsource" arch="aarch64">
  <version epoch="0" ver="3.4.4" rel="slfo.1.1_8.1"/>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
  <changelog author="mgorse@suse.com" date="1772712000">- Update libsoup-CVE-2026-0716.patch to incorporate
  glgo#GNOME/libsoup!518. The original fix was incomplete
  (bsc#1256418 CVE-2026-0716 glgo#GNOME/libsoup#476).</changelog>
  <changelog author="mgorse@suse.com" date="1773230400">- Refresh some patches to match the output from gitlab.gnome.org.</changelog>
</package>
<package pkgid="eba6e56d9ec02a8d561beddf0913dfbdd71e93430e04ad5434865c1f34164f9fe085af9c214ad1568f9555984b549bb60d2998b15f0ae876155fb98d7782660e" name="libspice-server1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.15.1" rel="slfo.1.1_1.3"/>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="9+suse@cirno.systems" date="1578657600">- Enable video codec support (VPX and MJPEG)</changelog>
  <changelog author="brogers@suse.com" date="1582891200">- Update to v0.14.3 release
  The main changes are WebSocket and support for Windows.
  * Add support for WebSocket, this will allow to use spice-html5
    without proxy
  * Support Windows, now Qemu Windows can be build enabling Spice
  * Fix some alignment problem
  * Converted some documentation to Asciidoc format to make easier
    to update, updated some
  * Minor compatibility fix for PPC64EL and ARMHF
  * Minor fixes for big endian machines like MIPS
  * Avoid some crashes with some buggy guest drivers, simply
    ignore the invalid request
  * Fix for old OpenSSL versions
  * Minor fix for Windows clients and brushes, fixed an issue with
    Photoshop under Windows 7
  * Add ability to query video-codecs
  * Small use-after-free fix
  * Fix for debugging recording/replaying using QUIC images
  * Fix a regression where spice reported no monitors to the client
  * Fix DoS in spicevmc if WebDAV used
  * Updated and improved test migration script
  * Some minor fixes to smartcard support
  * Avoid possible disconnection using proxies using a in-flow
    keepalive mechanism
- The NEWS file is now named CHANGELOG.md, and the previously
  provided ChangeLog, which was a summary of the git log is no
  longer provided</changelog>
  <changelog author="brogers@suse.com" date="1583755200">- Clean up some spec file conditionals that are no longer helpful</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vunerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="brogers@suse.com" date="1602244800">- Note: The Mar 9, 2020 spec file cleanup and the following change
  satisfy jsc#SLE-15520
- Remove gstreamer-plugins-libav and gstreamer-plugins-good as
  BuildRequires. Even though the configure step of the package
  build does report detection of features from these packages, the
  build is actually not otherwise influenced by the presence of
  these packages. It is at runtime when these plugin packages are
  utilized, so leave the Recommends for these in the package spec,
  so that if the packages are available in a distro they can get
  installed and utilized.</changelog>
  <changelog author="carnold@suse.com" date="1620388800">- Update to v0.15.0 release
  This is the first release in the new 0.15.x stable series.
  * Minor updates to CI
  * Some compatibility with OpenSSL
  * Change the behavior of handle_dev_start ignoring multiple start requests
  * Ignore multiple calls to handle_dev_stop
  * Pick up newer spice-common to fix a buffer overflow issue
- Dropped patches contained in new tarball
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1648036800">- Add patch to let spice build with gstreamer 1.20.x
  (https://gitlab.freedesktop.org/spice/spice/-/merge_requests/207)
  * fix-build-with-gstreamer-1.20.patch</changelog>
  <changelog author="carnold@suse.com" date="1669723200">- Update to v0.15.1 release
  * This is a bug fix release with no upstream changelog
- Drop fix-build-with-gstreamer-1.20.patch</changelog>
</package>
<package pkgid="fc7a4173675517b639f2969c773996fe8542444117273c9db00ccba78d11eebe2cee30da0fe82a18c804dadcebae1fe0f0ce1b92727f1bcea0f4b215908c52a9" name="libsqlite3-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.51.3" rel="slfo.1.1_1.1"/>
  <changelog author="max@suse.com" date="1746619200">- Update to release 3.49.2:
  * Fix a bug in the NOT NULL optimization of version 3.40.0 that
    can lead to a memory error if abused.
  * Fix the count-of-view optimization so that it does not give an
    incorrect answer for a DISTINCT query.
  * Fix a possible incorrect answer that can result if a UNIQUE
    constraint of a table contains the PRIMARY KEY column and that
    UNIQUE constraint is used by an IN operator.
  * Fix obscure problems with the generate_series() extension
    function.
  * Incremental improvements to the configure/make.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1749470400">- Update to 3.50 (3.50.1):
  * Improved handling and robust output of control characters
  * sqlite3_rsync no longer requires WAL mode and needs less
    bandwidth
  * Bug fixes and optimized JSON handling
  * Performance optimizations and developer visible fixes</changelog>
  <changelog author="max@suse.com" date="1751371200">- Update to 3.50.2:
  * Fix the concat_ws() SQL function so that it includes empty
    strings in the concatenation.
  * Avoid writing frames with no checksums into the wal file if a
    savepoint is rolled back after dirty pages have already been
    spilled into the wal file.
  * Fix the Bitvec object to avoid stack overflow when the
    database is within 60 pages of its maximum size.
  * Fix a problem with UPDATEs on fts5 tables that contain BLOB
    values.
  * Fix an issue with transitive IS constraints on a RIGHT JOIN.
  * CVE-2025-6965, bsc#1246597:
    Raise an error early if the number of aggregate terms in a
    query exceeds the maximum number of columns, to avoid
    downstream assertion faults.
  * Ensure that sqlite3_setlk_timeout() holds the database mutex.</changelog>
  <changelog author="max@suse.com" date="1752753600">- Update to version 3.50.3:
  * Fix a possible memory error that can occur if a query is made
    against against FTS5 index that has been deliberately corrupted
    in a very specific way (CVE-2025-7709, bsc#1254670).
  * Fix the parser so that it ignored SQL comments in all places of
    a CREATE TRIGGER statement. This resolves a problem that was
    introduced by the introduction of the
    SQLITE_DBCONFIG_ENABLE_COMMENTS feature in version 3.49.0.
  * Fix an incorrect answer due to over-optimization of an AND
    operator.</changelog>
  <changelog author="max@suse.com" date="1754913600">- Update to version 3.50.4:
  * Fix two long-standings cases of the use of uninitialized
    variables in obscure circumstances.</changelog>
  <changelog author="max@suse.com" date="1756209600">- bsc#1248586: Fix icu-enabled build.</changelog>
  <changelog author="max@suse.com" date="1761048000">- bsc#1252217: Add a %license file.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Update to version 3.51.1:
  * Fix incorrect results from nested EXISTS queries caused by the
    optimization in item 6b in the 3.51.0 release.
  * Fix a latent bug in fts5vocab virtual table, exposed by new
    optimizations in the 3.51.0 release
- Changes in version 3.51.0:
  * New macros in sqlite3.h:
  - SQLITE_SCM_BRANCH → the name of the branch from which the
    source code is taken.
  - SQLITE_SCM_TAGS → space-separated list of tags on the source
    code check-in.
  - SQLITE_SCM_DATETIME → ISO-8601 date and time of the source
    code check-in.
  * Two new JSON functions, jsonb_each() and jsonb_tree() work the
    same as the existing json_each() and json_tree() functions
    except that they return JSONB for the "value" column when the
    "type" is 'array' or 'object'.
  * The carray and percentile extensions are now built into the
    amalgamation, though they are disabled by default and must be
    activated at compile-time using the -DSQLITE_ENABLE_CARRAY
    and/or -DSQLITE_ENABLE_PERCENTILE options, respectively.
  * Enhancements to TCL Interface:
  - Add the -asdict flag to the eval command to have it set the
    row data as a dict instead of an array.
  - User-defined functions may now break to return an SQL NULL.
  * CLI enhancements:
  - Increase the precision of ".timer" to microseconds.
  - Enhance the "box" and "column" formatting modes to deal with
    double-wide characters.
  - The ".imposter" command provides read-only imposter tables
    that work with VACUUM and do not require the --unsafe-testing
    option.
  - Add the --ifexists option to the CLI command-line option and
    to the .open command.
  - Limit columns widths set by the ".width" command to 30,000 or
    less, as there is not good reason to have wider columns, but
    supporting wider columns provides opportunity to malefactors.
  * Performance enhancements:
  - Use fewer CPU cycles to commit a read transaction.
  - Early detection of joins that return no rows due to one or
    more of the tables containing no rows.
  - Avoid evaluation of scalar subqueries if the result of the
    subquery does not change the result of the overall expression.
  - Faster window function queries when using
    "BETWEEN :x FOLLOWING AND :y FOLLOWING" with a large :y.
  * Add the PRAGMA wal_checkpoint=NOOP; command and the
    SQLITE_CHECKPOINT_NOOP argument for sqlite3_wal_checkpoint_v2().
  * Add the sqlite3_set_errmsg() API for use by extensions.
  * Add the sqlite3_db_status64() API, which works just like the
    existing sqlite3_db_status() API except that it returns 64-bit
    results.
  * Add the SQLITE_DBSTATUS_TEMPBUF_SPILL option to the
    sqlite3_db_status() and sqlite3_db_status64() interfaces.
  * In the session extension add the sqlite3changeset_apply_v3()
    interface.
  * For the built-in printf() and the format() SQL function, omit
    the leading '-' from negative floating point numbers if the '+'
    flag is omitted and the "#" flag is present and all displayed
    digits are '0'. Use '%#f' or similar to avoid outputs like
    '-0.00' and instead show just '0.00'.
  * Improved error messages generated by FTS5.
  * Enforce STRICT typing on computed columns.
  * Improved support for VxWorks
  * JavaScript/WASM now supports 64-bit WASM. The canonical builds
    continue to be 32-bit but creating one's own 64-bit build is
    now as simple as running "make".
  * Improved resistance to database corruption caused by an
    application breaking Posix advisory locks using close().</changelog>
  <changelog author="max@suse.com" date="1769083200">- Update to version 3.51.2:
  * bsc#1259619, CVE-2025-70873: zipfile extension may disclose
    uninitialized heap memory during inflation.
  * Fix an obscure deadlock in the new broken-posix-lock detection
    logic.
  * Fix multiple problems in the EXISTS-to-JOIN optimization.
  * Other minor bug fixes.</changelog>
  <changelog author="max@suse.com" date="1773403200">- Update to version 3.51.3:
  * Fix the WAL-reset database corruption bug:
    https://sqlite.org/wal.html#walresetbug
  * Other minor bug fixes.</changelog>
</package>
<package pkgid="1f9156ea6979f3a7872c9f5ab0001b60798ad3d0afd223d5e826d8767dd940dcb273bbb4a250fc3fd552c22454684b496a5a5e94102ccadafd0c7eef4e88303c" name="libssh-debugsource" arch="aarch64">
  <version epoch="0" ver="0.10.6" rel="slfo.1.1_5.1"/>
  <changelog author="dmueller@suse.com" date="1683374400">- update to 0.10.5:
  * Fix CVE-2023-1667: a NULL dereference during rekeying with
    algorithm guessing
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions.
  * Fix several memory leaks in GSSAPI handling code
  * Escape braces in ProxyCommand created from ProxyJump options
    for zsh compatibility.
  * Fix pkg-config path relocation for MinGW
  * Improve doxygen documentation
  * Fix build with cygwin due to the glob support
  * Do not enqueue outgoing packets after sending
    SSH2_MSG_NEWKEYS
  * Add support for SSH_SUPPRESS_DEPRECATED
  * Avoid functions declarations without prototype to build with
    clang 15
  * Fix spelling issues
  * Avoid expanding KnownHosts, ProxyCommands and IdentityFiles
    repetitively
  * Add support sk-* keys through configuration
  * Improve checking for Argp library
  * Log information about received extensions
  * Correctly handle rekey with delayed compression
  * Move the EC keys handling to OpenSSL 3.0 API
  * Record peer disconnect message
  * Avoid deadlock when write buffering occurs and we call poll
    recursively to flush the output buffer
  * Disable preauthentication compression by default
  * Add accidentally removed default compile flags
  * Solve incorrect parsing of ProxyCommand option</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1691150400">- Add fix to spec file for the incorrect include path as a result
  of the default openSSH move to /usr/etc, (boo#1211718).</changelog>
  <changelog author="pmonreal@suse.com" date="1695643200">- Enable crypto-policies support: [bsc#1211301]
  * Rebase libssh_client.config libssh_server.config</changelog>
  <changelog author="asn@cryptomilk.org" date="1702987200">- Update to version 0.10.6
  https://www.libssh.org/2023/12/18/libssh-0-10-6-and-libssh-0-9-8-security-releases/
- Fix CVE-2023-6004: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (bsc#1218209)
- Fix CVE-2023-48795: prefix truncation breaking ssh channel integrity (bsc#1218126)
- Fix CVE-2023-6918: Added Missing checks for return values for digests (bsc#1218186)</changelog>
  <changelog author="asn@cryptomilk.org" date="1703332800">- Fix regression parsing IPv6 addresses provided as hostname
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch
- Fix CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend (bsc#1245317)
  * Add patch libssh-CVE-2025-5987.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-5351: Double free in functions exporting keys (bsc#1245312)
  * Add patch libssh-CVE-2025-5351.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1773316800">- CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler  (bsc#1259377)
  Added libssh-CVE-2026-3731.patch</changelog>
</package>
<package pkgid="c041ee30c121147db0188b60f02b71fd0e36919dd4d28abfe09c0eca2d53ce5e90564f07553f86af656e6ae7e78d440f2b135eb34bd363fc2e499f33c76daf61" name="libssh2-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="slfo.1.1_1.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1552996800">- Version update to 1.8.1:
  Bug Fixes:
  * [bsc#1128471, CVE-2019-3855] Integer overflow when reading a specially
    crafted packet
  * [bsc#1128493, CVE-2019-3863] Integer overflow in userauth_keyboard_interactive
    with a number of extremely long prompt strings
  * [bsc#1128472, CVE-2019-3856] Integer overflow if the server sent an extremely
    large number of keyboard prompts
  * [bsc#1128490, CVE-2019-3861] Out of bounds read when processing a specially
    crafted packet
  * [bsc#1128474, CVE-2019-3857] Integer overflow when receiving a specially
    crafted exit signal message channel packet
  * [bsc#1128492, CVE-2019-3862] Out of bounds read when receiving a specially
    crafted exit status message channel packet
  * [bsc#1128476, CVE-2019-3858] Zero byte allocation when reading a specially
    crafted SFTP packet
  * [bsc#1128481, CVE-2019-3860] Out of bounds reads when processing specially
    crafted SFTP packets
  * [bsc#1128480, CVE-2019-3859] Out of bounds reads in _libssh2_packet_require(v)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561032000">- Version update to 1.9.0:
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patch libssh2-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="7020a380eefe6504040e72f7d3d4e49f8d6ef4d5f7dfeb80998a5ad99be225c1c40a54725a943be273b147cdf77bd8441effb653a368aea5dd8b6b5b7263f65a" name="libssh2_org-debugsource" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="slfo.1.1_1.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1552996800">- Version update to 1.8.1:
  Bug Fixes:
  * [bsc#1128471, CVE-2019-3855] Integer overflow when reading a specially
    crafted packet
  * [bsc#1128493, CVE-2019-3863] Integer overflow in userauth_keyboard_interactive
    with a number of extremely long prompt strings
  * [bsc#1128472, CVE-2019-3856] Integer overflow if the server sent an extremely
    large number of keyboard prompts
  * [bsc#1128490, CVE-2019-3861] Out of bounds read when processing a specially
    crafted packet
  * [bsc#1128474, CVE-2019-3857] Integer overflow when receiving a specially
    crafted exit signal message channel packet
  * [bsc#1128492, CVE-2019-3862] Out of bounds read when receiving a specially
    crafted exit status message channel packet
  * [bsc#1128476, CVE-2019-3858] Zero byte allocation when reading a specially
    crafted SFTP packet
  * [bsc#1128481, CVE-2019-3860] Out of bounds reads when processing specially
    crafted SFTP packets
  * [bsc#1128480, CVE-2019-3859] Out of bounds reads in _libssh2_packet_require(v)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561032000">- Version update to 1.9.0:
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patch libssh2-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="c61daa1d6c511356f665965338f22cc8e5ece76ec49e27fb45efde768b24a190d358bb3fe2b3c6898439a996630afe4eaaf3be125ec309ea3b252d7f9aa2d4ba" name="libssh4-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.10.6" rel="slfo.1.1_5.1"/>
  <changelog author="dmueller@suse.com" date="1683374400">- update to 0.10.5:
  * Fix CVE-2023-1667: a NULL dereference during rekeying with
    algorithm guessing
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions.
  * Fix several memory leaks in GSSAPI handling code
  * Escape braces in ProxyCommand created from ProxyJump options
    for zsh compatibility.
  * Fix pkg-config path relocation for MinGW
  * Improve doxygen documentation
  * Fix build with cygwin due to the glob support
  * Do not enqueue outgoing packets after sending
    SSH2_MSG_NEWKEYS
  * Add support for SSH_SUPPRESS_DEPRECATED
  * Avoid functions declarations without prototype to build with
    clang 15
  * Fix spelling issues
  * Avoid expanding KnownHosts, ProxyCommands and IdentityFiles
    repetitively
  * Add support sk-* keys through configuration
  * Improve checking for Argp library
  * Log information about received extensions
  * Correctly handle rekey with delayed compression
  * Move the EC keys handling to OpenSSL 3.0 API
  * Record peer disconnect message
  * Avoid deadlock when write buffering occurs and we call poll
    recursively to flush the output buffer
  * Disable preauthentication compression by default
  * Add accidentally removed default compile flags
  * Solve incorrect parsing of ProxyCommand option</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1691150400">- Add fix to spec file for the incorrect include path as a result
  of the default openSSH move to /usr/etc, (boo#1211718).</changelog>
  <changelog author="pmonreal@suse.com" date="1695643200">- Enable crypto-policies support: [bsc#1211301]
  * Rebase libssh_client.config libssh_server.config</changelog>
  <changelog author="asn@cryptomilk.org" date="1702987200">- Update to version 0.10.6
  https://www.libssh.org/2023/12/18/libssh-0-10-6-and-libssh-0-9-8-security-releases/
- Fix CVE-2023-6004: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (bsc#1218209)
- Fix CVE-2023-48795: prefix truncation breaking ssh channel integrity (bsc#1218126)
- Fix CVE-2023-6918: Added Missing checks for return values for digests (bsc#1218186)</changelog>
  <changelog author="asn@cryptomilk.org" date="1703332800">- Fix regression parsing IPv6 addresses provided as hostname
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch
- Fix CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend (bsc#1245317)
  * Add patch libssh-CVE-2025-5987.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-5351: Double free in functions exporting keys (bsc#1245312)
  * Add patch libssh-CVE-2025-5351.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1773316800">- CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler  (bsc#1259377)
  Added libssh-CVE-2026-3731.patch</changelog>
</package>
<package pkgid="775c29f65d07400d85284a085b7bc84ca12c658881d0ba0ff7cafc6880f41d4baee0b2448d1e78a886a6f43790a9dff092b1e9d2c0c3cee94a848acbe8c85d4a" name="libsss_certmap0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.5" rel="slfo.1.1_4.1"/>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="8e3962bb02cd469debb2d94382299395a17e8f5b579fec33c861d06068099bf5c1b0c094b3c3fb780428148732f0352450bfd7ba46bdf130fea47ae1cb071f50" name="libsss_idmap0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.5" rel="slfo.1.1_4.1"/>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="37d50161b38a146fcaa1936015ec8bf39de6a1c23b7990fd12cbe88864ab49ca1724b5ea96db672f4d267c1132abbbf284b6bb7cf01a5ba96b69d841f92d3587" name="libstdc++6-debuginfo" arch="aarch64">
  <version epoch="0" ver="14.3.0+git11799" rel="slfo.1.1_1.1"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="6e4a11240fde11554920bceb464bbe1109aca408552257e46ce9898e370fa26498eb90d6bc064fa96240b898fc20f6e481c300d1885cc49b588649d209bd08b5" name="libstemmer1d-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.2.0" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1620734400">- Initial package, version 2.1.0, based on work by darix and dabian</changelog>
  <changelog author="dimstar@opensuse.org" date="1696939200">- Update to version 2.2.0:
  + New code generator: Ada generator.
  + Javascript: Fix generated code to use integer division rather
    than floating point division.
  + Python:
  - Python 2 is no longer actively supported.
  - Fix code generated for division.  Previously the Python code
    we generated used integer division but rounded negative
    fractions towards negative infinity rather than zero under
    Python 2, and under Python 3 used floating point division.
  + For more information, see shipped NEWS file.
- Rebase build-options.diff and shared-library.diff.
- Bump libstemmer.so.0d to libstemmer.so.1d: we have no guarantee
  that upstreams static-only-library maintains any kind of ABI.</changelog>
</package>
<package pkgid="c74ce7f4b7ee4ee498b80cf8623a5a3160d5695e6aba81ee3b16154249ae8d22edcfe27c56a92a9666acdb057bf813ea656bd753ee2e6c65ba763bafb91e44b5" name="libsubid4-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.15.1" rel="slfo.1.1_1.3"/>
  <changelog author="mvetter@suse.com" date="1696593600">- Update to 4.14.1:
  Build system: Merge libshadow and libmisc into a single libshadow.
  This fixes problems in the linker, which were reported at least
  in Gentoo. #791
- Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- Update to 4.14.2:
  * libshadow:
    + Fix build with musl libc.
    + Avoid NULL dereference.
    + Update utmp at an initial login
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
  * Manual:
    + Document --prefix in chage(1), chpasswd(8), and passwd(1)
- Drop upstreamed shadow-4.14.0-selinux-labels.patch</changelog>
  <changelog author="mvetter@suse.com" date="1704801600">- bsc#1199026 bsc#1203823:
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="mvetter@suse.com" date="1705406400">- Update to 4.14.3:
  * libshadow:
    + Avoid null pointer dereference (#904)</changelog>
  <changelog author="mvetter@suse.com" date="1707739200">- Update to 4.14.4:
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
  * libshadow:
    + Fix build error (parameter name omitted).
    + Fix off-by-one bug.
    + Remove warning.
- Add shadow-4.14.4-chgpasswd-typo.patch: to fix build. See #926
- Update patch macro `patchN` -&gt; `patch -P N`</changelog>
  <changelog author="mvetter@suse.com" date="1707825600">- Update to 4.14.5:
  * Build system:
    + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had
    been deleted from a Makefile variable, but it should have been
    chpasswd.
- Remove shadow-4.14.4-chgpasswd-typo.patch</changelog>
  <changelog author="mvetter@suse.com" date="1709467200">- Update to 4.14.6:
  * login(1):
    + Fix off-by-one bugs.
  * passwd(1):
    + Don't silently truncate passwords of length &gt;= 200 characters.
    Instead, accept a length of PASS_MAX, and reject longer ones.
  * libshadow:
    + Fix calculation in strtoday(), which caused a wrong half-day
    offset in some cases (bsc#1176006)
    + Fix parsing of dates in get_date() (bsc#1176006)
    + Use utmpx instead of utmp. This fixes a regression introduced in
    4.14.0.</changelog>
  <changelog author="mvetter@suse.com" date="1710072000">- Update to 4.15.0
  * libshadow:
    + Use utmpx instead of utmp. This fixes a regression introduced
    in 4.14.0.
    + Fix build error (parameter name omitted).
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
    + Merge libshadow and libmisc into a single libshadow. This fixes
    problems in the linker, which were reported at least in Gentoo.
    + Fix build with musl libc.
    + Support out of tree builds
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
- Update Serge Hallyns GPG key
- Update shadow-login_defs-unused-by-pam.patch</changelog>
  <changelog author="mvetter@suse.com" date="1711022400">- Add shadow-4.15.0-fix-definition.patch:
  Fix error messages about config options.
  See gh/shadow-maint/shadow#967</changelog>
  <changelog author="mvetter@suse.com" date="1711281600">- Update to 4.15.1:
  * Fix a bug that caused spurious error messages about unknown
    login.defs configuration options #967
  * Adding checks for fd omission #964
  * Use temporary stat buffer #974
  * Fix wrong french translation #975
- Drop shadow-4.15.0-fix-definition.patch</changelog>
</package>
<package pkgid="6071836650dcab59260bce679841a52c1a2822da6bb03643c5977cf173b9ff4d50a0710da649b9aa443cfe02f8fed3364bfce309d48494ec5b9aa4d59d54b1ce" name="libsystemd0-debuginfo" arch="aarch64">
  <version epoch="0" ver="254.27" rel="slfo.1.1_4.1"/>
  <changelog author="fbui@suse.com" date="1753963200">- Remove the script used to help migrating the language and locale settings
  located in /etc/sysconfig/language on old systems to the systemd default
  locations (bsc#1247074)
  The script was introduced more than 7 years ago and all systems running TW
  should have been migrated since then. Moreover the installer supports the
  systemd default locations since approximately SLE15.</changelog>
  <changelog author="fbui@suse.com" date="1758110400">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196800">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- systemd-update-helper: backport commit 2d0af8bc354f4a1429ce
  Since user@.service has `Type=notify-reload` (making the reloading process
  synchronous) and reloading implies reexecuting with `ReloadSignal=RTMIN+25`,
  reexecuting user managers synchronously can be achieved with `systemctl reload
  user@*.service" now.</changelog>
  <changelog author="fbui@suse.com" date="1765800001">- Sync systemd-update-helper with the version shipped in Base:System
  This includes the following changes:
  - systemd-update-helper: do not stop or disable services when they are migrated
    to other packages. This can occur during package renaming or splitting.
  - systemd-update-helper: Fix invalid use of "break" in case statement
  - systemd-update-helper: fix regression introduced when support for package
    renaming/splitting was added (bsc#1245551)</changelog>
  <changelog author="fbui@suse.com" date="1765800002">- Import commit 9ecd16228492f44212e2771bec11ec78245b4094
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Import commit 8bbac1d508acb8aa4e7262f47c7f4076b8350f72
  8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305601">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit aef6e11921f8c46a2b7ee8cfab024c9c641d74d8
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit a943e3ce2f655b8509038e31f03f5ded18f24683
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="1f1bd7774cee74c2a9f473055f393e998133e740665cb677469f719996c64838e8c5f318b9966826dd3a66766d30f174996628cb3853d88d7f1eb100e8e1c688" name="libtalloc2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.2" rel="slfo.1.1_1.2"/>
  <changelog author="nopower@suse.com" date="1583496000">- Upgrade to 2.3.1
  + Upgrade waf to 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/talloc: clang: Fix 'Value stored during its initialization
    is never read'.
  + Spelling fixes s/recieved/received/
  + talloc: ASAN fix for test_magic_protection.
  +  talloc: ASAN fix for test_rusty
  +  talloc: ASAN fix for test_pool_nest
  +  talloc: ASAN fix for test_talloc_free_in_destructor
  +  talloc: ASAN fix for test_realloc_on_destructor_parent</changelog>
  <changelog author="dimstar@opensuse.org" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="scabrero@suse.de" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="nopower@suse.com" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="scabrero@suse.de" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="asn@cryptomilk.org" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dimstar@opensuse.org" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="nopower@suse.com" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
</package>
<package pkgid="6dccb893e3ffc157f46db37f087ed06d47559b77c30a69e0a5e4c73c3bfe9828e46be089cc59a82d43680523c34a2473f713cd171b05d71971fbfea347d62fac" name="libtasn1-6-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.19.0" rel="slfo.1.1_3.1"/>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564574400">- libtasn1 4.14:
  * New #defines for version checking
  * other developer visible changes
- drop libtasn1-object-id-recursion.patch, incorporating the
  upstream fix for boo#1105435 CVE-2018-1000654</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1574424000">- libtasn1 4.15.0:
  * The generated tree no longer contains ASN.1 built-in types
    even if they are explicitly defined in the description.
    Previously a warning was printed when these types were seen,
    now they are ignored.
  * Several fixes in ASN.1 definition parser, preventing several
    crashes and leaks in the tools due to improper ASN.1.
  * Switched to semantic versioning</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1580644800">- libtasn1 4.16.0:
  * asn1_decode_simple_ber: added support for constructed definite
    octet strings
  * asn1_get_object_id_der: enhance the range of decoded OIDs
  * asn1_object_id_der: New function</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621252800">- libtasn1 4.17.0:
  * Print deprecation messages for deprecated macros
  * Fix some clang issues due to illegal pointers
  * Restore handling of SIZE nodes
  * Fix memory leak caught by oss-fuzz
  * Gtk-doc fixes
  * Fix bugs unveiled by Static Analysis
  * Update gnulib files and many build fixes
- move tools to -tools packages and clarify licenses
- update upstream signing keyring
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636632000">- libtasn1 4.18.0:
  * Improve GTK-DOC manual
  * Improve --help and --version for tools with gnulib
  * Update gnulib files and various maintenance fixes
- drop libtasn1-rpmlintrc due to no longer being required on TW</changelog>
  <changelog author="pmonreal@suse.com" date="1636632001">- Update libtasn1.keyring with upstream keys</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1661342400">- libtasn1 4.19.0:
  * Clarify libtasn1.map license
  * Fix ETYPE_OK out of bounds read
  * Update gnulib files and various maintenance fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1739188800">- Security fix: [bsc#1236878, CVE-2024-12133]
  * Potential DoS in handling of numerous SEQUENCE OF or SET OF elements
  * Add libtasn1-CVE-2024-12133.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Security fix: [bsc#1256341, CVE-2025-13151]
  * Stack-based buffer overflow. The function asn1_expend_octet_string()
    fails to validate the size of input data resulting in a buffer overflow.
  * Add libtasn1-CVE-2025-13151.patch</changelog>
</package>
<package pkgid="0138a628d6eb2d5b0017a426a57161de8deed368aacb7cba028ad1cb4d6f0041fe2df33f477a1524a39edc3fb1478ab0980c45d9f1e1c70bda4ff1a491244f72" name="libtasn1-debugsource" arch="aarch64">
  <version epoch="0" ver="4.19.0" rel="slfo.1.1_3.1"/>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564574400">- libtasn1 4.14:
  * New #defines for version checking
  * other developer visible changes
- drop libtasn1-object-id-recursion.patch, incorporating the
  upstream fix for boo#1105435 CVE-2018-1000654</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1574424000">- libtasn1 4.15.0:
  * The generated tree no longer contains ASN.1 built-in types
    even if they are explicitly defined in the description.
    Previously a warning was printed when these types were seen,
    now they are ignored.
  * Several fixes in ASN.1 definition parser, preventing several
    crashes and leaks in the tools due to improper ASN.1.
  * Switched to semantic versioning</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1580644800">- libtasn1 4.16.0:
  * asn1_decode_simple_ber: added support for constructed definite
    octet strings
  * asn1_get_object_id_der: enhance the range of decoded OIDs
  * asn1_object_id_der: New function</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621252800">- libtasn1 4.17.0:
  * Print deprecation messages for deprecated macros
  * Fix some clang issues due to illegal pointers
  * Restore handling of SIZE nodes
  * Fix memory leak caught by oss-fuzz
  * Gtk-doc fixes
  * Fix bugs unveiled by Static Analysis
  * Update gnulib files and many build fixes
- move tools to -tools packages and clarify licenses
- update upstream signing keyring
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636632000">- libtasn1 4.18.0:
  * Improve GTK-DOC manual
  * Improve --help and --version for tools with gnulib
  * Update gnulib files and various maintenance fixes
- drop libtasn1-rpmlintrc due to no longer being required on TW</changelog>
  <changelog author="pmonreal@suse.com" date="1636632001">- Update libtasn1.keyring with upstream keys</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1661342400">- libtasn1 4.19.0:
  * Clarify libtasn1.map license
  * Fix ETYPE_OK out of bounds read
  * Update gnulib files and various maintenance fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1739188800">- Security fix: [bsc#1236878, CVE-2024-12133]
  * Potential DoS in handling of numerous SEQUENCE OF or SET OF elements
  * Add libtasn1-CVE-2024-12133.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Security fix: [bsc#1256341, CVE-2025-13151]
  * Stack-based buffer overflow. The function asn1_expend_octet_string()
    fails to validate the size of input data resulting in a buffer overflow.
  * Add libtasn1-CVE-2025-13151.patch</changelog>
</package>
<package pkgid="861409da8714728925bcc1df39926e937d3c7cf72ca72aee9af9ae0c9c635ebffb1f1e3722a41bb742c45ba175792ff2618ec67329f97588a3548fbee8caa6f5" name="libtdb1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.10" rel="slfo.1.1_1.2"/>
  <changelog author="dmulder@suse.com" date="1548244800">- Update to 1.3.17</changelog>
  <changelog author="dmulder@suse.com" date="1551787200">- Update to 1.3.18
  + Fix build problems with older python versions.
  + C99 build fixes.
  + Fix standalone build of tdb.</changelog>
  <changelog author="jmcdonough@suse.com" date="1570104000">- Update to version 1.4.2
  + Build fixes
  + Improve the performance by inlining the tdb_oob() checks
  + Do not propogate any errors from tdb_repack() to
    tdb_transaction_commit();  (bso#13952)
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + New minor version to allow Samba 4.10 to release a tdb if
    required from that branch</changelog>
  <changelog author="nopower@suse.com" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="jcnengel@gmail.com" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="dmueller@suse.com" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="scabrero@suse.de" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="nopower@suse.com" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
</package>
<package pkgid="f8fd30101b9095fca8def9b599f481e73b7306f041f9e6768d52bafe8ed4300edc6e20ccbbc2b60cadab6848368b38855f8b6e3e73ba67bc598dd90d5f6da2e2" name="libtevent0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.16.1" rel="slfo.1.1_1.2"/>
  <changelog author="mcepl@suse.com" date="1574769600">- Update to 0.10.1 ... make build with Python 3.8 working again
  (new waf).</changelog>
  <changelog author="nopower@suse.com" date="1583582400">- Update to version 0.10.2
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="dmulder@suse.com" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="nopower@suse.com" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="scabrero@suse.de" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="dimstar@opensuse.org" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="nopower@suse.com" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="jgwang@suse.com" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
</package>
<package pkgid="def07d7d1ac3b5f124a964c06bb7bdd76e34a2d744b5db297b4dd9de638b73159a224dcb3704ca49fa307d1142f740bfd824936c9a9b9263a0dcb7ef1ac14710" name="libtextstyle0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.21.1" rel="slfo.1.1_2.1"/>
  <changelog author="christian.voegl@suse.com" date="1594123200">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1595937600">- Update to 0.21:
  * Programming languages support:
  - Shell:
    o xgettext now recognizes and ignores 'env' invocations and environment
    variable assignments in front of commands.
  - Java:
    o xgettext now recognizes format strings in the Formatter syntax.  They
    are marked as 'java-printf-format' in POT and PO files.
    o xgettext now recognizes text blocks as string literals.
  - JavaScript:
    xgettext parses JSX expressions more reliably.
  - Ruby:
    o xgettext now supports Ruby.
    o 'msgfmt -c' now verifies the syntax of translations of Ruby format
    strings.
  * Improvements for translators:
  - When msgfmt writes a MO file, it now does so in such a way that processes
    that are currently using an older copy of the MO file will not crash.
  * Libtextstyle:
  - Added support for emitting hyperlinks.
  - New API for doing formatted output.
  - The example programs support the NO_COLOR environment variable.</changelog>
  <changelog author="mcalabkova@suse.com" date="1596801600">- Add multiple new features (bsc#1165138)
- Add patches:
  * 0001-msgcat-Add-feature-to-use-the-newest-po-file.patch
  * 0002-msgcat-Merge-headers-when-use-first.patch
- Reintroduce autoreconf call</changelog>
  <changelog author="dmueller@suse.com" date="1611316800">- fixup libtextstyle autofoo with adding
  use-acinit-for-libtextstyle.patch</changelog>
  <changelog author="mgorse@suse.com" date="1638187200">- Remove libcroco from BuildRequires: it is now bundled internally.</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Added patch:
  * gettext-0.21-jdk17.patch
    + Build with java source and target levels 1.8
    + Allows building with JDK17
    + Fixes build in Factory</changelog>
  <changelog author="coolo@suse.com" date="1665835200">- Update to Version 0.21.1
  * Runtime behaviour:
  - On AIX, locale names with a script or with an uppercase language are now
    supported.
    For example, sr_Cyrl_RS.UTF-8 is treated like sr_RS.UTF-8@cyrillic, and
    EN_US.UTF-8 is treated like en_US.UTF-8.
  * The base Unicode standard is now updated to 14.0.0.
  * Portability:
  - Building on macOS 11/arm64 is now supported.
  - Building on Linux/powerpc64le with glibc ≥ 2.35 is now supported.</changelog>
  <changelog author="dmueller@suse.com" date="1666612800">- update keyring for the last version update</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="sbrabec@suse.com" date="1740571200">- Fix crash while handling po files with malformed header and
  process them properly
  (0003-Fix-malformed-header-processing.patch, boo#1227316).</changelog>
</package>
<package pkgid="48205f1f36da95f81a38db6cef66f583e118456f04008f0b1480721c9b01174cfaef3889b26f6a0ed26ded3bad2627adb1aa2d8bc7d2b0b39d84a4a8fea9a193" name="libthai-debugsource" arch="aarch64">
  <version epoch="0" ver="0.1.29" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Update to version 0.1.22:
  + Updated word break dictionary.
  + Improve word breaking performance by 0.38%.
  + No timestamp on Doxygen-generated doc.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447329600">- Update to version 0.1.23:
  + Correctly check doxygen version on configure.
  + Threadsafe word breaking.
  + Improve word breaking performance by 0.1%.
  + Updated word break dictionary.</changelog>
  <changelog author="dimstar@opensuse.org" date="1448884800">- Update to version 0.1.24:
  + Fix infinite loop caused by optimization in previous version.
    (deb#805703).
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467374400">- Update to version 0.1.25:
  + New word break APIs for more thread-safety.
  + Fix compilation error and warning with GCC 6.
  + Do not test word breaking if dictionary is disabled.
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481889600">- Update to version 0.1.26:
  + Updated word break dictionary.</changelog>
  <changelog author="fezhang@suse.com" date="1509537600">- Update to version 0.1.27:
  + Fix another reproducibility issue in the generated
    documentation, caught by Debian Reproducible.
  + Updated word break dictionary.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update descriptions.</changelog>
  <changelog author="dmueller@suse.com" date="1598270400">- update to 0.1.28:
  * Fix missing includes in wchar-related headers.
  * More C90 (ANSI C) compliance.
  * Updated word break dictionary.</changelog>
  <changelog author="andythe_great@pm.me" date="1640088000">- Update to version 0.1.29.
  * Rewritten thbrk test.
  * More compliance with UAX#14 (Unicode Line Breaking Algorithm)
    for thbrk.
  * Fix a typo in TIS-620 character name in tis.h.
  * Updated word break dictionary.</changelog>
</package>
<package pkgid="3180abc70116d73170d85ec0b289fbb725087880011b1a416e7a8bd25ef124c8a3be0c42f5ffd36cc2333e8383849e03c8d5f6c1abddea8c5dd016edc2ec953b" name="libthai0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.1.29" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Update to version 0.1.22:
  + Updated word break dictionary.
  + Improve word breaking performance by 0.38%.
  + No timestamp on Doxygen-generated doc.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447329600">- Update to version 0.1.23:
  + Correctly check doxygen version on configure.
  + Threadsafe word breaking.
  + Improve word breaking performance by 0.1%.
  + Updated word break dictionary.</changelog>
  <changelog author="dimstar@opensuse.org" date="1448884800">- Update to version 0.1.24:
  + Fix infinite loop caused by optimization in previous version.
    (deb#805703).
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467374400">- Update to version 0.1.25:
  + New word break APIs for more thread-safety.
  + Fix compilation error and warning with GCC 6.
  + Do not test word breaking if dictionary is disabled.
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481889600">- Update to version 0.1.26:
  + Updated word break dictionary.</changelog>
  <changelog author="fezhang@suse.com" date="1509537600">- Update to version 0.1.27:
  + Fix another reproducibility issue in the generated
    documentation, caught by Debian Reproducible.
  + Updated word break dictionary.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update descriptions.</changelog>
  <changelog author="dmueller@suse.com" date="1598270400">- update to 0.1.28:
  * Fix missing includes in wchar-related headers.
  * More C90 (ANSI C) compliance.
  * Updated word break dictionary.</changelog>
  <changelog author="andythe_great@pm.me" date="1640088000">- Update to version 0.1.29.
  * Rewritten thbrk test.
  * More compliance with UAX#14 (Unicode Line Breaking Algorithm)
    for thbrk.
  * Fix a typo in TIS-620 character name in tis.h.
  * Updated word break dictionary.</changelog>
</package>
<package pkgid="5e4c5491942c14fb4b42a8bde8fa193579b87378cf8854ec2fe2c44f52520b6c20dfa26f27ee4c437c374d1b095046de6cfbab3f55d75b25d69e5da49dfc28dc" name="libtheora-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="slfo.1.1_1.3"/>
  <changelog author="adrian@suse.de" date="1253966400">- update to version 1.1.0
  * minor fixes since beta 3</changelog>
  <changelog author="adrian@suse.de" date="1254916800">- update to version 1.1.1
  * minor bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Disable doxygen documentation to avoid build dates in
  - devel packages.
- add missing BuildRequires libpng-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1311768000">- remove fno-strict-aliasing from CFLAGS as it is no longer
  needed and will slow down things.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- remove examples that fail to build, also SDL and png
  are only needed for those, so remove from buildrequires.</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="idonmez@suse.com" date="1369310400">- Update descriptions, thanks to Perry Werneck</changelog>
  <changelog author="jengelh@inai.de" date="1409400000">- Split libtheoradec/enc from libtheora0 as they have different
  SO numbers
- Trim huge description; improve on RPM group classificaiton</changelog>
  <changelog author="mcepl@suse.com" date="1624276800">- Remove completely unnecessary python BR</changelog>
</package>
<package pkgid="82defbb95d5697ed9c15ab6de25f14ef870cb7088d9ad4d651d80a21b1afeae24f235de5ccb4ba4d1cd235376aec5fa8c9a30d8b4b4ce5a198d2ac2476bdf295" name="libtheoradec1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="slfo.1.1_1.3"/>
  <changelog author="adrian@suse.de" date="1253966400">- update to version 1.1.0
  * minor fixes since beta 3</changelog>
  <changelog author="adrian@suse.de" date="1254916800">- update to version 1.1.1
  * minor bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Disable doxygen documentation to avoid build dates in
  - devel packages.
- add missing BuildRequires libpng-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1311768000">- remove fno-strict-aliasing from CFLAGS as it is no longer
  needed and will slow down things.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- remove examples that fail to build, also SDL and png
  are only needed for those, so remove from buildrequires.</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="idonmez@suse.com" date="1369310400">- Update descriptions, thanks to Perry Werneck</changelog>
  <changelog author="jengelh@inai.de" date="1409400000">- Split libtheoradec/enc from libtheora0 as they have different
  SO numbers
- Trim huge description; improve on RPM group classificaiton</changelog>
  <changelog author="mcepl@suse.com" date="1624276800">- Remove completely unnecessary python BR</changelog>
</package>
<package pkgid="a542f3e29b27af792fa41efe126c5e92645f1d4ecea5c6b2de94cdfb8e195daf625827e34faddc45ad78ef9c72196b347f5ed960f5822cf9c846684ca549bdb4" name="libtheoraenc1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="slfo.1.1_1.3"/>
  <changelog author="adrian@suse.de" date="1253966400">- update to version 1.1.0
  * minor fixes since beta 3</changelog>
  <changelog author="adrian@suse.de" date="1254916800">- update to version 1.1.1
  * minor bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Disable doxygen documentation to avoid build dates in
  - devel packages.
- add missing BuildRequires libpng-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1311768000">- remove fno-strict-aliasing from CFLAGS as it is no longer
  needed and will slow down things.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- remove examples that fail to build, also SDL and png
  are only needed for those, so remove from buildrequires.</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="idonmez@suse.com" date="1369310400">- Update descriptions, thanks to Perry Werneck</changelog>
  <changelog author="jengelh@inai.de" date="1409400000">- Split libtheoradec/enc from libtheora0 as they have different
  SO numbers
- Trim huge description; improve on RPM group classificaiton</changelog>
  <changelog author="mcepl@suse.com" date="1624276800">- Remove completely unnecessary python BR</changelog>
</package>
<package pkgid="58ce2421491a41b4514232676c13a4f4a2a9e6100fbcf3b6b0d38ea59a24b3fdfc31e324a65a8ceddfaa8abc7425fe958c5713914b9565191bb803d77b720804" name="libtiff6-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.7.1" rel="slfo.1.1_1.1"/>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1758196800">- Update to 4.7.1:
  Software configuration changes:
  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is &lt; 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)
  Library changes:
  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.
  Bug fixes:
  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
  * Do not error out on a tag whose tag count value is zero, just issue a warning.
    Fix parsing a private tag 0x80a6 (fixes issue #647)
  * TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24
    Fixes https://github.com/OSGeo/gdal/issues/10875)
  * tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
  * Fix writing a Predictor=3 file with non-native endianness
  * _TIFFVSetField(): fix potential use of unallocated memory (out-of-bounds
  * read / nullptr dereference) in case of out-of-memory situation when dealing with
    custom tags (fixes issue #663)
  * tif_fax3.c: Error out for CCITT fax encoding if SamplesPerPixel is not equal 1 and
    PlanarConfiguration = Contiguous (fixes issue #26)
  * tif_fax3.c: error out after a number of times end-of-line or unexpected bad code
    words have been reached. (fixes issue #670)
  * Fix memory leak in TIFFSetupStrips() (fixes issue #665)
  * tif_zip.c: Provide zlib allocation functions. Otherwise for zlib built with
  - DZ_SOLO inflating will fail.
  * Fix memory leak in _TIFFSetDefaultCompressionState. (fixes issue #676)
  * tif_predict.c: Don’t overwrite input buffer of TIFFWriteScanline() if "prediction"
    is enabled. Use extra working buffer in PredictorEncodeRow(). (fixes issue #5)
  * tif_getimage.c: update some integer overflow checks (fixes issue #79)
  * tif_getimage.c: Fix buffer underflow crash for less raster rows at
    TIFFReadRGBAImageOriented() (fixes issue #704, bsc#1250413, CVE-2025-9900)
  * TIFFReadRGBAImage(): several fixes to avoid buffer overflows.
  * Correct passing arguments to TIFFCvtIEEEFloatToNative() and TIFFCvtIEEEDoubleToNative()
    if HAVE_IEEEFP is not defined. (fixes issue #699)
  * LZWDecode(): avoid nullptr dereference when trying to read again after EOI marker
    has been found with remaining output bytes (fixes issue #698)
  * TIFFSetSubDirectory(): check _TIFFCheckDirNumberAndOffset() return.
  * TIFFUnlinkDirectory() and TIFFWriteDirectorySec(): clear tif_rawcp when clearing
    tif_rawdata (fixes issue #711)
  * JPEGEncodeRaw(): error out if a previous scanline failed to be written, to avoid
    out-of-bounds access (fixes issue #714)
  * tif_jpeg: Fix bug in JPEGDecodeRaw() if JPEG_LIB_MK1_OR_12BIT is defined for 8/12bit
    dual mode, introduced in libjpeg-turbo 2.2, which was actually released as 3.0.
    Fixes issue #717
  * add assert for TIFFReadCustomDirectory infoarray check.
  * ppm2tiff: Fix bug in pack_words trailing bytes, where last two bytes of each line
    were written wrongly. (fixes issue #467)
  * fax2ps: fix regression of commit 28c38d648b64a66c3218778c4745225fe3e3a06d where
    TIFFTAG_FAXFILLFUNC is being used rather than an output buffer (fixes issue #649)
  * tiff2pdf: Check TIFFTAG_TILELENGTH and TIFFTAGTILEWIDTH (fixes issue #650)
  * tiff2pdf: check h_samp and v_samp for range 1 to 4 to avoid division by zero.
    Fixes issue #654
  * tiff2pdf: avoid null pointer dereference. (fixes issue #741)
  * Improve non-secure integer overflow check (comparison of division result with
    multiplicant) at compiler optimisation in tiffcp, rgb2ycbcr and tiff2rgba.
    Fixes issue #546
  * tiff2rgba: fix some "a partial expression can generate an overflow before it is
    assigned to a broader type" warnings. (fixes issue #682)
  * tiffdither/tiffmedian: Don't skip the first line of the input image. (fixes issue #703)
  * tiffdither: avoid out-of-bounds read identified in issue #733
  * tiffmedian: error out if TIFFReadScanline() fails (fixes issue #707)
  * tiffmedian: close input file. (fixes issue #735)
  * thumbail: avoid potential out of bounds access (fixes issue #715)
  * tiffcrop: close open TIFF files and release allocated buffers before exiting in case
    of error to avoid memory leaks. (fixes issue #716)
  * tiffcrop: fix double-free and memory leak exposed by issue #721
  * tiffcrop: avoid buffer overflow. (fixes issue #740)
  * tiffcrop: avoid nullptr dereference. (fixes issue #734)
  * tiffdump: Fix coverity scan issue CID 1373365: Passing tainted expression *datamem
    to PrintData, which uses it as a divisor or modulus.
  * tiff2ps: check return of TIFFGetFiled() for TIFFTAG_STRIPBYTECOUNTS and
    TIFFTAG_TILEBYTECOUNTS to avoid NULL pointer dereference. (fixes issue #718)
  * tiffcmp: fix memory leak when second file cannot be opened. (fixes issue #718 and issue #729)
  * tiffcp: fix setting compression level for lossless codecs. (fixes issue #730)
  * raw2tiff: close input file before exit (fixes issue #742)
  Tools changes:
  * tiffinfo: add a -W switch to warn about unknown tags.
  * tiffdither: process all pages in input TIFF file.
  Documentation:
  * TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation
    from 5 (LeftTop) to 8 (LeftBottom) in the raster.
  * TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
  * Update "Defining New TIFF Tags" description. (fixes issue #642)
  * Fix return type of TIFFReadEncodedTile()
  * Update the documentation to reflect deprecated typedefs.
  * TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image
    data and not for IFD data.
  * Update documentation on re-entrancy and thread safety.
  * Remove dead links to no more existing Awaresystems web-site.
  * Updating BigTIFF specification and some miscelaneous editions.
  * Replace some last links and remove last todos.
  * Added hints for correct allocation of TIFFYCbCrtoRGB structure and its
    associated buffers. (fixes issue #681)
  * Added chapter to "Using the TIFF Library" with links to handling multi-page TIFF
    and custom directories. (fixes issue #43)
  * update TIFFOpen.rst with the return values of mapproc and unmapproc. (fixes issue #12)
- Drop upstreamed patches:
  * tiff-4.7.0-test_directory.patch
  * tiff-CVE-2025-8176.patch
  * tiff-CVE-2025-8177.patch
  * tiff-4.7.0-bsc1243503.patch
  * tiff-CVE-2025-8534.patch
  * tiff-CVE-2025-9165.patch
  * tiff-CVE-2024-13978.patch
  * tiff-CVE-2025-8961.patch</changelog>
</package>
<package pkgid="4ffde469ffc345a63f7b247b1b0a5789760231cf649fb1c1b0d1843c1c25f2bd87d376dda77fa7638df334e24d400a2323b14a5f0083fc14a2ccc7c6e0725c60" name="libtirpc-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="slfo.1.1_1.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- install libraries to %{_libdir} (boo#1029961)</changelog>
  <changelog author="pvorel@suse.cz" date="1606910400">- Update to libtirpc 1.3.1
  - Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  - svc_dg: Free xp_netid during destroy
  - Fix memory management issues of fd locks
  - libtirpc: replace array with list for per-fd locks
  - __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  - __rpc_dtbsize: rlim_cur instead of rlim_max
  - pkg-config: use the correct replacements for libdir/includedir</changelog>
  <changelog author="dimstar@opensuse.org" date="1608724800">- Fix sed call to fixup libtirpc.pc.in: as we want our tirpc to be
  a transparent drop-in-replacement for rpc, we move the files
  from /usr/include/tirpc to /usr/include. Due to an upstream
  change in libtirpc.pc.in, though, the existing sed call no longer
  matched and no longer corrected the information according to our
  package.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS</changelog>
  <changelog author="pvorel@suse.cz" date="1631707200">- Backport DoS vulnerability fix 0001-Fix-DoS-vulnerability-in-libtirpc.patch
- Replace %setup with %autosetup</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  * rpcb_clnt.c add mechanism to try v2 protocol first
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1697544000">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage</changelog>
</package>
<package pkgid="ef7c1f0249e09120846c53f6f569569ca0c545a84adced93e8a75b5418020dbff1b5ceb330feb3ef46112f80be043bae7295cdbe8601727cca54394989480a3f" name="libtirpc3-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="slfo.1.1_1.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- install libraries to %{_libdir} (boo#1029961)</changelog>
  <changelog author="pvorel@suse.cz" date="1606910400">- Update to libtirpc 1.3.1
  - Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  - svc_dg: Free xp_netid during destroy
  - Fix memory management issues of fd locks
  - libtirpc: replace array with list for per-fd locks
  - __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  - __rpc_dtbsize: rlim_cur instead of rlim_max
  - pkg-config: use the correct replacements for libdir/includedir</changelog>
  <changelog author="dimstar@opensuse.org" date="1608724800">- Fix sed call to fixup libtirpc.pc.in: as we want our tirpc to be
  a transparent drop-in-replacement for rpc, we move the files
  from /usr/include/tirpc to /usr/include. Due to an upstream
  change in libtirpc.pc.in, though, the existing sed call no longer
  matched and no longer corrected the information according to our
  package.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS</changelog>
  <changelog author="pvorel@suse.cz" date="1631707200">- Backport DoS vulnerability fix 0001-Fix-DoS-vulnerability-in-libtirpc.patch
- Replace %setup with %autosetup</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  * rpcb_clnt.c add mechanism to try v2 protocol first
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1697544000">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage</changelog>
</package>
<package pkgid="945aa5a1b70c999a9d5a751d97607005454452fb86d05e03b52e94406752ac37798ce586e8c76e831a0fe11c54e9da50570c435a676b8d5b20d389855b1dea8e" name="libtool-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.7" rel="slfo.1.1_1.4"/>
  <changelog author="pth@suse.de" date="1438862400">- Remove spurious install_info_delete in postun (bsc#940773).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Fix install_info_{install,delete} usage: install-info does not
  allow file globbing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1525348800">- Drop libtool-no_host_name.patch for now: since we are upgrading
  to automake 1.16, we can't have any patch that would require us
  to bootstrap libtool, as this is not exactly trivial.
- Remove the line containing 'uname -m' from the libtool.m4 package
  after installation: this has the same effect as the patch above
  had.</changelog>
  <changelog author="bwiedemann@suse.com" date="1525867200">- Add libtool-reproducible-hostname.patch
  to make package build reproducible (boo#1084909)</changelog>
  <changelog author="meissner@suse.com" date="1544270400">- libtool baselib should require libltdl in baselib.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 2.4.7:
  - Libtool script now supports (configure-time and runtime) ARFLAGS
    variable, which obsoletes AR_FLAGS.  This is due to naming conventions
    among other *FLAGS and to be consistent with Automake's ARFLAGS.
  - Gnulib testsuite is enabled and run during 'make check'.
  - Support the Windows version of the Intel C Compiler (icl) in
    libtool script.
  - Pass '-fsanitize=*' flags for GCC and LLVM, and '-specs=*' for GCC
    to linker.
  - Pass '-Xassembler=*' and '-Wa,*' flag to compilers and linkers.
  - The variable 'FILECMD' with default value of '/usr/bin/file' was used to
    replace existing hard coded references to '/usr/bin/file'.
  - Add MidnightBSD support.
  - Libtool changed ARFLAGS/AR_FLAGS default from 'cru' to 'cr'.
  - Do not pass '-pthread' to Solaris linker.
  - 'libtool' and 'libtoolize' scripts now use '#! /usr/bin/env sh' shebang.
    Previously '#! /bin/sh' was used, which presents challenges for
    containerized environments.
  - Fix significant slowdown of libtoolize for certain projects (regression
    introduced in 2.4.3 release) caused by infinite m4 macro recursion.
  - Mitigate the slowdown of libtool script (introduced in v2.4.3) caused by
    increased number of calls to '$SED $sed_quote_subst' (bug#20006).
  - Properly parse and export TLS symbols on AIX.
  - Various bug fixes surrounding use of 'sed'.
  - Darwin systems set proper "allow undefined" flag on OSX 11, and
    PowerPC 10.5.
  - Removed some deprecated tests related to 'Makefile.inc' files.
- merge in testsuite, disable for now, isn't building for a while</changelog>
  <changelog author="dmueller@suse.com" date="1648555200">- add handle-Werror-return-type.patch
- disable lto, breaks libtool as seen in testsuite</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- allow tests to pass with GNU grep 3.8 boo#1203097
  add libtool-2.4.7-grep-3.8.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
</package>
<package pkgid="c91548c93db9bd1c86dadbac7cb2924113d4a8cb6f70db80ef737682c890e144568497402821e290b4878cf42fd48ec160a687f2a204824a697c55c921dbe52a" name="libtpm_unseal1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9.2" rel="slfo.1.1_1.2"/>
  <changelog author="meissner@suse.com" date="1339502400">- Updated to 1.3.8
  - bugfixes
  - pcr/nvram sealing options</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412251200">- Remove a number of unused build requires, probably copy/paste
  error, never used.</changelog>
  <changelog author="mpluskal@suse.com" date="1427976000">- Cleanup spec file with spec-cleaner
- Remove tpm-tools-rpmlintrc
- Use automake and autoconf as recomended by upstream
- Split library, devel adn pkcs11 package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434715200">- Do not use -Werror.</changelog>
  <changelog author="mailaender@opensuse.org" date="1483272000">- Update to version 1.3.9</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- updated to 1.3.9.1 (FATE#321450)
  - bugfixes after openssl 1.1 porting</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1510228800">- 0001-Fix-build-against-OpenSSL-1.1.0.patch: fix openssl 1.1.0 build in the
  P11 code. Upstream has not reacted to a pull request to fix this for some
  months now. This is my own patch (that doesn't violate C89 declaration rules
  and is backward compatible to openssl. 1.0.x)).
  For comparison see: https://sourceforge.net/p/trousers/tpm-tools/merge-requests/2/</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1614772800">- upgrade to minor version 1.3.9.2:
  - upstream now provide openssl 1.1 compatibility on their own
- dropped 0001-Fix-build-against-OpenSSL-1.1.0.patch since the tarbal is now
  compatible.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1633435200">- fix undefined and binary data being output in the tpm_version command
  (bsc#1114793)
  - add 0001-tpm_version-avoid-outputting-NULL-bytes-from-tpmVend.patch
  - add 0001-tpm_version-avoid-outputting-undefined-data-on-stder.patch</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- changed source url to https</changelog>
</package>
<package pkgid="9f25ec6582eabe5fc42a910bdfd4cca12fc6c734d64aecbf638e362db2a46e9b868edb8a147b59440121a143410be355a4bae7905ce03ce5002afa5f072bd452" name="libtpms-debugsource" arch="aarch64">
  <version epoch="0" ver="0.9.6" rel="slfo.1.1_1.3"/>
  <changelog author="glin@suse.com" date="1606132800">- Update to version 0.7.4
  * Addressed potential constant-time related issues in TPM 1.2 and
    TPM 2 code
    TPM 1.2: RSA decryption
    TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
  * Fixed some compilation issues</changelog>
  <changelog author="glin@suse.com" date="1616155200">- Update to version 0.7.7
  * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
  * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
  * tpm2: Address some Coverity issues (false positives)
  * tpm1.2: Backported ASAN/UBSAN related fixes
  * tpm2: Return properly sized array for b parameter for NIST P521
    (HLK)
  * tpm2: Addressed issues detected by UBSAN
  * tpm2: Addressed issues detected by cppcheck (false positives)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Update to version 0.8.2
  * NOTE: Downgrade to 0.7.x or below is not possible.
    Due to fixes in the TPM 2 prime number generation code in
    rev155 it is not possible to downgrade from libtpms version
    0.8.0 to some previous version. The seeds are now associated
    with an age so that older seeds use the old TPM 2 prime number
    generation code while newer seed use the newer code.
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)
  * Update to TPM 2 code release 159
  - X509 support is enabled
    + SM2 signing of ceritificates is NOT supported
  - Authenticated timers are disabled
  * Update to TPM 2 code relase 162
  - ECC encryption / decryption is disabled
  * Fix support for elliptic curve due to missing unmarshalling
    code
  * Runtime filter supported elliptic curves supported by OpenSSL
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rather than
    max
  * Fixes to symmetric decryption related to input size check,
    defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
    and to always use a temporary malloc'ed buffer for decryption
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest swtpm for test cases to succeed there.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1628337600">- Update to version 0.8.4:
  * Reset too large size indicators in TPM2B to avoid access
    beyond buffer
  * Restore original value in buffer if unmarshalled one was
    illegal</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1639051200">- Update to version 0.9.1
  * Downgrade to previous versions is not possible, as the size of
    the context gap has been adjusted to 0xffff from 0xff.
  * Enabled Camellia symmetric key encryption algorithm
  * tpm2: Update to TPM 2 spec rev 164
  * tpm2: Added a cache for private exponent D and prime Q
  * tpm2: bug fixes
- Drop upstream fixed libtpms-CVE-2021-3746.patch
- Fixed CVE-2021-3623 (bsc#1187767)</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 0.9.3:
  * build-sys: Add probing for -fstack-protector
  * tpm2: Do not call EVP_PKEY_CTX_set0_rsa_oaep_label() for label of size
  * (OSSL 3)
  * tpm2: When writing state initialize s_ContextSlotMask if not set</changelog>
  <changelog author="pgajdos@suse.com" date="1669377600">- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 0.9.5:
  * tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore
  * tpm2: Fix a potential overflow expression (coverity)
  * tpm2: Fix size check in CryptSecretDecrypt
  * tpm: #undef printf in case it is #define'd (OSS-Fuzz)
  * tpm2: Check return code of BN_div()
  * tpm2: Initialize variables due to gcc complaint (s390x, false positive)
  * tpm12: Initialize variables due to gcc complaint (s390x, false positive)
  * build-sys: Fix configure script to support _FORTIFY_SOURCE=3</changelog>
  <changelog author="aplanas@suse.com" date="1678104000">- Update to 0.9.6:
  * CVE-2023-1018: tpm2: Fixed out of bounds read in CryptParameterDecryption (bsc#1206023)
  * CVE-2023-1017: tpm2: Fixed out of bounds write in CryptParameterDecryption (bsc#1206022)</changelog>
</package>
<package pkgid="43760ea5ab077a9e5841b65826ab73c5979741e2b105f9204a90c9e7af384dde755550a3e7743a0c119de13b8fe9c40585c1918f590049830428c3f6fc982128" name="libtpms0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.9.6" rel="slfo.1.1_1.3"/>
  <changelog author="glin@suse.com" date="1606132800">- Update to version 0.7.4
  * Addressed potential constant-time related issues in TPM 1.2 and
    TPM 2 code
    TPM 1.2: RSA decryption
    TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
  * Fixed some compilation issues</changelog>
  <changelog author="glin@suse.com" date="1616155200">- Update to version 0.7.7
  * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
  * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
  * tpm2: Address some Coverity issues (false positives)
  * tpm1.2: Backported ASAN/UBSAN related fixes
  * tpm2: Return properly sized array for b parameter for NIST P521
    (HLK)
  * tpm2: Addressed issues detected by UBSAN
  * tpm2: Addressed issues detected by cppcheck (false positives)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Update to version 0.8.2
  * NOTE: Downgrade to 0.7.x or below is not possible.
    Due to fixes in the TPM 2 prime number generation code in
    rev155 it is not possible to downgrade from libtpms version
    0.8.0 to some previous version. The seeds are now associated
    with an age so that older seeds use the old TPM 2 prime number
    generation code while newer seed use the newer code.
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)
  * Update to TPM 2 code release 159
  - X509 support is enabled
    + SM2 signing of ceritificates is NOT supported
  - Authenticated timers are disabled
  * Update to TPM 2 code relase 162
  - ECC encryption / decryption is disabled
  * Fix support for elliptic curve due to missing unmarshalling
    code
  * Runtime filter supported elliptic curves supported by OpenSSL
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rather than
    max
  * Fixes to symmetric decryption related to input size check,
    defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
    and to always use a temporary malloc'ed buffer for decryption
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest swtpm for test cases to succeed there.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1628337600">- Update to version 0.8.4:
  * Reset too large size indicators in TPM2B to avoid access
    beyond buffer
  * Restore original value in buffer if unmarshalled one was
    illegal</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1639051200">- Update to version 0.9.1
  * Downgrade to previous versions is not possible, as the size of
    the context gap has been adjusted to 0xffff from 0xff.
  * Enabled Camellia symmetric key encryption algorithm
  * tpm2: Update to TPM 2 spec rev 164
  * tpm2: Added a cache for private exponent D and prime Q
  * tpm2: bug fixes
- Drop upstream fixed libtpms-CVE-2021-3746.patch
- Fixed CVE-2021-3623 (bsc#1187767)</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 0.9.3:
  * build-sys: Add probing for -fstack-protector
  * tpm2: Do not call EVP_PKEY_CTX_set0_rsa_oaep_label() for label of size
  * (OSSL 3)
  * tpm2: When writing state initialize s_ContextSlotMask if not set</changelog>
  <changelog author="pgajdos@suse.com" date="1669377600">- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 0.9.5:
  * tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore
  * tpm2: Fix a potential overflow expression (coverity)
  * tpm2: Fix size check in CryptSecretDecrypt
  * tpm: #undef printf in case it is #define'd (OSS-Fuzz)
  * tpm2: Check return code of BN_div()
  * tpm2: Initialize variables due to gcc complaint (s390x, false positive)
  * tpm12: Initialize variables due to gcc complaint (s390x, false positive)
  * build-sys: Fix configure script to support _FORTIFY_SOURCE=3</changelog>
  <changelog author="aplanas@suse.com" date="1678104000">- Update to 0.9.6:
  * CVE-2023-1018: tpm2: Fixed out of bounds read in CryptParameterDecryption (bsc#1206023)
  * CVE-2023-1017: tpm2: Fixed out of bounds write in CryptParameterDecryption (bsc#1206022)</changelog>
</package>
<package pkgid="7f77d1a60c874b9b1c72060e3617878c812241349a7f48b6b5b0afb513d28a6fa1cee6ea1eeae89a47483e6273cdf8f975675f7118073a8f7be6b62c4c3cd81c" name="libtspi1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.3.15" rel="slfo.1.1_1.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1589371200">- add correct Requires(pre) and change %pretrans and %posttrans into %pre and
  %post. %pretrans can't have any dependencies and therefore can only be
  %implemented in lua. This currently leads to build errors "/bin/sh: no such
  file or directory".</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1589976000">- fix a potential tss user to root privilege escalation when running tcsd
  (bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent
  badly designed privilege drop and initialization code to run.
- add bsc1164472.patch: additionally harden operation of tcsd when running as
  root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group.
  require /etc/tcsd.conf to be owned by root:tss mode 0640.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1589976001">- get rid of %pre/%post logic that fixes the old packaging bug. Turns out
  %pretrans and %posttrans had their purpose before, because the logic needed
  to run before old files owned by the package got deleted. But I'm not
  reimplementing this strange logic in Lua ... users that didn't get the fix
  yet will have to live with it.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1591099200">- add gcc-10.patch: fixes the build on gcc 10 by removing unused global
  variables. This patch was posted on the TrouSerS mailing list [1].
  [1]: https://sourceforge.net/p/trousers/mailman/message/36951419/</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1595851200">- In a previous commit the Requires line for the tss user got accidentally
  dropped. This change reintroduces it.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1604577600">- update to new upstream version 0.3.15:
  - Corrected mutliple security issues that existed if the tcsd is started by
    root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331
  - Replaced use of _no_optimize with asm memory barrier
  - Fixed multiple potential instances of use after free memory handling
  - Removed unused global variables which caused build issue on some distros
- drop gcc-10.patch: now contained in upstream tarball
- drop bsc1164472.patch: now contained in upstream tarball
- adjusted %setup macro invocation which seemed to be wrong</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1633435200">- move libraries to /usr/lib (bsc#1191102)</changelog>
  <changelog author="jsegitz@suse.com" date="1637841600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * tcsd.service</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- changed urls to https (except main URL which has no https)</changelog>
  <changelog author="dimstar@opensuse.org" date="1661169600">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
</package>
<package pkgid="67ea8095f019e6708988c9cc9378a52c3f1f43d70365a419080ab9e339c88b8efa0362796a6b116ba22908bc61ffffc08a0fee164fefd37c6a01fbf02a462713" name="libtss2-esys0-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="275a83ed8c6d05f810a2ebed4c06913e30b8f42e76470ec5d09e9d90c2c3427e20052a247e787b770f8dfcf879867a79b97076c2c08fad59e47266a88fa5a2b1" name="libtss2-fapi1-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="484ee1ea772e97833f63d108706cba1479632325363df417232091ec752858f24ca337fb516399455da74510dffad07ee93f200d319c54bc054268a5afff5ef7" name="libtss2-mu0-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="5e63d3c70ae4a25ea5af8604c7ee4386a3b021b1f162fe5f6036026a5629a535826c22d55f762260a9c41229a422bd3e19ff03a41175d83192331079ef7f2dee" name="libtss2-rc0-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="3c05f69da9ab1ce4ebf2dee5554dbbb9cc20b544d0ae9ea09e0b3381f0379fc5cf0677590bd01f5f3f2e7098283dcf2ba5c37cb0a3ef2d404144668d17c1f1cc" name="libtss2-sys1-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="d0580e2afe97e2988f150ab0e7a638560439aeb0b5d5f23e864c2c2e80f139f1d157a4ad6dbe866c83f203998c5096579bfb0e30bfdb251509cbe58c1c26feeb" name="libtss2-tcti-device0-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="a2f5d3465f497c672b8bbd935a42f03d2917b940507e43c2dac953801f173d9e3f490c41a40f871e45265035f0ea4e469e7bfeb6509ff1d86c178e4401887472" name="libtss2-tcti-tabrmd0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="slfo.1.1_2.1"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 2.4.0
  + remover syslog deprecation warning (bsc#1185154)
  + cover update to 2.3.3 (jsc#SLE-17366)
  + contains reload fix (bsc#1166936)
  + fix tcti loading using short / long names (bsc#1159176)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1649073600">- dbus-access.patch: restrict D-Bus access to tpm2-abrmd to members of the tss
  group (bsc#1197532). This prevents arbitrary users from meddling with TPM
  state and thus potential denial-of-service vectors.</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Version 2.4.1
  + Added
    Contributor Covenant Code of Conduct.
  + Fixed
  * superflous warning messages about tcti status.
    WARNING **: 11:00:56.205: tcti_conf before: "(null)"
    WARNING **: 11:00:56.205: tcti_conf after: "mssim"
  * GCC 11 build error: error: argument 2 of __atomic_load’ discards
    'volatile' qualifier
  * Initialize gerror pointer variable to NULL to fix use of
    unitialized memory and segfault.
  * Updated missing defaults in manpage.
  * Port CI to composite actions in tpm2-software/ci.
  + Removed
    Dependency on 'which' utility in configure.ac.
    ubuntu-16.04 from CI.</changelog>
  <changelog author="aplanas@suse.com" date="1670500800">- Version 3.0.0
  + Fixed
  * A bug in special command processing in TPM2_GetCapability when
    an audit session is in use cuased tpm2-abrmd to abort.
  + Added
  * New SELinux interfaces for communication with keylime
  + Changed
  * DBUS permissions in tpm2-abrmd.conf to match the in-kernel RM,
    ie /dev/tpmrm0, permissions. Now users MUST be in the tss group
    to send to tpm2-abrmd over DBUS.
- Drop dbus-access.patch (merged in PR#805)</changelog>
  <changelog author="aplanas@suse.com" date="1684843200">- Cover ALP via the %{suse_version} macro</changelog>
  <changelog author="jsegitz@suse.com" date="1722513600">- Update harden_tpm2-abrmd.service.patch to contain necessary SELinux
  changes (bsc#1209831)</changelog>
  <changelog author="cathy.hu@suse.com" date="1723550400">- Fix SELinux sbin/bin merge (bsc#1229047)
  1229047-fix-bin-sbin-selinux.patch
  Can be dropped once https://github.com/tpm2-software/tpm2-abrmd/pull/846
  is merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1742990400">- also enable SELinux features for SLE-16 (bsc#1240070). On SLE-16 abrmd does
  not work, because the SELinux configuration is missing and thus its
  operations are denied. Include SLE-16 to fix this.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1752840000">- sync with Factory package to fix SELinux issues in SLE Micro 6.1 (bsc#1246460)</changelog>
</package>
<package pkgid="6ca363db044c1bf35ea7a9621972ada428aa7a02b81ee0ec80bb9aa60239ba0ffa4a56fc7a1a1195d38f8de48b91f82dc8ca12699efcce60668213046467d923" name="libtss2-tctildr0-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="7a727a73d8194a2ce811a4dc6dfff8099afc80edd2b535019b7d036b0fd21064cacc121f985b6ea3d1183fc3f91f759d62af2e36beb6edeed2f917455cc92832" name="libtukit4-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="slfo.1.1_1.2"/>
  <changelog author="iforster@suse.com" date="1713441600">- Version 4.6.6
  - soft-reboot: Fix inverted logic of soft-reboot detection
  - soft-reboot: Don't use D-Bus for snapper call - it may be
    shutting down already
  - soft-reboot: Remove unused variable
  - doc: Document configuration file snippets for tukit.conf
- Remove script to disable soft-reboot support - this is the
  default for now anyway</changelog>
  <changelog author="iforster@suse.com" date="1714478400">- Version 4.6.7
  - Add support for snapper 0.11.0; also significantly decreases
    cleanup time [boo#1223504]</changelog>
  <changelog author="iforster@suse.com" date="1715083200">- Version 4.6.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]
  - soft-reboot: Log requested reboot type
  - soft-reboot: Don't force hard reboot on version change only</changelog>
  <changelog author="iforster@suse.com" date="1718366400">- Enable soft-reboot by default again as announced in
  https://microos.opensuse.org/blog/2024-06-13-soft-reboot/</changelog>
  <changelog author="iforster@suse.com" date="1720094400">- Version 4.7.0
  - Add plugin mechanism
    It's now possible to hook into API functions with custom
    plugins; see doc/tukit-plugins.md for details.
    [gh#openSUSE/transactional-update#122]
  - Fix missing libdir replacement for status command</changelog>
  <changelog author="iforster@suse.com" date="1721131200">- It seems it's taking a longer time until the tests will be
  adopted to the new reboot behavior. Disable soft-reboot for now
  to unblock the regular transactional-update update.</changelog>
  <changelog author="iforster@suse.com" date="1724673600">- Version 4.8.0
  - Add sd-boot (systemd-boot) support for most commands
  - Add support for specifying migration arguments
    [gh#openSUSE/transactional-update#127] [jsc#PED-10375]
    [jsc#PED-9786]
  - Support kdump setup on platforms without kdump high/low
    settings (e.g. S/390 or PPC64le [bsc#1229138]
  - Preserve current working directory if possible when entering
    transactional-update environment [bsc#1227452]; also adds the
    current path to the Bash prompt
  - Fix plugin system to support special characters in commands</changelog>
  <changelog author="iforster@suse.com" date="1725019200">- Version 4.8.1
  - tukit: fix --drop-if-no-change after apply [bsc#1229900]</changelog>
  <changelog author="iforster@suse.com" date="1726488000">- Version 4.8.2
  - Allow specifying only low value with setup-kdump [bsc#1230537]</changelog>
  <changelog author="iforster@suse.com" date="1727179200">- Version 4.8.3
  - Check return value of register command [bsc#1230901]</changelog>
</package>
<package pkgid="b30ab4da5ca165a4890140eafc75a8a3403a3f657e06c0210854fe28162abc72a0386a2e3e0eb91060b6a367dea180f4ea26db9a20a88358bd04944d04fc0749" name="libudev1-debuginfo" arch="aarch64">
  <version epoch="0" ver="254.27" rel="slfo.1.1_4.1"/>
  <changelog author="fbui@suse.com" date="1753963200">- Remove the script used to help migrating the language and locale settings
  located in /etc/sysconfig/language on old systems to the systemd default
  locations (bsc#1247074)
  The script was introduced more than 7 years ago and all systems running TW
  should have been migrated since then. Moreover the installer supports the
  systemd default locations since approximately SLE15.</changelog>
  <changelog author="fbui@suse.com" date="1758110400">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196800">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- systemd-update-helper: backport commit 2d0af8bc354f4a1429ce
  Since user@.service has `Type=notify-reload` (making the reloading process
  synchronous) and reloading implies reexecuting with `ReloadSignal=RTMIN+25`,
  reexecuting user managers synchronously can be achieved with `systemctl reload
  user@*.service" now.</changelog>
  <changelog author="fbui@suse.com" date="1765800001">- Sync systemd-update-helper with the version shipped in Base:System
  This includes the following changes:
  - systemd-update-helper: do not stop or disable services when they are migrated
    to other packages. This can occur during package renaming or splitting.
  - systemd-update-helper: Fix invalid use of "break" in case statement
  - systemd-update-helper: fix regression introduced when support for package
    renaming/splitting was added (bsc#1245551)</changelog>
  <changelog author="fbui@suse.com" date="1765800002">- Import commit 9ecd16228492f44212e2771bec11ec78245b4094
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Import commit 8bbac1d508acb8aa4e7262f47c7f4076b8350f72
  8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305601">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit aef6e11921f8c46a2b7ee8cfab024c9c641d74d8
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit a943e3ce2f655b8509038e31f03f5ded18f24683
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="5fd3c58edb4f80c9d85a89a8024db9645102dd1151542631139896a69fd8c9280b7081d30c26c8ca775551c898683b93ae8b26f29cdb9de41ceaef9562ad1c47" name="libudisks2-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.4" rel="slfo.1.1_2.1"/>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in
    HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with
    symlinks
  * mount options: Allow 'nosymfollow' mount option for
    unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup
    lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for
    mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent()
    out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- Drop udisks2-Fix-memory-leaks.patch, and
  udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637150400">- Update to version 2.9.4:
  + Many fixes, improvements, and additions to the code.
  + Mount options:
  - Always use errors=remount-ro for ext filesystems;
  - Add ntfs3 kernel driver options.
  + Build: Remove warnings unknown to clang.
  + Tests: Adapt to clang differences when causing a segfault.
- Changes from version 2.9.3:
  + Many fixes, improvements, and additions to the code and test.
- Add "%tmpfiles_create %{_tmpfilesdir}/udisks2.conf" call in %post
  section to make sure /run/media will be created right after the
  instalation of udisks2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging libudisks_vdo standalone module, it is deprecated.
  Do this via passing explicit disable-vdo to configure and
  dropping libblockdev-vdo-devel BuildRequires. Add a
  libudisks2_0_vdo Obsoletes to ease updates.
- No longer remove upstream config files, we want to be able to
  load modules on demand. Note that we move an example file to docs
  to keep sysconfdir clean of non-conf files.
- Add a default_luks_encryption define, and set it to luks2, sed
  this macro into source, future versions of udisks will not need
  this, as upstream moves to luks2 by default.
- Ghost a dir/file created by us.
- Split out API docs into separate docs sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Drop gtk-doc BuildRequires, and pass disable-gtk-doc to
  configure, the included gtk-docs are fine, we do not need to
  build them ourselves.</changelog>
  <changelog author="jsegitz@suse.com" date="1653048000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_udisks2-zram-setup@.service.patch
  * harden_udisks2.service.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1668600000">- fix crash during shutdown (bsc#1205371)
  * add:
    0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669118400">- avoid wakening spun-down disks on unrelated events (bsc#1120608)
  * add:
    0001-udisksata-Move-the-low-level-PM-state-call.patch
    0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch
    0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1755864000">- (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds
  read in udisks daemon (bsc#1248502)
  + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch</changelog>
</package>
<package pkgid="443a4ff5a2ff387319e431242b1db125795190b649c0f532e7d99dcc4b38a6803b249e97e87b2f4bd3babe421f2f07941b6702144bf25260f4a86a9784c066b2" name="libudisks2-0_btrfs-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.4" rel="slfo.1.1_2.1"/>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in
    HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with
    symlinks
  * mount options: Allow 'nosymfollow' mount option for
    unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup
    lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for
    mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent()
    out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- Drop udisks2-Fix-memory-leaks.patch, and
  udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637150400">- Update to version 2.9.4:
  + Many fixes, improvements, and additions to the code.
  + Mount options:
  - Always use errors=remount-ro for ext filesystems;
  - Add ntfs3 kernel driver options.
  + Build: Remove warnings unknown to clang.
  + Tests: Adapt to clang differences when causing a segfault.
- Changes from version 2.9.3:
  + Many fixes, improvements, and additions to the code and test.
- Add "%tmpfiles_create %{_tmpfilesdir}/udisks2.conf" call in %post
  section to make sure /run/media will be created right after the
  instalation of udisks2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging libudisks_vdo standalone module, it is deprecated.
  Do this via passing explicit disable-vdo to configure and
  dropping libblockdev-vdo-devel BuildRequires. Add a
  libudisks2_0_vdo Obsoletes to ease updates.
- No longer remove upstream config files, we want to be able to
  load modules on demand. Note that we move an example file to docs
  to keep sysconfdir clean of non-conf files.
- Add a default_luks_encryption define, and set it to luks2, sed
  this macro into source, future versions of udisks will not need
  this, as upstream moves to luks2 by default.
- Ghost a dir/file created by us.
- Split out API docs into separate docs sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Drop gtk-doc BuildRequires, and pass disable-gtk-doc to
  configure, the included gtk-docs are fine, we do not need to
  build them ourselves.</changelog>
  <changelog author="jsegitz@suse.com" date="1653048000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_udisks2-zram-setup@.service.patch
  * harden_udisks2.service.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1668600000">- fix crash during shutdown (bsc#1205371)
  * add:
    0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669118400">- avoid wakening spun-down disks on unrelated events (bsc#1120608)
  * add:
    0001-udisksata-Move-the-low-level-PM-state-call.patch
    0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch
    0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1755864000">- (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds
  read in udisks daemon (bsc#1248502)
  + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch</changelog>
</package>
<package pkgid="03dae093ebaa3bcc3082970e061e8f781b6ac56c327937bc8f73a1676ae0645db8ad731f8fa62b044d8444dfebac740b516b89953bc04d6e16240e91733782e4" name="libudisks2-0_lvm2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.4" rel="slfo.1.1_2.1"/>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in
    HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with
    symlinks
  * mount options: Allow 'nosymfollow' mount option for
    unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup
    lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for
    mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent()
    out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- Drop udisks2-Fix-memory-leaks.patch, and
  udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637150400">- Update to version 2.9.4:
  + Many fixes, improvements, and additions to the code.
  + Mount options:
  - Always use errors=remount-ro for ext filesystems;
  - Add ntfs3 kernel driver options.
  + Build: Remove warnings unknown to clang.
  + Tests: Adapt to clang differences when causing a segfault.
- Changes from version 2.9.3:
  + Many fixes, improvements, and additions to the code and test.
- Add "%tmpfiles_create %{_tmpfilesdir}/udisks2.conf" call in %post
  section to make sure /run/media will be created right after the
  instalation of udisks2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging libudisks_vdo standalone module, it is deprecated.
  Do this via passing explicit disable-vdo to configure and
  dropping libblockdev-vdo-devel BuildRequires. Add a
  libudisks2_0_vdo Obsoletes to ease updates.
- No longer remove upstream config files, we want to be able to
  load modules on demand. Note that we move an example file to docs
  to keep sysconfdir clean of non-conf files.
- Add a default_luks_encryption define, and set it to luks2, sed
  this macro into source, future versions of udisks will not need
  this, as upstream moves to luks2 by default.
- Ghost a dir/file created by us.
- Split out API docs into separate docs sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Drop gtk-doc BuildRequires, and pass disable-gtk-doc to
  configure, the included gtk-docs are fine, we do not need to
  build them ourselves.</changelog>
  <changelog author="jsegitz@suse.com" date="1653048000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_udisks2-zram-setup@.service.patch
  * harden_udisks2.service.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1668600000">- fix crash during shutdown (bsc#1205371)
  * add:
    0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669118400">- avoid wakening spun-down disks on unrelated events (bsc#1120608)
  * add:
    0001-udisksata-Move-the-low-level-PM-state-call.patch
    0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch
    0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1755864000">- (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds
  read in udisks daemon (bsc#1248502)
  + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch</changelog>
</package>
<package pkgid="1443f57f6a8681ea4071a165edff50fb9ad90c4e7a0d2c3dba5153f83ae920c61e25d700703759ab9aa38e9d19fd9aa34c9e8b7e63c49809aa09cab18fcadf01" name="libunbound8-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="slfo.1.1_3.1"/>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 1.19.0:
  * Features:
  - Fix #850: [FR] Ability to use specific database in Redis, with
    new redis-logical-db configuration option.
  - Merge #944: Disable EDNS DO. Disable the EDNS DO flag in upstream
    requests. This can be helpful for devices that cannot handle
    DNSSEC information. But it should not be enabled otherwise, because
    that would stop DNSSEC validation. The DNSSEC validation would not
    work for Unbound itself, and also not for downstream users. Default
    is no. The option is disable-edns-do: no
  - Expose the script filename in the Python module environment 'mod_env'
    instead of the config_file structure which includes the linked list
    of scripts in a multi Python module setup; fixes #79.
  - Expose the configured listening and outgoing interfaces, if any, as
    a list of strings in the Python 'config_file' class instead of the
    current Swig object proxy; fixes #79.
  - Mailing list patches from Daniel Gröber for DNS64 fallback to plain
    AAAA when no A record exists for synthesis, and minor DNS64 code
    refactoring for better readability.
  - Merge #951: Cachedb no store. The cachedb-no-store: yes option is
    used to stop cachedb from writing messages to the backend storage.
    It reads messages when data is available from the backend.
    The default is no.
  * Bug Fixes:
  - Fix for version generation race condition that ignored changes.
  - Fix #942: 1.18.0 libunbound DNS regression when built without OpenSSL.
  - Fix for WKS call to getservbyname that creates allocation on exit in
    unit test by testing numbers first and testing from the services list later.
  - Fix autoconf 2.69 warnings in configure.
  - Fix #927: unbound 1.18.0 make test error. Fix make test without SHA1.
  - Merge #931: Prevent warnings from -Wmissing-prototypes.
  - Fix to scrub resource records of type A and AAAA that have an
    inappropriate size. They are removed from responses.
  - Fix to move msgparse_rrset_remove_rr code to util/msgparse.c.
  - Fix to add EDE text when RRs have been removed due to length.
  - Fix to set ede match in unit test for rr length removal.
  - Fix to print EDE text in readable form in output logs.
  - Fix send of udp retries when ENOBUFS is returned. It stops looping
    and also waits for the condition to go away. Reported by Florian Obser.
  - Fix authority zone answers for obscured DNAMEs and delegations.
  - Merge #936: Check for c99 with autoconf versions prior to 2.70.
  - Fix to remove two c99 notations.
  - Fix rpz tcp-only action with rpz triggers nsdname and nsip.
  - Fix misplaced comment.
  - Merge #881: Generalise the proxy protocol code.
  - Fix #946: Forwarder returns servfail on upstream response noerror no data.
  - Fix edns subnet so that queries with a source prefix of zero cause the
    recursor send no edns subnet option to the upstream.
  - Fix that printout of EDNS options shows the EDNS cookie option by name.
  - Fix infinite loop when reading multiple lines of input on a broken remote
    control socket. Addesses #947 and #948.
  - Fix #949: "could not create control compt".
  - Fix that cachedb does not warn when serve-expired is disabled about use
    of serve-expired-reply-ttl and serve-expired-client-timeout.
  - Fix for #949: Fix pythonmod/ubmodule-tst.py for Python 3.x.
  - Better fix for infinite loop when reading multiple lines of input on a
    broken remote control socket, by treating a zero byte line the same as
    transmission end. Addesses #947 and #948.
  - For multi Python module setups, clean previously parsed module functions
    in __main__'s dictionary, if any, so that only current module functions
    are registered.
  - Fix #954: Inconsistent RPZ handling for A record returned along with CNAME.
  - Fixes for the DNS64 patches.
  - Update the dns64_lookup.rpl test for the DNS64 fallback patch.
  - Merge #955 from buevsan: fix ipset wrong behavior.
  - Update testdata/ipset.tdir test for ipset fix.
  - Fix to print detailed errors when an SSL IO routine fails via SSL_get_error.
  - Clearer configure text for missing protobuf-c development libraries.
  - autoconf.
  - Merge #930 from Stuart Henderson: add void to log_ident_revert_to_default
    declaration.
  - Fix #941: dnscrypt doesn't work after upgrade to 1.18 with suggestion by
    dukeartem to also fix the udp_ancil with dnscrypt.
  - Fix SSL compile failure for definition in log_crypto_err_io_code_arg.
  - Fix SSL compile failure for other missing definitions in log_crypto_err_io_code_arg.
  - Fix compilation without openssl, remove unused function warning.
  - Mention flex and bison in README.md when building from repository source.</changelog>
  <changelog author="onlyjak0b@mailbox.org" date="1706011200">- Use prefixes instead of sudo in unbound.service (boo#1215628)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1707220800">- as we use --disable-explicit-port-randomisation, also disable
  outgoing-port-permit and outgoing-port-avoid in config file to
  suppress the related unbound-checkconf warnings on every start</changelog>
  <changelog author="pmonreal@suse.com" date="1709121600">- Update to 1.19.1:
  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
  - Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1709899200">- Update to 1.19.2:
  * Bug Fixes:
  - Fix CVE-2024-1931, Denial of service when trimming EDE text
    on positive replies.
    [bsc#1221164]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1710936000">- Update to 1.19.3:
  * Features:
  - Merge PR #973: Use the origin (DNAME) TTL for synthesized
    CNAMEs as per RFC 6672.
  * Bug Fixes
  - Fix unit test parse of origin syntax.
  - Use 127.0.0.1 explicitly in tests to avoid delays and errors
    on newer systems.
  - Fix #964: config.h.in~ backup file in release tar balls.
  - Merge #968: Replace the obsolescent fgrep with grep -F in
    tests.
  - Merge #971: fix 'WARNING: Message has 41 extra bytes at end'.
  - Fix #969: [FR] distinguish Do53, DoT and DoH in the logs.
  - Fix dnstap that assertion failed on logging other than UDP
    and TCP traffic. It lists it as TCP traffic.
  - Fix to sync the tests script file common.sh.
  - iana portlist update.
  - Updated IPv4 and IPv6 address for b.root-servers.net in root
    hints.
  - Update test script file common.sh.
  - Fix tests to use new common.sh functions, wait_logfile and
    kill_from_pidfile.
  - Fix #974: doc: default number of outgoing ports without
    libevent.
  - Merge #975: Fixed some syntax errors in rpl files.
  - Fix root_zonemd unit test, it checks that the root ZONEMD
    verifies, now that the root has a valid ZONEMD.
  - Update example.conf with cookie options.
  - Merge #980: DoH: reject non-h2 early. To fix #979: Improve
    errors for non-HTTP/2 DoH clients.
  - Merge #985: Add DoH and DoT to dnstap message.
  - Fix #983: Sha1 runtime insecure change was incomplete.
  - Remove unneeded newlines and improve indentation in remote
    control code.
  - Merge #987: skip edns frag retry if advertised udp payload
    size is not smaller.
  - Fix unit test for #987 change in udp1xxx retry packet send.
  - Merge #988: Fix NLnetLabs#981: dump_cache truncates large
    records.
  - Fix to link with -lcrypt32 for OpenSSL 3.2.0 on Windows.
  - Fix to link with libssp for libcrypto and getaddrinfo check
    for only header. Also update crosscompile to remove ssp for
    32bit.
  - Merge #993: Update b.root-servers.net also in example config
    file.
  - Update workflow for ports to use newer openssl on windows
    compile.
  - Fix warning for windres on resource files due to
    redefinition.
  - Fix for #997: Print details for SSL certificate failure.
  - Update error printout for duplicate trust anchors to include
    the trust anchor name (relates to #920).
  - Update message TTL when using cached RRSETs. It could result
    in non-expired messages with expired RRSETs (non-usable
    messages by Unbound).
  - Merge #999: Search for protobuf-c with pkg-config.
  - Fix #1006: Can't find protobuf-c package since #999.
  - Fix documentation for access-control in the unbound.conf man
    page.
  - Merge #1010: Mention REFUSED has the TC bit set with
    unmatched allow_cookie acl in the manpage. It also fixes the
    code to match the documentation about clients with a valid
    cookie that bypass the ratelimit regardless of the
    allow_cookie acl.
  - Document the suspend argument for process_ds_response().
  - Move github workflows to use checkoutv4.
  - Fix edns subnet replies for scope zero answers to not get
    stored in the global cache, and in cachedb, when the upstream
    replies without an EDNS record.
  - Fix for #1022: Fix ede prohibited in access control refused
    answers.
  - Fix unbound-control-setup.cmd to use 3072 bits so that
    certificates are long enough for newer OpenSSL versions.
  - Fix TTL of synthesized CNAME when a DNAME is used from cache.
  - Fix unbound-control-setup.cmd to have CA v3 basicConstraints,
    like unbound-control-setup.sh has.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1715169600">- Update to 1.20.0:
  Features:
  * The config for discard-timeout, wait-limit, wait-limit-cookie,
    wait-limit-netblock and wait-limit-cookie-netblock was added,
    for the fix to the DNSBomb issue.
  * Merge GH#1027: Introduce 'cache-min-negative-ttl' option.
  * Merge GH#1043 from xiaoxiaoafeifei: Add loongarch support;
    updates config.guess(2024-01-01) and config.sub(2024-01-01),
    verified with upstream.
  * Implement cachedb-check-when-serve-expired: yes option, default
    is enabled. When serve expired is enabled with cachedb, it
    first checks cachedb before serving the expired response.
  * Fix GH#876: [FR] can unbound-checkconf be silenced when
    configuration is valid?
  Bug Fixes:
  * Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to
    Xiang Li from the Network and Information Security Lab of
    Tsinghua University for reporting it.
  * Update doc/unbound.doxygen with 'doxygen -u'. Fixes option
    deprecation warnings and updates with newer defaults.
  * Remove unused portion from iter_dname_ttl unit test.
  * Fix validator classification of qtype DNAME for positive and
    redirection answers, and fix validator signature routine for
    dealing with the synthesized CNAME for a DNAME without
    previously encountering it and also for when the qtype is
    DNAME.
  * Fix qname minimisation for reply with a DNAME for qtype CNAME
    that answers it.
  * Fix doc test so it ignores but outputs unsupported doxygen
    options.
  * Fix GH#1021 Inconsistent Behavior with Changing
    rpz-cname-override and doing a unbound-control reload.
  * Merge GH#1028: Clearer documentation for tcp-idle-timeout and
    edns-tcp-keepalive-timeout.
  * Fix GH#1029: rpz trigger clientip and action rpz-passthru not
    working as expected.
  * Fix rpz that the rpz override is taken in case of clientip
    triggers. Fix that the clientip passthru action is logged. Fix
    that the clientip localdata action is logged. Fix rpz override
    action cname for the clientip trigger.
  * Fix to unify codepath for local alias for rpz cname action
    override.
  * Fix rpz for cname override action after nsdname and nsip
    triggers.
  * Fix that addrinfo is not kept around but copied and freed, so
    that log-destaddr uses a copy of the information, much like NSD
    does.
  * Merge GH#1030: Persist the openssl and expat directories for
    repeated Windows builds.
  * Fix that rpz CNAME content is limited to the max number of
    cnames.
  * Fix rpz, it follows iterator CNAMEs for nsip and nsdname and
    sets the reply query_info values, that is better for debug
    logging.
  * Fix rpz that copies the cname override completely to the temp
    region, so there are no references to the rpz region.
  * Add rpz unit test for nsip action override.
  * Fix rpz for qtype CNAME after nameserver trigger.
  * Fix rpz so that rpz CNAME can apply after rpz CNAME. And fix
    that clientip and nsip can give a CNAME.
  * Fix localdata and rpz localdata to match CNAME only if no
    direct type match is available.
  * Merge GH#831 from Pierre4012: Improve Windows NSIS installer
    script (setup.nsi).
  * For GH#831: Format text, use exclamation icon and explicit label
    names.
  * Fix name of unit test for subnet cache response.
  * Fix GH#1032: The size of subnet_msg_cache calculation mistake
    cause memory usage increased beyond expectations.
  * Fix for GH#1032, add safeguard to make table space positive.
  * Fix comment in lruhash space function.
  * Fix to add unit test for lruhash space that exercises the
    routines.
  * Fix that when the server truncates the pidfile, it does not
    follow symbolic links.
  * Fix that the server does not chown the pidfile.
  * Fix GH#1034: DoT forward-zone via unbound-control.
  * Fix for crypto related failures to have a better error string.
  * Fix GH#1035: Potential Bug while parsing port from the
    "stub-host" string; also affected forward-zones and
    remote-control host directives.
  * Fix GH#369: dnstap showing extra responses; for client responses
    right from the cache when replying with expired data or
    prefetching.
  * Fix GH#1040: fix heap-buffer-overflow issue in function
    cfg_mark_ports of file util/config_file.c.
  * For GH#1040: adjust error text and disallow negative ports in
    other parts of cfg_mark_ports.
  * Fix comment syntax for view function views_find_view.
  * Fix GH#595: unbound-anchor cannot deal with full disk; it will
    now first write out to a temp file before replacing the
    original one, like Unbound already does for
    auto-trust-anchor-file.
  * Fixup compile without cachedb.
  * Add test for cachedb serve expired.
  * Extended test for cachedb serve expired.
  * Fix makefile dependencies for fake_event.c.
  * Fix cachedb for serve-expired with serve-expired-reply-ttl.
  * Fix to not reply serve expired unless enabled for cachedb.
  * Fix cachedb for serve-expired with
    serve-expired-client-timeout.
  * Fixup unit test for cachedb server expired client timeout with
    a check if response if from upstream or from cachedb.
  * Fixup cachedb to not refetch when serve-expired-client-timeout
    is used.
  * Merge GH#1049 from Petr Menšík: Py_NoSiteFlag is not needed since
    Python 3.8
  * Fix GH#1048: Update ax_pkg_swig.m4 and ax_pthread.m4.
  * Fix configure, autoconf for GH#1048.
  * Add checklock feature verbose_locking to trace locks and
    unlocks.
  * Fix edns subnet to sort rrset references when storing messages
    in the cache. This fixes a race condition in the rrset locks.
  * Merge GH#1053: Remove child delegations from cache when
    grandchild delegations are returned from parent.
  * Fix ci workflow for macos for moved install locations.
  * Fix configure flto check error, by finding grep for it.
  * Merge GH#1041: Stub and Forward unshare. This has one structure
    for them and fixes GH#1038: fatal error: Could not initialize
    thread / error: reading root hints.
  * Fix to disable fragmentation on systems with IP_DONTFRAG, with
    a nonzero value for the socket option argument.
  * Fix doc unit test for out of directory build.
  * Fix cachedb with serve-expired-client-timeout disabled. The
    edns subnet module deletes global cache and cachedb cache when
    it stores a result, and serve-expired is enabled, so that the
    global reply, that is older than the ecs reply, does not return
    after the ecs reply expires.
  * Add unit tests for cachedb and subnet cache expired data.
  * Man page entry for unbound-checkconf -q.
  * Cleanup unnecessary strdup calls for EDE strings.
  * Fix doxygen comment for errinf_to_str_bogus.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1723723200">- Update to 1.21.0:
  Security Fixes:
  * Merge #1073: fix null pointer dereference issue in function
    ub_ctx_set_fwd.
    [CVE-2024-43167, bsc#1229068]
  Features:
  * Fix #1071: [FR] Clear both in-memory and cachedb module cache
    with `unbound-control flush*` commands.
  * Fix #144: Port ipset to BSD pf tables.
  * Add dnstap-sample-rate that logs only 1/N messages, for high
    volume server environments. Thanks Dan Luther.
  * Add root key 38696 from 2024 for DNSSEC validation. It is added
    to the default root keys in unbound-anchor. The content can be
    inspected with `unbound-anchor -l`.
  * Merge #1090: Cookie secret file. Adds `cookie-secret-file:
    "unbound_cookiesecrets.txt"` option to store cookie secrets for
    EDNS COOKIE secret rollover. The remote control
    add_cookie_secret, activate_cookie_secret and
    drop_cookie_secret commands can be used for rollover, the
    command print_cookie_secrets shows the values in use.
  Bug Fixes:
  * Fix CAMP issues with global quota. Thanks to Huayi
    Duan, Marco Bearzi, Jodok Vieli, and Cagin Tanir from NetSec
    group, ETH Zurich.
  * Fix CacheFlush issues with limit on NS RRs. Thanks to Yehuda
    Afek, Anat Bremler-Barr, Shoham Danino and Yuval Shavitt
    (Tel-Aviv University and Reichman University).
  * Merge #1062: Fix potential overflow bug while parsing port in
    function cfg_mark_ports.
  * Fix for #1062: declaration before statement, avoid print of
    null, and redundant check for array size.
  * Fix to squelch udp connect errors in the log at low verbosity
    about invalid argument for IPv6 link local addresses.
  * Fix when the mesh jostle is exceeded that nameserver targets
    are marked as resolved, so that the lookup is not stuck on the
    requestlist.
  * Add missing common functions to tdir tests.
  * Merge #1070: Fix rtt assignement for low values of
    infra-cache-max-rtt.
  * Merge #1069: Fix unbound-control stdin commands for
    multi-process Unbounds.
  * Fix unbound-control commands that read stdin in multi-process
    operation (local_zones_remove, local_zones, local_datas_remove,
    local_datas, view_local_datas_remove, view_local_datas). They
    will be properly distributed to all processes. dump_cache and
    load_cache are no longer supported in multi-process operation.
  * Remove testdata/remote-threaded.tdir.
    testdata/09-unbound-control.tdir now checks both single and
    multi process/thread operation.
  * Fix to print a parse error when config is read with no name for
    a forward-zone, stub-zone or view.
  * Fix for parse end of forward-zone, stub-zone and view.
  * Fix for #1064: Fix that cachedb expired messages are considered
    insecure, and thus can be served to clients when dnssec is
    enabled.
  * Fix #1059: Intermittent DNS blocking failure with local-zone
    and always_nxdomain. Addition of local_zones dynamically via
    unbound-control was not finding the zone's parent correctly.
  * Fix #1064: Unbound 1.20 Cachedb broken?
  * Fix unused variable warning on compilation with no thread
    support.
  * unbound-control-setup: check openssl availability before doing
    anything, patch from Michael Tokarev.
  * Update patch to remove 'command' shell builtin and update error
    text.
  * Fix to enable that SERVFAIL is cached, for a short period, for
    more cases. In the cases where limits are exceeded.
  * Fix spelling of tcp-idle-timeout docs, from Michael Tokarev.
  * Merge #1078: Only check old pid if no username.
  * Fix #1079: tags from tagged rpz zones are no longer honored
    after upgrade from 1.19.3 to 1.20.0.
  * Fix for #1079: fix RPZ taglist in iterator callback that no
    client info is like no taglist intersection.
  * Fix to squelch connection reset by peer errors from log. And
    fix that the tcp read errors are labeled as initial for the
    first calls.
  * Merge #1080: AddressSanitizer detection in tdir tests and
    memory leak fixes.
  * Fix memory leak when reload_keep_cache is used and num-threads
    changes.
  * Fix memory leak on exit for unbound-dnstap-socket; creates
    false negatives during testing.
  * Fix memory leak in setup of dsa sig.
  * Fix typos for 'the the' in text.
  * Fix validation for repeated use of a DNAME record.
  * Add unit test for validation of repeated use of a DNAME record.
  * Fix #1091: Build fails with OpenSSL &gt;= 3.0 built with
    OPENSSL_NO_DEPRECATED.
  * Fix #1092: Ubuntu 22.04 Jammy fails to compile unbound 1.20.0;
    by adding helpful text for the Python interpreter version and
    allowing the default pkg-config unavailability error message to
    be shown.
  * Fix pkg-config availability check in dnstap/dnstap.m4 and
    systemd.m4.
  * Explicitly set the RD bit for the mesh query flags when
    prefetching. These queries have no waiting client but they need
    to be treated as recursive.
  * Fix ip-ratelimit-cookie setting, it was not applied.
  * Fix to remove unused include from the readzone test program.
  * Fix unused variable warning in do_cache_remove.
  * Fix compile warning in worker pthread id printout.
  * Add unit test skip files and bison and flex output to
    gitignore.
  * Fix to use modstack_init in zonemd unit test.
  * Fix to remove unneeded linebreak in fptr_wlist.c.
  * Fix compile warnings in fptr_wlist.c.
  * Fix for repeated use of a DNAME record: first overallocate and
    then move the exact size of the init value to avoid false
    positive heap overflow reads from address sanitizers.
  * Fix to print details about the failure to lookup a DNSKEY
    record when validation fails due to the missing DNSKEY. Also
    for key prime and DS lookups.
  * Fix for neater printout for error for missing DS response.
  * Fix neater printout.
  * Fix #1099: Unbound core dump on SIGSEGV.
  * Fix for #1099: Fix to check for deleted RRset when the contents
    is updated and fetched after it is stored, and also check for a
    changed RRset.
  * Don't check for message TTL changes if the RRsets remain the
    same.
  * Fix that validation reason failure that uses string print uses
    separate buffer that is passed, from the scratch validation
    buffer.
  * Fixup algo_needs_reason string buffer length.
  * Fix shadowed error string variable in validator dnskey
    handling.
  * Update list of known EDE codes.
  * For #773: In contrib/unbound.service.in set unbound to start
    after network-online.target. Also for
    contrib/unbound_portable.service.in.
  * Fix #1103: unbound 1.20.0 segmentation fault with nghttp2.
  * For #1103: fix to also drop mesh state reference when a h2
    reply is dropped.
  * Add RPZ tag tests in acl_interface.tdir.
  * For #1102: clearer text for using interface-* options for the
    loopback interface.
  * For #1103: fix to also drop mesh state reference when the
    discard limit is reached, when there is an error making a new
    recursion state and when the connection is dropped with
    is_drop.
  * For #1103: Fix to drop mesh state reference for the http2
    stream associated with the reply, not the currently active
    stream. And it does not remove it twice on a mesh_send_reply
    call. The reply h2_stream is NULL when not in use, for more
    initialisation.
  * Fix dnstap wakeup, a running wakeup timer is left to expire and
    not increased, a timer is started when the dtio thread is
    sleeping, the timer set disabled when the dtio thread goes to
    sleep, and after sleep the thread checks to see if there are
    messages to log immediately.
  * Merge #1110: Make fallthrough explicit for libworker.c.
  * For #1110: Test for fallthrough attribute in configure and add
    fallthrough attribute annotations.
  * Fix compile when the compiler does not support the noreturn
    attribute.
  * Fix to have empty definition when not supported for weak
    attribute.
  * Fix uninitialized variable warning in create_tcp_accept_sock.
  * Fix link of dnstap without openssl.
  * Fix link of unbound-dnstap-socket without openssl.
  * Fix #1106: ratelimit-below-domain logs the wrong FROM address.
  * Cleanup ede.tdir test.
  * For #935 and #1104, clarify RPZ order and semantics.
  * Fix to document parameters of auth_zone_verify_zonemd_with_key.
  * Fix for #1114: Fix that cache fill for forward-host names is
    performed, so that with nonzero target-fetch-policy it fetches
    forwarder addresses and uses them from cache. Also updated that
    delegation point cache fill routines use CDflag for AAAA
    message lookups, so that its negative lookup stops a recursion
    since the cache uses the bit for disambiguation for dns64 but
    the recursion uses CDflag for the AAAA target lookups, so the
    check correctly stops a useless recursion by its cache lookup.
  * Fix dnstap test program, cleans up to have clean memory on
    exit, for tap_data_free, does not delete NULL items. Also it
    does not try to free the tail, specifically in the free of the
    list since that picked up the next item in the list for its
    loop causing invalid free. Added internal unit test to
    unbound-dnstap-socket for that.
  * Fix that the worker mem report with alloc stats does not
    attempt to print memory use of forwards and hints if they have
    been deleted already.
  * Fix that alloc stats has strdup checks, it stops debuggers from
    complaining about mismatch at free time.
  * Fix testbound for alloc stats strdup in util/alloc.c.
  * Fix that alloc stats for forwards and hints are printed, and
    when alloc stats is enabled, the unit test for unbound control
    waits for reloads to complete.
  * Fix that for windows the module startup is called and sets up
    the module-config.
  * Fix spelling for the cache-min-negative-ttl entry in the
    example.conf.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744113600">- Update to 1.22.0:
  Security Fixes:
  * Fix CVE-2024-8508, unbounded name compression could lead to
    denial of service.
    [CVE-2024-8508, bsc#1231284]
  Features:
  * Add iter-scrub-ns, iter-scrub-cname and max-global-quota
    configuration options.
  * Merge patch to fix for glue that is outside of zone, with
    `harden-unverified-glue`, from Karthik Umashankar (Microsoft).
    Enabling this option protects the Unbound resolver against bad
    glue, that is unverified out of zone glue, by resolving them.
    It uses the records as last resort if there is no other working
    glue.
  * Add redis-command-timeout: 20 and redis-connect-timeout: 200,
    that can set the timeout separately for commands and the
    connection set up to the redis server. If they are not
    specified, the redis-timeout value is used.
  * Log timestamps in ISO8601 format with timezone. This adds the
    option `log-time-iso: yes` that logs in ISO8601 format.
  * DNS over QUIC. This adds `quic-port: 853` and `quic-size: 8m`
    that enable dnsoverquic, and the counters `num.query.quic` and
    `mem.quic` in the statistics output. The feature needs to be
    enabled by compiling with libngtcp2, with
    `--with-libngtcp2=path` and libngtcp2 needs openssl+quic, pass
    that with `--with-ssl=path` to compile unbound as well.
  Bug Fixes:
  * unbound-control-setup hangs while testing for openssl presence
    starting from version 1.21.0.
  * Fix error: "memory exhausted" when defining more than 9994
    local-zones.
  * Fix documentation for cache_fill_missing function.
  * Fix Loads of logs: "validation failure: key for validation
    &lt;domain&gt;. is marked as invalid because of a previous" for
    non-DNSSEC signed zone.
  * Fix that when rpz is applied the message does not get picked up
    by the validator. That stops validation failures for the
    message.
  * Fix that stub-zone and forward-zone clauses do not exhaust
    memory for long content.
  * Fix to print port number in logs for auth zone transfer
    activities.
  * b.root renumbering.
  * Add new IANA trust anchor.
  * Fix config file read for dnstap-sample-rate.
  * Fix alloc-size and calloc-transposed-args compiler warnings.
  * Fix to limit NSEC and NSEC3 TTL when aggressive nsec is enabled
    (RFC9077).
  * Fix dns64 with prefetch that the prefetch is stored in cache.
  * Attempt to further fix doh_downstream_buffer_size.tdir
    flakiness.
  * More clear text for prefetch and minimal-responses in the
    unbound.conf man page.
  * Fix cache update when serve expired is used. Expired records
    are favored over resolution and validation failures when
    serve-expired is used.
  * Fix negative cache NSEC3 parameter compares for zero length
    NSEC3 salt.
  * Fix unbound-control-setup hangs sometimes depending on the
    openssl version.
  * Fix Cannot override tcp-upstream and tls-upstream with
    forward-tcp-upstream and forward-tls-upstream.
  * Fix to limit NSEC TTL for messages from cachedb. Fix to limit
    the prefetch ttl for messages after a CNAME with short TTL.
  * Fix to disable detection of quic configured ports when quic is
    not compiled in.
  * Fix harden-unverified-glue for AAAA cache_fill_missing lookups.
  * Fix contrib/aaaa-filter-iterator.patch for change in call
    signature for cache_fill_missing.
  * Fix to display warning if quic-port is set but dnsoverquic is
    not enabled when compiled.
  * Fix dnsoverquic to extend the number of streams when one is
    closed.
  * Fix for dnstap with dnscrypt and dnstap without dnsoverquic.
  * Fix for dnsoverquic and dnstap to use the correct dnstap
    environment.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1763035200">- Fix CVE-2025-11411 (possible domain hijacking attack).
  Since this minimal patch interferes with most of the unit tests,
  the '%check' section has been removed from the spec file.
  [CVE-2025-11411, bsc#1252525, unbound-1.22-CVE-2025-11411.patch]</changelog>
</package>
<package pkgid="410d48d1baff289ce398bf8168f821f1f0fab3446f4371cf5098649c68225a788f023cc6a66eaeac7a8e7982b10803482cdc2d6a70b5a064d7f90af1eaf298d7" name="libunistring-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1493985600">- updated to 0.9.7:
  * license change
  * build system changes</changelog>
  <changelog author="pgajdos@suse.com" date="1503057600">- try to not run tests in parallel, make check stucks randomly</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- update to 0.9.8:
  * The data tables and line breaking algorithm have been updated
    to Unicode version 9.0.0
  * In the include file unigbrk.h, the function uc_grapheme_breaks
    has been added to accommodate the new UAX#29 rules involving 3
    or more consecutive characters</changelog>
  <changelog author="astieger@suse.com" date="1519819200">- update to 0.9.9:
  * Fixed a multithread-safety bug</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Fix RPM groups and summaries.</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 0.9.10:
  * The functions
    u8_casing_prefix_context, u8_casing_prefixes_context,
    u8_casing_suffix_context, u8_casing_suffixes_context,
    u16_casing_prefix_context, u16_casing_prefixes_context,
    u16_casing_suffix_context, u16_casing_suffixes_context,
    u32_casing_prefix_context, u32_casing_prefixes_context,
    u32_casing_suffix_context, u32_casing_suffixes_context,
    that are documented since version 0.9.1, are now actually
    implemented.</changelog>
  <changelog author="mliska@suse.cz" date="1552046400">- Add disable-broken-tests.patch in order to fix broken
  tests (bnc#1128460).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649505600">- Update to 1.0:
  * Unicode 14.0.0 support
  * License changed to LGPL-3.0-or-later OR GPL-2.0-or-later
  * *_uctomb functions now support strings larger than 2 GiB
  * linebreak functions now make it easier to work with strings
    that contain CR-LF sequences
  * New properties for recognizing pictographics symbols and
    regional indicators
- drop disable-broken-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666699200">- Update to 1.1:
  * The data tables and algorithms have been updated to Unicode
    version 15.0.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to GPL-3.0-or-later or LGPL-3.0-or-later.</changelog>
</package>
<package pkgid="0d7c95b1ca23f4ed7d159f03be26cbc2c20689acf737dfded952850d77bb10fcb91a23c48967e423c67c93884e585d5100f5f8d033953fc5ac33997ed17fb3ac" name="libunistring5-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1493985600">- updated to 0.9.7:
  * license change
  * build system changes</changelog>
  <changelog author="pgajdos@suse.com" date="1503057600">- try to not run tests in parallel, make check stucks randomly</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- update to 0.9.8:
  * The data tables and line breaking algorithm have been updated
    to Unicode version 9.0.0
  * In the include file unigbrk.h, the function uc_grapheme_breaks
    has been added to accommodate the new UAX#29 rules involving 3
    or more consecutive characters</changelog>
  <changelog author="astieger@suse.com" date="1519819200">- update to 0.9.9:
  * Fixed a multithread-safety bug</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Fix RPM groups and summaries.</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 0.9.10:
  * The functions
    u8_casing_prefix_context, u8_casing_prefixes_context,
    u8_casing_suffix_context, u8_casing_suffixes_context,
    u16_casing_prefix_context, u16_casing_prefixes_context,
    u16_casing_suffix_context, u16_casing_suffixes_context,
    u32_casing_prefix_context, u32_casing_prefixes_context,
    u32_casing_suffix_context, u32_casing_suffixes_context,
    that are documented since version 0.9.1, are now actually
    implemented.</changelog>
  <changelog author="mliska@suse.cz" date="1552046400">- Add disable-broken-tests.patch in order to fix broken
  tests (bnc#1128460).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649505600">- Update to 1.0:
  * Unicode 14.0.0 support
  * License changed to LGPL-3.0-or-later OR GPL-2.0-or-later
  * *_uctomb functions now support strings larger than 2 GiB
  * linebreak functions now make it easier to work with strings
    that contain CR-LF sequences
  * New properties for recognizing pictographics symbols and
    regional indicators
- drop disable-broken-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666699200">- Update to 1.1:
  * The data tables and algorithms have been updated to Unicode
    version 15.0.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to GPL-3.0-or-later or LGPL-3.0-or-later.</changelog>
</package>
<package pkgid="2a47411256a2655e3653ec2d9c2ab548b85c5e81acfd904aca19cf519c18f547137bb41670a24734e3ab856afbf55b8744a54af4f3b3a1e61f2b591795e413f4" name="libunwind-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="slfo.1.1_1.3"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1588075200">- Update to 1.4.0
  - Fix compilation with -fno-common.
  - arm: clear ip thumb/arm mode bit before move to previous instruction (#131)
  - tests: fix test-coredump-unwind without HAVE_EXECINFO_H (#165)
  - There are 20 not 9 failing tests on Solaris (#162)
  - change asm to __asm__ to support -std=c11 or similar (#149)
  - x86-64: make `is_cached_valid_mem` functional (#146)
  - Allow to build without weak `backtrace` symbol. (#142)
  - fix compile issue on SH platform (#137)
  - Add support for zlib compressed elf .debug_frame sections
  - README: add libc requirement description (#121)
  - Older systems (e.g. RHEL5) do not have pipe2(). (#122)
  - x86_64: Add fixup code if previous RIP was invalid (#120)
  - Fix format specifier for int64_t:29 (#117)
  - Delete hardcode of address size to support MIPS64. (#114)
  - Added braces to suppress empty if/else warnings (#112)
  - mips: make _step_n64 as a static function
  - x86_64: Fix tdep_init_done when built with libatomic_ops
  - x86_64: tsan clean (#109)
  - Fixed a missing dependency in dwarf-eh.h
  - dwarf: clang doesn't respect the static alias (#102)
- Update libunwind.keyring
- Remove libunwind-gcc10-build-fno-common.patch fixed upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589371200">- Fix compilation with -fno-common [bsc#1171549]
- Add patch libunwind_U_dyn_info_list.patch</changelog>
  <changelog author="azouhr@opensuse.org" date="1603195200">- Enable s390x for building</changelog>
  <changelog author="dmueller@suse.com" date="1611057600">- update to 1.5.0:
  * dwarf: clang doesn't respect the static alias
  * Fixed a missing dependency in dwarf-eh.h
  * x86_64: Fix tdep_init_done when built with libatomic_ops
  * mips: make _step_n64 as a static function
  * Added braces to suppress empty if/else warnings
  * Delete hardcode of address size to support MIPS64.
  * Fix format specifier for int64_t:29
  * Add initial support for Solaris x86-64
  * x86_64: Add fixup code if previous RIP was invalid
  * x86-64: make `is_cached_valid_mem` functional
  * arm: clear ip thumb/arm mode bit before move to previous instruction
  * Fix compilation with -fno-common.
  * Fix off-by-one error in x86_64 stack frames
  * aarch64: Fix __sigset build issue on muslC
  * Make SHF_COMPRESSED use contingent on its existence
- remove libunwind_U_dyn_info_list.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1650542400">- update to 1.6.2:
  * Fix off-by-one error in x86_64 stack frames
  * Fix error in aarch64 unw_sigcontext
  * resolve possible null pointer dereference
  * Switch to C11 atomics
  * RISC-V support
  * aarch64 getcontext functionality</changelog>
  <changelog author="schwab@suse.de" date="1651838400">- Enable build on riscv64 and run testsuite</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Resolve rpmlint error "libunwind.x86_64: E:
  shlib-policy-name-error SONAME: libunwind-coredump.so.0,
  expected package suffix: 0"</changelog>
  <changelog author="jengelh@inai.de" date="1652702400">- Add Conflict markers for earlier combined libunwind.</changelog>
  <changelog author="jengelh@inai.de" date="1652875200">- Adjust baselibs.conf for shlib guideline.</changelog>
  <changelog author="schwab@suse.de" date="1653307200">- Fix dependencies
- Fix file list</changelog>
</package>
<package pkgid="4e00d7e9b7ff92fdc054e0a053f714f59facd3e983f92956bc72edb7b0142f643db263bf5d91591f7316789b59920cda8306f8dfafd0786918f77ec2ae30e828" name="libunwind8-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="slfo.1.1_1.3"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1588075200">- Update to 1.4.0
  - Fix compilation with -fno-common.
  - arm: clear ip thumb/arm mode bit before move to previous instruction (#131)
  - tests: fix test-coredump-unwind without HAVE_EXECINFO_H (#165)
  - There are 20 not 9 failing tests on Solaris (#162)
  - change asm to __asm__ to support -std=c11 or similar (#149)
  - x86-64: make `is_cached_valid_mem` functional (#146)
  - Allow to build without weak `backtrace` symbol. (#142)
  - fix compile issue on SH platform (#137)
  - Add support for zlib compressed elf .debug_frame sections
  - README: add libc requirement description (#121)
  - Older systems (e.g. RHEL5) do not have pipe2(). (#122)
  - x86_64: Add fixup code if previous RIP was invalid (#120)
  - Fix format specifier for int64_t:29 (#117)
  - Delete hardcode of address size to support MIPS64. (#114)
  - Added braces to suppress empty if/else warnings (#112)
  - mips: make _step_n64 as a static function
  - x86_64: Fix tdep_init_done when built with libatomic_ops
  - x86_64: tsan clean (#109)
  - Fixed a missing dependency in dwarf-eh.h
  - dwarf: clang doesn't respect the static alias (#102)
- Update libunwind.keyring
- Remove libunwind-gcc10-build-fno-common.patch fixed upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589371200">- Fix compilation with -fno-common [bsc#1171549]
- Add patch libunwind_U_dyn_info_list.patch</changelog>
  <changelog author="azouhr@opensuse.org" date="1603195200">- Enable s390x for building</changelog>
  <changelog author="dmueller@suse.com" date="1611057600">- update to 1.5.0:
  * dwarf: clang doesn't respect the static alias
  * Fixed a missing dependency in dwarf-eh.h
  * x86_64: Fix tdep_init_done when built with libatomic_ops
  * mips: make _step_n64 as a static function
  * Added braces to suppress empty if/else warnings
  * Delete hardcode of address size to support MIPS64.
  * Fix format specifier for int64_t:29
  * Add initial support for Solaris x86-64
  * x86_64: Add fixup code if previous RIP was invalid
  * x86-64: make `is_cached_valid_mem` functional
  * arm: clear ip thumb/arm mode bit before move to previous instruction
  * Fix compilation with -fno-common.
  * Fix off-by-one error in x86_64 stack frames
  * aarch64: Fix __sigset build issue on muslC
  * Make SHF_COMPRESSED use contingent on its existence
- remove libunwind_U_dyn_info_list.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1650542400">- update to 1.6.2:
  * Fix off-by-one error in x86_64 stack frames
  * Fix error in aarch64 unw_sigcontext
  * resolve possible null pointer dereference
  * Switch to C11 atomics
  * RISC-V support
  * aarch64 getcontext functionality</changelog>
  <changelog author="schwab@suse.de" date="1651838400">- Enable build on riscv64 and run testsuite</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Resolve rpmlint error "libunwind.x86_64: E:
  shlib-policy-name-error SONAME: libunwind-coredump.so.0,
  expected package suffix: 0"</changelog>
  <changelog author="jengelh@inai.de" date="1652702400">- Add Conflict markers for earlier combined libunwind.</changelog>
  <changelog author="jengelh@inai.de" date="1652875200">- Adjust baselibs.conf for shlib guideline.</changelog>
  <changelog author="schwab@suse.de" date="1653307200">- Fix dependencies
- Fix file list</changelog>
</package>
<package pkgid="3663ce7562f99339d98be8b0db72fd3d1a358c64d610e03bbd125136c198cce9678c9cd16063eb7aa533f2581b348ef38b47847abac3a0f6e02a8a3c9c916fc9" name="liburcu8-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1443528000">- remove dependency on gpg-offline, is done by source validator
- drop userspace-rcu-ppc64le.patch, included in
  userspace-rcu-aarch64.patch</changelog>
  <changelog author="dvaleev@suse.com" date="1458043200">- userspace-rcu-ppc64le.patch use ppc for ppc64le
  http://git.lttng.org/?p=userspace-rcu.git;a=commit;h=61126bd9c901fa403315db71d8d5351d716717cb</changelog>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 0.10.0 for SLE15 (bsc#1055683)
  Drop patch: userspace-rcu-aarch64.patch (upstream v0.9.0~99)
  Drop patch: userspace-rcu-ppc64le.patch (upstream v0.9.0~24)
  Adjust library soname to 6
  Update keyring</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Add baselibs.conf: create liburcu6-32bit package as a dependency
  to liblttng-ust0-32bit.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 0.12.1:
  * Fix: tls-compat.h exposes compiler-dependent public configuration
  * Fix: tap array subscript has type char warning
  * tls-compat.h: introduce DEFINE_URCU_TLS_INIT
  * Use _umtx_op for futex on FreeBSD
  * Add FreeBSD, DragonFly to syscall-compat.h
  * urcu-bp: perform thread registration on urcu_bp_register_thread
  * Require automake &gt;= 1.12
  * cds_lfht_is_node_deleted parameter can be marked const
  * Fix: provide errno as argument to urcu_die()
  * Fix: rculfhash worker needs to unblock to SIGRCU
  * Cleanup: test_perthreadlock_timing: handle pthread mutex errors
  * Fix: SONAME bump to 6.1.0
  * Cleanup: remove unused variable from configure.ac check
  * Fix: urcu/futex.h: users of struct timespec should include time.h
  * Bump library version to 6:0:1
  * Cleanup: update code layout to fix old gcc warning
  * Fix: typo CPPLAGS in examples Makefile
  * Harmonize pprint macro across projects
  * Check for TLS support after CC detection
  * Update macros from the autotools archive
  * tap-driver.sh: flush stdout after each test result
  * Update dead link in lgpl-relicensing.txt
  * Add multiflavor compat identifiers
  * Cleanup: missing sign compare fixes
  * Cleanup: enable signed/unsigned compare compiler warning
  * Cleanup: compiler warning on 32-bit architectures
  * config.h.in: rename CONFIG_RCU_MULTIFLAVOR to CONFIG_RCU_HAVE_MULTIFLAVOR
  * rculfhash: implement iterator debugging config option
  * Fix: examples silent rules on Solaris
  * Add missing fall through annotations
  * Fix: symbol aliases with TLS compat
  * Port: no symbols aliases on MacOS
  * Add -Wextra to CFLAGS
  * Add silent mode to examples Makefiles
  * doc: update examples to API changes
  * test multiflavor single compile unit
  * Update README following API changes
  * Use new header locations for includes from urcu code
  * Update call-rcu.h and defer.h comments and include guards
  * rculfqueue.h: do not include urcu-call-rcu.h
  * rculfhash: support use with multiple flavors per compile unit
  * rculfhash: do not include urcu-call-rcu.h from public API
  * Refactor liburcu to support many flavors per compile unit
  * Fix: only wait if work queue is empty in real-time mode
  * Fix: don't wait after completion of a work queue job batch
  * Fix: don't wait after completion of job batch if work queue is empty
  * Fix: workqueue: struct urcu_work vs rcu_head mixup
  * Cleanup: workqueue: update comments referring to call-rcu
  * Fix: mixup between URCU_WORKQUEUE_RT and URCU_CALL_RCU_RT
  * test_rwlock: Add per-thread count to verbose output
  * Add *.exe to gitignore for Cygwin
  * Fix: pthread_rwlock initialization on Cygwin
  * Fix: compat_futex_noasync on Cygwin
  * wfcqueue: allow defining CDS_WFCQ_WAIT_SLEEP to override `poll'
  * Update documentation for call_rcu before/after fork
  * Add support for the RISC-V architecture
  * Tests: Add tap-driver.sh for automake &lt; 1.12
  * Tests: Replace prove by autotools tap runner
  * liburcu-bp: Use membarrier private expedited when available
  * liburcu: Use membarrier private expedited when available
  * rculfhash: improve error handling of mmap backend
  * Fix: don't use overlapping mmap mappings on Cygwin
  * Tests fix: errors in shell scripts
  * Revert "Use initial-exec tls model"
  * Use initial-exec tls model
  * Fix: don't use membarrier SHARED syscall command in liburcu-bp
  * Tests fix: add missing Cygwin thread id
  * Fix: assignment from incompatible pointer type warnings
  * Tests fix: unused variable warnings
  * Fix: add missing m68k headers to dist</changelog>
  <changelog author="dmueller@suse.com" date="1615204800">- update to 0.12.2:
  * fix: exclude clang from GCC version blacklists
  * aarch64: blacklist gcc prior to 5.1
  * Fix: configure: support Autoconf 2.70
  * fix: bump tests thread limit to 4096
  * cleanup: Improve wording of CONFIG_RCU_DEBUG description
  * fix: explicitly include urcu/config.h in files using CONFIG_RCU_ defines
  * Fix typo in README.md
  * fix: add -lurcu-common to pkg-config libs for each flavor
  * call_rcu: Fix race between rcu_barrier() and call_rcu_data_free()</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 0.13.0:
  * The Userspace RCU 0.13 release is mostly a library soname version bump
    to address an ABI incompatibility between the 0.10 and { 0.11, 0.12 }
    releases. see https://lists.lttng.org/pipermail/lttng-dev/2021-June/030023.html</changelog>
  <changelog author="dmueller@suse.com" date="1642939200">- update to 0.13.1:
  * fix: properly detect 'cmpxchg' on x86-32
  * fix: use urcu-tls compat with c++ compiler
  * fix: remove autoconf features default value in help message
  * fix: add missing pkgconfig file for memb flavour lib
  * Make temporary variable in _rcu_dereference non-const
  * Fix: x86 and s390: uatomic __hp() macro C++ support
  * Fix: x86 and s390: uatomic __hp() macro clang support
  * Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1660910400">- Update to version 0.13.2:
  * Revert "Fix: remove type constness in URCU_FORCE_CAST's C++
    version".
  * Fix: futex.h: include headers outside extern C.
  * Fix: add missing unused attribute to _rcu_dereference.
  * Fix: change method used by _rcu_dereference to strip type constness.
  * Fix: remove type constness in URCU_FORCE_CAST's C++ version.
  * Move extern "C" down in include/urcu/urcu-bp.h.
  * Fix: ifdef linux specific cpu count compat.
  * Set git-review branch to stable-0.13.
  * Fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id.
  * Fix: revise obsolete command in README.md.
  * Fix: workqueue: remove unused variable "ret".
  * Fix: futex wait: handle spurious futex wakeups.
  * Fix: Use %lu rather than %ld to print count.</changelog>
  <changelog author="dmueller@suse.com" date="1678276800">- update to 0.14.0:
  * Fix: urcu-bp: only teardown call-rcu worker in destructor
  * Fix: rculfhash: urcu_die() takes positive error value
  * Fix: call_rcu: teardown default call_rcu worker on
    application exit
  * Fix: join worker thread in call_rcu_data_free
  * Docs: clarify grace period polling API
  * Document grace period polling in rcu-api.md
  * Implement poll rcu stress test in rcutorture
  * urcu-memb,mb,signal: Implement grace period polling
  * Fix: auto-resize hash table destroy deadlock
  * Fix building on MSYS2
  * rculfhash: Include rculfhash-internal.h from local directory
  * Remove "Darwin" from "should also work on list"
  * Merge branch 'adah1972-improve-md'
  * Add semicolons at the end of function prototypes
  * Wrap a file name in backticks
  * Wrap command-line options in backticks
  * Fix a wrong format
  * Wrap URLs in angle brackets
  * Fix Markdown issues
  * Fix: Always check pthread_create for failures
  * Disable signals in URCU background threads
  * Fix: futex.h: include headers outside extern C
  * Fix: add missing unused attribute to _rcu_dereference
  * Fix: change method used by _rcu_dereference to strip type
    constness
  * Fix: remove type constness in URCU_FORCE_CAST's C++ version
  * Move extern "C" down in include/urcu/urcu-bp.h
  * fix: ifdef linux specific cpu count compat
  * Add unit tests for possible_cpus_array_len
  * fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu
    id
  * Fix: revise obsolete command in README.md
  * Fix: workqueue: remove unused variable "ret"
  * Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
  * Fix: urcu: futex wait: handle spurious futex wakeups
  * Fix: urcu-wait: futex wait: handle spurious futex wakeups
  * Fix: defer_rcu: futex wait: handle spurious futex wakeups
  * Fix: call_rcu: futex wait: handle spurious futex wakeups
  * Fix: workqueue: futex wait: handle spurious futex wakeups
  * Fix: Use %lu rather than %ld to print count
  * Update ABI definition files
  * Bump version current and age
  * alpha: allocate membarrier system call number
  * Bump version to 0.14.0-pre
  * Improved test framework
  * rculfhash: introduce cds_lfht_node_init_deleted
  * cleanup: i386 arch detection
  * fix: properly detect 'cmpxchg' on x86-32
  * fix: use urcu-tls compat with c++ compiler
  * Fix typo
  * fix: remove autoconf features default value in help message
  * fix: add missing pkgconfig file for memb flavour lib
  * Cleanup: Tests: Remove useless pre-C99 compatibility code
    from tap.h
  * Document C99 and C++11 requirement in README.md
  * Always use '__thread' for Thread local storage except on MSVC
  * Fix: powerpc32: transparent unions alter calling convention
  * fix: don't use C++ thread_local on MacOs
  * wfcqueue API: implement overloaded wrappers with templates
  * wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
  * wfstack C++ API: implement overloaded wrappers with templates
  * lfstack C++ API: implement overloaded wrappers with templates
  * wfstack: combine C++ API cds_wfs_stack_cast with overloading
  * lfstack: combine C++ API cds_lfs_stack_cast with overloading
  * fix: test_build tap plan
  * Test C++ build of list head init
  * Fix order of initializers in CDS_LIST_HEAD_INIT
  * unit tests: test wfcqueue, wfstack, lfstack empty check
    functions in C++
  * wfcqueue: implement C++ API based on function overloading
  * wfstack: implement C++ API based on function overloading
  * lfstack: implement C++ API based on function overloading
  * Fix tap.h: remove extra semicolon in pass/fail macros
  * Add C++ build tests
  * Build and run regression and unit tests as C++ programs
  * Add --enable-Werror configure switch
  * Add `urcu_posix_assert()` as `assert()` replacement
  * Rename `urcu_assert()` to `urcu_assert_debug()`
  * cleanup: spelling fixes in comments
  * Make temporary variable in _rcu_dereference non-const
  * (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
  * Fix: x86 and s390: uatomic __hp() macro clang support
  * Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11</changelog>
</package>
<package pkgid="e490897396124c16c2465e55fd4113b3cbe775f43c2a27bd08edaf211a9d666b4b6f17e361b83ccea21c1df03f792fbc906861759cd5e75e1e7fd3b651b80604" name="liburing-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6" rel="slfo.1.1_1.3"/>
  <changelog author="ddiss@suse.com" date="1686571200">- Update to 2.4:
  * Add io_uring_{major,minor,check}_version() functions.
  * Add IO_URING_{MAJOR,MINOR,CHECK}_VERSION() macros.
  * FFI support (for non-C/C++ languages integration).
  * Add io_uring_prep_msg_ring_cqe_flags() function.
  * Deprecate --nolibc configure option.
  * CONFIG_NOLIBC is always enabled on x86-64, x86, and aarch64.
  * Add support for IORING_REGISTER_USE_REGISTERED_RING and use if available.
  * Add io_uring_close_ring_fd() function.
  * Add io_uring_prep_msg_ring_fd_alloc function.
  * Add io_uring_free_buf_ring() and io_uring_setup_buf_ring() functions.
  * Ensure that io_uring_prep_accept_direct(), io_uring_prep_openat_direct(),
    io_uring_prep_openat2_direct(), io_uring_prep_msg_ring_fd(), and
    io_uring_prep_socket_direct() factor in being called with
    IORING_FILE_INDEX_ALLOC for allocating a direct descriptor.
  * Add io_uring_prep_sendto() function.
- Add liburing-ffi2 package for corresponding FFI library, given that
  dependents will normally require either that or the base library (not both).
- Drop upstream patches:
  * 0001-Do-not-always-expect-multishot-recv-to-stop-posting-.patch
  * 0001-test-file-verify.t-Don-t-run-over-mlock-limit-when-r.patch
  * 0001-test-helpers-fix-socket-length-type.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1693483200">- add test-io_uring_register-fix-errno-confusion-and-new-e.patch
  to fix test errors on the 6.5 kernel</changelog>
  <changelog author="jslaby@suse.cz" date="1694692800">- build tests in parallel (using %{?_smp_mflags})</changelog>
  <changelog author="jslaby@suse.cz" date="1694779200">- tests-don-t-expect-multishot-recv-overflow-backloggi.patch (bsc#1215332)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701345600">- Make use of openSUSE build flags</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701691200">- Fix build on 32-bit x86</changelog>
  <changelog author="jslaby@suse.cz" date="1712145600">- Update to 2.5:
  * Add support for io_uring_prep_cmd_sock()
  * Add support for application allocated ring memory, for placing rings
    in huge mem. Available through io_uring_queue_init_mem().
  * Add support for registered ring fds
  * Various documentation updates
  * Various fixes
- Remove (they are upstream)
  * test-io_uring_register-fix-errno-confusion-and-new-e.patch
  * tests-don-t-expect-multishot-recv-overflow-backloggi.patch
- Add
  * test-recv-multishot-wait-for-the-right-amount-of-CQE.patch (to fix test
    errors on the 6.8.2 kernel)
  * test-no-mmap-inval-0-return-is-fine-too.patch (fix the test)</changelog>
  <changelog author="jslaby@suse.cz" date="1719576000">- Update to 2.6:
  * Add getsockopt and setsockopt socket commands
  * Add test cases to test/hardlink
  * Man page fixes
  * Add futex support, and test cases
  * Add waitid support, and test cases
  * Add read multishot, and test cases
  * Add support for IORING_SETUP_NO_SQARRAY
  * Use IORING_SETUP_NO_SQARRAY as the default
  * Add support for IORING_OP_FIXED_FD_INSTALL
  * Add io_uring_prep_fixed_fd_install() helper
  * Support for napi busy polling
  * Improve/add test cases
  * Man page fixes
  * Add sample 'proxy' example
- Remove (they are upstream)
  * test-no-mmap-inval-0-return-is-fine-too.patch
  * test-recv-multishot-wait-for-the-right-amount-of-CQE.patch
- exclude buf-ring-nommap.t test (crashes)</changelog>
  <changelog author="ddiss@suse.com" date="1720785600">- Fix buf-ring-nommap.t test failure
  * test-buf-ring-nommap-zero-the-ringbuf-memory.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1723118400">- Skip test buf-ring-nommap.t if ENOMEM appears (happens in ppc64le arch).
  * test-buf-ring-nommap-skip-the-test-on-queue-init-ENO.patch</changelog>
</package>
<package pkgid="454f9befe0bd56d3bb142a731a2e55cb5dfbaf82e23ea4f3799c895c68c4757eb1c6a5dd59990db57c4577b04422f04eac8617fcd71f1c95bb0ef4224cc696f0" name="liburing2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6" rel="slfo.1.1_1.3"/>
  <changelog author="ddiss@suse.com" date="1686571200">- Update to 2.4:
  * Add io_uring_{major,minor,check}_version() functions.
  * Add IO_URING_{MAJOR,MINOR,CHECK}_VERSION() macros.
  * FFI support (for non-C/C++ languages integration).
  * Add io_uring_prep_msg_ring_cqe_flags() function.
  * Deprecate --nolibc configure option.
  * CONFIG_NOLIBC is always enabled on x86-64, x86, and aarch64.
  * Add support for IORING_REGISTER_USE_REGISTERED_RING and use if available.
  * Add io_uring_close_ring_fd() function.
  * Add io_uring_prep_msg_ring_fd_alloc function.
  * Add io_uring_free_buf_ring() and io_uring_setup_buf_ring() functions.
  * Ensure that io_uring_prep_accept_direct(), io_uring_prep_openat_direct(),
    io_uring_prep_openat2_direct(), io_uring_prep_msg_ring_fd(), and
    io_uring_prep_socket_direct() factor in being called with
    IORING_FILE_INDEX_ALLOC for allocating a direct descriptor.
  * Add io_uring_prep_sendto() function.
- Add liburing-ffi2 package for corresponding FFI library, given that
  dependents will normally require either that or the base library (not both).
- Drop upstream patches:
  * 0001-Do-not-always-expect-multishot-recv-to-stop-posting-.patch
  * 0001-test-file-verify.t-Don-t-run-over-mlock-limit-when-r.patch
  * 0001-test-helpers-fix-socket-length-type.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1693483200">- add test-io_uring_register-fix-errno-confusion-and-new-e.patch
  to fix test errors on the 6.5 kernel</changelog>
  <changelog author="jslaby@suse.cz" date="1694692800">- build tests in parallel (using %{?_smp_mflags})</changelog>
  <changelog author="jslaby@suse.cz" date="1694779200">- tests-don-t-expect-multishot-recv-overflow-backloggi.patch (bsc#1215332)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701345600">- Make use of openSUSE build flags</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701691200">- Fix build on 32-bit x86</changelog>
  <changelog author="jslaby@suse.cz" date="1712145600">- Update to 2.5:
  * Add support for io_uring_prep_cmd_sock()
  * Add support for application allocated ring memory, for placing rings
    in huge mem. Available through io_uring_queue_init_mem().
  * Add support for registered ring fds
  * Various documentation updates
  * Various fixes
- Remove (they are upstream)
  * test-io_uring_register-fix-errno-confusion-and-new-e.patch
  * tests-don-t-expect-multishot-recv-overflow-backloggi.patch
- Add
  * test-recv-multishot-wait-for-the-right-amount-of-CQE.patch (to fix test
    errors on the 6.8.2 kernel)
  * test-no-mmap-inval-0-return-is-fine-too.patch (fix the test)</changelog>
  <changelog author="jslaby@suse.cz" date="1719576000">- Update to 2.6:
  * Add getsockopt and setsockopt socket commands
  * Add test cases to test/hardlink
  * Man page fixes
  * Add futex support, and test cases
  * Add waitid support, and test cases
  * Add read multishot, and test cases
  * Add support for IORING_SETUP_NO_SQARRAY
  * Use IORING_SETUP_NO_SQARRAY as the default
  * Add support for IORING_OP_FIXED_FD_INSTALL
  * Add io_uring_prep_fixed_fd_install() helper
  * Support for napi busy polling
  * Improve/add test cases
  * Man page fixes
  * Add sample 'proxy' example
- Remove (they are upstream)
  * test-no-mmap-inval-0-return-is-fine-too.patch
  * test-recv-multishot-wait-for-the-right-amount-of-CQE.patch
- exclude buf-ring-nommap.t test (crashes)</changelog>
  <changelog author="ddiss@suse.com" date="1720785600">- Fix buf-ring-nommap.t test failure
  * test-buf-ring-nommap-zero-the-ringbuf-memory.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1723118400">- Skip test buf-ring-nommap.t if ENOMEM appears (happens in ppc64le arch).
  * test-buf-ring-nommap-skip-the-test-on-queue-init-ENO.patch</changelog>
</package>
<package pkgid="9de48af94ae4363ffbcbffd800e3a6f8c2b4567c2044b5e706265ce1788a0d9546669ca7c547d00c8951954261c8c172d4d7d4329ddca918429512b323d786e2" name="libusb-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.27" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1521547201">- Use dos2unix to generate the non-windows trailing on files
- Remove sle11 support as it got borged with last commit and
  we don't mostly need it to build there</changelog>
  <changelog author="jengelh@inai.de" date="1521720000">- Fix SRPM group.</changelog>
  <changelog author="mardnh@gmx.de" date="1521979200">- Update to version 1.0.22
  * Core: Refactor code related to transfer flags and timeout handling
  * Linux: Support preallocating kernel memory for zerocopy USB
  * Linux: Deal with receiving POLLERR before all transfers have completed
  * Prevent attempts to recursively handle events
  * Fix race condition in handle_timeout()
  * Allow transferred argument to be optional in bulk APIs
  * Various other bug fixes and improvements
  * Fix the inclusion of "sys/time.h" on PowerPC (bsc#1178376)</changelog>
  <changelog author="mardnh@gmx.de" date="1567080000">- Update to version 1.0.23
  * Core: abandon synchronous transfers when device closure is
    detected.
  * Core: fix error in handling the removal of file descriptors
    while handling events.
  * New API libusb_set_log_cb() to redirect global and per context
    log messages to the provided log handling function.
  * New API libusb_wrap_sys_device to allow the user to specify
    the usb device to use.
  * Various other bug fixes and improvements.</changelog>
  <changelog author="mardnh@gmx.de" date="1607601600">- Update to version 1.0.24
  * Add new platform abstraction (#252).
  * Add Null POSIX backend.
  * Add support for eventfd.
  * New API libusb_hotplug_get_user_data().
  * Linux: Drop support for kernel older than 2.6.32.
  * Linux: Provide an event thread name. (#689).
  * Linux: Wait until all USBs have been reaped before freeing
    them. (#607)
  * Documentation fixes and improvements.
  * Various other bug fixes and improvements.</changelog>
  <changelog author="simon.vogl@gmx.net" date="1610884800">- Add 0001-fix-descriptor-parsing.patch to fix detection of some devices.</changelog>
  <changelog author="mardnh@gmx.de" date="1643716800">- Update to version 1.0.25
  * Fix regression with some particular devices
  * Fix regression with libusb_handle_events_timeout_completed()
  * Fix regression with cpu usage in libusb_bulk_transfer
  * New NO_DEVICE_DISCOVERY option replaces WEAK_AUTHORITY option
  * Various other bug fixes and improvements
- Drop not longer needed patch:
  * 0001-fix-descriptor-parsing.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1649592000">- Update to version 1.0.26
  * Fix regression with transfer free's after closing device
  * Fix regression with destroyed context if API is misused
  * Workaround for applications using missing default context
  * Fix hotplog enumeration regression
  * Build fixes for various platforms and configurations
  * Add interface bound checking for broken devices
  * Add umockdev tests on Linux</changelog>
  <changelog author="meissner@suse.com" date="1706788800">- Update to version 1.0.27
  * New libusb_init_context API to replace libusb_init
  * New libusb_get_max_alt_packet_size API
  * New libusb_get_platform_descriptor API (BOS)
  * Allow setting log callback with libusb_set_option/libusb_init_context
  * New WebAssembly + WebUSB backend using Emscripten
  * Fix regression in libusb_set_interface_alt_setting
  * Fix sync transfer completion race and use-after-free
  * Fix hotplug exit ordering
  * Linux: NO_DEVICE_DISCOVERY option set per context
- added signature and keyring. (key received via keyserver)</changelog>
</package>
<package pkgid="aa43fa0fc376a2e7b8e9171c686a411ce8b617d7defe54872bf8aba4322e8ed04ce6e4796e25cfb01f544cba6bbae41d2b856bfe27b0b78fe4d5d6f261b9d7e0" name="libusb-1_0-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.27" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1521547201">- Use dos2unix to generate the non-windows trailing on files
- Remove sle11 support as it got borged with last commit and
  we don't mostly need it to build there</changelog>
  <changelog author="jengelh@inai.de" date="1521720000">- Fix SRPM group.</changelog>
  <changelog author="mardnh@gmx.de" date="1521979200">- Update to version 1.0.22
  * Core: Refactor code related to transfer flags and timeout handling
  * Linux: Support preallocating kernel memory for zerocopy USB
  * Linux: Deal with receiving POLLERR before all transfers have completed
  * Prevent attempts to recursively handle events
  * Fix race condition in handle_timeout()
  * Allow transferred argument to be optional in bulk APIs
  * Various other bug fixes and improvements
  * Fix the inclusion of "sys/time.h" on PowerPC (bsc#1178376)</changelog>
  <changelog author="mardnh@gmx.de" date="1567080000">- Update to version 1.0.23
  * Core: abandon synchronous transfers when device closure is
    detected.
  * Core: fix error in handling the removal of file descriptors
    while handling events.
  * New API libusb_set_log_cb() to redirect global and per context
    log messages to the provided log handling function.
  * New API libusb_wrap_sys_device to allow the user to specify
    the usb device to use.
  * Various other bug fixes and improvements.</changelog>
  <changelog author="mardnh@gmx.de" date="1607601600">- Update to version 1.0.24
  * Add new platform abstraction (#252).
  * Add Null POSIX backend.
  * Add support for eventfd.
  * New API libusb_hotplug_get_user_data().
  * Linux: Drop support for kernel older than 2.6.32.
  * Linux: Provide an event thread name. (#689).
  * Linux: Wait until all USBs have been reaped before freeing
    them. (#607)
  * Documentation fixes and improvements.
  * Various other bug fixes and improvements.</changelog>
  <changelog author="simon.vogl@gmx.net" date="1610884800">- Add 0001-fix-descriptor-parsing.patch to fix detection of some devices.</changelog>
  <changelog author="mardnh@gmx.de" date="1643716800">- Update to version 1.0.25
  * Fix regression with some particular devices
  * Fix regression with libusb_handle_events_timeout_completed()
  * Fix regression with cpu usage in libusb_bulk_transfer
  * New NO_DEVICE_DISCOVERY option replaces WEAK_AUTHORITY option
  * Various other bug fixes and improvements
- Drop not longer needed patch:
  * 0001-fix-descriptor-parsing.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1649592000">- Update to version 1.0.26
  * Fix regression with transfer free's after closing device
  * Fix regression with destroyed context if API is misused
  * Workaround for applications using missing default context
  * Fix hotplog enumeration regression
  * Build fixes for various platforms and configurations
  * Add interface bound checking for broken devices
  * Add umockdev tests on Linux</changelog>
  <changelog author="meissner@suse.com" date="1706788800">- Update to version 1.0.27
  * New libusb_init_context API to replace libusb_init
  * New libusb_get_max_alt_packet_size API
  * New libusb_get_platform_descriptor API (BOS)
  * Allow setting log callback with libusb_set_option/libusb_init_context
  * New WebAssembly + WebUSB backend using Emscripten
  * Fix regression in libusb_set_interface_alt_setting
  * Fix sync transfer completion race and use-after-free
  * Fix hotplug exit ordering
  * Linux: NO_DEVICE_DISCOVERY option set per context
- added signature and keyring. (key received via keyserver)</changelog>
</package>
<package pkgid="62d4363ded4dcdfd4bef8f57a10d0c261cd040c1150ef0c04790469a4d62f88a7457d3b9ecd2b457523be19b483200d70785ea0f433b1faad232da6a2eb6bc49" name="libusbredirparser1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.13.0" rel="slfo.1.1_1.3"/>
  <changelog author="mkravec@suse.com" date="1455624000">- Update to version 0.7.1
  + usbredirfilter:
  - force check to device which had all interfaces skipped. This fix a bug
    which allow a KVM device to be redirect when it should not
  + usbredirparser:
  - allow missing capabilities from source host when loading a USB
    redirection stream during a qemu migration
  + usbredirhost:
  - new callback to drop isoc packets when application's pending writes buffer
    size is too big; The threshold calculation aims at 10fps as worst case to
    give at least 150ms of continuous data to application.</changelog>
  <changelog author="brogers@suse.com" date="1537185600">- Update to version 0.8.0
  + usbredirfilter:
  - Fix busy wait due endless recursion when interface_count is zero
  + usbredirhost:
  - Fix leak on error
  + usbredirserver:
  - Use 'busnum-devnum' instead of 'usbbus-usbaddr'
  - Add support for bind specific address -4 for ipv4, -6 for ipv6
  - Reject empty vendorid from command line
  - Enable TCP keepalive</changelog>
  <changelog author="brogers@suse.com" date="1617624000">- Update to version 0.9.0
  + Changes noted in ChangeLog.md:
    !2 Add usbredirect tool with feature parity with usbredirserver
    !6 Add fuzzer for usbredirparser
    !12 Add MSI installer for usbredirect tool
    !11 Add meson build: autotool will be removed in a future release
    !5 Limit packet's length to 65 kB
    !4 Fix wrong up-cast when checking for package's length
    Require LLVM's compiler-rt (optional: for fuzzer)
    Require glib2 &gt;= 2.44 (optional: for usbredirect)
    Deprecate usbredirserver in favor of usbredirect
  + Require libusb-1.0 &gt;= 1.22 due to libusb_set_option() usage
  + Require meson &gt;= 0.48 due to dictionary usage
  + Change docs to be in markdown format
  + add usbredir TCP client
  + add meson build support (which we now use to build package)
- Package the new usbredir TCP client: 'usbredirect'
- Fix meson include directory paths
  + meson-Fix-include-directories-needed-to-build.patch
- Fix pkgconfig data used in meson build
  + meson-Fix-pkgconfig-required-library-name-reference.patch</changelog>
  <changelog author="ro@suse.de" date="1629806400">- add patch usbredir-CVE-2021-3700.patch
  fix use-after-free in usbredirparser_serialize
  (CVE-2021-3700,bsc#1189491)</changelog>
  <changelog author="msuchanek@suse.de" date="1629806401">- Update to version 0.11.0
  - Avoid use-after-free in serialization (CVE-2021-3700, bsc#1189491)
  - Add local directory to include search path for meson
  - Fix generated by meson libusbredirhost.pc
- Remove upstreamed patches
  - meson-Fix-include-directories-needed-to-build.patch
  - meson-Fix-pkgconfig-required-library-name-reference.patch
  - usbredir-CVE-2021-3700.patch</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 0.12.0:
  * Implement dropping packets from isochronous devices
    when buffer is owned by usbredirparser library
  * Use packet size limit on deserialization
  * Fix possible bad state in deserialization logic
  * Fix possible memory leak in serialization logic
  * Fix (un)serialization with empty write buffers
  * Improvements to usbredirparserfuzz</changelog>
  <changelog author="dimstar@opensuse.org" date="1641384000">- Drop unknown llvm-fuzz meson paramerter: meson 0.60 is strict and
  fails when unknown parameters are being passed.</changelog>
  <changelog author="mliska@suse.cz" date="1649764800">- Add 0001-Use-D_FORTIFY_SOURCE-instead-of-Wp-D_FORTIFY_SOURCE.patch
  that enables future switch to -D_FORTIFY_SOURCE=3
  (gl#spice/usbredir#60).</changelog>
  <changelog author="dimstar@opensuse.org" date="1654689600">- Add upstream backported patches (boo#1199354):
  + 9426fdb1.patch: Check header length unserialising data.
  + dffc41c3.patch: usbredirect: fix leak on bad input.</changelog>
  <changelog author="dimstar@opensuse.org" date="1660046400">- Update to version 0.13.0:
  + Fix regression on unserialize data
  + Removes usbredirserver
  + Improved header length checks when unserialising data
  + Fix usage of command line argument in usbredirect
  + Fix small memory leak on usbredirect
- Drop 9426fdb1.patch and dffc41c3.patch: fixed upstream.
- Drop
  0001-Use-D_FORTIFY_SOURCE-instead-of-Wp-D_FORTIFY_SOURCE.patch:
  fixed upstream.
- Add keyring to validate source signature.</changelog>
</package>
<package pkgid="da11e66e0936818bdfc0d24ff459998e001233695da17bd98875eddbc49bc8fbf2fcf15c117688a24df9cb9d981c0dd6d6bd2ba405917e1805cdf176c1267efd" name="libuuid1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.40.4" rel="slfo.1.1_4.1"/>
  <changelog author="jslaby@suse.cz" date="1715860800">- add support for pidfs in kernel 6.9 (bsc#1224285)
  * 0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch
  * 0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch
  * 0003-lsfd-Support-pidfs.patch
  * 0004-lsfd-test-Adapt-test-cases-for-pidfs.patch</changelog>
  <changelog author="dmueller@suse.com" date="1718020800">- disable libmagic in more(1) for binary detection (bsc#1225197)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1721131200">- uncomment "autoreconf --install" to use the new version of automake</changelog>
  <changelog author="sbrabec@suse.com" date="1722859200">- Update to version 2.40.2:
  * cfdisk: fix possible integer overflow
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
    (obsoletes
    0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch,
    0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch,
    0003-lsfd-Support-pidfs.patch,
    0004-lsfd-test-Adapt-test-cases-for-pidfs.patch)
  * mkswap.8.adoc: update note regarding swapfile creation
  * setpgid: make -f work
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Enable kernel mountfd API, as it should be already stable
  (PED-9752).
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.</changelog>
  <changelog author="sbrabec@suse.com" date="1729512000">- Disable mountfd API again.
  (https://github.com/util-linux/util-linux/issues/3158)</changelog>
  <changelog author="sbrabec@suse.com" date="1731844800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).
- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
</package>
<package pkgid="2b09934618fa91a7a278beea8bcff72144edd364ebd9e50b134932c2195cd1b9647faa3bc69ceb2e75fe52a85709bda822a1d403c448ddece3664f64173d6522" name="libvdeplug3-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.3.2+svn587" rel="slfo.1.1_1.3"/>
  <changelog author="andrea@opensuse.org" date="1304856000">- New package</changelog>
  <changelog author="andrea@opensuse.org" date="1304942400">- clean up spec file, split out libraries and cryptcab package</changelog>
  <changelog author="andrea@opensuse.org" date="1305806400">- split out slirpvde to fix legal issues in bug bnc694822
- fixed descriptions on libraries subpackages</changelog>
  <changelog author="andrea@opensuse.org" date="1334577600">- new upstream version 2.3.2 (bug fix release)
- disabled paralled job that break build
- added python support</changelog>
  <changelog author="coolo@suse.com" date="1359892800">- update license to new format</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Drop README.SUSE we are better of with the online guides
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1500465601">- Add patch to build with our gcc checks:
  * vde2-buffer-overflow.patch
- Switch to svn checkout service in order to get something newer
  than 2011 tarball
- Update to version 2.3.2+svn587:
  * allow pipes on stdin for daemonized switches
  * vde_vxlan initial release
  * Add format string to fprintf calls.
  * Clean up unused variables.
  * In 2014, I think we can stop trying to outsmart the compiler. Remove
  * "register" storage class.
  * Add missing headers in vde_router Makefile.am.
  * Add missing format string in snprintf.
  * Add missing source files in vde_vxlan Makefile.am.
  * Enable vde_over_ns when header is present.
  * Remove unused variable in vde_over_ns.
  * vde_autolink: Add missing null entry in getopt_long array.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rename devel subpackages according to shared library guideline.
- Rectify RPM groups.</changelog>
  <changelog author="vcizek@suse.com" date="1505131200">- Patch for openssl 1.1 compatibility
  * add vde2-openssl_1.1_compatibility.patch from Debian</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Drop python2 from the buildrequirements
  * This means we lose python bindings but as the package is no
    longer developed there is 0 chance to obtain python3 bindings
    and the code is not compatible</changelog>
</package>
<package pkgid="71933a427aaf78e9ff773f4f22dcc7906c8133f778d0965bb91c6605925c1e5985b12a3ff918be640d3abd2771f817f14e7a202b002ebaf3dc1d054991104a2d" name="libverto-debugsource" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="slfo.1.1_1.2"/>
  <changelog author="pth@suse.de" date="1431086400">- Name shared library packages according to policy.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1432987200">- Add baselibs.conf to enable multilib.
- Spec cleanup.</changelog>
  <changelog author="hguo@suse.com" date="1434974400">- Remove irrelevant changelog entries from changelog file.</changelog>
  <changelog author="mlin@suse.com" date="1463400000">- Split off libev, glib and tevent module to sub-package</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- [fate#320326](https://fate.suse.com/320326)</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add libverto-devel baselib for use by libkrb5-devel-32bit,
  for use by Wine 32bit.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="dmueller@suse.com" date="1598529600">- update to 0.3.1:
  * Fix rare leak of DSO in module_load
  * Turn off -Wcast-function-type
  * Work around libev not being c89-compliant
  * Minor release bumps for verto_cleanup()
  * Leak fixes
  * Enforce strict c89 compliance for portability
  * Many warning fixes
  * Fix memleak in libverto:vfree
  * Update mutex usage to improve debugging
  * Add verto_cleanup() to free loaded_modules
  * Make C99 requirement explicit</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 0.3.2:
  * Fix use-after-free in verto_reinitialize
  * Fix use-after-free in verto_free()
  * Remove broken tevent support</changelog>
  <changelog author="dimstar@opensuse.org" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="2fda1e8c1a13b48caa6dd269c4fc2268038076eec50d94962b70b19f2d0f1415c58d2df1d9a6a504744a513d80aea040d302cf977907d8e2063cc8276efe781a" name="libverto1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="slfo.1.1_1.2"/>
  <changelog author="pth@suse.de" date="1431086400">- Name shared library packages according to policy.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1432987200">- Add baselibs.conf to enable multilib.
- Spec cleanup.</changelog>
  <changelog author="hguo@suse.com" date="1434974400">- Remove irrelevant changelog entries from changelog file.</changelog>
  <changelog author="mlin@suse.com" date="1463400000">- Split off libev, glib and tevent module to sub-package</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- [fate#320326](https://fate.suse.com/320326)</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add libverto-devel baselib for use by libkrb5-devel-32bit,
  for use by Wine 32bit.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="dmueller@suse.com" date="1598529600">- update to 0.3.1:
  * Fix rare leak of DSO in module_load
  * Turn off -Wcast-function-type
  * Work around libev not being c89-compliant
  * Minor release bumps for verto_cleanup()
  * Leak fixes
  * Enforce strict c89 compliance for portability
  * Many warning fixes
  * Fix memleak in libverto:vfree
  * Update mutex usage to improve debugging
  * Add verto_cleanup() to free loaded_modules
  * Make C99 requirement explicit</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 0.3.2:
  * Fix use-after-free in verto_reinitialize
  * Fix use-after-free in verto_free()
  * Remove broken tevent support</changelog>
  <changelog author="dimstar@opensuse.org" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="2b7dcc45b98ee485141e848bdcf2c1d762935f212ece0cca84a1e8bf16ae70256d0dcb82e284e829c21f04989dbe860ca27db7ffea118e0e6323b419560a05ef" name="libvirglrenderer1-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="slfo.1.1_1.2"/>
  <changelog author="brogers@suse.com" date="1574769600">- Update package to 0.8.0
  Note: not switching to meson build system yet since it would
  exclude distos with older meson (seems meson v0.49+ is required)
  Highlights include:
  + guest support for GL 4.3 on hosts with GLES 3.2 + certain
    extensions,
  + major performance improvements, and
  + lots of bug fixes.
- The shared object (SO) version changes from 0 to 1 with this
  package update</changelog>
  <changelog author="lma@suse.com" date="1577102400">- Add 5 security fixes
  * Check resource creation more thoroughly (CVE-2019-18388 bsc#1159479)
  0001-5d03711-vrend-Keep-the-max-texture-sizes-in-the-vrend_state.patch
  0002-0d9a2c8-vrend-Check-resource-creation-more-thoroughly.patch
  * check info formats in blits (CVE-2019-18390 bsc#1159478)
  0003-24f67de-vrend-check-info-formats-in-blits.patch
  * check transfer bounds for negative values too (CVE-2019-18389 bsc#1159482)
  0004-cbc8d8b-vrend-check-transfer-bounds-for-negative-values-too-.patch
  * check transfer iov holds enough data for the data upload (CVE-2019-18391 bsc#1159486)
  0005-2abeb18-vrend-check-that-the-transfer-iov-holds-enough-data-.patch
  * Add an assert for allocating the intermediate texture (CVE-2019-18392 bsc#1159454)
  0006-164d758-vrend-Add-an-assert-for-allocating-the-intermediate-.patch</changelog>
  <changelog author="brogers@suse.com" date="1578312000">- Update package to 0.8.1
  Requires very recent libepoxy, which is currently only available
  in Factory. Accordingly also switch to meson build, which also
  excludes older releases.
  Other highlights include:
  + support emulating planar image sampling
  + Add all formats to VIRGL_FORMAT that are referenced in Gallium
  + deprecation of the autotools build system
  + miscellaneous bug and performance fixes
  + drop the following patches, which are included in this release:
    0001-5d03711-vrend-Keep-the-max-texture-sizes-in-the-vrend_state.patch
    0002-0d9a2c8-vrend-Check-resource-creation-more-thoroughly.patch
    0003-24f67de-vrend-check-info-formats-in-blits.patch
    0004-cbc8d8b-vrend-check-transfer-bounds-for-negative-values-too-.patch
    0005-2abeb18-vrend-check-that-the-transfer-iov-holds-enough-data-.patch
    0006-164d758-vrend-Add-an-assert-for-allocating-the-intermediate-.patch</changelog>
  <changelog author="brogers@suse.com" date="1580817600">- Avoid potential DoS in texture allocation (CVE-2020-8003
  boo#1162521)
  vrend-Don-t-free-resource-struct-in-_resource_alloca.patch
- Avoid potential DoS if grid launched without prior Compute Shader
  (CVE-2020-8002 boo#1162519)
  vrend-Don-t-try-launching-a-grid-if-no-CS-is-availab.patch
- Avoid deleting wrong object, in use by others
  vrend-Use-the-original-context-to-delete-objects.patch
- Avoid potential use after free when deleting context
  vrend-Don-t-switch-to-ctx0-when-deleting-ctx0.patch</changelog>
  <changelog author="brogers@suse.com" date="1581508800">- Update package to 0.8.2
  Release is all bug fixes it seems. It includes these patches in
  the release tarball:
  vrend-Don-t-free-resource-struct-in-_resource_alloca.patch
  vrend-Don-t-try-launching-a-grid-if-no-CS-is-availab.patch
  vrend-Use-the-original-context-to-delete-objects.patch
  vrend-Don-t-switch-to-ctx0-when-deleting-ctx0.patch</changelog>
  <changelog author="brogers@suse.com" date="1617537600">- Update package to 0.9.0
  Highlights include:
  + multi-client support
  + supports newer glsl version
  + add ETC2 compressed formats
  + performance improvements
  + misc. bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1619697600">- Update to version 0.9.1:
  * Various small bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1642420800">- security update
- added patches
  fix CVE-2022-0175 [bsc#1194601], VUL-0: CVE-2022-0175: virglrenderer: Missing initialization of res-&gt;ptr
  + virglrenderer-CVE-2022-0175.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1642766400">- Pick up the full upstream patch for bsc#1194601, so we know from where it comes
  * No functional change intended</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- security update
  * Fix OOB in read_transfer_data() (CVE-2022-0135 bsc#1195389)
    Add virglrenderer-CVE-2022-0135.patch</changelog>
</package>
<package pkgid="653e65e73187f9c6b336f30b6811bef6d83e93e88601587f5128a071377e8f1f3fdf7efea3403d720f9919e043143f845a8d2cf52973bd2e35942110d5162dd5" name="libvirt-client-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="b4ddebd1c4811d1686c7bcf3ba781eca97d8644e84bec6f81222a483d735b5d307e4ac4be96c04ffa770132d170e17f22bd048e05db26721354c1027ce72648c" name="libvirt-daemon-common-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="833ee99b09aaec45d7280a7547dd63b0ab0facd5aba36da355af6e5c09bee41e65335b07d8fc09ba204fce1c5b5851ccd7bebc977132d33aee5d2bab0989eacc" name="libvirt-daemon-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="6d3e19253be9dbe71e1fe7e0882027e41b16c3a247dba5c98b13a5a19c84c90c9aa9262fdba6ed92e1a4a161ec8198e962b690e4a37e3f26c9763fac33d30d4d" name="libvirt-daemon-driver-network-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="af9a2144710a9ab83dcd9002d94a3ffd5b7008a2ba554034bdb2f44b8da686a87487ab2701c99bf82a6c472b5df24b121220496c2a6e426bda1e2fc164724f00" name="libvirt-daemon-driver-nodedev-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="1363eb2f09bd7281e6908cb93ac1b9d8790ee06c3f9ce0454d6d3761b61176e9f8e61949d6e1877d8440f7e112b19dcf970136315fead8cd73beac0036da3344" name="libvirt-daemon-driver-nwfilter-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="5b01db5d7f0707de140205d68c21195c11d3814cacfc52719ef98a55ff774856360a525a99f039a9a3e43a3303587f6ab7f2f765b7dbced310f797c7ecef905e" name="libvirt-daemon-driver-qemu-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="2a1a811fe69581d817b3c9b3f74a0417db87fba2bcd75f73ba454f02ea5750f18e22ca005b633ce7dad548f143c8a495b2d240f163815b1d98dd542a1b0350c8" name="libvirt-daemon-driver-secret-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="23e883e4bb9050d083980a13dfcb0a6acea4e61cfb665fd191593d1a15525d485be51a6e37758c0b44fc33796cb68cc52cd05538fc5c22b26c20ee397af2ce16" name="libvirt-daemon-driver-storage-core-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="23510cb1885cfd855e9b58b7558586b5d7b225da6f870ffe86a1347a667c81db748d90f31fb6ea0486efdda3f2abb66b7d4bd962909924ff86ca7dd4c8a5e826" name="libvirt-daemon-driver-storage-disk-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="3fabbe1d20184a271d3c4ddad8517cbb5725e8ca1429ffe4262dd78fd7e03cc661c7477610b03dd5eaaa10ad36f640edf86e2e555f9a94afb3af82cfc9397928" name="libvirt-daemon-driver-storage-iscsi-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="b4df6cff19395314bae476867a830adb4d64ff7554e71821a4b4727e0702818d585db63023d53baa6d50b5fda2baa8987fb20b5ec7979275408d67071b7c2ff2" name="libvirt-daemon-driver-storage-iscsi-direct-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="1949860dee7cdec525c8e9d2959a6815bf7d247ced100de7e140e76674fdb45a79f90c998f22c6b0de94f3cd9a40e812b22b0bb6198b5951df7b574795e6571d" name="libvirt-daemon-driver-storage-logical-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="599ac7f35589a4502c4585b33433ef56393c48c62f4f3bfd52d9e8cd593175859c58582bc2ea86c4dff131daaaff857ff3e63e29c06745dd59f546b6d53f3b65" name="libvirt-daemon-driver-storage-mpath-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="bd26f066af26ccd5c04c563b52ad9b086b62e06701731da068ca338c2ffaf47e0f6ea07ed9d8faf51a1e0d62496f22f7652198e70de9a6fbc4f7ac6306572ccc" name="libvirt-daemon-driver-storage-rbd-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="5bdcfe461b282aed9abcbb6531637cfa933bcf2947dfcd603e7fdea9045a86bdeb015b17f3fdd0bd39403afc986adabc9a69100323ba144488f2d4e1fc50ec2e" name="libvirt-daemon-driver-storage-scsi-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="2710d13f5107416817f8446dadbd8fde082ad9c4efb51e50983657eeff76a69c074368f29c87ac1d98f4346bf89a81f0c37dcfd49810e2af53c5b67d40ef418a" name="libvirt-daemon-lock-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="f82c1309a70967f1660def00a1bd5ad1c94a08059944dc33e49f10ab487cf6e0644becb4153e90f21864db84f17ad21b184bdacb6d1ace6c463d1ae0cffeaebf" name="libvirt-daemon-log-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="1f0f4df668a47c8699f55cc8fb0950c74ee232812a520adfc1bec90eb08302bf711b68a1f71655a98edd9a81c3ba42c7494d844fa03a035c91befcce82d32a7f" name="libvirt-daemon-plugin-lockd-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="3b395eb2e642dbb3e6625fd2822db6622b2134204218ee253d2e60ebb6e595ad2f5a1018c88fe4f469031d958bdb0011099a77dbd9dabe27b884edafadea9626" name="libvirt-daemon-proxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="eb4ccfa3aaa79249ec0f5307f23e9f90dd8936f1dedbf3a120fad20356fbc23bec7201784483dacc03da43aaa7aa568c13567566435ebfaf01eba82fdcc0e413" name="libvirt-dbus-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.1" rel="slfo.1.1_1.2"/>
  <changelog author="lnussel@suse.de" date="1592395200">- initial package version 1.4.0</changelog>
  <changelog author="jfehlig@suse.com" date="1594123200">- spec: Switch from explicitly adding user:group to sysuser
  mechanism</changelog>
  <changelog author="lnussel@suse.de" date="1601899200">- Actually require sysuser package
- Backport patch from git to autostart dbus interface using systemd
  (libvirt-dbus-systemd.diff)</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- Fix syntax errors in system-user-libvirt-dbus.conf
  boo#1178530</changelog>
  <changelog author="jfehlig@suse.com" date="1622030400">- Add libvirtdbus user to libvirt group
  boo#1182538</changelog>
  <changelog author="jfehlig@suse.com" date="1647000000">- Update to version 1.4.1:
  * Release of libvirt-dbus 1.4.1
  * tests: allow running our tests against installed libvirt-dbus
  * tests: report proper error if `abs_top_builddir` is not defined
  * gitlab: use --fatal-meson-warnings in builds
  * meson: add git_werror option and only set if -Dwerror is not set
  * meson: honour meson warning_level setting
  * gitlab: adapt to use meson for libvirt-glib build
  * ci: refresh containers for CentOS-8 PowerTools repo rename
  * gitlab: replace "libvirt-" prefix with "ci-" in dockerfiles
  * gitlab: refresh containers with lcitool for fully minimized base
  * Dropped patches: libvirt-dbus-systemd.diff
- Add source service file
- Change system-user-libvirt-dbus subpackage to noarch
- Require libvirt group in system-user-libvirt-dbus subpackage
  bsc#1196968</changelog>
  <changelog author="gmbr3@opensuse.org" date="1647000001">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1647777600">- Avoid self cycle due to user</changelog>
</package>
<package pkgid="7c186804e4cbd8103ea79da335a437ee1cd53d364b2850e9e490ae81e05d40191666a172934f44b3a8343436d81110d6de6e773eb8001ad9ff4358ca4a95ff21" name="libvirt-dbus-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.1" rel="slfo.1.1_1.2"/>
  <changelog author="lnussel@suse.de" date="1592395200">- initial package version 1.4.0</changelog>
  <changelog author="jfehlig@suse.com" date="1594123200">- spec: Switch from explicitly adding user:group to sysuser
  mechanism</changelog>
  <changelog author="lnussel@suse.de" date="1601899200">- Actually require sysuser package
- Backport patch from git to autostart dbus interface using systemd
  (libvirt-dbus-systemd.diff)</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- Fix syntax errors in system-user-libvirt-dbus.conf
  boo#1178530</changelog>
  <changelog author="jfehlig@suse.com" date="1622030400">- Add libvirtdbus user to libvirt group
  boo#1182538</changelog>
  <changelog author="jfehlig@suse.com" date="1647000000">- Update to version 1.4.1:
  * Release of libvirt-dbus 1.4.1
  * tests: allow running our tests against installed libvirt-dbus
  * tests: report proper error if `abs_top_builddir` is not defined
  * gitlab: use --fatal-meson-warnings in builds
  * meson: add git_werror option and only set if -Dwerror is not set
  * meson: honour meson warning_level setting
  * gitlab: adapt to use meson for libvirt-glib build
  * ci: refresh containers for CentOS-8 PowerTools repo rename
  * gitlab: replace "libvirt-" prefix with "ci-" in dockerfiles
  * gitlab: refresh containers with lcitool for fully minimized base
  * Dropped patches: libvirt-dbus-systemd.diff
- Add source service file
- Change system-user-libvirt-dbus subpackage to noarch
- Require libvirt group in system-user-libvirt-dbus subpackage
  bsc#1196968</changelog>
  <changelog author="gmbr3@opensuse.org" date="1647000001">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1647777600">- Avoid self cycle due to user</changelog>
</package>
<package pkgid="b871b2c00b003b264727b896402a92116ca9feab1cb77549bbdda5aa2692f787ad92a415e04f11370e354a7f027d3c1b787c1c762d966d90a6ef217878325d3c" name="libvirt-debugsource" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="9f45bbb6b025f852928b15ae2c7cc68d88b5301489ae9c00519ff56841395b0138962980aef2f8f7e52323836b309e5ff12de9de8a1d80c12908bccb9f5be30f" name="libvirt-glib-1_0-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="zaitor@opensuse.org" date="1435233600">- Update to version 0.2.1:
  + Fix libtoolize detection in autogen.sh.
  + Allow storage volume format compatibility level to be set.
  + Add pre-condition checks to more public API entry points.
  + Don't try to return a value from void functions.
  + Add API for controlling storage pool autostart flag.
  + Add API for filesystem image format.
  + Add loop, nbd and ploop filesystem types.
  + Fix setting of driver type when called more than once.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1436270400">- Fix setting file system type and format.
  bsc#936841 46897c1b-fs-type-fix.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 0.2.2:
  + Add API for getting interface MAC address.
  + Simplify implementation of object listing APIs.
  + Fix memory leaks of virConnect objects.
  + Port to use GTask instead of GSimpleAsyncResult.
  + Add API to get list of physical network interfaces.
  + Add API to get list of virtual networks.
  + Add API to get DHCP address of virtual networks.
  + Avoid overwriting filesystem type when setting format.
  + Include XML data for tests in dist.
  + Add support for UNIX chardev sources.
  + Fix test linking on platforms with strict linker deps.
  + Add ability to set video ram + vgamem.
- Drop 46897c1b-fs-type-fix.patch: Fixed upstream.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 0.2.3:
  + virt-admin and administration API.
  + Various improvements in virtio devices support.
  + Log daemon: logging improvements and protocol.
  + network: selectively disable -Wcast-align in
    virNetDevParseDadStatus.
  + log_manager: Include configmake.h last.
  + virtlogd:
  - Fix build without DBus.
  - Use %llu to print 64bit types.</changelog>
  <changelog author="zaitor@opensuse.org" date="1479211200">- Update to version 1.0.0:
  + Switch to new release numbering scheme, major digit incremented
    each year, minor for each release, micro for stable branches
    (if any).
  + Fix Libs.private variable in pkg-config file.
  + Fix git introspection warnings.
  + Add ability to set SPICE gl property.
  + Add support for virtio video model.
  + Add support for 3d accel property.
  + Add support for querying video model.
  + Add support for host device config for PCI devs.
  + Add docs for more APIs.
  + Avoid unused variable warnings.
  + Fix check for libvirt optional features to use pkg-config.
  + Delete manually written python binding. All apps should use
    PyGObject with gobject introspection.
  + Allow schema to be NULL on config objects.
  + Preserve unknown devices listed in XML.
  + Add further test coverage.
- Add gpg signed source.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546689600">- Update to version 2.0.0:
  + Increase min libvirt to 1.2.5.
  + Increase min glib to 2.38.
  + Fix example program event detail strings.
  + Set LC_CTYPE=en_US.UTF-8 when running python apps.
  + Don't relay on non-portable paths.
  + Fix sha-bang lines for portability.
  + Remove bogus casts for g_object_ref args.
  + Disable -Wcast-function-type warnings.
  + Modernize gobject macro usage.
  + Allow adding namespace to child nodes.
  + Add ICH9 audio support.
  + Add API for getting machine type.
  + Updated translations.
- Add fdupes BuildRequires and macro: Remove duplicates.</changelog>
  <changelog author="jfehlig@suse.com" date="1575374400">- Update to version 3.0.0
  + Add support for bochs video device
  + Add API to query firmware config
  + Improve testing coverage
  + Validate min/max glib API versions in use
  + Remove deprecated G_PARAM_PRIVATE
  + Fix docs build linking problems
  + Convert python demos to be python 3 compatible &amp; use
    modern best practice for pyobject introspection bindings
  + Add API to query domain capaibilities
  + Refresh translations
  + Simplify build process for handling translations
  + Fix some memory leaks
  + Add API for setting storage volume features
  + boo#1158282</changelog>
  <changelog author="dimstar@opensuse.org" date="1616155200">- Update to version 4.0.0:
  + Replace autotools build system with meson.
  + Mandate libvirt &gt;= 1.2.8.
  + Mandate libxml2 &gt;= 2.9.1.
  + Mandate glib &gt;= 2.48.0.
  + Mandate gobject-introspection &gt;= 1.46.0.
  + Fix docs incompatibility with gtk-doc &gt;= 1.30.
  + Misc API docs fixes.
  + Add constants related to NVRAM during domain delete.
  + Add domain config API for controller ports attribute.
  + Fix compat with newer glib by avoid volatile for enum types.
  + Updated translations.
- Switch build system to meson:
  + Drop libtool BuildRequires: no longer needed.
  + Add meson BuildRequires.
  + Add gtk-doc BuildRequires: new dependency.
  + Replace configure/make/make_install macros with
    meson/meson_build/meson_install variants.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701864000">- Update to version 5.0.0:
  + Fix compatiblity with libxml2 &gt;= 2.12.0
  + Bump min libvirt version to 2.3.0
  + Bump min meson to 0.56.0
  + Require use of GCC &gt;= 4.8 / CLang &gt; 3.4 / XCode CLang &gt; 5.1
  + Mark USB disks as removable by default
  + Add support for audio device backend config
  + Add support for DBus graphics backend config
  + Add support for controlling firmware feature flags
  + Improve compiler flag handling in meson
  + Extend library version script handling to FreeBSD
  + Fix pointer sign issue in capabilities config API
  + Fix compat with gnome.mkenums() in Meson 0.60.0
  + Avoid compiler warnings from gi-ir-scanner generated code by
    not setting glib version constraints
  + Be more robust about NULL GError parameters
  + Disable unimportant cast alignment compiler warnings
  + Use ‘pragma once’ in all header files
  + Updated translations.</changelog>
</package>
<package pkgid="dd64693bbfdc654f55b2c98030e16697f72b147071df65ba6241ca60667bb9d158543b6c632deca4f267be4a38453bbe85e483b4c1fc4858dce7ecfd1f41960c" name="libvirt-glib-debugsource" arch="aarch64">
  <version epoch="0" ver="5.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="zaitor@opensuse.org" date="1435233600">- Update to version 0.2.1:
  + Fix libtoolize detection in autogen.sh.
  + Allow storage volume format compatibility level to be set.
  + Add pre-condition checks to more public API entry points.
  + Don't try to return a value from void functions.
  + Add API for controlling storage pool autostart flag.
  + Add API for filesystem image format.
  + Add loop, nbd and ploop filesystem types.
  + Fix setting of driver type when called more than once.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1436270400">- Fix setting file system type and format.
  bsc#936841 46897c1b-fs-type-fix.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 0.2.2:
  + Add API for getting interface MAC address.
  + Simplify implementation of object listing APIs.
  + Fix memory leaks of virConnect objects.
  + Port to use GTask instead of GSimpleAsyncResult.
  + Add API to get list of physical network interfaces.
  + Add API to get list of virtual networks.
  + Add API to get DHCP address of virtual networks.
  + Avoid overwriting filesystem type when setting format.
  + Include XML data for tests in dist.
  + Add support for UNIX chardev sources.
  + Fix test linking on platforms with strict linker deps.
  + Add ability to set video ram + vgamem.
- Drop 46897c1b-fs-type-fix.patch: Fixed upstream.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 0.2.3:
  + virt-admin and administration API.
  + Various improvements in virtio devices support.
  + Log daemon: logging improvements and protocol.
  + network: selectively disable -Wcast-align in
    virNetDevParseDadStatus.
  + log_manager: Include configmake.h last.
  + virtlogd:
  - Fix build without DBus.
  - Use %llu to print 64bit types.</changelog>
  <changelog author="zaitor@opensuse.org" date="1479211200">- Update to version 1.0.0:
  + Switch to new release numbering scheme, major digit incremented
    each year, minor for each release, micro for stable branches
    (if any).
  + Fix Libs.private variable in pkg-config file.
  + Fix git introspection warnings.
  + Add ability to set SPICE gl property.
  + Add support for virtio video model.
  + Add support for 3d accel property.
  + Add support for querying video model.
  + Add support for host device config for PCI devs.
  + Add docs for more APIs.
  + Avoid unused variable warnings.
  + Fix check for libvirt optional features to use pkg-config.
  + Delete manually written python binding. All apps should use
    PyGObject with gobject introspection.
  + Allow schema to be NULL on config objects.
  + Preserve unknown devices listed in XML.
  + Add further test coverage.
- Add gpg signed source.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546689600">- Update to version 2.0.0:
  + Increase min libvirt to 1.2.5.
  + Increase min glib to 2.38.
  + Fix example program event detail strings.
  + Set LC_CTYPE=en_US.UTF-8 when running python apps.
  + Don't relay on non-portable paths.
  + Fix sha-bang lines for portability.
  + Remove bogus casts for g_object_ref args.
  + Disable -Wcast-function-type warnings.
  + Modernize gobject macro usage.
  + Allow adding namespace to child nodes.
  + Add ICH9 audio support.
  + Add API for getting machine type.
  + Updated translations.
- Add fdupes BuildRequires and macro: Remove duplicates.</changelog>
  <changelog author="jfehlig@suse.com" date="1575374400">- Update to version 3.0.0
  + Add support for bochs video device
  + Add API to query firmware config
  + Improve testing coverage
  + Validate min/max glib API versions in use
  + Remove deprecated G_PARAM_PRIVATE
  + Fix docs build linking problems
  + Convert python demos to be python 3 compatible &amp; use
    modern best practice for pyobject introspection bindings
  + Add API to query domain capaibilities
  + Refresh translations
  + Simplify build process for handling translations
  + Fix some memory leaks
  + Add API for setting storage volume features
  + boo#1158282</changelog>
  <changelog author="dimstar@opensuse.org" date="1616155200">- Update to version 4.0.0:
  + Replace autotools build system with meson.
  + Mandate libvirt &gt;= 1.2.8.
  + Mandate libxml2 &gt;= 2.9.1.
  + Mandate glib &gt;= 2.48.0.
  + Mandate gobject-introspection &gt;= 1.46.0.
  + Fix docs incompatibility with gtk-doc &gt;= 1.30.
  + Misc API docs fixes.
  + Add constants related to NVRAM during domain delete.
  + Add domain config API for controller ports attribute.
  + Fix compat with newer glib by avoid volatile for enum types.
  + Updated translations.
- Switch build system to meson:
  + Drop libtool BuildRequires: no longer needed.
  + Add meson BuildRequires.
  + Add gtk-doc BuildRequires: new dependency.
  + Replace configure/make/make_install macros with
    meson/meson_build/meson_install variants.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701864000">- Update to version 5.0.0:
  + Fix compatiblity with libxml2 &gt;= 2.12.0
  + Bump min libvirt version to 2.3.0
  + Bump min meson to 0.56.0
  + Require use of GCC &gt;= 4.8 / CLang &gt; 3.4 / XCode CLang &gt; 5.1
  + Mark USB disks as removable by default
  + Add support for audio device backend config
  + Add support for DBus graphics backend config
  + Add support for controlling firmware feature flags
  + Improve compiler flag handling in meson
  + Extend library version script handling to FreeBSD
  + Fix pointer sign issue in capabilities config API
  + Fix compat with gnome.mkenums() in Meson 0.60.0
  + Avoid compiler warnings from gi-ir-scanner generated code by
    not setting glib version constraints
  + Be more robust about NULL GError parameters
  + Disable unimportant cast alignment compiler warnings
  + Use ‘pragma once’ in all header files
  + Updated translations.</changelog>
</package>
<package pkgid="2669968edc73936b5241a4728805c0ffd3ff0f12dc210c4bc36836c97243b9235a5c1480ad569273a5442543d9e4038f94d0d8d3e2edca146b6e655f502aacb1" name="libvirt-libs-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="5ca1cadcefaa3217e69bd163b3770a36c7bbfb29292c002e1baf8099e1b1876012be65e5d2567e1d63c6d6682591430402113bce0636e220ff40ec4b4ffb96fb" name="libvirt-nss-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1719403200">- qemu: Fix migration with custom XML
  bsc#1226492</changelog>
</package>
<package pkgid="d548f64daec4819e94e9aaadabd0a18b3865a41489b7eaf32570621b06e70f8ad24ac1273b1e0bfc1cd7f5acda2297004132fcb2bf2c429632f023e85cf02b15" name="libvisual-0_4-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.4.0" rel="slfo.1.1_1.3"/>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="anixx@opensuse.org" date="1308916800">- added a patch from Debian to fix build</changelog>
  <changelog author="mls@suse.de" date="1319198400">- do not use /usr/src/packages in specfile</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="dvaleev@suse.com" date="1343304000">- defining inline causes problems trying to build against
  libvisual headers</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="jengelh@inai.de" date="1652270400">- Remove old specfile constructs
- Remove --with-pic, this is only useful with --enable-static
- Make %install sh-compatible
- Remove .la files, I do not think we will need it
- Repair rpmlint error "libvisual.x86_64: E:
  shlib-policy-name-error SONAME: libvisual-0.4.so.0, expected
  package suffix: 0_4-0"</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="d11b1a0b8224fa37ffd25b244a0f0f13a00b894dcb54cd9708002abef37cc29ebe10cd9babd9ddb1f6512940931566c1be90c9ffdddcb8190c32ca246f87b848" name="libvisual-debugsource" arch="aarch64">
  <version epoch="0" ver="0.4.0" rel="slfo.1.1_1.3"/>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="anixx@opensuse.org" date="1308916800">- added a patch from Debian to fix build</changelog>
  <changelog author="mls@suse.de" date="1319198400">- do not use /usr/src/packages in specfile</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="dvaleev@suse.com" date="1343304000">- defining inline causes problems trying to build against
  libvisual headers</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="jengelh@inai.de" date="1652270400">- Remove old specfile constructs
- Remove --with-pic, this is only useful with --enable-static
- Make %install sh-compatible
- Remove .la files, I do not think we will need it
- Repair rpmlint error "libvisual.x86_64: E:
  shlib-policy-name-error SONAME: libvisual-0.4.so.0, expected
  package suffix: 0_4-0"</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="ad0ff516b9c423153bf804455f3f01d52ae4c8e0ce80b7edc308aac5912e1b07f54a84e2a28d53f68ea41d34018d466736e14df23b62da01332cd4725cca0b80" name="libvorbis-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.7" rel="slfo.1.1_1.2"/>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1594382400">- Update to version 1.3.7
  * Fix CVE-2018-10392 and CVE-2018-10393 - out-of-bounds read
    encoding very low sample rates
  * Fix CVE-2017-14160 - out-of-bounds read encoding very low
    sample rates.
  * Fix handling invalid bytes per sample arguments.
  * Fix handling invalid channel count arguments.
  * Fix invalid free on seek failure.
  * Fix negative shift reading blocksize.
  * Fix accepting unreasonable float32 values.
  * Fix tag comparison depending on locale.
  * Fix unnecessarily linking libm.
  * Fix memory leak in test_sharedbook.
  * Distribute CMake build files with the source package.
  * Remove unnecessary configure --target switch.
  * Add OSS-Fuzz support.
  * Build system and integration updates.
- Drop not longer needed patches (fixed by upstream):
  * vorbis-CVE-2017-14160.patch
  * vorbis-CVE-2018-10392.patch
  * vorbis-CVE-2018-10393.patch
- Add source verification</changelog>
  <changelog author="gmbr3@opensuse.org" date="1655294400">- Remove bad %defattr - not needed and causes SHLIB non-executable
  rpmlint error</changelog>
  <changelog author="mpluskal@suse.com" date="1678708800">- Build AVX2 enabled hwcaps library for x86_64-v3
- Small spec file cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="584137a431bdbbb19554a16aca8c870144b361856746445432502a443002cedf888498c47a3b813815864973f3b235db3dc91cd2286719931229a9962ff2a1c5" name="libvorbis0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7" rel="slfo.1.1_1.2"/>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1594382400">- Update to version 1.3.7
  * Fix CVE-2018-10392 and CVE-2018-10393 - out-of-bounds read
    encoding very low sample rates
  * Fix CVE-2017-14160 - out-of-bounds read encoding very low
    sample rates.
  * Fix handling invalid bytes per sample arguments.
  * Fix handling invalid channel count arguments.
  * Fix invalid free on seek failure.
  * Fix negative shift reading blocksize.
  * Fix accepting unreasonable float32 values.
  * Fix tag comparison depending on locale.
  * Fix unnecessarily linking libm.
  * Fix memory leak in test_sharedbook.
  * Distribute CMake build files with the source package.
  * Remove unnecessary configure --target switch.
  * Add OSS-Fuzz support.
  * Build system and integration updates.
- Drop not longer needed patches (fixed by upstream):
  * vorbis-CVE-2017-14160.patch
  * vorbis-CVE-2018-10392.patch
  * vorbis-CVE-2018-10393.patch
- Add source verification</changelog>
  <changelog author="gmbr3@opensuse.org" date="1655294400">- Remove bad %defattr - not needed and causes SHLIB non-executable
  rpmlint error</changelog>
  <changelog author="mpluskal@suse.com" date="1678708800">- Build AVX2 enabled hwcaps library for x86_64-v3
- Small spec file cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="691cb77e4cdb391111d0d9b73324d8911222ca0ec4cc5e3ad7d6c3a0e6fba9990cc82ee92e18fb1b9eda58fc752043249eabb2a7a1ee8217ae0923983ac87055" name="libvorbisenc2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7" rel="slfo.1.1_1.2"/>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1594382400">- Update to version 1.3.7
  * Fix CVE-2018-10392 and CVE-2018-10393 - out-of-bounds read
    encoding very low sample rates
  * Fix CVE-2017-14160 - out-of-bounds read encoding very low
    sample rates.
  * Fix handling invalid bytes per sample arguments.
  * Fix handling invalid channel count arguments.
  * Fix invalid free on seek failure.
  * Fix negative shift reading blocksize.
  * Fix accepting unreasonable float32 values.
  * Fix tag comparison depending on locale.
  * Fix unnecessarily linking libm.
  * Fix memory leak in test_sharedbook.
  * Distribute CMake build files with the source package.
  * Remove unnecessary configure --target switch.
  * Add OSS-Fuzz support.
  * Build system and integration updates.
- Drop not longer needed patches (fixed by upstream):
  * vorbis-CVE-2017-14160.patch
  * vorbis-CVE-2018-10392.patch
  * vorbis-CVE-2018-10393.patch
- Add source verification</changelog>
  <changelog author="gmbr3@opensuse.org" date="1655294400">- Remove bad %defattr - not needed and causes SHLIB non-executable
  rpmlint error</changelog>
  <changelog author="mpluskal@suse.com" date="1678708800">- Build AVX2 enabled hwcaps library for x86_64-v3
- Small spec file cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="7026b2a516dfa4e2fcb4fac1e1e12d5566dceb0ec28ce84ee5729412088eda5b20639bc9184ec0a9a3113e07278efcb564d4d592cc12ff752c55cd20cdcb729f" name="libvulkan1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.290" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1680091200">- Update to release SDK-1.3.243.0
  * Log when VK_LAYER_PATH is ignored
  * Implement VK_LUNARG_direct_driver_loading</changelog>
  <changelog author="jengelh@inai.de" date="1681905600">- Update to 1.3.247
  * Make correct layer be used when duplicates are present
  * Fix ordering regression for VK_INSTANCE_LAYERS</changelog>
  <changelog author="jengelh@inai.de" date="1685448000">- Update to release SDK-1.3.250.0
  * No changes over 1.3.247 [SDK-250 is a branch of regular-243
    with some cherry-picks bringing it to roughly regular-247;
    there is little relation to regular-250]</changelog>
  <changelog author="jengelh@inai.de" date="1692705600">- Update to release SDK-1.3.261.0
  * Warn when ICD Manifest version differs from
    vkEnumerateInstanceVersion
  * Enable VK_KHR_maintenance_5 support</changelog>
  <changelog author="jengelh@inai.de" date="1698408000">- Update to release SDK-1.3.268.0
  * Add VK_LOADER_LAYERS_ALLOW environment variable.
  * Add Debug extension support to test layer</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Align the fallback XDG config dirs with SUSE spec in-case it
  can't read it from the environment</changelog>
  <changelog author="stigpro@outlook.fr" date="1705579200">- Update to release SDK-1.3.275.0
  * Instance extensions unsupported by physical devices now return
    ERROR_EXTENSION_NOT_PRESENT
  * Unload drivers which report 0 physical devices</changelog>
  <changelog author="jengelh@inai.de" date="1710936000">- Update to release SDK-1.3.280.0
  * Bugfixes for Windows</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release SDK-1.3.283.0
  * Bugfixes for Windows</changelog>
  <changelog author="jengelh@inai.de" date="1721736000">- Update to release SDK-1.3.290
  * Remove faulty fallback for unknown functions
  * tests: Allow test ICD to handle NULL pApplicationInfo
  * Fix preloaded ICDs being freed with custom allocators
  * Fix RegCloseKey exeption when double-closing hKeys</changelog>
</package>
<package pkgid="ee1213c034fa4d862378ca29fd587d3f101fae864f294e550549d9b9cd28c6ba66700fb19058b72897881c2fe3c62a24334ededf3dc5c3b2b00b3a67e52cf194" name="libwayland-client0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="slfo.1.1_2.1"/>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="llyyr.public@gmail.com" date="1680609600">- Update to release 1.22.0
  * This new release adds explicit events for the preferred buffer scale
    and transform, adds an event to indicate the pointer's physical scroll
    direction, adds a few new convenience functions, and includes various
    spec clarifications and bug fixes.</changelog>
</package>
<package pkgid="19684a15ab727378a7be4e73f4b549c622863d8a044b512828dc528d277bdcac9dbe50649e6568dbe2e2d592ef08ff1c3bc247c1ee697733549b0910881a2632" name="libwayland-cursor0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="slfo.1.1_2.1"/>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="llyyr.public@gmail.com" date="1680609600">- Update to release 1.22.0
  * This new release adds explicit events for the preferred buffer scale
    and transform, adds an event to indicate the pointer's physical scroll
    direction, adds a few new convenience functions, and includes various
    spec clarifications and bug fixes.</changelog>
</package>
<package pkgid="e6bbc4a56896f8cd27e9ff35802ba02821e3f5b265a470bccafcd9011ebedc21d5dffbb8d09d0f6e35f1352a3ac720a0b662697b892f8b793e5c846b542cc3fc" name="libwayland-egl1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="slfo.1.1_2.1"/>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="llyyr.public@gmail.com" date="1680609600">- Update to release 1.22.0
  * This new release adds explicit events for the preferred buffer scale
    and transform, adds an event to indicate the pointer's physical scroll
    direction, adds a few new convenience functions, and includes various
    spec clarifications and bug fixes.</changelog>
</package>
<package pkgid="200943eee6b70c62e717080a3d231043401badd227a7b8c1aafe0f5aebcab30a42115822184cbc5df8c25076d528d40fdc1e47d7efd83f08e9e6ef76cf14550f" name="libwayland-server0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="slfo.1.1_2.1"/>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="llyyr.public@gmail.com" date="1680609600">- Update to release 1.22.0
  * This new release adds explicit events for the preferred buffer scale
    and transform, adds an event to indicate the pointer's physical scroll
    direction, adds a few new convenience functions, and includes various
    spec clarifications and bug fixes.</changelog>
</package>
<package pkgid="e0b475e9edd6732fe75e2606aa1ddb42e1f4da75ff49f26a42bbaa968b1c36530280f2044fa171d49456610043dc60ed7f69a332814010f5a236930d77839904" name="libwrap0-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.6" rel="slfo.1.1_1.3"/>
  <changelog author="tchvatal@suse.com" date="1417176000">- Cleanup with spec-cleaner
- Remove obsolete sections of provides from 2k6
- Remove static library</changelog>
  <changelog author="okir@suse.com" date="1437393600">- Fix breakage of IPv6 address handling [bsc#914527, bsc#899185]
  Added patches:
  tcp_wrappers_7.6-ipv6-sockaddr-storage.patch
  tcp_wrappers_7.6-ipv6-subnet.diff
  tcp_wrappers_7.6-ipv6-host-match.patch
  tcp_wrappers_7.6-ipv6-mapped-v4.patch
- Re-added static library</changelog>
  <changelog author="kukuk@suse.de" date="1459944000">- tcp_wrappers_7.6.diff: don't use public headers for own
  functions, make own yp_get_default_domain static.</changelog>
  <changelog author="meissner@suse.com" date="1496491200">- tcp_wrappers_7.6-optflags.diff: enable PIE for all binaries
  directly.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="mliska@suse.cz" date="1569326400">- Add tcp_wrappers_7.6-ipv6.fix.fix3.diff in order to fix
  boo#1149708.</changelog>
  <changelog author="kukuk@suse.com" date="1597406400">- tcp_wrappers_7.6-shared-lib.diff: Linux has STRERROR not SYS_ERRLIST
  [bsc#1175272]</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- Makefile is not parallel-safe</changelog>
  <changelog author="lnussel@suse.de" date="1662379200">- use _libdir (boo#1191098)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665489600">- Add hosts.allow and hosts.deny config files from the netcfg package,
  as they are tcpd specific, bsc#1099755</changelog>
</package>
<package pkgid="3c8f14ea455bc9a46b9a6a93aec281f23193391cffa1140800b3910637b28b4f3fea442eb9e65ea43de03fe5acce0ac7bf727199df130311019ca8e59c092458" name="libwtmpdb0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.13.0+git.20240814" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.com" date="1691582400">- Update to version 0.8.0
  - wtmpdb boottime: print boot time</changelog>
  <changelog author="kukuk@suse.com" date="1692014400">- Update to version 0.9.0
  - Try to detect systemctl soft-reboot
  - Many conversation warning/error fixes</changelog>
  <changelog author="kukuk@suse.com" date="1692705600">- Fix last.1 manual page reference
- Update to version 0.9.1
  - Fix printf format specifier on 32bit</changelog>
  <changelog author="schubi@suse.com" date="1695124800">- Update to version 0.9.2
  - Set busy timeout for DB access: The process is waiting until
    5 seconds for DB connection if the DB is locked by another
    process.</changelog>
  <changelog author="kukuk@suse.com" date="1698321600">- Update to version 0.9.3
  - wtmpdb last: don't print date in the future if there is no
    db entry</changelog>
  <changelog author="kukuk@suse.com" date="1702468800">- Update to version 0.10.0
  - last: support matching for username and/or tty</changelog>
  <changelog author="kukuk@suse.com" date="1704715200">- Update to version 0.11.0
  - last: add support for time-format option</changelog>
  <changelog author="kukuk@suse.com" date="1715169600">- Update to version 0.12.0+git.20240508:
  - boot: Query systemd if soft-reboot was done</changelog>
  <changelog author="kukuk@suse.com" date="1721995200">- Update to version 0.13.0+git.20240726:
  * Release version 0.13.0
  * Fix variable overflow and check for it (#15)</changelog>
  <changelog author="kukuk@suse.com" date="1723636800">- Update to version 0.13.0+git.20240814:
  * wtmpdb-update-boot service requires dbus</changelog>
</package>
<package pkgid="392e3712bc9a5910b01c0ba8ab00135ef774f4e6dae345feb1403cd8cf22c0b0d9c554ad5fc639a5919a8342f074fd205581d2a2f6d526f04ebf3f66a966f8f5" name="libxcb-debugsource" arch="aarch64">
  <version epoch="0" ver="1.15" rel="slfo.1.1_1.2"/>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534161600">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
  <changelog author="msrb@suse.com" date="1534852800">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Update to version proposed upstream.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1578052800">- Update 1.13.1
  * u_don-t-flag-extra-reply-in-xcb_take_socket.patch has been upstreamed.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Update to version 1.14
  * Update configure.ac bug URL for gitlab migration
  * configure.ac: Depend on pthread-stubs only on not-Linux
  * c_client: fix "adress" typo
  * Include time.h before using time()
  * Handle EINTR from recvmsg in _xcb_in_read
  * Implement xcb_total_read() and xcb_total_written().
  * tests: Support Check 0.13.0 API
  * Add "ge.*" to src/.gitignore
  * Update README for gitlab migration
  * Add README.md to EXTRA_DIST</changelog>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
</package>
<package pkgid="5738433217b274c87aa52c858bf0b825b25371d658fc8eb70dda3c083acd6c8ddf2a8a262a136ddb7facdd9a36a90dddb3ebbde30a62bd43d9ad65540614eedf" name="libxcb-dri2-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15" rel="slfo.1.1_1.2"/>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534161600">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
  <changelog author="msrb@suse.com" date="1534852800">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Update to version proposed upstream.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1578052800">- Update 1.13.1
  * u_don-t-flag-extra-reply-in-xcb_take_socket.patch has been upstreamed.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Update to version 1.14
  * Update configure.ac bug URL for gitlab migration
  * configure.ac: Depend on pthread-stubs only on not-Linux
  * c_client: fix "adress" typo
  * Include time.h before using time()
  * Handle EINTR from recvmsg in _xcb_in_read
  * Implement xcb_total_read() and xcb_total_written().
  * tests: Support Check 0.13.0 API
  * Add "ge.*" to src/.gitignore
  * Update README for gitlab migration
  * Add README.md to EXTRA_DIST</changelog>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
</package>
<package pkgid="5257ba9bb84aade5de60f0c37a55609f70ce0a8bb43e1df3142746f544022f383de53aa0ee5e474520ee0c6094836f31b841880051e449dae868fadcec62b73d" name="libxcb-dri3-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15" rel="slfo.1.1_1.2"/>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534161600">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
  <changelog author="msrb@suse.com" date="1534852800">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Update to version proposed upstream.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1578052800">- Update 1.13.1
  * u_don-t-flag-extra-reply-in-xcb_take_socket.patch has been upstreamed.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Update to version 1.14
  * Update configure.ac bug URL for gitlab migration
  * configure.ac: Depend on pthread-stubs only on not-Linux
  * c_client: fix "adress" typo
  * Include time.h before using time()
  * Handle EINTR from recvmsg in _xcb_in_read
  * Implement xcb_total_read() and xcb_total_written().
  * tests: Support Check 0.13.0 API
  * Add "ge.*" to src/.gitignore
  * Update README for gitlab migration
  * Add README.md to EXTRA_DIST</changelog>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
</package>
<package pkgid="7150be466b1cb50535b894bab05a8e0a4b4868fb010f59ca8e8e39aca2c63d73096335d2713fa5b1969f6cc2e653e6ed6ca9c110831846fc21badc43ae5b217f" name="libxcb-glx0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15" rel="slfo.1.1_1.2"/>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534161600">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
  <changelog author="msrb@suse.com" date="1534852800">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Update to version proposed upstream.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1578052800">- Update 1.13.1
  * u_don-t-flag-extra-reply-in-xcb_take_socket.patch has been upstreamed.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Update to version 1.14
  * Update configure.ac bug URL for gitlab migration
  * configure.ac: Depend on pthread-stubs only on not-Linux
  * c_client: fix "adress" typo
  * Include time.h before using time()
  * Handle EINTR from recvmsg in _xcb_in_read
  * Implement xcb_total_read() and xcb_total_written().
  * tests: Support Check 0.13.0 API
  * Add "ge.*" to src/.gitignore
  * Update README for gitlab migration
  * Add README.md to EXTRA_DIST</changelog>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
</package>
<package pkgid="4b152481bdfc2680849eb24459c09d65f782488832fce213ca5f39b0253853bb4144c55ef47501d3d524aff9c7afe0a201110debd21b4b45b0f15b69912935d1" name="libxcb-present0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15" rel="slfo.1.1_1.2"/>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534161600">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
  <changelog author="msrb@suse.com" date="1534852800">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Update to version proposed upstream.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1578052800">- Update 1.13.1
  * u_don-t-flag-extra-reply-in-xcb_take_socket.patch has been upstreamed.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Update to version 1.14
  * Update configure.ac bug URL for gitlab migration
  * configure.ac: Depend on pthread-stubs only on not-Linux
  * c_client: fix "adress" typo
  * Include time.h before using time()
  * Handle EINTR from recvmsg in _xcb_in_read
  * Implement xcb_total_read() and xcb_total_written().
  * tests: Support Check 0.13.0 API
  * Add "ge.*" to src/.gitignore
  * Update README for gitlab migration
  * Add README.md to EXTRA_DIST</changelog>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
</package>
<package pkgid="e8294f612d8171ba2105e2044807e5b60941dab484e1e0f29e3afa9bff6ca2e91946e99e1382f5244faff3290930c786da774a6a67f7489e08010eae7384b9ee" name="libxcb-randr0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15" rel="slfo.1.1_1.2"/>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534161600">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
  <changelog author="msrb@suse.com" date="1534852800">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Update to version proposed upstream.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1578052800">- Update 1.13.1
  * u_don-t-flag-extra-reply-in-xcb_take_socket.patch has been upstreamed.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Update to version 1.14
  * Update configure.ac bug URL for gitlab migration
  * configure.ac: Depend on pthread-stubs only on not-Linux
  * c_client: fix "adress" typo
  * Include time.h before using time()
  * Handle EINTR from recvmsg in _xcb_in_read
  * Implement xcb_total_read() and xcb_total_written().
  * tests: Support Check 0.13.0 API
  * Add "ge.*" to src/.gitignore
  * Update README for gitlab migration
  * Add README.md to EXTRA_DIST</changelog>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
</package>
<package pkgid="f83568cf14959474f41cf57fb90f867395efda63073d1679a3ddf39f96e42fe80b52ff59bdf7f3985715e5b21f9ea15e599b66e83a1bd5dae74fe2a482c35886" name="libxcb-render0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15" rel="slfo.1.1_1.2"/>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534161600">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
  <changelog author="msrb@suse.com" date="1534852800">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Update to version proposed upstream.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1578052800">- Update 1.13.1
  * u_don-t-flag-extra-reply-in-xcb_take_socket.patch has been upstreamed.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Update to version 1.14
  * Update configure.ac bug URL for gitlab migration
  * configure.ac: Depend on pthread-stubs only on not-Linux
  * c_client: fix "adress" typo
  * Include time.h before using time()
  * Handle EINTR from recvmsg in _xcb_in_read
  * Implement xcb_total_read() and xcb_total_written().
  * tests: Support Check 0.13.0 API
  * Add "ge.*" to src/.gitignore
  * Update README for gitlab migration
  * Add README.md to EXTRA_DIST</changelog>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
</package>
<package pkgid="a288ba17715922e1606c65e273f93b008019c5cdd6b4661aa014ecbaeee1aac55430006aa34ff20fb2f940823f808c09263f81c33b50f3b863dd28f5afeb13d8" name="libxcb-shm0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15" rel="slfo.1.1_1.2"/>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534161600">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
  <changelog author="msrb@suse.com" date="1534852800">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Update to version proposed upstream.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1578052800">- Update 1.13.1
  * u_don-t-flag-extra-reply-in-xcb_take_socket.patch has been upstreamed.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Update to version 1.14
  * Update configure.ac bug URL for gitlab migration
  * configure.ac: Depend on pthread-stubs only on not-Linux
  * c_client: fix "adress" typo
  * Include time.h before using time()
  * Handle EINTR from recvmsg in _xcb_in_read
  * Implement xcb_total_read() and xcb_total_written().
  * tests: Support Check 0.13.0 API
  * Add "ge.*" to src/.gitignore
  * Update README for gitlab migration
  * Add README.md to EXTRA_DIST</changelog>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
</package>
<package pkgid="03a459481fc217b69a1e031dd647394bb4ad702238439b591cea9d77f6697887933fd6f140701237d4325ec36ef856de4e1537c02b62d442754defc1b8e698c7" name="libxcb-sync1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15" rel="slfo.1.1_1.2"/>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534161600">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
  <changelog author="msrb@suse.com" date="1534852800">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Update to version proposed upstream.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1578052800">- Update 1.13.1
  * u_don-t-flag-extra-reply-in-xcb_take_socket.patch has been upstreamed.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Update to version 1.14
  * Update configure.ac bug URL for gitlab migration
  * configure.ac: Depend on pthread-stubs only on not-Linux
  * c_client: fix "adress" typo
  * Include time.h before using time()
  * Handle EINTR from recvmsg in _xcb_in_read
  * Implement xcb_total_read() and xcb_total_written().
  * tests: Support Check 0.13.0 API
  * Add "ge.*" to src/.gitignore
  * Update README for gitlab migration
  * Add README.md to EXTRA_DIST</changelog>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
</package>
<package pkgid="49adec5ea9f9afa5417e8771c7d220d939b48f1a3e76dff071ec01623da9eccf0d090b3b6b706b4889e4167f9298a6a3ccb26703c0394b51abe09d82254ee4f1" name="libxcb-xfixes0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15" rel="slfo.1.1_1.2"/>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534161600">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
  <changelog author="msrb@suse.com" date="1534852800">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Update to version proposed upstream.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1578052800">- Update 1.13.1
  * u_don-t-flag-extra-reply-in-xcb_take_socket.patch has been upstreamed.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Update to version 1.14
  * Update configure.ac bug URL for gitlab migration
  * configure.ac: Depend on pthread-stubs only on not-Linux
  * c_client: fix "adress" typo
  * Include time.h before using time()
  * Handle EINTR from recvmsg in _xcb_in_read
  * Implement xcb_total_read() and xcb_total_written().
  * tests: Support Check 0.13.0 API
  * Add "ge.*" to src/.gitignore
  * Update README for gitlab migration
  * Add README.md to EXTRA_DIST</changelog>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
</package>
<package pkgid="9a36273443836178f2cd7b8437e644d9bb0f25ededaa9814d1d821fee3b6075b5a265ebf0b9915daf8cc728862f3a87e3bcdabfa5ed1c7c99fcff2ac13f1e5ce" name="libxcb1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15" rel="slfo.1.1_1.2"/>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534161600">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
  <changelog author="msrb@suse.com" date="1534852800">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Update to version proposed upstream.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1578052800">- Update 1.13.1
  * u_don-t-flag-extra-reply-in-xcb_take_socket.patch has been upstreamed.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Update to version 1.14
  * Update configure.ac bug URL for gitlab migration
  * configure.ac: Depend on pthread-stubs only on not-Linux
  * c_client: fix "adress" typo
  * Include time.h before using time()
  * Handle EINTR from recvmsg in _xcb_in_read
  * Implement xcb_total_read() and xcb_total_written().
  * tests: Support Check 0.13.0 API
  * Add "ge.*" to src/.gitignore
  * Update README for gitlab migration
  * Add README.md to EXTRA_DIST</changelog>
  <changelog author="sndirsch@suse.com" date="1651665600">- Update to version 1.15
  * xcb_auth: Quiet -Wimplicit-fallthrough warning in get_authptr()
  * Fix integer overflows in xcb_in.c
  * Use the 'present' field to properly check that the XC-MISC
  * Fix a memory leak
  * Increment libtool version info for libxcb-dri3
  * Add newline when printing auth/connection failure string to stderr
  * Fix build on Windows
  * Fix writev emulation on Windows
  * c_client.py: Extract get_expr_field_names()
  * c_client.py: Use get_expr_field_names directly to resolve list fields
  * c_client: Extract _c_get_field_mapping_for_expr()
  * c_client.py: Implement handling of &lt;length&gt; element
  * tests: don't use deprecated fail_unless check API
  * gitignore: add files generated by make check
  * Avoid request counter truncation in replies map after 2**32 requests
  * Fix hang in xcb_request_check()
  * Improve/fix docs for reply fds functions</changelog>
  <changelog author="sndirsch@suse.com" date="1651665601">- buildrequire xcb-proto &gt;= 1.15</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- avoid configuring twice
- add gpg validation / source url / keyring</changelog>
</package>
<package pkgid="e38a1df0bf052cb301a3565b4435618d7c41b98db485a62be2f07cfce02f33847c12d17eadd081eab4f19ef902f6a620ca4398ca98057dbeb8cac8753b64ea77" name="libxcrypt-debugsource" arch="aarch64">
  <version epoch="0" ver="4.4.36" rel="slfo.1.1_1.4"/>
  <changelog author="schwab@suse.de" date="1629288000">- Update to 4.4.25
  * Fix several issues found by Covscan in the testsuite.  These include:
  - CWE-170: String not null terminated (STRING_NULL)
  - CWE-188: Reliance on integer endianness (INCOMPATIBLE_CAST)
  - CWE-190: Unintentional integer overflow (OVERFLOW_BEFORE_WIDEN)
  - CWE-569: Wrong sizeof argument (SIZEOF_MISMATCH)
  - CWE-573: Missing varargs init or cleanup (VARARGS)
  - CWE-687: Argument cannot be negative (NEGATIVE_RETURNS)
  * Stricter checking of invalid salt characters (issue #135).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638100800">- update to 4.4.26:
  * fix compilation on system with gcc &gt;= 10 that do not support
    declarations with __attribute__((symver))
- switch to bootstrapped tarball, add upstream signing key and
  verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 4.4.27:
  * Limit the maximum amount of rbytes to 64 bytes (512 bits) for yescrypt,
    gost-yescrypt, and scrypt</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 4.4.28:
  No changes whatsoever.</changelog>
  <changelog author="schwab@suse.de" date="1669809600">- Update to 4.4.33
  * Fix variable name in crypt(3) for a datamember of 'struct crypt_data'
  * Fix -Werror=strict-overflow in lib/crypt-des.c, which is seen
    by GCC 12.x
  * Add some SHA-2 Maj() optimization in lib/alg-sha256.c
  * Fix -Werror=conversion in lib/alg-yescrypt-opt.c
  * Improvements to huge page handling in lib/alg-yescrypt-platform.c
  * Fix -Werror=sign-conversion in lib/alg-yescrypt-platform.c</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1678449600">- Enable livepatching support on x86_64.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO now (boo#1138833) and use FAT LTO objects for static libs.</changelog>
  <changelog author="schwab@suse.de" date="1685620800">- Update to 4.4.34
  * Optimize some cast operation for performance in
    lib/alg-yescrypt-platform.c.
  * Add SHA-2 Maj() optimization proposed by Wei Dai in lib/alg-sha512.c.
  * Explicitly clean the stack and context state after computation in
    lib/alg-gost3411-2012-hmac.c, lib/alg-hmac-sha1.c, and lib/alg-sha256.c
    (issue #168).</changelog>
  <changelog author="dmueller@suse.com" date="1688212800">- update to 4.4.35:
  * Fix build with Perl v5.38.0 (issue #170).
  * Fix build with MinGW-w(32|64).</changelog>
  <changelog author="schwab@suse.de" date="1689595200">- Update to 4.4.36
  * Fix left over bits failing with Perl v5.38.0</changelog>
</package>
<package pkgid="ebfb6c3d54ea99892e29820d2d0b138890fa06f3014771afc9a19fb6d381b574ec4359f5cd6828799dba4acc7a39535785bc184f74dfd4d48e323583d174686c" name="libxkbcommon-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="jengelh@inai.de" date="1631275200">- Update to release 1.3.1
  * In `xkbcli interactive-x11`, use the Esc keysym instead of
    the Esc keycode for quitting.
  * In `xkbcli how-to-type`, add `--keysym` argugment for how to
    type a keysym instead of a Unicode codepoint.
  * Fix a crash in `xkb_x11_keymap_new_from_device` error
    handling given some invalid keymaps. Had regressed in 1.2.0.</changelog>
  <changelog author="jengelh@inai.de" date="1643976000">- Update to release 1.4.0
  * In libxkbregistry, variants now inherit iso639, iso3166 and
    brief from parent layout if omitted.
  * In libxkbregistry, skip over invalid ISO-639 or ISO-3166
    entries.</changelog>
  <changelog author="jengelh@inai.de" date="1653220800">- Update to release 1.4.1
  * Fix compose sequence overriding (common prefix) not working
    correctly. Regressed in 1.2.0.
  * Remove various bogus currency sign (particulary Euro and
    Korean Won) entries from the keysym &lt;-&gt; Unicode mappings.
    They prevented the real keysyms/codepoints for these from
    mapping correctly.</changelog>
  <changelog author="jengelh@inai.de" date="1672660800">- Update to release 1.5.0
  * Fix crash in `xkbcli interactive-wayland` under a compositor
    which supports new versions of the xdg-shell protocol.
  * New API: XKB_CONTEXT_NO_SECURE_GETENV,
    RXKB_CONTEXT_NO_SECURE_GETENV</changelog>
</package>
<package pkgid="9df3ddbcf8934b38545ffccf0b8d628ca2649a1efaac620c464edcc3ea994c70000162be15cdd78a33df1466b1f8a1829f3c86873dca4c9ba79265c4f2c7cd87" name="libxkbcommon0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="jengelh@inai.de" date="1631275200">- Update to release 1.3.1
  * In `xkbcli interactive-x11`, use the Esc keysym instead of
    the Esc keycode for quitting.
  * In `xkbcli how-to-type`, add `--keysym` argugment for how to
    type a keysym instead of a Unicode codepoint.
  * Fix a crash in `xkb_x11_keymap_new_from_device` error
    handling given some invalid keymaps. Had regressed in 1.2.0.</changelog>
  <changelog author="jengelh@inai.de" date="1643976000">- Update to release 1.4.0
  * In libxkbregistry, variants now inherit iso639, iso3166 and
    brief from parent layout if omitted.
  * In libxkbregistry, skip over invalid ISO-639 or ISO-3166
    entries.</changelog>
  <changelog author="jengelh@inai.de" date="1653220800">- Update to release 1.4.1
  * Fix compose sequence overriding (common prefix) not working
    correctly. Regressed in 1.2.0.
  * Remove various bogus currency sign (particulary Euro and
    Korean Won) entries from the keysym &lt;-&gt; Unicode mappings.
    They prevented the real keysyms/codepoints for these from
    mapping correctly.</changelog>
  <changelog author="jengelh@inai.de" date="1672660800">- Update to release 1.5.0
  * Fix crash in `xkbcli interactive-wayland` under a compositor
    which supports new versions of the xdg-shell protocol.
  * New API: XKB_CONTEXT_NO_SECURE_GETENV,
    RXKB_CONTEXT_NO_SECURE_GETENV</changelog>
</package>
<package pkgid="b2a40d67c47456df92d61f49a30cae63bf7d3ece2ba07f344fcf3c8fab99ae9a6d4b36f53ebeac0127667afb8ca1e97b688b19344eb8f95fffcbcf1966aabc79" name="libxml2-2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.11.6" rel="slfo.1.1_8.1"/>
  <changelog author="pgajdos@suse.com" date="1740139200">- security update
- added patches
  fix CVE-2024-56171 [bsc#1237363], use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  + libxml2-CVE-2024-56171.patch
  fix CVE-2025-24928 [bsc#1237370], stack-based buffer overflow in xmlSnprintfElements in valid.c
  + libxml2-CVE-2025-24928.patch
  fix CVE-2025-27113 [bsc#1237418], NULL Pointer Dereference in libxml2 xmlPatMatch
  + libxml2-CVE-2025-27113.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1749038400">- security update
- added patches
  CVE-2024-40896 [bsc#1234812], XXE vulnerability
  + libxml2-CVE-2024-40896.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1769083200">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="dba8da6a9e317438764af83e332663e06f4a6a3053c31c64218b1ad9e8e4c28486745eeeec8c4574dedf83487b66e146de7b6705aaae492dc74495e521de0eab" name="libxml2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.11.6" rel="slfo.1.1_8.1"/>
  <changelog author="pgajdos@suse.com" date="1740139200">- security update
- added patches
  fix CVE-2024-56171 [bsc#1237363], use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  + libxml2-CVE-2024-56171.patch
  fix CVE-2025-24928 [bsc#1237370], stack-based buffer overflow in xmlSnprintfElements in valid.c
  + libxml2-CVE-2025-24928.patch
  fix CVE-2025-27113 [bsc#1237418], NULL Pointer Dereference in libxml2 xmlPatMatch
  + libxml2-CVE-2025-27113.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1749038400">- security update
- added patches
  CVE-2024-40896 [bsc#1234812], XXE vulnerability
  + libxml2-CVE-2024-40896.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1769083200">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="40ac82cb699b55c5cf4deaa85989a0b3aa4e661dbaa99a8e7f0a0fa2184eadae2182ab0aef73e6b5fc52f1468b6b21215d00fa659b671387ccdf966f0a343c16" name="libxml2-python-debugsource" arch="aarch64">
  <version epoch="0" ver="2.11.6" rel="slfo.1.1_8.1"/>
  <changelog author="pgajdos@suse.com" date="1740139200">- security update
- added patches
  fix CVE-2024-56171 [bsc#1237363], use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  + libxml2-CVE-2024-56171.patch
  fix CVE-2025-24928 [bsc#1237370], stack-based buffer overflow in xmlSnprintfElements in valid.c
  + libxml2-CVE-2025-24928.patch
  fix CVE-2025-27113 [bsc#1237418], NULL Pointer Dereference in libxml2 xmlPatMatch
  + libxml2-CVE-2025-27113.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1749038400">- security update
- added patches
  CVE-2024-40896 [bsc#1234812], XXE vulnerability
  + libxml2-CVE-2024-40896.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1769083200">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="b0e1a150b32940d5a01437d89951769afaf1944130f97581aff17daf769db6ae4d814cbc8c339aaa67189f450e926efbe9ef0851a64c23208ca635a9741c494e" name="libxml2-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.11.6" rel="slfo.1.1_8.1"/>
  <changelog author="pgajdos@suse.com" date="1740139200">- security update
- added patches
  fix CVE-2024-56171 [bsc#1237363], use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  + libxml2-CVE-2024-56171.patch
  fix CVE-2025-24928 [bsc#1237370], stack-based buffer overflow in xmlSnprintfElements in valid.c
  + libxml2-CVE-2025-24928.patch
  fix CVE-2025-27113 [bsc#1237418], NULL Pointer Dereference in libxml2 xmlPatMatch
  + libxml2-CVE-2025-27113.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1749038400">- security update
- added patches
  CVE-2024-40896 [bsc#1234812], XXE vulnerability
  + libxml2-CVE-2024-40896.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1769083200">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="148204e5c39ca99a3f492f712bcca40d208571ab08b3b1423a7b45742127a76bac07c3f1a064b873c20c8da64b20e218ea619ef20a1330f2b4539cd05088df1a" name="libxmlb-debugsource" arch="aarch64">
  <version epoch="0" ver="0.3.14" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1594382400">- Update to version 0.1.15:
  + New Features:
  - Add xb_builder_source_add_simple_adapter.
  - Allow reversing the query results.
- Changes from version 0.1.14:
  + New Features: Add MinGW Windows 64 builds to CI.
  + Bugfixes:
  - Allow compiling without gio-unix.
  - Do not use libuuid.
  - Do not unconditionally use -fstack-protector-strong.
  - Ignore adaptors added with xb_builder_source_add_converter().
- Drop pkgconfig(uuid) BuildRequires: No longer needed.
- Move installed-tests to devel subpackage.</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 0.2.1:
  - Do not assume g_content_type_guess() always returns valid results (Richard Hughes)
  - Make the build reproducible (Richard Hughes)
  - Revert "Do not show a critical warning for invalid XML" (Richard Hughes)
  - Update the header location to reflect the new API (Richard Hughes)
  - This release breaks API and ABI and bumps the version of libxmlb.so and so
  packages that depend on this library (e.g. fwupd or gnome-software) will need
  to be rebuilt at the same time.
  - Add the missing TEXT:INTE XPath support (Richard Hughes)
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation (Philip Withnall)
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag (Philip Withnall)
  - Allow specifying the node cache behaviour for the query (Richard Hughes)
  - Avoid recursion when setting flags if possible (Philip Withnall)
  - Avoid using weak pointers when building the silo (Philip Withnall)
  - Change the default value for the node cache (Richard Hughes)
  - Do not allocate opcodes individually (Philip Withnall)
  - Do not show a critical warning for invalid XML (Richard Hughes)
  - Do not unconditionally create GTimer objects (Philip Withnall)
  - Do not use the node cache when building indexes (Richard Hughes)
  - Lazy load more arrays to reduce RSS usage (Philip Withnall)
  - Report silo versions when versions mismatch (Robert Ancell)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.3.6:
  - Add support for LZMA decompression
  - Add locking for file monitors
  - Modernise property declaration
  - Add iterator for XbNode attributes and children
  - Put tail after the node when exporting XbBuilderNode
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Remove the G_ALIGNOF checks to fix compile with old GLib
    versions
  - Use the correct pkgconfig export package name in the GIR file
- Add pkgconfig(liblzma) BuildRequires: new dependency.</changelog>
  <changelog author="dmueller@suse.com" date="1658491200">- update to 0.3.9:
  * Fix the crash for when the root tree has no children (Richard Hughes)
  * Fix the crash when getting the element for the [empty] root (Richard Hughes)
  * Install xb-tool into bindir (Richard Hughes)
  * Ensure reproducible results when importing a node (Richard Hughes)
  * Ignore all hidden files when using _WATCH_DIRECTORY (Richard Hughes)
  * Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH (Richard Hughes)
  * Use the correct lookup method for the python3 script interpreter (Eli Schwartz)</changelog>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 0.3.10:
  * Fix dumping and exporting multiple files from the CLI (Richard Hughes)
  * Watch files before loading them into the builder (Philip Withnall)
  * Fix potential double free when filtering by language (Sergio Costas Rodriguez)</changelog>
  <changelog author="dmueller@suse.com" date="1671192000">- build hwcaps optimized libraries</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 0.3.11:
  * Add limited support for XPath 1.0 'in' (Richard Hughes)
  * Add support for zstd (Richard Hughes)
  * Do not assert() when decompressing invalid LZMA (Richard
    Hughes)</changelog>
  <changelog author="kilgore.trout@idesmi.eu" date="1692360000">- Update to 0.3.13:
  * Use indexes when binding value
  * Correctly tokenize when using a bound text value
  * Ensure tokens are all NULL when using xb_opcode_init()
  * Avoid building errors and debug strings when possible to make
    XbQuery faster
  * Fix content type detection on macOS
  * Inline a number of machine internals to make queries faster
  * Make zstd support optional
  * Setup various release build options</changelog>
  <changelog author="christophe@krop.fr" date="1696334400">- Update to 0.3.14
  * Fix comparing indexed text with integer values
- Enable libstemmer-devel BuildRequires and pass stemmer=true to
  meson setup, libstemmer now available in Tumbleweed.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1696939200">- baselibs.conf: don't build libxmlb2-32bit; baselibs.conf was
  added for the x86-64-v3 flavor; the -32bit was an unintended side
  effect.</changelog>
</package>
<package pkgid="fd668ef847712d6644879a78e3c31a85e9323f83e2bc3cef2d31f24c926e7f8a904f3c6f2afcaee185a0ac8dc62bd791807a9e55d2d05a9ffdd3f1f75d1a86ee" name="libxmlb2-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.3.14" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1594382400">- Update to version 0.1.15:
  + New Features:
  - Add xb_builder_source_add_simple_adapter.
  - Allow reversing the query results.
- Changes from version 0.1.14:
  + New Features: Add MinGW Windows 64 builds to CI.
  + Bugfixes:
  - Allow compiling without gio-unix.
  - Do not use libuuid.
  - Do not unconditionally use -fstack-protector-strong.
  - Ignore adaptors added with xb_builder_source_add_converter().
- Drop pkgconfig(uuid) BuildRequires: No longer needed.
- Move installed-tests to devel subpackage.</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 0.2.1:
  - Do not assume g_content_type_guess() always returns valid results (Richard Hughes)
  - Make the build reproducible (Richard Hughes)
  - Revert "Do not show a critical warning for invalid XML" (Richard Hughes)
  - Update the header location to reflect the new API (Richard Hughes)
  - This release breaks API and ABI and bumps the version of libxmlb.so and so
  packages that depend on this library (e.g. fwupd or gnome-software) will need
  to be rebuilt at the same time.
  - Add the missing TEXT:INTE XPath support (Richard Hughes)
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation (Philip Withnall)
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag (Philip Withnall)
  - Allow specifying the node cache behaviour for the query (Richard Hughes)
  - Avoid recursion when setting flags if possible (Philip Withnall)
  - Avoid using weak pointers when building the silo (Philip Withnall)
  - Change the default value for the node cache (Richard Hughes)
  - Do not allocate opcodes individually (Philip Withnall)
  - Do not show a critical warning for invalid XML (Richard Hughes)
  - Do not unconditionally create GTimer objects (Philip Withnall)
  - Do not use the node cache when building indexes (Richard Hughes)
  - Lazy load more arrays to reduce RSS usage (Philip Withnall)
  - Report silo versions when versions mismatch (Robert Ancell)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.3.6:
  - Add support for LZMA decompression
  - Add locking for file monitors
  - Modernise property declaration
  - Add iterator for XbNode attributes and children
  - Put tail after the node when exporting XbBuilderNode
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Remove the G_ALIGNOF checks to fix compile with old GLib
    versions
  - Use the correct pkgconfig export package name in the GIR file
- Add pkgconfig(liblzma) BuildRequires: new dependency.</changelog>
  <changelog author="dmueller@suse.com" date="1658491200">- update to 0.3.9:
  * Fix the crash for when the root tree has no children (Richard Hughes)
  * Fix the crash when getting the element for the [empty] root (Richard Hughes)
  * Install xb-tool into bindir (Richard Hughes)
  * Ensure reproducible results when importing a node (Richard Hughes)
  * Ignore all hidden files when using _WATCH_DIRECTORY (Richard Hughes)
  * Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH (Richard Hughes)
  * Use the correct lookup method for the python3 script interpreter (Eli Schwartz)</changelog>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 0.3.10:
  * Fix dumping and exporting multiple files from the CLI (Richard Hughes)
  * Watch files before loading them into the builder (Philip Withnall)
  * Fix potential double free when filtering by language (Sergio Costas Rodriguez)</changelog>
  <changelog author="dmueller@suse.com" date="1671192000">- build hwcaps optimized libraries</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 0.3.11:
  * Add limited support for XPath 1.0 'in' (Richard Hughes)
  * Add support for zstd (Richard Hughes)
  * Do not assert() when decompressing invalid LZMA (Richard
    Hughes)</changelog>
  <changelog author="kilgore.trout@idesmi.eu" date="1692360000">- Update to 0.3.13:
  * Use indexes when binding value
  * Correctly tokenize when using a bound text value
  * Ensure tokens are all NULL when using xb_opcode_init()
  * Avoid building errors and debug strings when possible to make
    XbQuery faster
  * Fix content type detection on macOS
  * Inline a number of machine internals to make queries faster
  * Make zstd support optional
  * Setup various release build options</changelog>
  <changelog author="christophe@krop.fr" date="1696334400">- Update to 0.3.14
  * Fix comparing indexed text with integer values
- Enable libstemmer-devel BuildRequires and pass stemmer=true to
  meson setup, libstemmer now available in Tumbleweed.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1696939200">- baselibs.conf: don't build libxmlb2-32bit; baselibs.conf was
  added for the x86-64-v3 flavor; the -32bit was an unintended side
  effect.</changelog>
</package>
<package pkgid="5b34dfd36a5d9ca94f4d7128c1bc52f02e1ff4e2ca244ff4bd79aaf17854509347105afc6618faba25b40636b61d72d3ef945957d6a0d3bcd37bec8517950a13" name="libxmlsec1-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.40" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1662638400">- Add export CFLAGS/CXXFLAGS="-Wno-error=deprecated-declarations"
  inbefore configure. We pass --enable-werror to configure, and
  that leads to warnings about deprecations failing build. As
  deprecations is mainly a consern for upstream, stop failing on
  those.</changelog>
  <changelog author="pmonreal@suse.com" date="1667563200">- Update to 1.2.36:
  * Retired the XMLSec mailing list "xmlsec@aleksey.com" and the
    XMLSec Online Signature Verifier.
- Update to 1.2.35:
  * Migration to OpenSSL 3.0 API (based on PR by @snargit). Note
    that OpenSSL engines are disabled by default when XMLSec
    library is compiled against OpenSSL 3.0. To re-enable OpenSSL
    engines, use "--enable-openssl3-engines" configure flag (there
    will be a lot of deprecation warnings).
  * The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now
    deprecated and will be removed in the future versions of
    XMLSec Library.
  * Refactored all the integer casts to ensure cast-safety. Fixed
    all warnings and enabled "-Werror" and "-pedantic" flags on
    CI builds.
  * Added configure flag to use size_t for xmlSecSize (currently
    disabled by default for backward compatibility).
  * Moved all CI builds to GitHub actions.</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.2.37:
  Fixed two regressions from 1.2.36 release</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well</changelog>
  <changelog author="fstrba@suse.com" date="1691496000">- Added patch:
  * xmlsec1-ui_null.patch
    + fix build with older versions of openssl that don't have
    UI_null() method</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701345600">- Make use of openSUSE build flags</changelog>
  <changelog author="fstrba@suse.com" date="1702641600">- Update to 1.2.38
  * Have a look at the changelog for the list of changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Added patch:
  * xmlsec1-gcc14.patch
    + add missing include and fix gcc14 build</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720785600">- Update to 1.2.40
  The legacy XML Security Library 1.2.40 release includes the following changes:
  * (xmlsec-core) Fixed functions deprecated in LibXML2 2.13.1 (including disabling HTTP support by default).
  * (xmlsec-nss) Increased keys size in all tests to support NSS 3.101.
  * (windows) Added "ftp" and "http" flags in 'configure.js' (both are disabled by default).
  * Several other small fixes (more details).
- Update to 1.2.39
  The legacy XML Security Library 1.2.39 release includes the following changes:
  * Added options to enable/disable local files, HTTP, and FTP support. FTP is disabled by default.
  * Several other small fixes (more details).
- Remove upstreamed xmlsec1-gcc14.patch</changelog>
</package>
<package pkgid="ffb19b2c7e9c269bf499d91c61c85e13b1c0ebf687c17f1ee86416643b36a16e8daed863183dede194c5cc384614a09fbb9218e29f69e31bdb507445a7e42a34" name="libxshmfence-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="slfo.1.1_1.2"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385553600">- Update to version 1.1:
  + Add mandatory COPYING file.
  + Add the required README file
  + make: add $(CWARNFLAGS)
  + make: list non installed headers under the _SOURCES variable
  + lint: remove usage of libxshmfence_la_SOURCES
  + Change fence memory type from 'int32_t' to 'struct shmfence'
  + Locate directory for shared memory files at configure time
  + Use O_TMPFILE if available
  + Split out futex implementation from general API
  + Provide pthread-based alternative implementation
  + Set symbol visibility attribute to hide internal symbols</changelog>
  <changelog author="cfarrell@suse.com" date="1386158400">- license update: HPND
  COPYING file is HPND - does not contain sublicensing reference (as MIT
  does)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1386417600">- Add baselibs.conf
  Provide libxshmfence1-32bit</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Add missing BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1420286400">- Update to version 1.2:
  + build fixes
  + FreeBSD umtx support
  + memfd_create support for kernel &gt;= 3.17</changelog>
  <changelog author="sndirsch@suse.com" date="1420459200">- specfile: added baselibs.conf as source (new checkin policy)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Add u_configure.ac-call-AC_USE_SYSTEM_EXTENSIONS.patch
  * Fixes build with GLIBC 2.27. (bnc#1079830)</changelog>
  <changelog author="sndirsch@suse.com" date="1519646400">- Update to version 1.3
  * autogen.sh: use quoted string variables
  * Fix missing &lt;limits.h&gt; include for HAVE_UMTX branch of futex
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish
  * configure.ac: call AC_USE_SYSTEM_EXTENSIONS
- supersedes u_configure.ac-call-AC_USE_SYSTEM_EXTENSIONS.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1666094400">- Update to version 1.3.1
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * alloc: prefer atomic close-on-exec without O_TMPFILE as well
  * alloc: prefer SHM_ANON on FreeBSD a la memfd_create</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 1.3.2:
  * configure: Use AC_SYS_LARGEFILE to enable large file support
- spec file modernisation, add license and README</changelog>
</package>
<package pkgid="0ea9fbe4f023e089b3e844180d3205be5c8a3ebe3643510e845f17cb16efdf337edf66cefc00ee1e4865e191a17c38422da9de02b71c28b4d1c928ab75a9b9cd" name="libxshmfence1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="slfo.1.1_1.2"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385553600">- Update to version 1.1:
  + Add mandatory COPYING file.
  + Add the required README file
  + make: add $(CWARNFLAGS)
  + make: list non installed headers under the _SOURCES variable
  + lint: remove usage of libxshmfence_la_SOURCES
  + Change fence memory type from 'int32_t' to 'struct shmfence'
  + Locate directory for shared memory files at configure time
  + Use O_TMPFILE if available
  + Split out futex implementation from general API
  + Provide pthread-based alternative implementation
  + Set symbol visibility attribute to hide internal symbols</changelog>
  <changelog author="cfarrell@suse.com" date="1386158400">- license update: HPND
  COPYING file is HPND - does not contain sublicensing reference (as MIT
  does)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1386417600">- Add baselibs.conf
  Provide libxshmfence1-32bit</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Add missing BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1420286400">- Update to version 1.2:
  + build fixes
  + FreeBSD umtx support
  + memfd_create support for kernel &gt;= 3.17</changelog>
  <changelog author="sndirsch@suse.com" date="1420459200">- specfile: added baselibs.conf as source (new checkin policy)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Add u_configure.ac-call-AC_USE_SYSTEM_EXTENSIONS.patch
  * Fixes build with GLIBC 2.27. (bnc#1079830)</changelog>
  <changelog author="sndirsch@suse.com" date="1519646400">- Update to version 1.3
  * autogen.sh: use quoted string variables
  * Fix missing &lt;limits.h&gt; include for HAVE_UMTX branch of futex
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish
  * configure.ac: call AC_USE_SYSTEM_EXTENSIONS
- supersedes u_configure.ac-call-AC_USE_SYSTEM_EXTENSIONS.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1666094400">- Update to version 1.3.1
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * alloc: prefer atomic close-on-exec without O_TMPFILE as well
  * alloc: prefer SHM_ANON on FreeBSD a la memfd_create</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 1.3.2:
  * configure: Use AC_SYS_LARGEFILE to enable large file support
- spec file modernisation, add license and README</changelog>
</package>
<package pkgid="eb4a1353c2ea76e519dc02de4da0d4af6073194c52b8efda357f64c0f72044a9703a4c155eb5d518689200e6602b47498eb20a2ed827b8f4b0dd3c11a903da6e" name="libxslt-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.38" rel="slfo.1.1_6.1"/>
  <changelog author="pmonreal@suse.com" date="1636545600">- Add missing library .so files [bsc#1191771]</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646827200">- Update to version 1.1.35:
  * Security fixes:
    + [CVE-2021-30560] Use-after-free in xsltApplyTemplates;
    + A couple of memory leak and a double-free fixes.
  * A couple of regression fixes.
  * Many bug fixes.
  * New xsltproc --huge option, provided by libxml XML_PARSE_HUGE.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxslt 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.35.\
  news
- Switch libxml2-devel package with its pkgconfig module
  counterpart (libxml-2.0) to align with CONFIGURE script's checks.
- Add fdupes build requirement/macro to hard-link duplicate files
  in the DATADIR inside the buildroot.
- Add explicit 'gcc' build requirement to align with CONFIGURE
  checks.
- Update http://xmlsoft.org URL tag to Libxslt's new web home:
  https://gitlab.gnome.org/GNOME/libxslt.
- Update ftp://xmlsoft.org Source tag to Libxslt's new download
  host: https://download.gnome.org.
- Drop no longer needed/used libgpg-error-devel. Note that despite
  'lgpg-error' being linked against some libraries, there's no
  automatic generation of run-time requirements on libgpg-error*
  symbols our build system. And there's no mention of gpg-error in
  the whole source tarball at all.
- Drop no longer needed explicit libtool build requirement and
  `autoreconf` call in build section since we don't touch the build
  system scripts nor use checked out git trees anymore.
- Drop libxslt.keyring source file as the new download host doesn't
  offer GPG signatures.
- Drop fixed upstream patches:
  libxslt-config-fixes.patch (glgo#GNOME/libxslt!3);
  libxslt-Stop-using-maxParserDepth-XPath-limit.patch;
  libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch; and
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch.
- Use ldconfig_scriptlets macro for post(un) handling of ldconfig
  calls.</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 1.1.36:
  * Removals and deprecations
    + Remove SVN keyword anchors
    + Remove CVS and SVN-related code
    + Remove README.cvs-commits
    + Remove ChangeLog
    + Remove xsltwin32config.h
  * Improvements
    + Simplify xsltexports.h and exsltexports.h
    + Don't overlink executables with gcrypt
    + Fix quadratic behavior with variables and parameters
    + Remove case labels with XPointer location types
    + Add configure~ to .gitignore
    + Stop calling deprecated libxml2 functions
  * Portability
    + Use portable python shebangs (David Seifert)
    + Remove useless __CYGWIN__ checks
    + Remove cruft from win32config.h
    + crypto.c: Silence a compiler warning on Windows (Chun-wei Fan)
  * Build system
    + Add missing compile definition for static builds to CMake
    + Avoid obsolescent `test -a` constructs (David Seifert)
    + Only link libxml2 statically in purely static build
    + Set AC_CONFIG_MACRO_DIR
    + Allow AM_MAINTAINER_MODE to be disabled
    + Streamline and fix documentation installation
    + Don't try to recreate COPYING symlink
    + Remove special configuration for certain maintainers
    + configure.ac: produce tar.xz only (GNOME policy) (David Seifert)
    + Detect libm using libtool's macros (David Seifert)
    + configure.ac: disable static libraries by default (David Seifert)
    + python/Makefile.am: nest python docs in $(docdir) (David Seifert)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE (David Seifert)
    + configure.ac: remove useless AC_SUBST (David Seifert)
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings (David Seifert)
    + Change libxml2 Python config
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove --with-html-dir option
    + Also check for glibtoolize in autogen.sh
    + Rework documentation build system
    + Remove old website
    + CMake: Relax check for enabling crypto support on Windows (Chun-wei Fan)
    + Remove obsolete AC_HEADER_STDC autoconf macro (Vadim Zeitlin)
    + Remove special configuration for old maintainers
  * Test suite, CI
    + Remove test involving XPointer range-to function
    + Test recursion in EXSLT dynamic functions
    + Add CI job for static build
  * Documentation
    + Move tutorial images</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 1.1.37:
  * Improvements:
    + Don't use deprecated libxml2 macros
    + Don't mess with xmlDefaultSAXHandler
  * Build system:
    + Require automake-1.16.3 or later
    + Remove generated files from distribution
    + Add missing compile definition for static builds to Autotools</changelog>
  <changelog author="david.anes@suse.com" date="1683633600">- Removed patch 0009-Make-generate-id-deterministic.patch as it's
  already fixed upstream.
- Update to version 1.1.38:
  * Major changes:
  - About 40 memory errors in code paths handling malloc failures
    have been fixed.
  - While these issues shouldn't impact security, this improves
    robustness under memory pressure.
  - The result of generate-id() is now deterministic across
    multiple transformations fixing many issues with reproducible
    builds.
  - Most of the test suite has been ported to C.
  * Bug fixes:
  - Fix memory errors in code handling malloc failures
  - imports: Fix import/include cycle check
  - xsltlocale: Fix xsltNewLocale on macOS
  - Make xsl:sort thread-safe
  - Make generate-id() deterministic
  * Improvements
  - Stop using xmlStringCurrentChar
  - attributes.h needs to include xsltInternals.h (David Kilzer)
  - transform: Avoid null deref on documents without root node
  - numbers: Fix floating point overflows
  - date: Fix integer overflow in exsltDateFormatDuration
  - numbers: Fix harmless integer sign change
  - date: Add more overflow checks to formatting code (David Kilzer)
  - date: Fix rounding to make Windows tests pass
  - date: Rewrite duration and seconds formatting
  - xsltlocale: Make API platform-independent
  - Also accept application/xslt+xml media type in stylesheet PIs
  - warnings: Fix strict prototypes warning
  - xsltEvalUserParams() and xsltQuoteUserParams() are susceptible to integer
    overflow when iterating through const char** array (David Kilzer)
  - xslt: Return NULL stylesheet on attribute set errors
  - xsltproc: Fix unused variable warning
  - xslt: Remove declaration for old libxml2
  - Fix various compiler warnings
  - Fix compiler warnings in xsltGenerateIdFunction
  - Disable Python bindings for debugger
  - Don't declare disabled functions
  - Migrate from PyEval_ to PyObject_</changelog>
  <changelog author="pmonreal@suse.com" date="1742385600">- Security fixes:
  * Fix use-after-free of XPath context node [bsc#1239625, CVE-2025-24855]
  * Fix UAF related to excluded namespaces [bsc#1239637, CVE-2024-55549]
  * Make generate-id() deterministic [bsc#1238591, CVE-2023-40403]
    Just adding the reference here as this CVE was already fixed
    in 0009-Make-generate-id-deterministic.patch
  * Add patches:
  - libxslt-CVE-2024-55549.patch
  - libxslt-CVE-2025-24855.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752753600">- security update
- added patches
  CVE-2025-7424 [bsc#1246360], Type confusion in xmlNode.psvi between stylesheet and source nodes
  + libxslt-CVE-2025-7424.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]
- deleted patches
  * libxslt-CVE-2025-10911.patch</changelog>
</package>
<package pkgid="846ee9f1e512a0c91544d9b5a29bb2d02a8af45f77c2ba6b26a1ff37429a2344856347c76b1aa9f8f648b6cc783a0dc3408eae2b6da2fa7062601fd508d9b614" name="libxslt1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.38" rel="slfo.1.1_6.1"/>
  <changelog author="pmonreal@suse.com" date="1636545600">- Add missing library .so files [bsc#1191771]</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646827200">- Update to version 1.1.35:
  * Security fixes:
    + [CVE-2021-30560] Use-after-free in xsltApplyTemplates;
    + A couple of memory leak and a double-free fixes.
  * A couple of regression fixes.
  * Many bug fixes.
  * New xsltproc --huge option, provided by libxml XML_PARSE_HUGE.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxslt 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.35.\
  news
- Switch libxml2-devel package with its pkgconfig module
  counterpart (libxml-2.0) to align with CONFIGURE script's checks.
- Add fdupes build requirement/macro to hard-link duplicate files
  in the DATADIR inside the buildroot.
- Add explicit 'gcc' build requirement to align with CONFIGURE
  checks.
- Update http://xmlsoft.org URL tag to Libxslt's new web home:
  https://gitlab.gnome.org/GNOME/libxslt.
- Update ftp://xmlsoft.org Source tag to Libxslt's new download
  host: https://download.gnome.org.
- Drop no longer needed/used libgpg-error-devel. Note that despite
  'lgpg-error' being linked against some libraries, there's no
  automatic generation of run-time requirements on libgpg-error*
  symbols our build system. And there's no mention of gpg-error in
  the whole source tarball at all.
- Drop no longer needed explicit libtool build requirement and
  `autoreconf` call in build section since we don't touch the build
  system scripts nor use checked out git trees anymore.
- Drop libxslt.keyring source file as the new download host doesn't
  offer GPG signatures.
- Drop fixed upstream patches:
  libxslt-config-fixes.patch (glgo#GNOME/libxslt!3);
  libxslt-Stop-using-maxParserDepth-XPath-limit.patch;
  libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch; and
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch.
- Use ldconfig_scriptlets macro for post(un) handling of ldconfig
  calls.</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 1.1.36:
  * Removals and deprecations
    + Remove SVN keyword anchors
    + Remove CVS and SVN-related code
    + Remove README.cvs-commits
    + Remove ChangeLog
    + Remove xsltwin32config.h
  * Improvements
    + Simplify xsltexports.h and exsltexports.h
    + Don't overlink executables with gcrypt
    + Fix quadratic behavior with variables and parameters
    + Remove case labels with XPointer location types
    + Add configure~ to .gitignore
    + Stop calling deprecated libxml2 functions
  * Portability
    + Use portable python shebangs (David Seifert)
    + Remove useless __CYGWIN__ checks
    + Remove cruft from win32config.h
    + crypto.c: Silence a compiler warning on Windows (Chun-wei Fan)
  * Build system
    + Add missing compile definition for static builds to CMake
    + Avoid obsolescent `test -a` constructs (David Seifert)
    + Only link libxml2 statically in purely static build
    + Set AC_CONFIG_MACRO_DIR
    + Allow AM_MAINTAINER_MODE to be disabled
    + Streamline and fix documentation installation
    + Don't try to recreate COPYING symlink
    + Remove special configuration for certain maintainers
    + configure.ac: produce tar.xz only (GNOME policy) (David Seifert)
    + Detect libm using libtool's macros (David Seifert)
    + configure.ac: disable static libraries by default (David Seifert)
    + python/Makefile.am: nest python docs in $(docdir) (David Seifert)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE (David Seifert)
    + configure.ac: remove useless AC_SUBST (David Seifert)
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings (David Seifert)
    + Change libxml2 Python config
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove --with-html-dir option
    + Also check for glibtoolize in autogen.sh
    + Rework documentation build system
    + Remove old website
    + CMake: Relax check for enabling crypto support on Windows (Chun-wei Fan)
    + Remove obsolete AC_HEADER_STDC autoconf macro (Vadim Zeitlin)
    + Remove special configuration for old maintainers
  * Test suite, CI
    + Remove test involving XPointer range-to function
    + Test recursion in EXSLT dynamic functions
    + Add CI job for static build
  * Documentation
    + Move tutorial images</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 1.1.37:
  * Improvements:
    + Don't use deprecated libxml2 macros
    + Don't mess with xmlDefaultSAXHandler
  * Build system:
    + Require automake-1.16.3 or later
    + Remove generated files from distribution
    + Add missing compile definition for static builds to Autotools</changelog>
  <changelog author="david.anes@suse.com" date="1683633600">- Removed patch 0009-Make-generate-id-deterministic.patch as it's
  already fixed upstream.
- Update to version 1.1.38:
  * Major changes:
  - About 40 memory errors in code paths handling malloc failures
    have been fixed.
  - While these issues shouldn't impact security, this improves
    robustness under memory pressure.
  - The result of generate-id() is now deterministic across
    multiple transformations fixing many issues with reproducible
    builds.
  - Most of the test suite has been ported to C.
  * Bug fixes:
  - Fix memory errors in code handling malloc failures
  - imports: Fix import/include cycle check
  - xsltlocale: Fix xsltNewLocale on macOS
  - Make xsl:sort thread-safe
  - Make generate-id() deterministic
  * Improvements
  - Stop using xmlStringCurrentChar
  - attributes.h needs to include xsltInternals.h (David Kilzer)
  - transform: Avoid null deref on documents without root node
  - numbers: Fix floating point overflows
  - date: Fix integer overflow in exsltDateFormatDuration
  - numbers: Fix harmless integer sign change
  - date: Add more overflow checks to formatting code (David Kilzer)
  - date: Fix rounding to make Windows tests pass
  - date: Rewrite duration and seconds formatting
  - xsltlocale: Make API platform-independent
  - Also accept application/xslt+xml media type in stylesheet PIs
  - warnings: Fix strict prototypes warning
  - xsltEvalUserParams() and xsltQuoteUserParams() are susceptible to integer
    overflow when iterating through const char** array (David Kilzer)
  - xslt: Return NULL stylesheet on attribute set errors
  - xsltproc: Fix unused variable warning
  - xslt: Remove declaration for old libxml2
  - Fix various compiler warnings
  - Fix compiler warnings in xsltGenerateIdFunction
  - Disable Python bindings for debugger
  - Don't declare disabled functions
  - Migrate from PyEval_ to PyObject_</changelog>
  <changelog author="pmonreal@suse.com" date="1742385600">- Security fixes:
  * Fix use-after-free of XPath context node [bsc#1239625, CVE-2025-24855]
  * Fix UAF related to excluded namespaces [bsc#1239637, CVE-2024-55549]
  * Make generate-id() deterministic [bsc#1238591, CVE-2023-40403]
    Just adding the reference here as this CVE was already fixed
    in 0009-Make-generate-id-deterministic.patch
  * Add patches:
  - libxslt-CVE-2024-55549.patch
  - libxslt-CVE-2025-24855.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752753600">- security update
- added patches
  CVE-2025-7424 [bsc#1246360], Type confusion in xmlNode.psvi between stylesheet and source nodes
  + libxslt-CVE-2025-7424.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]
- deleted patches
  * libxslt-CVE-2025-10911.patch</changelog>
</package>
<package pkgid="12b2890b23a9d2a9aa00a54a053ceb9bec35efb49fa648be436da47de5fcaae2c04876e0e5ba62782aff05096890cbc808fae3c061cd52ac69ea8ed03b4a9e3c" name="libxtables12-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.9" rel="slfo.1.1_2.1"/>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736164800">- Add iptables-1.8.9-fix-checking-existence-of-rule.patch
  * Fixes checking existence of rules. Fixes issues with rule creation
    with podman/netavark. (bsc#1235088, bsc#1234996)</changelog>
</package>
<package pkgid="01a5a22c156d54abb6c71f44dd386738b1d183a83f7ea24a7d1386ef146dec78970851b0d12f8bd143a90de73c0425a0419b4fbaa79833c7705e6c96af8d39be" name="libxxhash0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8.1" rel="slfo.1.1_2.1"/>
  <changelog author="jengelh@inai.de" date="1543838400">- Trim bias from description</changelog>
  <changelog author="mrostecki@suse.de" date="1544097600">- Remove false information from description - xxHash does not
  derive from Argon2 algorithm.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1569499200">- update to version 0.7.1
  - XXH3 updates:
  * Secret first : the algorithm computation can be altered by
    providing a "secret", which is any blob of bytes, of
    size &gt;= XXH3_SECRET_SIZE_MIN.
  * seed is still available, and acts as a secret generator
  * As a consequence of these changes, note that new return
    values of XXH3 are not compatible with v0.7.0
  * updated ARM NEON variant
  * Streaming implementation is available
  * Improve compatibility and performance with Visual Studio
  * Better integration when using XXH_INLINE_ALL : do not pollute
    host namespace, use its own macros, such as XXH_ASSERT(), XXH_ALIGN, etc.
  * 128-bits variant provide helper function, for comparison of hashes.
  - general improvements:
  * Better clang generation of rotl instruction
  * XXH_REROLL build macro, to reduce binary size
  * Improved cmake script
  * Full benchmark program provided in /tests/bench
- update to version 0.7.0
  - Add XXH3 hash algorithm</changelog>
  <changelog author="mrostecki@opensuse.org" date="1576584000">- Update to version 0.7.2
  * Fixed collision ratio of XXH128 for some specific input lengths
  * Improved VSX and NEON variants
  * Improved performance of scalar code path (XXH_VECTOR=0),
  * xxhsum: can generate 128-bit hash with command -H2 (note: for
    experimental purposes only! XXH128 is not yet frozen)
  * xxhsum: option -q removes status notifications</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576670400">- Enable test suite run in %check</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 0.8.0
  * api : stabilize XXH3
  * cli : xxhsum can produce BSD-style lines, with command --tag
  * cli : xxhsum can parse and check BSD-style lines, using command --check
  * cli : xxhsum - accepts console input
  * cli : xxhsum accepts -- separator
  * cli : fix : print correct default algo for symlinked helpers
- Add BR on c++_compiler, needed for test programs</changelog>
  <changelog author="ro@suse.de" date="1625572800">- add patch xxhash-avoid-armv6-unaligned-access.patch
  do not expect unaligned accesses to work on armv6, it breaks
  in our build setup using aarch64 kernels</changelog>
  <changelog author="dmueller@suse.com" date="1638446400">- update to 0.8.1:
  * perf : much improved performance for XXH3 streaming variants, notably on
    gcc and msvc
  * perf : improved XXH64 speed and latency on small inputs
  * perf : small XXH32 speed and latency improvement on small inputs of random
    size
  * perf : minor stack usage improvement for XXH32 and XXH64
  * api  : new experimental variants XXH3_*_withSecretandSeed()
  * api  : update XXH3_generateSecret(), can no generate secret of any size (&gt;=
    XXH3_SECRET_SIZE_MIN)
  * cli  : xxhsum can now generate and check XXH3 checksums, using command `-H3`
  * build: can build xxhash without XXH3, with new build macro XXH_NO_XXH3
  * build: fix xxh_x86dispatch build with MSVC, by @apankrat
  * build: XXH_INLINE_ALL can always be used safely, even after XXH_NAMESPACE
    or a previous XXH_INLINE_ALL
  * build: improved PPC64LE vector support
  * install: fix pkgconfig
  * install: compatibility with Haiku
  * doc  : code comments made compatible with doxygen
  * misc : XXH_ACCEPT_NULL_INPUT_POINTER is no longer necessary, all functions
    can accept NULL input pointers, as long as size == 0
  * misc : complete refactor of CI tests on Github Actions, offering much
    larger coverage
  * misc : xxhsum code base split into multiple specialized units, within
    directory cli/
- add 836f4e735cf368542f14005e41d2f84ec29dfd60.patch (fix manpage installation)</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- fix racy check execution</changelog>
  <changelog author="mgorse@suse.com" date="1678276800">- Add 15ce80f9f2760609d8cc68cea76d3f3217ab70e1.patch: fix build
  failure on ppc64le when using gcc 7 (boo#1208794).</changelog>
</package>
<package pkgid="428c93f64a2b50cad8be648c4783de1d1f0dc86fe3fe367b44df9ab19dc83af2a824e3fc4271628e5352cdd7b5a172269329d29244fd362e01ff2df06d4a40db" name="libyajl-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libyajl-devel to baselibs</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="ku.b@gmx.de" date="1415188800">- update to 2.1.0
- 2.1.0
  - @nonodename, @patperry - fixed some compiler warnings
  - @yep, @emaste - documentation improvements
  - @sgravrock - build fix for NetBSD (and whenever sh != bash)
  - @rotty, @brimstone3, @lloyd - allow client to reset generator
  - @sgravrock - remove bash dependencies
  - @lloyd - add api tests
  - @rflynn - remove ruby dependency
  - @cloderic - nmake install works on windows
  - @shahbag - build fix for qnx
  - @breese - debugging improvements
  - @lloyd - json_verify supports -s flag for stream processing
  - @lloyd - json_reformat supports -s flag for stream processing
- 2.0.4
  - @jcekstrom - additional checking in integer parsing
  - @jcekstrom - fix a bug in yajl_tree that would cause valid json integersto fail to parse
  - @plaguemorin - fix a memory leak in yajl_tree (error strings were being leaked)
  - @7AC - reset errno
  - @ConradIrwin - include flags to reformatter to allow toggling of escape solidus option
- 2.0.3
  - John Stamp generation of a pkgconfig file at build time.
  - @robzuber bugfix in yajl_tree_get()
  - @lloyd - fix for compilation on 64 bit windows
- 2.0.2
  - lth fix typos in yajl_tree.h macros YAJL_IS_INTEGER and YAJL_IS_DOUBLE,
    contributed by Artem S Vybornov.
  - lth add #ifdef __cplusplus wrappers to yajl_tree to allow proper
    usage from many populer C++ compilers.
- fix array access</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Use correct url for download
- Add dependency on doxygen for doc generation
- Cleanup spec file with spec-clener</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]
- Move other docu to -devel package where it better fits</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir with libyajl-pkgconfig.patch
- Use autosetup and cmake_build macro
- Rename macro soname to sover</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="jtomasiak@suse.com" date="1652443200">- add libyajl-CVE-2022-24795.patch (CVE-2022-24795, bsc#1198405)</changelog>
  <changelog author="jsrain@suse.com" date="1684756800">- update the upstream source URL</changelog>
  <changelog author="jfehlig@suse.com" date="1688731200">- add libyajl-CVE-2023-33460.patch (CVE-2023-33460, bsc#1212928)</changelog>
</package>
<package pkgid="4dca49380ae5934fdf14c5c036484bfd8fa394aff017a616a76c9b649f1ddb14b7a407a6a54e0c69483b41594f339c8d1c1c51d69bbcbb342ee155c5a090a7e4" name="libyajl2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libyajl-devel to baselibs</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="ku.b@gmx.de" date="1415188800">- update to 2.1.0
- 2.1.0
  - @nonodename, @patperry - fixed some compiler warnings
  - @yep, @emaste - documentation improvements
  - @sgravrock - build fix for NetBSD (and whenever sh != bash)
  - @rotty, @brimstone3, @lloyd - allow client to reset generator
  - @sgravrock - remove bash dependencies
  - @lloyd - add api tests
  - @rflynn - remove ruby dependency
  - @cloderic - nmake install works on windows
  - @shahbag - build fix for qnx
  - @breese - debugging improvements
  - @lloyd - json_verify supports -s flag for stream processing
  - @lloyd - json_reformat supports -s flag for stream processing
- 2.0.4
  - @jcekstrom - additional checking in integer parsing
  - @jcekstrom - fix a bug in yajl_tree that would cause valid json integersto fail to parse
  - @plaguemorin - fix a memory leak in yajl_tree (error strings were being leaked)
  - @7AC - reset errno
  - @ConradIrwin - include flags to reformatter to allow toggling of escape solidus option
- 2.0.3
  - John Stamp generation of a pkgconfig file at build time.
  - @robzuber bugfix in yajl_tree_get()
  - @lloyd - fix for compilation on 64 bit windows
- 2.0.2
  - lth fix typos in yajl_tree.h macros YAJL_IS_INTEGER and YAJL_IS_DOUBLE,
    contributed by Artem S Vybornov.
  - lth add #ifdef __cplusplus wrappers to yajl_tree to allow proper
    usage from many populer C++ compilers.
- fix array access</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Use correct url for download
- Add dependency on doxygen for doc generation
- Cleanup spec file with spec-clener</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]
- Move other docu to -devel package where it better fits</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir with libyajl-pkgconfig.patch
- Use autosetup and cmake_build macro
- Rename macro soname to sover</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="jtomasiak@suse.com" date="1652443200">- add libyajl-CVE-2022-24795.patch (CVE-2022-24795, bsc#1198405)</changelog>
  <changelog author="jsrain@suse.com" date="1684756800">- update the upstream source URL</changelog>
  <changelog author="jfehlig@suse.com" date="1688731200">- add libyajl-CVE-2023-33460.patch (CVE-2023-33460, bsc#1212928)</changelog>
</package>
<package pkgid="40bb9911c1306ac7ca04ac875a2e50ad4401790e6f3f38020003d3e4d603df80561296d8f6880cb537ca7b4341e7338693c93df0a2df919fbf6679b80e1b2088" name="libyaml-0-2-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.2.5" rel="slfo.1.1_1.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1417608000">- fix CVE-2014-9130: libyaml: assert failure when processing
  wrapped strings (bnc#907809)
  CVE-2014-9130.patch contains the fix</changelog>
  <changelog author="avindra@opensuse.org" date="1514721600">- update to 0.1.7
  * Fixed segfault in yaml_string_write_handler
  * Fixed invalid simple key assertion (CVE-2014-9130)
  * Fixed error handling in some examples
- remove CVE-2014-9130.patch
  - fixed upstream in 946596172d140497b560e016e581accb0a92cca4
- cleanup spec file with spec-cleaner</changelog>
  <changelog author="mimi.vx@gmail.com" date="1543924800">- update to 0.2.1
  * Fixed most compiler warnings -Wall -Wextra
  * Support static and dynamic libraries
  * Add support for `make test`
  * Apply old fix for `\/` that is not in master.
  * Port bug fix from Perl binding
  * Removed trailing-whitespaces
  * Fix -Wformat compilation errors in tests
  * Added missing Cflags path in pkg-config file
  * Forbid escaped singlequote in doublequotes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Add libyaml-revert-emitter-changes.patch: Revert "This code is
  not needed and breaks tests" (gh#yaml/libyaml#122).</changelog>
  <changelog author="jengelh@inai.de" date="1548676800">- --with-pic is useless without static libs, remove it.
- Update RPM groups and descriptions.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1555588800">- update to 0.2.2
- refreshed libyaml-revert-emitter-changes.patch
  * Fix comparison in tests/run-emitter.c
  * Allow colons in plain scalars inside flow collections
  * The closing single quote needs to be indented...
  * Revert removing of open_ended after top level plain scalar</changelog>
  <changelog author="tina.mueller@suse.com" date="1564574400">- Remove patch
  * Patch libyaml-revert-emitter-changes.patch is not needed anymore</changelog>
  <changelog author="info@paolostivanin.com" date="1587384000">- update to 0.2.4
  * Support %YAML 1.2 directives
  * Multiple fixes</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 0.2.5:
  * Allow question marks in plain scalars in flow collections
  * Emitter: Don't output trailing space for empty scalar nodes
  * Emitter: Output space after an alias mapping key
  * Add -h and --flow (on|off|keep) to run-*-test-suite
  * Remove unnecessary include and malloc
  * Add specific files back to .gitignore
  * Output error position in run-parser-test-suite.c
  * A couple patches to improve test suite support</changelog>
  <changelog author="dimstar@opensuse.org" date="1662465600">- Add baselibs.conf: produce libyaml-0-2-32bit, required by
  libcamera -&gt; pipewire.</changelog>
</package>
<package pkgid="3d8a8c3933980d62b200b403f23a5e281c0a416f298ecd94ff522c556722e50f88b72b63c1daefcb1f212cbe369e28261b7631b3f77ef05d641791a07ed33ce5" name="libyaml-cpp0_8-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="slfo.1.1_1.3"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Update to 0.6.2:
  * Fix incorrect version numbering</changelog>
  <changelog author="mrostecki@opensuse.org" date="1576584000">- Update to 0.6.3:
  * bug fixes
  * CMake updates, now requiring 3.1
- Remove merged patch to fix PIE build:
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1630324800">- Update to 0.7.0:
  * Bazel support
  * CMake improvements
  * Adopts many modern C++ syntaxes
  * Bug fixes
  * Obsoletes yaml-cpp-CVE-2017-5950.patch (fixed by DepthGuard)</changelog>
  <changelog author="hpj@urpla.net" date="1630324801">- Adjust library dependency reference</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- add fix-cmake-export.patch  untabify-cmakelists.patch (bsc#1191137)</changelog>
  <changelog author="fcrozat@suse.com" date="1683806400">- Drop patches fix-cmake-export.patch  untabify-cmakelists.patch
  replacing them with pull-request 1077.patch which was
  merged (bsc#1191137).</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1692273600">- Update to 0.8.0:
  * Significant CMake changes, especially to Windows builds
  * Support for std::unordered_map, std::valarray, and std::string_view
  * Updated gtest dependency
  * Assorted bug fixes
- Drop 1077.patch, which is included in version 0.8.0</changelog>
</package>
<package pkgid="d459ba0cedbd8a5977f0795947834792a765bee135236babc2ad216984d9701560af9538a0b7c8f067851235715758177fb7ce3d0fc7d046623faf33a9b240bb" name="libyaml-debugsource" arch="aarch64">
  <version epoch="0" ver="0.2.5" rel="slfo.1.1_1.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1417608000">- fix CVE-2014-9130: libyaml: assert failure when processing
  wrapped strings (bnc#907809)
  CVE-2014-9130.patch contains the fix</changelog>
  <changelog author="avindra@opensuse.org" date="1514721600">- update to 0.1.7
  * Fixed segfault in yaml_string_write_handler
  * Fixed invalid simple key assertion (CVE-2014-9130)
  * Fixed error handling in some examples
- remove CVE-2014-9130.patch
  - fixed upstream in 946596172d140497b560e016e581accb0a92cca4
- cleanup spec file with spec-cleaner</changelog>
  <changelog author="mimi.vx@gmail.com" date="1543924800">- update to 0.2.1
  * Fixed most compiler warnings -Wall -Wextra
  * Support static and dynamic libraries
  * Add support for `make test`
  * Apply old fix for `\/` that is not in master.
  * Port bug fix from Perl binding
  * Removed trailing-whitespaces
  * Fix -Wformat compilation errors in tests
  * Added missing Cflags path in pkg-config file
  * Forbid escaped singlequote in doublequotes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Add libyaml-revert-emitter-changes.patch: Revert "This code is
  not needed and breaks tests" (gh#yaml/libyaml#122).</changelog>
  <changelog author="jengelh@inai.de" date="1548676800">- --with-pic is useless without static libs, remove it.
- Update RPM groups and descriptions.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1555588800">- update to 0.2.2
- refreshed libyaml-revert-emitter-changes.patch
  * Fix comparison in tests/run-emitter.c
  * Allow colons in plain scalars inside flow collections
  * The closing single quote needs to be indented...
  * Revert removing of open_ended after top level plain scalar</changelog>
  <changelog author="tina.mueller@suse.com" date="1564574400">- Remove patch
  * Patch libyaml-revert-emitter-changes.patch is not needed anymore</changelog>
  <changelog author="info@paolostivanin.com" date="1587384000">- update to 0.2.4
  * Support %YAML 1.2 directives
  * Multiple fixes</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 0.2.5:
  * Allow question marks in plain scalars in flow collections
  * Emitter: Don't output trailing space for empty scalar nodes
  * Emitter: Output space after an alias mapping key
  * Add -h and --flow (on|off|keep) to run-*-test-suite
  * Remove unnecessary include and malloc
  * Add specific files back to .gitignore
  * Output error position in run-parser-test-suite.c
  * A couple patches to improve test suite support</changelog>
  <changelog author="dimstar@opensuse.org" date="1662465600">- Add baselibs.conf: produce libyaml-0-2-32bit, required by
  libcamera -&gt; pipewire.</changelog>
</package>
<package pkgid="d37de59af3d13f3c5fe9f174a5ae2a2d0efa9fba4d666820f80dc2ec23199029ead6505004a4b0f7227fb892ecb0923281c1706aa820de153a4a343c187c88e4" name="libz1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.13" rel="slfo.1.1_2.1"/>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.2.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dmueller@suse.com" date="1677672000">- avoid buildcycle with krb5 (in sle15+ - jsc#PED-3641)
- skip hwcaps subpackage building for -static subpackage</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683288000">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1771416000">- Fix CVE-2026-27171, infinite loop via the crc32_combine64 and
  crc32_combine_gen64 functions due to missing checks for negative
  lengths (bsc#1258392)
  * CVE-2026-27171.patch</changelog>
</package>
<package pkgid="655afbef36885c53d573edd0274bc246ef2c858e36cdd7bcaa3e9c0658eff5d1e2a4bfb7543ba8feffb01778136286fbf4cedd48099f19d8249b9457ef358cdf" name="libzck1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="slfo.1.1_1.2"/>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="dmueller@suse.com" date="1641211200">- add zstd-1.5.1.patch (gh#zchunk/zchunk/57)</changelog>
  <changelog author="rpm@fthiessen.de" date="1649937600">- Update to version 1.2.1
  * Better error detection
  * Add support for specifying compression-format in zck
  * zck: add option to select chunk hash
  * Fix testsuite: Add expected sha256sums for zstd 1.5.1+
  * Fix memory leaks
  * Various bug fixes
- Drop upstream merged zstd-1.5.1.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1650628800">- Update to version 1.2.2
  * Turn off EOL handling for the *.zck test files.
  * Let the tests also pass with libzstd-1.4.10.</changelog>
  <changelog author="dmueller@suse.com" date="1666612800">- update to 1.2.3:
  * Remove meson deprecation warning
  * Add license scan report and status
  * test/zck_cmp_uncomp: fix printf format types
  * meson: add option to build without docs
  * zck: declare write_data as static</changelog>
  <changelog author="bwiedemann@suse.com" date="1676808000">- update to 1.2.4:
  * Update tests to handle zstd 1.5.4</changelog>
  <changelog author="dmueller@suse.com" date="1679918400">- update to 1.3.0:
  * Add ZCK_NO_WRITE option to disable writing to a file
  * meson: Use global function in argp check</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- update to 1.3.1:
  * Fix read off-by-one bug in compressed int function
  * Handle read-data errors correctly
  * Ensure memory is freed when zrealloc is called with size 0</changelog>
  <changelog author="dmueller@suse.com" date="1697284800">- update to 1.3.2:
  * Handle overflow errors in malformed zchunk files</changelog>
</package>
<package pkgid="f1d56b0ae6847cc63ddb847613099bf260454c884fe07e5ac239ec8ca85b96d7108a5fa6a25684a45fa9fcbef53bf09f27c1d20ba50b04619e086233e154e7cc" name="libzio-debugsource" arch="aarch64">
  <version epoch="0" ver="1.08" rel="slfo.1.1_1.3"/>
  <changelog author="schwab@linux-m68k.org" date="1488283200">- Add pthread-sigmask.patch to include &lt;signal.h&gt; as required
  by pthread_sigmask</changelog>
  <changelog author="werner@suse.de" date="1488283201">- Push version to 1.04
  * Add patch from Andreas Schwab to fix problem with missing
  declaration of pthread_sigmask(2)
- Delete pthread-sigmask.patch as now upstream</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Push to version 1.05
  * Avoid that writer of fopencookie(3) will return less than
    the initial buffer size.
  * Make sure that MIN macro is defined if used.
  * Some minor changes as well.</changelog>
  <changelog author="werner@suse.de" date="1515499200">- Version 1.06: Add changes from Jerrell Watts which has kindly
  provided his changes for lzma/xz support with large I/O buffers</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="werner@suse.de" date="1623153600">- Version 1.07: Add support for zstd at least for write and read</changelog>
  <changelog author="werner@suse.de" date="1623240000">- Version 1.08: Fix bug triggered by short files</changelog>
  <changelog author="werner@suse.de" date="1623240001">- Correct download URL</changelog>
  <changelog author="meissner@suse.com" date="1657195200">- switch to https download url</changelog>
</package>
<package pkgid="3e3f651e71d1302d0e2fd831b790c2ac23c2a9cf6b088c509fed0c53bfe66f2967cc1decd1573746c59948590be84acbcb83ff847242fa5964e8a71addb73bad" name="libzio1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.08" rel="slfo.1.1_1.3"/>
  <changelog author="schwab@linux-m68k.org" date="1488283200">- Add pthread-sigmask.patch to include &lt;signal.h&gt; as required
  by pthread_sigmask</changelog>
  <changelog author="werner@suse.de" date="1488283201">- Push version to 1.04
  * Add patch from Andreas Schwab to fix problem with missing
  declaration of pthread_sigmask(2)
- Delete pthread-sigmask.patch as now upstream</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Push to version 1.05
  * Avoid that writer of fopencookie(3) will return less than
    the initial buffer size.
  * Make sure that MIN macro is defined if used.
  * Some minor changes as well.</changelog>
  <changelog author="werner@suse.de" date="1515499200">- Version 1.06: Add changes from Jerrell Watts which has kindly
  provided his changes for lzma/xz support with large I/O buffers</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="werner@suse.de" date="1623153600">- Version 1.07: Add support for zstd at least for write and read</changelog>
  <changelog author="werner@suse.de" date="1623240000">- Version 1.08: Fix bug triggered by short files</changelog>
  <changelog author="werner@suse.de" date="1623240001">- Correct download URL</changelog>
  <changelog author="meissner@suse.com" date="1657195200">- switch to https download url</changelog>
</package>
<package pkgid="a8b77538286ce4ddc24998bc13d4af660663b5c4c1b215fb2113abce810466a7284cf43ca964863bcfaa1da5f57935623b9293bf279c89a7ff27f84375146fbd" name="libzmq5-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.3.5" rel="slfo.1.1_1.3"/>
  <changelog author="adam.majer@suse.de" date="1522065600">- New upstream version 4.2.5:
  * fix backward-incompatible change in the NULL auth
    mechanism that slipped in 4.2.3 and made connections
    with a ZAP domain set on a socket but without a working
    ZAP handler fail. See ZMQ_ZAP_ENFORCE_DOMAIN
  * clarify in zmq_close manpage that the operation will
    complete asynchronously.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- New upstream version 4.3.1:
  * CVE-2019-6250: A vulnerability has been found that would allow
    attackers to direct a peer to jump to and execute from an address
    indicated by the attacker. (bsc#1121717)
  * fixed race condition in ZMQ_PUSH when quickly disconnecting and
    reconnecting causes last part of multi-part message to get
    "stuck" and resent by mistake to the new socket.
  For complete set of changes, see,
  https://github.com/zeromq/libzmq/releases/tag/v4.3.1
  https://github.com/zeromq/libzmq/releases/tag/v4.3.0</changelog>
  <changelog author="vcizek@suse.com" date="1562673600">- New upstream version 4.3.2:
  * CVE-2019-13132: a remote, unauthenticated client connecting to a
    libzmq application, running with a socket listening with CURVE
    encryption/authentication enabled, may cause a stack overflow and
    overwrite the stack with arbitrary data, due to a buffer overflow in
    the library. Users running public servers with the above configuration
    are highly encouraged to upgrade as soon as possible, as there are no
    known mitigations. (bsc#1140255)
  * New DRAFT (see NEWS for 4.2.0) zmq_socket_monitor_versioned API that supports
    a versioned monitoring events protocol as a parameter. Passing 1 results in
    the same behaviour as zmq_socket_monitor.
  * New DRAFT (see NEWS for 4.2.0) zmq_socket_monitor_pipes_stats that triggers
    a new ZMQ_EVENT_PIPES_STATS to be delivered via zmq_socket_monitor_versioned
    v2 API, which contains the current status of all the queues owned by the
    monitored socket. See doc/zmq_socket_monitor_versioned.txt for details.
  * New DRAFT (see NEWS for 4.2.0) zmq_poller_fd that returns the FD of a thread
    safe socket.
  * New DRAFT (see NEWS for 4.2.0) socket options:
    ZMQ_XPUB_MANUAL_LAST_VALUE is similar to ZMQ_XPUB_MANUAL but allows to avoid
    duplicates when using last value caching.
    ZMQ_SOCKS_USERNAME and ZMQ_SOCKS_PASSWORD that implement SOCKS5 proxy
    authentication.
- For complete set of changes, see
  https://github.com/zeromq/libzmq/releases/tag/v4.3.2</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- New upstream version 4.3.3:
  * Denial-of-Service on CURVE/ZAP-protected servers by
    unauthenticated clients. (CVE-2020-15166, bsc#1176116)
    If a raw TCP socket is opened and connected to an endpoint that is fully
    configured with CURVE/ZAP, legitimate clients will not be able to exchange
    any message. Handshakes complete successfully, and messages are delivered to
    the library, but the server application never receives them.
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-25wp-cf8g-938m
  * Stack overflow on server running PUB/XPUB socket (CURVE disabled).
    The PUB/XPUB subscription store (mtrie) is traversed using recursive
    function calls. In the remove (unsubscription) case, the recursive calls are
    NOT tail calls, so even with optimizations the stack grows linearly with the
    length of a subscription topic. Topics are under the control of remote
    clients - they can send a subscription to arbitrary length topics. An
    attacker can thus cause a server to create an mtrie sufficiently large such
    that, when unsubscribing, traversal will cause a stack overflow. (bsc#1176258)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-qq65-x72m-9wr8
  * Memory leak in PUB server induced by malicious client(s) without CURVE/ZAP.
    Messages with metadata are never processed by PUB sockets, but the metadata
    is kept referenced in the PUB object and never freed. (bsc#1176257)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-4p5v-h92w-6wxw
  * Memory leak in client induced by malicious server(s) without CURVE/ZAP.
    When a pipe processes a delimiter and is already not in active state but
    still has an unfinished message, the message is leaked. (bsc#1176259)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-wfr2-29gj-5w87
  * Heap overflow when receiving malformed ZMTP v1 packets (CURVE disabled).
    By crafting a packet which is not valid ZMTP v2/v3, and which has two
    messages larger than 8192 bytes, the decoder can be tricked into changing
    the recorded size of the 8192 bytes static buffer, which then gets overflown
    by the next message. The content that gets written in the overflown memory
    is entirely decided by the sender. (bsc#1176256)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-fc3w-qxf5-7hp6
  For complete list of changes, see
  https://github.com/zeromq/libzmq/releases/tag/v4.3.3</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 4.3.4:
  * ZMQ_PRIORITY will set the SO_PRIORITY socket option on the underlying
    sockets. Only supported on Linux.
  * Fixed compilation errors on kFreeBSD and GNU/Hurd
  * Fixed excessive amount of socket files left behind in Windows TMP
  * Fixed regression that breaks using IPv6 link-local addresses on Linux
  * Fixed compilation errors on Android
  * Fixed compilation error with ulibc and libbsd
  * Fixed stack overflow on Windows x64
  * Fixed various compilation errors on Windows ARM 32bit
  * Fixed various compilation warnings with XCode
  * Fixed return value of zmq_ctx_get changed unintentionally</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Explicit BR on python is not necessary.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- drop xmlto and asciidoc buildrequires, these are only needed
  for non-release builds which do not ship with prebuilt docs</changelog>
  <changelog author="schwab@suse.de" date="1674475200">- qemu-user.patch: Fix build with qemu linux-user emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1698148800">- update to 4.3.5:
  * Relicensing from LGPL-3.0+ (with custom exceptions) to MPL-2.0 is now complete.
    libzmq is now distributed under the Mozilla Public License 2.0. Relicensing
    grants have been collected from all relevant authors, and some functionality
    has been clean-room reimplemented where that was not possible. In layman terms,
    the new license provides the same rights and obligations as before. Source
    files are now tagged using the SPDX license identifier format.
    Details of the relicensing process can be seen at: #2376
    Relicensing grants have been archived at:
    https://github.com/rlenferink/libzmq-relicense
    A special thanks to everybody who helped with this long and difficult task,
    with the process, the reimplementations, the collections and everything else.
  * New DRAFT (see NEWS for 4.2.0) socket options:
    ZMQ_BUSY_POLL will set the SO_BUSY_POLL socket option on the underlying
    sockets, if it is supported.
    ZMQ_HICCUP_MSG will send a message when the peer has been disconnected.
    ZMQ_XSUB_VERBOSE_UNSUBSCRIBE will configure a socket to pass all
    unsubscription messages, including duplicated ones.
    ZMQ_TOPICS_COUNT will return the number of subscribed topics on a
    PUB/SUB socket.
    ZMQ_NORM_MODE, ZMQ_NORM_UNICAST_NACK, ZMQ_NORM_BUFFER_SIZE,
    ZMQ_NORM_SEGMENT_SIZE, ZMQ_NORM_BLOCK_SIZE, ZMQ_NORM_NUM_PARITY,
    ZMQ_NORM_NUM_AUTOPARITY and ZMQ_NORM_PUSH to control various aspect of
    NORM sockets.
    See doc/zmq_setsockopt.txt and doc/zmq_getsockopt.txt for details.
  * New DRAFT (see NEWS for 4.2.0) zmq_ppoll APIs was added that differs from
    zmq_poll in the same way that ppoll differs from poll.
    See doc/zmq_ppoll.txt for details.
  * Various bug fixes and performance improvements.
- qemu-user.patch: upstreamed, removed</changelog>
</package>
<package pkgid="7cd105c84255e360a3d99939da519a803eadd00cd7ff9f3a88c59d75d55bf614c3d8e841f9df8bb6716a46482cd456f8958e003b9d873597ba7ec21a109b27d9" name="libzstd1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.5" rel="slfo.1.1_1.4"/>
  <changelog author="ismail@i10z.com" date="1620993600">- Update to version 1.5.0
  * https://github.com/facebook/zstd/releases/tag/v1.5.0
  * Improved Middle-Level Compression Speed
  * Improved High-Level Compression Ratio
  * Faster Decompression Speed
  * Dynamic Library Supports Multithreading by Default
- Drop zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 1.5.1:
  * perf: rebalanced compression levels, to better match the intended speed/level curve
  * perf: faster huffman decoder, using x64 assembly
  * perf: slightly faster high speed modes (strategies fast &amp; dfast)
  * perf: improved binary size and faster compilation times
  * perf: new row64 mode, used notably in level 12
  * perf: faster mid-level compression speed in presence of highly repetitive patterns
  * perf: minor compression ratio improvements for small data at high levels
  * perf: reduced stack usage (mostly useful for Linux Kernel)
  * perf: faster compression speed on incompressible data
  * perf: on-demand reduced ZSTD_DCtx state size, using build macro ZSTD_DECODER_INTERNAL_BUFFER, at a small cost of performance
  * build: allows hiding static symbols in the dynamic library, using build macro
  * build: support for m68k (Motorola 68000's)
  * build: improved AIX support
  * build: improved meson unofficial build
  * cli : custom memory limit when training dictionary (#2925)
  * cli : report advanced parameters information when compressing in very verbose mode (``-vv`)</changelog>
  <changelog author="dmueller@suse.com" date="1641211200">- fix pkgconfig pc file settings by passing in right prefix during build</changelog>
  <changelog author="dmueller@suse.com" date="1641384000">- add noexecstack.patch (bsc#1194337)</changelog>
  <changelog author="bwiedemann@suse.com" date="1642766400">- update to 1.5.2:
  * correct a performance regression
  * smaller improvements and fixes
  * See https://github.com/facebook/zstd/releases/tag/v1.5.2
- Refresh pzstd.1.patch
- Drop upstream noexecstack.patch</changelog>
  <changelog author="dmueller@suse.com" date="1643544000">- enable zlib/gzip compatible backend, as zlib is significantly
  (50%-100%) faster than gzip
- add zstd-gzip compatibility subpackage which can be used
  as a drop in compatible replacement for gzip
- small spec file cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1672747200">- add zcat in zstd-gzip (needed by for example the kernel scripts)</changelog>
  <changelog author="bwiedemann@suse.com" date="1676030400">- update to 1.5.4:
  * perf: +20% faster huffman decompression for targets that
    can't compile x64 assembly
  * perf: up to +10% faster streaming compression at levels 1-2
  * perf: +4-13% for levels 5-12 by optimizing function
    generation
  * pref: +3-11% compression speed for `arm` target
  * perf: +5-30% faster dictionary compression at levels 1-4
  * perf: +10-20% cold dict compression speed by prefetching
    CDict tables
  * perf: +1% faster compression by removing a branch in
    ZSTD_fast_noDict
  * perf: Small compression ratio improvements in high
    compression mode
  * perf: small speed improvement by better detecting
    `STATIC_BMI2` for `clang`
  * perf: Improved streaming performance when
    `ZSTD_c_stableInBuffer` is set
  * cli: Asynchronous I/O for improved cli speed
  * cli: Change `zstdless` behavior to align with `zless`
  * cli: Keep original file if `-c` or `--stdout` is given
  * cli: Keep original files when result is concatenated into a
    single output with `-o`
  * cli: Preserve Permissions and Ownership of regular files
  * cli: Print zlib/lz4/lzma library versions with `-vv`
  * cli: Print checksum value for single frame files with `-lv`
  * cli: Print `dictID` when present with `-lv`
  * cli: when `stderr` is *not* the console, disable status
    updates, but preserve final summary
  * cli: support `--best` and `--no-name` in `gzip` compatibility
    mode
  * cli: support for `posix` high resolution timer
    `clock_gettime()`, for improved benchmark accuracy
  * cli: improved help/usage (`-h`,  `-H`) formatting
  * cli: Fix better handling of bogus numeric values
  * cli: Fix input consists of multiple files _and_ `stdin`
  * cli: Fix tiny files passthrough
  * cli: Fix for `-r` on empty directory
  * cli: Fix empty string as argument for `--output-dir-*`
  * cli: Fix decompression memory usage reported by `-vv --long`
  * cli: Fix infinite loop when empty input is passed to trainer
  * cli: Fix `--adapt` doesn't work when `--no-progress` is also
    set
  * api: Support for Block-Level Sequence Producer
  * api: Support for in-place decompression
  * api: New  `ZSTD_CCtx_setCParams()`  function, set all
    parameters defined in a  `ZSTD_compressionParameters`
    structure
  * api: Streaming decompression detects incorrect header ID
    sooner
  * api: Window size resizing optimization for edge case
  * api: More accurate error codes for busy-loop scenarios
  * api: Fix limit overflow in `compressBound` and
    `decompressBound` (#3362, #3373, Cyan4973) reported by
    @nigeltao
  * api: Deprecate several advanced experimental functions:
    streaming (#3408, @embg), copy
  * bug: Fix corruption that rarely occurs in 32-bit mode with
    wlog=25
  * bug: Fix for block-splitter
  * bug: Fixes for Sequence Compression API
  * bug: Fix leaking thread handles on Windows
  * bug: Fix timing issues with cmake/meson builds
  * build: Allow user to select legacy level for cmake
  * build: Enable legacy support by default in cmake
  * build: Meson build script improvements
  * build: Add aarch64 to supported architectures for zstd_trace
  * build: support AIX architecture
  * build: Fix `ZSTD_LIB_MINIFY` build macro, which now reduces
    static library size by half
  * build: Fix Windows issues with Multithreading translation
    layer (#3364, #3380, @yoniko) and ARM64 target
  * build: Fix `cmake` script
  * doc: Updated man page, providing more details for `--train`
    mode
  * doc: Add decompressor errata document
  * misc: Enable Intel CET
  * misc: Fix `contrib/` seekable format
  * misc: Improve speed of the one-file library generator
- rebase pzstd.1.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dmueller@suse.com" date="1681387200">- update to 1.5.5:
  * fix: fix rare corruption bug affecting the high compression
    mode, reported by @danlark1
  * perf: improve mid-level compression speed
  * lib: deprecated bufferless block-level API (#3534) by
    @terrelln
  * cli: mmap large dictionaries to save memory, by
    @daniellerozenblit
  * cli: improve speed of --patch-from mode (~+50%) (#3545) by
    @daniellerozenblit
  * cli: improve i/o speed (~+10%) when processing lots of small
    files (#3479) by @felixhandte
  * cli: zstd no longer crashes when requested to write into
    write-protected directory (#3541) by @felixhandte
  * cli: fix decompression into block device using -o, reported
    by @georgmu
  * misc: improve seekable format ingestion speed (~+100%) for
    very small chunk sizes (#3544) by @Cyan4973
  * misc: tests/fullbench can benchmark multiple files (#3516) by
    @dloidolt</changelog>
</package>
<package pkgid="eb24679affdce40845bdb5c94b0cc0fcf7c8e531e2b72621a9a40f5e6fd63886f3eb29e9431dfb6f2e51306ddd4dcd3e912471c03fc9ea1239b21ad7a782ebdb" name="libzypp-debuginfo" arch="aarch64">
  <version epoch="0" ver="17.38.5" rel="slfo.1.1_1.1"/>
  <changelog author="ma@suse.de" date="1753963200">- Append RepoInfo::path() to the mirror URLs in Preloader
  (bsc#1247054)
- version 17.37.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1754568000">- Fix evaluation of libproxy results (bsc#1247690)
- Replace URL variables inside mirrorlist/metalink files
  (fixes #667)
- version 17.37.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1754913600">- Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1758542400">- runposttrans: strip root prefix from tmppath (bsc#1250343)
- fixup! Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.18 (35)</changelog>
  <changelog author="ma@suse.de" date="1768132800">- zypp.conf: follow the UAPI configuration file specification
  (PED-14658)
  In short terms it means we will no longer ship an
  /etc/zypp/zypp.conf, but store our own defaults in
  /usr/etc/zypp/zypp.conf. The systems administrator may choose to
  keep a full copy in /etc/zypp/zypp.conf ignoring our config file
  settings completely, or - the preferred way - to overwrite
  specific settings via /etc/zypp/zypp.conf.d/*.conf overlay files.
  See the ZYPP.CONF(5) man page for details.
- cmake: correctly detect rpm6 (fixes #689)
- Use 'zypp.tmp' as temp directory component to ease setting up
  SELinux policies (bsc#1249435)
- zyppng: Update Provider to current MediaCurl2 download
  approach, drop Metalink ( fixes #682 )
- version 17.38.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1768392000">- Avoid libcurl-mini4 when building as it does not support ftp
  protocol.
- Translation: updated .pot file.
- version 17.38.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1769688000">- Prepare a legacy /etc/zypp/zypp.conf to be installed on old distros.
  See the ZYPP.CONF(5) man page for details.
- Fix runtime check for broken rpm --runposttrans (bsc#1257068)
- version 17.38.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1772798400">- specfile: on fedora use %{_prefix}/share as zyppconfdir if
  %{_distconfdir} is undefined (fixes #693)
  This will set '-DZYPPCONFDIR=%{zyppconfdir}' for cmake.
- Fall back to a writable location when precaching packages
  without root (bsc#1247948)
- version 17.38.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1773144000">- Fix Product::referencePackage lookup (bsc#1259311)
  Use a provided autoproduct() as hint to the package name of the
  release package. It might be that not just multiple versions of
  the same release package provide the same product version, but
  also different release packages.
- version 17.38.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1773835200">- Fix preloader not caching packages from arch specific subrepos
  (bsc#1253740)
- Deprioritize invalid mirrors (fixes openSUSE/zypper#636)
- version 17.38.5 (35)</changelog>
</package>
<package pkgid="3a87848c370b4c8a3065df35c618f3b1d8637ae82e9a2413230ed7c2553326a110328e509570bf45e8eff247df0ac49d553f17e6ff2f974a46f5ec46f81c361d" name="libzypp-debugsource" arch="aarch64">
  <version epoch="0" ver="17.38.5" rel="slfo.1.1_1.1"/>
  <changelog author="ma@suse.de" date="1753963200">- Append RepoInfo::path() to the mirror URLs in Preloader
  (bsc#1247054)
- version 17.37.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1754568000">- Fix evaluation of libproxy results (bsc#1247690)
- Replace URL variables inside mirrorlist/metalink files
  (fixes #667)
- version 17.37.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1754913600">- Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1758542400">- runposttrans: strip root prefix from tmppath (bsc#1250343)
- fixup! Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.18 (35)</changelog>
  <changelog author="ma@suse.de" date="1768132800">- zypp.conf: follow the UAPI configuration file specification
  (PED-14658)
  In short terms it means we will no longer ship an
  /etc/zypp/zypp.conf, but store our own defaults in
  /usr/etc/zypp/zypp.conf. The systems administrator may choose to
  keep a full copy in /etc/zypp/zypp.conf ignoring our config file
  settings completely, or - the preferred way - to overwrite
  specific settings via /etc/zypp/zypp.conf.d/*.conf overlay files.
  See the ZYPP.CONF(5) man page for details.
- cmake: correctly detect rpm6 (fixes #689)
- Use 'zypp.tmp' as temp directory component to ease setting up
  SELinux policies (bsc#1249435)
- zyppng: Update Provider to current MediaCurl2 download
  approach, drop Metalink ( fixes #682 )
- version 17.38.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1768392000">- Avoid libcurl-mini4 when building as it does not support ftp
  protocol.
- Translation: updated .pot file.
- version 17.38.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1769688000">- Prepare a legacy /etc/zypp/zypp.conf to be installed on old distros.
  See the ZYPP.CONF(5) man page for details.
- Fix runtime check for broken rpm --runposttrans (bsc#1257068)
- version 17.38.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1772798400">- specfile: on fedora use %{_prefix}/share as zyppconfdir if
  %{_distconfdir} is undefined (fixes #693)
  This will set '-DZYPPCONFDIR=%{zyppconfdir}' for cmake.
- Fall back to a writable location when precaching packages
  without root (bsc#1247948)
- version 17.38.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1773144000">- Fix Product::referencePackage lookup (bsc#1259311)
  Use a provided autoproduct() as hint to the package name of the
  release package. It might be that not just multiple versions of
  the same release package provide the same product version, but
  also different release packages.
- version 17.38.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1773835200">- Fix preloader not caching packages from arch specific subrepos
  (bsc#1253740)
- Deprioritize invalid mirrors (fixes openSUSE/zypper#636)
- version 17.38.5 (35)</changelog>
</package>
<package pkgid="54d80306bd201f8ef756699ed36e002157b44cfc1bdfe72c0e56b1451b913f744801756c206d7355da5f0cc9dc134754463bf046185535c4bd5d8f8fba81f3ae" name="linux-atm-debugsource" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@novell.com" date="1288699200">- fix requires after rename</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="aj@ajaissle.de" date="1390478400">- Cleanup spec file, remove %clean section
- Updated to 2.5.2
- Removed linux-atm-2.5.0.diff (in mainline)
- Removed linux-atm-2.5.0-include.patch (in mainline)
- Rebased linux-atm-2.5.0-fdleak.patch as linux-atm-2.5.2_fdleak.patch
- Added linux-atm-2.5.2_implicit-fortify-decl.patch to fix implicit declarations</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- linux-atm-2.5.2-fix-header-conflict.patch: avoid conflict with kernel
  headers</changelog>
  <changelog author="jslaby@suse.com" date="1547035200">- add linux-atm-2.5.2-remove-headers-crude-hack.patch
- switch from %doc to %license for licenses</changelog>
  <changelog author="jslaby@suse.com" date="1562846400">- add fix-build-after-y2038-changes-in-glibc.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1575633600">- Modernise spec file a bit:
  * Move licnse to library package
  * Use more of new macros for building</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Use %_firmwaredir</changelog>
</package>
<package pkgid="35c9c4fb7b1b99e9e61553846b01e66929951e45ec6dda65b7e58ffcacc0bf0e16ee8efe7e2d7c06ac51a0f9bbeb4a56a8ec096f3626ea52ebed0d4fff042b94" name="linuxptp-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1" rel="slfo.1.1_2.1"/>
  <changelog author="mpluskal@suse.com" date="1518091200">- Update to version v1.8+git.20180101 (bsc#1050682):
  * clock: Don't forward management requests to UDS port.
  * Add an acknowledgment in the readme for Meinberg.
  * phc2sys: update '-s' option
  * sk: don't leak socket when reading of IB GUID fails.
  * Add compile time sanity check for interface name lengths.
  * phc_ctl: fix adj command to accept negative offset.
  * port: return timestamping iface in port properties
  * phc2sys: re-create clock clkid and servo when phc index changed
  * phc2sys: split servo_add from function clock_add
  * transport: pass struct interface to transport_open</changelog>
  <changelog author="jbohac@suse.com" date="1518091201">- change the versioning scheme, resulting in version
  1.8+git65.g303b08c</changelog>
  <changelog author="jbohac@suse.com" date="1522756800">Update to version 1.9+git1.gd14f11f:
  * Expand and rationalize time stamping options.
  * Introduce peer to peer one step.
  * pmc: add long options and configuration file
  * port: Implement the NetSync Monitor protocol.
  * Introduce an option to ignore the transport specific field.
  * clock: add option to specify initial path delay.
  * sk: turn warnings about unexpected RX filter into debug messages.</changelog>
  <changelog author="mpluskal@suse.com" date="1543233600">- Update to stable release 2.0:
  * Peer-to-Peer Transparent Clock support
  * End-to-End Transparent Clock support
  * Unicast support
  * Support for all three Telecom Profiles
    + T-REC-G.8265.1-201407
    + T-REC-G.8275.1-201606
    + T-REC-G.8275.2-201708
- Changes for version 1.9.2:
  * Fixed stack buffer overflow in the new NetSync Monitor code (since 1.9)
  * Command line support for every configuration variable via long options
  * IPoIB interface support
  * Improved Delay Request performance at high message rates
  * Improved UTC offset tracking
  * Multiple TLV support
  * NetSync Monitor protocol support
  * Peer to peer one-step
  * Support for bonded interfaces
- No longer use _service</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1563969600">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="jbohac@suse.com" date="1605009600">- Update to version 3.1:
  * ts2phc: nmea: Drop time of day readings older than five seconds.
  * ts2phc: nmea: Update the leap seconds table on demand.
  * ts2phc: nmea: Add a configuration option for the current leap seconds file.
  * ts2phc: nmea: Add error messages for leap second lookup failures.
  * ts2phc: nmea: Correct UTC to TAI conversion.
  * posix_clock_open: derive PHC index from device name if possible
  * phc_ctl: display all capability information
  * ts2phc: Ignore pulses with invalid time stamps.
  * ts2phc: Fix memory leak.
  * ts2phc: Use proper close method on the error path.
  * port: Support slave event monitoring of delay timing data.
  * monitor: Add support for slave delay timing data TLV.
  * pmc: Show slave receive timing data TLVs attached to signaling messages.
  * port: Support slave event monitoring of Sync timing data.
  * clock: Create a slave event monitor.
  * Introduce a module for slave event monitoring.
  * Reject path trace TLVs with excessive elements.
  * Let the free running port state reflect the synchronization uncertain flag.
  * pmc: Support getting and setting the local synchronization uncertain flag.
  * Implement the synchronization uncertain flag.
  * Add support for write phase mode.
  * Decouple servo state from automotive profile.
  * ts2phc: Support using a GPS radio as the master clock.
  * Introduce a leap second table.
  * ts2phc: Support using a PHC as the master clock.
  * Introduce the ts2phc program.
  * pmc: Allow multiple local subscribers.
  * pmc: Subscribe to port state push notification events when requested.
  * clock: reset master/local rr when best clock id changes
  * unicast: Enable sharing master tables between ports.
  * Accept external PHC devices from the command line.
  * phc2sys: Fix frequency estimation when synchronizing a PHC to the system clock.
  * Correct the signature of the legacy system offset measurement method.
  * ptp4l: Add configuration option for socket priority
  * sk: Recognize HWTSTAMP_FILTER_SOME
  * Improve G.8275.[12] example configs.
  * rtnl: add team activebackup support
  * Ignore signaling messages on target port mismatch.
  * Avoid fault when receiving zero length packets
  * phc2sys: Fix crash when trying to synchronize unadjustable clock.
  * Added support for opening POSIX clock devices
  * Allow ignoring source port identity in end to end mode.
  * port: correction of port name used port_open
  * Add example configuration for Automotive Profile.
  * Add ignore_source_id config option.
  * Add inhibit_announce config option.
  * Add BMCA config option.
  * port: Add configurable option to set asCapable.
  * timemaster: Allow ptp4l-specific sections in [ptp4l.conf].
  * unicast: Process timeouts equal to current time.
  * snmp4lptp: added snmp4lptp.8
  * Add possibility to set clockIdentity
  * Introduce the maxStepsRemoved attribute
  * config: Add hardware time stamp filter setting mode
  * snmp4lptp: Added function for data collection from ptp4l program.
  * snmp4lptp: Added communication to ptp4l via the UDS port.
  * snmp4lptp: Add snmp sub agent for linuxptp
- re-introduce the _service file</changelog>
  <changelog author="jbohac@suse.com" date="1625572800">- Update to version 3.1.1:
  * Version 3.1.1
  * tc: Fix length of follow-up message of one-step sync.
  * Validate the messageLength field of incoming messages.</changelog>
  <changelog author="jsegitz@suse.com" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * phc2sys.service
  * ptp4l.service</changelog>
  <changelog author="jbohac@suse.com" date="1694520000">- Update to version 4.1:
  * Version 4.1
  * phc2sys: Fix -n option with -w.
  * phc2sys: Avoid segfault with default UDS address.
  * phc2sys: Improve logging with single domain.
  * ptp4l man: Add description for setting kthreads priorities
  * sk: don't report random errno on timeout
  * phc_ctl: explicitly check for adjust_phase definition
  * raw: Fix PRP trailer detection
  * remove C99 style loop variable declarations
  * phc2sys: Add multi-domain synchronization.
  * phc2sys: Shallow do_loop().
  * phc2sys: Create pmc agent after processing options.
  * phc2sys: Rename phc2sys_private to domain.
  * Use the 802.1AS peer delay computation when transportSpecific is 1
  * Resolve false hybrid_e2e warning
  * Fix SERVO_LOCKED_STABLE behavior.
  * Version 4.0
  * clock: Fix summary interval in free-running mode.
  * Avoid switching PHC when phc_index is negative
  * ts2phc: Fix memory leak on initial error path.
  * power profile: Fix regression in the default configuration file.
  * msg: append TLV onto all PTP event messages
  * Fix detection of VLAN over bond support in case the driver does not support SIOCGHWTSTAMP ioctl.
  * Clear pending errors on sockets.
  * ntpshm: Invalidate SHM data before releasing the servo
  * lstab: Update leapfile validity
  * port: Don't switch to PHC with SW timestamping.
  * ts2phc: Fix potential null-pointer dereference
  * ts2phc: Prevent reporting poll error when received termination signal
  * Set controlField to zero in message headers
  * tz2alt: Add tz2alt to .gitignore
  * Introduce a time zone helper program.
  * pmc: Convert internal helper function into global method.
  * Implement the ALTERNATE_TIME_OFFSET_ENABLE management message.
  * Add the ALTERNATE_TIME_OFFSET_NAME management message.
  * Add the ALTERNATE_TIME_OFFSET_PROPERTIES management message.
  * Prepare clock based storage of up to four time zones.
  * tlv: Encode and decode alternate time offset indicator TLVs.
  * Add a custom management message for power profile settings.
  * Introduce the power profile.
  * tlv: Encode and decode power profile TLVs.
  * Accept the full range for domainNumber.
  * man pages: Bump date.
  * Alphabetize configuration options in the ts2phc man page.
  * Alphabetize configuration options in the pmc man page.
  * Alphabetize configuration options in the phc2sys man page.
  * Remove stray copy/pasteo from the phc2sys man page.
  * Alphabetize configuration options in the ptp4l man page.
  * ts2phc: reset servo if failed to discipline clock
  * phc2sys: reset servo if failed to discipline clock
  * ptp4l: reset servo if failed to discipline clock
  * clockadj: return error if failed to adjust clock
  * unicast: Avoid undefined integer shifts.
  * ts2phc: Fix generic pps source when tai offset is not set in OS
  * lstab: move update_leapsecond_table function to lstab
  * lstab: Add LSTAB_EXPIRED result
  * timemaster: Use refclock_sock servo with chrony.
  * timemaster: Replace shm_segment with refclock_id.
  * Add refclock_sock servo.
  * Remove obsolete statement in ptp4l man page.
  * Fix up alphetical order in port_private header file.
  * port: start sync rx timer on grant
  * raw: Use BPF filter based on tcpdump syntax.
  * Fix SERVO_JUMP docstring comment
  * Improve efficiency of nullf servo synchronization
  * clock: Fix stale clock parent pid usage after best master change
  * adding delay asymmetry calculation
  * organization TLV support for interface rate
  * adding speed field information for interface
  * function to support get interface speed via ethtool
  * unicast_client: cancel sync/delay_response on UC_EV_UNSELECTED event
  * unicast_client: fix checkpatch ERROR: trailing whitespace
  * unicast_client: stop sending abnormal contract cancel requests
  * Don't re-arm fault clearing timer on unrelated netlink events
  * port: Avoid faults with vclocks and PHC from command line.
  * makefile: use conditional assignment for KBUILD_OUTPUT
  * servo: stop rounding initial frequency to nearest ppb
  * The PortId is defined as a couple of ClockId (an 8-bytes opaque) and the PortNumber (UInterger16).
  * config: Fix -Wformat-truncation warnings.
  * unciast_client: trigger BMCA upon CANCEL receive
  * ptp4l: Add profile_id configuration support for G.8275.1 and G.8275.2.
  * config: allow fractional freq_est_interval
  * Added support for Standard Baudrates supported by GNSS receivers
  * Extend clockcheck to check for changes in frequency.
  * Don't accept errors in clockadj_get_freq().
  * Drop support for old kernels returning zero frequency.
  * phc2sys: Add clocks after processing configuration.
  * ts2phc: Use system time as the default ToD source
  * ts2phc: Add option to specify the ToD source in the config file
  * ts2phc: Rename pps_sink to tod_sink in main()
  * port: don't clear fault if link is down
  * sk: Handle EINTR when waiting for transmit timestamp.
  * ts2phc: Update default lstab expiry date
  * phc2sys: Update TAI to UTC offset in manual
  * Strip Parallel Redundancy Protocol (PRP) trailer
  * ts2phc_phc_pps_source: make use of new kernel API for perout waveform
  * ts2phc: allow PHC PPS sources to be synchronized
  * ts2phc: reconfigure sync direction by subscribing to ptp4l port events
  * ts2phc: split PPS sink poll from servo loop
  * ts2phc_slave: print offset to the source clock
  * ts2phc: instantiate a pmc agent
  * util: import port_state_normalize() logic from phc2sys
  * ts2phc: instantiate a full clock structure for every PPS source of the PHC kind
  * ts2phc: instantiate a full clock structure for every PPS sink
  * ts2phc: create a private data structure
  * phc2sys: Add support for free-running mode
  * G.8275.2 support for delay_mechanism NO_MECHANISM
  * port: Disable PHC switch with vclocks.
  * unicast: Update announce timer when renew
  * phc2sys: Allow multiple sink clocks
  * Add new ptp capability.
  * Add new management TLVs to pmc.8
  * ptp4l: add VLAN over bond support
  * port: refactor port_link_status
  * ptp4l: init iface-&gt;ts_label when interface created
  * phc2sys: Don't exit when reading of PHC fails with EBUSY.
  * sysoff: Retry on EBUSY when probing supported ioctls.
  * sysoff: Change log level of ioctl error messages.
  * sysoff: Change sysoff_measure() to return errno.
  * clockadj: Change clockadj_compare() to return errno.
  * ts2phc: rename "master" to "source"
  * ts2phc: rename "slave clocks" to "PPS sinks"
  * ts2phc: rename source code files ("master" to "source", "slave" to "sink")
  * pmc_agent: make pmc_agent_query_port_properties take an enum port_state argument
  * UDS: allow specifying different file mode for the read-only socket.
  * UDS: added option to set file mode for the created socket.
  * Fix management TLV print.
  * Add new managements TLVs get size.
  * port: cancel unicast transmission when closing port.
  * port: unicast client - do not add master to foreign master table if not in the unicast master table.
  * unicast: Add support to send CANCEL_UNICAST_TRANSMISSION TLVs.
  * unicast: Add support to check if message was received from an entry in the unicast master table.
  * TLV management messages need to be aligned to 16 bits.
  * Fix the descriptions of "G.8275.portDS.localPriority" and "G.8275.defaultDS.localPriority" in ptp4l man page.
  * timemaster: Add support for virtual clocks.
  * phc2sys: Use PHC index from PORT_HWCLOCK_NP.
  * tlv: Add PORT_HWCLOCK_NP.
  * port: Check for virtual clocks.
  * config: Add port-specific phc_index option.
  * Add support for binding sockets to virtual clocks.
  * rtnl: Add function to detect virtual clocks.
  * rtnl: Fix rtnl_rtattr_parse() to process max attribute.
  * phc_ctl: replace calculate_offset with clockadj_compare
  * phc2sys: move read_phc into clock_adj.c
  * Add UNICAST_MASTER_TABLE_NP management TLV
  * pmc: Initialize reserved field in management_tlv_datum.
  * Check 'print_log' before arguments are evaluated, not after.
  * Add PORT_SERVICE_STATS_NP management TLV
  * util: attempt to resolve symlinks to the PHC device in posix_clock_open
  * util: fix dangling file descriptors on the error path of posix_clock_open
  * Maintain one Sync sequence counter per destination address.
  * Maintain one Announce sequence counter per destination address.
  * clock: Split update of leap status from clock_time_properties().
  * Delay Response Timeout Feature addition for PTP4L
  * clock: Notify servo about leap second on UTC hardware clock.
  * clock: Clear leap flags after leap second.
  * clock: Print info message when leap flags change.
  * clock: Accept new UTC offset after leap second.
  * lstab: update expiration to 28 December 2021
  * lstab: Close file after reading.
  * Fix quoting in ptp4l man page.
  * config: Add workaround for glibc getopt_long().
  * Rename management ID macros.
  * clockcheck: Increase minimum interval.
  * port: Don't renew raw transport.
  * port: Don't check timestamps from non-slave ports.
  * clock: Reset clock check on best clock/port change.
  * clock: Reset state when switching port with same best clock.
  * Increase the default tx_timestamp_timeout to 10
  * ts2phc: Add serial baudrate option
  * ts2phc: Update leapfile documentation
  * ts2phc: Close socket on peer shutdown
  * ts2phc: Fix uninitialized variable in nmea_scan_rmc
  * tc: Fix length of follow-up message of one-step sync.
  * Validate the messageLength field of incoming messages.
  * Log optimization for ptp4l in jbod and client only mode (clientOnly=1 and boundary_clock_jbod=1)
  * Log optimization for ptp4l in jbod and client only mode (clientOnly=1 and boundary_clock_jbod=1)
  * Add master only management TLV
  * Set domainNumber for telecom examples
  * Fix SLAVE_ONLY TLV
  * Prevent client ports getting stuck in the UNCALIBRATED state.
  * tlv: Fix coding style.
  * Ensure TLV_PORT_STATS_NP statistics uses little endian.
  * Revert "phc2sys: Expand the validation of the PPS mode."
  * Avoid undefined integer operations.
  * pmc: Fix printed totalCorrectionField.
  * Avoid unaligned pointers to packed members.
  * Revert "phc2sys: Ensure PHC source when using PPS mode."
  * phc_ctl: Fix incorrect memset in do_cmp()
  * Fix --initial_delay for automotive profile
  * Update man page to reflect the new serverOnly option.
  * Convert the example configuration files over to the new serverOnly option.
  * Deprecate the masterOnly option in favor of serverOnly.
  * Bump to IEEE 1588-2019 version
  * Clock Class Threshold Feature addition for PTP4L
  * sk: Don't return error for zero-length messages.
  * clock: Introduce step_window to free run x Sync events after a clock step.
  * timemaster: Set uds_ro_address for ptp4l instances.
  * clock: Add read-only UDS port for monitoring.
  * clock: Rename UDS variables to read-write.
  * clock: Don't allow COMMAND action on non-UDS port.
  * port: Ignore non-management messages on UDS port.
  * port: Don't assume transport from port number.
  * Implement push notification for TIME_STATUS_NP
  * tlv: Fix byte reordering in ScaledNs
  * Improve port-related log messages.
  * port: Cache display name for logs.
  * Update man pages to reflect the new clientOnly option.
  * Convert the example configuration files over to the new clientOnly option.
  * Deprecate the slaveOnly option in favor of clientOnly.
  * Check for deprecated "long" options on the command line.
  * lstab: Bring expiration up to date.
  * util: add SIGHUP handling
  * port: Fix link down/up to continue using phc_index set from command line -p option.
  * ts2phc: Convert usage message to time source/sink terminology.
  * ptp4l: Convert usage messages to client/server terminology.
  * phc2sys: Convert usage messages to time source/sink terminology.
  * ts2phc: Convert man page to source/sink terminology.
  * ptp4l: Convert man page to client/server terminology.
  * phc2sys: Convert man page to client/server terminology.
  * phc2sys: Convert man page to source/sink terminology.
  * phc2sys: Update man page to reflect the new restriction on the PPS mode.
  * phc2sys: Ensure PHC source when using PPS mode.
  * phc2sys: fix BC sync fault when port in uncalibrated state
  * phc2sys: add dbg print for clock state change events
  * Update the unicast subscriptions when the GM changes.
  * phc2sys: Fix regression in the automatic mode.
  * pmc_agent: Remove an obsolete method.
  * phc2sys: Simplify the main loop.
  * pmc_agent: Let the update method poll for push events.
  * phc2sys: Move static configuration to its own subroutine.
  * phc2sys: Replace yet another magical test with a proper test.
  * phc2sys: Replace magical test with a proper test.
  * phc2sys: Expand the validation of the PPS mode.
  * phc2sys: Validate the PPS mode right away.
  * phc2sys: Replace hard coded tests with a readable helper function.
  * phc2sys: Rename PMC agent pointer from node to agent.
  * phc2sys: Don't duplicate the command line arguments.
  * pmc_agent: Simplify the method that gets of the number of local ports.
  * pmc_agent: Generalize the method that queries the local clock identity.
  * pmc_agent: Convert the method that queries the port properties.
  * pmc_agent: Convert the method that queries TAI-UTC offset into the canonical form.
  * phc2sys: Fix null pointer de-reference in manual mode.
  * rtnl: Fix trivial spelling error in the name of a helper function.
  * Update the description of the time_stamping configuration option.
  * Avoid setting clock frequency when free running.
  * pmc_agent: Rename the update method and attempt to document it.
  * pmc_agent: Perform time comparison using positive logic.
  * pmc_agent: Remove bogus comparison between last update and now.
  * pmc_agent: Simplify logic in update method.
  * pmc_agent: Simplify the update method.
  * pmc_agent: Convert the subscribe method into the canonical form.
  * Introduce error codes for the run_pmc method.
  * Clarify the documentation of the management TLV ID helper function.
  * Find a better home for the management TLV data helper function.
  * Find a better home for the management TLV ID helper function.
  * pmc_agent: Hide the implementation.
  * pmc_agent: Rename pmc_node to something more descriptive.
  * Introduce the PMC agent module.
  * phc2sys: break out pmc code into pmc_common.c
  * phc2sys: make PMC functions non-static
  * phc2sys: extract PMC functionality into a smaller struct pmc_node
  * phc2sys: break long lines in the PTP management message accessors
  * phc2sys: Postpone adding of servo to clock.
  * phc2sys: Remove superfluous code.
  * missing.h: uclic-ng has clock_nanosleep support since v1.0.31</changelog>
  <changelog author="jsegitz@suse.com" date="1768305600">- Move to DevicePolicy=closed instead of -PrivateDevices=true
  to allow access to devices (bsc#1256059)</changelog>
</package>
<package pkgid="86903bb6354e6b06cd7e94920b5e39487d03c150c48811520789bd4561b08980ed923c77a8a17b508edb3d11d6664674fa90c0679506ca938c37cafab23a0e53" name="linuxptp-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1" rel="slfo.1.1_2.1"/>
  <changelog author="mpluskal@suse.com" date="1518091200">- Update to version v1.8+git.20180101 (bsc#1050682):
  * clock: Don't forward management requests to UDS port.
  * Add an acknowledgment in the readme for Meinberg.
  * phc2sys: update '-s' option
  * sk: don't leak socket when reading of IB GUID fails.
  * Add compile time sanity check for interface name lengths.
  * phc_ctl: fix adj command to accept negative offset.
  * port: return timestamping iface in port properties
  * phc2sys: re-create clock clkid and servo when phc index changed
  * phc2sys: split servo_add from function clock_add
  * transport: pass struct interface to transport_open</changelog>
  <changelog author="jbohac@suse.com" date="1518091201">- change the versioning scheme, resulting in version
  1.8+git65.g303b08c</changelog>
  <changelog author="jbohac@suse.com" date="1522756800">Update to version 1.9+git1.gd14f11f:
  * Expand and rationalize time stamping options.
  * Introduce peer to peer one step.
  * pmc: add long options and configuration file
  * port: Implement the NetSync Monitor protocol.
  * Introduce an option to ignore the transport specific field.
  * clock: add option to specify initial path delay.
  * sk: turn warnings about unexpected RX filter into debug messages.</changelog>
  <changelog author="mpluskal@suse.com" date="1543233600">- Update to stable release 2.0:
  * Peer-to-Peer Transparent Clock support
  * End-to-End Transparent Clock support
  * Unicast support
  * Support for all three Telecom Profiles
    + T-REC-G.8265.1-201407
    + T-REC-G.8275.1-201606
    + T-REC-G.8275.2-201708
- Changes for version 1.9.2:
  * Fixed stack buffer overflow in the new NetSync Monitor code (since 1.9)
  * Command line support for every configuration variable via long options
  * IPoIB interface support
  * Improved Delay Request performance at high message rates
  * Improved UTC offset tracking
  * Multiple TLV support
  * NetSync Monitor protocol support
  * Peer to peer one-step
  * Support for bonded interfaces
- No longer use _service</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1563969600">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="jbohac@suse.com" date="1605009600">- Update to version 3.1:
  * ts2phc: nmea: Drop time of day readings older than five seconds.
  * ts2phc: nmea: Update the leap seconds table on demand.
  * ts2phc: nmea: Add a configuration option for the current leap seconds file.
  * ts2phc: nmea: Add error messages for leap second lookup failures.
  * ts2phc: nmea: Correct UTC to TAI conversion.
  * posix_clock_open: derive PHC index from device name if possible
  * phc_ctl: display all capability information
  * ts2phc: Ignore pulses with invalid time stamps.
  * ts2phc: Fix memory leak.
  * ts2phc: Use proper close method on the error path.
  * port: Support slave event monitoring of delay timing data.
  * monitor: Add support for slave delay timing data TLV.
  * pmc: Show slave receive timing data TLVs attached to signaling messages.
  * port: Support slave event monitoring of Sync timing data.
  * clock: Create a slave event monitor.
  * Introduce a module for slave event monitoring.
  * Reject path trace TLVs with excessive elements.
  * Let the free running port state reflect the synchronization uncertain flag.
  * pmc: Support getting and setting the local synchronization uncertain flag.
  * Implement the synchronization uncertain flag.
  * Add support for write phase mode.
  * Decouple servo state from automotive profile.
  * ts2phc: Support using a GPS radio as the master clock.
  * Introduce a leap second table.
  * ts2phc: Support using a PHC as the master clock.
  * Introduce the ts2phc program.
  * pmc: Allow multiple local subscribers.
  * pmc: Subscribe to port state push notification events when requested.
  * clock: reset master/local rr when best clock id changes
  * unicast: Enable sharing master tables between ports.
  * Accept external PHC devices from the command line.
  * phc2sys: Fix frequency estimation when synchronizing a PHC to the system clock.
  * Correct the signature of the legacy system offset measurement method.
  * ptp4l: Add configuration option for socket priority
  * sk: Recognize HWTSTAMP_FILTER_SOME
  * Improve G.8275.[12] example configs.
  * rtnl: add team activebackup support
  * Ignore signaling messages on target port mismatch.
  * Avoid fault when receiving zero length packets
  * phc2sys: Fix crash when trying to synchronize unadjustable clock.
  * Added support for opening POSIX clock devices
  * Allow ignoring source port identity in end to end mode.
  * port: correction of port name used port_open
  * Add example configuration for Automotive Profile.
  * Add ignore_source_id config option.
  * Add inhibit_announce config option.
  * Add BMCA config option.
  * port: Add configurable option to set asCapable.
  * timemaster: Allow ptp4l-specific sections in [ptp4l.conf].
  * unicast: Process timeouts equal to current time.
  * snmp4lptp: added snmp4lptp.8
  * Add possibility to set clockIdentity
  * Introduce the maxStepsRemoved attribute
  * config: Add hardware time stamp filter setting mode
  * snmp4lptp: Added function for data collection from ptp4l program.
  * snmp4lptp: Added communication to ptp4l via the UDS port.
  * snmp4lptp: Add snmp sub agent for linuxptp
- re-introduce the _service file</changelog>
  <changelog author="jbohac@suse.com" date="1625572800">- Update to version 3.1.1:
  * Version 3.1.1
  * tc: Fix length of follow-up message of one-step sync.
  * Validate the messageLength field of incoming messages.</changelog>
  <changelog author="jsegitz@suse.com" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * phc2sys.service
  * ptp4l.service</changelog>
  <changelog author="jbohac@suse.com" date="1694520000">- Update to version 4.1:
  * Version 4.1
  * phc2sys: Fix -n option with -w.
  * phc2sys: Avoid segfault with default UDS address.
  * phc2sys: Improve logging with single domain.
  * ptp4l man: Add description for setting kthreads priorities
  * sk: don't report random errno on timeout
  * phc_ctl: explicitly check for adjust_phase definition
  * raw: Fix PRP trailer detection
  * remove C99 style loop variable declarations
  * phc2sys: Add multi-domain synchronization.
  * phc2sys: Shallow do_loop().
  * phc2sys: Create pmc agent after processing options.
  * phc2sys: Rename phc2sys_private to domain.
  * Use the 802.1AS peer delay computation when transportSpecific is 1
  * Resolve false hybrid_e2e warning
  * Fix SERVO_LOCKED_STABLE behavior.
  * Version 4.0
  * clock: Fix summary interval in free-running mode.
  * Avoid switching PHC when phc_index is negative
  * ts2phc: Fix memory leak on initial error path.
  * power profile: Fix regression in the default configuration file.
  * msg: append TLV onto all PTP event messages
  * Fix detection of VLAN over bond support in case the driver does not support SIOCGHWTSTAMP ioctl.
  * Clear pending errors on sockets.
  * ntpshm: Invalidate SHM data before releasing the servo
  * lstab: Update leapfile validity
  * port: Don't switch to PHC with SW timestamping.
  * ts2phc: Fix potential null-pointer dereference
  * ts2phc: Prevent reporting poll error when received termination signal
  * Set controlField to zero in message headers
  * tz2alt: Add tz2alt to .gitignore
  * Introduce a time zone helper program.
  * pmc: Convert internal helper function into global method.
  * Implement the ALTERNATE_TIME_OFFSET_ENABLE management message.
  * Add the ALTERNATE_TIME_OFFSET_NAME management message.
  * Add the ALTERNATE_TIME_OFFSET_PROPERTIES management message.
  * Prepare clock based storage of up to four time zones.
  * tlv: Encode and decode alternate time offset indicator TLVs.
  * Add a custom management message for power profile settings.
  * Introduce the power profile.
  * tlv: Encode and decode power profile TLVs.
  * Accept the full range for domainNumber.
  * man pages: Bump date.
  * Alphabetize configuration options in the ts2phc man page.
  * Alphabetize configuration options in the pmc man page.
  * Alphabetize configuration options in the phc2sys man page.
  * Remove stray copy/pasteo from the phc2sys man page.
  * Alphabetize configuration options in the ptp4l man page.
  * ts2phc: reset servo if failed to discipline clock
  * phc2sys: reset servo if failed to discipline clock
  * ptp4l: reset servo if failed to discipline clock
  * clockadj: return error if failed to adjust clock
  * unicast: Avoid undefined integer shifts.
  * ts2phc: Fix generic pps source when tai offset is not set in OS
  * lstab: move update_leapsecond_table function to lstab
  * lstab: Add LSTAB_EXPIRED result
  * timemaster: Use refclock_sock servo with chrony.
  * timemaster: Replace shm_segment with refclock_id.
  * Add refclock_sock servo.
  * Remove obsolete statement in ptp4l man page.
  * Fix up alphetical order in port_private header file.
  * port: start sync rx timer on grant
  * raw: Use BPF filter based on tcpdump syntax.
  * Fix SERVO_JUMP docstring comment
  * Improve efficiency of nullf servo synchronization
  * clock: Fix stale clock parent pid usage after best master change
  * adding delay asymmetry calculation
  * organization TLV support for interface rate
  * adding speed field information for interface
  * function to support get interface speed via ethtool
  * unicast_client: cancel sync/delay_response on UC_EV_UNSELECTED event
  * unicast_client: fix checkpatch ERROR: trailing whitespace
  * unicast_client: stop sending abnormal contract cancel requests
  * Don't re-arm fault clearing timer on unrelated netlink events
  * port: Avoid faults with vclocks and PHC from command line.
  * makefile: use conditional assignment for KBUILD_OUTPUT
  * servo: stop rounding initial frequency to nearest ppb
  * The PortId is defined as a couple of ClockId (an 8-bytes opaque) and the PortNumber (UInterger16).
  * config: Fix -Wformat-truncation warnings.
  * unciast_client: trigger BMCA upon CANCEL receive
  * ptp4l: Add profile_id configuration support for G.8275.1 and G.8275.2.
  * config: allow fractional freq_est_interval
  * Added support for Standard Baudrates supported by GNSS receivers
  * Extend clockcheck to check for changes in frequency.
  * Don't accept errors in clockadj_get_freq().
  * Drop support for old kernels returning zero frequency.
  * phc2sys: Add clocks after processing configuration.
  * ts2phc: Use system time as the default ToD source
  * ts2phc: Add option to specify the ToD source in the config file
  * ts2phc: Rename pps_sink to tod_sink in main()
  * port: don't clear fault if link is down
  * sk: Handle EINTR when waiting for transmit timestamp.
  * ts2phc: Update default lstab expiry date
  * phc2sys: Update TAI to UTC offset in manual
  * Strip Parallel Redundancy Protocol (PRP) trailer
  * ts2phc_phc_pps_source: make use of new kernel API for perout waveform
  * ts2phc: allow PHC PPS sources to be synchronized
  * ts2phc: reconfigure sync direction by subscribing to ptp4l port events
  * ts2phc: split PPS sink poll from servo loop
  * ts2phc_slave: print offset to the source clock
  * ts2phc: instantiate a pmc agent
  * util: import port_state_normalize() logic from phc2sys
  * ts2phc: instantiate a full clock structure for every PPS source of the PHC kind
  * ts2phc: instantiate a full clock structure for every PPS sink
  * ts2phc: create a private data structure
  * phc2sys: Add support for free-running mode
  * G.8275.2 support for delay_mechanism NO_MECHANISM
  * port: Disable PHC switch with vclocks.
  * unicast: Update announce timer when renew
  * phc2sys: Allow multiple sink clocks
  * Add new ptp capability.
  * Add new management TLVs to pmc.8
  * ptp4l: add VLAN over bond support
  * port: refactor port_link_status
  * ptp4l: init iface-&gt;ts_label when interface created
  * phc2sys: Don't exit when reading of PHC fails with EBUSY.
  * sysoff: Retry on EBUSY when probing supported ioctls.
  * sysoff: Change log level of ioctl error messages.
  * sysoff: Change sysoff_measure() to return errno.
  * clockadj: Change clockadj_compare() to return errno.
  * ts2phc: rename "master" to "source"
  * ts2phc: rename "slave clocks" to "PPS sinks"
  * ts2phc: rename source code files ("master" to "source", "slave" to "sink")
  * pmc_agent: make pmc_agent_query_port_properties take an enum port_state argument
  * UDS: allow specifying different file mode for the read-only socket.
  * UDS: added option to set file mode for the created socket.
  * Fix management TLV print.
  * Add new managements TLVs get size.
  * port: cancel unicast transmission when closing port.
  * port: unicast client - do not add master to foreign master table if not in the unicast master table.
  * unicast: Add support to send CANCEL_UNICAST_TRANSMISSION TLVs.
  * unicast: Add support to check if message was received from an entry in the unicast master table.
  * TLV management messages need to be aligned to 16 bits.
  * Fix the descriptions of "G.8275.portDS.localPriority" and "G.8275.defaultDS.localPriority" in ptp4l man page.
  * timemaster: Add support for virtual clocks.
  * phc2sys: Use PHC index from PORT_HWCLOCK_NP.
  * tlv: Add PORT_HWCLOCK_NP.
  * port: Check for virtual clocks.
  * config: Add port-specific phc_index option.
  * Add support for binding sockets to virtual clocks.
  * rtnl: Add function to detect virtual clocks.
  * rtnl: Fix rtnl_rtattr_parse() to process max attribute.
  * phc_ctl: replace calculate_offset with clockadj_compare
  * phc2sys: move read_phc into clock_adj.c
  * Add UNICAST_MASTER_TABLE_NP management TLV
  * pmc: Initialize reserved field in management_tlv_datum.
  * Check 'print_log' before arguments are evaluated, not after.
  * Add PORT_SERVICE_STATS_NP management TLV
  * util: attempt to resolve symlinks to the PHC device in posix_clock_open
  * util: fix dangling file descriptors on the error path of posix_clock_open
  * Maintain one Sync sequence counter per destination address.
  * Maintain one Announce sequence counter per destination address.
  * clock: Split update of leap status from clock_time_properties().
  * Delay Response Timeout Feature addition for PTP4L
  * clock: Notify servo about leap second on UTC hardware clock.
  * clock: Clear leap flags after leap second.
  * clock: Print info message when leap flags change.
  * clock: Accept new UTC offset after leap second.
  * lstab: update expiration to 28 December 2021
  * lstab: Close file after reading.
  * Fix quoting in ptp4l man page.
  * config: Add workaround for glibc getopt_long().
  * Rename management ID macros.
  * clockcheck: Increase minimum interval.
  * port: Don't renew raw transport.
  * port: Don't check timestamps from non-slave ports.
  * clock: Reset clock check on best clock/port change.
  * clock: Reset state when switching port with same best clock.
  * Increase the default tx_timestamp_timeout to 10
  * ts2phc: Add serial baudrate option
  * ts2phc: Update leapfile documentation
  * ts2phc: Close socket on peer shutdown
  * ts2phc: Fix uninitialized variable in nmea_scan_rmc
  * tc: Fix length of follow-up message of one-step sync.
  * Validate the messageLength field of incoming messages.
  * Log optimization for ptp4l in jbod and client only mode (clientOnly=1 and boundary_clock_jbod=1)
  * Log optimization for ptp4l in jbod and client only mode (clientOnly=1 and boundary_clock_jbod=1)
  * Add master only management TLV
  * Set domainNumber for telecom examples
  * Fix SLAVE_ONLY TLV
  * Prevent client ports getting stuck in the UNCALIBRATED state.
  * tlv: Fix coding style.
  * Ensure TLV_PORT_STATS_NP statistics uses little endian.
  * Revert "phc2sys: Expand the validation of the PPS mode."
  * Avoid undefined integer operations.
  * pmc: Fix printed totalCorrectionField.
  * Avoid unaligned pointers to packed members.
  * Revert "phc2sys: Ensure PHC source when using PPS mode."
  * phc_ctl: Fix incorrect memset in do_cmp()
  * Fix --initial_delay for automotive profile
  * Update man page to reflect the new serverOnly option.
  * Convert the example configuration files over to the new serverOnly option.
  * Deprecate the masterOnly option in favor of serverOnly.
  * Bump to IEEE 1588-2019 version
  * Clock Class Threshold Feature addition for PTP4L
  * sk: Don't return error for zero-length messages.
  * clock: Introduce step_window to free run x Sync events after a clock step.
  * timemaster: Set uds_ro_address for ptp4l instances.
  * clock: Add read-only UDS port for monitoring.
  * clock: Rename UDS variables to read-write.
  * clock: Don't allow COMMAND action on non-UDS port.
  * port: Ignore non-management messages on UDS port.
  * port: Don't assume transport from port number.
  * Implement push notification for TIME_STATUS_NP
  * tlv: Fix byte reordering in ScaledNs
  * Improve port-related log messages.
  * port: Cache display name for logs.
  * Update man pages to reflect the new clientOnly option.
  * Convert the example configuration files over to the new clientOnly option.
  * Deprecate the slaveOnly option in favor of clientOnly.
  * Check for deprecated "long" options on the command line.
  * lstab: Bring expiration up to date.
  * util: add SIGHUP handling
  * port: Fix link down/up to continue using phc_index set from command line -p option.
  * ts2phc: Convert usage message to time source/sink terminology.
  * ptp4l: Convert usage messages to client/server terminology.
  * phc2sys: Convert usage messages to time source/sink terminology.
  * ts2phc: Convert man page to source/sink terminology.
  * ptp4l: Convert man page to client/server terminology.
  * phc2sys: Convert man page to client/server terminology.
  * phc2sys: Convert man page to source/sink terminology.
  * phc2sys: Update man page to reflect the new restriction on the PPS mode.
  * phc2sys: Ensure PHC source when using PPS mode.
  * phc2sys: fix BC sync fault when port in uncalibrated state
  * phc2sys: add dbg print for clock state change events
  * Update the unicast subscriptions when the GM changes.
  * phc2sys: Fix regression in the automatic mode.
  * pmc_agent: Remove an obsolete method.
  * phc2sys: Simplify the main loop.
  * pmc_agent: Let the update method poll for push events.
  * phc2sys: Move static configuration to its own subroutine.
  * phc2sys: Replace yet another magical test with a proper test.
  * phc2sys: Replace magical test with a proper test.
  * phc2sys: Expand the validation of the PPS mode.
  * phc2sys: Validate the PPS mode right away.
  * phc2sys: Replace hard coded tests with a readable helper function.
  * phc2sys: Rename PMC agent pointer from node to agent.
  * phc2sys: Don't duplicate the command line arguments.
  * pmc_agent: Simplify the method that gets of the number of local ports.
  * pmc_agent: Generalize the method that queries the local clock identity.
  * pmc_agent: Convert the method that queries the port properties.
  * pmc_agent: Convert the method that queries TAI-UTC offset into the canonical form.
  * phc2sys: Fix null pointer de-reference in manual mode.
  * rtnl: Fix trivial spelling error in the name of a helper function.
  * Update the description of the time_stamping configuration option.
  * Avoid setting clock frequency when free running.
  * pmc_agent: Rename the update method and attempt to document it.
  * pmc_agent: Perform time comparison using positive logic.
  * pmc_agent: Remove bogus comparison between last update and now.
  * pmc_agent: Simplify logic in update method.
  * pmc_agent: Simplify the update method.
  * pmc_agent: Convert the subscribe method into the canonical form.
  * Introduce error codes for the run_pmc method.
  * Clarify the documentation of the management TLV ID helper function.
  * Find a better home for the management TLV data helper function.
  * Find a better home for the management TLV ID helper function.
  * pmc_agent: Hide the implementation.
  * pmc_agent: Rename pmc_node to something more descriptive.
  * Introduce the PMC agent module.
  * phc2sys: break out pmc code into pmc_common.c
  * phc2sys: make PMC functions non-static
  * phc2sys: extract PMC functionality into a smaller struct pmc_node
  * phc2sys: break long lines in the PTP management message accessors
  * phc2sys: Postpone adding of servo to clock.
  * phc2sys: Remove superfluous code.
  * missing.h: uclic-ng has clock_nanosleep support since v1.0.31</changelog>
  <changelog author="jsegitz@suse.com" date="1768305600">- Move to DevicePolicy=closed instead of -PrivateDevices=true
  to allow access to devices (bsc#1256059)</changelog>
</package>
<package pkgid="b4efd147360655bd953d1366a4fd92fec34c26ed6764f5f59b2696220b920c28c52771144c7395b7ab71213d707fe79514a76876ae5249c59231fb7720ed86f2" name="llvm17-debugsource" arch="aarch64">
  <version epoch="0" ver="17.0.6" rel="slfo.1.1_1.5"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1683460800">- Update to version 16.0.3.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1684324800">- Update to version 16.0.4.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1685793600">- Update to version 16.0.5.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
- Enable ThinLTO on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1686830400">- Update to version 16.0.6.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Make python3-clang noarch again and fix conflicts/provides to
  point to %python3_sitelib instead of %python3_sitearch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1695124800">- Update to version 17.0.1.
  * For details, see the release notes:
  - https://releases.llvm.org/17.0.1/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/lld/docs/ReleaseNotes.html
- Rebase patches:
  * libcxx-test-library-path.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
  * llvm-remove-clang-only-flags.patch
  * opt-viewer-Find-style-css-in-usr-share.patch
- Simplify check-no-llvm-exegesis.patch by removing test directory.
- Drop patches that have landed upstream:
  * openmp-drop-rpath.patch
- Add openmp-dont-run-gpu-arch.patch: the binaries are not
  available in our build, and neither are the toolchains they test
  for (NV CUDA and AMD HSA).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1696680000">- Update to version 17.0.2.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1697716800">- Update to version 17.0.3.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Disable zstd support for now regardless of whether libzstd-devel
  is installed. (boo#1216121)
- Limit number of LTO threads on 32-bit architectures to prevent
  out-of-memory during linking.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1699185600">- Update to version 17.0.4.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Include libomptarget.devicertl.a in libomp*-devel, which is
  required for (GPU) offloading.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1700308800">- Update to version 17.0.5.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Also test clang-tools-extra (at least most parts) and lld.
- Adapt test in lld-default-sha1.patch.
- Don't disable testing if qemu_user_space_build has been set to 0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Update to version 17.0.6.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Use major version only instead of full (patch-level) version for
  versioned executables: we don't support parallel installation of
  multiple versions of the same LLVM major version. (boo#1217450)
  Also drop the clang-X.Y symlink that was introduced for
  boo#1012260, because Y is always 0.
- Manage clang-cpp with update-alternatives like other binaries.</changelog>
</package>
<package pkgid="b470cc84f05afbcda94c6a83c92393237bac30b73fcf11a7129db74de1a03e50d5867857f08dbc685a14e934aa3faba1ccd02fe075adcbb302c37007a59f52d2" name="logrotate-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.21.0" rel="slfo.1.1_1.2"/>
  <changelog author="manfred.h@gmx.net" date="1634644800">- Add patch:
  * logrotate-dont_warn_on_size=_syntax.patch (boo#1191816)</changelog>
  <changelog author="michael@stroeder.com" date="1641556800">- update to 3.19.0:
  * continue on EINTR in compressLogFile() (#430)
  * enforce stricter parsing of configuration files (#427, #431)
  * avoid confusing error message in debug mode (#426)
  * fix full_write() on incomplete write (#415)
  * do not use alloca() any more (#412)
  * do not rotate hard links unless allowhardlink is used (#407)
  * change directory after dropping privileges (#397)
  * add defence in depth when dropping privileges (#400)
  * remove invalid configuration on error (#408)
  * do not open symbolic link log files by accident (#399)
  * do not write state if state file is /dev/null (#395)
- rebased logrotate-3.13.0-systemd_add_home_env.patch
  and renamed to logrotate-3.19.0-systemd_add_home_env.patch
- removed obsolete logrotate-dont_warn_on_size=_syntax.patch</changelog>
  <changelog author="schubi@suse.de" date="1645704000">- Added own logrotate.service file in order to define a new order
  of parsed config files:
  /usr/etc/logrotate.conf   Default configuration file defined by
    the vendor.
  /usr/etc/logrotate.d/*    Directory for additional configuration
    files defined by the vendor.
  /etc/logrotate.conf       Default configuration file defined by
    the administrator. (optional)
  /etc/logrotate.d/*        Directory for additional configuration
    files defined by the administrator.
    (optional)
- drop logrotate-3.19.0-systemd_add_home_env.patch:
  - included in new logrotate.service
- Adapted man page: logrotate-3.19.0-man_logrotate.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653480000">- update to 3.20.0:
  * fix potential DoS from unprivileged users via the state file (CVE-2022-1348)
  * fix a misleading debug message with copytruncate and rotate 0 (#443)
  * add support for unsigned time_t (#438)
  * do not lock state file /dev/null (#433)</changelog>
  <changelog author="david.anes@suse.com" date="1653480001">- Security fix: (bsc#1199652, CVE-2022-1348)
  * Add follow-up upstream patch for the introduced fix.
  * Added patch logrotate-CVE-2022-1348-follow-up.patch
- Update patch:
  * logrotate-3.19.0-man_logrotate.patch -&gt; logrotate-3.20.0-man_logrotate.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653480002">- update to 3.20.1:
  * drop world-readable permission on state file even when ACLs are enabled (#446)
- removed obsolete logrotate-CVE-2022-1348-follow-up.patch</changelog>
  <changelog author="schubi@suse.com" date="1655726400">- Removed %{_distconfdir}/logrotate.d directory from spec file.
  It will be handled by package filesystem.</changelog>
  <changelog author="schubi@suse.com" date="1663156800">- Ignoring vendor logs settings in /usr/etc/logrotate.d if they
  have already been defined by the the admin in the /etc/logrotate.d
  directory (bsc#1173319).
- Removed logrotate-3.20.0-man_logrotate.patch.
- Added logrotate-vendor-dir.patch</changelog>
  <changelog author="fvogt@suse.com" date="1674475200">- Replace the vendor config logic:
  * Remove logrotate-vendor-dir.patch and the code from logrotate.service
    (also addresses boo#1202406)
  * Add a wrapper script which collects all config files in the right
    order
- Create logrotate.keyring with kdudka's public key
- Drop logrotate-rpmlintrc: rpmlint doesn't look at /usr/etc/logrotate.d/,
  so the false positive doesn't trigger.</changelog>
  <changelog author="fvogt@suse.com" date="1674561600">- Update to 3.21.0:
  * add ignoreduplicates directive to allow duplicate file matches
  * add --wait-for-state-lock option to wait for lock on the state file
  * avoid failure when an anonymous non-privileged user runs logrotate
  * support home dir expansion in olddir
  * reduce unnecessary rename operations with start N where N &gt; 1
  * unify handling of log levels
  * do not print error: when exit code is unaffected</changelog>
</package>
<package pkgid="1506362af22528e0625d5d9772ae47120a929c1fc65b0efb73bd2f38ef2ef0d19936369ccce0c17e23fcd6f6a14aef263c9a74d1bb276fa501e94525ef875502" name="logrotate-debugsource" arch="aarch64">
  <version epoch="0" ver="3.21.0" rel="slfo.1.1_1.2"/>
  <changelog author="manfred.h@gmx.net" date="1634644800">- Add patch:
  * logrotate-dont_warn_on_size=_syntax.patch (boo#1191816)</changelog>
  <changelog author="michael@stroeder.com" date="1641556800">- update to 3.19.0:
  * continue on EINTR in compressLogFile() (#430)
  * enforce stricter parsing of configuration files (#427, #431)
  * avoid confusing error message in debug mode (#426)
  * fix full_write() on incomplete write (#415)
  * do not use alloca() any more (#412)
  * do not rotate hard links unless allowhardlink is used (#407)
  * change directory after dropping privileges (#397)
  * add defence in depth when dropping privileges (#400)
  * remove invalid configuration on error (#408)
  * do not open symbolic link log files by accident (#399)
  * do not write state if state file is /dev/null (#395)
- rebased logrotate-3.13.0-systemd_add_home_env.patch
  and renamed to logrotate-3.19.0-systemd_add_home_env.patch
- removed obsolete logrotate-dont_warn_on_size=_syntax.patch</changelog>
  <changelog author="schubi@suse.de" date="1645704000">- Added own logrotate.service file in order to define a new order
  of parsed config files:
  /usr/etc/logrotate.conf   Default configuration file defined by
    the vendor.
  /usr/etc/logrotate.d/*    Directory for additional configuration
    files defined by the vendor.
  /etc/logrotate.conf       Default configuration file defined by
    the administrator. (optional)
  /etc/logrotate.d/*        Directory for additional configuration
    files defined by the administrator.
    (optional)
- drop logrotate-3.19.0-systemd_add_home_env.patch:
  - included in new logrotate.service
- Adapted man page: logrotate-3.19.0-man_logrotate.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653480000">- update to 3.20.0:
  * fix potential DoS from unprivileged users via the state file (CVE-2022-1348)
  * fix a misleading debug message with copytruncate and rotate 0 (#443)
  * add support for unsigned time_t (#438)
  * do not lock state file /dev/null (#433)</changelog>
  <changelog author="david.anes@suse.com" date="1653480001">- Security fix: (bsc#1199652, CVE-2022-1348)
  * Add follow-up upstream patch for the introduced fix.
  * Added patch logrotate-CVE-2022-1348-follow-up.patch
- Update patch:
  * logrotate-3.19.0-man_logrotate.patch -&gt; logrotate-3.20.0-man_logrotate.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653480002">- update to 3.20.1:
  * drop world-readable permission on state file even when ACLs are enabled (#446)
- removed obsolete logrotate-CVE-2022-1348-follow-up.patch</changelog>
  <changelog author="schubi@suse.com" date="1655726400">- Removed %{_distconfdir}/logrotate.d directory from spec file.
  It will be handled by package filesystem.</changelog>
  <changelog author="schubi@suse.com" date="1663156800">- Ignoring vendor logs settings in /usr/etc/logrotate.d if they
  have already been defined by the the admin in the /etc/logrotate.d
  directory (bsc#1173319).
- Removed logrotate-3.20.0-man_logrotate.patch.
- Added logrotate-vendor-dir.patch</changelog>
  <changelog author="fvogt@suse.com" date="1674475200">- Replace the vendor config logic:
  * Remove logrotate-vendor-dir.patch and the code from logrotate.service
    (also addresses boo#1202406)
  * Add a wrapper script which collects all config files in the right
    order
- Create logrotate.keyring with kdudka's public key
- Drop logrotate-rpmlintrc: rpmlint doesn't look at /usr/etc/logrotate.d/,
  so the false positive doesn't trigger.</changelog>
  <changelog author="fvogt@suse.com" date="1674561600">- Update to 3.21.0:
  * add ignoreduplicates directive to allow duplicate file matches
  * add --wait-for-state-lock option to wait for lock on the state file
  * avoid failure when an anonymous non-privileged user runs logrotate
  * support home dir expansion in olddir
  * reduce unnecessary rename operations with start N where N &gt; 1
  * unify handling of log levels
  * do not print error: when exit code is unaffected</changelog>
</package>
<package pkgid="0cb23c9ffa6619ce54955bc28f89cea56a00b7fbcd034c8fb7879fb117229bad3a67fcaf231aff3d5afc86b07fff90d7e95337434e1d161d53dccf81532c8c75" name="lshw-debuginfo" arch="aarch64">
  <version epoch="0" ver="B.02.20" rel="slfo.1.1_1.1"/>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
  <changelog author="mpluskal@suse.com" date="1634212800">- Update to version B.02.19.2+git.20211013:
  * add some includes
  * fix typo
  * cosmetic fixes
  * support for new ethtool capabilities
  * code clean-up
  * code clean-up
  * allow pkg-config override
  * allow pkg-config override
  * Remove unnecessary space before closing parenthesis
  * Translate all words of a phrase together
  * Fix another typo</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version B.02.19.2+git.20211102:
  * merge Github PR#77
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version B.02.19.2+git.20220310:
  * Github PR85  Set product name for all netdevs sharing the same PCI number</changelog>
  <changelog author="mpluskal@suse.com" date="1658836800">- Update to version B.02.19.2+git.20220628 (jsc#526):
  * make version check optional</changelog>
  <changelog author="mpluskal@suse.com" date="1669291200">- Update to version B.02.19.2+git.20220831:
  * PA-RISC: handle pushd failure</changelog>
  <changelog author="mpluskal@suse.com" date="1679572800">- Update to version B.02.19.2+git.20230320 (bsc#1209531):
  * fix NVMe multipath detection
  * NVMe: fix logical name with native multipath</changelog>
  <changelog author="mpluskal@suse.com" date="1701172800">- Update to version B.02.19.2+git.20231115:
  * merge github PR #98</changelog>
  <changelog author="mpluskal@suse.com" date="1707825600">- Update to version B.02.20 (jsc#9912):
  * update changelog
  * update data files
  * get rid of GTK deprecation warning
  * get rid of some snprintf warnings
  * Add support for 100Gbit interfaces</changelog>
</package>
<package pkgid="ba386a34f48766435d5ca32d6826d042b4275ff70de2a44d7697af24396eff10d89ae710b7e4b29726301cf5aec3018d00a11dc55921987b69e54b6626ac202d" name="lshw-debugsource" arch="aarch64">
  <version epoch="0" ver="B.02.20" rel="slfo.1.1_1.1"/>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
  <changelog author="mpluskal@suse.com" date="1634212800">- Update to version B.02.19.2+git.20211013:
  * add some includes
  * fix typo
  * cosmetic fixes
  * support for new ethtool capabilities
  * code clean-up
  * code clean-up
  * allow pkg-config override
  * allow pkg-config override
  * Remove unnecessary space before closing parenthesis
  * Translate all words of a phrase together
  * Fix another typo</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version B.02.19.2+git.20211102:
  * merge Github PR#77
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version B.02.19.2+git.20220310:
  * Github PR85  Set product name for all netdevs sharing the same PCI number</changelog>
  <changelog author="mpluskal@suse.com" date="1658836800">- Update to version B.02.19.2+git.20220628 (jsc#526):
  * make version check optional</changelog>
  <changelog author="mpluskal@suse.com" date="1669291200">- Update to version B.02.19.2+git.20220831:
  * PA-RISC: handle pushd failure</changelog>
  <changelog author="mpluskal@suse.com" date="1679572800">- Update to version B.02.19.2+git.20230320 (bsc#1209531):
  * fix NVMe multipath detection
  * NVMe: fix logical name with native multipath</changelog>
  <changelog author="mpluskal@suse.com" date="1701172800">- Update to version B.02.19.2+git.20231115:
  * merge github PR #98</changelog>
  <changelog author="mpluskal@suse.com" date="1707825600">- Update to version B.02.20 (jsc#9912):
  * update changelog
  * update data files
  * get rid of GTK deprecation warning
  * get rid of some snprintf warnings
  * Add support for 100Gbit interfaces</changelog>
</package>
<package pkgid="f8110c213fa72491cf02b48adc0a39f4001d404caaf16ef277d6a2ed43da1ba2d55d0352a1527233a4121d15dc1014ba46566dea0bbf8bcd6e6293f8751b45fa" name="lsof-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.99.4" rel="slfo.1.1_1.1"/>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 4.97.0:
  * Remove support because the os is no longer updated for
    more than 10 years
  * Remove support because the os is no longer updated
    for more than 20 years
  * Add experimental build system based on Autotools
  * Fixed LTsock testing on darwin
  * Remove NEW and OLD folders
  * Fix FreeBSD testcases
  * Rewrite documentation and publish at https://lsof.readthedocs.io/</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1674388800">- lsof 4.98.0:
  * Fix two potential null pointer access bug when gethostbyname2()
    returns an empty address list
  * Fix handling of empty command name
  * Add -H switch to print human readable size, e.g. 123.4K</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Repacked tarball to remove proprietary code in dialects/uw/uw7/sys/fs</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699704000">- lsof 4.99.0:
  * Do not hard-code fd numbers in epoll test
  * --with-selinux configure option.
  * Improve performance by using closefrom()
  * Introduce liblsof for programmatic access over spawning lsof
    in a subprocess
- build with libtirpc
- switch to upstream tarball again as it dropped proprietary code</changelog>
  <changelog author="schwab@suse.de" date="1702209600">- Skip tests that are difficult to emulate by qemu</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1702814400">- lsof 4.99.3:
  * Fix compilation error when HASIPv6 is not defined
  * Add configure option --disable-liblsof to disable installation
    of liblsof
- add lsof-4.99.3-fix-version-in-configure-ac.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1715860800">- add (bsc#1224285):
  * 0001-tests-eliminate-use-of-fgrep.patch
  * 0002-tests-fix-for-kernel-6.9.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1715947200">- replace:
  0002-tests-fix-for-kernel-6.9.patch
  by upstream proposed:
  0002-linux-Maintain-original-output-for-pidfd-in-linux-6..patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1730116800">- Add reproducible.patch to not store build host kernel version (boo#1232425)</changelog>
  <changelog author="sbrabec@suse.com" date="1741089600">- Update to version 4.99.4:
  * In lsof manpage: mention /etc/services for -P option
  * Fix typos in docs
  * Linux 6.9 changed the pidfs appearence in procfs. Try to
    maintain original output in lsof (bsc#1224285)
  * closefrom_shim: Add optimized fallback for platforms without
    closefrom or close_range
  * fix build against -std=c23 (`void (*)()`) changed the meaning)
- Drop obsolete lsof-4.99.3-fix-version-in-configure-ac.patch,
  0001-tests-eliminate-use-of-fgrep.patch and
  0002-linux-Maintain-original-output-for-pidfd-in-linux-6..patch.</changelog>
</package>
<package pkgid="3fe2b2c3ee0d721f9975f4835807d466e3d8bfba1c59982f4fa671bceed48def018e13ee1e28aa10af29026de7a5cb3160081a45dffd201eccbded77954d5c27" name="lsof-debugsource" arch="aarch64">
  <version epoch="0" ver="4.99.4" rel="slfo.1.1_1.1"/>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 4.97.0:
  * Remove support because the os is no longer updated for
    more than 10 years
  * Remove support because the os is no longer updated
    for more than 20 years
  * Add experimental build system based on Autotools
  * Fixed LTsock testing on darwin
  * Remove NEW and OLD folders
  * Fix FreeBSD testcases
  * Rewrite documentation and publish at https://lsof.readthedocs.io/</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1674388800">- lsof 4.98.0:
  * Fix two potential null pointer access bug when gethostbyname2()
    returns an empty address list
  * Fix handling of empty command name
  * Add -H switch to print human readable size, e.g. 123.4K</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Repacked tarball to remove proprietary code in dialects/uw/uw7/sys/fs</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699704000">- lsof 4.99.0:
  * Do not hard-code fd numbers in epoll test
  * --with-selinux configure option.
  * Improve performance by using closefrom()
  * Introduce liblsof for programmatic access over spawning lsof
    in a subprocess
- build with libtirpc
- switch to upstream tarball again as it dropped proprietary code</changelog>
  <changelog author="schwab@suse.de" date="1702209600">- Skip tests that are difficult to emulate by qemu</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1702814400">- lsof 4.99.3:
  * Fix compilation error when HASIPv6 is not defined
  * Add configure option --disable-liblsof to disable installation
    of liblsof
- add lsof-4.99.3-fix-version-in-configure-ac.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1715860800">- add (bsc#1224285):
  * 0001-tests-eliminate-use-of-fgrep.patch
  * 0002-tests-fix-for-kernel-6.9.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1715947200">- replace:
  0002-tests-fix-for-kernel-6.9.patch
  by upstream proposed:
  0002-linux-Maintain-original-output-for-pidfd-in-linux-6..patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1730116800">- Add reproducible.patch to not store build host kernel version (boo#1232425)</changelog>
  <changelog author="sbrabec@suse.com" date="1741089600">- Update to version 4.99.4:
  * In lsof manpage: mention /etc/services for -P option
  * Fix typos in docs
  * Linux 6.9 changed the pidfs appearence in procfs. Try to
    maintain original output in lsof (bsc#1224285)
  * closefrom_shim: Add optimized fallback for platforms without
    closefrom or close_range
  * fix build against -std=c23 (`void (*)()`) changed the meaning)
- Drop obsolete lsof-4.99.3-fix-version-in-configure-ac.patch,
  0001-tests-eliminate-use-of-fgrep.patch and
  0002-linux-Maintain-original-output-for-pidfd-in-linux-6..patch.</changelog>
</package>
<package pkgid="e8f61d9195e218785befef1b7268f381f56597bbe2f17d271fdb664ab4d3e99c7f8ac34a3a665ebbb21d87e0f811bb22d3571fb0ec6d4658d3a8866d0de1174f" name="lsscsi-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.32" rel="slfo.1.1_1.2"/>
  <changelog author="jdelvare@suse.de" date="1260187200">- Update to lsscsi-0.23:
  * Show protection information with '--protection' option, ATA,
    SATA and USB transport information.
  * Stop scanning /proc/mounts; assume /sys unless overridden by
    '--sysfsroot=PATH' option.
- This update fixes bnc#556180.</changelog>
  <changelog author="hare@suse.de" date="1266840000">- Fix classic output (bnc#576138)</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 0.24
  * FC transport syntax changes (colon to slash)
- Update to new upstream release 0.25
  * add sas_port and fc_remote_ports transport information
  * print enclosure_device entry
  * add a "--size" option to show size of disks
  * add a "--protmode" option to show protection information mode
- Update to new upstream release 0.26
  * add a "fcoe" transport indicator
  * add a "--wwn" option and datamine /dev/disk/by-id/wwn*
- Update to new upstream release 0.27
  * Accept large (64-bit) LUNs
  * add a "--lunhex" option and recognition of LSSCSI_LUNHEX_OPT
  environment variable for displaying LUNs in hex
- Normalized build/install procedure;
  remove redundant %clean section</changelog>
  <changelog author="hare@suse.de" date="1390392000">- Port patches from SP3 (bnc#831301)
- Fixup printing of FC transport IDs</changelog>
  <changelog author="mpluskal@suse.com" date="1424779200">- Update to 0.28
  * fix handling of scsi_level 0 (no compliance)
  * add SRP transport identifier
  * add --unit option for LU identifier (&gt;= lk 3.15)
  * add (S)ATA transport identifier (&gt;= lk 3.15)
  * make USB transport ids more consistent
  * fix FC transport id missing comma
  * add pdt strings for security manager and zbc
  * upgrade automake to version 1.14.1
- Do not install empty NEWS</changelog>
  <changelog author="ro@suse.de" date="1464177600">- Update to new upstream release 0.29 (bsc#977572)
  - '-u' now decodes locally assigned UUIDs (spc5r08)
  - as last try use T10 Vendor ID for lu name
  - if no lu name found, print 'none'
  - change '-uuu' to output the full lu name followed
    by the normal fields (which were skipped before)
  - add 'U' option, same action as '-uuu'
  - '-UU' prefixes lu names with 'eui.', 'naa.', etc
  - if '-s' given twice, lu size is base 2 related
  - if very long [h:c:t:l] then append space
  - print_enclosure_device() for FCP may be useless,
    comment out while checking ...
  - with '-t' print 0x0000000000000000 for non-SAS
    device in SAS domain
  - autogen.sh: upgrade to 20091223 version
  - automake: upgrade to 1.15 (ubuntu 16.04)
  * Delete lsscsi-0.27.tar.xz
  * Add lsscsi-0.29.tar.xz
- Update to new upstream release 0.28
  - fix handling of scsi_level 0 (no compliance)
  - add SRP transport identifier
  - add --unit option for LU identifier (&gt;= lk 3.15)
  - add (S)ATA transport identifier (&gt;= lk 3.15)
  - make USB transport ids more consistent
  - fix FC transport id missing comma
  - add pdt strings for security manager and zbc
  - upgrade automake to version 1.14.1
- Remove patches merged with upstream
  * Delete lsscsi-fixup-fc-transport-id.patch
  * Delete lsscsi-usb.diff
  * Delete lsscsi-fix-classic-output</changelog>
  <changelog author="hare@suse.de" date="1499688000">- Lookup WWN using /dev/disk/by-id/scsi-* (bsc#1008935)
- fixup display of 'lsscsi -t' (bsc#1047884)</changelog>
  <changelog author="mpluskal@suse.com" date="1533211200">- Update to version 0.30:
  * add support for NVMe devices and controllers
  - to build without: ./configure --disable-nvme-supp
  - deselect at runtime: lsscsi --no-nvme
  - deselect SCSI devices at runtime: lsscsi N
  * add --brief for tuple + device_name(s) only
  * add --pdt (-D) for device type in hex
  * extend --size (-s) so when given three times
    the size as a logical block count is output
  * add --sz-lbs (-S) that is equivalent to '-sss'
    when used twice adds comma then logical block size
  * '-w' now decodes 128 bit WWN without truncation
  * /dev/disk/by-id/wwn- is not guaranteed to be
    persistent (or stable); instead use
    /dev/disk/by-id/scsi-
  * '-t' on a FC host was not printing the comma
    separator resulting in garbled output, fix
- Small spec file modernisation with spec-cleaner
- Restore removed parts of changelog</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 0.32
  * improve NVMe device parsing (e.g. /dev/nvme0c1n2)
  * print nr_hw_queues when available for SCSI hosts
  * make WWN printing for NVMe more consistent with
    output from SCSI devices (e.g. with -u and -t)
  * logic to select best SCSI id (--scsi_id) to output
  * fix issue where host managed ZBC devices don't
    output their size. [Fix also for RBC and CD/DVD.]
  * exclude NVMe listings when --classic given
  * supply "-" for generic NVMe device one line output
    so 'lsscsi -gb' output is consistent</changelog>
</package>
<package pkgid="1ecbac3ddfd2d8c0c29a01246c2ebcc8c06b74ea23f1caa1f6152278592a2e65c67abdc90328e0c20ca850ed9d64c56a26fa2eae11586b54451f11b8cf85d24b" name="lsscsi-debugsource" arch="aarch64">
  <version epoch="0" ver="0.32" rel="slfo.1.1_1.2"/>
  <changelog author="jdelvare@suse.de" date="1260187200">- Update to lsscsi-0.23:
  * Show protection information with '--protection' option, ATA,
    SATA and USB transport information.
  * Stop scanning /proc/mounts; assume /sys unless overridden by
    '--sysfsroot=PATH' option.
- This update fixes bnc#556180.</changelog>
  <changelog author="hare@suse.de" date="1266840000">- Fix classic output (bnc#576138)</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 0.24
  * FC transport syntax changes (colon to slash)
- Update to new upstream release 0.25
  * add sas_port and fc_remote_ports transport information
  * print enclosure_device entry
  * add a "--size" option to show size of disks
  * add a "--protmode" option to show protection information mode
- Update to new upstream release 0.26
  * add a "fcoe" transport indicator
  * add a "--wwn" option and datamine /dev/disk/by-id/wwn*
- Update to new upstream release 0.27
  * Accept large (64-bit) LUNs
  * add a "--lunhex" option and recognition of LSSCSI_LUNHEX_OPT
  environment variable for displaying LUNs in hex
- Normalized build/install procedure;
  remove redundant %clean section</changelog>
  <changelog author="hare@suse.de" date="1390392000">- Port patches from SP3 (bnc#831301)
- Fixup printing of FC transport IDs</changelog>
  <changelog author="mpluskal@suse.com" date="1424779200">- Update to 0.28
  * fix handling of scsi_level 0 (no compliance)
  * add SRP transport identifier
  * add --unit option for LU identifier (&gt;= lk 3.15)
  * add (S)ATA transport identifier (&gt;= lk 3.15)
  * make USB transport ids more consistent
  * fix FC transport id missing comma
  * add pdt strings for security manager and zbc
  * upgrade automake to version 1.14.1
- Do not install empty NEWS</changelog>
  <changelog author="ro@suse.de" date="1464177600">- Update to new upstream release 0.29 (bsc#977572)
  - '-u' now decodes locally assigned UUIDs (spc5r08)
  - as last try use T10 Vendor ID for lu name
  - if no lu name found, print 'none'
  - change '-uuu' to output the full lu name followed
    by the normal fields (which were skipped before)
  - add 'U' option, same action as '-uuu'
  - '-UU' prefixes lu names with 'eui.', 'naa.', etc
  - if '-s' given twice, lu size is base 2 related
  - if very long [h:c:t:l] then append space
  - print_enclosure_device() for FCP may be useless,
    comment out while checking ...
  - with '-t' print 0x0000000000000000 for non-SAS
    device in SAS domain
  - autogen.sh: upgrade to 20091223 version
  - automake: upgrade to 1.15 (ubuntu 16.04)
  * Delete lsscsi-0.27.tar.xz
  * Add lsscsi-0.29.tar.xz
- Update to new upstream release 0.28
  - fix handling of scsi_level 0 (no compliance)
  - add SRP transport identifier
  - add --unit option for LU identifier (&gt;= lk 3.15)
  - add (S)ATA transport identifier (&gt;= lk 3.15)
  - make USB transport ids more consistent
  - fix FC transport id missing comma
  - add pdt strings for security manager and zbc
  - upgrade automake to version 1.14.1
- Remove patches merged with upstream
  * Delete lsscsi-fixup-fc-transport-id.patch
  * Delete lsscsi-usb.diff
  * Delete lsscsi-fix-classic-output</changelog>
  <changelog author="hare@suse.de" date="1499688000">- Lookup WWN using /dev/disk/by-id/scsi-* (bsc#1008935)
- fixup display of 'lsscsi -t' (bsc#1047884)</changelog>
  <changelog author="mpluskal@suse.com" date="1533211200">- Update to version 0.30:
  * add support for NVMe devices and controllers
  - to build without: ./configure --disable-nvme-supp
  - deselect at runtime: lsscsi --no-nvme
  - deselect SCSI devices at runtime: lsscsi N
  * add --brief for tuple + device_name(s) only
  * add --pdt (-D) for device type in hex
  * extend --size (-s) so when given three times
    the size as a logical block count is output
  * add --sz-lbs (-S) that is equivalent to '-sss'
    when used twice adds comma then logical block size
  * '-w' now decodes 128 bit WWN without truncation
  * /dev/disk/by-id/wwn- is not guaranteed to be
    persistent (or stable); instead use
    /dev/disk/by-id/scsi-
  * '-t' on a FC host was not printing the comma
    separator resulting in garbled output, fix
- Small spec file modernisation with spec-cleaner
- Restore removed parts of changelog</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 0.32
  * improve NVMe device parsing (e.g. /dev/nvme0c1n2)
  * print nr_hw_queues when available for SCSI hosts
  * make WWN printing for NVMe more consistent with
    output from SCSI devices (e.g. with -u and -t)
  * logic to select best SCSI id (--scsi_id) to output
  * fix issue where host managed ZBC devices don't
    output their size. [Fix also for RBC and CD/DVD.]
  * exclude NVMe listings when --classic given
  * supply "-" for generic NVMe device one line output
    so 'lsscsi -gb' output is consistent</changelog>
</package>
<package pkgid="e4935cab92bbeb0448d26bb2157c2a68795c25bcd317a0320ee5ab16a4702dfdd9e68413fc73ca45155b4682b8ecaaeabd2b2f508f1341de1c64f61968952c94" name="lttng-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.13.11" rel="slfo.1.1_1.4"/>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 2.10.2:
  * Do not flag consumer as disabled on relayd comm failure.
  * Cleanup inactive FDs in the consumer polling thread.
  * man: Document dead-peer detection for lttng-relayd.
  * lttng-relayd: Use the TCP keep-alive mechanism to detect a
    dead-peer.
  * Tests: race between consumer pause and trace start/stop.
  * Fix notification thread being not notified of channel creation
    on application error.
  * Fix using putenv() and free()-ing the value is invalid.
  * Fix unknown consumer type considered a libc error.
  * Fix that consumerd(64/32)_lib_dir can be NULL.
  * Fix a nonsensical message printed by lttng track/untrack.
  * Fix O_CLOEXEC being erroneously used on pipe creation.
  * Fix a wrong parameter to fcntl in pipe_set_flag.
  * Use lttng_clock_gettime instead of clock_gettime.
  * Close channel monitor pipe after killing the
    metadata_timer_thread.
  * Use file based synchronisation for python logging test.
  * Test: Add file based synchronisation point for the Python test
    application.
  * Fix wrong use of the relay_streams_sent in snapshot.
  * Fix the return code of lttcomm_send_unix_sock signed.
  * Fix a src/bin/lttng/utils.c: cast incompatible pointer warning.
  * Fix: src/common/pipe.h: include &lt;sys/types.h&gt; for ssize_t and
    mode_t.
  * Fix detect dlmopen() and disable corresponding tests if not
    available.
  * Use tmpdir for intermediary files.
  * Fix include scripts for distribution.
  * Fix a typo in lttng-consumerd file default.
  * Fix missing NULL checks in logging statements.
  * Test: Kernel testing for notification.
  * Kernel consumerd sock paths need rundir substitution.
  * Create lttng run dir regardless of user privilege.
  * Make version.h generation work with dash.
  * lttng-enable-event(1): filtering: Specify that `$ctx.cpu_id`
    is available.
  * Centralise sessiond config option handling.
  * Fix buffer overflow warning in python bindings.
  * Tests fix: BT2 does not output the metadata of a trace
    collection.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 2.10.4 (changes since 2.10.2):
  * Fix: Set errno with value from SO_ERROR on error.
  * Fix: Missing value handling for lttng_event_context_type.
  * Fix: Use SOL_SOCKET level for SO_KEEPALIVE on all platform.
  * Fix: Error out on leftover arguments.
  * Fix: Reply to version check even on protocol mismatch.
  * Fix: Error handling on relay version check.
  * Document add-context limitation for started session.
  * Fix: add-context cannot be performed after a session has been
    started.
  * Fix: Duplicated kernel consumer socket locking.
  * Fix: Remove unused event types in MI XML schema.
  * Tests: Cleanly exit from test apps on reception of SIGTERM.
  * Document consumer socket locking assumptions.
  * Fix: Consumer socket lock not held during snapshot record.
  * Fix: set_relayd_for_snapshot does not acquire the consumer
    socket lock.
  * Fix: send_channel_monitor_pipe does not take the consumer
    socket lock.
  * Document the locking assumptions of consumerd-relayd socket
    passing.
  * Assert that the consumer lock is held while sending FDs to
    consumerd.
  * Assert that the consumer socket lock is taken during
    communication.
  * Tests: Refuse to run test suite if lttng processes are present.
  * Fix: Metadata channel leak when using the snapshot tracing
    mode.
  * Fix build: in_git_repo is used before being set.
  * Add DBG statement for TCP keep-alive options.
  * Fix: Unprivilieged sessiond agent port clashes with root
    sessiond.
  * Fix: Erroneous use of extern keyword.
  * Fix: Failure to launch agent thread is not reported.
  * Fix: Agent may not be ready on launch.
  * Fix: Checking for existing session daemon is done after
    daemonising.
  * Fix: lttng logs nanoseconds.
  * Fix: stream_per_chan_id_ht should allow duplicates.
  * Fix: relayd send_command() util not logging on failure.
  * Fix: Create_output_path() relayd util is not
    const-correct.
  * Fix: Kernel snapshot handling of EAGAIN.
  * Fix validate_trace_empty test check.
  * Fix: Circular inclusion of lttng.h results in warning.
  * Fix: Channel lock must be taken to check for pending
    notifications.
  * Fix: Quiet option is not set in sessiond-config.
  * Fix: Hold consumer socket lock for consumer_send_msg.
  * Fix: Use off_t type for lseek function return value to avoid
    overflow.
  * Fix: Double similar condition.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.5:
  * Fix: missing context enum values in session xml schema.
  * Tests: add session auto-loading test cases.
  * Bash completion: ignore namespace for xmllint parsing.
  * Typo in ust consumer log message (channek -&gt; channel).
  * Fix: use signed variable for refcounting of
    consumer_relayd_sock_pair.
  * Fix: warning due to hash_key_str() being not const-correct.
  * Print consumerd32/64/kernel configuration.
  * Fix: calling ht_{hash, match}_enum with wrong argument.
  * Fix: probes should be compared strictly by events metadata.
  * Fix: test_ust-dl is generated at configure-time.
  * Fix: cmd line options overwrite env variable config options.
  * Fix: perform the initialization memory barrier out of loop body.
  * Port: fix format warnings on Cygwin.
  * Add missing include for ssize_t on Cygwin.
  * Fix: sessions with agent channels fail to load.
  * Fix: don't wait for the load thread before serving client
    commands.
  * Fix: sessiond fails to launch on --without-ust configuration.
  * Fix: agent thread poll set creation failure results in deadlock.
  * Fix: test uses sizeof() on the wrong operand of strncpy.
  * Fix: ret may be used uninitialized in sample_channel_positions().
- Add gpl-2.0.txt and lgpl-2.1.txt to the library packages with the
  %license tag.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.2:
  * See /usr/share/doc/packages/lttng-tools/ChangeLog
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.2
  Changelog: https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.12.2
  - Add signed bz2 support (keyring)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.1:
  * See https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.13.1
- Rebase lttng-tools-fix-pkgconfig.patch.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.7:
  * See https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.13.7</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.8
  * futex wait: handle spurious futex wakeups
  * agent port file was o+w when launching as root
  * sessiond: handle empty scheduled rotations
  * sessiond: size-based rotations never triggered
  * lttng-snapshot: fixed use after free of max size argument
  * liblttng-ctl: non-packed structure was used for tracker
    serialization
  * test: lttng kernel modules were still loaded after running
    test_clock_override
  * Plug some memory leaks</changelog>
  <changelog author="dmueller@suse.com" date="1674993600">- update to 2.13.9:
  * Fix: lttng: poptGetArg doesn't provide string ownership
  * Fix: relayd: missing space in trace creation logging statement
  * Fix: event field value: assertion fails on empty string
  * Build fix: rpath of test libraries results in non-reproducible build
  * Fix: never use 'no' in a command variable
  * Fix: sessiond: abort called on undefined client command
  * Fix: consumer: snapshot: assertion on subsequent snapshot
  * Fix: sessiond: instance uuid is not sufficiently unique</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.11:
  * docs: fix: Match stated automake requirement
  * Docs: Fix broken reference in lttng-add-trigger
  * Docs: Fix broken reference to lttng-concepts(7) man page
    disk space
  * Fix: lttng-add-context: leak of application context
    parameters
  * Fix: sessiond: bad fd used while rotating exiting app's
    buffers
  * Fix: consumerd: slow metadata push slows down application
    registration
  * event-rule: set event rule loglevel to domain specific value
    when unset
  * Fix: sessiond: preserve jul/log4j domain loglevels
  * Fix: sessiond: crash enabling event rules that differ only by
    loglevel type
  * Fix: sessiond: incorrect use of exclusions array leads to
    crash
  * Fix: sessiond: silent kernel notifier registration error
  * Fix: sessiond: size-based notification occasionally not
    triggered
  * Fix: adding a user space probe fails on thumb functions
  * Fix: Tests that assume CPU 0 is present
  * Fix: Wrong assumption about possible CPUs
  * Fix: lttng remove-trigger -h fails
  * Fix: ini parser: truncation of value name
  * Fix: truncated len in
    lttng_event_rule_user_tracepoint_serialize()</changelog>
</package>
<package pkgid="15e3dd776ee44af6eda74e26d25632ae53ef8ffea69148e3cfa30584722206eeb37e8ac6dd924d5724068dc12b3f11468e7d350160e5df006bc6c2f33244a871" name="lttng-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="2.13.11" rel="slfo.1.1_1.4"/>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 2.10.2:
  * Do not flag consumer as disabled on relayd comm failure.
  * Cleanup inactive FDs in the consumer polling thread.
  * man: Document dead-peer detection for lttng-relayd.
  * lttng-relayd: Use the TCP keep-alive mechanism to detect a
    dead-peer.
  * Tests: race between consumer pause and trace start/stop.
  * Fix notification thread being not notified of channel creation
    on application error.
  * Fix using putenv() and free()-ing the value is invalid.
  * Fix unknown consumer type considered a libc error.
  * Fix that consumerd(64/32)_lib_dir can be NULL.
  * Fix a nonsensical message printed by lttng track/untrack.
  * Fix O_CLOEXEC being erroneously used on pipe creation.
  * Fix a wrong parameter to fcntl in pipe_set_flag.
  * Use lttng_clock_gettime instead of clock_gettime.
  * Close channel monitor pipe after killing the
    metadata_timer_thread.
  * Use file based synchronisation for python logging test.
  * Test: Add file based synchronisation point for the Python test
    application.
  * Fix wrong use of the relay_streams_sent in snapshot.
  * Fix the return code of lttcomm_send_unix_sock signed.
  * Fix a src/bin/lttng/utils.c: cast incompatible pointer warning.
  * Fix: src/common/pipe.h: include &lt;sys/types.h&gt; for ssize_t and
    mode_t.
  * Fix detect dlmopen() and disable corresponding tests if not
    available.
  * Use tmpdir for intermediary files.
  * Fix include scripts for distribution.
  * Fix a typo in lttng-consumerd file default.
  * Fix missing NULL checks in logging statements.
  * Test: Kernel testing for notification.
  * Kernel consumerd sock paths need rundir substitution.
  * Create lttng run dir regardless of user privilege.
  * Make version.h generation work with dash.
  * lttng-enable-event(1): filtering: Specify that `$ctx.cpu_id`
    is available.
  * Centralise sessiond config option handling.
  * Fix buffer overflow warning in python bindings.
  * Tests fix: BT2 does not output the metadata of a trace
    collection.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 2.10.4 (changes since 2.10.2):
  * Fix: Set errno with value from SO_ERROR on error.
  * Fix: Missing value handling for lttng_event_context_type.
  * Fix: Use SOL_SOCKET level for SO_KEEPALIVE on all platform.
  * Fix: Error out on leftover arguments.
  * Fix: Reply to version check even on protocol mismatch.
  * Fix: Error handling on relay version check.
  * Document add-context limitation for started session.
  * Fix: add-context cannot be performed after a session has been
    started.
  * Fix: Duplicated kernel consumer socket locking.
  * Fix: Remove unused event types in MI XML schema.
  * Tests: Cleanly exit from test apps on reception of SIGTERM.
  * Document consumer socket locking assumptions.
  * Fix: Consumer socket lock not held during snapshot record.
  * Fix: set_relayd_for_snapshot does not acquire the consumer
    socket lock.
  * Fix: send_channel_monitor_pipe does not take the consumer
    socket lock.
  * Document the locking assumptions of consumerd-relayd socket
    passing.
  * Assert that the consumer lock is held while sending FDs to
    consumerd.
  * Assert that the consumer socket lock is taken during
    communication.
  * Tests: Refuse to run test suite if lttng processes are present.
  * Fix: Metadata channel leak when using the snapshot tracing
    mode.
  * Fix build: in_git_repo is used before being set.
  * Add DBG statement for TCP keep-alive options.
  * Fix: Unprivilieged sessiond agent port clashes with root
    sessiond.
  * Fix: Erroneous use of extern keyword.
  * Fix: Failure to launch agent thread is not reported.
  * Fix: Agent may not be ready on launch.
  * Fix: Checking for existing session daemon is done after
    daemonising.
  * Fix: lttng logs nanoseconds.
  * Fix: stream_per_chan_id_ht should allow duplicates.
  * Fix: relayd send_command() util not logging on failure.
  * Fix: Create_output_path() relayd util is not
    const-correct.
  * Fix: Kernel snapshot handling of EAGAIN.
  * Fix validate_trace_empty test check.
  * Fix: Circular inclusion of lttng.h results in warning.
  * Fix: Channel lock must be taken to check for pending
    notifications.
  * Fix: Quiet option is not set in sessiond-config.
  * Fix: Hold consumer socket lock for consumer_send_msg.
  * Fix: Use off_t type for lseek function return value to avoid
    overflow.
  * Fix: Double similar condition.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.5:
  * Fix: missing context enum values in session xml schema.
  * Tests: add session auto-loading test cases.
  * Bash completion: ignore namespace for xmllint parsing.
  * Typo in ust consumer log message (channek -&gt; channel).
  * Fix: use signed variable for refcounting of
    consumer_relayd_sock_pair.
  * Fix: warning due to hash_key_str() being not const-correct.
  * Print consumerd32/64/kernel configuration.
  * Fix: calling ht_{hash, match}_enum with wrong argument.
  * Fix: probes should be compared strictly by events metadata.
  * Fix: test_ust-dl is generated at configure-time.
  * Fix: cmd line options overwrite env variable config options.
  * Fix: perform the initialization memory barrier out of loop body.
  * Port: fix format warnings on Cygwin.
  * Add missing include for ssize_t on Cygwin.
  * Fix: sessions with agent channels fail to load.
  * Fix: don't wait for the load thread before serving client
    commands.
  * Fix: sessiond fails to launch on --without-ust configuration.
  * Fix: agent thread poll set creation failure results in deadlock.
  * Fix: test uses sizeof() on the wrong operand of strncpy.
  * Fix: ret may be used uninitialized in sample_channel_positions().
- Add gpl-2.0.txt and lgpl-2.1.txt to the library packages with the
  %license tag.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.2:
  * See /usr/share/doc/packages/lttng-tools/ChangeLog
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.2
  Changelog: https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.12.2
  - Add signed bz2 support (keyring)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.1:
  * See https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.13.1
- Rebase lttng-tools-fix-pkgconfig.patch.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.7:
  * See https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.13.7</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.8
  * futex wait: handle spurious futex wakeups
  * agent port file was o+w when launching as root
  * sessiond: handle empty scheduled rotations
  * sessiond: size-based rotations never triggered
  * lttng-snapshot: fixed use after free of max size argument
  * liblttng-ctl: non-packed structure was used for tracker
    serialization
  * test: lttng kernel modules were still loaded after running
    test_clock_override
  * Plug some memory leaks</changelog>
  <changelog author="dmueller@suse.com" date="1674993600">- update to 2.13.9:
  * Fix: lttng: poptGetArg doesn't provide string ownership
  * Fix: relayd: missing space in trace creation logging statement
  * Fix: event field value: assertion fails on empty string
  * Build fix: rpath of test libraries results in non-reproducible build
  * Fix: never use 'no' in a command variable
  * Fix: sessiond: abort called on undefined client command
  * Fix: consumer: snapshot: assertion on subsequent snapshot
  * Fix: sessiond: instance uuid is not sufficiently unique</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.11:
  * docs: fix: Match stated automake requirement
  * Docs: Fix broken reference in lttng-add-trigger
  * Docs: Fix broken reference to lttng-concepts(7) man page
    disk space
  * Fix: lttng-add-context: leak of application context
    parameters
  * Fix: sessiond: bad fd used while rotating exiting app's
    buffers
  * Fix: consumerd: slow metadata push slows down application
    registration
  * event-rule: set event rule loglevel to domain specific value
    when unset
  * Fix: sessiond: preserve jul/log4j domain loglevels
  * Fix: sessiond: crash enabling event rules that differ only by
    loglevel type
  * Fix: sessiond: incorrect use of exclusions array leads to
    crash
  * Fix: sessiond: silent kernel notifier registration error
  * Fix: sessiond: size-based notification occasionally not
    triggered
  * Fix: adding a user space probe fails on thumb functions
  * Fix: Tests that assume CPU 0 is present
  * Fix: Wrong assumption about possible CPUs
  * Fix: lttng remove-trigger -h fails
  * Fix: ini parser: truncation of value name
  * Fix: truncated len in
    lttng_event_rule_user_tracepoint_serialize()</changelog>
</package>
<package pkgid="bce57f51ced2de93b74747bde84888dd7fbeac04e1219225e2f4bab5c86eb91efd01678a1f08439f027b3876804a843e6f470ddb5a0c9707be9e7baa7b855c1a" name="lttng-ust-debugsource" arch="aarch64">
  <version epoch="0" ver="2.13.6" rel="slfo.1.1_1.3"/>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.2:
  * Fix: Add liblttng-ust dependency to liblttng-ust-fd.
  * Fix: Use LIBDL/LIBC_DL to select either libdl or libc.
  * Fix: AM_CONDITIONAL should be outside AS_IF block.
  * Fix: Build jni libs with openjdk &gt;= 10.
  * Fix: ustfork: Save and restore errno in syscall wrappers.
  * Fix: Cache the result of getpid() internally.
  * Fix: Reset cached vpid context on fork.
  * Fix: String comparison on incorrect length in context provider.
  * Fix: Remove for() loop initial declarations.
  * Use ust_lock during sock_info operations for atomicity against
    fork.
  * Force tracked fd to be bigger than STDERR_FILENO.
- Remove lttng-ust-copying.patch and add the licence file through
  the %license tag on the library package.</changelog>
  <changelog author="mliska@suse.cz" date="1569326400">- Update to version 2.10.5:
  * New tracef() instrumentation facility. Excerpt from
    the lttng-ust(3) man page.
  * Perf PMU counters support from user-space on x86.
  * Library base address dump is now stable
    (thanks to Mentor for their contribution).
  * fixes boo#1149704.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.0:
  * See /usr/share/doc/packages/lttng-ust/ChangeLog
- Add lttng-ust-2.11.0-fix-no-common.patch: Fix build with
  - fno-common (commit 21a934df, boo#1160400).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.0 (jsc#SLE-16189)
  Changelog: https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.12.0
  Delete patch: lttng-ust-2.11.0-fix-no-common.patch (upstream)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1638014400">- Update to version 2.13.0:
  * See https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.13.0
- Add liburcu requirement to the development package.
- Add ARMv7 and RISC-V to supported architectures.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1652875200">- Update to version 2.13.2 (changes since 2.13.0):
  * Fix: ust-compiler: constructor/destructor build on g++ 4.8.
  * ust-compiler: constructor/destructor whitespaces layout and
    macro dependency.
  * Fix: ust-cancelstate: include string.h for strerror.
  * Fix: libnuma is prepended to LIBS.
  * Fix: Allow disabling some abi compat tests.
  * Fix: generate probe registration constructor as a C++
    constuctor.
  * Fix: nestable pthread cancelstate.
  * Fix: abort on decrement_sem_count during concurrent tracing
    start and teardown.
  * Fix: allocating C++ compound literal on heap with Clang.
  * Check for C++11 when building C++ probe providers.
  * fix: liblttng-ust-fd async-signal-safe close().
  * tracepoints: print debug message when lttng-ust-tracepoint.so
    is not found.
  * Fix: static_assert unavailable with glibc &lt; 2.16.
  * Fix: combined tracing of lttng-ust 2.12/2.13 generates
    corrupted traces.
  * doc/man: Document LTTNG_UST_ABORT_ON_CRITICAL variable.
  * Fix: remove autoconf features default value in help message.
  * Fix: add extern "C" to two header files.
  * Fix: __STDC_VERSION__ can be undefined in C++.
  * Fix: sample discarded events count before reserve.
  * Fix: ring buffer event counter.
  * Fix: concurrent exec(2) file descriptor leak.
  * Add "domain" parameter to the Log4j 2.x agent.
  * Fix: Convert custom loglevels in Log4j 2.x agent.
  * Fix: coverity reported null returns in Log4j2 agent.
  * Add a Log4j 2.x Java agent.
  * Fix: may be used uninitialised on powerpc.
  * Fix: doc/examples/java-log4j: fix paths to directories.
  * Fix: doc/examples/java-jul: fix paths to directories.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1660910400">- Update to version 2.13.3:
  * Document ust lock async-signal-safety.
  * Fix: don't use strerror() from ust lock nocheck.
  * Fix: remove non-async-signal-safe fflush from ERR().
  * Fix: Pointers are rejected by integer element compile time
    assertion for array and sequence.
  * Fix: statedump: invalid read during iter_end.
  * Fix: bytecode interpreter context_get_index() leaves byte order
    uninitialised.</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.13.4
  * Added missing closedir in _get_max_cpuid_from_sysfs()
  * File descriptor was leaked in get_possible_cpu_mask_from_sysfs
  * sessiond wait futex: handle spurious futex wakeups</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1664712000">- Update to version 2.13.5:
  * Fix: bytecode validator: reject specialised load field/context
    ref instructions.
  * Fix: bytecode validator: reject specialised load instructions.
  * Fix: event notification capture: validate buffer length.
  * Fix: event notification capture error handling.
  * Fix: lttng-ust-comm: wait on wrong child process.
  * fix: 'make dist' without javah.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update to 2.13.6:
  * Fix: segmentation fault on filter interpretation in "switch"
    mode
  * Fix: `ip` context is expressed as a base-10 field
  * Fix: c99: use __asm__ __volatile__
  * Fix: c99: static assert: clang build fails due to multiple
    typedef
  * Fix: Reevaluate LTTNG_UST_TRACEPOINT_DEFINE each time
    tracepoint.h is included
  * Fix: trace events in C++ constructors/destructors
  * Fix: trace events in C constructors/destructors
  * Fix: use unaligned pointer accesses for lttng_inline_memcpy</changelog>
</package>
<package pkgid="4f7e499fb56b6a6efba352d15913127d2571fa535d3172da2341bc20a0e37ec08924bcc6b89cdc3a786575f4ef0f4138dc15e47fa2405f541cfc726a7c82776c" name="lua54-debugsource" arch="aarch64">
  <version epoch="0" ver="5.4.6" rel="slfo.1.1_1.3"/>
  <changelog author="gmbr3@opensuse.org" date="1661860800">- Add more upstream patches:
  * luabugs6.patch
  * luabugs7.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1671364800">- Added more numbered patches from upstream:
  * luabugs8.patch
  * luabugs9.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1674561600">- Do not use complex dependencies on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1679140800">- Added more numbered patches from upstream:
  * luabugs10.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1680609600">- Added more numbered patches from upstream:
  * luabugs11.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682856000">- Update to 5.4.5:
  - this is a bug-fix release.
  - Lua 5.4.5 also contains several internal improvements and
    includes a revised reference manual
- Remove upstreamed patches:
  - luabugs1.patch
  - luabugs10.patch
  - luabugs11.patch
  - luabugs2.patch
  - luabugs3.patch
  - luabugs4.patch
  - luabugs5.patch
  - luabugs6.patch
  - luabugs7.patch
  - luabugs8.patch
  - luabugs9.patch</changelog>
  <changelog author="mcepl@suse.com" date="1683633600">- Experimenting with lua 5.4.6-rc1 (release 5.4.5 has been
  effectively withdrawn).</changelog>
  <changelog author="mcepl@suse.com" date="1684756800">- Final release of 5.4.6. No change in the changelog.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685361600">- Library is always liblua5_4-5: due to SOVERSION leading digit
  being 5</changelog>
  <changelog author="mcepl@suse.com" date="1699963200">- Add skip-tests_big-endian.patch to skip little-endian-only
  tests (bsc#1216930).</changelog>
</package>
<package pkgid="6ca19c317fd06b05625752a8ce88a84763a9a2d3cbe46a3b84409fbfb97cceb674d56852984cccacee1d18fa4e86b8b99ad4c729fef4d4f379a06e3afc157a8a" name="lvm2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.03.22" rel="slfo.1.1_1.3"/>
  <changelog author="heming.zhao@suse.com" date="1648641600">-  lvm2-monitor.service reported warning messages for udev didn't finish to set up device database (bsc#1197183)
  + 0025-vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Update lvm2 from LVM2.2.03.15 to LVM2.2.03.16
  * ** WHATS_NEW for 2.03.16 ***
  Version 2.03.16 - 18th May 2022
  ===============================
    Fix segfault when handling selection with historical LVs.
    Add support --vdosettings with lvcreate, lvconvert, lvchange.
    Filtering multipath devices respects blacklist setting from multipath configuration.
    lvmdevices support for removing by device id using --deviceidtype and --deldev.
    Display writecache block size with lvs -o writecache_block_size.
    Improve cachesettings description in man lvmcache.
    Fix lossing of delete message on thin-pool extension.
- Drop patches that have been merged into upstream
  - 0001-post-release.patch
  - 0002-asan-fix-some-reports-from-libasan.patch
  - 0003-make-generate.patch
  - 0004-tests-udev-pvscan-vgchange-fix-service-wait.patch
  - 0005-devices-file-do-not-clear-PVID-of-unread-devices.patch
  - 0006-tests-skip-vgchange-pvs-online.sh-on-rhel5.patch
  - 0007-dev_manager-fix-dm_task_get_device_list.patch
  - 0008-dev_manager-failing-status-is-not-internal-error.patch
  - 0009-clang-add-extra-check.patch
  - 0010-clang-possible-better-compilation-with-musl-c.patch
  - 0011-dev_manager-do-not-query-for-open_count.patch
  - 0012-dev_manager-use-list-info-for-preset-devs.patch
  - 0013-man-lvmcache-add-more-writecache-cachesettings-info.patch
  - 0014-man-update-cachesettings-option-description.patch
  - 0015-man-lvmcache-mention-writecache-memory-usage.patch
  - 0016-writecache-display-block-size-from-lvs.patch
  - 0017-devices-simplify-dev_cache_get_by_devt.patch
  - 0018-devices-drop-incorrect-paths-from-aliases-list.patch
  - 0019-devices-initial-use-of-existing-option.patch
  - 0020-devices-fix-dev_name-assumptions.patch
  - 0021-devices-use-dev-cache-aliases-handling-from-label-sc.patch
  - 0022-devices-only-close-PVs-on-LVs-when-scan_lvs-is-enabl.patch
  - 0023-writecache-check-memory-usage.patch
  - 0024-pvscan-don-t-use-udev-for-external-device-info.patch
  - 0025-vgchange-monitor-don-t-use-udev-info.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new man: lvm_import_vdo.8 dmfilemapd.8
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
- lvm.conf
  - align upstream style, comment out default values</changelog>
  <changelog author="heming.zhao@suse.com" date="1663761600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667476800">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695038400">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * ** WHATS_NEW from 2.03.17 to 2.03.22 ***
  version 2.03.22 - 02nd August 2023
  ==================================
    Fix pv_major/pv_minor report field types so they are integers, not strings.
    Add lvmdevices --delnotfound to delete entries for missing devices.
    Always use cachepool name for metadata backup LV for lvconvert --repair.
    Make metadata backup LVs read-only after pool's lvconvert --repair.
    Improve VDO and Thin support with lvmlockd.
    Handle 'lvextend --usepolicies' for pools for all activation variants.
    Fix memleak in vgchange autoactivation setup.
    Update py-compile building script.
    Support conversion from thick to fully provisioned thin LV.
    Cache/Thin-pool can use error and zero volumes for testing.
    Individual thin volume can be cached, but cannot take snapshot.
    Better internal support for handling error and zero target (for testing).
    Resize COW above trimmed maximal size is does not return error.
    Support parsing of vdo geometry format version 4.
    Add lvm.conf thin_restore and cache_restore settings.
    Handle multiple mounts while resizing volume with a FS.
    Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
    Enhance lvm_import_vdo and use snapshot when converting VDO volume.
    Fix parsing of VDO metadata.
    Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
    Allow snapshots of raid+integrity LV.
    Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  version 2.03.21 - 21st April 2023
  =================================
    Fix activation of vdo-pool for with 0 length headers (converted pools).
    Avoid printing internal init messages when creation integration devices.
    Allow (write)cache over raid+integrity LV.
  version 2.03.20 - 21st March 2023
  =================================
    Fix segfault if using -S|--select with log/report_command_log=1 setting.
    Configure now fails when requested lvmlockd dependencies are missing.
    Add some configure Gentoo enhancements for static builds.
  version 2.03.19 - 21st February 2023
  ====================================
    Configure supports --with-systemd-run executed from udev rules.
    Enhancement for build with MuslC systemd and non-bash system shells (dash).
    Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
    Ensure udev is processing origin LV before its thick snapshots LVs.
    Fix and improve runtime memory size detection for VDO volumes.
  version 2.03.18 - 22nd December 2022
  ====================================
    Fix issues reported by coverity scan.
    Fix warning for thin pool overprovisioning on lvextend (2.03.17).
    Add support for writecache metadata_only and pause_writeback settings.
    Fix missing error messages in lvmdbusd.
  Version 2.03.17 - 10th November 2022
  ====================================
    Add new options (--fs, --fsmode) for FS handling when resizing LVs.
    Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
    Fix lv_active field type to binary so --select and --binary applies properly.
    Switch to use mallinfo2 and use it only with glibc.
    Error out in lvm shell if using a cmd argument not supported in the shell.
    Fix lvm shell's lastlog command to report previous pre-command failures.
    Extend VDO and VDOPOOL without flushing and locking fs.
    Add --valuesonly option to lvmconfig to print only values without keys.
    Updates configure with recent autoconf tooling.
    Fix lvconvert --test --type vdo-pool execution.
    Add json_std output format for more JSON standard compliant version of output.
    Fix vdo_slab_size_mb value for converted VDO volume.
    Fix many corner cases in device_id, including handling of S/N duplicates.
    Fix various issues in lvmdbusd.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="323e0ac9a95288e49e59a7c139acca972e6b00978bc5eea40626d3aa459ee9dee5710dba81abc9290abe71e2d706fbd1de7473dc6a67d88c5856276149bbbdc3" name="lvm2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.03.22" rel="slfo.1.1_1.3"/>
  <changelog author="heming.zhao@suse.com" date="1648641600">-  lvm2-monitor.service reported warning messages for udev didn't finish to set up device database (bsc#1197183)
  + 0025-vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Update lvm2 from LVM2.2.03.15 to LVM2.2.03.16
  * ** WHATS_NEW for 2.03.16 ***
  Version 2.03.16 - 18th May 2022
  ===============================
    Fix segfault when handling selection with historical LVs.
    Add support --vdosettings with lvcreate, lvconvert, lvchange.
    Filtering multipath devices respects blacklist setting from multipath configuration.
    lvmdevices support for removing by device id using --deviceidtype and --deldev.
    Display writecache block size with lvs -o writecache_block_size.
    Improve cachesettings description in man lvmcache.
    Fix lossing of delete message on thin-pool extension.
- Drop patches that have been merged into upstream
  - 0001-post-release.patch
  - 0002-asan-fix-some-reports-from-libasan.patch
  - 0003-make-generate.patch
  - 0004-tests-udev-pvscan-vgchange-fix-service-wait.patch
  - 0005-devices-file-do-not-clear-PVID-of-unread-devices.patch
  - 0006-tests-skip-vgchange-pvs-online.sh-on-rhel5.patch
  - 0007-dev_manager-fix-dm_task_get_device_list.patch
  - 0008-dev_manager-failing-status-is-not-internal-error.patch
  - 0009-clang-add-extra-check.patch
  - 0010-clang-possible-better-compilation-with-musl-c.patch
  - 0011-dev_manager-do-not-query-for-open_count.patch
  - 0012-dev_manager-use-list-info-for-preset-devs.patch
  - 0013-man-lvmcache-add-more-writecache-cachesettings-info.patch
  - 0014-man-update-cachesettings-option-description.patch
  - 0015-man-lvmcache-mention-writecache-memory-usage.patch
  - 0016-writecache-display-block-size-from-lvs.patch
  - 0017-devices-simplify-dev_cache_get_by_devt.patch
  - 0018-devices-drop-incorrect-paths-from-aliases-list.patch
  - 0019-devices-initial-use-of-existing-option.patch
  - 0020-devices-fix-dev_name-assumptions.patch
  - 0021-devices-use-dev-cache-aliases-handling-from-label-sc.patch
  - 0022-devices-only-close-PVs-on-LVs-when-scan_lvs-is-enabl.patch
  - 0023-writecache-check-memory-usage.patch
  - 0024-pvscan-don-t-use-udev-for-external-device-info.patch
  - 0025-vgchange-monitor-don-t-use-udev-info.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new man: lvm_import_vdo.8 dmfilemapd.8
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
- lvm.conf
  - align upstream style, comment out default values</changelog>
  <changelog author="heming.zhao@suse.com" date="1663761600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667476800">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695038400">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * ** WHATS_NEW from 2.03.17 to 2.03.22 ***
  version 2.03.22 - 02nd August 2023
  ==================================
    Fix pv_major/pv_minor report field types so they are integers, not strings.
    Add lvmdevices --delnotfound to delete entries for missing devices.
    Always use cachepool name for metadata backup LV for lvconvert --repair.
    Make metadata backup LVs read-only after pool's lvconvert --repair.
    Improve VDO and Thin support with lvmlockd.
    Handle 'lvextend --usepolicies' for pools for all activation variants.
    Fix memleak in vgchange autoactivation setup.
    Update py-compile building script.
    Support conversion from thick to fully provisioned thin LV.
    Cache/Thin-pool can use error and zero volumes for testing.
    Individual thin volume can be cached, but cannot take snapshot.
    Better internal support for handling error and zero target (for testing).
    Resize COW above trimmed maximal size is does not return error.
    Support parsing of vdo geometry format version 4.
    Add lvm.conf thin_restore and cache_restore settings.
    Handle multiple mounts while resizing volume with a FS.
    Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
    Enhance lvm_import_vdo and use snapshot when converting VDO volume.
    Fix parsing of VDO metadata.
    Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
    Allow snapshots of raid+integrity LV.
    Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  version 2.03.21 - 21st April 2023
  =================================
    Fix activation of vdo-pool for with 0 length headers (converted pools).
    Avoid printing internal init messages when creation integration devices.
    Allow (write)cache over raid+integrity LV.
  version 2.03.20 - 21st March 2023
  =================================
    Fix segfault if using -S|--select with log/report_command_log=1 setting.
    Configure now fails when requested lvmlockd dependencies are missing.
    Add some configure Gentoo enhancements for static builds.
  version 2.03.19 - 21st February 2023
  ====================================
    Configure supports --with-systemd-run executed from udev rules.
    Enhancement for build with MuslC systemd and non-bash system shells (dash).
    Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
    Ensure udev is processing origin LV before its thick snapshots LVs.
    Fix and improve runtime memory size detection for VDO volumes.
  version 2.03.18 - 22nd December 2022
  ====================================
    Fix issues reported by coverity scan.
    Fix warning for thin pool overprovisioning on lvextend (2.03.17).
    Add support for writecache metadata_only and pause_writeback settings.
    Fix missing error messages in lvmdbusd.
  Version 2.03.17 - 10th November 2022
  ====================================
    Add new options (--fs, --fsmode) for FS handling when resizing LVs.
    Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
    Fix lv_active field type to binary so --select and --binary applies properly.
    Switch to use mallinfo2 and use it only with glibc.
    Error out in lvm shell if using a cmd argument not supported in the shell.
    Fix lvm shell's lastlog command to report previous pre-command failures.
    Extend VDO and VDOPOOL without flushing and locking fs.
    Add --valuesonly option to lvmconfig to print only values without keys.
    Updates configure with recent autoconf tooling.
    Fix lvconvert --test --type vdo-pool execution.
    Add json_std output format for more JSON standard compliant version of output.
    Fix vdo_slab_size_mb value for converted VDO volume.
    Fix many corner cases in device_id, including handling of S/N duplicates.
    Fix various issues in lvmdbusd.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="ee6ac6794aab5b3ccea77d067032440bc8992002e206e700a48000c89664bbf7eb0b2ce264e28bdecc8e40fbb30147af20a70dc02bc1fdc9f4fe9ee12a2dcb90" name="lvm2-device-mapper-debugsource" arch="aarch64">
  <version epoch="0" ver="2.03.22" rel="slfo.1.1_1.3"/>
  <changelog author="heming.zhao@suse.com" date="1648641600">-  lvm2-monitor.service reported warning messages for udev didn't finish to set up device database (bsc#1197183)
  + 0025-vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Update lvm2 from LVM2.2.03.15 to LVM2.2.03.16
  * ** WHATS_NEW for 2.03.16 ***
  Version 2.03.16 - 18th May 2022
  ===============================
    Fix segfault when handling selection with historical LVs.
    Add support --vdosettings with lvcreate, lvconvert, lvchange.
    Filtering multipath devices respects blacklist setting from multipath configuration.
    lvmdevices support for removing by device id using --deviceidtype and --deldev.
    Display writecache block size with lvs -o writecache_block_size.
    Improve cachesettings description in man lvmcache.
    Fix lossing of delete message on thin-pool extension.
- Drop patches that have been merged into upstream
  - 0001-post-release.patch
  - 0002-asan-fix-some-reports-from-libasan.patch
  - 0003-make-generate.patch
  - 0004-tests-udev-pvscan-vgchange-fix-service-wait.patch
  - 0005-devices-file-do-not-clear-PVID-of-unread-devices.patch
  - 0006-tests-skip-vgchange-pvs-online.sh-on-rhel5.patch
  - 0007-dev_manager-fix-dm_task_get_device_list.patch
  - 0008-dev_manager-failing-status-is-not-internal-error.patch
  - 0009-clang-add-extra-check.patch
  - 0010-clang-possible-better-compilation-with-musl-c.patch
  - 0011-dev_manager-do-not-query-for-open_count.patch
  - 0012-dev_manager-use-list-info-for-preset-devs.patch
  - 0013-man-lvmcache-add-more-writecache-cachesettings-info.patch
  - 0014-man-update-cachesettings-option-description.patch
  - 0015-man-lvmcache-mention-writecache-memory-usage.patch
  - 0016-writecache-display-block-size-from-lvs.patch
  - 0017-devices-simplify-dev_cache_get_by_devt.patch
  - 0018-devices-drop-incorrect-paths-from-aliases-list.patch
  - 0019-devices-initial-use-of-existing-option.patch
  - 0020-devices-fix-dev_name-assumptions.patch
  - 0021-devices-use-dev-cache-aliases-handling-from-label-sc.patch
  - 0022-devices-only-close-PVs-on-LVs-when-scan_lvs-is-enabl.patch
  - 0023-writecache-check-memory-usage.patch
  - 0024-pvscan-don-t-use-udev-for-external-device-info.patch
  - 0025-vgchange-monitor-don-t-use-udev-info.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new man: lvm_import_vdo.8 dmfilemapd.8
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
- lvm.conf
  - align upstream style, comment out default values</changelog>
  <changelog author="heming.zhao@suse.com" date="1663761600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667476800">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695038400">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * ** WHATS_NEW from 2.03.17 to 2.03.22 ***
  version 2.03.22 - 02nd August 2023
  ==================================
    Fix pv_major/pv_minor report field types so they are integers, not strings.
    Add lvmdevices --delnotfound to delete entries for missing devices.
    Always use cachepool name for metadata backup LV for lvconvert --repair.
    Make metadata backup LVs read-only after pool's lvconvert --repair.
    Improve VDO and Thin support with lvmlockd.
    Handle 'lvextend --usepolicies' for pools for all activation variants.
    Fix memleak in vgchange autoactivation setup.
    Update py-compile building script.
    Support conversion from thick to fully provisioned thin LV.
    Cache/Thin-pool can use error and zero volumes for testing.
    Individual thin volume can be cached, but cannot take snapshot.
    Better internal support for handling error and zero target (for testing).
    Resize COW above trimmed maximal size is does not return error.
    Support parsing of vdo geometry format version 4.
    Add lvm.conf thin_restore and cache_restore settings.
    Handle multiple mounts while resizing volume with a FS.
    Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
    Enhance lvm_import_vdo and use snapshot when converting VDO volume.
    Fix parsing of VDO metadata.
    Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
    Allow snapshots of raid+integrity LV.
    Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  version 2.03.21 - 21st April 2023
  =================================
    Fix activation of vdo-pool for with 0 length headers (converted pools).
    Avoid printing internal init messages when creation integration devices.
    Allow (write)cache over raid+integrity LV.
  version 2.03.20 - 21st March 2023
  =================================
    Fix segfault if using -S|--select with log/report_command_log=1 setting.
    Configure now fails when requested lvmlockd dependencies are missing.
    Add some configure Gentoo enhancements for static builds.
  version 2.03.19 - 21st February 2023
  ====================================
    Configure supports --with-systemd-run executed from udev rules.
    Enhancement for build with MuslC systemd and non-bash system shells (dash).
    Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
    Ensure udev is processing origin LV before its thick snapshots LVs.
    Fix and improve runtime memory size detection for VDO volumes.
  version 2.03.18 - 22nd December 2022
  ====================================
    Fix issues reported by coverity scan.
    Fix warning for thin pool overprovisioning on lvextend (2.03.17).
    Add support for writecache metadata_only and pause_writeback settings.
    Fix missing error messages in lvmdbusd.
  Version 2.03.17 - 10th November 2022
  ====================================
    Add new options (--fs, --fsmode) for FS handling when resizing LVs.
    Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
    Fix lv_active field type to binary so --select and --binary applies properly.
    Switch to use mallinfo2 and use it only with glibc.
    Error out in lvm shell if using a cmd argument not supported in the shell.
    Fix lvm shell's lastlog command to report previous pre-command failures.
    Extend VDO and VDOPOOL without flushing and locking fs.
    Add --valuesonly option to lvmconfig to print only values without keys.
    Updates configure with recent autoconf tooling.
    Fix lvconvert --test --type vdo-pool execution.
    Add json_std output format for more JSON standard compliant version of output.
    Fix vdo_slab_size_mb value for converted VDO volume.
    Fix many corner cases in device_id, including handling of S/N duplicates.
    Fix various issues in lvmdbusd.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="cd5cba764a5854cfcd4beac59ccaa694a67acdc71671b3697a960b797ba2c0bbac9742897b50d43de5ab75786dc668de5242c455dc0a35969c4085c8fc5af914" name="lz4-debugsource" arch="aarch64">
  <version epoch="0" ver="1.9.4" rel="slfo.1.1_1.2"/>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="jengelh@inai.de" date="1605528000">- Update to release 1.9.3
  * api: LZ4_decompress_safe_partial() now supports unknown
    compressed size
  * api: improved LZ4F_compressBound() with automatic flushing
  * cli: multiple files are compressed now using the legacy format</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version 1.9.3 fixes also CVE-2021-3520 [bsc#1185438]</changelog>
  <changelog author="jengelh@inai.de" date="1660651200">- Update to release 1.9.4
  * Decompression speed on high-end ARM64 platform is improved,
    by ~+20%.
  * For the specific scenario of data compressed with -BD4
    setting (small blocks, &lt;= 64 KB, linked) decompressed
    block-by-block into a flush buffer (like lz4 CLI does),
    decompression speed is improved ~+70%.
  * For compressed data employing the lz4frame format (native
    format of lz4 CLI), it's possible to ignore checksum
    validation during decompression, resulting in speed
    improvements of ~+40% . This capability is exposed at both
    CLI (see --no-crc) and library levels.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
</package>
<package pkgid="b6f1cf75e464dfa4601dd2552e17088c6285056ec8f841581d685e5ebd942b74349318cfec4cfbc55f7c95cd579b4bad866a11013627dfebb15057e4192a844e" name="lzo-debugsource" arch="aarch64">
  <version epoch="0" ver="2.10" rel="slfo.1.1_1.3"/>
  <changelog author="mpluskal@suse.com" date="1424779200">- Cleanup spec file with spec-cleaner
- Update to 2.09
  * Work around gcc bug #64516 that could affect architectures like
  armv4, armv5 and sparc.</changelog>
  <changelog author="dsterba@suse.cz" date="1490788800">- Update to 2.10
  * Improve CMake build support.
  * Add support for pkg-config.
  * Do not redefine "snprintf" so that the examples build with MSVC 2015.
  * Assorted cleanups.</changelog>
  <changelog author="dimstar@opensuse.org" date="1510660800">- Add pkgconfig BuildRequires: allow the rpm dep generator to
  inspect the shipped .pc file and produce requires/provides.</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Modernise spec file with spec-cleaner
- Move license to subpackage that will allways be installed</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Fix RPM groups.
- Trim sentence that has no comparison point.</changelog>
  <changelog author="mliska@suse.cz" date="1556280000">- Use FAT LTO objects in order to provide proper static library (boo#1133259).</changelog>
  <changelog author="mliska@suse.cz" date="1574251200">- Disable strict aliasing due to its violation
  (boo#1157271).</changelog>
  <changelog author="dmueller@suse.com" date="1611662400">- add lzo-2.08-rhbz1309225.patch to avoid aliasing issues</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dmueller@suse.com" date="1679054400">- adjust lzo-2.08-rhbz1309225.patch download reference</changelog>
</package>
<package pkgid="59442831de8e9cbc9ea83f27f5e0dd29fd4b06ca1a7329ff5d8f91210e49d21859b33e60b1c9a3514bc149fd4d9518fd3a07e9e59b66ef98dce3ee31704520b4" name="lzop-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.04" rel="slfo.1.1_1.2"/>
  <changelog author="guru@unixtech.be" date="1181131200">- update to 1.02rc1</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325592000">- Build lzop version 1.03</changelog>
  <changelog author="mpluskal@suse.com" date="1426248000">- Cleanup spec file with spec-cleaner
- Use url for source
- Cleanup dependencies
- Remove _DATE_ and _TIME_ usage</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add lzop-1.03-gcc6.patch to fix undefined behavior in its ACC test
  uncovered by GCC 6.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1459512000">- new lzop-1.03-gcc5_ppc64.patch:
  use static inlines as the external inline definition has
  changed with gcc5</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- update to 1.0.4:
  * Added CMake build support
  * Assorted minor updates
- clean with spec-cleaner
- remove patches
  * lzop-1.03-gcc5_ppc64.patch
  * lzop-1.03-gcc6.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510401601">- Use cmake for building
- Run tests during build</changelog>
  <changelog author="jengelh@inai.de" date="1510574400">- Remove bias from descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Use pkgconfig style dependencies
- Mark license as such</changelog>
  <changelog author="mpluskal@suse.com" date="1589976000">- Packaging cleanup:
  * Use modern macros
  * Use latests SPDX style of license strings</changelog>
</package>
<package pkgid="4325f03c1c4c3832bd0b7b4ac5704a08f5a535568687e3ac119859e3f3d786001e65fe4a14d99e5cc7a7bc79eb057d6e4545c0ad68efa43019ba4cc6de8bbf8a" name="lzop-debugsource" arch="aarch64">
  <version epoch="0" ver="1.04" rel="slfo.1.1_1.2"/>
  <changelog author="guru@unixtech.be" date="1181131200">- update to 1.02rc1</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325592000">- Build lzop version 1.03</changelog>
  <changelog author="mpluskal@suse.com" date="1426248000">- Cleanup spec file with spec-cleaner
- Use url for source
- Cleanup dependencies
- Remove _DATE_ and _TIME_ usage</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add lzop-1.03-gcc6.patch to fix undefined behavior in its ACC test
  uncovered by GCC 6.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1459512000">- new lzop-1.03-gcc5_ppc64.patch:
  use static inlines as the external inline definition has
  changed with gcc5</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- update to 1.0.4:
  * Added CMake build support
  * Assorted minor updates
- clean with spec-cleaner
- remove patches
  * lzop-1.03-gcc5_ppc64.patch
  * lzop-1.03-gcc6.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510401601">- Use cmake for building
- Run tests during build</changelog>
  <changelog author="jengelh@inai.de" date="1510574400">- Remove bias from descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Use pkgconfig style dependencies
- Mark license as such</changelog>
  <changelog author="mpluskal@suse.com" date="1589976000">- Packaging cleanup:
  * Use modern macros
  * Use latests SPDX style of license strings</changelog>
</package>
<package pkgid="a2c3d84d1cfb8e737f3c53aba9b5c11235f28d4cb25fc78690a0d586ac985ef2da812dfe08503e897810bf407c06440ec30502ae17a350612362919b1205969e" name="m4-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.18" rel="slfo.1.1_1.5"/>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- Update to version 1.4.17:
  * Fix compilation with newer glibc headers.
  * Fix a failure with diverting large amounts of text on mingw
    (does not affect platforms that can rename an open file).
  * A number of portability improvements inherited from gnulib.
- remove m4-stdio.in.patch, merged by upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1425297600">- Add gpg signature
- Add prerequires for info pages</changelog>
  <changelog author="mpluskal@suse.com" date="1443873600">- Update info handling from postun to preun</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.4.18:
  * Diagnose --word-regexp as unsupported if it was not configured.
  * Preliminary support for OS/2.
  * A number of portability improvements inherited from gnulib.
- Some packaging changes:
  * Use https url's
  * Get keyring from savannah
  * Use xs compressed files
  * Make building more verbose</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Fix de-registration of the info files.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Explicitly remove %{_infodir}/dir before creating package to
  allow builds on RHEL and derived Linux distributions
- Enable configure option --disable-dependency-tracking to
  allow build on Mageia
- Add xz as BuildRequires to unpack source on SLE 11</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: adjust gnulib for libio.h removal
- Use %license for COPYING</changelog>
  <changelog author="mpluskal@suse.com" date="1579780800">- Enable PGO during build</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- gnulib-c-stack.patch: c-stack: stop using SIGSTKSZ</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Use %make_build macro and make sure we run the profiling run with -j1</changelog>
</package>
<package pkgid="060a785750a38f59ec1e245a2b30801e888082a740379ed8837fd98bcae8f235226c6e0534bfd394da3548e93048282d72f6e5a26d4cefb7cf25bbffb249684a" name="m4-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.18" rel="slfo.1.1_1.5"/>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- Update to version 1.4.17:
  * Fix compilation with newer glibc headers.
  * Fix a failure with diverting large amounts of text on mingw
    (does not affect platforms that can rename an open file).
  * A number of portability improvements inherited from gnulib.
- remove m4-stdio.in.patch, merged by upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1425297600">- Add gpg signature
- Add prerequires for info pages</changelog>
  <changelog author="mpluskal@suse.com" date="1443873600">- Update info handling from postun to preun</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.4.18:
  * Diagnose --word-regexp as unsupported if it was not configured.
  * Preliminary support for OS/2.
  * A number of portability improvements inherited from gnulib.
- Some packaging changes:
  * Use https url's
  * Get keyring from savannah
  * Use xs compressed files
  * Make building more verbose</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Fix de-registration of the info files.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Explicitly remove %{_infodir}/dir before creating package to
  allow builds on RHEL and derived Linux distributions
- Enable configure option --disable-dependency-tracking to
  allow build on Mageia
- Add xz as BuildRequires to unpack source on SLE 11</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: adjust gnulib for libio.h removal
- Use %license for COPYING</changelog>
  <changelog author="mpluskal@suse.com" date="1579780800">- Enable PGO during build</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- gnulib-c-stack.patch: c-stack: stop using SIGSTKSZ</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Use %make_build macro and make sure we run the profiling run with -j1</changelog>
</package>
<package pkgid="5726d2aeb8e827e5d7d7a5129fe94928e3c1127911dccbe1cf0c667018cfa83bc413a78914fc01f5e90de6d54146122cd2ddc8beb4aa967029bf66289e9bcc6d" name="mailx-debuginfo" arch="aarch64">
  <version epoch="0" ver="12.5" rel="slfo.1.1_1.2"/>
  <changelog author="werner@suse.de" date="1542628800">- Repair ghost links used by update-alternatives</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1608897600">- fix-sendmail-name.patch: fix name argument when calling
  /usr/sbin/sendmail [bsc#1180355].</changelog>
  <changelog author="lnussel@suse.de" date="1611748800">- update-alternatives call needs to be in postun rather than preun</changelog>
  <changelog author="werner@suse.de" date="1637668800">- Add patch mailx-12.5-systemd.patch to add description how to avoid
  bugs like bsc#1192916 -- mailx does not send mails unless run via
  strace or in verbose mode</changelog>
  <changelog author="schubi@suse.de" date="1645099200">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="werner@suse.de" date="1647864000">- Fix number check of test (builtin) in %pre scriptlet (boo#1197317)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="schubi@suse.com" date="1701864000">- Moving /etc/mailrc to /usr/etc/mail.rc
  * Add patch mailx-usr-etc.patch</changelog>
</package>
<package pkgid="9822adb29c10861d2a86efd2e77b02eda4abe3d8f48dbc7b9a758efbff57215ca615eb92b075759874a88379f6eccfd172cc6637c9848daf86e6c0a73d697473" name="mailx-debugsource" arch="aarch64">
  <version epoch="0" ver="12.5" rel="slfo.1.1_1.2"/>
  <changelog author="werner@suse.de" date="1542628800">- Repair ghost links used by update-alternatives</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1608897600">- fix-sendmail-name.patch: fix name argument when calling
  /usr/sbin/sendmail [bsc#1180355].</changelog>
  <changelog author="lnussel@suse.de" date="1611748800">- update-alternatives call needs to be in postun rather than preun</changelog>
  <changelog author="werner@suse.de" date="1637668800">- Add patch mailx-12.5-systemd.patch to add description how to avoid
  bugs like bsc#1192916 -- mailx does not send mails unless run via
  strace or in verbose mode</changelog>
  <changelog author="schubi@suse.de" date="1645099200">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="werner@suse.de" date="1647864000">- Fix number check of test (builtin) in %pre scriptlet (boo#1197317)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="schubi@suse.com" date="1701864000">- Moving /etc/mailrc to /usr/etc/mail.rc
  * Add patch mailx-usr-etc.patch</changelog>
</package>
<package pkgid="25d32c7ae065cf5b107a64c63118d7ec5cea2d56860fae7a4c4d7829053ae224c35210a04fcb176e72591c1b732c104f2fd0678754d3f2cd7514fe93d242718b" name="make-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.4.1" rel="slfo.1.1_1.4"/>
  <changelog author="schwab@suse.de" date="1579521600">- Update to make 4.3
  * WARNING: Backward-incompatibility!
    Number signs (#) appearing inside a macro reference or function
    invocation no longer introduce comments and should not be escaped with
    backslashes
  * WARNING: Backward-incompatibility!
    Previously appending using '+=' to an empty variable would result in a
    value starting with a space
  * NOTE: Deprecated behavior.
    Contrary to the documentation, suffix rules with prerequisites are being
    treated BOTH as simple targets AND as pattern rules
  * New feature: Grouped explicit targets
  * New feature: .EXTRA_PREREQS variable
  * Makefiles can now specify the '-j' option in their MAKEFLAGS variable
    and this will cause make to enable that parallelism mode
  * Error messages printed when invoking non-existent commands have been
    cleaned up and made consistent.
  * A new option --no-silent has been added, that cancels the effect of
    the -s/--silent/--quiet flag
  * A new option -E has been added as a short alias for --eval
  * All wildcard expansion within GNU make, including $(wildcard ...),
    will sort the results
  * Performance improvements provided by Paolo Bonzini
    &lt;pbonzini@redhat.com&gt;
- make-sorted-glob.patch, glob-lstat.patch, glob-interface.patch,
  pselect-non-blocking.patch: Removed, upstreamed</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582372800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add fix-57962.patch in order to fix bug #57962.</changelog>
  <changelog author="meissner@suse.com" date="1650369600">- use https urls</changelog>
  <changelog author="schwab@suse.de" date="1660737600">- jobserver-noinherit.patch: Disable inheritance of jobserver FDs for
  recursive make
- jobserver-fifo.patch: Add support for jobserver using named pipes</changelog>
  <changelog author="schwab@suse.de" date="1667217600">- Update to make 4.4
  * WARNING: Future backward-incompatibility!
    In the NEXT release of GNU Make, pattern rules will implement the same
    behavior change for multiple targets as explicit grouped targets
  * WARNING: Backward-incompatibility!
    GNU Make now uses temporary files in more situations than previous releases.
  * WARNING: Backward-incompatibility!
    Previously each target in a explicit grouped target rule was considered
    individually: if the targets needed by the build were not out of date the
    recipe was not run even if other targets in the group were out of date.  Now
    if any of the grouped targets are needed by the build, then if any of the
    grouped targets are out of date the recipe is run and all targets in the
    group are considered updated.
  * WARNING: Backward-incompatibility!
    Previously if --no-print-directory was seen anywhere in the environment or
    command line it would take precedence over any --print-directory.  Now, the
    last setting of directory printing options seen will be used, so a command
    line such as "--no-print-directory -w" _will_ show directory entry/exits.
  * WARNING: Backward-incompatibility!
    Previously the order in which makefiles were remade was not explicitly
    stated, but it was (roughly) the inverse of the order in which they were
    processed by make.  In this release, the order in which makefiles are
    rebuilt is the same order in which make processed them, and this is defined
    to be true in the GNU Make manual.
  * WARNING: Backward-incompatibility!
    Previously only simple (one-letter) options were added to the MAKEFLAGS
    variable that was visible while parsing makefiles.  Now, all options are
    available in MAKEFLAGS.  If you want to check MAKEFLAGS for a one-letter
    option, expanding "$(firstword -$(MAKEFLAGS))" is a reliable way to return
    the set of one-letter options which can be examined via findstring, etc.
  * WARNING: Backward-incompatibility!
    Previously makefile variables marked as export were not exported to commands
    started by the $(shell ...) function.  Now, all exported variables are
    exported to $(shell ...).  If this leads to recursion during expansion, then
    for backward-compatibility the value from the original environment is used.
    To detect this change search for 'shell-export' in the .FEATURES variable.
  * WARNING: New build requirement
    GNU Make utilizes facilities from GNU Gnulib: Gnulib requires certain C99
    features in the C compiler and so these features are required by GNU Make:
    https://www.gnu.org/software/gnulib/manual/html_node/C99-features-assumed.html
    The configure script should verify the compiler has these features.
  * New feature: The .WAIT special target
    If the .WAIT target appears between two prerequisites of a target, then
    GNU Make will wait for all of the targets to the left of .WAIT in the list
    to complete before starting any of the targets to the right of .WAIT.
  * New feature: .NOTPARALLEL accepts prerequisites
    If the .NOTPARALLEL special target has prerequisites then all prerequisites
    of those targets will be run serially (as if .WAIT was specified between
    each prerequisite).
  * New feature: The .NOTINTERMEDIATE special target
    .NOTINTERMEDIATE disables intermediate behavior for specific files, for all
    files built using a pattern, or for the entire makefile.
  * New feature: The $(let ...) function
    This function allows user-defined functions to define a set of local
    variables: values can be assigned to these variables from within the
    user-defined function and they will not impact global variable assignments.
  * New feature: The $(intcmp ...) function
    This function allows conditional evaluation controlled by a numerical
    comparison.
  * New feature: Improved support for -l / --load-average
    On systems that provide /proc/loadavg (Linux), GNU Make will use it to
    determine the number of runnable jobs and use this as the current load,
    avoiding the need for heuristics.
  * New feature: The --shuffle command line option
    This option reorders goals and prerequisites to simulate non-determinism
    that may be seen using parallel build.  Shuffle mode allows a form of "fuzz
    testing" of parallel builds to verify that all prerequisites are correctly
    described in the makefile.
  * New feature: The --jobserver-style command line option and named pipes
    A new jobserver method is used on systems where mkfifo(3) is supported.
  * GNU Make has sometimes chosen unexpected, and sub-optimal, chains of
    implicit rules due to the definition of "ought to exist" in the implicit
    rule search algorithm, which considered any prerequisite mentioned in the
    makefile as "ought to exist".  This algorithm has been modified to prefer
    prerequisites mentioned explicitly in the target being built and only if
    that results in no matching rule, will GNU Make consider prerequisites
    mentioned in other targets as "ought to exist".
  * GNU Make was performing secondary expansion of all targets, even targets
    which didn't need to be considered during the build.  In this release
    only targets which are considered will be secondarily expanded.
  * If the MAKEFLAGS variable is modified in a makefile, it will be re-parsed
    immediately rather than after all makefiles have been read.
  * The -I option accepts an argument "-" (e.g., "-I-") which means "reset the
    list of search directories to empty".
  * New debug option "print" will show the recipe to be run, even when silent
    mode is set, and new debug option "why" will show why a target is rebuilt
    (which prerequisites caused the target to be considered out of date).
  * The existing --trace option is made equivalent to --debug=print,why
  * Target-specific variables can now be marked "unexport".
  * Exporting / unexporting target-specific variables is handled correctly, so
    that the attribute of the most specific variable setting is used.
  * Special targets like .POSIX are detected upon definition, ensuring that any
    change in behavior takes effect immediately, before the next line is parsed.
  * When the pipe-based jobserver is enabled and GNU Make decides it is invoking
    a non-make sub-process and closes the jobserver pipes, it will now add a new
    option to the MAKEFLAGS environment variable that disables the jobserver.
  * A long-standing issue with the directory cache has been resolved: changes
    made as a side-effect of some other target's recipe are now noticed as
    expected.
- jobserver-noinherit.patch, jobserver-fifo.patch: Removed
- test-driver.patch: Removed
- fix-57962.patch: Removed
- make-testcases_timeout.diff: Removed</changelog>
  <changelog author="schwab@suse.de" date="1667390400">- reset-sigpipe.patch: Reset SIGPIPE in children</changelog>
  <changelog author="schwab@suse.de" date="1669032000">- reset-sigpipe.patch: Removed
- sigpipe-fatal.patch: Handle SIGPIPE as a fatal signal</changelog>
  <changelog author="schwab@suse.de" date="1677499200">- Update to make 4.4.1
  * WARNING: Backward-incompatibility!
    In previous releases it was not well-defined when updates to MAKEFLAGS made
    inside a makefile would be visible.  This release ensures they are visible
    immediately, even when invoking $(shell ...) functions.
  * New feature: Parallel builds of archives
    Previously it was not possible to use parallel builds with archives.  It is
    still not possible using the built-in rules, however you can now override
    the built-in rules with a slightly different set of rules and use parallel
    builds with archive creation.
  * Previously target-specific variables would inherit their "export" capability
    from parent target-specific variables even if they were marked private.  Now
    private parent target-specific variables have no affect.
- sigpipe-fatal.patch: removed</changelog>
  <changelog author="fcrozat@suse.com" date="1680782400">- Update license tag, tarball contains GPL-3.0-or-later code.</changelog>
</package>
<package pkgid="ab47d4cd4ee44427527c1698091c8b7fe6d935f29d73a5bb1d8fb34cf15c1c88e5c6ebd5fdfafb013fe6c90720b1986cd0416f4c83c49bb4deb0fef047c1e0ea" name="make-debugsource" arch="aarch64">
  <version epoch="0" ver="4.4.1" rel="slfo.1.1_1.4"/>
  <changelog author="schwab@suse.de" date="1579521600">- Update to make 4.3
  * WARNING: Backward-incompatibility!
    Number signs (#) appearing inside a macro reference or function
    invocation no longer introduce comments and should not be escaped with
    backslashes
  * WARNING: Backward-incompatibility!
    Previously appending using '+=' to an empty variable would result in a
    value starting with a space
  * NOTE: Deprecated behavior.
    Contrary to the documentation, suffix rules with prerequisites are being
    treated BOTH as simple targets AND as pattern rules
  * New feature: Grouped explicit targets
  * New feature: .EXTRA_PREREQS variable
  * Makefiles can now specify the '-j' option in their MAKEFLAGS variable
    and this will cause make to enable that parallelism mode
  * Error messages printed when invoking non-existent commands have been
    cleaned up and made consistent.
  * A new option --no-silent has been added, that cancels the effect of
    the -s/--silent/--quiet flag
  * A new option -E has been added as a short alias for --eval
  * All wildcard expansion within GNU make, including $(wildcard ...),
    will sort the results
  * Performance improvements provided by Paolo Bonzini
    &lt;pbonzini@redhat.com&gt;
- make-sorted-glob.patch, glob-lstat.patch, glob-interface.patch,
  pselect-non-blocking.patch: Removed, upstreamed</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582372800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add fix-57962.patch in order to fix bug #57962.</changelog>
  <changelog author="meissner@suse.com" date="1650369600">- use https urls</changelog>
  <changelog author="schwab@suse.de" date="1660737600">- jobserver-noinherit.patch: Disable inheritance of jobserver FDs for
  recursive make
- jobserver-fifo.patch: Add support for jobserver using named pipes</changelog>
  <changelog author="schwab@suse.de" date="1667217600">- Update to make 4.4
  * WARNING: Future backward-incompatibility!
    In the NEXT release of GNU Make, pattern rules will implement the same
    behavior change for multiple targets as explicit grouped targets
  * WARNING: Backward-incompatibility!
    GNU Make now uses temporary files in more situations than previous releases.
  * WARNING: Backward-incompatibility!
    Previously each target in a explicit grouped target rule was considered
    individually: if the targets needed by the build were not out of date the
    recipe was not run even if other targets in the group were out of date.  Now
    if any of the grouped targets are needed by the build, then if any of the
    grouped targets are out of date the recipe is run and all targets in the
    group are considered updated.
  * WARNING: Backward-incompatibility!
    Previously if --no-print-directory was seen anywhere in the environment or
    command line it would take precedence over any --print-directory.  Now, the
    last setting of directory printing options seen will be used, so a command
    line such as "--no-print-directory -w" _will_ show directory entry/exits.
  * WARNING: Backward-incompatibility!
    Previously the order in which makefiles were remade was not explicitly
    stated, but it was (roughly) the inverse of the order in which they were
    processed by make.  In this release, the order in which makefiles are
    rebuilt is the same order in which make processed them, and this is defined
    to be true in the GNU Make manual.
  * WARNING: Backward-incompatibility!
    Previously only simple (one-letter) options were added to the MAKEFLAGS
    variable that was visible while parsing makefiles.  Now, all options are
    available in MAKEFLAGS.  If you want to check MAKEFLAGS for a one-letter
    option, expanding "$(firstword -$(MAKEFLAGS))" is a reliable way to return
    the set of one-letter options which can be examined via findstring, etc.
  * WARNING: Backward-incompatibility!
    Previously makefile variables marked as export were not exported to commands
    started by the $(shell ...) function.  Now, all exported variables are
    exported to $(shell ...).  If this leads to recursion during expansion, then
    for backward-compatibility the value from the original environment is used.
    To detect this change search for 'shell-export' in the .FEATURES variable.
  * WARNING: New build requirement
    GNU Make utilizes facilities from GNU Gnulib: Gnulib requires certain C99
    features in the C compiler and so these features are required by GNU Make:
    https://www.gnu.org/software/gnulib/manual/html_node/C99-features-assumed.html
    The configure script should verify the compiler has these features.
  * New feature: The .WAIT special target
    If the .WAIT target appears between two prerequisites of a target, then
    GNU Make will wait for all of the targets to the left of .WAIT in the list
    to complete before starting any of the targets to the right of .WAIT.
  * New feature: .NOTPARALLEL accepts prerequisites
    If the .NOTPARALLEL special target has prerequisites then all prerequisites
    of those targets will be run serially (as if .WAIT was specified between
    each prerequisite).
  * New feature: The .NOTINTERMEDIATE special target
    .NOTINTERMEDIATE disables intermediate behavior for specific files, for all
    files built using a pattern, or for the entire makefile.
  * New feature: The $(let ...) function
    This function allows user-defined functions to define a set of local
    variables: values can be assigned to these variables from within the
    user-defined function and they will not impact global variable assignments.
  * New feature: The $(intcmp ...) function
    This function allows conditional evaluation controlled by a numerical
    comparison.
  * New feature: Improved support for -l / --load-average
    On systems that provide /proc/loadavg (Linux), GNU Make will use it to
    determine the number of runnable jobs and use this as the current load,
    avoiding the need for heuristics.
  * New feature: The --shuffle command line option
    This option reorders goals and prerequisites to simulate non-determinism
    that may be seen using parallel build.  Shuffle mode allows a form of "fuzz
    testing" of parallel builds to verify that all prerequisites are correctly
    described in the makefile.
  * New feature: The --jobserver-style command line option and named pipes
    A new jobserver method is used on systems where mkfifo(3) is supported.
  * GNU Make has sometimes chosen unexpected, and sub-optimal, chains of
    implicit rules due to the definition of "ought to exist" in the implicit
    rule search algorithm, which considered any prerequisite mentioned in the
    makefile as "ought to exist".  This algorithm has been modified to prefer
    prerequisites mentioned explicitly in the target being built and only if
    that results in no matching rule, will GNU Make consider prerequisites
    mentioned in other targets as "ought to exist".
  * GNU Make was performing secondary expansion of all targets, even targets
    which didn't need to be considered during the build.  In this release
    only targets which are considered will be secondarily expanded.
  * If the MAKEFLAGS variable is modified in a makefile, it will be re-parsed
    immediately rather than after all makefiles have been read.
  * The -I option accepts an argument "-" (e.g., "-I-") which means "reset the
    list of search directories to empty".
  * New debug option "print" will show the recipe to be run, even when silent
    mode is set, and new debug option "why" will show why a target is rebuilt
    (which prerequisites caused the target to be considered out of date).
  * The existing --trace option is made equivalent to --debug=print,why
  * Target-specific variables can now be marked "unexport".
  * Exporting / unexporting target-specific variables is handled correctly, so
    that the attribute of the most specific variable setting is used.
  * Special targets like .POSIX are detected upon definition, ensuring that any
    change in behavior takes effect immediately, before the next line is parsed.
  * When the pipe-based jobserver is enabled and GNU Make decides it is invoking
    a non-make sub-process and closes the jobserver pipes, it will now add a new
    option to the MAKEFLAGS environment variable that disables the jobserver.
  * A long-standing issue with the directory cache has been resolved: changes
    made as a side-effect of some other target's recipe are now noticed as
    expected.
- jobserver-noinherit.patch, jobserver-fifo.patch: Removed
- test-driver.patch: Removed
- fix-57962.patch: Removed
- make-testcases_timeout.diff: Removed</changelog>
  <changelog author="schwab@suse.de" date="1667390400">- reset-sigpipe.patch: Reset SIGPIPE in children</changelog>
  <changelog author="schwab@suse.de" date="1669032000">- reset-sigpipe.patch: Removed
- sigpipe-fatal.patch: Handle SIGPIPE as a fatal signal</changelog>
  <changelog author="schwab@suse.de" date="1677499200">- Update to make 4.4.1
  * WARNING: Backward-incompatibility!
    In previous releases it was not well-defined when updates to MAKEFLAGS made
    inside a makefile would be visible.  This release ensures they are visible
    immediately, even when invoking $(shell ...) functions.
  * New feature: Parallel builds of archives
    Previously it was not possible to use parallel builds with archives.  It is
    still not possible using the built-in rules, however you can now override
    the built-in rules with a slightly different set of rules and use parallel
    builds with archive creation.
  * Previously target-specific variables would inherit their "export" capability
    from parent target-specific variables even if they were marked private.  Now
    private parent target-specific variables have no affect.
- sigpipe-fatal.patch: removed</changelog>
  <changelog author="fcrozat@suse.com" date="1680782400">- Update license tag, tarball contains GPL-3.0-or-later code.</changelog>
</package>
<package pkgid="87eba7e7de7123702db16bf03e8edee5f7c6603e8a628f0eb5505a0d6a44bd7ed7463f582c1ac44edaa026ca96f064f9c75115cfdcd0a1b2c13eaf17e73dbda0" name="makedumpfile-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.4" rel="slfo.1.1_1.2"/>
  <changelog author="ptesarik@suse.com" date="1638792000">- Non-existent patches must be listed twice to appear as added in a
  unified diff against a version that had them. Only that can make
  factory-auto happy. Here we go:
  * makedumpfile-Retrieve-MAX_PHYSMEM_BITS-from-vmcoreinfo.patch
  * makedumpfile-arm64-Add-support-for-ARMv8.2-LPA-52-bit-PA-su.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1644580800">- Turn on zstd in Tumbleweed.</changelog>
  <changelog author="ptesarik@suse.com" date="1647864000">- makedumpfile-sadump-kaslr-fix-kaslr_offset-calculation.patch:
  sadump, kaslr: fix failure of calculating kaslr_offset
  (bsc#1196736).</changelog>
  <changelog author="info@paolostivanin.com" date="1650456000">- Update to 1.7.1:
  * support for kernel up to 5.17
  * sadump: remove variable length array
  * print error when reading with unsupported compression
- Drop upstreamed makedumpfile-sadump-kaslr-fix-kaslr_offset-calculation.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.7.2:
  * LoongArch64 architecture support
  * Support kernels up to v6.0 (x86_64)</changelog>
  <changelog author="petr@tesarici.cz" date="1682424000">- update to 1.7.3:
  * Support kernels up to v6.3 (x86_64)
  * Support sadump with 5-level paging
- temporarily disable eppic until v5.0 branch can be supported</changelog>
  <changelog author="msuchanek@suse.de" date="1696593600">- Add Support-struct-module_memory-on-Linux-6.4-and-.patch (jsc#PED-4593)
- Add ppc64-do-page-traversal-if-vmemmap_list-not-po.patch (bsc#1215364)
- Re-enable eppic on systems with old enough libeppic</changelog>
  <changelog author="petr@tesarici.cz" date="1700049600">- Update to 1.7.4:
  * Add riscv64 support
  * Support kernels up to v6.6 (x86_64)
- Drop upstreamed patches:
  * ppc64-do-page-traversal-if-vmemmap_list-not-po.patch
  * Support-struct-module_memory-on-Linux-6.4-and-.patch
- Build with a bundled eppic git snapshot.</changelog>
  <changelog author="petr@tesarici.cz" date="1700049601">- Reduce compatibility cruft.</changelog>
  <changelog author="petr@tesarici.cz" date="1700049602">- Enable build for riscv64.</changelog>
</package>
<package pkgid="c28c8955abb3b8a11f583199001276adb15e145b3f8382f4bd03f7b51c8a6d86d081d462b1172abeca79688737830da6570db6f44744538d62c0eb5fcea88b42" name="makedumpfile-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.4" rel="slfo.1.1_1.2"/>
  <changelog author="ptesarik@suse.com" date="1638792000">- Non-existent patches must be listed twice to appear as added in a
  unified diff against a version that had them. Only that can make
  factory-auto happy. Here we go:
  * makedumpfile-Retrieve-MAX_PHYSMEM_BITS-from-vmcoreinfo.patch
  * makedumpfile-arm64-Add-support-for-ARMv8.2-LPA-52-bit-PA-su.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1644580800">- Turn on zstd in Tumbleweed.</changelog>
  <changelog author="ptesarik@suse.com" date="1647864000">- makedumpfile-sadump-kaslr-fix-kaslr_offset-calculation.patch:
  sadump, kaslr: fix failure of calculating kaslr_offset
  (bsc#1196736).</changelog>
  <changelog author="info@paolostivanin.com" date="1650456000">- Update to 1.7.1:
  * support for kernel up to 5.17
  * sadump: remove variable length array
  * print error when reading with unsupported compression
- Drop upstreamed makedumpfile-sadump-kaslr-fix-kaslr_offset-calculation.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.7.2:
  * LoongArch64 architecture support
  * Support kernels up to v6.0 (x86_64)</changelog>
  <changelog author="petr@tesarici.cz" date="1682424000">- update to 1.7.3:
  * Support kernels up to v6.3 (x86_64)
  * Support sadump with 5-level paging
- temporarily disable eppic until v5.0 branch can be supported</changelog>
  <changelog author="msuchanek@suse.de" date="1696593600">- Add Support-struct-module_memory-on-Linux-6.4-and-.patch (jsc#PED-4593)
- Add ppc64-do-page-traversal-if-vmemmap_list-not-po.patch (bsc#1215364)
- Re-enable eppic on systems with old enough libeppic</changelog>
  <changelog author="petr@tesarici.cz" date="1700049600">- Update to 1.7.4:
  * Add riscv64 support
  * Support kernels up to v6.6 (x86_64)
- Drop upstreamed patches:
  * ppc64-do-page-traversal-if-vmemmap_list-not-po.patch
  * Support-struct-module_memory-on-Linux-6.4-and-.patch
- Build with a bundled eppic git snapshot.</changelog>
  <changelog author="petr@tesarici.cz" date="1700049601">- Reduce compatibility cruft.</changelog>
  <changelog author="petr@tesarici.cz" date="1700049602">- Enable build for riscv64.</changelog>
</package>
<package pkgid="2ac22f136f1d88e8d918164dea93e746e20e8651a1321e51a905a08425c17114a0c83b51097b75192c800695a50830816a2e624c3dd59e3982bc43a86d3887b8" name="man-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="slfo.1.1_1.2"/>
  <changelog author="werner@suse.de" date="1660824000">- Update to man-db 2.10.0 (4 February 2022)
  * Manpath deduplication no longer mishandles the case where another entry
    in the manpath is a suffix of a candidate path to append.
  * Fix potential crash in path searching if `getcwd` fails for reasons other
    than running out of memory.
  * Fix crash in `globbing` test tool if run with no non-option arguments.
  * `lexgrog` now produces output in the user's locale.
  * Downgrade "malformed .lf request" warning to a debug message and rephrase
    it somewhat, since `.lf` requests can use `*roff` arithmetic expressions
    and we can't reasonably parse those.
  * Avoid modifying the database without changing its mtime, which had been
    possible since 2.7.0 if `mandb`'s purge phase found work to do but the
    main phase didn't, and which confused some backup systems into reporting
    possible filesystem corruption.
  * `man` no longer inadvertently modifies the `MANSECT` environment variable
    before passing it on to its subprocesses.
  * `mandb` now stores the mtime of link targets as the mtime of their
    corresponding database entries, rather than sometimes storing the mtime
    of the link instead.
  * Since man-db 2.4.2, `man` has behaved as if the `-l` option was given if
    a manual page argument contains a slash.  Since man-db 2.5.6, this has
    interacted slightly poorly with the subpage feature, emitting spurious
    error messages if given multiple manual page arguments some of which
    include a slash.  `man` no longer emits spurious error messages in this
    case.
  * Reduce overhead of `MAN_DISABLE_SECCOMP=1` compared to building without
    `libseccomp`.
  * Document `MAN_DISABLE_SECCOMP` and `PIPELINE_DEBUG` environment variables
    in `man(1)`.
  * Add `man-pages(7)` reference to `man(1)`.
  * Recognize Arabic and Persian translations of the `NAME` section.
  * Delay the `systemd` timer using `RandomizedDelaySec`, so that multiple
    containers/VMs on the same host are less prone to running `mandb` all at
    the same time.
  * Significantly improve `mandb(8)` and `man -K` performance in the common
    case where pages are of moderate size and compressed using `zlib`: `mandb
  - c` goes from 344 seconds to 10 seconds on a test system.
- Remove patch man-db-2.7.1-security4.dif as now upstream creates
  any missing database
- Remove gnulib-ppc64le.patch as gnulib is uptodate even on ppc64le
- Port patches
  * man-db-2.6.3-chinese.dif
  * man-db-2.6.3-listall.dif
  * man-db-2.6.3-man0.dif
  * man-db-2.7.1-zio.dif
  * man-db-2.9.4-alternitive.dif
  * man-db-2.9.4-no-chown.patch
  * man-db-2.9.4.patch
  * reproducible.patch</changelog>
  <changelog author="werner@suse.de" date="1660824001">- Workaround missing groff-full to get refer(1), the bibliographic
  preprocessor found</changelog>
  <changelog author="werner@suse.de" date="1660824002">- Avoid that mandb-symlink-target-timestamp fools us</changelog>
  <changelog author="dmueller@suse.com" date="1661169600">- update to 2.10.2:
  * Regenerating man-db's build system now explicitly requires Automake &gt;=
    1.14.  (This was already the case since at least man-db 2.10.0, but was
    previously undocumented.)
  * Make `man -H` sleep for a few seconds after starting the browser, since
    it may background itself before loading files (Dr. Werner Fink).
  * If an override directory is configured using `--with-override-dir`, it is
    now applied more consistently when building the manpath, and whether a
    page was found in an override directory is considered when sorting
    candidates for display (Mihail Konev).
  * Make the man-db manual build reproducible.
  * Add some hardening options to the `systemd` service.
  * `configure` now has a `--with-snapdir` option, for use on systems where
    `snapd` is configured to use a directory other than `/snap`.
  * Fix occasional `mandb-symlink-target-timestamp` test failure.
  * Fix inadvertent reliance on a GCC extension that caused build failures
    with Clang.
  * Fix building without `iconv`.
- drop man-db-2.7.1-firefox.dif (upstream)</changelog>
  <changelog author="werner@suse.de" date="1661256000">- Corrrect some offsets of patch hunks
- Remove change in get-mtime.c as mandb-symlink-target-timestamp
  now catch the random format changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1680523200">- Add man-propose-online.patch: if patch was not found locally,
  propose to read it online, offering a URL where it could possibly
  be found.</changelog>
  <changelog author="werner@suse.de" date="1685016000">- Remove harden_man-db.service.patch as already done upstream
  at the end of the service file man-db.service</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Update to 2.11.2:
  * Fix compile and test failures when `troff` is not `groff`.
  * Fix segfault in typical uses of `man` when `nroff` is not installed.
  * Fix crash in `mandb` when processing stray cats.
  * SECURITY: Replace `$` characters in page names with `?` when constructing
    `less` prompts.
  * Silence error message when processing an empty manual page hierarchy with
    a nonexistent cache directory.
  * `man(1)` now sorts whatis references below real pages, even if the whatis
    references are from a section with higher priority.
  * `mandb` now correctly records filters in the database if it uses cached
    whatis information.
  * Upgrade Gnulib, fixing syntax error on glibc systems with GCC 11.
  * The `CATWIDTH` configuration file directive now overrides `MINCATWIDTH`
    and `MAXCATWIDTH`.
  * Database entries for links were often incorrectly stored as if they were
    entries for the ultimate source of the page.  They are now stored with
    the correct type.
  * Store links in the database using the section and extension of the link
    rather than of the ultimate source file.
  * Consider pages for adding to the database even if they seem to already
    exist; this performance optimization is no longer needed due to caching,
    and it produced inconsistent results in some unusual cases.
  * `man` now runs any required preprocessors in the same order that `groff`
    does, rather than trusting the order of filters in a page's preprocessor
    string.
  * Fix building on MinGW.  (I haven't been able to test this; help from
    MinGW experts would be welcome.)
  Improvements:
  * Check for stray cats even if no manual pages in a given manpath were
    changed.
  * Add section `3type` to the default section list just after `2`.  This is
    used by the Linux man-pages package.
  * Recognize more Hungarian translations of the `NAME` section.
  * Add more recognized case variants for localized versions of the `NAME`
    section.
  * Maintain multi keys in sorted order, improving database reproducibility.
  * Pick a more consistent name for the target of a whatis entry in the
    database.
  * Extend rules for when to replace one database entry with another,
    producing more stable behaviour.
  * Fully reorganize databases after writing them, allowing the reproduction
    of bitwise-identical databases regardless of scan order (at least with
    GDBM).
- Port patches
  * man-db-2.6.3-chinese.dif
  * man-db-2.6.3-listall.dif
  * man-db-2.7.1-zio.dif
  * man-db-2.9.4-alternitive.dif
  * man-db-2.9.4-no-chown.patch
  * man-db-2.9.4.patch
  * man-propose-online.patch</changelog>
  <changelog author="avinesh.kumar@suse.com" date="1693051200">- Fix the content in patch file man-propose-online.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1694174400">- Add man-db-groff-1.23.0-warnings.patch
  * Fix build errors with groff 1.23.0</changelog>
</package>
<package pkgid="a6074d9f18a5e183eee2b57c6200341d49537a19bada18d1fd8a250dcb9ac883079e5dab66711bf1394ca1c749cb52d7283cf0fc214f85cb04187b250ba92b60" name="man-debugsource" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="slfo.1.1_1.2"/>
  <changelog author="werner@suse.de" date="1660824000">- Update to man-db 2.10.0 (4 February 2022)
  * Manpath deduplication no longer mishandles the case where another entry
    in the manpath is a suffix of a candidate path to append.
  * Fix potential crash in path searching if `getcwd` fails for reasons other
    than running out of memory.
  * Fix crash in `globbing` test tool if run with no non-option arguments.
  * `lexgrog` now produces output in the user's locale.
  * Downgrade "malformed .lf request" warning to a debug message and rephrase
    it somewhat, since `.lf` requests can use `*roff` arithmetic expressions
    and we can't reasonably parse those.
  * Avoid modifying the database without changing its mtime, which had been
    possible since 2.7.0 if `mandb`'s purge phase found work to do but the
    main phase didn't, and which confused some backup systems into reporting
    possible filesystem corruption.
  * `man` no longer inadvertently modifies the `MANSECT` environment variable
    before passing it on to its subprocesses.
  * `mandb` now stores the mtime of link targets as the mtime of their
    corresponding database entries, rather than sometimes storing the mtime
    of the link instead.
  * Since man-db 2.4.2, `man` has behaved as if the `-l` option was given if
    a manual page argument contains a slash.  Since man-db 2.5.6, this has
    interacted slightly poorly with the subpage feature, emitting spurious
    error messages if given multiple manual page arguments some of which
    include a slash.  `man` no longer emits spurious error messages in this
    case.
  * Reduce overhead of `MAN_DISABLE_SECCOMP=1` compared to building without
    `libseccomp`.
  * Document `MAN_DISABLE_SECCOMP` and `PIPELINE_DEBUG` environment variables
    in `man(1)`.
  * Add `man-pages(7)` reference to `man(1)`.
  * Recognize Arabic and Persian translations of the `NAME` section.
  * Delay the `systemd` timer using `RandomizedDelaySec`, so that multiple
    containers/VMs on the same host are less prone to running `mandb` all at
    the same time.
  * Significantly improve `mandb(8)` and `man -K` performance in the common
    case where pages are of moderate size and compressed using `zlib`: `mandb
  - c` goes from 344 seconds to 10 seconds on a test system.
- Remove patch man-db-2.7.1-security4.dif as now upstream creates
  any missing database
- Remove gnulib-ppc64le.patch as gnulib is uptodate even on ppc64le
- Port patches
  * man-db-2.6.3-chinese.dif
  * man-db-2.6.3-listall.dif
  * man-db-2.6.3-man0.dif
  * man-db-2.7.1-zio.dif
  * man-db-2.9.4-alternitive.dif
  * man-db-2.9.4-no-chown.patch
  * man-db-2.9.4.patch
  * reproducible.patch</changelog>
  <changelog author="werner@suse.de" date="1660824001">- Workaround missing groff-full to get refer(1), the bibliographic
  preprocessor found</changelog>
  <changelog author="werner@suse.de" date="1660824002">- Avoid that mandb-symlink-target-timestamp fools us</changelog>
  <changelog author="dmueller@suse.com" date="1661169600">- update to 2.10.2:
  * Regenerating man-db's build system now explicitly requires Automake &gt;=
    1.14.  (This was already the case since at least man-db 2.10.0, but was
    previously undocumented.)
  * Make `man -H` sleep for a few seconds after starting the browser, since
    it may background itself before loading files (Dr. Werner Fink).
  * If an override directory is configured using `--with-override-dir`, it is
    now applied more consistently when building the manpath, and whether a
    page was found in an override directory is considered when sorting
    candidates for display (Mihail Konev).
  * Make the man-db manual build reproducible.
  * Add some hardening options to the `systemd` service.
  * `configure` now has a `--with-snapdir` option, for use on systems where
    `snapd` is configured to use a directory other than `/snap`.
  * Fix occasional `mandb-symlink-target-timestamp` test failure.
  * Fix inadvertent reliance on a GCC extension that caused build failures
    with Clang.
  * Fix building without `iconv`.
- drop man-db-2.7.1-firefox.dif (upstream)</changelog>
  <changelog author="werner@suse.de" date="1661256000">- Corrrect some offsets of patch hunks
- Remove change in get-mtime.c as mandb-symlink-target-timestamp
  now catch the random format changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1680523200">- Add man-propose-online.patch: if patch was not found locally,
  propose to read it online, offering a URL where it could possibly
  be found.</changelog>
  <changelog author="werner@suse.de" date="1685016000">- Remove harden_man-db.service.patch as already done upstream
  at the end of the service file man-db.service</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Update to 2.11.2:
  * Fix compile and test failures when `troff` is not `groff`.
  * Fix segfault in typical uses of `man` when `nroff` is not installed.
  * Fix crash in `mandb` when processing stray cats.
  * SECURITY: Replace `$` characters in page names with `?` when constructing
    `less` prompts.
  * Silence error message when processing an empty manual page hierarchy with
    a nonexistent cache directory.
  * `man(1)` now sorts whatis references below real pages, even if the whatis
    references are from a section with higher priority.
  * `mandb` now correctly records filters in the database if it uses cached
    whatis information.
  * Upgrade Gnulib, fixing syntax error on glibc systems with GCC 11.
  * The `CATWIDTH` configuration file directive now overrides `MINCATWIDTH`
    and `MAXCATWIDTH`.
  * Database entries for links were often incorrectly stored as if they were
    entries for the ultimate source of the page.  They are now stored with
    the correct type.
  * Store links in the database using the section and extension of the link
    rather than of the ultimate source file.
  * Consider pages for adding to the database even if they seem to already
    exist; this performance optimization is no longer needed due to caching,
    and it produced inconsistent results in some unusual cases.
  * `man` now runs any required preprocessors in the same order that `groff`
    does, rather than trusting the order of filters in a page's preprocessor
    string.
  * Fix building on MinGW.  (I haven't been able to test this; help from
    MinGW experts would be welcome.)
  Improvements:
  * Check for stray cats even if no manual pages in a given manpath were
    changed.
  * Add section `3type` to the default section list just after `2`.  This is
    used by the Linux man-pages package.
  * Recognize more Hungarian translations of the `NAME` section.
  * Add more recognized case variants for localized versions of the `NAME`
    section.
  * Maintain multi keys in sorted order, improving database reproducibility.
  * Pick a more consistent name for the target of a whatis entry in the
    database.
  * Extend rules for when to replace one database entry with another,
    producing more stable behaviour.
  * Fully reorganize databases after writing them, allowing the reproduction
    of bitwise-identical databases regardless of scan order (at least with
    GDBM).
- Port patches
  * man-db-2.6.3-chinese.dif
  * man-db-2.6.3-listall.dif
  * man-db-2.7.1-zio.dif
  * man-db-2.9.4-alternitive.dif
  * man-db-2.9.4-no-chown.patch
  * man-db-2.9.4.patch
  * man-propose-online.patch</changelog>
  <changelog author="avinesh.kumar@suse.com" date="1693051200">- Fix the content in patch file man-propose-online.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1694174400">- Add man-db-groff-1.23.0-warnings.patch
  * Fix build errors with groff 1.23.0</changelog>
</package>
<package pkgid="9112d39e0d5391eb855506123c4e52dfa5c06ad414e2b978bfb2da2a4ba0333c0b22a01968a1387daa886129e0923484e2be5fedd3776906fba93825b0c72f8a" name="mandoc-bin-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.6" rel="slfo.1.1_1.2"/>
  <changelog author="mcepl@suse.com" date="1552219200">- This package is meant as an alternative lightweight replacement
  for man-pages package. It does not have that many dependencies,
  it is written in C, see http://mandoc.bsd.lv/ for more.
- Update to the 1.14.5 release proper:
  * The apropos(1) utility now accepts case-insensitive extended
    regular expressions by default, improving POSIX compliance
    (thanks to Wolfram Schneider for the suggestion).
  * The new man(1) -O tag[=term] output option opens a page at the
    definition of a term (thanks to Klemens Nanni for the suggestion).
  * The output from tbl(7) has been significantly improved in both
    the HTML and the UTF-8 output modes (thanks to Pali Rohar for
    many reports and suggestions).
  * Several syntax errors have been fixed in HTML output and the
    HTML output code quality has been further improved, in particular
    with respect to paragraphs, tagged lists, and tooltips
    (thanks to John Gardner for significant help).
  * Low-level roff(7) support has been further improved such that
    mandoc can now handle the manual pages of the groff package.
  * Many bugs have been fixed.</changelog>
  <changelog author="mcepl@suse.com" date="1576497600">- Add %{_sbindir}/makewhatis to the alternatives mechanism to
  avoid conflict with the mandoc package.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- update-alternatives --remove must be in %postun
- own mandoc.db
- add file triggers to update mandoc.db</changelog>
  <changelog author="lnussel@suse.de" date="1578657600">- get rid of alternatives altogether, just conflict (boo#1160568)</changelog>
  <changelog author="mcepl@suse.com" date="1580472000">- Conflict also groff-full</changelog>
  <changelog author="mcepl@suse.com" date="1581336000">- Add 1.14.5-master.patch containing among many other things fix
  allowing running ``man -w`` to get manpath.
  (gh#neovim/neovim#11794)</changelog>
  <changelog author="lnussel@suse.de" date="1600776000">- fix build fail (mandoc-1.14.5-dummy.diff)
- switch to using rpm.execute() as rpm 4.15 is now available
- tweak trigger scripts to handle missing files better (boo#1176194)
  There is no perfect solution though
  https://github.com/rpm-software-management/rpm/issues/1370
- make triggers more verbose if VERBOSE_FILETRIGGERS is set</changelog>
  <changelog author="mcepl@suse.com" date="1632484800">- Update to 1.14.6:
  - -- MAJOR NEW FEATURES ---
  * mdoc(7): automatic tagging improved in many respects
  * mdoc(7): new .Tg (tag) macro to explicitly mark a place as
  defining a term
  * man(7): implement some automatic tagging support
  * man(1): let -w without argument show the manpath, like in
  man-db and man-1.6
  * -T html: wrap text and phrasing elements in paragraphs unless
  already contained in flow containers; never put them directly
  into sections. This helps to format paragraphs with the CSS
  class selector .Pp.
  * man.conf(5): remove support for the "_whatdb" configuration directive
  that was deprecated in 2015; please use "manpath" instead
  - -- MINOR NEW FEATURES ---
  * man(1): switch the default pager from "more -s" to "less"
  * man(1): in the fallback code to look for manual pages without using
  mandoc.db(5), accept files "man&lt;one-digit-section&gt;/&lt;name&gt;.&lt;full-section&gt;"
  in addition to the already supported "man&lt;full-section&gt;/name.[01-9]*"
  * if messages are shown and output is printed without a pager, display
  a heads-up on stderr at the end because otherwise, users may easily
  miss the messages
  * man.cgi(8): add a Content-Security-Policy HTTP header
  * man.cgi(8): switch off autocomplete and autocapitalize
  * mandoc.css: support prefers-color-scheme: dark
  * -T html: add meta viewport element to help mobile devices
  * -T html -O tag: let this pass a file:// URI to the pager
  * tbl(7): implement the "nospaces" option
  * tbl(7) -T html: implement the "a" (em indent) layout specification
  * tbl(7) -T html: implement the "b" (bold) and "i" (italic) layout modifiers
  * tbl(7): support two-character font names in the layout font modifier
  * tbl(7) -T html: support horinzontal rulers in individual cells
  * tbl(7) -T tree: print more details about columns, options, rows, and cells
  * roff(7): implement the .break request (break out of a .while loop)
  * roff(7): support the CB and CI fonts in \f and .ft
  * -T lint: new STYLE message if a file name extension contradicts .Dt/.TH
  * -T lint: new STYLE message about overlong text lines
  * -W style: check .Xr links along the full manpath
  - -- RELIABILITY BUGFIXES ---
  * man(1): do not segfault if /tmp/ is not writeable
  * man(1): do not access a NULL pointer when both -l and -w are given
  * makewhatis(8): do not crash when a manpath directory contains
  a symbolic link that points to a directory
  * man(7): fix an assertion failure caused by doubly nested next-line scopes
  * tbl(7): fix a crash when the last column is only reached by spans
  * tbl(7): fix a NULL pointer access in some cases of two spans on one row
  * tbl(7) -T ascii: fix a NULL pointer access on empty data cells
  * tbl(7) -T ascii: fix a NULL pointer access on a line next to a short row
  * tbl(7): fix an assertion failure caused by excessive spacing modifiers
  * tbl(7): fix an infinite loop for some overlapping horizontal spans
  * roff(7): fix a rare case of writing one byte past the end of the input buffer
  * roff(7): do not call abort(3) when \*[.T] is encountered
  * roff(7): fix an assertion failure caused by a macro inside .ce .if
  * roff(7): fix assertion failures for .ti and .po with excessive arguments
  * roff(7): avoid near-infinte output for .ce inside explicit no-fill mode
  * -T ascii/utf8: fix assertion failures caused by excessive spacing
  * -T html: fix an assertion failure caused by .ft in rare situations
  * -T man: fix an assertion failure caused by tbl(7) and eqn(7) input
  - -- PORTABILITY IMPROVEMENTS ---
  * rename HOMEBREWDIR to READ_ALLOWED_PATH, allow it to contain more than
  one directory, and explain how to use that for NixOS and GNU Guix Linux
  * configure: stop trying to ask make(1) what the default compiler is
  because that test was too fragile; just use "cc" by default
  * configure: various simplifications and improved robustness
  * configure: only compile compat_*.c implementations that are needed
  * configure: provide feature tests for __attribute__(()) and mkstemps(3)
  * compat_*: sync with upstreams for security, functionality, and style
  * in regress.pl, avoid the non-portable options sed(1) -i and echo(1) -n
  * in the regression suite, avoid file names that differ only by case
  - -- MINOR FUNCTIONAL IMPROVEMENTS ---
  * man(1) -h: for pages lacking a SYNOPSIS, show the NAME section
  * man(1): when the first argument starts with a digit, optionally
  followed by a letter, and at least one more argument follows,
  interpret the first argument as a section name even when additional
  characters follow after the digit and letter
  * man(1): with a specific section requested, try harder to find
  the best match; use this order of preference:
  1. The section in both the directory name and the file name matches exactly.
  2. The section in the file name matches exactly.
  3. The section in the directory name matches exactly.
  4. Neither of them matches exactly.
  * man(1): if no tags were generated at all, unlink(2) the empty tags file
  as soon as the condition can be detected and do not pass it to less(1)
  * makewhatis(8): handle both dangling symlinks and .so links
  in manual page directories more gracefully
  * man.cgi(8): for invalid queries and for valid queries returning
  no result, return the appropriate 40x status code rather than 200
  * mdoc(7): let .Dd concatenate all arguments and default to the empty string
  * mdoc(7): convert ".Fl Fl" to ".Fl \-" during validation, improving -T html
  * mdoc(7): improve output of .At 32v
  * man(7): no longer print multiple blank lines before NAME and page footer
  * tbl(7) -T utf8: improved rendering of horizontal lines
  * tbl(7) -T html: in "n" cells, align by padding numbers on the right
  * tbl(7): no longer leak tabulator settings to subsequent roff(7) code
  * mdoc(7) -T html: for .Bl -tag, use "column-count: 1" rather
  than "overflow: auto" to avoid the ugly side effects
  * mdoc(7) -T html: render .Bd -unfilled in proportionally-spaced font
  * mdoc(7) -T html: format .Nd with &lt;span&gt; rather than &lt;div&gt;
  * mdoc(7) -T lint: do not warn about Mdocdate without an actual date
  * mdoc(7) -T lint: do not complain about function types of the
  form "ret_type (fname)(args)", but otherwise check names more strictly
  * -T html: append .html suffix to temporary files to please browsers
  * -T markdown: print a BAGARG message if called on man(7) input
  - -- MINOR BUGFIXES ---
  * man(1): do the search for each name independently, and
  show the results in the order of the command line argument
  * man(1): escape shell wildcard characters in name arguments before glob(3)
  * man(1): when asking for a single manual page by name, prefer file name
  matches over .Dt/.TH matches over first NAME matches over later NAME
  matches, but do not change the ordering for apropos(1) nor for man -a
  * man(1): correctly extract the section name from the file name extension
  of gzipped manual page files
  * makewhatis(8): fix file type tests putting wrong data into mandoc.db(5)
  * man.cgi(8): fix section number in the &lt;title&gt; element for preformatted pages
  * tbl(7): correct handling of T&amp; after horizontal rulers in the layout
  * tbl(7): correct column widths if rows have different numbers of cells
  * tbl(7): empty columns are 1n wide rather than 0n
  * tbl(7): correctly calculate required column widths for tables containing
  cells that horizontally span columns which contains "n" (number) formatted
  cells on other rows
  * tbl(7): skip escape sequences when looking for column separators
  * eqn(7): skip whitespace before tokens
  * roff(7): when calling an empty macro, do not clobber existing arguments
  * roff(7): recognize \} on lines closing a macro definition request
  * roff(7): do not throw a bogus warning for "'br\}" and similar lines
  * roff(7): stop generating comment nodes when encountering the first content
  * mandoc_char(7): make \0 (digit-width space) non-breaking
  * mdoc(7) .Bl -column: parse Macro in .It "word&lt;tab&gt;word" Ta word Macro&lt;eol&gt;
  * mdoc(7) -T html: display straight quotes, not curly quotes, for .Qq/.Qo
  * -T html: remove some spurious line breaks, in particular inside &lt;pre&gt;
  * -T html: use &lt;br/&gt; for a space character at the beginning of an input line
  * -T html: use ~%d for ordinal fragment suffixes, reserve '~' for that purpose
  - -- STRUCTURAL IMPROVEMENTS ---
  * introduce the concept of semantically transparent syntax tree nodes,
  allowing improved decisions in various validators and formatters
  * move some code out of the giant main() into separate functions
  doing one well-defined task each
  * clearly separate parser state (struct curparse) and formatter state
  (struct outstate), don't mix them in the same struct
  * in the HTML formatter, assert(3) that no HTML nesting violation occurs
  * let html_close_paragraph() close any phrasing context
  - -- THANKS TO ---
  * Anthony Bentley and Klemens Nanni (OpenBSD) for many patches and bug
  reports, for useful discussions, and for checking patches
  * Anton Lindqvist (OpenBSD) for two patches and a bug report
  * Marc Espie (OpenBSD) for a patch, many bug reports, and useful discussions
  * Lukas Epple (NixOS) for a patch, bug reports, suggesting a minor
  portability feature, checking patches, and extensive release testing
  * Abel Romero Perez for a patch, a bug report, and suggesting a new feature
  * nabijaczleweli for a patch and for suggesting feature improvements
  * Jonathan Gray (OpenBSD) for a patch and for bug reports
  * Otto Moerbeek (OpenBSD) and Alexander Gromnitsky for a patch
  * Armin Besirovic for a contribution to mandoc.css
  * Jason McIntyre (OpenBSD) for manual page patches, suggesting a new feature,
  checking many patches, and useful discussions
  * Martin Vahlensieck for a manual page patch and reporting a code style issue
  * Frederic Cambus and Ian Sutton (OpenBSD) for a manual page patch
  * Jan Schreiber for many bug reports found with afl(1)
  * G. Branden Robinson (GNU troff) for several bug reports, feature
  suggestions, and for checking many groff patches
  * Michael Stapelberg (Debian) for several bug reports and feature
  suggestions, and for extensive release testing
  * Ian Ropers, Lorenzo Beretta, and Oliver Corff for several bug reports
  and feature suggestions
  * Stephen Gregoratto for several bug reports
  * Theo de Raadt (OpenBSD) for two bug reports, checking a patch,
  and a useful discussion
  * Thomas Klausner (NetBSD) for two bug reports and for release testing
  * Andreas Kahari and Jason A. Donenfeld for two bug reports
  * Soeren Tempel (Alpine Linux) for a bug report, suggesting a feature
  improvement, and checking two patches
  * Aman Verma, Jan Stary, and John Gardner for a bug report
  and for suggesting a feature impovement
  * Todd Miller (OpenBSD) for a bug report, checking a patch,
  and a useful discussion
  * Andrew Fresh, Brian Callahan, Christian Weisgerber, Paul de Weerd (OpenBSD),
  Havard Eidnes, Jason Thorpe (NetBSD), Yuri Pankov (FreeBSD),
  Bjarni Ingi Gislason, Chris Bennett, Edgar Pettijohn, Eldred Habert,
  Jamie Landeg-Jones, Kazuo KUROI, and Wynn Wolf Arbor for a bug report
  * Theo Buehler (OpenBSD) for suggesting two feature impovements
  and for checking a patch
  * Leah Neukirchen (Void Linux) for suggesting a feature impovement
  and for release testing
  * Colin Watson (Debian) for suggesting a feature impovement
  and for checking groff patches
  * Matej Cepl (SUSE Linux), Matthew Martin, Steffen Nurpmeso,
  and Tim Baumgard for suggesting a feature impovement
  * Christos Zoulas (NetBSD) for a report regarding portability
  * Daniel Dickman (OpenBSD) for suggesting a portability improvement
  * Werner Lemberg (GNU troff) and Douglas McIlroy
  for reporting bugs in manual pages
  * Baptiste Daroussin and Eygene Ryabinkin (FreeBSD)
  for an additional regression test
  * Michal Nowak for reporting several code style issues
  * TJ Townsend (OpenBSD) for help with CSS
  * Sevan Janiyan (NetBSD) and Robert Mustacchi (Illumos)
  for extensive release testing
  * Job Snijders, Kinichiro INOGUCHI, and Martijn van Duren (OpenBSD)
  for checking patches
  * Bertrand Garrigues and Ralph Corderoy (GNU troff) for checking groff patches
- Deleted upstreamed patches:
  - 1.14.5-master.patch
  - mandoc-1.14.5-dummy.diff</changelog>
  <changelog author="kukuk@suse.com" date="1646913600">- Add build dependency for less to match behavior described in the
  manual page.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669982400">- Split mandoc into a bin subpackage: tools like rpm2docserv rely
  on mandoc to render the html pages, but they might be also wanted
  on systems that do not want to replace the entire man
  infrastructure.</changelog>
</package>
<package pkgid="fb1eff107230b83bdbecf17a6adc34e3c03c7e91586a8426f9ce99abbd0880e57c7173243ace3f261b064bcbe255d5bb43de9fa0acf6ec877c00f3fa1b34b0e8" name="mandoc-debugsource" arch="aarch64">
  <version epoch="0" ver="1.14.6" rel="slfo.1.1_1.2"/>
  <changelog author="mcepl@suse.com" date="1552219200">- This package is meant as an alternative lightweight replacement
  for man-pages package. It does not have that many dependencies,
  it is written in C, see http://mandoc.bsd.lv/ for more.
- Update to the 1.14.5 release proper:
  * The apropos(1) utility now accepts case-insensitive extended
    regular expressions by default, improving POSIX compliance
    (thanks to Wolfram Schneider for the suggestion).
  * The new man(1) -O tag[=term] output option opens a page at the
    definition of a term (thanks to Klemens Nanni for the suggestion).
  * The output from tbl(7) has been significantly improved in both
    the HTML and the UTF-8 output modes (thanks to Pali Rohar for
    many reports and suggestions).
  * Several syntax errors have been fixed in HTML output and the
    HTML output code quality has been further improved, in particular
    with respect to paragraphs, tagged lists, and tooltips
    (thanks to John Gardner for significant help).
  * Low-level roff(7) support has been further improved such that
    mandoc can now handle the manual pages of the groff package.
  * Many bugs have been fixed.</changelog>
  <changelog author="mcepl@suse.com" date="1576497600">- Add %{_sbindir}/makewhatis to the alternatives mechanism to
  avoid conflict with the mandoc package.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- update-alternatives --remove must be in %postun
- own mandoc.db
- add file triggers to update mandoc.db</changelog>
  <changelog author="lnussel@suse.de" date="1578657600">- get rid of alternatives altogether, just conflict (boo#1160568)</changelog>
  <changelog author="mcepl@suse.com" date="1580472000">- Conflict also groff-full</changelog>
  <changelog author="mcepl@suse.com" date="1581336000">- Add 1.14.5-master.patch containing among many other things fix
  allowing running ``man -w`` to get manpath.
  (gh#neovim/neovim#11794)</changelog>
  <changelog author="lnussel@suse.de" date="1600776000">- fix build fail (mandoc-1.14.5-dummy.diff)
- switch to using rpm.execute() as rpm 4.15 is now available
- tweak trigger scripts to handle missing files better (boo#1176194)
  There is no perfect solution though
  https://github.com/rpm-software-management/rpm/issues/1370
- make triggers more verbose if VERBOSE_FILETRIGGERS is set</changelog>
  <changelog author="mcepl@suse.com" date="1632484800">- Update to 1.14.6:
  - -- MAJOR NEW FEATURES ---
  * mdoc(7): automatic tagging improved in many respects
  * mdoc(7): new .Tg (tag) macro to explicitly mark a place as
  defining a term
  * man(7): implement some automatic tagging support
  * man(1): let -w without argument show the manpath, like in
  man-db and man-1.6
  * -T html: wrap text and phrasing elements in paragraphs unless
  already contained in flow containers; never put them directly
  into sections. This helps to format paragraphs with the CSS
  class selector .Pp.
  * man.conf(5): remove support for the "_whatdb" configuration directive
  that was deprecated in 2015; please use "manpath" instead
  - -- MINOR NEW FEATURES ---
  * man(1): switch the default pager from "more -s" to "less"
  * man(1): in the fallback code to look for manual pages without using
  mandoc.db(5), accept files "man&lt;one-digit-section&gt;/&lt;name&gt;.&lt;full-section&gt;"
  in addition to the already supported "man&lt;full-section&gt;/name.[01-9]*"
  * if messages are shown and output is printed without a pager, display
  a heads-up on stderr at the end because otherwise, users may easily
  miss the messages
  * man.cgi(8): add a Content-Security-Policy HTTP header
  * man.cgi(8): switch off autocomplete and autocapitalize
  * mandoc.css: support prefers-color-scheme: dark
  * -T html: add meta viewport element to help mobile devices
  * -T html -O tag: let this pass a file:// URI to the pager
  * tbl(7): implement the "nospaces" option
  * tbl(7) -T html: implement the "a" (em indent) layout specification
  * tbl(7) -T html: implement the "b" (bold) and "i" (italic) layout modifiers
  * tbl(7): support two-character font names in the layout font modifier
  * tbl(7) -T html: support horinzontal rulers in individual cells
  * tbl(7) -T tree: print more details about columns, options, rows, and cells
  * roff(7): implement the .break request (break out of a .while loop)
  * roff(7): support the CB and CI fonts in \f and .ft
  * -T lint: new STYLE message if a file name extension contradicts .Dt/.TH
  * -T lint: new STYLE message about overlong text lines
  * -W style: check .Xr links along the full manpath
  - -- RELIABILITY BUGFIXES ---
  * man(1): do not segfault if /tmp/ is not writeable
  * man(1): do not access a NULL pointer when both -l and -w are given
  * makewhatis(8): do not crash when a manpath directory contains
  a symbolic link that points to a directory
  * man(7): fix an assertion failure caused by doubly nested next-line scopes
  * tbl(7): fix a crash when the last column is only reached by spans
  * tbl(7): fix a NULL pointer access in some cases of two spans on one row
  * tbl(7) -T ascii: fix a NULL pointer access on empty data cells
  * tbl(7) -T ascii: fix a NULL pointer access on a line next to a short row
  * tbl(7): fix an assertion failure caused by excessive spacing modifiers
  * tbl(7): fix an infinite loop for some overlapping horizontal spans
  * roff(7): fix a rare case of writing one byte past the end of the input buffer
  * roff(7): do not call abort(3) when \*[.T] is encountered
  * roff(7): fix an assertion failure caused by a macro inside .ce .if
  * roff(7): fix assertion failures for .ti and .po with excessive arguments
  * roff(7): avoid near-infinte output for .ce inside explicit no-fill mode
  * -T ascii/utf8: fix assertion failures caused by excessive spacing
  * -T html: fix an assertion failure caused by .ft in rare situations
  * -T man: fix an assertion failure caused by tbl(7) and eqn(7) input
  - -- PORTABILITY IMPROVEMENTS ---
  * rename HOMEBREWDIR to READ_ALLOWED_PATH, allow it to contain more than
  one directory, and explain how to use that for NixOS and GNU Guix Linux
  * configure: stop trying to ask make(1) what the default compiler is
  because that test was too fragile; just use "cc" by default
  * configure: various simplifications and improved robustness
  * configure: only compile compat_*.c implementations that are needed
  * configure: provide feature tests for __attribute__(()) and mkstemps(3)
  * compat_*: sync with upstreams for security, functionality, and style
  * in regress.pl, avoid the non-portable options sed(1) -i and echo(1) -n
  * in the regression suite, avoid file names that differ only by case
  - -- MINOR FUNCTIONAL IMPROVEMENTS ---
  * man(1) -h: for pages lacking a SYNOPSIS, show the NAME section
  * man(1): when the first argument starts with a digit, optionally
  followed by a letter, and at least one more argument follows,
  interpret the first argument as a section name even when additional
  characters follow after the digit and letter
  * man(1): with a specific section requested, try harder to find
  the best match; use this order of preference:
  1. The section in both the directory name and the file name matches exactly.
  2. The section in the file name matches exactly.
  3. The section in the directory name matches exactly.
  4. Neither of them matches exactly.
  * man(1): if no tags were generated at all, unlink(2) the empty tags file
  as soon as the condition can be detected and do not pass it to less(1)
  * makewhatis(8): handle both dangling symlinks and .so links
  in manual page directories more gracefully
  * man.cgi(8): for invalid queries and for valid queries returning
  no result, return the appropriate 40x status code rather than 200
  * mdoc(7): let .Dd concatenate all arguments and default to the empty string
  * mdoc(7): convert ".Fl Fl" to ".Fl \-" during validation, improving -T html
  * mdoc(7): improve output of .At 32v
  * man(7): no longer print multiple blank lines before NAME and page footer
  * tbl(7) -T utf8: improved rendering of horizontal lines
  * tbl(7) -T html: in "n" cells, align by padding numbers on the right
  * tbl(7): no longer leak tabulator settings to subsequent roff(7) code
  * mdoc(7) -T html: for .Bl -tag, use "column-count: 1" rather
  than "overflow: auto" to avoid the ugly side effects
  * mdoc(7) -T html: render .Bd -unfilled in proportionally-spaced font
  * mdoc(7) -T html: format .Nd with &lt;span&gt; rather than &lt;div&gt;
  * mdoc(7) -T lint: do not warn about Mdocdate without an actual date
  * mdoc(7) -T lint: do not complain about function types of the
  form "ret_type (fname)(args)", but otherwise check names more strictly
  * -T html: append .html suffix to temporary files to please browsers
  * -T markdown: print a BAGARG message if called on man(7) input
  - -- MINOR BUGFIXES ---
  * man(1): do the search for each name independently, and
  show the results in the order of the command line argument
  * man(1): escape shell wildcard characters in name arguments before glob(3)
  * man(1): when asking for a single manual page by name, prefer file name
  matches over .Dt/.TH matches over first NAME matches over later NAME
  matches, but do not change the ordering for apropos(1) nor for man -a
  * man(1): correctly extract the section name from the file name extension
  of gzipped manual page files
  * makewhatis(8): fix file type tests putting wrong data into mandoc.db(5)
  * man.cgi(8): fix section number in the &lt;title&gt; element for preformatted pages
  * tbl(7): correct handling of T&amp; after horizontal rulers in the layout
  * tbl(7): correct column widths if rows have different numbers of cells
  * tbl(7): empty columns are 1n wide rather than 0n
  * tbl(7): correctly calculate required column widths for tables containing
  cells that horizontally span columns which contains "n" (number) formatted
  cells on other rows
  * tbl(7): skip escape sequences when looking for column separators
  * eqn(7): skip whitespace before tokens
  * roff(7): when calling an empty macro, do not clobber existing arguments
  * roff(7): recognize \} on lines closing a macro definition request
  * roff(7): do not throw a bogus warning for "'br\}" and similar lines
  * roff(7): stop generating comment nodes when encountering the first content
  * mandoc_char(7): make \0 (digit-width space) non-breaking
  * mdoc(7) .Bl -column: parse Macro in .It "word&lt;tab&gt;word" Ta word Macro&lt;eol&gt;
  * mdoc(7) -T html: display straight quotes, not curly quotes, for .Qq/.Qo
  * -T html: remove some spurious line breaks, in particular inside &lt;pre&gt;
  * -T html: use &lt;br/&gt; for a space character at the beginning of an input line
  * -T html: use ~%d for ordinal fragment suffixes, reserve '~' for that purpose
  - -- STRUCTURAL IMPROVEMENTS ---
  * introduce the concept of semantically transparent syntax tree nodes,
  allowing improved decisions in various validators and formatters
  * move some code out of the giant main() into separate functions
  doing one well-defined task each
  * clearly separate parser state (struct curparse) and formatter state
  (struct outstate), don't mix them in the same struct
  * in the HTML formatter, assert(3) that no HTML nesting violation occurs
  * let html_close_paragraph() close any phrasing context
  - -- THANKS TO ---
  * Anthony Bentley and Klemens Nanni (OpenBSD) for many patches and bug
  reports, for useful discussions, and for checking patches
  * Anton Lindqvist (OpenBSD) for two patches and a bug report
  * Marc Espie (OpenBSD) for a patch, many bug reports, and useful discussions
  * Lukas Epple (NixOS) for a patch, bug reports, suggesting a minor
  portability feature, checking patches, and extensive release testing
  * Abel Romero Perez for a patch, a bug report, and suggesting a new feature
  * nabijaczleweli for a patch and for suggesting feature improvements
  * Jonathan Gray (OpenBSD) for a patch and for bug reports
  * Otto Moerbeek (OpenBSD) and Alexander Gromnitsky for a patch
  * Armin Besirovic for a contribution to mandoc.css
  * Jason McIntyre (OpenBSD) for manual page patches, suggesting a new feature,
  checking many patches, and useful discussions
  * Martin Vahlensieck for a manual page patch and reporting a code style issue
  * Frederic Cambus and Ian Sutton (OpenBSD) for a manual page patch
  * Jan Schreiber for many bug reports found with afl(1)
  * G. Branden Robinson (GNU troff) for several bug reports, feature
  suggestions, and for checking many groff patches
  * Michael Stapelberg (Debian) for several bug reports and feature
  suggestions, and for extensive release testing
  * Ian Ropers, Lorenzo Beretta, and Oliver Corff for several bug reports
  and feature suggestions
  * Stephen Gregoratto for several bug reports
  * Theo de Raadt (OpenBSD) for two bug reports, checking a patch,
  and a useful discussion
  * Thomas Klausner (NetBSD) for two bug reports and for release testing
  * Andreas Kahari and Jason A. Donenfeld for two bug reports
  * Soeren Tempel (Alpine Linux) for a bug report, suggesting a feature
  improvement, and checking two patches
  * Aman Verma, Jan Stary, and John Gardner for a bug report
  and for suggesting a feature impovement
  * Todd Miller (OpenBSD) for a bug report, checking a patch,
  and a useful discussion
  * Andrew Fresh, Brian Callahan, Christian Weisgerber, Paul de Weerd (OpenBSD),
  Havard Eidnes, Jason Thorpe (NetBSD), Yuri Pankov (FreeBSD),
  Bjarni Ingi Gislason, Chris Bennett, Edgar Pettijohn, Eldred Habert,
  Jamie Landeg-Jones, Kazuo KUROI, and Wynn Wolf Arbor for a bug report
  * Theo Buehler (OpenBSD) for suggesting two feature impovements
  and for checking a patch
  * Leah Neukirchen (Void Linux) for suggesting a feature impovement
  and for release testing
  * Colin Watson (Debian) for suggesting a feature impovement
  and for checking groff patches
  * Matej Cepl (SUSE Linux), Matthew Martin, Steffen Nurpmeso,
  and Tim Baumgard for suggesting a feature impovement
  * Christos Zoulas (NetBSD) for a report regarding portability
  * Daniel Dickman (OpenBSD) for suggesting a portability improvement
  * Werner Lemberg (GNU troff) and Douglas McIlroy
  for reporting bugs in manual pages
  * Baptiste Daroussin and Eygene Ryabinkin (FreeBSD)
  for an additional regression test
  * Michal Nowak for reporting several code style issues
  * TJ Townsend (OpenBSD) for help with CSS
  * Sevan Janiyan (NetBSD) and Robert Mustacchi (Illumos)
  for extensive release testing
  * Job Snijders, Kinichiro INOGUCHI, and Martijn van Duren (OpenBSD)
  for checking patches
  * Bertrand Garrigues and Ralph Corderoy (GNU troff) for checking groff patches
- Deleted upstreamed patches:
  - 1.14.5-master.patch
  - mandoc-1.14.5-dummy.diff</changelog>
  <changelog author="kukuk@suse.com" date="1646913600">- Add build dependency for less to match behavior described in the
  manual page.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669982400">- Split mandoc into a bin subpackage: tools like rpm2docserv rely
  on mandoc to render the html pages, but they might be also wanted
  on systems that do not want to replace the entire man
  infrastructure.</changelog>
</package>
<package pkgid="b7ac35c14852037d860b73044717841d7248d4d7ca82656c4b67dd3ed2f6a3709bbabf3c688991f28e19769199dadc89194b67b0be1f5c4ee2bb435b68ba51f1" name="mdadm-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2" rel="slfo.1.1_1.3"/>
  <changelog author="colyli@suse.com" date="1669291200">- mdadm.spec: remove "PreReq: %{_sbindir}/mkinitrd" as it is
  unnecessary now. (bsc#1202352)</changelog>
  <changelog author="colyli@suse.com" date="1669291201">- Call mdadm_env.sh from /usr/libexec/mdadm (bsc#1111960, bsc#1202090)
  1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The patch (bsc#1111960) which fixed rpm check failure is replaced
  by the above patch,
  1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.</changelog>
  <changelog author="colyli@suse.com" date="1670414400">- Drop the patch which is reported as regression by upstream developer
  (bsc#1206139)
  0045-Manage-Block-unsafe-member-failing.patch
- Add jsc#PED-947 together with jsc#PED-1009 in mdadm.changes, they
  are both the requirement to update mdadm to latest upstream state
  via different requestors.</changelog>
  <changelog author="colyli@suse.com" date="1672056000">- mdadm.spec: create the following symbolic link in /sbin for
  compatibility,
  /sbin/mdadm -&gt; /usr/sbin/mdadm
  /sbin/mdmon -&gt; /usr/sbin/mdmon
  (jsc#PED-1009, jsc#PED-947)</changelog>
  <changelog author="colyli@suse.de" date="1680350400">- sysconfig.mdadm: Remove ServiceRestart line to mdadm since there
  is not such systemd service. (bsc#1203491)</changelog>
  <changelog author="colyli@suse.de" date="1682337600">- Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4 (bsc#1205493, bsc#1205830)
  - mdmon: fix segfault
    0052-mdmon-fix-segfault.patch
  - util: remove obsolete code from get_md_name
    0053-util-remove-obsolete-code-from-get_md_name.patch
  - mdmon: don't test both 'all' and 'container_name'.
    0054-mdmon-don-t-test-both-all-and-container_name.patch
  - mdmon: change systemd unit file to use --foreground
    0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - mdmon: Remove need for KillMode=none
    0056-mdmon-Remove-need-for-KillMode-none.patch
  - mdmon: Improve switchroot interactions.
    0057-mdmon-Improve-switchroot-interactions.patch
  - mdopen: always try create_named_array()
    0058-mdopen-always-try-create_named_array.patch
  - Improvements for IMSM_NO_PLATFORM testing
    0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch</changelog>
  <changelog author="colyli@suse.de" date="1685102400">- Grow: fix possible memory leak (bsc#1208618)
  0060-Grow-fix-possible-memory-leak.patch
- Grow: fix can't change bitmap type from none to clustered
  (bsc#1208618)
  0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
- Use source code mdadm-4.2.tar.xz from kernel.org version for
  checksum
  - mdadm-4.2.tar.xz</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- mdadm.spec: replace transitional %usrmerged macro with regular
  version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1700222400">- No longer recommend smtp-daemon: this was a remainder from the
  cron configuration, which was removed back in 2018.</changelog>
  <changelog author="colyli@suse.de" date="1704715200">- Update mdadm to latest upstream state upto commit
  582945c2d3bb. (jsc#PED-7542)
  1) The testing changes are not included here.
  2) Code clean up, and more helper routines added for Manage.c,
    Monitor.c, mdadm.c, ReadMe.c, super-intel.c, super0.c, super1.c,
    Create.c, Incremental.c and so on.
  3) Man page update for mdadm.8.in.
  4) Several memory leak and double free fixes.
  5) Check /etc/initrd-release for whether systemd running on an initrd.
  - Manage: Block unsafe member failing
    0062-Manage-Block-unsafe-member-failing.patch
  - Mdmonitor: Split alert() into separate functions
    0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - Monitor: block if monitor modes are combined.
    0064-Monitor-block-if-monitor-modes-are-combined.patch
  - Update mdadm Monitor manual.
    0065-Update-mdadm-Monitor-manual.patch
  - mdadm: create ident_init()
    0066-mdadm-create-ident_init.patch
  - mdadm: Add option validation for --update-subarray
    0067-mdadm-Add-option-validation-for-update-subarray.patch
  - Fix --update-subarray on active volume
    0068-Fix-update-subarray-on-active-volume.patch
  - Add code specific update options to enum.
    0069-Add-code-specific-update-options-to-enum.patch
  - super-ddf: Remove update_super_ddf.
    0070-super-ddf-Remove-update_super_ddf.patch
  - super0: refactor the code for enum
    0071-super0-refactor-the-code-for-enum.patch
  - super1: refactor the code for enum
    0072-super1-refactor-the-code-for-enum.patch
  - super-intel: refactor the code for enum
    0073-super-intel-refactor-the-code-for-enum.patch
  - Change update to enum in update_super and update_subarray
    0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - Manage&amp;Incremental: code refactor, string to enum
    0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - Change char* to enum in context-&gt;update &amp; refactor code
    0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - mdadm/udev: Don't handle change event on raw devices
    0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - Manage: do not check array state when drive is removed
    0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - incremental, manage: do not verify if remove is safe
    0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - super-intel: make freesize not required for chunk size
    0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - manage: move comment with function description
    0081-manage-move-comment-with-function-description.patch
  - Fix NULL dereference in super_by_fd
    0082-Fix-NULL-dereference-in-super_by_fd.patch
  - Mdmonitor: Make alert_info global
    0083-Mdmonitor-Make-alert_info-global.patch
  - Mdmonitor: Pass events to alert() using enums instead of
    0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - Mdmonitor: Add helper functions
    0085-Mdmonitor-Add-helper-functions.patch
  - Add helpers to determine whether directories or files are
    0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - Mdmonitor: Refactor write_autorebuild_pid()
    0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - Mdmonitor: Refactor check_one_sharer() for better error
    0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - util.c: reorder code lines in parse_layout_faulty()
    0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - util.c: fix memleak in parse_layout_faulty()
    0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - Detail.c: fix memleak in Detail()
    0091-Detail.c-fix-memleak-in-Detail.patch
  - isuper-intel.c: fix double free in load_imsm_mpb()
    0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - super-intel.c: fix memleak in find_disk_attached_hba()
    0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - super-ddf.c: fix memleak in get_vd_num_of_subarray()
    0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - Create: goto abort_locked instead of return 1 in error path
    0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - Create: remove safe_mode_delay local variable
    0096-Create-remove-safe_mode_delay-local-variable.patch
  - Create: Factor out add_disks() helpers
    0097-Create-Factor-out-add_disks-helpers.patch
  - mdadm: Introduce pr_info()
    0098-mdadm-Introduce-pr_info.patch
  - mdadm: Add --write-zeros option for Create
    0099-mdadm-Add-write-zeros-option-for-Create.patch
  - manpage: Add --write-zeroes option to manpage
    0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - Define alignof using _Alignof when using C11 or newer
    0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - Use existence of /etc/initrd-release to detect initrd.
    0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - Create: Fix checking for container in update_metadata
    0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
</package>
<package pkgid="14f99dbda523891323f576f6924113502d162415a0a318549a07b3d4eebb559cce05b11d8d1eec1f993c5a0e6af1821a22a5119693da02d7dced9f2f4ef63f8b" name="mdadm-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2" rel="slfo.1.1_1.3"/>
  <changelog author="colyli@suse.com" date="1669291200">- mdadm.spec: remove "PreReq: %{_sbindir}/mkinitrd" as it is
  unnecessary now. (bsc#1202352)</changelog>
  <changelog author="colyli@suse.com" date="1669291201">- Call mdadm_env.sh from /usr/libexec/mdadm (bsc#1111960, bsc#1202090)
  1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The patch (bsc#1111960) which fixed rpm check failure is replaced
  by the above patch,
  1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.</changelog>
  <changelog author="colyli@suse.com" date="1670414400">- Drop the patch which is reported as regression by upstream developer
  (bsc#1206139)
  0045-Manage-Block-unsafe-member-failing.patch
- Add jsc#PED-947 together with jsc#PED-1009 in mdadm.changes, they
  are both the requirement to update mdadm to latest upstream state
  via different requestors.</changelog>
  <changelog author="colyli@suse.com" date="1672056000">- mdadm.spec: create the following symbolic link in /sbin for
  compatibility,
  /sbin/mdadm -&gt; /usr/sbin/mdadm
  /sbin/mdmon -&gt; /usr/sbin/mdmon
  (jsc#PED-1009, jsc#PED-947)</changelog>
  <changelog author="colyli@suse.de" date="1680350400">- sysconfig.mdadm: Remove ServiceRestart line to mdadm since there
  is not such systemd service. (bsc#1203491)</changelog>
  <changelog author="colyli@suse.de" date="1682337600">- Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4 (bsc#1205493, bsc#1205830)
  - mdmon: fix segfault
    0052-mdmon-fix-segfault.patch
  - util: remove obsolete code from get_md_name
    0053-util-remove-obsolete-code-from-get_md_name.patch
  - mdmon: don't test both 'all' and 'container_name'.
    0054-mdmon-don-t-test-both-all-and-container_name.patch
  - mdmon: change systemd unit file to use --foreground
    0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - mdmon: Remove need for KillMode=none
    0056-mdmon-Remove-need-for-KillMode-none.patch
  - mdmon: Improve switchroot interactions.
    0057-mdmon-Improve-switchroot-interactions.patch
  - mdopen: always try create_named_array()
    0058-mdopen-always-try-create_named_array.patch
  - Improvements for IMSM_NO_PLATFORM testing
    0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch</changelog>
  <changelog author="colyli@suse.de" date="1685102400">- Grow: fix possible memory leak (bsc#1208618)
  0060-Grow-fix-possible-memory-leak.patch
- Grow: fix can't change bitmap type from none to clustered
  (bsc#1208618)
  0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
- Use source code mdadm-4.2.tar.xz from kernel.org version for
  checksum
  - mdadm-4.2.tar.xz</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- mdadm.spec: replace transitional %usrmerged macro with regular
  version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1700222400">- No longer recommend smtp-daemon: this was a remainder from the
  cron configuration, which was removed back in 2018.</changelog>
  <changelog author="colyli@suse.de" date="1704715200">- Update mdadm to latest upstream state upto commit
  582945c2d3bb. (jsc#PED-7542)
  1) The testing changes are not included here.
  2) Code clean up, and more helper routines added for Manage.c,
    Monitor.c, mdadm.c, ReadMe.c, super-intel.c, super0.c, super1.c,
    Create.c, Incremental.c and so on.
  3) Man page update for mdadm.8.in.
  4) Several memory leak and double free fixes.
  5) Check /etc/initrd-release for whether systemd running on an initrd.
  - Manage: Block unsafe member failing
    0062-Manage-Block-unsafe-member-failing.patch
  - Mdmonitor: Split alert() into separate functions
    0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - Monitor: block if monitor modes are combined.
    0064-Monitor-block-if-monitor-modes-are-combined.patch
  - Update mdadm Monitor manual.
    0065-Update-mdadm-Monitor-manual.patch
  - mdadm: create ident_init()
    0066-mdadm-create-ident_init.patch
  - mdadm: Add option validation for --update-subarray
    0067-mdadm-Add-option-validation-for-update-subarray.patch
  - Fix --update-subarray on active volume
    0068-Fix-update-subarray-on-active-volume.patch
  - Add code specific update options to enum.
    0069-Add-code-specific-update-options-to-enum.patch
  - super-ddf: Remove update_super_ddf.
    0070-super-ddf-Remove-update_super_ddf.patch
  - super0: refactor the code for enum
    0071-super0-refactor-the-code-for-enum.patch
  - super1: refactor the code for enum
    0072-super1-refactor-the-code-for-enum.patch
  - super-intel: refactor the code for enum
    0073-super-intel-refactor-the-code-for-enum.patch
  - Change update to enum in update_super and update_subarray
    0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - Manage&amp;Incremental: code refactor, string to enum
    0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - Change char* to enum in context-&gt;update &amp; refactor code
    0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - mdadm/udev: Don't handle change event on raw devices
    0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - Manage: do not check array state when drive is removed
    0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - incremental, manage: do not verify if remove is safe
    0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - super-intel: make freesize not required for chunk size
    0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - manage: move comment with function description
    0081-manage-move-comment-with-function-description.patch
  - Fix NULL dereference in super_by_fd
    0082-Fix-NULL-dereference-in-super_by_fd.patch
  - Mdmonitor: Make alert_info global
    0083-Mdmonitor-Make-alert_info-global.patch
  - Mdmonitor: Pass events to alert() using enums instead of
    0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - Mdmonitor: Add helper functions
    0085-Mdmonitor-Add-helper-functions.patch
  - Add helpers to determine whether directories or files are
    0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - Mdmonitor: Refactor write_autorebuild_pid()
    0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - Mdmonitor: Refactor check_one_sharer() for better error
    0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - util.c: reorder code lines in parse_layout_faulty()
    0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - util.c: fix memleak in parse_layout_faulty()
    0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - Detail.c: fix memleak in Detail()
    0091-Detail.c-fix-memleak-in-Detail.patch
  - isuper-intel.c: fix double free in load_imsm_mpb()
    0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - super-intel.c: fix memleak in find_disk_attached_hba()
    0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - super-ddf.c: fix memleak in get_vd_num_of_subarray()
    0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - Create: goto abort_locked instead of return 1 in error path
    0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - Create: remove safe_mode_delay local variable
    0096-Create-remove-safe_mode_delay-local-variable.patch
  - Create: Factor out add_disks() helpers
    0097-Create-Factor-out-add_disks-helpers.patch
  - mdadm: Introduce pr_info()
    0098-mdadm-Introduce-pr_info.patch
  - mdadm: Add --write-zeros option for Create
    0099-mdadm-Add-write-zeros-option-for-Create.patch
  - manpage: Add --write-zeroes option to manpage
    0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - Define alignof using _Alignof when using C11 or newer
    0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - Use existence of /etc/initrd-release to detect initrd.
    0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - Create: Fix checking for container in update_metadata
    0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
</package>
<package pkgid="e04cd368f6d82fa92a2c778863b2809db6f8b653eba6a1af540c1c88cd96a491e57048695fcbd4d2271429e5d775965b957ff47790ec4dcfd0b79713686f3eee" name="microos-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="2.21+git24" rel="slfo.1.1_1.1"/>
  <changelog author="lnussel@suse.de" date="1680609600">- remove conflict with systemd-coredump (boo#1091684). There is no actual
  conflict. It actually works fine to install systemd-coredump in addition.</changelog>
  <changelog author="kukuk@suse.com" date="1681387200">- Update to version 2.20+git20230413.2a43cdb:
  * Drop extra sysctl file for coredumps (boo#1091684)</changelog>
  <changelog author="fvogt@suse.com" date="1681992000">- Switch to obs_scm
- Call autogen.sh so that it actually builds
- Update to version 2.21+git0:
  * Release version 2.21
  * 98selinux-microos: Work around overlayfs bug (bsc#1210690)
  * 98selinux-microos: Create .relabelled marker before relabelling</changelog>
  <changelog author="fvogt@suse.com" date="1697112000">- Update to version 2.21+git5:
  * 98selinux-microos: Set mount propagation properly
  * 98selinux-microos: Convert tabs to spaces
  * 98selinux-microos: Don't include setenforce unnecessarily
  * Add spec file
  * systemd-proxy-env: fix typos in setup-systemd-proxy-env
- Use the .spec file from the repo</changelog>
  <changelog author="kukuk@suse.com" date="1704888000">- Update to version 2.21+git9:
  * Add man-online command
  * Drop support for sle15 builds
  * Add OBS CI workflow</changelog>
  <changelog author="iforster@suse.com" date="1707220800">- Update to version 2.21+git11:
  * Install man-online alias only for bash</changelog>
  <changelog author="fvogt@suse.com" date="1708689600">- Update to version 2.21+git12:
  * 98selinux-microos: Avoid "/sysroot-selinux: not mounted" on new util-linux
- Switch _service to use mode="manual" instead of "disabled"</changelog>
  <changelog author="fvogt@suse.com" date="1720699200">- Update to version 2.21+git13:
  * Don't run in the zipl initrd "initgrub" mode</changelog>
  <changelog author="fvogt@suse.com" date="1727265600">- Update to version 2.21+git16:
  * selinux: Avoid parameter duplication
  * 98selinux-microos: Use a single thread for relabelling /etc
  * Use all cores for SELinux restorecon (related to jsc#SMO-382)
- _service: Omit +git0 suffix in versions</changelog>
  <changelog author="fvogt@suse.com" date="1731585600">- Update to version 2.21+git24:
  * test: Check for AVC denials in the journal
  * test: More reliable output of combustion-validate
  * test: Remove workaround for boo#1230912
  * Label /sys before selinux-autorelabel units run (bsc#1232709)
  * Add RemainAfterExit=true to autorelabel services
  * Consistently use tabs in selinux-autorelabel-generator
  * Add automated testing of SELinux relabelling functionality
  * Fix OBS workflow for pushes to master</changelog>
</package>
<package pkgid="7ae11cd91c96218515fe0700b0f33cc57e5e73ca3f75e2d9fbcb37537ae160e5bbd09f82796595b4cff20e8dc6186fd6a2306e1d82b470f62ee1192c30c57402" name="mkisofs-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.02~a10" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="4d3aa324466313546706f8381cdfde09bd314b3ac17ca8fc8bce83221f5fc736a0059e8fa331f1c2fe273db50ed1da96fce328a970c32a682410e39e91e2870c" name="mokutil-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.6.0" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="glin@suse.com" date="1542974400">- Enable AArch64 build (bsc#1119769, fate#326541)</changelog>
  <changelog author="glin@suse.com" date="1553169600">- Add modhash to calculate the hash of kernel module (SLE-5661)
  + Also add openssl to Requires since the script needs it</changelog>
  <changelog author="glin@suse.com" date="1559044800">- Update to 0.4.0
  + Rename export_moks as export_db_keys
  + Add support for exporting other keys
  + add new --mok argument
  + set list-enrolled command as default for some arguments
  + Add more info to --sb-state: show when we're in SetupMode or
    with shim validation disabled
  + Correct help: --set-timeout is really --timeout
  + generate_hash() / generate_pw_hash(): don't use strlen() for
    strncpy bounds
  + Add the type casting to silence the warning
  + Add a way for mokutil to configure a timeout for MokManager's
    prompt
  + list_keys_in_var(): check errno correctly, not ret twice
  + Fix typo in error message when the system lacks Secure Boot
    support
  + Add bash completion file
  + mokutil: be explicit about file modes in all cases
  + Make all efi_guid_t const
  + Don't allow sha1 on the mokutil command line
  + Build with -fshort-wchar so toggle passwords work right
  + Fix the 32bit signedness comparison
  + Fix the potential buffer overflow
- Add mokutil-remove-shebang-from-bash-completion-file.patch to
  remove shebang from bash-completion/mokutil
- Drop upstreamed patches
  + mokutil-constify-efi-guid.patch
  + mokutil-fix-overflow.patch
  + mokutil-fshort-wchar.patch
  + mokutil-set-efi-variable-file-mode.patch
- Refresh mokutil-support-revoke-builtin-cert.patch
- Install bash-completion/mokutil</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1576238400">- Add build for ppc64/ppc64le</changelog>
  <changelog author="glin@suse.com" date="1597406400">- Update mokutil-support-revoke-builtin-cert.patch
  + Add "--revoke-cert" to the man page</changelog>
  <changelog author="glin@suse.com" date="1600257600">- Add mokutil-bsc1173115-add-ca-and-keyring-checks.patch to add
  options for CA and kernel keyring checks (bsc#1173115)
  + Add new BuildRequires: keyutils-devel
  + Add mokutil-remove-libkeyutils-check.patch to disable the
    version check of libkeyutils
- Refresh mokutil-support-revoke-builtin-cert.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620129600">- spec file cleanup</changelog>
  <changelog author="glin@suse.com" date="1626350400">- Update to 0.5.0
  + mokutil: delete key/hash from the reverse request
  + efi_x509: fix an error handling in is_immediate_ca()
  + efi_x509: fix certificates fingerprint calculation
  + efi_x509: use EVP_Digest()* functions instead of the deprecated
    SHA1_*()
  + src/util.c: fix NULL pointer dereference in mok_get_variable
  + mokutil: Read the SbatLevelRT variable to get the SBAT entries
  + mokutil: add mok-variables parsing support
  + mokutil: Add option to print the UEFI SBAT variable content
  + mokutil: only check for Secure Boot support in options that
    need it
  + efi_x509: add the function to fetch SKID
  + keyring: add the function to check kernel keyring
  + mokutil: initialize data for efi_get_variable()
  + mokutil: correct the data for efi_set_variable() in
    set_password()
  + mokutil: improve the readability of issue_mok_request()
  + mokutil: drop the checks for PK and KEK
  + mokutil: check the blocklists before enrolling a key
  + mokutil: adjust the command bits
  + mokutil: remove "--simple-hash"
  + make CA check non-fatal
  + mokutil: close file in the error path
  + mokutil: do the CA check
  + efi_x509: add the function to check immediate CA
  + efi_x509: use d2i_X509() to create X509 handling
  + mokutil: rename hash_file as pw_hash_file
  + password-crypt: update the function names
  + password-crypt: fix the types of several functions
  + mokutil: fix the error message in sb_state()
  + mokutil: move x509 functions to efi_x509.c
  + mokutil: move the hash functions to efi_hash.c
  + util: add functions for db_var_name and db_friendly_name
  + Remove the SHA1 code from identify_hash_type()
  + Map the UEFI variable names with a function
  + Fix -Wcast-align warnings
  + Fix 32 bit build
  + Add --timeout to manpage and other corrections.
  + mokutil.c: fix typo enrollement -&gt; enrollment
  + Avoid taking pointer to packed struct
  + Fix name of --enable-validation in the description
  + Remove shebang from bash-completion/mokutil
- Add mokutil-fix-missing-header.patch to fix the compilation error
  due to the missing header
- Refresh mokutil-remove-libkeyutils-check.patch and only apply
  it to openSUSE Leap 15.*
- Drop upstreamed patches:
  + mokutil-remove-shebang-from-bash-completion-file.patch
  + mokutil-bsc1173115-add-ca-and-keyring-checks.patch
- Drop mokutil-support-revoke-builtin-cert.patch since we don't use
  the builtin cert prompt patch in shim anymore.</changelog>
  <changelog author="jlee@suse.com" date="1656331200">- Update to 0.6.0
    + 6c98907 SBAT revocation update support
    + 0276891 mokutil: Add trust_mok_keys and untrust_mok_keys
    + 57bc385 mokutil: enable setting fallback verbosity and noreboot mode
    + b15e7c4 util: add the missing stdio.h
- Drop mokutil-fix-missing-header.patch (upstream)</changelog>
</package>
<package pkgid="ca1f14232604ebf7214918051b97cfd61f3a0344fc2d558d7fc920b4b70110b90c4bae822f0ead85bfce2e0934d833047f3fd7c7c1160a92df7c4aaff28e9756" name="mokutil-debugsource" arch="aarch64">
  <version epoch="0" ver="0.6.0" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="glin@suse.com" date="1542974400">- Enable AArch64 build (bsc#1119769, fate#326541)</changelog>
  <changelog author="glin@suse.com" date="1553169600">- Add modhash to calculate the hash of kernel module (SLE-5661)
  + Also add openssl to Requires since the script needs it</changelog>
  <changelog author="glin@suse.com" date="1559044800">- Update to 0.4.0
  + Rename export_moks as export_db_keys
  + Add support for exporting other keys
  + add new --mok argument
  + set list-enrolled command as default for some arguments
  + Add more info to --sb-state: show when we're in SetupMode or
    with shim validation disabled
  + Correct help: --set-timeout is really --timeout
  + generate_hash() / generate_pw_hash(): don't use strlen() for
    strncpy bounds
  + Add the type casting to silence the warning
  + Add a way for mokutil to configure a timeout for MokManager's
    prompt
  + list_keys_in_var(): check errno correctly, not ret twice
  + Fix typo in error message when the system lacks Secure Boot
    support
  + Add bash completion file
  + mokutil: be explicit about file modes in all cases
  + Make all efi_guid_t const
  + Don't allow sha1 on the mokutil command line
  + Build with -fshort-wchar so toggle passwords work right
  + Fix the 32bit signedness comparison
  + Fix the potential buffer overflow
- Add mokutil-remove-shebang-from-bash-completion-file.patch to
  remove shebang from bash-completion/mokutil
- Drop upstreamed patches
  + mokutil-constify-efi-guid.patch
  + mokutil-fix-overflow.patch
  + mokutil-fshort-wchar.patch
  + mokutil-set-efi-variable-file-mode.patch
- Refresh mokutil-support-revoke-builtin-cert.patch
- Install bash-completion/mokutil</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1576238400">- Add build for ppc64/ppc64le</changelog>
  <changelog author="glin@suse.com" date="1597406400">- Update mokutil-support-revoke-builtin-cert.patch
  + Add "--revoke-cert" to the man page</changelog>
  <changelog author="glin@suse.com" date="1600257600">- Add mokutil-bsc1173115-add-ca-and-keyring-checks.patch to add
  options for CA and kernel keyring checks (bsc#1173115)
  + Add new BuildRequires: keyutils-devel
  + Add mokutil-remove-libkeyutils-check.patch to disable the
    version check of libkeyutils
- Refresh mokutil-support-revoke-builtin-cert.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620129600">- spec file cleanup</changelog>
  <changelog author="glin@suse.com" date="1626350400">- Update to 0.5.0
  + mokutil: delete key/hash from the reverse request
  + efi_x509: fix an error handling in is_immediate_ca()
  + efi_x509: fix certificates fingerprint calculation
  + efi_x509: use EVP_Digest()* functions instead of the deprecated
    SHA1_*()
  + src/util.c: fix NULL pointer dereference in mok_get_variable
  + mokutil: Read the SbatLevelRT variable to get the SBAT entries
  + mokutil: add mok-variables parsing support
  + mokutil: Add option to print the UEFI SBAT variable content
  + mokutil: only check for Secure Boot support in options that
    need it
  + efi_x509: add the function to fetch SKID
  + keyring: add the function to check kernel keyring
  + mokutil: initialize data for efi_get_variable()
  + mokutil: correct the data for efi_set_variable() in
    set_password()
  + mokutil: improve the readability of issue_mok_request()
  + mokutil: drop the checks for PK and KEK
  + mokutil: check the blocklists before enrolling a key
  + mokutil: adjust the command bits
  + mokutil: remove "--simple-hash"
  + make CA check non-fatal
  + mokutil: close file in the error path
  + mokutil: do the CA check
  + efi_x509: add the function to check immediate CA
  + efi_x509: use d2i_X509() to create X509 handling
  + mokutil: rename hash_file as pw_hash_file
  + password-crypt: update the function names
  + password-crypt: fix the types of several functions
  + mokutil: fix the error message in sb_state()
  + mokutil: move x509 functions to efi_x509.c
  + mokutil: move the hash functions to efi_hash.c
  + util: add functions for db_var_name and db_friendly_name
  + Remove the SHA1 code from identify_hash_type()
  + Map the UEFI variable names with a function
  + Fix -Wcast-align warnings
  + Fix 32 bit build
  + Add --timeout to manpage and other corrections.
  + mokutil.c: fix typo enrollement -&gt; enrollment
  + Avoid taking pointer to packed struct
  + Fix name of --enable-validation in the description
  + Remove shebang from bash-completion/mokutil
- Add mokutil-fix-missing-header.patch to fix the compilation error
  due to the missing header
- Refresh mokutil-remove-libkeyutils-check.patch and only apply
  it to openSUSE Leap 15.*
- Drop upstreamed patches:
  + mokutil-remove-shebang-from-bash-completion-file.patch
  + mokutil-bsc1173115-add-ca-and-keyring-checks.patch
- Drop mokutil-support-revoke-builtin-cert.patch since we don't use
  the builtin cert prompt patch in shim anymore.</changelog>
  <changelog author="jlee@suse.com" date="1656331200">- Update to 0.6.0
    + 6c98907 SBAT revocation update support
    + 0276891 mokutil: Add trust_mok_keys and untrust_mok_keys
    + 57bc385 mokutil: enable setting fallback verbosity and noreboot mode
    + b15e7c4 util: add the missing stdio.h
- Drop mokutil-fix-missing-header.patch (upstream)</changelog>
</package>
<package pkgid="c3a0a04ce570f5d98ec9777e8cae7e21a3760c6f9dc9eb6176196a371aaf02a416693439840af330a561c3a2e9db7c745b453fd7cdd3aab4cc7f1d83f6f25f21" name="mozilla-nspr-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.36" rel="slfo.1.1_1.1"/>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1732536000">- update to version 4.36
  * remove support for OS/2
  * remove support for Unixware, Bsdi, old AIX, old HPUX9 &amp; scoos
  * remove support for Windows 16 bit
  * renamed the prwin16.h header to prwin.h
  * configure was updated from 2.69 to 2.71
  * various build, test and automation script fixes
  * major parts of the source code were reformatted</changelog>
</package>
<package pkgid="5e83752eb0c96c653041e62075b048bb7a3fef92cbeacc3f2521ef50d2996a6b6365f50c6ffeb1b2cb4a776d8b94274fbc5be76d7ebc43c01e41b7b2185babe9" name="mozilla-nspr-debugsource" arch="aarch64">
  <version epoch="0" ver="4.36" rel="slfo.1.1_1.1"/>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1732536000">- update to version 4.36
  * remove support for OS/2
  * remove support for Unixware, Bsdi, old AIX, old HPUX9 &amp; scoos
  * remove support for Windows 16 bit
  * renamed the prwin16.h header to prwin.h
  * configure was updated from 2.69 to 2.71
  * various build, test and automation script fixes
  * major parts of the source code were reformatted</changelog>
</package>
<package pkgid="2446beb3688e3ad8be624bff36ec5f885cc0ea46d0e59a34eae27104f809ddc8c8864b1255f263bfac26d0bab533cec532e2af750b9f624267c5b4632b668012" name="mozilla-nss-certs-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.112.2" rel="slfo.1.1_1.1"/>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="a629e72fbde782d19117e39c9c81ae35c18fb22bdaed18e4cc85747a08ddaf42c18b2709c4eb772ea3f1ba899131d4720bd610dfb3203afcf9762ea11e2c9b9a" name="mozilla-nss-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.112.2" rel="slfo.1.1_1.1"/>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="d27ea75d9b908f7f7fdd3626f615bfbf5a012aaf42803ffdc17b7baea4583c8eda6b42e868540708bc62e51bd159173cf3137073cc357300492da4ea78454da9" name="mozilla-nss-debugsource" arch="aarch64">
  <version epoch="0" ver="3.112.2" rel="slfo.1.1_1.1"/>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="51954dbaff3f3dbc8805dc2b8c84094c375c93fc21f37ac77e3a6201ada037664097ccc00e402409407340eb563bca0fd405147ac9edc845f661c21acf3ecd6f" name="mozilla-nss-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.112.2" rel="slfo.1.1_1.1"/>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="eb9d101baabe15438ad12d7bd6939490cb6fdf519eb5883b887d7e9481460434161bae85f6ebd48b6b967178d05e2a7498cb8d1c44155f82ab61d2226d596d72" name="mpdecimal-debugsource" arch="aarch64">
  <version epoch="0" ver="2.5.1" rel="slfo.1.1_1.4"/>
  <changelog author="skrah@bytereef.org" date="1628596800">- Initial package</changelog>
  <changelog author="mcepl@suse.com" date="1630584000">- Switch on _multibuild with the separate test step (to minimize
  dependencies).
- Add a basic baselibs.conf.</changelog>
</package>
<package pkgid="38aadcfe82a5e1a2afb6d6255ffc02602f2e9be261e6d9a1bc811bb1d2b514db0c42d6ee835fb5a1b8434ed4864c80abc42cec95ec8ad74a280dacf794da61ce" name="mpfr-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="slfo.1.1_1.4"/>
  <changelog author="rguenther@suse.com" date="1594641600">- Update to mpfr 4.1.0
  * New function mpfr_get_str_ndigits about conversion to a string of digits.
  * New function mpfr_dot for the dot product (incomplete, experimental).
  * New functions mpfr_get_decimal128 and mpfr_set_decimal128 (available only
    when MPFR has been built with decimal float support).
  * New function mpfr_cmpabs_ui.
  * New function mpfr_total_order_p for the IEEE 754 totalOrder predicate.
  * The mpfr_out_str function now accepts bases from -2 to -36, in order to
    follow mpfr_get_str and GMP's mpf_out_str functions (these cases gave an
    assertion failure, as with other invalid bases).
  * Shared caches: cleanup; really detect lock failures (abort in this case).
  * The behavior of the formatted output functions (mpfr_printf, etc.) with
    an empty precision field has improved: trailing zeros are kept in a way
    similar to the formatted output functions from C.
  * Improved mpfr_add and mpfr_sub when all operands have a precision equal to
    twice the number of bits per word, e.g., 128 bits on a 64-bit platform.
  * Optimized the tuning parameters for various architectures.
  * Improved test coverage to 98.6% of code for x86_64.
  * Bug fixes.
  * MPFR manual: corrected/completed the mpfr_get_str description in order to
    follow the historical behavior and GMP's mpf_get_str function.
- Remove mpfr-4.0.2-p6.patch and floating-point-format-no-lto.patch</changelog>
  <changelog author="rguenther@suse.com" date="1613131200">- Add cummulative patch mpfr-4.1.0-p7.diff fixing various bugs.</changelog>
  <changelog author="rguenther@suse.com" date="1668772800">- Update to mpfr 4.1.1
  * Bug fixes (see &lt;https://www.mpfr.org/mpfr-4.1.0/#fixed&gt; and/or the
    ChangeLog file), in particular for macros implementing functions.
  * Improved manual formatting.
  * Accumulated bugfixes
- Remove mpfr-4.1.0-p7.diff, all patches are contained in the
  new version.
- Update mpfr.keyring</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1668859200">- package license files correctly</changelog>
  <changelog author="rguenther@suse.com" date="1669291200">- Add mpfr-4.1.1-patch01.patch to fix bug with code using
  the mpfr_custom_get_kind macro.</changelog>
  <changelog author="rguenther@suse.com" date="1673265600">- Update to mpfr 4.2.0
  * New functions mpfr_cosu, mpfr_sinu, mpfr_tanu, mpfr_acosu, mpfr_asinu,
    mpfr_atanu and mpfr_atan2u.
  * New functions mpfr_cospi, mpfr_sinpi, mpfr_tanpi, mpfr_acospi, mpfr_asinpi,
    mpfr_atanpi and mpfr_atan2pi.
  * New functions mpfr_log2p1, mpfr_log10p1, mpfr_exp2m1, mpfr_exp10m1 and
    mpfr_compound_si.
  * New functions mpfr_fmod_ui, mpfr_powr, mpfr_pown, mpfr_pow_uj, mpfr_pow_sj
    and mpfr_rootn_si (mpfr_pown is actually a macro defined as an alias for
    mpfr_pow_sj).
  * Bug fixes.
    In particular, for the formatted output functions (mpfr_printf, etc.),
    the case where the precision consists only of a period has been fixed
    to be like ".0" as specified in the ISO C standard, and the manual has
    been corrected and clarified.
    The macros of the custom interface have also been fixed: they now behave
    like functions (except a minor limitation for mpfr_custom_init_set).
- Remove mpfr-4.1.1-patch01.patch which is included in the new release.</changelog>
  <changelog author="schwab@suse.de" date="1675166400">- tests-tsprintf.patch: Avoid testsuite failure with glibc &gt;= 2.37</changelog>
  <changelog author="rguenther@suse.com" date="1681819200">- Add mpfr-4.2.0-cummulative.patch, cummulative patches for
  mpfr 4.2.0:
  * A test of the thousands separator in tsprintf.c is based on the
    output from the GNU C Library up to 2.36, which is incorrect.
  * The mpfr_ui_pow_ui function has infinite loop in case of overflow.
  * The tfprintf and tprintf tests may fail in locales where decimal_point
    has several bytes, such as ps_AF.
  * In particular cases that are very hard to round, mpfr_rec_sqrt may yield
    a stack overflow due to many small allocations in the stack, based on
    alloca().
- Remove tests-tsprintf.patch that's included in the above set.</changelog>
  <changelog author="rguenther@suse.com" date="1686139200">- Update mpfr-4.2.0-cummulative.patch, adds patches fixing the following bugs
  * the mpfr_reldiff function, which computes |b-c|/b, is buggy on special
    values, e.g. on the following (b,c) values: (+Inf,+Inf) gives ±0
    instead of NaN (like NaN/Inf); (+0,+0) gives 1 instead of NaN (like 0/0);
    (+0,1) gives 1 instead of Inf (like 1/0). Moreover, the sign of 0 for
    (+Inf,+Inf) or (-Inf,-Inf) is not set, i.e. it is just the sign of the
    destination before the call; as a consequence, results are not even
    consistent.
  * the reuse tests are incomplete: the sign of a result zero is not checked,
    so that it can miss bugs (one of the mpfr_reldiff bugs mentioned above,
    in particular).
  * the general code for the power function (mpfr_pow_general internal
    function) has two bugs in particular cases: the first one is an incorrect
    computation of the error bound when there has been an intermediate
    underflow or overflow (in such a case, the computation is performed
    again with a rescaling, thus with an additional error term, but there is
    a bug in the computation of this term), so that the result may be
    rounded incorrectly (in particular, a spurious overflow is possible);
    the second one occurs in a corner case (destination precision 1,
    rounding to nearest, and where the rounded result assuming an unbounded
    exponent range would be 2emin-2 and the exact result is larger than this
    value), with the only consequence being a missing underflow exception
    (the underflow flag is not set).
  * the mpfr_compound_si function can take a huge amount of memory and time
    in some cases (when the argument x is a large even integer and xn is
    represented exactly in the target precision) and does not correctly
    detect overflows and underflows
  * MPFR can crash when a formatted output function is called with
    %.2147483648Rg in the format string.</changelog>
  <changelog author="rguenther@suse.com" date="1692705600">- Update to mpfr 4.2.1
  * Includes all fixes from mpfr-4.2.0-cummulative.patch which is
    subsequently removed.
  * Improved MPFR manual.
  * Configure tests: replaced the test of the link with GMP, in order
    to avoid the use of a function without a prototype (Autoconf issue), as
    this is obsolescent in ISO C. The new test should be more robust.</changelog>
</package>
<package pkgid="e983baea23e42fa33164c3bbe1159b14d19b669083fa5369cbcb4908dd16dea85fd63e2b0a94ae0727d24250f40ff8dac6b31170d39c2b5506f28299abc04676" name="multipath-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.10.0+103+suse.0fc97cd" rel="slfo.1.1_1.3"/>
  <changelog author="mwilck@suse.com" date="1707739200">- Update to version 0.9.7+148+suse.7d9953e.obscpio
  * This is a multipath-tools 0.9.8 pre-release
  * fix fast_io_fail for Infinibox (bsc#1219348)
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707912000">- Update to version 0.9.7+148+suse.9780ae0:
  * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
</package>
<package pkgid="d34b1da869037a5aac779ccf2340b7f88ee5e4bb0af70cfd4931a5b781ddcdc52105a251ccb7c4245beb5532c6f0ba864c3bad7e8b40c66f40d5d94dab7525bd" name="multipath-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="0.10.0+103+suse.0fc97cd" rel="slfo.1.1_1.3"/>
  <changelog author="mwilck@suse.com" date="1707739200">- Update to version 0.9.7+148+suse.7d9953e.obscpio
  * This is a multipath-tools 0.9.8 pre-release
  * fix fast_io_fail for Infinibox (bsc#1219348)
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707912000">- Update to version 0.9.7+148+suse.9780ae0:
  * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
</package>
<package pkgid="6be6b777b4072f17fc468025b19e35e651bc812a0630282e04f8162c5508a24276553ac585d31ee9109099a2774d1bdfebbf12a48eaa8be0e50ffd07c1857dac" name="ncurses-debugsource" arch="aarch64">
  <version epoch="0" ver="6.4.20240224" rel="slfo.1.1_1.5"/>
  <changelog author="werner@suse.de" date="1701691200">- Add ncurses patch 20231202
  + correct initial alignment of extended capabilities in infocmp, so
    that the "-u" option can be used for more than two terminal types.
  + improve formatting/style of manpages, changing environment variables
    to italics (patches by Branden Robinson).</changelog>
  <changelog author="werner@suse.de" date="1702296000">- Add ncurses patch 20231209
  + modify infocmp "-u" option to not report cancels in use'd chunks
    which are not mentioned in the top-level terminal description.
  + remove xterm+sm+1006 from tmux (Debian #1057688).
  + used "infocmp -u" to help trim redundant capabilities -TD
  + updated man/edit_man.sh to allow for "\%" markers embedded after
    bold font escapes in manpage cross-references (Debian #1057541).
  + reduce compiler-warnings in configure checks</changelog>
  <changelog author="werner@suse.de" date="1704715200">- Add ncurses patch 20240106
  + use ansi+arrows, ansi+apparrows, ansi+csr, ansi+erase, ansi+idc,
    ansi+idc1, ansi+idl, ansi+idl1, ansi+inittabs to trim -TD
  + minor manpage formatting changes for consistency.
  + modify doc-html test package's install-directory, per lintian.
  + add attr_get.3x to man_db.renames.in (patch by Sven Joachim).
- Add ncurses patch 20231230
  + improve formatting/style of manpages (patches by Branden Robinson).
  + add ms-vt100-16color, winconsole -TD
  + add rio, rio-direct -TD
  + add mostlike -TD
  + add wezterm, contour -TD
- Add ncurses patch 20231223
  + improve formatting/style of manpages (patches by Branden Robinson).
- Add ncurses patch 20231217
  + improve formatting/style of manpages (patches by Branden Robinson).
  + correct an assignment in infocmp "-u" for detecting if a boolean
    is unset in a base entry and set in a use'd chunk, i.e., if it was
    cancelled.
  + modify infocmp "-u" option to not report cancels for strings which
    were already cancelled in a use'd chunk.
  + join two lines in infotocap.3x to eliminate a spurious "description"
    link in installed manpages (report by Sven Joachim).
  + fix typo in NEWS (report by Sven Joachim).
- Port patches
  * ncurses-5.9-ibm327x.dif
  * ncurses-6.4.dif</changelog>
  <changelog author="lnussel@suse.com" date="1704801600">- Add foot to terminfo-base. It's the most compliant wayland
  terminal emulator according to
  https://github.com/dankamongmen/notcurses/blob/master/TERMINALS.md</changelog>
  <changelog author="werner@suse.de" date="1705320000">- Add ncurses patch 20240113
  + improve formatting/style of manpages (patches by Branden Robinson).
  + modify dist.mk to avoid passing developer's comments in manpages into
    the generated html documentation.
  + use ansi+local, ansi+local1, ansi+pp, ansi+rca, ansi+rca2, ansi+sgr
    to trim -TD
  + restore padding for wy520* and vt320-k311 (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1705924800">- Add ncurses patch 20240120
  + improve formatting/style of manpages (patches by Branden Robinson).
  + amend discussion of aliases in tput.1
  + use ansi+sgrbold, ansi+sgrdim, ansi+sgrso, ansi+sgrul, ansi+tabs
    ecma+color, ecma+sgr, vt100+4bsd, vt100+pfkeys, vt220+pcedit
    xterm+256color, xterm+acs, xterm+nopcfkeys, xterm+pcf2 to trim -TD
  + modify configure scripts/makefiles to omit KEY_RESIZE if the
    corresponding SIGWINCH feature is disabled.</changelog>
  <changelog author="werner@suse.de" date="1706529600">- Add ncurses patch 20240127
  + amend change to z39-a (report by Sven Joachim).
  + use xterm+nopcfkeys, vt52-basic, dec+pp, dec+sl, vt52+arrows,
    hp+pfk+cr, klone+acs, klone+color, klone+sgr, ncr160wy50+pp
    to trim -TD
  + NetBSD-related fixes for x68k and wsvt52 (patch by Thomas Klausner)</changelog>
  <changelog author="werner@suse.de" date="1707134400">- Add ncurses patch 20240203
  + minor changes to tracing and locale-checks.</changelog>
  <changelog author="werner@suse.de" date="1707739200">- Add ncurses patch 20240210
  + compiler-warning fixes, while investigating an optimizer bug in
    "gcc (MacPorts gcc13 13.2.0_4+stdlib_flag) 13.2.0"
    which results in only the first byte of a multibyte character being
    printed to the screen.
- Change order of use=vt100+4bsd and use=rxvt+pcfkeys in rxvt-basic
  to get correct arrow keys back (boo#1219626)</changelog>
  <changelog author="werner@suse.de" date="1708948800">- Add ncurses patch 20240217
  + add vt100+noapp, vt100+noapp+pc, xterm+app+pc, xterm+decedit from
    xterm #389 -TD
  + fix inconsistent description of wmouse_trafo() (Debian #1059778).
  + modify wenclose() to handle pads (Debian #1059783).
  + improve manpage discussion of mouseinterval() (Debian #1058560).
- Add ncurses patch 20240224
  + improve man/curs_mouse.3x style (Brandon Robinson, Sven Joachim).
  + provide for CCHARW_MAX greater than 1
  + eliminate use of PATH_MAX in lib_trace.c
  + work around misconfiguration of MacPorts gcc13, which exposes invalid
    definition of MB_LEN_MAX in gcc's fallback copy of limits.h (MacPorts
    [#69374]).</changelog>
</package>
<package pkgid="d09e6f241fab528f130ae21c7a60dff796a48f1c3c1f5fce9bb7505b54687ebfaf7ca8badd64ef9105ccab73d7eb1cf225605f0bc2d327471290be44ceb90e9c" name="ncurses-utils-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.20240224" rel="slfo.1.1_1.5"/>
  <changelog author="werner@suse.de" date="1701691200">- Add ncurses patch 20231202
  + correct initial alignment of extended capabilities in infocmp, so
    that the "-u" option can be used for more than two terminal types.
  + improve formatting/style of manpages, changing environment variables
    to italics (patches by Branden Robinson).</changelog>
  <changelog author="werner@suse.de" date="1702296000">- Add ncurses patch 20231209
  + modify infocmp "-u" option to not report cancels in use'd chunks
    which are not mentioned in the top-level terminal description.
  + remove xterm+sm+1006 from tmux (Debian #1057688).
  + used "infocmp -u" to help trim redundant capabilities -TD
  + updated man/edit_man.sh to allow for "\%" markers embedded after
    bold font escapes in manpage cross-references (Debian #1057541).
  + reduce compiler-warnings in configure checks</changelog>
  <changelog author="werner@suse.de" date="1704715200">- Add ncurses patch 20240106
  + use ansi+arrows, ansi+apparrows, ansi+csr, ansi+erase, ansi+idc,
    ansi+idc1, ansi+idl, ansi+idl1, ansi+inittabs to trim -TD
  + minor manpage formatting changes for consistency.
  + modify doc-html test package's install-directory, per lintian.
  + add attr_get.3x to man_db.renames.in (patch by Sven Joachim).
- Add ncurses patch 20231230
  + improve formatting/style of manpages (patches by Branden Robinson).
  + add ms-vt100-16color, winconsole -TD
  + add rio, rio-direct -TD
  + add mostlike -TD
  + add wezterm, contour -TD
- Add ncurses patch 20231223
  + improve formatting/style of manpages (patches by Branden Robinson).
- Add ncurses patch 20231217
  + improve formatting/style of manpages (patches by Branden Robinson).
  + correct an assignment in infocmp "-u" for detecting if a boolean
    is unset in a base entry and set in a use'd chunk, i.e., if it was
    cancelled.
  + modify infocmp "-u" option to not report cancels for strings which
    were already cancelled in a use'd chunk.
  + join two lines in infotocap.3x to eliminate a spurious "description"
    link in installed manpages (report by Sven Joachim).
  + fix typo in NEWS (report by Sven Joachim).
- Port patches
  * ncurses-5.9-ibm327x.dif
  * ncurses-6.4.dif</changelog>
  <changelog author="lnussel@suse.com" date="1704801600">- Add foot to terminfo-base. It's the most compliant wayland
  terminal emulator according to
  https://github.com/dankamongmen/notcurses/blob/master/TERMINALS.md</changelog>
  <changelog author="werner@suse.de" date="1705320000">- Add ncurses patch 20240113
  + improve formatting/style of manpages (patches by Branden Robinson).
  + modify dist.mk to avoid passing developer's comments in manpages into
    the generated html documentation.
  + use ansi+local, ansi+local1, ansi+pp, ansi+rca, ansi+rca2, ansi+sgr
    to trim -TD
  + restore padding for wy520* and vt320-k311 (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1705924800">- Add ncurses patch 20240120
  + improve formatting/style of manpages (patches by Branden Robinson).
  + amend discussion of aliases in tput.1
  + use ansi+sgrbold, ansi+sgrdim, ansi+sgrso, ansi+sgrul, ansi+tabs
    ecma+color, ecma+sgr, vt100+4bsd, vt100+pfkeys, vt220+pcedit
    xterm+256color, xterm+acs, xterm+nopcfkeys, xterm+pcf2 to trim -TD
  + modify configure scripts/makefiles to omit KEY_RESIZE if the
    corresponding SIGWINCH feature is disabled.</changelog>
  <changelog author="werner@suse.de" date="1706529600">- Add ncurses patch 20240127
  + amend change to z39-a (report by Sven Joachim).
  + use xterm+nopcfkeys, vt52-basic, dec+pp, dec+sl, vt52+arrows,
    hp+pfk+cr, klone+acs, klone+color, klone+sgr, ncr160wy50+pp
    to trim -TD
  + NetBSD-related fixes for x68k and wsvt52 (patch by Thomas Klausner)</changelog>
  <changelog author="werner@suse.de" date="1707134400">- Add ncurses patch 20240203
  + minor changes to tracing and locale-checks.</changelog>
  <changelog author="werner@suse.de" date="1707739200">- Add ncurses patch 20240210
  + compiler-warning fixes, while investigating an optimizer bug in
    "gcc (MacPorts gcc13 13.2.0_4+stdlib_flag) 13.2.0"
    which results in only the first byte of a multibyte character being
    printed to the screen.
- Change order of use=vt100+4bsd and use=rxvt+pcfkeys in rxvt-basic
  to get correct arrow keys back (boo#1219626)</changelog>
  <changelog author="werner@suse.de" date="1708948800">- Add ncurses patch 20240217
  + add vt100+noapp, vt100+noapp+pc, xterm+app+pc, xterm+decedit from
    xterm #389 -TD
  + fix inconsistent description of wmouse_trafo() (Debian #1059778).
  + modify wenclose() to handle pads (Debian #1059783).
  + improve manpage discussion of mouseinterval() (Debian #1058560).
- Add ncurses patch 20240224
  + improve man/curs_mouse.3x style (Brandon Robinson, Sven Joachim).
  + provide for CCHARW_MAX greater than 1
  + eliminate use of PATH_MAX in lib_trace.c
  + work around misconfiguration of MacPorts gcc13, which exposes invalid
    definition of MB_LEN_MAX in gcc's fallback copy of limits.h (MacPorts
    [#69374]).</changelog>
</package>
<package pkgid="e0424580eb18835687c2d594c5f246af45939da9f27e4e54f92749d8b830ac78ea058e5c4a02186855e303a3941f1f887b66ac3c340decb28dceb1e9ce347f3c" name="nerdctl-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="slfo.1.1_1.2"/>
  <changelog author="contact@marknefedov.dev" date="1668254400">- Update to version 1.0.0:
  * nerdctl run
  * Add --log-driver=syslog
  * Add --log-opt=log-path=&lt;LOGPATH&gt; option for json-file logging drivers
  * Add --mac-address flag
  * Support --pid=container:&lt;CONTAINER&gt;
  * nerdctl build:
  * Support --build-arg args without explicit value
  * Support --output=DIR as an alias of --output type=local,dest=&lt;DIR&gt;
  * nerdctl compose:
  * Add nerdctl compose version command
  * nerdctl-full:
  * Update imgcrypt (1.1.7), BuildKit (0.10.5), stargz-snapshotter (0.12.1), Kubo (0.16.0)</changelog>
  <changelog author="contact@marknefedov.dev" date="1671278400">- Update to version 1.1.0:
  * nerdctl compose:
  * New commands: nerdctl compose (stop|restart|rm|images|exec|pause|unpause|top|port)
  * New flags: nerdctl compose ps --format=json
  * New YAML properties: x-nerdctl-{verify,cosign-public-key,sign,cosign-private-key}
  * nerdctl image convert:
  * New estargz flags: --estargz-min-chunk-size=&lt;SIZE&gt;, --estargz-external-toc, --estargz-keep-diff-id
  * New zstd flags: --zstdchunked-record-in, --zstdchunked-compression-level, --zstdchunked-chunk-size
  * Support OverlayBD (--overlaybd, --overlaybd-fs-type, --overlaybd-dbstr
  * nerdctl network rm:
  * Support removing a network by ID
  * nerdctl-full:
  * Update containerd (1.6.12), fuse-overlayfs (1.10), RootlessKit (1.1.0), Kubo (0.17.0), Stargz Snapshotter (0.13.0), BuildKit (0.10.6)</changelog>
  <changelog author="danish.prakash@suse.com" date="1677585600">- Update to version 1.2.1:
  * update containerd (1.6.19)
  * update Kubo (0.18.1)
  * update Nydus (2.1.4)
  * update BuildKit (0.11.3)
  * build(deps): bump github.com/klauspost/compress from 1.15.15 to 1.16.0
  * build(deps): bump github.com/containerd/containerd
- Add _service file</changelog>
  <changelog author="danish.prakash@suse.com" date="1680696000">- Update to version 1.3.0:
  * bump: buildkit to v0.11.3, fuse-overlayfs to v1.10, kubo to v0.18.1
  * build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0
  * build(deps): bump github.com/docker/cli
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * build(deps): bump github.com/ipfs/go-cid from 0.4.0 to 0.4.1
  * pkg/mountutil: improve error messages
  * use digest instead of a tag while signing
  * Add manugupt1's GPG key
  * build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/docker/cli
  * build(deps): bump github.com/compose-spec/compose-go
  * Support quiet in push cmd
  * Refactor image sign and verify logic
  * build(deps): bump github.com/compose-spec/compose-go
  * build(deps): bump actions/checkout from 3.4.0 to 3.5.0
  * Fix nerdctl help show the hidden commands
  * set container state error
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18
  * rootlessutil: always claim non-rootless on non-Linux.
  * Refactor run command networking options for Windows support.
  * Fix the top command on Windows
  * Add support for showing image size on inspect
  * build(deps): bump github.com/ipfs/go-cid from 0.3.2 to 0.4.0
  * Completely skip syslog-related tests on Windows.
  * test: rootless: main: use v2 config
  * Upgrade cosign to 2.0.0 in tests
  * Add unit test for exposing devices to Windows containers
  * Add MAINTAINERS_GUIDE.md
  * build(deps): bump actions/checkout from 3.3.0 to 3.4.0
  * build(deps): bump github.com/compose-spec/compose-go
  * build(deps): bump actions/setup-go from 3 to 4
  * build(deps): bump github.com/containerd/nydus-snapshotter
  * build(deps): bump github.com/klauspost/compress from 1.16.0 to 1.16.3
  * build(deps): bump github.com/fatih/color from 1.14.1 to 1.15.0
  * update containerd (1.7.0)
  * build(deps): bump github.com/containerd/nydus-snapshotter
  * build(deps): bump github.com/containerd/containerd
  * build(deps): bump github.com/containerd/containerd
  * Drop dependency on ctr/commands
  * Drop dependency on ctr/commands/content
  * Drop dependency on ctr/commands/tasks
  * remote snapshotters: migrate to containerd-based label management
  * build(deps): bump github.com/containerd/containerd
  * Port Windows device support from containerd
  * build(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0
  * Add notation signing and verification
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * handle container deps removal with postsop hooks
  * build(deps): bump github.com/containerd/containerd
  * Update naming of filter containers function &amp;&amp; `container list` handler
  * build(deps): bump github.com/compose-spec/compose-go
  * build(deps): bump github.com/containerd/nydus-snapshotter
  * Fix `operation not permitted` with systemd-homed
  * build(deps): bump github.com/containerd/go-cni
  * build(deps): bump github.com/containerd/nydus-snapshotter
  * feat: resolve special ip host-gateway
  * cmd/compose: add support for profiles
  * refactor(container-list): separate main logic out of printing logic</changelog>
  <changelog author="danish.prakash@suse.com" date="1681992000">- Update to version 1.3.1:
  * update kubo (0.19.1)
  * update nydus (2.2.0)
  * go.mod: fix format
  * test: add test for piping of `nerdctl run` with `-t`
  * build(deps): bump actions/checkout from 3.5.1 to 3.5.2
  * cmd/image/list: Fix typo breaking --no-trunc
  * Resolve Go cache warnings in CI workflows
  * Use pushRef instead of ref to build signPef
  * Add destination ports from iptables to used ports while allocating host ports
  * build(deps): bump actions/checkout from 3.5.0 to 3.5.1
  * build(deps): bump github.com/containerd/accelerated-container-image
  * run: make tty output behaviour compatible to docker and `nerdctl exec`
  * build(deps): bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1
  * build(deps): bump golang.org/x/crypto from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/net from 0.8.0 to 0.9.0
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * build(deps): bump github.com/klauspost/compress from 1.16.3 to 1.16.4
  * compose: implement Bind.CreateHostPath</changelog>
  <changelog author="danish.prakash@suse.com" date="1684756800">- Update to version 1.4.0:
  * build(deps): bump github.com/docker/cli
  * build(deps): bump github.com/containerd/continuity from 0.4.0 to 0.4.1
  * build(deps): bump github.com/docker/docker
  * nerdctl system prune: skip pruning build cache if buildkit is not running
  * Silence `WARN[0000] failed to get unpacked size of image`
  * build(deps): bump github.com/containerd/continuity from 0.3.0 to 0.4.0
  * build(deps): bump github.com/sirupsen/logrus from 1.9.1 to 1.9.2
  * build(deps): bump github.com/containerd/nydus-snapshotter
  * build(deps): bump github.com/compose-spec/compose-go
  * build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.1
  * go.mod: containerd/cgroups/v3 v3.0.1, docker/docker v24.0.0
  * nerdctl images: Remove TODOs about VirtualSize
  * build(deps): bump github.com/containerd/accelerated-container-image
  * CI: update containerd (1.7.1)
  * update runc (1.1.7)
  * update fuse-overlayfs (1.12)
  * update containerd-fuse-overlayfs (1.0.6)
  * update gotestsum (1.10.0)
  * update Kubo (0.20.0)
  * update Nydus (2.2.1)
  * update BuildKit (0.11.6)
  * update CNI plugins (1.3.0)
  * update containerd (1.7.1)
  * build(deps): bump github.com/containerd/accelerated-container-image
  * Allow printing of container logs that are not running.
  * build(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.1
  * build(deps): bump github.com/containernetworking/plugins
  * build(deps): bump github.com/containerd/typeurl/v2 from 2.1.0 to 2.1.1
  * build(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0
  * go.mod: github.com/opencontainers/image-spec v1.1.0-rc3
  * build(deps): bump github.com/docker/cli
  * build(deps): bump golang.org/x/net from 0.9.0 to 0.10.0
  * build(deps): bump github.com/docker/docker
  * Update Windows tests to use the check HyperV helper
  * build(deps): bump github.com/Microsoft/hcsshim
  * Add Windows tests for the container commands
  * build(deps): bump golang.org/x/term from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.2.0
  * [Refactor] Refactor the run command in createContainer.
  * Fix: incorrect json format output with `stat` command
  * testutil: Add Hyper-V support check
  * Add Cosign keyless mode required args for nerdctl compose
  * build(deps): bump github.com/docker/cli
  * build(deps): bump github.com/docker/docker
  * vendor: bump nydus-snapshotter v0.8.0
  * convert: enable oci option for nydus conversion type by default
  * Add Cosign keyless mode required args for nerdctl pull and run
  * build(deps): bump github.com/containerd/accelerated-container-image
  * build(deps): bump github.com/compose-spec/compose-go
  * build(deps): bump github.com/docker/cli
  * build(deps): bump github.com/klauspost/compress from 1.16.4 to 1.16.5
  * build(deps): bump docker/metadata-action from 4.3.0 to 4.4.0
  * build(deps): bump github.com/compose-spec/compose-go
  * build(deps): bump github.com/opencontainers/runtime-spec
  * build(deps): bump github.com/docker/docker
  * fix nerdctl exec init console size 0 0 problem
  * add tests
  * build(deps): bump github.com/Microsoft/go-winio from 0.6.0 to 0.6.1
  * add image information to compose ps
  * add json format to compose images</changelog>
  <changelog author="andrea.manzini@suse.com" date="1691496000">- Update to version 1.5.0:
  * fix: registry missing layer when concurrently push image
  * update build dependencies
  * feat: add `stats` command to `container`
  * registry documentation update
  * feat: adding support for lazy-pulling with soci in pull and run command
  * Add network flag to nerdctl build
  * Re-enable revive rules
  * Add functionality to copy files into and out of stopped containers.
  * Fix subnet overlapping
  * fix compose lacking support for replicas = 0
  * Fix minor typo in volume flags docs
  * Fix flaky windows test
  * Add metadata to volume create return
  * Remove warning msg when inspect containers without task
  * feat: add --volumes-from support in run command
  * Fix the rule of port allocate when executing -p multiple times for one command
  * Optimize for itoa operations
  * fix the restart policy in kill
  * refactor: container stats command
  * fix update restart policy
  * fix restart policy behaviour inconsistent
  * Prevent timing flakyness for `--since/--until` in TestLogs.
  * docs: fixed typo in command ref for nerdctl logs follow
  * feat: support '--detach-keys' for 'nerdctl (run|start)'
  * User docker compose v2 for docker-comppatible test
  * Adding ability to inject secrets into compose build command
  * Add `shm_size` service option support in Compose files
  * Ignore dependencies for compose build and logs
  * Sort OCI mounts for Docker compliance in nested mount scenario</changelog>
  <changelog author="danish.prakash@suse.com" date="1695816000">- Update to version 1.6.0:
  * nerdctl version: skip inspecting rootless daemon if the daemon is not running
  * docs: add SOCI snapshotter guideline in README.md
  * build(deps): bump github.com/klauspost/compress from 1.16.7 to 1.17.0
  * build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
  * update containerd (1.7.6)
  * feat: support push with soci
  * nerdctl compose cp: support rootless
  * compose: silence "build.config should be relative path" warning
  * Implement `nerdctl compose exec -T`
  * docs: fix docs for supported quiet flag of push command
  * build(deps): bump github.com/opencontainers/image-spec
  * add feature nerdctl compose cp
  * build(deps): bump github.com/containerd/nydus-snapshotter
  * seccomp: rename "default" to "builtin" to follow Docker 23
  * update golangci-lint (1.54.2)
  * update soci-snapshotter (0.4.0)
  * update Nydus (2.2.3)
  * update Kubo (0.22.0)
  * update fuse-overlayfs (1.13)
  * update slirp4netns (1.2.1)
  * update RootlessKit (1.1.1)
  * update imgcrypt (1.1.8)
  * update BuildKit (0.12.2)
  * update containerd (1.7.6)
  * build(deps): bump github.com/containerd/containerd from 1.7.5 to 1.7.6
  * build(deps): bump docker/login-action from 2.2.0 to 3.0.0
  * build(deps): bump docker/setup-qemu-action from 2 to 3
  * build(deps): bump docker/metadata-action from 4.6.0 to 5.0.0
  * build(deps): bump docker/setup-buildx-action from 2 to 3
  * build(deps): bump docker/build-push-action from 4.2.1 to 5.0.0
  * build(deps): bump github.com/compose-spec/compose-go
  * remove useless option from containerd-rootless-setuptool
  * build(deps): bump docker/build-push-action from 4.1.1 to 4.2.1
  * MAINTAINERS: add Kay Yan (yankay) as a REVIEWER
  * fix bash completion of volume rm
  * build(deps): bump github.com/cyphar/filepath-securejoin
  * adjust writers fmt
  * fix container_create_windows_test
  * add missing zero-length list check
  * build(deps): bump github.com/docker/cli
  * build(deps): bump github.com/docker/docker
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.15.0
  * build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0
  * build(deps): bump golang.org/x/text from 0.12.0 to 0.13.0
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0
  * build(deps): bump actions/checkout from 3.6.0 to 4.0.0
  * fix nerdctl run -v when host folder does not exist for bind mounts
  * build(deps): bump github.com/awslabs/soci-snapshotter
  * Makefile: install docs
  * Makefile: fix overriding GO command
  * Makefile: add GO_BUILD_FLAGS variable
  * Makefile: derive BINDIR from PREFIX
  * fix: grammatical errors
  * fix: succeeded typo
  * build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.5
  * build(deps): bump actions/checkout from 3.5.3 to 3.6.0
  * Support copying out of volumes in stopped containers
  * Fix typo
  * pkg/version: fulfill fields from `debug/buildinfo`
  * Fix usage of `errors.Join`
  * build(deps): bump github.com/compose-spec/compose-go
  * build(deps): bump github.com/containerd/imgcrypt from 1.1.7 to 1.1.8
  * build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0
  * support test integration docker 23 compatibility
  * support volume create anonymous
  * update runc (1.1.9)
  * Remove dependency on github.com/hashicorp/go-multierror
  * build(deps): bump github.com/compose-spec/compose-go
  * build(deps): bump github.com/tidwall/gjson from 1.15.0 to 1.16.0
  * Update to Go 1.21 in CI
  * build(deps): bump github.com/fahedouch/go-logrotate from 0.1.3 to 0.2.0
  * FreeBSD: Linux Container Support and BuildKit Integration
  * build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0
  * CI: Windows: enable Hyper-V containers
  * fix attach help is messed up
  * build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0
  * CI: move Windows tests to GHA
  * CI: move FreeBSD tests to GHA
  * test-integration-docker-compatibility: install Docker 20.10
  * build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0
  * .cirrus.yml: fix FreeBSD CI failure
  * build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0
  * feat: add 'nerdctl container attach'
  * Bump containerd to 1.7.3
  * Remove special case for Windows when mounting view
  * Add lease to prevent containerd GC</changelog>
  <changelog author="danish.prakash@suse.com" date="1696939200">- Bump go version to 1.21 (bsc#1215611)</changelog>
  <changelog author="danish.prakash@suse.com" date="1701691200">- Update to version 1.7.0:
  * build(deps): bump github.com/Microsoft/hcsshim from 0.11.2 to 0.11.4
  * update containerd-fuse-overlayfs (1.0.8)
  * Fix unstable sort of container list in compose
  * update imgcrypt (1.1.9)
  * update BuildKit (0.12.3)
  * update runc (1.1.10)
  * update containerd (1.7.8)
  * nerdctl ps: implement `--format {{.Label "foo"}}`
  * Dockerfile: stargz-snapshotter v0.15.1
  * fix add-host overwritten
  * build(deps): bump github.com/containerd/stargz-snapshotter/ipfs
  * build(deps): bump github.com/containerd/imgcrypt from 1.1.8 to 1.1.9
  * build(deps): bump github.com/containerd/stargz-snapshotter
  * nerdctl-full: compile ipfs (Kubo) as a static binary
  * nerdctl-full: compile containerd as static binaries
  * Support IPv6 for nerdctl network
  * Add support to CernVM-FS Snapshotter
  * build(deps): bump github.com/docker/cli
  * support running container with network id
  * build(deps): bump github.com/containerd/containerd from 1.7.7 to 1.7.8
  * build(deps): bump github.com/docker/docker
  * compose_config_test: workaround for Docker Compose v2.23.0
  * Vagrantfile.freebsd: pin generic/freebsd13 to version 4.3.2
  * build(deps): bump google.golang.org/grpc from 1.56.2 to 1.56.3
  * fix ps format names
  * support ip-masq option
  * build(deps): bump github.com/klauspost/compress from 1.17.1 to 1.17.2
  * Replace logrus.SetOutput() with log.L.Logger.SetOutput()
  * docs: minor soci push fix
  * build(deps): bump github.com/containerd/nydus-snapshotter
  * build(deps): bump github.com/containerd/continuity from 0.4.2 to 0.4.3
  * build(deps): bump tonistiigi/xx from 1.2.1 to 1.3.0
  * build(deps): bump github.com/compose-spec/compose-go
  * build(deps): bump github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2
  * build(deps): bump github.com/mattn/go-isatty from 0.0.19 to 0.0.20
  * build(deps): bump actions/checkout from 4.1.0 to 4.1.1
  * build(deps): bump github.com/klauspost/compress from 1.17.0 to 1.17.1
  * Use https://github.com/containerd/log for logging
  * build(deps): bump github.com/containerd/accelerated-container-image
  * fix: typo
  * nerdctl compose: fix --env-file
  * build(deps): bump github.com/containerd/nydus-snapshotter
  * chore: unnecessary code
  * build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0
  * fix: call client close
  * go.mod: github.com/containerd/containerd v1.7.7
  * dockerconfigresolver: nullify DefaultTLS when DefaultScheme == "http"
  * update gotestsum (1.10.0)
  * update Kubo (0.23.0)
  * update containerd-fuse-overlayfs (1.0.7)
  * update slirp4netns (1.2.2)
  * update containerd (1.7.7)
  * containerd/containerd/log -&gt; containerd/log
  * chore: Comment should with an optional leading article
  * build(deps): bump golang.org/x/net from 0.15.0 to 0.16.0
  * release.yml: migrate from `hub` to `gh`
  * build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
  * build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
  * build(deps): bump golang.org/x/term from 0.12.0 to 0.13.0
  * build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0
  * build(deps): bump github.com/containerd/nydus-snapshotter
  * Fix port allocate iptables regex
  * CNI: prioritize `/opt/cni/bin` over `/usr/lib/cni`
  * build(deps): bump github.com/containerd/nydus-snapshotter
  * docs: minor fixes to soci documentation
  * update toml to v2
  * fix: client close connection
  * Support zstd (non-chunked) conversion
  * build(deps): bump github.com/tidwall/gjson from 1.16.0 to 1.17.0
  * build(deps): bump actions/checkout from 4.0.0 to 4.1.0
  * chore: Comment should with an optional leading article
  * build(deps): bump github.com/Microsoft/hcsshim from 0.11.0 to 0.11.1
  * add missing flags for compose ps
  * add featrue network filter
  * build(deps): bump github.com/compose-spec/compose-go
  * image: dedup same platform entry</changelog>
</package>
<package pkgid="0af5fe219d9cc824b31a10e6110b7cfb676c2fb9dac7d5dfcf2cabc83cc5c6233460014b48d40dc6a3df72c860bad917fe2eab7e6c5fd258f931054e0b1c3aa7" name="net-snmp-debugsource" arch="aarch64">
  <version epoch="0" ver="5.9.4" rel="slfo.1.1_2.1"/>
  <changelog author="schubi@suse.com" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="abergmann@suse.com" date="1656936000">- update to 5.9.2 (bsc#1201103):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
- Refactor two patches to work with version number 5.9.2:
  delete:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  add:
  * net-snmp-5.9.2-pie.patch
  * net-snmp-5.9.2-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1657627200">- Rename libsnmp40 subpackage to libsnmp39: the libraries are all
  having soversion 39.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="abergmann@suse.com" date="1663761600">- update to 5.9.3:
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.</changelog>
  <changelog author="abergmann@suse.com" date="1664280000">- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1664798400">- change egrep/fgrep to grep -E/-F to avoid warnings boo#1203096
  add net-snmp-5.9.3-grep.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).
- Use new MFD rewrites of mib modules, where available.
- Disable legacy DES encryption and MD5 authentication protocols.</changelog>
  <changelog author="abergmann@suse.com" date="1731585600">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  * net-snmp-5.9.3-grep.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.2-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.2-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
- logrotate should use reload instead of restart (bsc#1232030)</changelog>
  <changelog author="abergmann@suse.com" date="1768219200">- Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).
  Add net-snmp-5.9.4-fix-out-of-bounds-trapOid-access.patch</changelog>
</package>
<package pkgid="bcfd61103a292a1fdf2a09b9a51e8395ec550996c7b0b4b274ee762f4d368046d62f8b4736231d9bf0c12aba619a78f7e72a735d6454473930efed8869701365" name="net-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.10" rel="slfo.1.1_2.1"/>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.10:
  * man: pt_BR: ifconfig: fix procmisc option typo
  * netstat: exit non-zero when sctp protocols are not supported
  * man: route: add single route del example
  * ifconfig: accept "pointtopoint" as an alias to "pointopoint"
  * man: netstat: fill out Timers section
  * man: ethers: remove funky comment blocks
  * man: standardize SEE ALSO across all pages &amp; translations
  * netstat: fix iface truncation with -i
  * ifconfig: fix exabyte statistic handling
  * man: ipmaddr/iptunnel: new stub man pages
  * man: route: use standard .BR for SEE ALSO
  * netstat: fix iface truncation with -g
  * po: rename et_EE to et
  * README/INSTALL: refresh for the modern times
  * THANKS: add a few more people from `git-log`
  * netstat: Set SCTP report compliant with -l/--listening option.
  * Describe "hyphen" program in man page.
  * man: cleanup ipfw &amp; ipchains refs
  * ipv6: fix memmove usage with overlapping memory
  * build: drop support for backing up programs
  * netstat: add ROSE print support
  * remove ancient "register" markings
  * hostname: constify a few string arguments
  * hostname: add fallback errno decoding on failure
  * de.po: fix typo "Processe" -&gt; "Prozesse"
  * route: Fix a missing space in the ipv6 route output
  * util: drop new() helper
  * proc: constify filename arg
  * nameif: add printf attributes to helper funcs
  * nameif: mark local vars/funcs as static
  * nameif: fix memory corruption and increase maximum MAC address length
  * inet_gr: tweak formatting to avoid confusing the compiler
  * ipmaddr: use safe_strncpy for ifr_name
  * ifconfig: fix confusing error message logic
  * ifconfig: add name subcommand to rename an interface
  * statistics: Fix ipFragOKs and ipFragFails verbiage
  * statistics: fix packets typo
  * fix minor mistakes in Czech translation
- drop 0003-Add-support-for-EiB-in-interface.c.patch
  0005-Add-support-for-interface-rename-in-nameif.patch: upstream
- net-tools-configure.patch: refresh</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sbrabec@suse.com" date="1752148800">- Perform bound checks when parsing interface labels in
  /proc/net/dev (bsc#1243581, CVE-2025-46836, GHSA-pfwf-h6m3-63wf,
  net-tools-CVE-2025-46836.patch,
  net-tools-CVE-2025-46836-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1754308800">- Fix a regression in net-tools-CVE-2025-46836.patch (bsc#1246608).</changelog>
  <changelog author="sbrabec@suse.com" date="1754913600">- Provide more readable error for interface name size checking
  introduced by net-tools-CVE-2025-46836.patch
  (bsc#1243581, net-tools-CVE-2025-46836-error-reporting.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1756382400">- Drop old Fedora patch 0006-Allow-interface-stacking.patch. It
  provided a fix for CVE-2025-46836 (bsc#142461), but it was fixes
  by the upstream in 2025 in a different way. Revert interferring
  net-tools-CVE-2025-46836.patch back to the upstream version.
- Fix stack buffer overflow in parse_hex (bsc#1248687,
  GHSA-h667-qrp8-gj58, net-tools-parse_hex-stack-overflow.patch).
- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687,
  GHSA-w7jq-cmw2-cq59,
  net-tools-proc_gen_fmt-buffer-overflow.patch).
- Avoid unsafe memcpy in ifconfig (bsc#1248687,
  net-tools-ifconfig-avoid-unsafe-memcpy.patch).
- Prevent overflow in ax25 and netrom (bsc#1248687,
  net-tools-ax25+netrom-overflow-1.patch,
  net-tools-ax25+netrom-overflow-2.patch).
- Keep possibility to enter long interface names, even if they are
  not accepted by the kernel, because it was always possible up to
  CVE-2025-46836 fix. But issue a warning about an interface name
  concatenation (bsc#1248410,
  net-tools-ifconfig-long-name-warning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1757160000">- Drop 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch. It
  was net-tools-1.60 specific leak fix and breaks netrom in
  net-tools-2.10 (bnc#544339#c2).</changelog>
  <changelog author="sbrabec@suse.com" date="1757332800">- Drop 0002-Do-not-warn-about-interface-socket-not-binded.patch. It
  worked around a net-tools-1.60 specific problem, that does not
  happen in net-tools-2.10. It is more harmful than useful, as it
  can hide real problems. (bsc#430864#c15,
  https://github.com/ecki/net-tools/issues/32#issuecomment-3265471116).</changelog>
</package>
<package pkgid="06a4f79e5c9506e7f0c4fda089fc2d23d1ec48c3a1f47cd61114ad1e3941882af9fdccb2793574af593806a749c87f8e008c50c3821ddad9b1e11d2a15abbf6c" name="net-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="2.10" rel="slfo.1.1_2.1"/>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.10:
  * man: pt_BR: ifconfig: fix procmisc option typo
  * netstat: exit non-zero when sctp protocols are not supported
  * man: route: add single route del example
  * ifconfig: accept "pointtopoint" as an alias to "pointopoint"
  * man: netstat: fill out Timers section
  * man: ethers: remove funky comment blocks
  * man: standardize SEE ALSO across all pages &amp; translations
  * netstat: fix iface truncation with -i
  * ifconfig: fix exabyte statistic handling
  * man: ipmaddr/iptunnel: new stub man pages
  * man: route: use standard .BR for SEE ALSO
  * netstat: fix iface truncation with -g
  * po: rename et_EE to et
  * README/INSTALL: refresh for the modern times
  * THANKS: add a few more people from `git-log`
  * netstat: Set SCTP report compliant with -l/--listening option.
  * Describe "hyphen" program in man page.
  * man: cleanup ipfw &amp; ipchains refs
  * ipv6: fix memmove usage with overlapping memory
  * build: drop support for backing up programs
  * netstat: add ROSE print support
  * remove ancient "register" markings
  * hostname: constify a few string arguments
  * hostname: add fallback errno decoding on failure
  * de.po: fix typo "Processe" -&gt; "Prozesse"
  * route: Fix a missing space in the ipv6 route output
  * util: drop new() helper
  * proc: constify filename arg
  * nameif: add printf attributes to helper funcs
  * nameif: mark local vars/funcs as static
  * nameif: fix memory corruption and increase maximum MAC address length
  * inet_gr: tweak formatting to avoid confusing the compiler
  * ipmaddr: use safe_strncpy for ifr_name
  * ifconfig: fix confusing error message logic
  * ifconfig: add name subcommand to rename an interface
  * statistics: Fix ipFragOKs and ipFragFails verbiage
  * statistics: fix packets typo
  * fix minor mistakes in Czech translation
- drop 0003-Add-support-for-EiB-in-interface.c.patch
  0005-Add-support-for-interface-rename-in-nameif.patch: upstream
- net-tools-configure.patch: refresh</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sbrabec@suse.com" date="1752148800">- Perform bound checks when parsing interface labels in
  /proc/net/dev (bsc#1243581, CVE-2025-46836, GHSA-pfwf-h6m3-63wf,
  net-tools-CVE-2025-46836.patch,
  net-tools-CVE-2025-46836-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1754308800">- Fix a regression in net-tools-CVE-2025-46836.patch (bsc#1246608).</changelog>
  <changelog author="sbrabec@suse.com" date="1754913600">- Provide more readable error for interface name size checking
  introduced by net-tools-CVE-2025-46836.patch
  (bsc#1243581, net-tools-CVE-2025-46836-error-reporting.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1756382400">- Drop old Fedora patch 0006-Allow-interface-stacking.patch. It
  provided a fix for CVE-2025-46836 (bsc#142461), but it was fixes
  by the upstream in 2025 in a different way. Revert interferring
  net-tools-CVE-2025-46836.patch back to the upstream version.
- Fix stack buffer overflow in parse_hex (bsc#1248687,
  GHSA-h667-qrp8-gj58, net-tools-parse_hex-stack-overflow.patch).
- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687,
  GHSA-w7jq-cmw2-cq59,
  net-tools-proc_gen_fmt-buffer-overflow.patch).
- Avoid unsafe memcpy in ifconfig (bsc#1248687,
  net-tools-ifconfig-avoid-unsafe-memcpy.patch).
- Prevent overflow in ax25 and netrom (bsc#1248687,
  net-tools-ax25+netrom-overflow-1.patch,
  net-tools-ax25+netrom-overflow-2.patch).
- Keep possibility to enter long interface names, even if they are
  not accepted by the kernel, because it was always possible up to
  CVE-2025-46836 fix. But issue a warning about an interface name
  concatenation (bsc#1248410,
  net-tools-ifconfig-long-name-warning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1757160000">- Drop 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch. It
  was net-tools-1.60 specific leak fix and breaks netrom in
  net-tools-2.10 (bnc#544339#c2).</changelog>
  <changelog author="sbrabec@suse.com" date="1757332800">- Drop 0002-Do-not-warn-about-interface-socket-not-binded.patch. It
  worked around a net-tools-1.60 specific problem, that does not
  happen in net-tools-2.10. It is more harmful than useful, as it
  can hide real problems. (bsc#430864#c15,
  https://github.com/ecki/net-tools/issues/32#issuecomment-3265471116).</changelog>
</package>
<package pkgid="f6eb8751f23e7c66f10c35c9e07477c4970f2218397283e2b43ef011ec0951bcef889cb3e047c845bc79905ae44e0cada43d811fd81e4c0942353320d39cbaf5" name="netcat-openbsd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.203" rel="slfo.1.1_1.2"/>
  <changelog author="crrodriguez@opensuse.org" date="1323518400">- Update xbuntu patches.
- Ensure we have large file support in 32 bit builds
- Fix rpmlint warnings</changelog>
  <changelog author="pth@suse.de" date="1378123200">- Split up the huge ubuntu patch into a debian specific patch,
  a patch that creates the examples, a patch with the openbasd-compat
  stuff and single files for each of the patches in debian/patches.
  This hugely eases maintainabilty:
  connect-timeout.patch, dccp.patch, gcc-warnings.patch,
  getservbyname.patch, glib-strlcpy.patch, help-version-exit.patch,
  nc-1.84-udp_stop.patch, netcat-info.patch, netcat-openbsd-debian.patch,
  netcat-openbsd-examples.patch, netcat-openbsd-openbsd-compat.patch,
  no-strtonum.patch, pollhup.patch, quit-timer.patch, reuseaddr.patch,
  send-crlf.patch, silence-z.patch, socks-b64-prototype.patch,
  udp-scan-timeout.patch, verbose-message-to-stderr.patch,
  verbose-numeric-port.patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389960000">- drop dependency on glib, strlcpy can be implemented with
  snprintf with glibc/linux
- drop "quilt" from buildrequires, no longer used.
- Use fvisibiliy=hidden to build, this is a program not
  a library and no symbols should be exported.
- modified patches:
  * glib-strlcpy.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop all patches that were never upstreamed:
  * connect-timeout.patch
  * dccp.patch
  * gcc-warnings.patch
  * getservbyname.patch
  * glib-strlcpy.patch
  * help-version-exit.patch
  * nc-1.84-udp_stop.patch
  * netcat-info.patch
  * netcat-openbsd-debian.patch
  * netcat-openbsd-examples.patch
  * netcat-openbsd-openbsd-compat.patch
  * no-strtonum.patch
  * pollhup.patch
  * quit-timer.patch
  * reuseaddr.patch
  * send-crlf.patch
  * silence-z.patch
  * socks-b64-prototype.patch
  * udp-scan-timeout.patch
  * verbose-message-to-stderr.patch
  * verbose-numeric-port.patch
- Switch to debian package to not waste resources on doing exactly
  the same.
- Switches URL for debian package
- Apply patches already prepared for debian package
  * port-to-linux-with-libsd.patch
  * compile-without-TLS-support.patch
  * connect-timeout.patch
  * get-sev-by-name.patch
  * send-crlf.patch
  * quit-timer.patch
  * udp-scan-timeout.patch
  * verbose-numeric-port.patch
  * dccp-support.patch
  * serialized-handling-multiple-clients.patch
  * set-TCP-MD5SIG-correctly-for-client-connections.patch
  * misc-failures-and-features.patch
- Do not use hand provided CMakeLists.txt but rely on upstream makefile</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Update to 1.195 release matching with debian
- Added new patches:
  * broadcast-support.patch
  * build-without-TLS-support.patch
  * destination-port-list.patch
  * use-flags-to-specify-listen-address.patch
- Refreshed patches:
  * connect-timeout.patch
  * dccp-support.patch
  * get-sev-by-name.patch
  * misc-failures-and-features.patch
  * port-to-linux-with-libsd.patch
  * quit-timer.patch
  * send-crlf.patch
  * serialized-handling-multiple-clients.patch
  * set-TCP-MD5SIG-correctly-for-client-connections.patch
  * udp-scan-timeout.patch
  * verbose-numeric-port.patch
- Drop patch compile-without-TLS-support.patch, renamed</changelog>
  <changelog author="tchvatal@suse.com" date="1568030400">- Update to 1.203 matching debian
- Remove patch verbose-numeric-port.patch
- Refresh patches:
  * broadcast-support.patch
  * build-without-TLS-support.patch
  * connect-timeout.patch
  * dccp-support.patch
  * destination-port-list.patch
  * get-sev-by-name.patch
  * misc-failures-and-features.patch
  * port-to-linux-with-libsd.patch
  * quit-timer.patch
  * send-crlf.patch
  * serialized-handling-multiple-clients.patch
  * set-TCP-MD5SIG-correctly-for-client-connections.patch
  * udp-scan-timeout.patch
  * use-flags-to-specify-listen-address.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1607342400">- Add port-select-on-connect.patch: if -s is given but not -p
  do not select port at bind() but at connect() time.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1608033600">- enable-udp-ip_recverr.patch: Enable IP_RECVERR on UDP sockets
  to match *bsd behaviour and avoid long timeouts if an error
  ocurrs.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1608033601">- Build with hidden visibility since no symbols should be exported</changelog>
  <changelog author="psimons@suse.com" date="1637582400">- Fix download URL. Debian has purged older versions from their
  servers.</changelog>
</package>
<package pkgid="989186161a9e70e35d31eee588476910860e60e30070f4bd45234c2f0dfd5d4f0f64b6fbc9f806af0a39f26cbcd644cc6ea9b7d54d0f53e5cf44d698765c5d62" name="netcat-openbsd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.203" rel="slfo.1.1_1.2"/>
  <changelog author="crrodriguez@opensuse.org" date="1323518400">- Update xbuntu patches.
- Ensure we have large file support in 32 bit builds
- Fix rpmlint warnings</changelog>
  <changelog author="pth@suse.de" date="1378123200">- Split up the huge ubuntu patch into a debian specific patch,
  a patch that creates the examples, a patch with the openbasd-compat
  stuff and single files for each of the patches in debian/patches.
  This hugely eases maintainabilty:
  connect-timeout.patch, dccp.patch, gcc-warnings.patch,
  getservbyname.patch, glib-strlcpy.patch, help-version-exit.patch,
  nc-1.84-udp_stop.patch, netcat-info.patch, netcat-openbsd-debian.patch,
  netcat-openbsd-examples.patch, netcat-openbsd-openbsd-compat.patch,
  no-strtonum.patch, pollhup.patch, quit-timer.patch, reuseaddr.patch,
  send-crlf.patch, silence-z.patch, socks-b64-prototype.patch,
  udp-scan-timeout.patch, verbose-message-to-stderr.patch,
  verbose-numeric-port.patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389960000">- drop dependency on glib, strlcpy can be implemented with
  snprintf with glibc/linux
- drop "quilt" from buildrequires, no longer used.
- Use fvisibiliy=hidden to build, this is a program not
  a library and no symbols should be exported.
- modified patches:
  * glib-strlcpy.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop all patches that were never upstreamed:
  * connect-timeout.patch
  * dccp.patch
  * gcc-warnings.patch
  * getservbyname.patch
  * glib-strlcpy.patch
  * help-version-exit.patch
  * nc-1.84-udp_stop.patch
  * netcat-info.patch
  * netcat-openbsd-debian.patch
  * netcat-openbsd-examples.patch
  * netcat-openbsd-openbsd-compat.patch
  * no-strtonum.patch
  * pollhup.patch
  * quit-timer.patch
  * reuseaddr.patch
  * send-crlf.patch
  * silence-z.patch
  * socks-b64-prototype.patch
  * udp-scan-timeout.patch
  * verbose-message-to-stderr.patch
  * verbose-numeric-port.patch
- Switch to debian package to not waste resources on doing exactly
  the same.
- Switches URL for debian package
- Apply patches already prepared for debian package
  * port-to-linux-with-libsd.patch
  * compile-without-TLS-support.patch
  * connect-timeout.patch
  * get-sev-by-name.patch
  * send-crlf.patch
  * quit-timer.patch
  * udp-scan-timeout.patch
  * verbose-numeric-port.patch
  * dccp-support.patch
  * serialized-handling-multiple-clients.patch
  * set-TCP-MD5SIG-correctly-for-client-connections.patch
  * misc-failures-and-features.patch
- Do not use hand provided CMakeLists.txt but rely on upstream makefile</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Update to 1.195 release matching with debian
- Added new patches:
  * broadcast-support.patch
  * build-without-TLS-support.patch
  * destination-port-list.patch
  * use-flags-to-specify-listen-address.patch
- Refreshed patches:
  * connect-timeout.patch
  * dccp-support.patch
  * get-sev-by-name.patch
  * misc-failures-and-features.patch
  * port-to-linux-with-libsd.patch
  * quit-timer.patch
  * send-crlf.patch
  * serialized-handling-multiple-clients.patch
  * set-TCP-MD5SIG-correctly-for-client-connections.patch
  * udp-scan-timeout.patch
  * verbose-numeric-port.patch
- Drop patch compile-without-TLS-support.patch, renamed</changelog>
  <changelog author="tchvatal@suse.com" date="1568030400">- Update to 1.203 matching debian
- Remove patch verbose-numeric-port.patch
- Refresh patches:
  * broadcast-support.patch
  * build-without-TLS-support.patch
  * connect-timeout.patch
  * dccp-support.patch
  * destination-port-list.patch
  * get-sev-by-name.patch
  * misc-failures-and-features.patch
  * port-to-linux-with-libsd.patch
  * quit-timer.patch
  * send-crlf.patch
  * serialized-handling-multiple-clients.patch
  * set-TCP-MD5SIG-correctly-for-client-connections.patch
  * udp-scan-timeout.patch
  * use-flags-to-specify-listen-address.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1607342400">- Add port-select-on-connect.patch: if -s is given but not -p
  do not select port at bind() but at connect() time.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1608033600">- enable-udp-ip_recverr.patch: Enable IP_RECVERR on UDP sockets
  to match *bsd behaviour and avoid long timeouts if an error
  ocurrs.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1608033601">- Build with hidden visibility since no symbols should be exported</changelog>
  <changelog author="psimons@suse.com" date="1637582400">- Fix download URL. Debian has purged older versions from their
  servers.</changelog>
</package>
<package pkgid="6590d3603caa21ff4f4b33c9690edb27384c3cba4b7183d08d38a8432b35dae5c7d67913096e866f5f271b0a55bf2f2a6d68ef7c0bf5d3efa52d6b8b4add8508" name="newt-debugsource" arch="aarch64">
  <version epoch="0" ver="0.52.23" rel="slfo.1.1_1.2"/>
  <changelog author="mc@suse.com" date="1506254400">- build python3 subpackage</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups.</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Use current factory dependencies
- Always build python3 bindings
- Small cleanup with spec-clenaer</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Build without py2 if needed
- Fix upstream url</changelog>
  <changelog author="lars@linux-schulserver.de - 0.52.20" date="1553083200">- use new license string compatible with latest spdx.org changes
- ran spec-cleaner
- adjust spec file to be able to build for SLE-12 and below:
  + re-add BuildRoot definition
  + re-add defattr definitions
  + define python2_sitearch if the macro is not defined
- added newt-0.52.20-implicit-pointer-decl.patch to get rid of
  compiler warnings about implicit definitions of functions</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="mpluskal@suse.com" date="1587643200">- Update to version 0.52.21:
  * define env NEWT_NOFLOWCTRL to disable flow control (Robert Gill)
  * don't leak memory on errors in dialogboxes
  * fix radio button selection check in snack
  * fix plural forms in Lithuanian translation (#1568999)
  * fix parallel build (Émeric Dupont)
  * allow python versions to be specified with --with-python option</changelog>
  <changelog author="fvogt@suse.com" date="1591790400">- Split doc build into separate spec file
- As the example scripts are "pointless", just don't install them</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 0.52.23:
  * fix automatic height of menu/list in whiptail (broken in 0.52.22)
  * fix automatic width of whiptail --yesno box
  * fix automatic width in whiptail with unicode characters
  * fix automatic width with whiptail --noitem and --notags options
  * fix spacing with longer tags in whiptail
  * avoid overlapping backtitle in whiptail with automatic height
  * fix crash in whiptail with new libpopt
  * switch from usleep to nanosleep (Rosen Penev)
  * fix libnewt.pc to enable static linking (Alexey Sheplyakov)
  * fix LDFLAGS order in snack linking (Sam James)
  * use CFLAGS when compiling snack
  * improve configure.ac (Thomas Kuehne)
  * install header and libnewt.pc with shared library (Michael Olbrich)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="c41c77aaa66aceab9538408ad119d68f758bedba80bbf747db0796f48fc1f1c8184d24045b47fc329b852b5d4ffa918f9be634c19dea6cb245a51ebc301d9eb1" name="nfs-client-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.3" rel="slfo.1.1_1.3"/>
  <changelog author="meissner@suse.com" date="1651924800">- switch to https urls</changelog>
  <changelog author="nfbrown@suse.com" date="1654776000">- 0001-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)
- 0002-Update-autoconfig-files-to-work-with-v2.71.patch
- 0003-autoconf-change-tirpc-to-check-for-a-file-not-for-an.patch
  Update for latest autoconf</changelog>
  <changelog author="nfbrown@suse.com" date="1657540800">- 0004-modprobe-protect-against-sysctl-errors.patch
  0005-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Suppress any errors from /sbin/sysctl, if for example, it isn't
  installed
  (bsc#1200710)</changelog>
  <changelog author="pvorel@suse.cz" date="1660305600">- Update to version 2.6.2
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.2/2.6.2-Changelog
- Remove patches from this release:
  - gcc12-fix.patch
  - 0001-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  - 0002-Update-autoconfig-files-to-work-with-v2.71.patch
  - 0003-autoconf-change-tirpc-to-check-for-a-file-not-for-an.patch
  - 0004-modprobe-protect-against-sysctl-errors.patch
- Refresh nfs-utils-1.0.7-bind-syntax.patch
- Added files:
  - /usr/lib/udev/rules.d/99-nfs.rules
  - /usr/libexec/nfsrahead
  - /usr/sbin/rpcctl
  - /usr/share/man/man5/nfsrahead.5.gz
  - /usr/share/man/man8/rpcctl.8.gz
- Sort man page entries in %files section</changelog>
  <changelog author="nfbrown@suse.com" date="1661515200">- sysconfig.nfs, nfs.conf: allow NFSv4 grace time to be set
  via sysconfig.
  SLE12 allowed this, SLE15 lost the ability.  Add it back
  with the name NFSV4GRACETIME.  Also improve description
  for NFSV4LEASETIME.
  (bsc#1202592)</changelog>
  <changelog author="nfbrown@suse.com" date="1669118400">- Add 0006-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Allow server scope to be set - removes the need to run nfsd
  inside a private UTS namespace for fail-over applications
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="dimstar@opensuse.org" date="1679918400">- Add explicit pkgconfig(libkeyutils) BuildRequires: nfs-utils
  requires this for nfsv4 and we should not rely on the devel
  package being brought in by other deps.</changelog>
  <changelog author="nfbrown@suse.com" date="1680004800">- Add 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0008-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be sed in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="pvorel@suse.cz" date="1681992000">- Update to version 2.6.3
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.3/2.6.3-Changelog
- Remove patches from this release:
  - 0006-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  - 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  - 0008-nfsd.man-fix-typo-in-section-on-scope.patch
- Remove systemd/50-nfs.conf (was removed in upstream in d8d29f85)
  and the realted patch (bsc#1200710).
  0005-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch.
- New file /usr/lib/udev/rules.d/60-nfs.rules (which replaced in upstream
  systemd/50-nfs.conf in 9466df03).
- Add fsidd:
  - /usr/lib/systemd/system/fsidd.service
  - /usr/lib/udev/rules.d/60-nfs.rules
  - /usr/sbin/fsidd</changelog>
</package>
<package pkgid="3ed3a1365a6b35270d318f9a978c24484c40f53cbde6dd7b63c138bd1ba5d152d78e1cc3db836d557a2e7f26d7cc48fa0057429a1cc5e788381d283f0de7234d" name="nfs-kernel-server-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.3" rel="slfo.1.1_1.3"/>
  <changelog author="meissner@suse.com" date="1651924800">- switch to https urls</changelog>
  <changelog author="nfbrown@suse.com" date="1654776000">- 0001-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)
- 0002-Update-autoconfig-files-to-work-with-v2.71.patch
- 0003-autoconf-change-tirpc-to-check-for-a-file-not-for-an.patch
  Update for latest autoconf</changelog>
  <changelog author="nfbrown@suse.com" date="1657540800">- 0004-modprobe-protect-against-sysctl-errors.patch
  0005-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Suppress any errors from /sbin/sysctl, if for example, it isn't
  installed
  (bsc#1200710)</changelog>
  <changelog author="pvorel@suse.cz" date="1660305600">- Update to version 2.6.2
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.2/2.6.2-Changelog
- Remove patches from this release:
  - gcc12-fix.patch
  - 0001-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  - 0002-Update-autoconfig-files-to-work-with-v2.71.patch
  - 0003-autoconf-change-tirpc-to-check-for-a-file-not-for-an.patch
  - 0004-modprobe-protect-against-sysctl-errors.patch
- Refresh nfs-utils-1.0.7-bind-syntax.patch
- Added files:
  - /usr/lib/udev/rules.d/99-nfs.rules
  - /usr/libexec/nfsrahead
  - /usr/sbin/rpcctl
  - /usr/share/man/man5/nfsrahead.5.gz
  - /usr/share/man/man8/rpcctl.8.gz
- Sort man page entries in %files section</changelog>
  <changelog author="nfbrown@suse.com" date="1661515200">- sysconfig.nfs, nfs.conf: allow NFSv4 grace time to be set
  via sysconfig.
  SLE12 allowed this, SLE15 lost the ability.  Add it back
  with the name NFSV4GRACETIME.  Also improve description
  for NFSV4LEASETIME.
  (bsc#1202592)</changelog>
  <changelog author="nfbrown@suse.com" date="1669118400">- Add 0006-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Allow server scope to be set - removes the need to run nfsd
  inside a private UTS namespace for fail-over applications
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="dimstar@opensuse.org" date="1679918400">- Add explicit pkgconfig(libkeyutils) BuildRequires: nfs-utils
  requires this for nfsv4 and we should not rely on the devel
  package being brought in by other deps.</changelog>
  <changelog author="nfbrown@suse.com" date="1680004800">- Add 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0008-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be sed in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="pvorel@suse.cz" date="1681992000">- Update to version 2.6.3
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.3/2.6.3-Changelog
- Remove patches from this release:
  - 0006-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  - 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  - 0008-nfsd.man-fix-typo-in-section-on-scope.patch
- Remove systemd/50-nfs.conf (was removed in upstream in d8d29f85)
  and the realted patch (bsc#1200710).
  0005-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch.
- New file /usr/lib/udev/rules.d/60-nfs.rules (which replaced in upstream
  systemd/50-nfs.conf in 9466df03).
- Add fsidd:
  - /usr/lib/systemd/system/fsidd.service
  - /usr/lib/udev/rules.d/60-nfs.rules
  - /usr/sbin/fsidd</changelog>
</package>
<package pkgid="6f34d4900da9f00e3b88eb658a562f38008ee3f7ef8176b543cfc5656ba33bbe5544a8b08627ac6650dc750b050b389aadfe0d80a9ad5cb9feb34c544d97c4e3" name="nfs-utils-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.3" rel="slfo.1.1_1.3"/>
  <changelog author="meissner@suse.com" date="1651924800">- switch to https urls</changelog>
  <changelog author="nfbrown@suse.com" date="1654776000">- 0001-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)
- 0002-Update-autoconfig-files-to-work-with-v2.71.patch
- 0003-autoconf-change-tirpc-to-check-for-a-file-not-for-an.patch
  Update for latest autoconf</changelog>
  <changelog author="nfbrown@suse.com" date="1657540800">- 0004-modprobe-protect-against-sysctl-errors.patch
  0005-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Suppress any errors from /sbin/sysctl, if for example, it isn't
  installed
  (bsc#1200710)</changelog>
  <changelog author="pvorel@suse.cz" date="1660305600">- Update to version 2.6.2
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.2/2.6.2-Changelog
- Remove patches from this release:
  - gcc12-fix.patch
  - 0001-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  - 0002-Update-autoconfig-files-to-work-with-v2.71.patch
  - 0003-autoconf-change-tirpc-to-check-for-a-file-not-for-an.patch
  - 0004-modprobe-protect-against-sysctl-errors.patch
- Refresh nfs-utils-1.0.7-bind-syntax.patch
- Added files:
  - /usr/lib/udev/rules.d/99-nfs.rules
  - /usr/libexec/nfsrahead
  - /usr/sbin/rpcctl
  - /usr/share/man/man5/nfsrahead.5.gz
  - /usr/share/man/man8/rpcctl.8.gz
- Sort man page entries in %files section</changelog>
  <changelog author="nfbrown@suse.com" date="1661515200">- sysconfig.nfs, nfs.conf: allow NFSv4 grace time to be set
  via sysconfig.
  SLE12 allowed this, SLE15 lost the ability.  Add it back
  with the name NFSV4GRACETIME.  Also improve description
  for NFSV4LEASETIME.
  (bsc#1202592)</changelog>
  <changelog author="nfbrown@suse.com" date="1669118400">- Add 0006-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Allow server scope to be set - removes the need to run nfsd
  inside a private UTS namespace for fail-over applications
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="dimstar@opensuse.org" date="1679918400">- Add explicit pkgconfig(libkeyutils) BuildRequires: nfs-utils
  requires this for nfsv4 and we should not rely on the devel
  package being brought in by other deps.</changelog>
  <changelog author="nfbrown@suse.com" date="1680004800">- Add 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0008-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be sed in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="pvorel@suse.cz" date="1681992000">- Update to version 2.6.3
  - https://kernel.org/pub/linux/utils/nfs-utils/2.6.3/2.6.3-Changelog
- Remove patches from this release:
  - 0006-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  - 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  - 0008-nfsd.man-fix-typo-in-section-on-scope.patch
- Remove systemd/50-nfs.conf (was removed in upstream in d8d29f85)
  and the realted patch (bsc#1200710).
  0005-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch.
- New file /usr/lib/udev/rules.d/60-nfs.rules (which replaced in upstream
  systemd/50-nfs.conf in 9466df03).
- Add fsidd:
  - /usr/lib/systemd/system/fsidd.service
  - /usr/lib/udev/rules.d/60-nfs.rules
  - /usr/sbin/fsidd</changelog>
</package>
<package pkgid="78957acb80a30da97a1e113418c705f0578839184f9df55da195d7a2676946dd0d6b11f817680f80c5c409becd21ae3889b36342805dcb7c29ad21d5060c2250" name="nftables-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="slfo.1.1_1.6"/>
  <changelog author="jengelh@inai.de" date="1621944000">- Update to release 0.9.9
  * Flowtable hardware offload support
  * Support for the table owner flag.
  * 802.1ad (QinQ) support
  * cgroupsv2 support.
  * match on SCTP packet chunks (dependent on Linux 5.14)
  * Allow to use verdict in set/map typeof definitions</changelog>
  <changelog author="jengelh@inai.de" date="1629374400">- Update to release 1.0.0
  * Catch-all set element support.
  * The command-line option --define is now recognized.
  * Stateful expressions in maps.
  * Allow combination of jhash, symhash and numgen expressions with
    the queue statement.
  * Allow combination of verdict maps with interval concatenations.</changelog>
  <changelog author="jengelh@inai.de" date="1637236800">- Update to release 1.0.1
  * Reduce memory footprint when loading large sets/maps.
  * Speed up reload of large sets/maps.
  * Speed up listing of specific tables in large ruleset, e.g.
    large ruleset with ~100k lines.
  * Speed up --terse option when listing a ruleset large sets/maps.
  * Print raw payload expression in hexadecimal, e.g.
    "@ll,0,8 &amp; 0x80 == 0x80"
  * egress hook support (available since 5.16-rc1).
  * Allow matching and update bytes at inner header/payload
    offset (available since 5.16-rc1).</changelog>
  <changelog author="jengelh@inai.de" date="1645531200">- Update to release 1.0.2
  * New ruleset optimization -o/--optimize option.
  * Support for IP and TCP options and SCTP chunks in sets.
  * Support for tcp fastopen, md5sig and mptcp options.
  * MP-TCP subtype matching support.
  * JSON support for flowtables.
- Add 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch</changelog>
  <changelog author="jengelh@inai.de" date="1653998400">- Update to release 1.0.3
  * Support for wildcard interface name matching with sets
  * Support for runtime auto-merge of set elements.
  * Enhancements for the ruleset optimization -o/--optimize
    option which allows to coalesce several NAT rules into map.
  * Support for raw expressions in concatenations.
  * Support for integer type protocol header fields in concatenations.
  * Allow to reset TCP options (requires Linux kernel &gt;= 5.18)
- Drop 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch</changelog>
  <changelog author="jengelh@inai.de" date="1654603200">- Update to release 1.0.4
  * Fixed a segfault in -o/--optimize with unsupported statements.
  * Bogus datatype mismatch error report in sets was fixed.</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 1.0.5:
  * Fixes for the -o/--optimize, run this --optimize option to automagically
    compact your ruleset using sets, maps and concatenations
  * Fix ethernet and vlan concatenations, eg. define a dynamic set which
    is populated from the packet path
  * Fix ruleset listing with interface wildcard map
  * Fix several regressions in the input lexer which broke valid rulesets.
  * Fix slowdown with large lists of singleton interval elements.
  * Fix set automerge feature for large lists of singleton interval elements.
  * Fix bogus error reporting for exact overlaps.
  * Fix segfault when adding elements to invalid set.
  * fix device parsing in netdev family in json.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Update to release 1.0.6
  * Fix bytecode generation for concatenation of intervals where
    selectors use different byteorder datatypes, e.g. IPv4
    (network byte order).
  * Fix match of uncommon protocol matches with raw expressions
  * Unbreak insertion of rules with intervals ("sport {
    3478-3497, 16384-16387 }")</changelog>
  <changelog author="jengelh@inai.de" date="1678708800">- Update to release 1.0.7
  * Support for vxlan/geneve/gre/gretap matching
  * auto-merge support for partial set element deletion
  * Allow for NAT mapping with concatenation and ranges
  * Support for quota in sets</changelog>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 1.0.8
  * Support for setting meta and ct mark from other fields in
    rules, e.g. set meta mark to ip dscp header field.
  * Enhacements for -o/--optimize to deal with NAT statements, to
    compact masquerade statements.
  * Support for stateful statements in anonymous maps, such as
    counters.
  * Support for resetting stateful expressions in sets, maps and
    elements, e.g. counters.
  * broute support to short-circuit bridge logic from the bridge
    prerouting hook and pass up packets to the local IP stack.
  * JSON support for table and chain comments.
- Added 0001-Revert-py-replace-distutils-with-setuptools.patch</changelog>
</package>
<package pkgid="be5726b41d332bfb08b4f573d90921fd13ae55d422c89fa58a2d25a0cda577b4567b71581f32bee743a7103079ec9aa666de75b95a81400f5fbc7f1a0211d45b" name="nftables-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="slfo.1.1_1.6"/>
  <changelog author="jengelh@inai.de" date="1621944000">- Update to release 0.9.9
  * Flowtable hardware offload support
  * Support for the table owner flag.
  * 802.1ad (QinQ) support
  * cgroupsv2 support.
  * match on SCTP packet chunks (dependent on Linux 5.14)
  * Allow to use verdict in set/map typeof definitions</changelog>
  <changelog author="jengelh@inai.de" date="1629374400">- Update to release 1.0.0
  * Catch-all set element support.
  * The command-line option --define is now recognized.
  * Stateful expressions in maps.
  * Allow combination of jhash, symhash and numgen expressions with
    the queue statement.
  * Allow combination of verdict maps with interval concatenations.</changelog>
  <changelog author="jengelh@inai.de" date="1637236800">- Update to release 1.0.1
  * Reduce memory footprint when loading large sets/maps.
  * Speed up reload of large sets/maps.
  * Speed up listing of specific tables in large ruleset, e.g.
    large ruleset with ~100k lines.
  * Speed up --terse option when listing a ruleset large sets/maps.
  * Print raw payload expression in hexadecimal, e.g.
    "@ll,0,8 &amp; 0x80 == 0x80"
  * egress hook support (available since 5.16-rc1).
  * Allow matching and update bytes at inner header/payload
    offset (available since 5.16-rc1).</changelog>
  <changelog author="jengelh@inai.de" date="1645531200">- Update to release 1.0.2
  * New ruleset optimization -o/--optimize option.
  * Support for IP and TCP options and SCTP chunks in sets.
  * Support for tcp fastopen, md5sig and mptcp options.
  * MP-TCP subtype matching support.
  * JSON support for flowtables.
- Add 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch</changelog>
  <changelog author="jengelh@inai.de" date="1653998400">- Update to release 1.0.3
  * Support for wildcard interface name matching with sets
  * Support for runtime auto-merge of set elements.
  * Enhancements for the ruleset optimization -o/--optimize
    option which allows to coalesce several NAT rules into map.
  * Support for raw expressions in concatenations.
  * Support for integer type protocol header fields in concatenations.
  * Allow to reset TCP options (requires Linux kernel &gt;= 5.18)
- Drop 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch</changelog>
  <changelog author="jengelh@inai.de" date="1654603200">- Update to release 1.0.4
  * Fixed a segfault in -o/--optimize with unsupported statements.
  * Bogus datatype mismatch error report in sets was fixed.</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 1.0.5:
  * Fixes for the -o/--optimize, run this --optimize option to automagically
    compact your ruleset using sets, maps and concatenations
  * Fix ethernet and vlan concatenations, eg. define a dynamic set which
    is populated from the packet path
  * Fix ruleset listing with interface wildcard map
  * Fix several regressions in the input lexer which broke valid rulesets.
  * Fix slowdown with large lists of singleton interval elements.
  * Fix set automerge feature for large lists of singleton interval elements.
  * Fix bogus error reporting for exact overlaps.
  * Fix segfault when adding elements to invalid set.
  * fix device parsing in netdev family in json.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Update to release 1.0.6
  * Fix bytecode generation for concatenation of intervals where
    selectors use different byteorder datatypes, e.g. IPv4
    (network byte order).
  * Fix match of uncommon protocol matches with raw expressions
  * Unbreak insertion of rules with intervals ("sport {
    3478-3497, 16384-16387 }")</changelog>
  <changelog author="jengelh@inai.de" date="1678708800">- Update to release 1.0.7
  * Support for vxlan/geneve/gre/gretap matching
  * auto-merge support for partial set element deletion
  * Allow for NAT mapping with concatenation and ranges
  * Support for quota in sets</changelog>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 1.0.8
  * Support for setting meta and ct mark from other fields in
    rules, e.g. set meta mark to ip dscp header field.
  * Enhacements for -o/--optimize to deal with NAT statements, to
    compact masquerade statements.
  * Support for stateful statements in anonymous maps, such as
    counters.
  * Support for resetting stateful expressions in sets, maps and
    elements, e.g. counters.
  * broute support to short-circuit bridge logic from the bridge
    prerouting hook and pass up packets to the local IP stack.
  * JSON support for table and chain comments.
- Added 0001-Revert-py-replace-distutils-with-setuptools.patch</changelog>
</package>
<package pkgid="5fe28ef9a7db36f4c1d5ea490bae6be6afdea12b5da11757384998e1ca761e7deabb71d19e06fcc84cdebca87b80786cce8aeb344ebf522d50f5d1a1f55e6dba" name="nghttp2-debugsource" arch="aarch64">
  <version epoch="0" ver="1.52.0" rel="slfo.1.1_1.4"/>
  <changelog author="dmueller@suse.com" date="1639828800">- update to 1.46.0:
  * see https://nghttp2.org/blog/2021/07/18/nghttp2-v1-44-0/
  * see https://nghttp2.org/blog/2021/09/20/nghttp2-v1-45-0/
  * see https://nghttp2.org/blog/2021/10/19/nghttp2-v1-46-0/</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 1.47.0:
  * see https://nghttp2.org/blog/2022/02/23/nghttp2-v1-47-0/</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 1.48.0:
  * lib: Allow server to override RFC 9218 stream priority
  * lib: Add a server option to fallback to RFC 7540 priorities
  * lib: Add PRIORITY_UPDATE frame support
  * lib: Implement RFC 9218 extensible prioritization scheme
  * lib: Do not verify host field specific characters for response field
  * lib: No rfc7540 priorities
  * lib: Fix stream stall when initial window size is decreased
  * doc: Document how to change stream prioritization scheme
  * build: Compile with libressl 3.5
  * build: EXTRA_DIST: List mruby files explicitly
  * build: Bump ngtcp2 and nghttp3
  * build: Do not check application libraries if --enable-lib-only is given
  * src: Update default TLS cipher suites
  * nghttpx, h2load: Better pack UDP packets in one GSO write
  * nghttpx, h2load: Quic error handling
  * nghttpx, h2load: Fix QUIC performance regression
  * nghttp, nghttpd, nghttpx: Add ktls support
  * h2load: Send more packets without GSO per event loop
  * h2load: Add ktls support
  * nghttpd: Fix TLS read stall
  * nghttpx: Disable RFC 7540 priorities
  * nghttpx: Client always uses simpler TLS handshake
  * nghttpx: Add affinity-cookie-stickiness backend parameter
  * nghttpx: Fix broken session affinity
  * nghttpx: Limit CONNECTION_CLOSE and Retry under server amplification limit
  * integration: Go update
  * integration: Add go.mod
  * third-party: Bump llhttp to 75b45129db961e1fb3c56044e1b8f7721bfaee5d
  * third-party: Bump libbpf to v0.8.0
  * third-party: Bump mruby to 3.1.0
  * third-party: Bump neverbleed based on the latest head (GH-1708)</changelog>
  <changelog author="dmueller@suse.com" date="1661169600">- update to 1.49.0:
  * https://nghttp2.org/blog/2022/08/22/nghttp2-v1-49-0/</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- disable asio by default as it is deprecated by upstream and
  will be removed in the next release</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 1.50.0:
  * https://nghttp2.org/blog/2022/09/21/nghttp2-v1-50-0/
  This release adds
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation which disables
  checking leading and trailing white spaces against HTTP field value.</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 1.51.0:
  * https://nghttp2.org/blog/2022/11/13/nghttp2-v1-51-0/
  This release fixes affinity-cookie-stickiness parameter handling.</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- update to 1.52.0:
  * https://nghttp2.org/blog/2023/02/13/nghttp2-v1-52-0/
  * sphinx_rtd_theme has been removed from the repository
    and archive.
  * The deprecated Python bindings has been removed.
  * The deprecated libnghttp2_asio has been removed.
  * llhttp and neverbleed have been updated.
  * This release fixes the bug that stalls TLS connection.
  * This release adds more http3 integration tests.
- drop nghttp2-remove-python-build.patch: obsolete as the code got removed</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712232000">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
</package>
<package pkgid="7f0884bdfdfc17dbe8297df4620474060a9115bd1794bbeb5e22478a65be85621eb65870d82e443bd556862b55ceaa5ff6851e365e74c01f27a306625e6aaa1b" name="npth-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6" rel="slfo.1.1_1.2"/>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1411300800">- npth 1.0:
  * improvements to the build system
  * restore sigmask at fork
- spec file cleanup:
  * gpg-offline covered by source_validator
  * use source URLs</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414929600">- npth 1.1:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- npth 1.2:
  * Fix possible clobbering of ERRNO.</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- update to 1.3:
  * Bypass npth_protect/npth_unprotect iff the library has not yet
    been initialized.
  * Improve detection of clock_gettime
- use reproducible build timestamp</changelog>
  <changelog author="astieger@suse.com" date="1494936000">- update to 1.4:
  * fixes for platforms other than GNU/Linux
  * New function npth_is_protected to help debugging.
  * Change license from LGPLv3+/GPLv2+ to LGPLv2+.
- run tests
- update signing keyring
- package license text and other information</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- update to 1.5:
  * Fix the busy waiting emulation of pthread_mutex_timedlock for
    Unices lacking that function</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1531742400">- Update to 1.6:
  * Fix library requirements for HPUX.</changelog>
  <changelog author="jengelh@inai.de" date="1599220800">- Remove old specfile constructs and doubleshipping of docs.</changelog>
</package>
<package pkgid="5c37521477b81d0498c6e4d86d564bb60368f360e01e4a9e8d0cc63692b591198f881622b46fa2da11fadc75b5441d2a07599b0134c15d0c752c3acfabb2fe1c" name="nss-mdns-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.15.1" rel="slfo.1.1_1.2"/>
  <changelog author="vuntz@novell.com" date="1241179200">- Remove AutoReqProv: it's default now.
- Also fix a typo in the description.</changelog>
  <changelog author="jengelh@medozas.de" date="1260878400">- Add baselibs.conf as a source</changelog>
  <changelog author="vuntz@opensuse.org" date="1342008000">- Add nss-mdns-config script as a source, and install it in
  /usr/sbin: this script can be used to enable/disable mdns in
  /etc/nsswitch.conf (-4/-6 can be used to restrict
  enabling/disabling to IPv4/IPv6).
- Change %post/%preun scriptlets to use new nss-mdns-config script
  instead of custom perl-fu.
- Do not restrict mdns support in /etc/nsswitch.conf to IPv4: just
  pass --enable to nss-mdns-config in %post. Fix bnc#710231.
- Only call nss-mdns-config in %post on first install, to avoid
  overwriting changes done by users. Fix nss-mdns side of
  bnc#729796.
- Do not call sed to change /etc/nsswitch.conf to remove services
  not provided by nss-mdns anymore: when we need this, we'll be
  able to integrate this in nss-mdns-config.</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="ledest@gmail.com" date="1413633600">- Fix bashisms in nss-mdns-config.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553774400">- Update to version 0.14.1:
  + No code changes.
  + Fix unit tests to properly work on s390x.
- Changes from version 0.14.0:
  + Fix -Wformat-truncation problem during reading of the allow
    file.
- Changes from version 0.13.2:
  + No code changes.
  + Change how ./configure --enable/disable-tests works:
  - --enable-tests: tests are enabled and will fail if
    dependencies are not found.
  - --disable-tests: tests are not enabled and will not be built
    even if dependencies are found.
  - no flag given: tests are conditionally enabled if
    dependencies are found.
- Changes from version 0.13.1:
  + Very minor code changes (should result in no binary changes).
  + Reformat source to 80 columns.
  + Improve configure options to allow disabling tests even if the
    testing libraries are present.
  + Automake is now non-recursive.
  + Hardcoded paths are now exposed as configure variables.
- Changes from version 0.13:
  + Fix an old memory leak in reverse lookup.
  + Fix the broken workaround for nscd segfaults (not all clients
    would see all results).
  + Simplify buffer management.
  + More unit tests, more cleanups, and fewer gotos.
- Changes from version 0.12:
  + Fix segfault when using nscd.
  + Remove untested, unmaintained BSD support (please help out if
    you would like BSD support to return!).
- Changes from version 0.11:
  + Moved to new GitHub location, docs migrated to markdown.
  + The long-deprecated LEGACY mode is removed.
  + The long-deprecated HONOUR_SEARCH_DOMAINS option is removed.
  + Unit tests are now included, with make check.
  + nss-mdns now implements standard heuristics for detecting
    .local unicast resolution and will automatically disable
    resolution when a local server responds to .local requests.
  + _nss_mdns_gethostbyname3_r and _nss_mdns_gethostbyname4_r are
    now implemented.
  + Full dual-stack IPv4/IPv6 support is implemented.
- Run spec-cleaner, modernize spec.
- Update URL and Source to new upstream home.
- Drop unaligned.diff: Fixed upstream.
- Add pkgconfig(check) BuildRequires and make_check macro, run
  buildtime tests.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Move libraries into the standard dir (/usr/lib*).
  nss_winbind already lives there, which I take as an indicator
  this move will work.</changelog>
  <changelog author="schwab@suse.de" date="1589889600">- nss-mdns-config: Use /usr/etc/nsswitch.conf as input if
  /etc/nsswitch.conf doesn't exist yet</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- Update to version 0.15.1:
  + Updated README.md for clarity
  + The return of BSD support!
  + Support for `AVAHI_SOCKET` in `/run` (instead of legacy
    `/var/run`).</changelog>
</package>
<package pkgid="e6ab96f54f6b20e09df578953ad77ff26a9703193690eedfb2c422a2f0a3592740415cffc2c7eae8099cf1c1abafc15efb958fff54b8ee26d181cb47545e17d5" name="nss-mdns-debugsource" arch="aarch64">
  <version epoch="0" ver="0.15.1" rel="slfo.1.1_1.2"/>
  <changelog author="vuntz@novell.com" date="1241179200">- Remove AutoReqProv: it's default now.
- Also fix a typo in the description.</changelog>
  <changelog author="jengelh@medozas.de" date="1260878400">- Add baselibs.conf as a source</changelog>
  <changelog author="vuntz@opensuse.org" date="1342008000">- Add nss-mdns-config script as a source, and install it in
  /usr/sbin: this script can be used to enable/disable mdns in
  /etc/nsswitch.conf (-4/-6 can be used to restrict
  enabling/disabling to IPv4/IPv6).
- Change %post/%preun scriptlets to use new nss-mdns-config script
  instead of custom perl-fu.
- Do not restrict mdns support in /etc/nsswitch.conf to IPv4: just
  pass --enable to nss-mdns-config in %post. Fix bnc#710231.
- Only call nss-mdns-config in %post on first install, to avoid
  overwriting changes done by users. Fix nss-mdns side of
  bnc#729796.
- Do not call sed to change /etc/nsswitch.conf to remove services
  not provided by nss-mdns anymore: when we need this, we'll be
  able to integrate this in nss-mdns-config.</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="ledest@gmail.com" date="1413633600">- Fix bashisms in nss-mdns-config.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553774400">- Update to version 0.14.1:
  + No code changes.
  + Fix unit tests to properly work on s390x.
- Changes from version 0.14.0:
  + Fix -Wformat-truncation problem during reading of the allow
    file.
- Changes from version 0.13.2:
  + No code changes.
  + Change how ./configure --enable/disable-tests works:
  - --enable-tests: tests are enabled and will fail if
    dependencies are not found.
  - --disable-tests: tests are not enabled and will not be built
    even if dependencies are found.
  - no flag given: tests are conditionally enabled if
    dependencies are found.
- Changes from version 0.13.1:
  + Very minor code changes (should result in no binary changes).
  + Reformat source to 80 columns.
  + Improve configure options to allow disabling tests even if the
    testing libraries are present.
  + Automake is now non-recursive.
  + Hardcoded paths are now exposed as configure variables.
- Changes from version 0.13:
  + Fix an old memory leak in reverse lookup.
  + Fix the broken workaround for nscd segfaults (not all clients
    would see all results).
  + Simplify buffer management.
  + More unit tests, more cleanups, and fewer gotos.
- Changes from version 0.12:
  + Fix segfault when using nscd.
  + Remove untested, unmaintained BSD support (please help out if
    you would like BSD support to return!).
- Changes from version 0.11:
  + Moved to new GitHub location, docs migrated to markdown.
  + The long-deprecated LEGACY mode is removed.
  + The long-deprecated HONOUR_SEARCH_DOMAINS option is removed.
  + Unit tests are now included, with make check.
  + nss-mdns now implements standard heuristics for detecting
    .local unicast resolution and will automatically disable
    resolution when a local server responds to .local requests.
  + _nss_mdns_gethostbyname3_r and _nss_mdns_gethostbyname4_r are
    now implemented.
  + Full dual-stack IPv4/IPv6 support is implemented.
- Run spec-cleaner, modernize spec.
- Update URL and Source to new upstream home.
- Drop unaligned.diff: Fixed upstream.
- Add pkgconfig(check) BuildRequires and make_check macro, run
  buildtime tests.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Move libraries into the standard dir (/usr/lib*).
  nss_winbind already lives there, which I take as an indicator
  this move will work.</changelog>
  <changelog author="schwab@suse.de" date="1589889600">- nss-mdns-config: Use /usr/etc/nsswitch.conf as input if
  /etc/nsswitch.conf doesn't exist yet</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- Update to version 0.15.1:
  + Updated README.md for clarity
  + The return of BSD support!
  + Support for `AVAHI_SOCKET` in `/run` (instead of legacy
    `/var/run`).</changelog>
</package>
<package pkgid="da9fcd9509a29fc58f7093fdcdb29044c73b81bac967a8bff06fda5a19cfb6ce37afc6bc1cd88fb86bc483edb4bfc08b02f33366f07d63fc06a4d84caf368db3" name="numactl-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.18.0.g3871b1c" rel="slfo.1.1_1.2"/>
  <changelog author="trenn@suse.de" date="1626696000">- Update to version 2.0.14.17.g498385e:
  * numactl.c: fix use after free
  * sysfs.c: prevent mem leak in sysfs_node_read()
  * sysfs.c: don't leak fd if fail in sysfs_read()
  * shm.c: fix memleak in verify_shm()
  * shm.c: fix memleak in dump_shm()
  * fix description for numa_node_size64 in man as well
  * fix numa_node_size definition in manpage numa.3
  * link with -latomic if needed
  * libnuma: make numa_police_memory() free of race
  * numademo: Use first two nodes instead of node 0 and 1
- Enhance _service magic
- Enable automake</changelog>
  <changelog author="trenn@suse.de" date="1630497600">- Update to version 2.0.14.20.g4ee5e0c:
  * Fix system call numbers on s390x
  * numactl.c: fixed debug verify for --preferred option
  * numactl.c: Fixed description for the usage of numactl</changelog>
  <changelog author="moritz.kodytek@suse.com" date="1652184000">- Update to version 2.0.14.39.g8b18345:
  * numa(3): Fix typos and punctuation
  * Avoid libnuma.so dependency on util.o
  * test/prefered: add test cases for new 'preferred-many' policy
  * test/prefered: fix compiling problem
  * numa(3): Update the man page
  * Update to support multiple nodes
  * numademo: Add a new test for multiple-preferred-nodes policy
  * numactl: Simplify preferred selection
  * libnuma: Export interface to set/get preferred nodes
  * util: Add new preferred-many type</changelog>
  <changelog author="trenn@suse.de" date="1662724800">- Update to version 2.0.15.0.g01a39cb:
  * Create codeql.yml
  * Create makefile.yml
  * Fix crash when memhog uses local policy
  * Fix memhog uses the wrong policy but still works properly
  * Fix the example usage in the man manual.
  * fix memory and file handle leaks
  * Do not reuse variable names in subscopes and delete useless blank lines
  * Delete unused header files
  * Limit the scope of function
  * avoid declaring a global variable
  * Fix build error on riscv64 by linking libatomic</changelog>
  <changelog author="trenn@suse.de" date="1673179200">- jsc#PED-3367
- Remove unneeded defattr(root,root) statements from spec file from dmueller
- Replace deletion of *.la files with a more general version from dmueller
- Update to version 2.0.16.14.gc09fefd:
  * numactl.c: Remove unused variable
  * shm.c: Replace stat64/fstat64/ftruncate64mmap64 with normal functions
  * configure: Check for largefile support
  * numastat: Update system hugepages memory info from sysfs/node/hugepages directory
  * numastat: statistical errors occur when huge pages is used
  * fix wrong nodemask_sz when CONFIG_NODES_SHIFT is less than 5
  * libnuma: clear errno at the end of numa_init
  * numastat: Add SwapCached to list of known fields in meminfo
  * numastat: Add SecPageTables to list of known fields in meminfo
  * numastat: Add ShadowCallStack to list of known fields in meminfo
  * numastat: Add FileHugePages/FilePmdMapped to list of known fields in meminfo
  * numactl: 'numactl --length=xxx --shm xxx -px' doesn't work
  * numactl: Fix shm verfiy for preferred policy
  * link with -latomic if needed (again ...)
  * Release numactl 2.0.16
  * add cut-release github workflow (#142)
  * when preferred_many is not supported, fall back to preferred will report error.
  * fix the memory leak of numa_preferred api
  * build: Refactor autotools setup to store version in separate file
  * Revert "numademo: fix error on 32bit system"</changelog>
  <changelog author="trenn@suse.de" date="1682424000">- Update to version 2.0.16.21.g693fee1:
  * fix typo
  * Add fuzzer for OSS-Fuzz integration
  * numactl.c: Fix merging of neighboring pages' policies in dump_shm
  * memhog: Update memhog usage
  * feat: Add minimum permissions to makefile.yml
  * feat: Add minimum permissions to cut-release.yml
  * feat: Add minimum permissions to codeql.yml</changelog>
  <changelog author="trenn@suse.de" date="1706616000">- Update to version 2.0.17.4.g63befa8:
  * Fix CodeQl Warn: Wrong type of arguments to formatting function
  * libnuma: Fix incorrect print and exit of numa_preferred/_many APIs
  * libnuma: Fix unexpected output
  * Fix README.md
  * Increase version number
  * Fix build badge
  * Fix README.md
  * Update README.md
  * Add configure file for release
  * Fix unused function return warning in numastat
  * fix complain() fuction print newline
  * Document that numa_police_memory may cause data races
  * Add numastat_diff from jirka-h
  * Enable v1 compatibility for unused getnodemask test
  * libnuma: Handle initialization without sysfs
  * Support empty memory nodes
  * numactl: Add --version option to print version
  * Remove obsolete numamon file
  * numactl: Use standard tab indent for print_node_cpus
  * Avoid using /proc/cpuinfo in test suite
  * numact: Add --cpu-compress option
  * Pin release workflow script to minimize risk of supply chain attacks
  * move_pages: Fix warning (missing hunk from earlier revert)
  * numastat: Remove unused functions
  * distance: Remove unused variable (NFC)
  * numademo: Adjust memcpy test bandwidth calculation
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * Refactor print_node_cpus to display CPU ranges instead of individual CPUs
  * numactl: Fix manual for --preferred and --preferred-many
  * Revert "Fix build error on riscv64 by linking libatomic"
  * Include &lt;fcntl.h&gt; instead of &lt;sys/fcntl.h&gt;
  * Fix the example usage in the numactl manual
  * Fix issue #190 about numa_exit_on_warn does not work
  * Create SECURITY.md
  * fix: fix memory leaks when run with -H
  * use mems allowed nodes to test prefer_many policy.
  * fix typo in memhog.8
  * Update move_pages.c
  * migspeed don't have to be linked against librt
  * Add MPOL_F_RELATIVE/STATIC_NODES</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707134400">- Update to version 2.0.17.8.g67984e5:
  * numastat: Print package version number instead of own.
  * numastat: Remove commented out perl code
  * Check for MPOL_PREFERRED_MANY lazily
  * libnuma: add numa_set_mempolicy_home_node API</changelog>
  <changelog author="trenn@suse.de" date="1707393600">- Update to version 2.0.18.0.g3871b1c:
  * Increase version number to 2.0.18
  * man pages: fix table include preprocessor</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="210f55d98094a54c47674351fdd4333c2e6b77af207757ba4c9022e716ebb91aa067d3e80bed188c265cd93e2b2989f5b2b9b2a3e53cda6e1f9432a592a7fccb" name="numactl-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.18.0.g3871b1c" rel="slfo.1.1_1.2"/>
  <changelog author="trenn@suse.de" date="1626696000">- Update to version 2.0.14.17.g498385e:
  * numactl.c: fix use after free
  * sysfs.c: prevent mem leak in sysfs_node_read()
  * sysfs.c: don't leak fd if fail in sysfs_read()
  * shm.c: fix memleak in verify_shm()
  * shm.c: fix memleak in dump_shm()
  * fix description for numa_node_size64 in man as well
  * fix numa_node_size definition in manpage numa.3
  * link with -latomic if needed
  * libnuma: make numa_police_memory() free of race
  * numademo: Use first two nodes instead of node 0 and 1
- Enhance _service magic
- Enable automake</changelog>
  <changelog author="trenn@suse.de" date="1630497600">- Update to version 2.0.14.20.g4ee5e0c:
  * Fix system call numbers on s390x
  * numactl.c: fixed debug verify for --preferred option
  * numactl.c: Fixed description for the usage of numactl</changelog>
  <changelog author="moritz.kodytek@suse.com" date="1652184000">- Update to version 2.0.14.39.g8b18345:
  * numa(3): Fix typos and punctuation
  * Avoid libnuma.so dependency on util.o
  * test/prefered: add test cases for new 'preferred-many' policy
  * test/prefered: fix compiling problem
  * numa(3): Update the man page
  * Update to support multiple nodes
  * numademo: Add a new test for multiple-preferred-nodes policy
  * numactl: Simplify preferred selection
  * libnuma: Export interface to set/get preferred nodes
  * util: Add new preferred-many type</changelog>
  <changelog author="trenn@suse.de" date="1662724800">- Update to version 2.0.15.0.g01a39cb:
  * Create codeql.yml
  * Create makefile.yml
  * Fix crash when memhog uses local policy
  * Fix memhog uses the wrong policy but still works properly
  * Fix the example usage in the man manual.
  * fix memory and file handle leaks
  * Do not reuse variable names in subscopes and delete useless blank lines
  * Delete unused header files
  * Limit the scope of function
  * avoid declaring a global variable
  * Fix build error on riscv64 by linking libatomic</changelog>
  <changelog author="trenn@suse.de" date="1673179200">- jsc#PED-3367
- Remove unneeded defattr(root,root) statements from spec file from dmueller
- Replace deletion of *.la files with a more general version from dmueller
- Update to version 2.0.16.14.gc09fefd:
  * numactl.c: Remove unused variable
  * shm.c: Replace stat64/fstat64/ftruncate64mmap64 with normal functions
  * configure: Check for largefile support
  * numastat: Update system hugepages memory info from sysfs/node/hugepages directory
  * numastat: statistical errors occur when huge pages is used
  * fix wrong nodemask_sz when CONFIG_NODES_SHIFT is less than 5
  * libnuma: clear errno at the end of numa_init
  * numastat: Add SwapCached to list of known fields in meminfo
  * numastat: Add SecPageTables to list of known fields in meminfo
  * numastat: Add ShadowCallStack to list of known fields in meminfo
  * numastat: Add FileHugePages/FilePmdMapped to list of known fields in meminfo
  * numactl: 'numactl --length=xxx --shm xxx -px' doesn't work
  * numactl: Fix shm verfiy for preferred policy
  * link with -latomic if needed (again ...)
  * Release numactl 2.0.16
  * add cut-release github workflow (#142)
  * when preferred_many is not supported, fall back to preferred will report error.
  * fix the memory leak of numa_preferred api
  * build: Refactor autotools setup to store version in separate file
  * Revert "numademo: fix error on 32bit system"</changelog>
  <changelog author="trenn@suse.de" date="1682424000">- Update to version 2.0.16.21.g693fee1:
  * fix typo
  * Add fuzzer for OSS-Fuzz integration
  * numactl.c: Fix merging of neighboring pages' policies in dump_shm
  * memhog: Update memhog usage
  * feat: Add minimum permissions to makefile.yml
  * feat: Add minimum permissions to cut-release.yml
  * feat: Add minimum permissions to codeql.yml</changelog>
  <changelog author="trenn@suse.de" date="1706616000">- Update to version 2.0.17.4.g63befa8:
  * Fix CodeQl Warn: Wrong type of arguments to formatting function
  * libnuma: Fix incorrect print and exit of numa_preferred/_many APIs
  * libnuma: Fix unexpected output
  * Fix README.md
  * Increase version number
  * Fix build badge
  * Fix README.md
  * Update README.md
  * Add configure file for release
  * Fix unused function return warning in numastat
  * fix complain() fuction print newline
  * Document that numa_police_memory may cause data races
  * Add numastat_diff from jirka-h
  * Enable v1 compatibility for unused getnodemask test
  * libnuma: Handle initialization without sysfs
  * Support empty memory nodes
  * numactl: Add --version option to print version
  * Remove obsolete numamon file
  * numactl: Use standard tab indent for print_node_cpus
  * Avoid using /proc/cpuinfo in test suite
  * numact: Add --cpu-compress option
  * Pin release workflow script to minimize risk of supply chain attacks
  * move_pages: Fix warning (missing hunk from earlier revert)
  * numastat: Remove unused functions
  * distance: Remove unused variable (NFC)
  * numademo: Adjust memcpy test bandwidth calculation
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * numactl.c: Refactor print_node_cpus to display CPU ranges
  * Refactor print_node_cpus to display CPU ranges instead of individual CPUs
  * numactl: Fix manual for --preferred and --preferred-many
  * Revert "Fix build error on riscv64 by linking libatomic"
  * Include &lt;fcntl.h&gt; instead of &lt;sys/fcntl.h&gt;
  * Fix the example usage in the numactl manual
  * Fix issue #190 about numa_exit_on_warn does not work
  * Create SECURITY.md
  * fix: fix memory leaks when run with -H
  * use mems allowed nodes to test prefer_many policy.
  * fix typo in memhog.8
  * Update move_pages.c
  * migspeed don't have to be linked against librt
  * Add MPOL_F_RELATIVE/STATIC_NODES</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707134400">- Update to version 2.0.17.8.g67984e5:
  * numastat: Print package version number instead of own.
  * numastat: Remove commented out perl code
  * Check for MPOL_PREFERRED_MANY lazily
  * libnuma: add numa_set_mempolicy_home_node API</changelog>
  <changelog author="trenn@suse.de" date="1707393600">- Update to version 2.0.18.0.g3871b1c:
  * Increase version number to 2.0.18
  * man pages: fix table include preprocessor</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="effac36de80ffce349600a3aa07b59cd842e0addc0dc72f9eb1f48d5ec9d48ee4128c22875287fdba94ff64c7aff402ad910460a0c90b789ffaafb343946ec6a" name="numad-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.5.20130522" rel="slfo.1.1_1.2"/>
  <changelog author="mgorman@suse.com" date="1369224000">- Initial package</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't call insserv if we use systemd</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_numad.service.patch</changelog>
</package>
<package pkgid="8248a03590e6e2662a13d937700a8b191256c4f46ae58d7c9da2ebd44b974a326909b11e5d0d5bd9ae7ea235c77d7a3f0267a69a48335f48f842a12f1faaa144" name="numad-debugsource" arch="aarch64">
  <version epoch="0" ver="0.5.20130522" rel="slfo.1.1_1.2"/>
  <changelog author="mgorman@suse.com" date="1369224000">- Initial package</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't call insserv if we use systemd</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_numad.service.patch</changelog>
</package>
<package pkgid="311be0a78a9539e1e7855391092bc4dd1bdf7ac3ad0b963fbdf12df873303b9cc81784ba831f219567df067202e31b5fabd651adfa591d275fe7d4356a38155c" name="nvidia-open-driver-G06-signed-debugsource" arch="aarch64">
  <version epoch="0" ver="580.126.18" rel="2.1"/>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
</package>
<package pkgid="b16d04b105f1c5bd97c51c525cc3e32b8e8d3d54dda94809f73fc4840dd271cc2e92e204b160502143363659e41234c4f4fad8f242d6b828a9b6120f567b39ff" name="nvidia-open-driver-G06-signed-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="580.126.18_k6.4.0_40" rel="2.1"/>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
</package>
<package pkgid="5f0049fe958bbc6d61007bd341b6810195970a57173fe08162bbcb233adc83c2f93f9934124cf5b2e54f3a997b8453e3a89c1d9e05a01f885969020d6bc6f3e9" name="nvme-cli-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.8" rel="slfo.1.1_1.3"/>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
</package>
<package pkgid="855ea1de2625cd2e4416579b3ae9dd8e2b50679064b8a257e67a01b0401f1fe107d25ce3d5e0a16c3864689218aa7471b93f91ef1f66c0a628650db4682d469c" name="nvme-cli-debugsource" arch="aarch64">
  <version epoch="0" ver="2.8" rel="slfo.1.1_1.3"/>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
</package>
<package pkgid="0eb9a736f223afea77248381d8721e14c08445d09b66c4952e43c79491392e5f19e5f8b02fbed81e0b4da5fbe44ba50f61a8eeb7fa7793286c9d60e6ac7067cb" name="oath-toolkit-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.11.12" rel="slfo.1.1_2.1"/>
  <changelog author="schwab@suse.de" date="1533556800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="mardnh@gmx.de" date="1609243200">- Update to version 2.6.5
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.
    KEY and OTP may now be given as '-' to mean stdin, or @FILE to
    read from a particular file.  This is recommended on multi-user
    systems, since secrets as command line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.
  * Doc fixes.
- Update to version 2.6.4
  * libpskc: New --with-xmlsec-crypto-engine to hard-code crypto
    engine.  Use it like --with-xmlsec-crypto-engine=gnutls or
  - -with-xmlsec-crypto-engine=openssl if the default dynamic
    loading fails because of runtime linker search path issues.
  * oathtool --totp --verbose now prints TOTP hash mode.
  * oathtool: Hash names (e.g., SHA256) for --totp are now upper
    case.  Lower/mixed case hash names are supported for
    compatibility.
  * pam_oath: Fail gracefully for missing users.
    This allows you to incrementally add support for OATH
    authentication instead of forcing it on all users.
  * Fix libpskc memory corruption bug.
  * Fix man pages.
  * Build fixes.
- Update to version 2.6.3
  * pam_oath: Fix self-tests.
- Drop not longer needed patches:
  * 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch
  * 0003-pam_oath-assign-safe-default-to-alwaysok-config-memb.patch
  * 0002-update_gnulibs_files.patch
  * gnulib-libio.patch
- Use source verification
- Use proper source URLs</changelog>
  <changelog author="mardnh@gmx.de" date="1611144000">- Update to version 2.6.6
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.  KEY and OTP may now be given as '-' to mean
    stdin, or @FILE to read from a particular file.  This is
    recommended on multi-user systems, since secrets as command
    line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.</changelog>
  <changelog author="mardnh@gmx.de" date="1619956800">- Update to version 2.6.7
  * pam_oath: Support variables in usersfile string parameter.
    These changes introduce the ${USER} and ${HOME} placeholder
    values for the usersfile string in the pam_oath configuration
    file. The placeholder values allow the user credentials file
    to be stored in a file path that is relative to the user, and
    mimics similar behavior found in google-authenticator-libpam.
    The motivation for these changes is to allow for
    non-privileged processes to use pam_oath (e.g., for 2FA with
    xscreensaver). Non-privileged and non-suid programs are
    unable to use pam_oath. These changes are a proposed
    alternative to a suid helper binary as well.
  * doc: Fix project URL in man pages.
  * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config.
  * build: Modernize autotools usage.
    Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE
    to make rebuilding from source more safe with future automake
    versions.
  * Updated gnulib files.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- url -&gt; https</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659441600">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="mardnh@gmx.de" date="1688904000">- Update to version 2.6.8
  * libpskc: Fixes for recent libxmlsec releases.
  * pam_oath: Provide fallback pam_modutil_getpwnam implementation.
  * pam_oath: Don't fail authentication when pam_modutil_getpwnam
  doesn't ** know the user when usersfile don't include ${USER}
  or ${HOME}.
  * pam_oath: Self-test improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.6.11
  * liboath: Handle invalid base32 encoded secrets.  Fixes: #41.
  * Various build fixes including updated gnulib files.
  * Improve compatibility with recent libxmlsec.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726228800">- Fix security issue CVE-2024-47191 by adding
  0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch .
- Add patch to implement new null_usersfile_okay argument
  42-null_usersfile_okay.patch .
- Makes this version 2.6.11.12 to be able to depend on it.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1729080000">- Update 0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch
  with bsc#1231699 improvements for security fix CVE-2024-47191</changelog>
</package>
<package pkgid="569e3f8e7966da2cdf06a6bfa98c9e89c00b489c1feb975cef459b8059498cb4c5094c5f0a044721c99206987492379409ab3869314b33bdd5d5493ca98700e0" name="oath-toolkit-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.11.12" rel="slfo.1.1_2.1"/>
  <changelog author="schwab@suse.de" date="1533556800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="mardnh@gmx.de" date="1609243200">- Update to version 2.6.5
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.
    KEY and OTP may now be given as '-' to mean stdin, or @FILE to
    read from a particular file.  This is recommended on multi-user
    systems, since secrets as command line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.
  * Doc fixes.
- Update to version 2.6.4
  * libpskc: New --with-xmlsec-crypto-engine to hard-code crypto
    engine.  Use it like --with-xmlsec-crypto-engine=gnutls or
  - -with-xmlsec-crypto-engine=openssl if the default dynamic
    loading fails because of runtime linker search path issues.
  * oathtool --totp --verbose now prints TOTP hash mode.
  * oathtool: Hash names (e.g., SHA256) for --totp are now upper
    case.  Lower/mixed case hash names are supported for
    compatibility.
  * pam_oath: Fail gracefully for missing users.
    This allows you to incrementally add support for OATH
    authentication instead of forcing it on all users.
  * Fix libpskc memory corruption bug.
  * Fix man pages.
  * Build fixes.
- Update to version 2.6.3
  * pam_oath: Fix self-tests.
- Drop not longer needed patches:
  * 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch
  * 0003-pam_oath-assign-safe-default-to-alwaysok-config-memb.patch
  * 0002-update_gnulibs_files.patch
  * gnulib-libio.patch
- Use source verification
- Use proper source URLs</changelog>
  <changelog author="mardnh@gmx.de" date="1611144000">- Update to version 2.6.6
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.  KEY and OTP may now be given as '-' to mean
    stdin, or @FILE to read from a particular file.  This is
    recommended on multi-user systems, since secrets as command
    line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.</changelog>
  <changelog author="mardnh@gmx.de" date="1619956800">- Update to version 2.6.7
  * pam_oath: Support variables in usersfile string parameter.
    These changes introduce the ${USER} and ${HOME} placeholder
    values for the usersfile string in the pam_oath configuration
    file. The placeholder values allow the user credentials file
    to be stored in a file path that is relative to the user, and
    mimics similar behavior found in google-authenticator-libpam.
    The motivation for these changes is to allow for
    non-privileged processes to use pam_oath (e.g., for 2FA with
    xscreensaver). Non-privileged and non-suid programs are
    unable to use pam_oath. These changes are a proposed
    alternative to a suid helper binary as well.
  * doc: Fix project URL in man pages.
  * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config.
  * build: Modernize autotools usage.
    Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE
    to make rebuilding from source more safe with future automake
    versions.
  * Updated gnulib files.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- url -&gt; https</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659441600">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="mardnh@gmx.de" date="1688904000">- Update to version 2.6.8
  * libpskc: Fixes for recent libxmlsec releases.
  * pam_oath: Provide fallback pam_modutil_getpwnam implementation.
  * pam_oath: Don't fail authentication when pam_modutil_getpwnam
  doesn't ** know the user when usersfile don't include ${USER}
  or ${HOME}.
  * pam_oath: Self-test improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.6.11
  * liboath: Handle invalid base32 encoded secrets.  Fixes: #41.
  * Various build fixes including updated gnulib files.
  * Improve compatibility with recent libxmlsec.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726228800">- Fix security issue CVE-2024-47191 by adding
  0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch .
- Add patch to implement new null_usersfile_okay argument
  42-null_usersfile_okay.patch .
- Makes this version 2.6.11.12 to be able to depend on it.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1729080000">- Update 0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch
  with bsc#1231699 improvements for security fix CVE-2024-47191</changelog>
</package>
<package pkgid="c206d49f5177a628e8edc2bdd565c6c46dee94ad5f85370ae24fb87d0a8271673fb5c04611eb16be459e6d3e28e0abea6c4e7e12a68e289f19af42184aad4541" name="oniguruma-debugsource" arch="aarch64">
  <version epoch="0" ver="6.9.8" rel="slfo.1.1_1.2"/>
  <changelog author="i@marguerite.su" date="1410004800">- update version 5.9.5
  * [impl] escape warnings for -Wall.
  * [impl] remove unused variable.
- changes in 5.9.4
  * [dist] add oniguruma.pc.in file
- changes in 5.9.3
  * fix print_tree ENCLOSE_OPTION bug</changelog>
  <changelog author="i@marguerite.su" date="1445428800">- update version 5.9.6
  * [impl] add onigenc_end_unicode().
  * [impl] add onig_add_end_call().</changelog>
  <changelog author="mrueckert@suse.de" date="1456833600">- remove ruby build requires. seems unused.</changelog>
  <changelog author="mrueckert@suse.de" date="1502107200">- Version 6.5.0
  - [new] support Absent clear (Absent functions)
  - abolish configure option: --enable-combination-explosion-check
  - [new] support Absent functions (?~...)
  - fix #65: SIZEOF_SIZE_T doesn't exist on certain architecutres
  - [new] support \O (true anychar)
  - [new] support \K (keep)
  - add new node type: NODE_GIMMICK
  - [new] support \N (no newline)
  - [new] support \R (general newline)
  - [new] support if-then-else syntax
  - [new] support backref validity checker
- Version 6.4.0
  - fix memory leaks
  - change encoding of doc/XXXX.ja from EUC-JP to UTF-8
  - update doc/RE, and doc/RE.ja
  - fix fatal bug of endless repeat check on Windows
  - PR #62 : add check for return values
  - [new] support call zero (\g{0})
  - [new] support relative call by positive number
  - [new] support relative back-reference by positive number
  - fix #60 : check value type
  - change output format for ONIG_DEBUG_COMPILE and
    ONIG_DEBUG_MATCH
- Version 6.3.0
  - fix #60 : invalid state(CCS_VALUE) in parse_char_class()
  - fix #59 : access to invalid address by reg-&gt;dmax value
  - fix invalid increment of start position in onig_scan()
  - fix #58 : access to invalid address by reg-&gt;dmin value
  - fix #57 : DATA_ENSURE() check must be before data access
  - fix #56 : return invalid result for codepoint 0xFFFFFFFF
  - [new] add \o{17777777777} syntax.
  - fix #55 : Byte value expressed in octal must be smaller than
    256
- Version 6.2.0
  - fix: size in xmemcpy in stack_double (PR #51)
  - Initialize return value
  - NEW API: add onig_set_capture_num_limit()
  - change MemNumType from short int to int
  - fix: [0-9-a] was not allowed as [0-9\-a]
  - fix: illegal capture after recursive call
  - fix: problem with optimization of \z
  - fix: .* optimization
  - Set a limit of parser recursion
  - fix; that warnings are not shown properly
  - fix: /[a-c#]+\W/ =~ "def#" fails when encoding is UTF-16/32
  - fix: /[\x{0}-X]/i doesn't match properly when UTF-16/32 is
    used.
- Version 6.1.3
  - fix: Syntax error: redirection unexpected (expecting word) #35
- Version 6.1.2
  - allow word bound, word begin and word end in look-behind.
  - add ONIG_OPTION_CHECK_VALIDITY_OF_STRING option.
  - fix use after free node.
  - fix memory leaks after parsing regexp error.
  - implement many of is_valid_mbc_string().
- Version 6.1.1
  - fix segfault /W.?{888}{888}{888}\x00/ (found by libfuzzer)
  - fix error unmatched close parenthesis for %{(.*?)} #23
- Version 6.1.0
  - add contributed/libfuzzer-onig.cpp  (thanks hannob)
  - update LTVERSION 4:0:0
  - NEW API: onigenc_is_valid_mbc_string().
  - add is_valid_mbc_string() member into OnigEncodingType.
  - fix out of bounds read.
  - disable USE_INVALID_CODE_SCHEME.
  - doc/RE improved.
  - add onig_scan() into doc/API.
  - fix bug: Out of bounds read in onig_strcpy() #17
  - fix bug: infinite loop of backreference and group.
  - fix out of bounds read in mbc_to_code() #16
  - doc/RE refinements.
  - add onig_scan() (NEW API)
  - reimplement match stack allocation for case too many repeat
  - and too many captures in regexp.
  - number of captures &lt;= 32767 for bytecode representation.
  - don't use int_map_backward for thread-safe.
  - fix case of enclosed option in look-behind.
  - fix ignore case in look-behind.
  - fix memory leak in onig_unicode_define_user_property()
  - declare variables at the top of scope.  (thanks nmaya)
- Version 6.0.0
  - add NEW API: onig_unicode_define_user_property()
  - update Unicode data to 8.0.0
  - change OnigCodePoint type to unsigned int.
  - add doc/UNICODE_PROPERTIES.
  - add error code ONIGERR_FAIL_TO_INITIALIZE.
  - add make_win64/32.bat.
  - fix bug of uninitialized regex_t value on error.
  - reimplement Unicode case folding.
  - update LTVERSION = 3.0.0
  - remove all THREAD_ macro.
  - add init member into OnigEncoding. (add onig_initialize())
  - remove state member of regex.
  - move source files into src/
  - rename configre.in to configure.ac.
  - fix memory leak. (thanks pigzang)
  - change mail address.</changelog>
  <changelog author="avindra@opensuse.org" date="1514030400">- Version 6.7.0
  - add ONIG_SYNTAX_ONIGURUMA (default syntax)
  - restructure StackType
  - implement subexp calls (?R), (?&amp;name), (?-n), (?+n) for Perl
    syntax
  - use string pool of gperf for Unicode Property lookup function
  - fix an empty greedy regex and a word boundary (.*\b) fails
  - remove a stack type STK_POS
  - add a declaration of onig_end()
  - fix compilation failure in out-of-source build
  - [new] hexadecimal codepoint \uHHHH
- Version 6.6.1
  - fix definition of \X to (?&gt;\O(?:\Y\O)*)
- Version 6.6.0
  - rename Absent clear to Range clear
  - [new] Extended Grapheme Cluster \X and boundary \y, \Y
  - fix: invalid index(ctype) value assigned to Unicode Block
    properties
  - --enable-crnl-as-line-terminator to be deprecated
  - [new] ASCII only mode options (?WDSP)
  - [new] ONIG_OPTION_XXXX_IS_ASCII  options
  - disable OP_CCLASS_NODE
  - [spec] Absent clear restore previous range value at backtrack
  - optimize for simple one char repetition in Absent expression
  - fix: invalid impl. for reluctant repetition in Absent expression
  - remove compile switch USE_NAMED_GROUP
  - Visual Studio 2005 compilation fixed
- cleanup with spec-cleaner</changelog>
  <changelog author="mrueckert@suse.de" date="1583323200">- Update to version 6.9.4
  - NEW API: RegSet (set of regexes)
  - Fixed CVE-2019-19012 (boo# 1156984)
  - Fixed CVE-2019-19203 (boo# 1164550) (Does not affect UTF-8,
    UTF-16 and UTF-32 encodings)
  - Fixed CVE-2019-19204 (boo# 1164569) (Affects only PosixBasic,
    Emacs and Grep syntaxes)
  - Fixed CVE-2019-19246 (boo# 1157805)
  - Fixed some problems (found by libFuzzer test)
- changes from 6.9.3
  - Fixed CVE-2019-13224 (boo# 1142847)
  - Fixed CVE-2019-13225 (boo# 1141157)
  - Fixed many problems (found by libfuzzer programs)
- changes from 6.9.2
  - Update Unicode version 12.1.0
  - NEW: Unicode Text Segment mode option (?y{g}) (?y{w}) g:
    Extended Grapheme Cluster mode / w: Word mode
  - Fix Issue #139
- changes from 6.9.1
  - Speed improvement (* especially UTF-8)
- changes from 6.9.0
  - Update Unicode version 11.0.0
  - NEW: add Emoji properties
- changes from 6.8.2
  - Fix: #80 UChar in header causes issue
  - NEW API: onig_set_callout_user_data_of_match_param() (*
    omission in 6.8.0)
  - add doc/CALLOUTS.API and doc/CALLOUTS.API.ja
- changes from 6.8.1
  - Update shared library version to 5.0.0 for API incompatible
    changes from 6.7.1
- changes from 6.8.0
  - Retry-limit-in-match function enabled by default
  - NEW: configure option --enable-posix-api=no (* enabled by
    default)
  - NEW API: onig_search_with_param(), onig_match_with_param()
  - NEW: Callouts of contents (?{...contents...}) (?{...}[X&lt;&gt;])
    (?{{....}})
  - NEW: Callouts of name (*name) (*name[tag]{args...})
  - NEW: Builtin callouts (*FAIL) (*MISMATCH) (*ERROR{n}) (*COUNT)
    (*MAX{n}) etc..
  - (* Callout function API is experimental level and isn't fixed
    definitely yet. Undocumented now)
- changes from 6.7.1
  - NEW: Mechanism of try-in-match-limit (* disabled by default)
  - #73: Update for automake 1.15.1</changelog>
  <changelog author="mrueckert@suse.de" date="1592222400">- Update to 6.9.5.1
  - Fixed Issue #192
  - POSIX API disabled by default for Unix (* Enabled by: configure
  - -enable-posix-api=yes)
  - Update Unicode version 13.0.0
  - NEW: Code point sequence notation \x{HHHH HHHH ...}, \o{OOOO
    OOOO ...}
  - NEW API: retry limit in search functions
  - NEW API: maximum nesting level of subexp call
  - Fixed behavior of isolated options in Perl and Java syntaxes.
    /...(?i).../
  - fix a problem (found by oss-fuzz test on my PC)
- add --enable-posix-api to keep the posix API enabled.</changelog>
  <changelog author="mrueckert@suse.de" date="1604577600">- Update to 6.9.6
  - When using configure script, if you have the POSIX API enabled
    in an earlier version (disabled by default in 6.9.5) and you
    need application binary compatibility with the POSIX API,
    specify "--enable-binary-compatible-posix-api=yes" instead of
    "--enable-posix-api=yes". Starting in 6.9.6,
    "--enable-posix-api=yes" only supports source-level
    compatibility for 6.9.5 and earlier about POSIX API. (Issue
    [#210])
  - NEW: configure option
  - -enable-binary-compatible-posix-api=[yes/no]
  - NEW API: Limiting the maximum number of calls of subexp-call
  - NEW API: ONIG_OPTION_NOT_BEGIN_STRING / NOT_END_STRING /
    NOT_BEGIN_POSITION
  - Fixed behavior of ONIG_OPTION_NOTBOL / NOTEOL
  - Fixed many problems found by OSS-Fuzz
  - Fixed many problems found by Coverity
  - Fixed CVE-2020-26159 (This turned out not to be a problem
    later. #221)
  - Under cygwin and mingw, generate and install the libonig.def
    file (Issue #220)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622721600">- Update to 6.9.7.1
  * NEW API: ONIG_OPTION_CALLBACK_EACH_MATCH
  * NEW API: ONIG_OPTION_IGNORECASE_IS_ASCII
  * NEW API: ONIG_SYNTAX_PYTHON
  * Fixed some problems found by OSS-Fuzz
- Enable tests</changelog>
  <changelog author="mrueckert@suse.de" date="1651752000">- Update to 6.9.8
  - Update Unicode version 14.0.0
  - Whole options
  - (?C) : ONIG_OPTION_DONT_CAPTURE_GROUP
  - (?I) : ONIG_OPTION_IGNORECASE_IS_ASCII
  - (?L) : ONIG_OPTION_FIND_LONGEST
  - Fixed some problems found by OSS-Fuzz</changelog>
</package>
<package pkgid="29ca591ce67af07bad7253c88c8040e5c6273a152b3df67fbb79039af40de7916cd9b6150e18be94561196ab333fde51f5307dacbf5513f3bf3d5a125e492cf2" name="open-iscsi-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.9" rel="slfo.1.1_1.2"/>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="548b2ecec2dd837590affdb740fd2691e9ba13549775e77e490b6eb27459b4df4ae9261dd4303d1660e3703af4b0db17a642573f630e38bc15ff95b735c59259" name="open-iscsi-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1.9" rel="slfo.1.1_1.2"/>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="297baa788e4630e131d15a0e5cfb7106a00b5f182df047b121b481f559fb383aba1456300872d1dff448bfad604358403d638bba37b6fa0f2694f9566323962c" name="open-isns-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.102" rel="slfo.1.1_1.2"/>
  <changelog author="mliska@suse.cz" date="1571832000">- Move back "%global _lto_cflags ..." line as it's needed
  for the following error:
  E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libisns.a.
  The recursion in macro was caused by fact that the macro was not
  defined for some time in prjconfig.</changelog>
  <changelog author="lduncan@suse.com" date="1572264000">- Updated SPEC file %_lto_cflags definition so that it does not
  cause recursion.</changelog>
  <changelog author="lduncan@suse.com" date="1580472000">- Update to version 0.100:
  * Updated ChangeLog with latest fixes
  * Create and use pythong unittest framework
  * Ignore SO lib
  * Handle restarting test harness server correctly
  * Fix mdebug.c so it compiles when enabled.
  * Running make twice should not rebuild everything
  * Change isns_portal_string() to use static mem
  * Adding python compiled files
  * fixed issues with old openssl usage
  * Added debugging, moved .cvsignore to .gitignore
  * Preparing for version v0.100
  * Fix problem with parsing IPv6 Addresses with brakcets.
  * General cleanup for the compiler.
  * Travis-CI and Coverity Scan setup
  * openssl: handle newer version with ifdefs
  * Remove old compiler option, and add "-Werror".
  * Change isns_portal_string() to return allocated string.
  * add tags to ignored list of files
  * Fix compiler complaint about possible alignment issue
  Replacing open-isns-0.99.tar.xz with open-isns-0.100.tar.xz.
  Also, added latest (not yet tagged) fixes from upstream,
  adding patch, and add in a 586-fix, adding:
  * open-isns-updates.diff.bz2, and
  * open-isns-fix-586-time.patch</changelog>
  <changelog author="lduncan@suse.com" date="1607083200">- Updated to latest upstream, including:
  * Add man page for isnssetup.
  * Fix broken server authentication initialization.
  * Update version string to "0.100".
  * Added a TODO: 'make depend' not worrking
  * libisns: remove sighold and sigrelse
  * fix compilation without deprecated OpenSSL APIs
  * socket.c: include poll.h instead of sys/poll.h for POSIX compatibility
  * Fix 586 compile issue and remove -Werror
  * Do not ignore write() return value.
  * Fix compiler issue when n
  Which updates open-isns-updates.diff.bz2, and removes the
  no-longer-needed patch open-isns-fix-586-time.patch.
  Also, security will be enabled/configured with this update.</changelog>
  <changelog author="lduncan@suse.com" date="1607083201">- Updated SPEC file to Recommend open-iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1607342400">- Added file isns.xml for firewalld, updated SPEC file for it,
  since SuSEfirewall2 is deprecated.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Removed isns.xml, as firewalld already supplies this file.
  Note that SuSEFirewall2 is also no longer supported, which
  obviates the need for the file "open-isns-firewall.service",
  which was used in SLES but not in openSUSE.</changelog>
  <changelog author="lduncan@suse.com" date="1612180800">- Update to version 0.101:
  * Updated ChangeLog for version v0.101
  * Preparing for version 0.101
  * Fix parsing of GetNextRsp
  * Added TODO to test "isnsd --init"
  * Add man page for isnssetup.
  * Fix broken server authentication initialization.
  * Update version string to "0.100".
  * Added a TODO: 'make depend' not worrking
  * libisns: remove sighold and sigrelse
  * fix compilation without deprecated OpenSSL APIs
  * socket.c: include poll.h instead of sys/poll.h for POSIX compatibility
  * Fix 586 compile issue and remove -Werror
  * Do not ignore write() return value.
  * Fix compiler issue when not in security mode
  * Ignore common build files
  This removed the need for open-isns-updates.diff.bz2 (for now), since
  those commits are in version v0.101.</changelog>
  <changelog author="lduncan@suse.com" date="1662638400">- Update to version 0.102:
  * Preparing for version v0.102
  * meson: just specify subdir for header-file install.
  * build: only specify version in one place
  * Fix two compiler warnings in slp.c
  * meson: update README
  * meson: small option usage cleanup
  * meson: several updates based on review
  * meson: fix error building shared lib with version
  * meson: convert some args to 'features'
  * meson: update README with meson info
  * Add a decprecation warning to configure script.
  * meson: Add ability to disable static library build
  * meson builds now working
  * git: ignore all shared library files
  * build: Remove these two files, no longer used
  * Add a package config file for libisns.a
  * isnsd: socket: Make sure to create IPv6 socket default
  * isnsadm: Fix unparse command line options "-V" and "-r"
  * Typo: s/overried/override/
  * Removed bash-specific function definitions.
  Also, added patch to quiet compiler (soon upstream):
  * Quiet-a-commpiler-warning.patch
  This changes the SPEC file to use the new meson build system,
  supported in open-isns starting with version 0.102, instead of
  autoconf/make.
  Changes in the code:
  * no longer deliver isnsetup script or man page (development only)
  * now deliver a package config file for the library
  * now deliver both the static library and a shared library</changelog>
  <changelog author="kukuk@suse.com" date="1693915200">- Disable SLP by default for Factory and ALP (bsc#1214884)</changelog>
</package>
<package pkgid="376055afb9d771418159e9f9cd0eaa03d3e2f3ee1d3093bf96bb4b99202aa07edeaf602880af64d354df78fe37433af21c10bfd7e7e9c31ea03295255e215cec" name="open-isns-debugsource" arch="aarch64">
  <version epoch="0" ver="0.102" rel="slfo.1.1_1.2"/>
  <changelog author="mliska@suse.cz" date="1571832000">- Move back "%global _lto_cflags ..." line as it's needed
  for the following error:
  E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libisns.a.
  The recursion in macro was caused by fact that the macro was not
  defined for some time in prjconfig.</changelog>
  <changelog author="lduncan@suse.com" date="1572264000">- Updated SPEC file %_lto_cflags definition so that it does not
  cause recursion.</changelog>
  <changelog author="lduncan@suse.com" date="1580472000">- Update to version 0.100:
  * Updated ChangeLog with latest fixes
  * Create and use pythong unittest framework
  * Ignore SO lib
  * Handle restarting test harness server correctly
  * Fix mdebug.c so it compiles when enabled.
  * Running make twice should not rebuild everything
  * Change isns_portal_string() to use static mem
  * Adding python compiled files
  * fixed issues with old openssl usage
  * Added debugging, moved .cvsignore to .gitignore
  * Preparing for version v0.100
  * Fix problem with parsing IPv6 Addresses with brakcets.
  * General cleanup for the compiler.
  * Travis-CI and Coverity Scan setup
  * openssl: handle newer version with ifdefs
  * Remove old compiler option, and add "-Werror".
  * Change isns_portal_string() to return allocated string.
  * add tags to ignored list of files
  * Fix compiler complaint about possible alignment issue
  Replacing open-isns-0.99.tar.xz with open-isns-0.100.tar.xz.
  Also, added latest (not yet tagged) fixes from upstream,
  adding patch, and add in a 586-fix, adding:
  * open-isns-updates.diff.bz2, and
  * open-isns-fix-586-time.patch</changelog>
  <changelog author="lduncan@suse.com" date="1607083200">- Updated to latest upstream, including:
  * Add man page for isnssetup.
  * Fix broken server authentication initialization.
  * Update version string to "0.100".
  * Added a TODO: 'make depend' not worrking
  * libisns: remove sighold and sigrelse
  * fix compilation without deprecated OpenSSL APIs
  * socket.c: include poll.h instead of sys/poll.h for POSIX compatibility
  * Fix 586 compile issue and remove -Werror
  * Do not ignore write() return value.
  * Fix compiler issue when n
  Which updates open-isns-updates.diff.bz2, and removes the
  no-longer-needed patch open-isns-fix-586-time.patch.
  Also, security will be enabled/configured with this update.</changelog>
  <changelog author="lduncan@suse.com" date="1607083201">- Updated SPEC file to Recommend open-iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1607342400">- Added file isns.xml for firewalld, updated SPEC file for it,
  since SuSEfirewall2 is deprecated.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Removed isns.xml, as firewalld already supplies this file.
  Note that SuSEFirewall2 is also no longer supported, which
  obviates the need for the file "open-isns-firewall.service",
  which was used in SLES but not in openSUSE.</changelog>
  <changelog author="lduncan@suse.com" date="1612180800">- Update to version 0.101:
  * Updated ChangeLog for version v0.101
  * Preparing for version 0.101
  * Fix parsing of GetNextRsp
  * Added TODO to test "isnsd --init"
  * Add man page for isnssetup.
  * Fix broken server authentication initialization.
  * Update version string to "0.100".
  * Added a TODO: 'make depend' not worrking
  * libisns: remove sighold and sigrelse
  * fix compilation without deprecated OpenSSL APIs
  * socket.c: include poll.h instead of sys/poll.h for POSIX compatibility
  * Fix 586 compile issue and remove -Werror
  * Do not ignore write() return value.
  * Fix compiler issue when not in security mode
  * Ignore common build files
  This removed the need for open-isns-updates.diff.bz2 (for now), since
  those commits are in version v0.101.</changelog>
  <changelog author="lduncan@suse.com" date="1662638400">- Update to version 0.102:
  * Preparing for version v0.102
  * meson: just specify subdir for header-file install.
  * build: only specify version in one place
  * Fix two compiler warnings in slp.c
  * meson: update README
  * meson: small option usage cleanup
  * meson: several updates based on review
  * meson: fix error building shared lib with version
  * meson: convert some args to 'features'
  * meson: update README with meson info
  * Add a decprecation warning to configure script.
  * meson: Add ability to disable static library build
  * meson builds now working
  * git: ignore all shared library files
  * build: Remove these two files, no longer used
  * Add a package config file for libisns.a
  * isnsd: socket: Make sure to create IPv6 socket default
  * isnsadm: Fix unparse command line options "-V" and "-r"
  * Typo: s/overried/override/
  * Removed bash-specific function definitions.
  Also, added patch to quiet compiler (soon upstream):
  * Quiet-a-commpiler-warning.patch
  This changes the SPEC file to use the new meson build system,
  supported in open-isns starting with version 0.102, instead of
  autoconf/make.
  Changes in the code:
  * no longer deliver isnsetup script or man page (development only)
  * now deliver a package config file for the library
  * now deliver both the static library and a shared library</changelog>
  <changelog author="kukuk@suse.com" date="1693915200">- Disable SLP by default for Factory and ALP (bsc#1214884)</changelog>
</package>
<package pkgid="e400dd0c8f85c38f53f765e46becaff9ff4ca91160c2b660b5c4c5a5205bd168bd37f1e5fc1f203fc2c2b115ec121ecc9417324b14d207cde8bde5441cdacc88" name="open-lldp-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1+77.75e83b6fb98e" rel="slfo.1.1_1.2"/>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="lduncan@suse.com" date="1698408000">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="d37e6eef6cb44e509b3a614cc5eaab3abdec8fd8c8abe50c9956cfe7409e6e631580b75422507ad9b67f41f3ff422f737b3f2f15d519cc236d6c265368dd0e70" name="open-lldp-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1+77.75e83b6fb98e" rel="slfo.1.1_1.2"/>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="lduncan@suse.com" date="1698408000">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="4daffc14de98f1b8bcc91361c5bfa70d21c9fddba855025fb2336f5aefe540da6912845ee19cf83babd49d2d6d3698c13ef62a78315a1c1c01497941869565ae" name="openldap2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.4" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@suse.com" date="1648296000">- Add _multibuild support to integrate the build of libldapcpp-devel
  to drop the outdated copy</changelog>
  <changelog author="jengelh@inai.de" date="1648900800">- Update to release 2.6.1
  * Ability to log directly to a file bypassing syslog
  * back-ndb is retired
  * back-sql and back-perl are deprecated
  * lloadd(8): Additional load balancing strategies.
  * lloadd(8): Additional options to improve coherence with certain
    controls and extended operations.</changelog>
  <changelog author="michael@stroeder.com" date="1649678400">- Use libargon2 instead of libsodium because it supports p&gt;1
- Added new contrib overlays: authzid, datamorph, variant, vc</changelog>
  <changelog author="william.brown@suse.com" date="1652356800">- bsc#1199277 - Resolve segfault when calling new ctx with global ctx
  * 0017-Resolve-error-handling-in-new-ctx-when-global.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653307200">- Update to release 2.6.2
  * Added support for OpenSSL 3.0 (ITS#9436)
  * Fixed ldapdelete to prune LDAP subentries (ITS#9737)
  * Fixed libldap to drop connection when non-LDAP data is
    received (ITS#9803)
  * Fixed libldap to allow newlines at end of included file
    (ITS#9811)
  * Fixed slapd slaptest conversion of olcLastBind (ITS#9808)
  * Fixed slapd to correctly init global_host earlier (ITS#9787)
  * Fixed slapd bconfig locking for cn=config replication
    (ITS#9584)
  * Fixed slapd usage of thread local counters (ITS#9789)
  * Fixed slapd to clear runqueue task correctly (ITS#9785)
  * Fixed slapd idletimeout handling (ITS#9820)
  * Fixed slapd syncrepl handling of new sessions (ITS#9584)
  * Fixed slapd to clear connections on bind (ITS#9799)
  * Fixed slapd to correctly advance connections index (ITS#9831)
  * Fixed slapd syncrepl ODSEE replication of unknown attr
    (ITS#9801)
  * Fixed slapd-asyncmeta memory leak in keepalive setting,
    slapd-ldap memory leak in keepalive setting, SEGV on config
    rewrite, ordering on config rewrite, memory leak in keepalive
    setting (ITS#9802)
  * Fixed slapo-pcache SEGV &amp; slapd-monitor SEGV on shutdown
    (ITS#9809)
  * Fixed slapd-monitor crash when hitting sizelimit (ITS#9832)
  * Fixed slapd-sql to properly escape filter value (ITS#9815)
  * Fixed slapo-dynlist dynamic group regression (ITS#9825)
  * Fixed slapo-ppolicy operation handling to be consistent
    (ITS#9794)
  * Fixed slapo-translucent to correctly duplicate substring
    filters (ITS#9818)
  * Contrib:
  * Update ppm module to the 2.1 release (ITS#9814)
  * Documentation:
  * admin26: Document new lloadd features (ITS#9780)
  * Fixed slapd.conf(5)/slapd-config(5) syncrepl
    sizelimit/timelimit documentation (ITS#9804)
  * Fixed slapd-sock(5) to clarify "sockresps result" behavior
    (ITS#8255)</changelog>
  <changelog author="michael@stroeder.com" date="1657800000">- removed obsolete 0017-Resolve-error-handling-in-new-ctx-when-global.patch
- update to 2.6.3
  * Fixed librewrite declaration of calloc (ITS#9841)
  * Fixed libldap to check for NULL ld (ITS#9157)
  * Fixed libldap memory leaks (ITS#9876)
  * Fixed lloadd to correctly tag Notice of Disconnection (ITS#9856)
  * Fixed slapd delta-sync DN leak on ADD ops (ITS#9866)
  * Fixed slapd replication with back-glue (ITS#9868)
  * Fixed slapd lastbind replication with chaining (ITS#9863)
  * Fixed slapd-ldap to correctly set authzid (ITS#9863)
  * Fixed slapd-mdb to check for stale readers on
    MDB_READERS_FULL (ITS#7165)
  * Fixed slapd-mdb indexer task with replicated config (ITS#9858)
  * Fixed slapo-accesslog onetime memory leak (ITS#9864)
  * Fixed slapo-ppolicy interaction with slapo-rwm (ITS#9871)
  * Fixed slapo-rwm to handle escaping special characters (ITS#9817)
  * Fixed slapo-syncprov memory leaks (ITS#9867)
  * Fixed slapo-syncprov fallback in delta-sync mode (ITS#9823)
  * Fixed slapo-unique to not release NULL entry (ITS#8245)
  * doc: Fixed ldap_get_option(3) to clarify ldap_get/set_option
    restrictions (ITS#9824)</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1202931 - CVE-2022-31253 - Openldap start script allowed the ldap user
  to privilege escalate to root due to unbound chown commands.</changelog>
  <changelog author="dmueller@suse.com" date="1670673600">- add reproducible.patch to avoid using compile-time specific date/time
  constructs</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 2.6.4:
  * Fixed client tools to remove 'h' and 'p' options
  * Fixed ldapsearch memory leak with paged results (ITS#9860)
  * Fixed libldap ldif_open_urlto check for failure (ITS#9904 CVE-2023-2953 boo#1211795)
  * Fixed libldap ldap_url_parsehosts check for failure
  * Fixed liblunicode UTF8bvnormalize buffer size (ITS#9955)
  * Fixed lloadd memory leaks (ITS#9907)
  * Fixed lloadd shutdown code to protect memory correctly
  * Fixed lloadd race in epoch.c (ITS#9947)
  * Fixed lloadd potential deadlock with cn=monitor (ITS#9951)
  * Fixed lloadd to keep listener base around when not active
  * Fixed lloadd object reclamation sequencing (ITS#9983)
  * Fixed slapd memory leak with olcAuthIDRewrite (ITS#6035)
  * Fixed slapd free of redundant cmdline option (ITS#9912)
  * Fixed slapd transactions extended operations cleanup after
  * Fixed slapd deadlock with replicated cn=config
  * Fixed slapd connection close logic (ITS#9991)
  * Fixed slapd bconfig locking of cn=config entries (ITS#9045)
  * Fixed slapd-mdb max number of index databases to 256
  * Fixed slapd-mdb to always release entries from ADD operations
  * Fixed slapd-mdb to fully init empty DN in tool_entry_get
  * Fixed slapd-monitor memory leaks with lloadd (ITS#9906)
  * Fixed slapd-monitor to free remembered cookies (ITS#9339)
  * Fixed slapo-accesslog reqStart ordering matching rule
  * Fixed slapo-deref memory leak (ITS#9924)
  * Fixed slapo-dynlist to ignore irrelevant objectClasses
  * Fixed slapo-dynlist to avoid unnecessary searches (ITS#9929)
  * Fixed slapo-dynlist to mark internal searches as such
  * Fixed slapo-pcache crash in consistency_check (ITS#9966)
  * Fixed slapo-remoteauth memory leaks (ITS#9438)
  * Fixed slapo-rwm memory leaks (ITS#9817)
  * Build Environment
  * Fixed ancient DOS related ifdef checks (ITS#9925)
  * Fixed build process to not use gmake specific features
  * Fixed source tree to remove symlinks (ITS#9926)
  * Fixed slapo-otp testdir creation (ITS#9437)
  * Fixed slapd-tester memory leak (ITS#9908)
  * Fixed usage of non-standard C syntax (ITS#9898, ITS#9899,
    ITS#9901)
  * Fixed usage of bashism (ITS#9900)
  * Fixed test suite portability (ITS#9931)
  * Documentation
  * Fixed ldap_bind(3) to document ber_bvfree in ldap_sasl_bind
    (ITS#9976)
  * Fixed slapo-asyncmeta(5) to clarify scheduling for target
    connections (ITS#9941)
  * Fixed slapo-dynlist(5) to clarify configuration settings
    (ITS#9957)
  * Fixed slapo-unique(5) to clarify when quoting should be used
    (ITS#9915)
  * Minor cleanup</changelog>
  <changelog author="kukuk@suse.com" date="1693915200">- Disable SLP by default for Factory and ALP (bsc#1214884)</changelog>
</package>
<package pkgid="85255269d31b85219ee6c6744676c19fb8325e7bfca67451fb50afd90717ca8895859c20faa5a92d46be84119c83bf3fd25e23d518b7053d8fefb0e576929607" name="opensc-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.24.0" rel="slfo.1.1_2.1"/>
  <changelog author="michael@stroeder.com" date="1669723200">- Update to OpenSC 0.23.0:
  * General improvements
  - Support signing of data with a length of more than 512 bytes (#2314)
  - By default, disable support for old card drivers (#2391) and remove
    support for old drivers MioCOS and JCOP (#2374)
  - Bump minimal required OpenSSL version to 1.1.1 and add support for OpenSSL 3.0 (#2438, #2506)
  - Compatibility with LibreSSL (#2495, #2595)
  - Remove support for DSA (#2503)
  - Extend p11test to support symmetric keys (#2430)
  - Notice detached reader on macOS (#2418)
  - Support for OAEP padding (#2475, #2484)
  - Fix for PSS salt length (#2478)
  - Improve fuzzing by adding new tests (#2417, #2500, #2520, #2550, #2637)
  - Fixed various issues reported by OSS-Fuzz and Coverity regarding
    card drivers, PKCS#11 and PKCS#15 init
  - Fix issues with OpenPACE (#2472)
  - Containers support for local testing
  - Add support for encryption and decryption using symmetric keys (#2473, #2607)
  - Stop building support for Gost algorithms with OpenSSL 3.0 as they
    require deprecated API (#2586)
  - Fix detection of disconnected readers in PCSC (#2600)
  - Add configuration option for on-disk caching of private data (#2588)
  - Skip building empty binaries when dependencies are missing and
    remove needless linking (#2617)
  - Define arm64 as a supported architecture in the Installer package (#2610)
  * PKCS#11
  - Implement C_CreateObject for EC keys and fix signature verification
    for CKM_ECDSA_SHAx cards (#2420)
  * pkcs11-tool
  - Add more elliptic curves (#2301)
  - Add support for symmetric encrypt and decrypt, wrap and unwrap operations,
    and initialization vector (#2268)
  - Fix consistent handling of secret key attributes (#2497)
  - Add support for signing and verifying with HMAC (#2385)
  - Add support for SHA3 (#2467)
  - Make object selectable via label (#2570)
  - Do not require an R/W session for some operations and
    add --session-rw option (#2579)
  - Print more information: CKA_UNIQUE_ID attribute, SHA3 HMACs and
    serial number for certificates (#2644, #2643, #2641)
  - Add new option --undestroyable to create keys with CKA_DESTROYABLE=FALSE (#2645)
  * sc-hsm-tool
  - Add options for public key authentication (#2301)
  * Minidriver
  - Fix reinit of the card (#2525)
  - Add an entry for Italian CNS (e) (#2548)
  - Fix detection of ECC mechanisms (#2523)
  - Fix ATRs before adding them to the windows registry (#2628)
  * NQ-Applet
  - Add support for the JCOP4 Cards with NQ-Applet (#2425)
  * ItaCNS
  - Add support for ItaCMS v1.1 (key length 2048) (#2371)
  * Belpic
  - Add support for applet v1.8 (#2455)
  * Starcos
  - Add ATR for V3.4 (#2464)
  - Add PKCS#15 emulator for 3.x cards with eSign app (#2544)
  * ePass2003
  - Fix PKCS#15 initialization (#2403)
  - Add support for FIPS (#2543)
  - Fix matching with newer versions and tokens initialized with OpenSC (#2575)
  * MyEID
  - Support logout operation (#2557)
  - Support for symmetric encryption and decryption (#2473, #2607)
  * GIDS
  - Fix decipher for TPM (#1881)
  * OpenPGP
  - Get the list of supported algorithms from algorithm information
    on the card (#2287)
  - Support for 3 certificates with OpenPGP 3+ (#2103)
  * nPA
  - Fix card detection (#2463)
  * Rutoken
  - Fix formatting rtecp cards (#2599)
  * PIV
  - Add new PIVKey ATRs for current cards (#2602)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - opensc-CVE-2023-40660-1of2.patch
  - opensc-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696507200">- Security Fix: [CVE-2023-4535, bsc#1215763]
  * Add patches:
  - opensc-CVE-2023-4535.patch
  - opensc-NULL_pointer_fix.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702468800">- Update to OpenSC 0.24.0:
  * Security
  - CVE-2023-40660: Fix Potential PIN bypass
    (#2806, frankmorgner/OpenSCToken#50, #2807)
  - CVE-2023-40661: Important dynamic analyzers reports
  - CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption
    using symmetric keys (f1993dc)
  * General improvements
  - Fix compatibility of EAC with OpenSSL 3.0 (#2674)
  - Enable use_file_cache by default (#2501)
  - Use custom libctx with OpenSSL &gt;= 3.0 (#2712, #2715)
  - Fix record-based files (#2604)
  - Fix several race conditions (#2735)
  - Run tests under Valgrind (#2756)
  - Test signing of data bigger than 512 bytes (#2789)
  - Update to OpenPACE 1.1.3 (#2796)
  - Implement logout for some of the card drivers (#2807)
  - Fix wrong popup position of opensc-notify (#2901)
  - Fixed various issues reported by OSS-Fuzz and Coverity regarding card
    drivers, PKCS#11 and PKCS#15 init
  * PKCS#11
  - Check card presence state in C_GetSessionInfo (#2740)
  - Remove onepin-opensc-pkcs11 module (#2681)
  - Do not use colons in the token info label (#2760)
  - Present profile objects in all slots with the CKA_TOKEN attribute to
    resolve issues with NSS (#2928, #2924)
  - Use secure memory for PUK (#2906)
  - Don't logout to preserve concurrent access from different processes
    (#2907)
  - Add more examples to manual page (#2936)
  - Present profile objects in all virtual slots (#2928)
  - Provide CKA_TOKEN attribute for profile objects (#2924)
  - Improve --slot parameter documentation (#2951)
  * PKCS#15
  - Honor cache offsets when writing file cache (#2858)
  - Prevent needless amount of PIN prompts from pkcs15init layer (#2916)
  - Propagate CKA_EXTRACTABLE and SC_PKCS15_PRKEY_ACCESS_SENSITIVE from and
    back to PKCS#11 (#2936)
  * Minidriver
  - Fix for private keys that do not need a PIN (#2722)
  - Unbreak decipher when the first null byte of PKCS#1.5 padding is
    missing (#2939*
  * pkcs11-tool
  - Fix RSA key import with OpenSSL 3.0 (#2656)
  - Add support for attribute filtering when listing objects (#2687)
  - Add support for --private flag when writing certificates (#2768)
  - Add support for non-AEAD ciphers to the test mode (#2780)
  - Show CKA_SIGN attribute for secret keys (#2862)
  - Do not attempt to read CKA_ALWAYS_AUTHENTICATE on secret keys
    (#2864, #2913)
  - Show Sign/VerifyRecover attributes (#2888)
  - Add option to import generic keys (#2955)
  * westcos-tool
  - Generate 2k RSA keys by default (b53fc5c)
  * pkcs11-register
  - Disable autostart on Linux by default (#2680)
  * IDPrime
  - Add support for IDPrime MD 830, 930 and 940 (#2666)
  - Add support for SafeNet eToken 5110 token (#2812)
  - Process index even without keyrefmap and use correct label for second
    PIN (#2878)
  - Add support for Gemalto IDPrime 940C (#2941)
  * EPass2003
  - Change of PIN requires verification of the PIN (#2759)
  - Fix incorrect CMAC computation for subkeys (#2759, issue #2734)
  - Use true random number for mutual authentication for SM (#2766)
  - Add verification of data coming from the token in the secure messaging
    mode (#2772)
  - Avoid success when using unsupported digest and fix data length for RAW
    ECDSA signatures (#2845)
  * OpenPGP
  - Fix select data command (#2753, issue #2752)
  - Unbreak ed/curve25519 support (#2892)
  * eOI
  - Add support for Slovenian eID card (eOI) (#2646)
  * Italian CNS
  - Add support for IDEMIA (Oberthur) tokens (#2483)
  * PIV
  - Add support for Swissbit iShield FIDO2 Authenticator (#2671)
  - Implement PIV secure messaging (#2053)
  * SkeID
  - Add support for Slovak eID cards (#2672)
  * isoApplet
  - Support ECDSA with off-card hashing (#2642)
  * MyEID
  - Fix WRAP operation when using T0 (#2695)
  - Identify changes on the card and enable use_file_cache (#2798)
  - Workaround for unwrapping using 2K RSA key (#2921)
  * SC-HSM
  - Add support for opensc-tool --serial (#2675)
  - Fix unwrapping of 4096 keys with handling reader limits (#2682)
  - Indicate supported hashes and MGF1s (#2827)
- Remove patches:
  * opensc-CVE-2023-40660-1of2.patch
  * opensc-CVE-2023-40660-2of2.patch
  * opensc-CVE-2023-40661-1of12.patch
  * opensc-CVE-2023-40661-2of12.patch
  * opensc-CVE-2023-40661-3of12.patch
  * opensc-CVE-2023-40661-4of12.patch
  * opensc-CVE-2023-40661-5of12.patch
  * opensc-CVE-2023-40661-6of12.patch
  * opensc-CVE-2023-40661-7of12.patch
  * opensc-CVE-2023-40661-8of12.patch
  * opensc-CVE-2023-40661-9of12.patch
  * opensc-CVE-2023-40661-10of12.patch
  * opensc-CVE-2023-40661-11of12.patch
  * opensc-CVE-2023-40661-12of12.patch
  * opensc-CVE-2023-4535.patch
  * opensc-CVE-2023-2977.patch
  * opensc-NULL_pointer_fix.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1708862400">- Add CVE-2024-1454.patch.
  Fix for CVE-2024-1454 / bsc#1219868.</changelog>
  <changelog author="angel.yankov@suse.com" date="1727784000">- Security fix: [opensc-CVE-2024-45620, bsc#1230076]
- Security fix: [opensc-CVE-2024-45619, bsc#1230075]
- Security fix: [opensc-CVE-2024-45618, bsc#1230074]
- Security fix: [opensc-CVE-2024-45617, bsc#1230073]
- Security fix: [opensc-CVE-2024-45616, bsc#1230072]
- Security fix: [opensc-CVE-2024-45615, bsc#1230071]
  * opensc: pkcs15init: Usage of uninitialized values in libopensc and pkcs15init
  * opensc: Uninitialized values after incorrect check or usage of APDU response values in libopensc
  * opensc: Uninitialized values after incorrect or missing checking return values of functions in libopensc
  * opensc: Uninitialized values after incorrect or missing checking return values of functions in pkcs15init
  * opensc: Incorrect handling length of buffers or files in libopensc
  * opensc: Incorrect handling of the length of buffers or files in pkcs15init
  * Added patches:
  - opensc-CVE-2024-45615.patch
  - opensc-CVE-2024-45616.patch
  - opensc-CVE-2024-45617.patch
  - opensc-CVE-2024-45618.patch
  - opensc-CVE-2024-45619.patch
  - opensc-CVE-2024-45620.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727784001">- - Security fix: [CVE-2024-8443, bsc#1230364]
  * opensc: heap buffer overflow in OpenPGP driver when generating key
  * Added patch: opensc-CVE-2024-8443.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1750766400">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="02772dc81f85e0fe8674ec56d3d51c44b6a5b4e00f2cd31d575689362c0fd83a4f44425aa0b17231daaca9580fbed14451d84c9a037cfd78d1500028fe841644" name="opensc-debugsource" arch="aarch64">
  <version epoch="0" ver="0.24.0" rel="slfo.1.1_2.1"/>
  <changelog author="michael@stroeder.com" date="1669723200">- Update to OpenSC 0.23.0:
  * General improvements
  - Support signing of data with a length of more than 512 bytes (#2314)
  - By default, disable support for old card drivers (#2391) and remove
    support for old drivers MioCOS and JCOP (#2374)
  - Bump minimal required OpenSSL version to 1.1.1 and add support for OpenSSL 3.0 (#2438, #2506)
  - Compatibility with LibreSSL (#2495, #2595)
  - Remove support for DSA (#2503)
  - Extend p11test to support symmetric keys (#2430)
  - Notice detached reader on macOS (#2418)
  - Support for OAEP padding (#2475, #2484)
  - Fix for PSS salt length (#2478)
  - Improve fuzzing by adding new tests (#2417, #2500, #2520, #2550, #2637)
  - Fixed various issues reported by OSS-Fuzz and Coverity regarding
    card drivers, PKCS#11 and PKCS#15 init
  - Fix issues with OpenPACE (#2472)
  - Containers support for local testing
  - Add support for encryption and decryption using symmetric keys (#2473, #2607)
  - Stop building support for Gost algorithms with OpenSSL 3.0 as they
    require deprecated API (#2586)
  - Fix detection of disconnected readers in PCSC (#2600)
  - Add configuration option for on-disk caching of private data (#2588)
  - Skip building empty binaries when dependencies are missing and
    remove needless linking (#2617)
  - Define arm64 as a supported architecture in the Installer package (#2610)
  * PKCS#11
  - Implement C_CreateObject for EC keys and fix signature verification
    for CKM_ECDSA_SHAx cards (#2420)
  * pkcs11-tool
  - Add more elliptic curves (#2301)
  - Add support for symmetric encrypt and decrypt, wrap and unwrap operations,
    and initialization vector (#2268)
  - Fix consistent handling of secret key attributes (#2497)
  - Add support for signing and verifying with HMAC (#2385)
  - Add support for SHA3 (#2467)
  - Make object selectable via label (#2570)
  - Do not require an R/W session for some operations and
    add --session-rw option (#2579)
  - Print more information: CKA_UNIQUE_ID attribute, SHA3 HMACs and
    serial number for certificates (#2644, #2643, #2641)
  - Add new option --undestroyable to create keys with CKA_DESTROYABLE=FALSE (#2645)
  * sc-hsm-tool
  - Add options for public key authentication (#2301)
  * Minidriver
  - Fix reinit of the card (#2525)
  - Add an entry for Italian CNS (e) (#2548)
  - Fix detection of ECC mechanisms (#2523)
  - Fix ATRs before adding them to the windows registry (#2628)
  * NQ-Applet
  - Add support for the JCOP4 Cards with NQ-Applet (#2425)
  * ItaCNS
  - Add support for ItaCMS v1.1 (key length 2048) (#2371)
  * Belpic
  - Add support for applet v1.8 (#2455)
  * Starcos
  - Add ATR for V3.4 (#2464)
  - Add PKCS#15 emulator for 3.x cards with eSign app (#2544)
  * ePass2003
  - Fix PKCS#15 initialization (#2403)
  - Add support for FIPS (#2543)
  - Fix matching with newer versions and tokens initialized with OpenSC (#2575)
  * MyEID
  - Support logout operation (#2557)
  - Support for symmetric encryption and decryption (#2473, #2607)
  * GIDS
  - Fix decipher for TPM (#1881)
  * OpenPGP
  - Get the list of supported algorithms from algorithm information
    on the card (#2287)
  - Support for 3 certificates with OpenPGP 3+ (#2103)
  * nPA
  - Fix card detection (#2463)
  * Rutoken
  - Fix formatting rtecp cards (#2599)
  * PIV
  - Add new PIVKey ATRs for current cards (#2602)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - opensc-CVE-2023-40660-1of2.patch
  - opensc-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696507200">- Security Fix: [CVE-2023-4535, bsc#1215763]
  * Add patches:
  - opensc-CVE-2023-4535.patch
  - opensc-NULL_pointer_fix.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702468800">- Update to OpenSC 0.24.0:
  * Security
  - CVE-2023-40660: Fix Potential PIN bypass
    (#2806, frankmorgner/OpenSCToken#50, #2807)
  - CVE-2023-40661: Important dynamic analyzers reports
  - CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption
    using symmetric keys (f1993dc)
  * General improvements
  - Fix compatibility of EAC with OpenSSL 3.0 (#2674)
  - Enable use_file_cache by default (#2501)
  - Use custom libctx with OpenSSL &gt;= 3.0 (#2712, #2715)
  - Fix record-based files (#2604)
  - Fix several race conditions (#2735)
  - Run tests under Valgrind (#2756)
  - Test signing of data bigger than 512 bytes (#2789)
  - Update to OpenPACE 1.1.3 (#2796)
  - Implement logout for some of the card drivers (#2807)
  - Fix wrong popup position of opensc-notify (#2901)
  - Fixed various issues reported by OSS-Fuzz and Coverity regarding card
    drivers, PKCS#11 and PKCS#15 init
  * PKCS#11
  - Check card presence state in C_GetSessionInfo (#2740)
  - Remove onepin-opensc-pkcs11 module (#2681)
  - Do not use colons in the token info label (#2760)
  - Present profile objects in all slots with the CKA_TOKEN attribute to
    resolve issues with NSS (#2928, #2924)
  - Use secure memory for PUK (#2906)
  - Don't logout to preserve concurrent access from different processes
    (#2907)
  - Add more examples to manual page (#2936)
  - Present profile objects in all virtual slots (#2928)
  - Provide CKA_TOKEN attribute for profile objects (#2924)
  - Improve --slot parameter documentation (#2951)
  * PKCS#15
  - Honor cache offsets when writing file cache (#2858)
  - Prevent needless amount of PIN prompts from pkcs15init layer (#2916)
  - Propagate CKA_EXTRACTABLE and SC_PKCS15_PRKEY_ACCESS_SENSITIVE from and
    back to PKCS#11 (#2936)
  * Minidriver
  - Fix for private keys that do not need a PIN (#2722)
  - Unbreak decipher when the first null byte of PKCS#1.5 padding is
    missing (#2939*
  * pkcs11-tool
  - Fix RSA key import with OpenSSL 3.0 (#2656)
  - Add support for attribute filtering when listing objects (#2687)
  - Add support for --private flag when writing certificates (#2768)
  - Add support for non-AEAD ciphers to the test mode (#2780)
  - Show CKA_SIGN attribute for secret keys (#2862)
  - Do not attempt to read CKA_ALWAYS_AUTHENTICATE on secret keys
    (#2864, #2913)
  - Show Sign/VerifyRecover attributes (#2888)
  - Add option to import generic keys (#2955)
  * westcos-tool
  - Generate 2k RSA keys by default (b53fc5c)
  * pkcs11-register
  - Disable autostart on Linux by default (#2680)
  * IDPrime
  - Add support for IDPrime MD 830, 930 and 940 (#2666)
  - Add support for SafeNet eToken 5110 token (#2812)
  - Process index even without keyrefmap and use correct label for second
    PIN (#2878)
  - Add support for Gemalto IDPrime 940C (#2941)
  * EPass2003
  - Change of PIN requires verification of the PIN (#2759)
  - Fix incorrect CMAC computation for subkeys (#2759, issue #2734)
  - Use true random number for mutual authentication for SM (#2766)
  - Add verification of data coming from the token in the secure messaging
    mode (#2772)
  - Avoid success when using unsupported digest and fix data length for RAW
    ECDSA signatures (#2845)
  * OpenPGP
  - Fix select data command (#2753, issue #2752)
  - Unbreak ed/curve25519 support (#2892)
  * eOI
  - Add support for Slovenian eID card (eOI) (#2646)
  * Italian CNS
  - Add support for IDEMIA (Oberthur) tokens (#2483)
  * PIV
  - Add support for Swissbit iShield FIDO2 Authenticator (#2671)
  - Implement PIV secure messaging (#2053)
  * SkeID
  - Add support for Slovak eID cards (#2672)
  * isoApplet
  - Support ECDSA with off-card hashing (#2642)
  * MyEID
  - Fix WRAP operation when using T0 (#2695)
  - Identify changes on the card and enable use_file_cache (#2798)
  - Workaround for unwrapping using 2K RSA key (#2921)
  * SC-HSM
  - Add support for opensc-tool --serial (#2675)
  - Fix unwrapping of 4096 keys with handling reader limits (#2682)
  - Indicate supported hashes and MGF1s (#2827)
- Remove patches:
  * opensc-CVE-2023-40660-1of2.patch
  * opensc-CVE-2023-40660-2of2.patch
  * opensc-CVE-2023-40661-1of12.patch
  * opensc-CVE-2023-40661-2of12.patch
  * opensc-CVE-2023-40661-3of12.patch
  * opensc-CVE-2023-40661-4of12.patch
  * opensc-CVE-2023-40661-5of12.patch
  * opensc-CVE-2023-40661-6of12.patch
  * opensc-CVE-2023-40661-7of12.patch
  * opensc-CVE-2023-40661-8of12.patch
  * opensc-CVE-2023-40661-9of12.patch
  * opensc-CVE-2023-40661-10of12.patch
  * opensc-CVE-2023-40661-11of12.patch
  * opensc-CVE-2023-40661-12of12.patch
  * opensc-CVE-2023-4535.patch
  * opensc-CVE-2023-2977.patch
  * opensc-NULL_pointer_fix.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1708862400">- Add CVE-2024-1454.patch.
  Fix for CVE-2024-1454 / bsc#1219868.</changelog>
  <changelog author="angel.yankov@suse.com" date="1727784000">- Security fix: [opensc-CVE-2024-45620, bsc#1230076]
- Security fix: [opensc-CVE-2024-45619, bsc#1230075]
- Security fix: [opensc-CVE-2024-45618, bsc#1230074]
- Security fix: [opensc-CVE-2024-45617, bsc#1230073]
- Security fix: [opensc-CVE-2024-45616, bsc#1230072]
- Security fix: [opensc-CVE-2024-45615, bsc#1230071]
  * opensc: pkcs15init: Usage of uninitialized values in libopensc and pkcs15init
  * opensc: Uninitialized values after incorrect check or usage of APDU response values in libopensc
  * opensc: Uninitialized values after incorrect or missing checking return values of functions in libopensc
  * opensc: Uninitialized values after incorrect or missing checking return values of functions in pkcs15init
  * opensc: Incorrect handling length of buffers or files in libopensc
  * opensc: Incorrect handling of the length of buffers or files in pkcs15init
  * Added patches:
  - opensc-CVE-2024-45615.patch
  - opensc-CVE-2024-45616.patch
  - opensc-CVE-2024-45617.patch
  - opensc-CVE-2024-45618.patch
  - opensc-CVE-2024-45619.patch
  - opensc-CVE-2024-45620.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727784001">- - Security fix: [CVE-2024-8443, bsc#1230364]
  * opensc: heap buffer overflow in OpenPGP driver when generating key
  * Added patch: opensc-CVE-2024-8443.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1750766400">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="347051732b03f176957b1333bdde7b9bc774525eb50f6d96eef07f48afc866abc644bd0fe6276eb6f33349497c1ffe648052bab6111ed6785ea0e2ddf2e88d0c" name="openssh-clients-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.6p1" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1715947200">- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1718020800">- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch
- From Fri Oct 11 09:28:30 UTC 2024 - Antonio Larrosa &lt;alarrosa@suse.com&gt;
- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch
- From Wed Jul 10 11:35:18 UTC 2024 - Antonio Larrosa &lt;alarrosa@suse.com&gt;
- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1772452800">- Add openssh-7.7p1-gssapi-new-unique.patch (bsc#1258166). This
  allows using SSSD with a non-file backend.</changelog>
</package>
<package pkgid="53fe062f10bd5c68ad82489466b2893775646cbeceaea98ae68acab26386da3f4c2a3afcc3e3be35a6b519f13f3e93dadc8bd85f0fe123059337e08f38b6f6cf" name="openssh-common-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.6p1" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1715947200">- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1718020800">- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch
- From Fri Oct 11 09:28:30 UTC 2024 - Antonio Larrosa &lt;alarrosa@suse.com&gt;
- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch
- From Wed Jul 10 11:35:18 UTC 2024 - Antonio Larrosa &lt;alarrosa@suse.com&gt;
- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1772452800">- Add openssh-7.7p1-gssapi-new-unique.patch (bsc#1258166). This
  allows using SSSD with a non-file backend.</changelog>
</package>
<package pkgid="ecee334134306e7116e37bce593d51a9ae4888b63ed30c613e9854d23c2c4fb7bf59fb27e77eab82c09507fa1eaa7c0d3ba466a7e862eb2e5cc47672cbec338d" name="openssh-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.6p1" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1715947200">- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1718020800">- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch
- From Fri Oct 11 09:28:30 UTC 2024 - Antonio Larrosa &lt;alarrosa@suse.com&gt;
- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch
- From Wed Jul 10 11:35:18 UTC 2024 - Antonio Larrosa &lt;alarrosa@suse.com&gt;
- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1772452800">- Add openssh-7.7p1-gssapi-new-unique.patch (bsc#1258166). This
  allows using SSSD with a non-file backend.</changelog>
</package>
<package pkgid="c1531457e8a9f948ac45677243ce6bd2a7c3a70ff887a1283583126390c4d3be2c9fdf88d72fa36929019b18cdc13ad7fe571818b61a6e9cd3d5a0927ee07c16" name="openssh-debugsource" arch="aarch64">
  <version epoch="0" ver="9.6p1" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1715947200">- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1718020800">- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch
- From Fri Oct 11 09:28:30 UTC 2024 - Antonio Larrosa &lt;alarrosa@suse.com&gt;
- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch
- From Wed Jul 10 11:35:18 UTC 2024 - Antonio Larrosa &lt;alarrosa@suse.com&gt;
- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1772452800">- Add openssh-7.7p1-gssapi-new-unique.patch (bsc#1258166). This
  allows using SSSD with a non-file backend.</changelog>
</package>
<package pkgid="efad40884db1ad559ed4d059d3b9154c70aa6b353f8e365603a93d75a52b8b1d529fc101dc30ec8d8cbbdfdfd49b80804cd1f5edade6d333fc201da01db2cb94" name="openssh-server-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.6p1" rel="slfo.1.1_3.1"/>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1715947200">- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1718020800">- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch
- From Fri Oct 11 09:28:30 UTC 2024 - Antonio Larrosa &lt;alarrosa@suse.com&gt;
- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch
- From Wed Jul 10 11:35:18 UTC 2024 - Antonio Larrosa &lt;alarrosa@suse.com&gt;
- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1772452800">- Add openssh-7.7p1-gssapi-new-unique.patch (bsc#1258166). This
  allows using SSSD with a non-file backend.</changelog>
</package>
<package pkgid="67650c17b6f3b7f8d5e1033af27c6d8d7214a4e58fb67a15464cfc3e725f0c1585a120130a1f0ab66d5696d5ca3af43086c6d90e22fd8cae8a958d75f21d2085" name="openssl-3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.4" rel="slfo.1.1_8.1"/>
  <changelog author="pmonreal@suse.com" date="1721217600">- Build with enabled sm2 and sm4 support [bsc#1222899]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used
  * Added openssl-CVE-2024-41996.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1737633600">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1749124800">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1749643200">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1758801600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch
- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
</package>
<package pkgid="bb482f2bca8c613182f6d121b213c4baaf57504c0f2fb1c5ec6eb3cbfd9a55a048775c4141cc4339a6148fff1733fbcb1214b8286f7128df07321097cb6776f1" name="openssl-3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.1.4" rel="slfo.1.1_8.1"/>
  <changelog author="pmonreal@suse.com" date="1721217600">- Build with enabled sm2 and sm4 support [bsc#1222899]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used
  * Added openssl-CVE-2024-41996.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1737633600">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1749124800">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1749643200">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1758801600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch
- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
</package>
<package pkgid="c39748df358846f3717d7129c62b644c48ae90ac242e1e4d312292658c174280fd8bc25cb46783fa3525e10d971b8f1f124bd1893e0b9a80f6c640433bace5d2" name="openvswitch-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.7" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1659528000">- update to 2.17.2:
  - Bug fixes
  - DPDK:
  * OVS validated with DPDK 21.11.1.  It is recommended to use this version
    until further releases.
  - Bug fixes
  - libopenvswitch API change:
  * To fix the Undefined Behavior issue causing the compiler to incorrectly
    optimize important parts of code, container iteration macros (e.g.,
    LIST_FOR_EACH) have been re-implemented in a UB-safe way.
  * Backwards compatibility has mostly been preserved, however the
    user-provided pointer is now set to NULL after the loop (unless it
    exited via "break;")
  * Users of libopenvswitch will need to double-check the use of such loop
    macros before compiling with a new version.
  * Since the change is limited to the definitions within the headers, the
    ABI is not affected.
- refresh 0001-openvswitch-merge-compiler.h-files-into-one-file.patch
  0002-build-Seperated-common-used-headers.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662984000">- fix tests with GNU grep 3.8 boo#1203239
  add openvswitch-2.17.2-Fix-tests-with-GNU-grep-3.8.patch</changelog>
  <changelog author="dmueller@suse.com" date="1664452800">- add a77ad9693c8b49055389559187fe74eddb619746.patch to avoid
  the cpu detection code being compiled with AVX512 enabled
- add 0001-m4-Test-avx512-for-x86-only.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1680696000">- Update OVS version to v3.1.0 and OVN version to v23.03.0
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
  - Removed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * 0001-openvswitch-merge-compiler.h-files-into-one-file.patch
  * openvswitch-CVE-2021-36980.patch
  * 0002-build-Seperated-common-used-headers.patch
  * a77ad9693c8b49055389559187fe74eddb619746.patch
  * 0001-m4-Test-avx512-for-x86-only.patch
  * openvswitch-2.17.2-Fix-tests-with-GNU-grep-3.8.patch
  - Renamed and rebased patches,
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  - Added ovsb tool install patch,
  * install-ovsdb-tools.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683028800">- Remove python/ovs/dirs.py prior to building: have this
  re-generated based on the shipped template (boo#1210479).</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1694088000">- Fix CVE-2023-3153 [bsc#1212125], VUL-0: CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited
- Added patch,
    CVE-2023-3152.patch</changelog>
  <changelog author="ana.guerrero@suse.com" date="1701691200">- Add BuildRequires on python-setuptools. Previously this was pulled
  by python-Sphinx in the build environment.</changelog>
  <changelog author="dmueller@suse.com" date="1702555200">- convert to sysuser generated users</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1764158400">- OpenvSwitch upstream bugfix updates:
  * https://www.openvswitch.org/releases/NEWS-3.1.7.txt
  * v3.1.7
  - Bug fixes
  - OVS validated with DPDK 22.11.7.
  * v3.1.6
  - Bug fixes
  - OVS validated with DPDK 22.11.6.
  * v3.1.5
  - Bug fixes
  - OVS validated with DPDK 22.11.5.
  * v3.1.4
  - Bug fixes
  - Fixed vulnerabilities CVE-2023-3966 (bsc#1219465)
    and CVE-2023-5366 (bsc#1216002).
  - OVS validated with DPDK 22.11.4.
  * v3.1.3
  - Bug fixes
  * v3.1.2
  - Bug fixes
  * v3.1.1
  - Bug fixes
  - Fixed vulnerability CVE-2023-1668 (bsc#1210054)
  - Remove included patches:
    CVE-2023-1668.patch
- OVN upstream bugfix updates:
  * https://github.com/ovn-org/ovn/blob/branch-23.03/NEWS
  - Fix CVE-2025-0650 (bsc#1236353) ovn: egress ACLs may be bypassed
    via specially crafted UDP packet (CVE-2025-0650.patch)
  * v23.03.3
  - Bug fixes
  - Add "garp-max-timeout-sec" config option to vswitchd external-ids to
    cap the time between when ovn-controller sends gARP packets.
  - Security: Fixed vulnerability CVE-2024-2182 (bsc#1255435).
  - Updated patches
    install-ovsdb-tools.patch
  * v23.03.2
  - Bug fixes
  * v23.03.1
  - Bug fixes
  - CT entries are not flushed by default anymore whenever a load balancer
    backend is removed.  A new, per-LB, option 'ct_flush' can be used to
    restore the previous behavior.  Disabled by default.
  - Always allow IPv6 Router Discovery, Neighbor Discovery, and Multicast
    Listener Discovery protocols, regardless of ACLs defined.
  - Send ICMP Fragmentation Needed packets back to offending ports when
    communicating with multichassis ports using frames that don't fit through a
    tunnel. This is done only for logical switches that are attached to a
    physical network via a localnet port, in which case multichassis ports may
    have an effective MTU different from regular ports and hence may need this
    mechanism to maintain connectivity with other peers in the network.
  - ECMP routes use L4_SYM dp-hash by default if the datapath supports it.
    Existing sessions might get re-hashed to a different ECMP path when
    OVN detects the algorithm support in the datapath during an upgrade
    or restart of ovn-controller.
  - Add CoPP for the svc_monitor_mac. This addresses CVE-2023-3153
    (bsc#1212125).
  - Remove included patches:
    CVE-2023-3152.patch</changelog>
</package>
<package pkgid="1022e8d61f6a140938c0baf9c146df0cfc3ff8c9a5640e01a74c63f1a99d07d155a36dad61dde24ad8c4585edfa71cd7baaa19faaefc824999d57644cb6f0e80" name="openvswitch-debugsource" arch="aarch64">
  <version epoch="0" ver="3.1.7" rel="slfo.1.1_2.1"/>
  <changelog author="dmueller@suse.com" date="1659528000">- update to 2.17.2:
  - Bug fixes
  - DPDK:
  * OVS validated with DPDK 21.11.1.  It is recommended to use this version
    until further releases.
  - Bug fixes
  - libopenvswitch API change:
  * To fix the Undefined Behavior issue causing the compiler to incorrectly
    optimize important parts of code, container iteration macros (e.g.,
    LIST_FOR_EACH) have been re-implemented in a UB-safe way.
  * Backwards compatibility has mostly been preserved, however the
    user-provided pointer is now set to NULL after the loop (unless it
    exited via "break;")
  * Users of libopenvswitch will need to double-check the use of such loop
    macros before compiling with a new version.
  * Since the change is limited to the definitions within the headers, the
    ABI is not affected.
- refresh 0001-openvswitch-merge-compiler.h-files-into-one-file.patch
  0002-build-Seperated-common-used-headers.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662984000">- fix tests with GNU grep 3.8 boo#1203239
  add openvswitch-2.17.2-Fix-tests-with-GNU-grep-3.8.patch</changelog>
  <changelog author="dmueller@suse.com" date="1664452800">- add a77ad9693c8b49055389559187fe74eddb619746.patch to avoid
  the cpu detection code being compiled with AVX512 enabled
- add 0001-m4-Test-avx512-for-x86-only.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1680696000">- Update OVS version to v3.1.0 and OVN version to v23.03.0
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
  - Removed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * 0001-openvswitch-merge-compiler.h-files-into-one-file.patch
  * openvswitch-CVE-2021-36980.patch
  * 0002-build-Seperated-common-used-headers.patch
  * a77ad9693c8b49055389559187fe74eddb619746.patch
  * 0001-m4-Test-avx512-for-x86-only.patch
  * openvswitch-2.17.2-Fix-tests-with-GNU-grep-3.8.patch
  - Renamed and rebased patches,
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  - Added ovsb tool install patch,
  * install-ovsdb-tools.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683028800">- Remove python/ovs/dirs.py prior to building: have this
  re-generated based on the shipped template (boo#1210479).</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1694088000">- Fix CVE-2023-3153 [bsc#1212125], VUL-0: CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited
- Added patch,
    CVE-2023-3152.patch</changelog>
  <changelog author="ana.guerrero@suse.com" date="1701691200">- Add BuildRequires on python-setuptools. Previously this was pulled
  by python-Sphinx in the build environment.</changelog>
  <changelog author="dmueller@suse.com" date="1702555200">- convert to sysuser generated users</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1764158400">- OpenvSwitch upstream bugfix updates:
  * https://www.openvswitch.org/releases/NEWS-3.1.7.txt
  * v3.1.7
  - Bug fixes
  - OVS validated with DPDK 22.11.7.
  * v3.1.6
  - Bug fixes
  - OVS validated with DPDK 22.11.6.
  * v3.1.5
  - Bug fixes
  - OVS validated with DPDK 22.11.5.
  * v3.1.4
  - Bug fixes
  - Fixed vulnerabilities CVE-2023-3966 (bsc#1219465)
    and CVE-2023-5366 (bsc#1216002).
  - OVS validated with DPDK 22.11.4.
  * v3.1.3
  - Bug fixes
  * v3.1.2
  - Bug fixes
  * v3.1.1
  - Bug fixes
  - Fixed vulnerability CVE-2023-1668 (bsc#1210054)
  - Remove included patches:
    CVE-2023-1668.patch
- OVN upstream bugfix updates:
  * https://github.com/ovn-org/ovn/blob/branch-23.03/NEWS
  - Fix CVE-2025-0650 (bsc#1236353) ovn: egress ACLs may be bypassed
    via specially crafted UDP packet (CVE-2025-0650.patch)
  * v23.03.3
  - Bug fixes
  - Add "garp-max-timeout-sec" config option to vswitchd external-ids to
    cap the time between when ovn-controller sends gARP packets.
  - Security: Fixed vulnerability CVE-2024-2182 (bsc#1255435).
  - Updated patches
    install-ovsdb-tools.patch
  * v23.03.2
  - Bug fixes
  * v23.03.1
  - Bug fixes
  - CT entries are not flushed by default anymore whenever a load balancer
    backend is removed.  A new, per-LB, option 'ct_flush' can be used to
    restore the previous behavior.  Disabled by default.
  - Always allow IPv6 Router Discovery, Neighbor Discovery, and Multicast
    Listener Discovery protocols, regardless of ACLs defined.
  - Send ICMP Fragmentation Needed packets back to offending ports when
    communicating with multichassis ports using frames that don't fit through a
    tunnel. This is done only for logical switches that are attached to a
    physical network via a localnet port, in which case multichassis ports may
    have an effective MTU different from regular ports and hence may need this
    mechanism to maintain connectivity with other peers in the network.
  - ECMP routes use L4_SYM dp-hash by default if the datapath supports it.
    Existing sessions might get re-hashed to a different ECMP path when
    OVN detects the algorithm support in the datapath during an upgrade
    or restart of ovn-controller.
  - Add CoPP for the svc_monitor_mac. This addresses CVE-2023-3153
    (bsc#1212125).
  - Remove included patches:
    CVE-2023-3152.patch</changelog>
</package>
<package pkgid="1795e734428d1e65149de820c6110e442425737e8dac4b865f774568ca89a3f36b12c14a2056f759c451305a77dffd84d286d71babfe36e946dfe311e3610c12" name="opus-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4" rel="slfo.1.1_1.2"/>
  <changelog author="idonmez@suse.com" date="1495972800">- Update to version 1.1.5
  + This release backports the surround encoder bug fix from
    1.2-beta branch</changelog>
  <changelog author="aloisio@gmx.com" date="1497960000">- Update to version 1.2
  + Speech quality improvements especially in the 12-20 kbit/s
    range
  + Improved VBR encoding for hybrid mode
  + More aggressive use of wider speech bandwidth, including
    fullband speech starting at 14 kbit/s
  + Music quality improvements in the 32-48 kb/s range
  + Generic and SSE CELT optimizations
  + Support for directly encoding packets up to 120 ms
  + DTX support for CELT mode
  + SILK CBR improvements
  + Support for all of the fixes in
    draft-ietf-codec-opus-update-06 (the mono downmix and the
    folding fixes need --enable-update-draft)
  + Many bug fixes, including integer wrap-arounds discovered
    through fuzzing (no security implications)
- Removed static package</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Cleanup with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.2.1:
  + This fixes an issue where the encoder can misdetect that the
    signal is SWB instead of FB, lowpassing the signal. This patch
    makes the encoder much more careful about doing that.</changelog>
  <changelog author="mcepl@suse.com" date="1539864000">- Update to 1.3:
  - improved speech/music detection based on a neural network
  - low-bitrate speech improvements
  - support for immersive audio using ambisonics
  - tone quality improvements
  - updates to the Opus standard (rfc 8251) are on by default
  - security improvements
- Clean up SPEC to the latest standards</changelog>
  <changelog author="aloisio@gmx.com" date="1558785600">- Update to version 1.3.1
  * This release fixes an issue with the analysis on files with
    digital silence (all zeros), especially on x87 builds
    (mostly affects 32-bit builds).
  * Two new features:
    + A new OPUS_GET_IN_DTX query to know if the encoder is in
    DTX mode (last frame was either a comfort noise frame or
    not encoded at all)
    + A new (and still experimental) CMake-based build system
    that is eventually meant to replace the VS2015 build
    system (the autotools one will stay).</changelog>
  <changelog author="dimstar@opensuse.org" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565870400">- Add 2 upstream bug fixes for Silk:
  * opus-Silk-CNG-adapts-faster.patch: Silk CNG adapts faster to
    received packets with lower gains.
  * opus-Silk-fix-arm-optimization.patch: Avoid processing LPC
    coeffs beyond the given order in NEON optimizations.</changelog>
  <changelog author="gboiko@suse.com" date="1586952000">- Backport of an upstream fix for celt decoder:
  * opus-Fix-celt-decoder-assertion-when-using-OPUS_CUSTOM.patch: When
    using OPUS_CUSTOM, `CELTDecoder-&gt;end` can be larger than 21.
    Assert against 25 instead in OPUS_CUSTOM builds.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.4:
  * Improved tuning of the Opus in-band FEC (LBRR). See the
    https://gitlab.xiph.org/xiph/opus/-/issues/2360 for details
  * Added a OPUS_SET_INBAND_FEC(2) option that turns on FEC, but
    does not force SILK mode (FEC will be disabled in CELT mode)
  * Improved tuning and various fixes to DTX
  * Added Meson support, improved CMake support
- Change Source to new home on github.
- Use autosetup, make_build and ldconfig_scriptlets macros.
- Move AUTHORS and README docs to devel package.
- Drop patches fixed upstream:
  * opus-Fix-celt-decoder-assertion-when-using-OPUS_CUSTOM.patch
  * opus-Silk-CNG-adapts-faster.patch
  * opus-Silk-fix-arm-optimization.patch</changelog>
</package>
<package pkgid="14e0da1594acedd1038076f6f8287b1bfc2b4be3ce7a55d5774f242d9ba180deaa6d991191170692e5302765b29124c12f2ea9756ebda98705e714dcd1f4dd63" name="orc-debugsource" arch="aarch64">
  <version epoch="0" ver="0.4.34" rel="slfo.1.1_2.1"/>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Switch to the meson build system, which knows how to cope with
  GTK 1.26+:
  + Use the tarball published on github (the automake bootstrapped
    one does not contain the meson build system).
  + Add meson BuildRequires and switch configure/make/make_install
    macros to the relevant meson/meson_build/meson_install
    variants.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511179200">- Update to version 0.4.28:
  + Numerous undefined behaviour fixes.
  + Ability to disable tests.
  + Fix meson dist behaviour.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 0.4.29:
  + PowerPC: Support ELFv2 ABI (A. Wilcox) and ppc64le.
  + Mips backend: only enable if the DSPr2 ASE is present.
  + Windows and MSVC build fixes.
  + orccpu-arm: Allow 'cpuinfo' fallback on non-android.
  + pkg-config file for orc-test library.
  + orcc: add --decorator command line argument to add function
    decorators in header files.
  + meson:
  - Make orcc detectable from other subprojects.
  - Add options to disable tests, docs, benchmarks, examples,
    tools, etc.
  - Misc. other fixes.
- Pass orc-test=disabled, examples=disabled and tests=disabled to
  meson, and drop meson_tests. Tests consistantly fails on the
  buildservice and consistantly succedes when building locally,
  hence trying to build them on the obs is pointless.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 0.4.30:
  + Don't always generate static library but default to shared-only
  + Work around false positives in Microsoft UWP certification kit
  + Add endbr32/endbr64 instructions on x86/x86-64 for indirect
    branch tracking
  + Fix gtk-doc build when orc is used as a meson subproject
  + Switch float comparison in tests to ULP method to fix spurious
    failures
  + Fix flushing of ARM icache when using dual map
  + Use float constants/parameters when testing float opcodes
  + Add support for Hygon Dhyana processor
  + Fix PPC/PPC64 CPU family detection
  + Add little-endian PPC support
  + Fix compiler warnings with clang
  + Mark exec mapping writable in debug mode for allowing
    breakpoints
  + Various codegen refactorings
  + autotools support has been dropped in favour of Meson as build
    system.
  + Fix PPC CPU feature detection and add support for VSX/v2.07
  + Add double/int64 support for PPC
- No longer remove static file in install section, no longer needed
  as it's not built by default anymore.</changelog>
  <changelog author="dimstar@opensuse.org" date="1578398400">- Update to version 0.4.31:
  + Fix OrcTargetPowerPCFlags enum typedef to revert API change on
    macOS/iOS.
  + Fixes for various PowerPC issues.
  + Enable flush-to-zero mode for float programs on ARM/neon.
  + Fix some opcodes to support x2/x4 processing on PowerPC.</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- Update to version 0.4.32:
  + Add support for JIT code generation in Universal Windows
    Platform apps.
  + Minor Meson build system fixes and improvements.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669032000">- Update to version 0.4.33:
  + Add support for aarch64 (64-bit ARM) architecture.
  + aarch32: Implement loadupdb instruction used e.g. for video
    pixel format packing/unpacking/conversions.
  + neon: Fix unsigned only implementation of loadoffb, loadoffw
    and loadoffl.
  + neon: Fix testsuite not passing on arm CPUs.
  + orccodemem: Fix use-after-free in error paths.
  + orccpu-powerpc: Fix build with kernel &lt; 4.11.
  + Add support for macOS Hardened Runtime.
  + Enable only SSE and MMX backends for Windows.
  + Fix ORC_RESTRICT definition for MSVC.
  + pkgconfig: add -DORC_STATIC_COMPILATION flag to .pc file for
    static-only builds.</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- Update to version 0.4.34
  + Thread-safety improvements around orc codemem
    allocation/freeing
  + Add orc_parse_code() with more detailed error reporting
  + Implement Orc function lazy initialization correctly via atomic
    operations
  + orc program parser fixes and improvements
  + build fixes and compiler warning fixes
  + coverity and clang scan-build static code analysis fixes
  + meson: Do not always generate static library for test library
  + ci improvements</changelog>
  <changelog author="alarrosa@suse.com" date="1721649600">- Add patch from upstream to fix a stack-based buffer overflow
  in the Orc compiler when formatting error messages (bsc#1228184,
  CVE-2024-40897):
  * 0001-Use-vasprintf-if-available-for-error-messages-and.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1738238400">- follow up of CVE-2024-40897 fix [bsc#1228184]
- added patches
  fix https://gitlab.freedesktop.org/gstreamer/orc/-/commit/13ad22b4bc75feb71cefc6b9c0c9cb81ff8c73c4
  + orc-check-return-value-of-vasprintf.patch</changelog>
</package>
<package pkgid="b5145d28d7a9d07c4deb473986d5ea318bded5b4bbf86103745388e6082ab02d736292e225e32b660966a322f3671007da724091417358d7313cd5d20fa924d1" name="p11-kit-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.25.3" rel="slfo.1.1_1.2"/>
  <changelog author="lnussel@suse.de" date="1639396800">- Enable systemd support</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 0.24.0:
  * Use inclusive language on certificate distrust. Note: This
    changes the directory and attribute names to distrust certain
    CAs to "blocklist".
  * Fix issues spotted by coverity and ASan.
  * Integrate gettext with tools more tightly.
  * rpc: Forbid use of array of attributes.
  * Build fixes.
- Change dirs from blacklist to blocklist ref upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643112000">- Update to version 0.24.1:
  * rpc: Support protocol version negotiation.
  * proxy: Support copying attribute array recursively.
  * Link libp11-kit so that it cannot unload.
  * Translation improvements.
  * Build fixes.</changelog>
  <changelog author="lnussel@suse.de" date="1646827200">- make sure p11-kit components have matching versions (boo#1196812)</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip testsuite on qemu arches, it fails</changelog>
  <changelog author="pmonreal@suse.com" date="1695211200">- Update to 0.25.0:
  * add PKCS#11 3.0 support
  * add support for profile objects
  * add ability to adjust module and config paths at run-time via
    system environmental exports
  * make terminal output nicer
  * p11-kit: add command to print merged configuration
  * p11-kit: add commands to list, add and delete profiles of a token
  * trust: add command to check format of .p11-kit files
  * virtual: fix libffi type signatures for PKCS#11 3.0 functions
  * server: fix umask setting when --group is specified
  * server: check SHELL only when neither --sh nor --csh is specified
  * rpc: use space string in C_InitToken
  * rpc: fix two off-by-one errors identified by asan
  * modules: make logging message more translatable
  * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms
  * pkcs11.h: add IBM specific mechanism and attributes
  * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms
  * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption
  * po: update translations from Transifex
- Update upstream p11-kit.keyring file
- Add missing lang files
- Switch to using Meson as the build system</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211201">- Add d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch: Fix probing
  of C_GetInterface.</changelog>
  <changelog author="pmonreal@suse.com" date="1698408000">- Update to 0.25.1:
  * fix probing of C_GetInterface [#535]
  * p11-kit: add command to list tokens [#581]
  * p11-kit: add command to list mechanisms supported by a token [#576]
  * p11-kit: add command to generate private-public keypair on a token
    [#551, #582]
  * p11-kit: add commands to import/export certificates and public
    keys into/from a token [#543, #549, #568, #588]
  * p11-kit: add commands to list and delete objects of a token
    [#533, #544, #571]
  * p11-kit: add --login option to login into a token with object
    and profile management commands [#587]
  * p11-kit: adjust behavior of PKCS#11 profile management commands
    [#558, #560, #583, #591]
  * p11-kit: print PKCS#11 URIs in list-modules [#532]
  * bug and build fixes [#528 #529, #534, #537, #540, #541, #545,
    [#547], #550, #557, #572, #575, #579, #585, #586, #590]
  * test fixes [#553, #580]
  * Remove patch fixed upstream:
  - d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698926400">- Update to 0.25.2:
  * fix error code checking of readpassphrase for --login option [#595]
  * build fixes [#594]
  * test fixes [#596]</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 0.25.3:
  * rpc: fix serialization of NULL mechanism pointer [#601]
  * fix meson build failure in macOS (appleframeworks not found) [#603]</changelog>
</package>
<package pkgid="d4eaa6cefc186fad8f8e0e4148189121eec50f403f8522b82263b6da31424e00296ad58ce500eba1f05e59d28cdf889f4dabe8f194de580906c2ba3214b980d1" name="p11-kit-debugsource" arch="aarch64">
  <version epoch="0" ver="0.25.3" rel="slfo.1.1_1.2"/>
  <changelog author="lnussel@suse.de" date="1639396800">- Enable systemd support</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 0.24.0:
  * Use inclusive language on certificate distrust. Note: This
    changes the directory and attribute names to distrust certain
    CAs to "blocklist".
  * Fix issues spotted by coverity and ASan.
  * Integrate gettext with tools more tightly.
  * rpc: Forbid use of array of attributes.
  * Build fixes.
- Change dirs from blacklist to blocklist ref upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643112000">- Update to version 0.24.1:
  * rpc: Support protocol version negotiation.
  * proxy: Support copying attribute array recursively.
  * Link libp11-kit so that it cannot unload.
  * Translation improvements.
  * Build fixes.</changelog>
  <changelog author="lnussel@suse.de" date="1646827200">- make sure p11-kit components have matching versions (boo#1196812)</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip testsuite on qemu arches, it fails</changelog>
  <changelog author="pmonreal@suse.com" date="1695211200">- Update to 0.25.0:
  * add PKCS#11 3.0 support
  * add support for profile objects
  * add ability to adjust module and config paths at run-time via
    system environmental exports
  * make terminal output nicer
  * p11-kit: add command to print merged configuration
  * p11-kit: add commands to list, add and delete profiles of a token
  * trust: add command to check format of .p11-kit files
  * virtual: fix libffi type signatures for PKCS#11 3.0 functions
  * server: fix umask setting when --group is specified
  * server: check SHELL only when neither --sh nor --csh is specified
  * rpc: use space string in C_InitToken
  * rpc: fix two off-by-one errors identified by asan
  * modules: make logging message more translatable
  * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms
  * pkcs11.h: add IBM specific mechanism and attributes
  * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms
  * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption
  * po: update translations from Transifex
- Update upstream p11-kit.keyring file
- Add missing lang files
- Switch to using Meson as the build system</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211201">- Add d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch: Fix probing
  of C_GetInterface.</changelog>
  <changelog author="pmonreal@suse.com" date="1698408000">- Update to 0.25.1:
  * fix probing of C_GetInterface [#535]
  * p11-kit: add command to list tokens [#581]
  * p11-kit: add command to list mechanisms supported by a token [#576]
  * p11-kit: add command to generate private-public keypair on a token
    [#551, #582]
  * p11-kit: add commands to import/export certificates and public
    keys into/from a token [#543, #549, #568, #588]
  * p11-kit: add commands to list and delete objects of a token
    [#533, #544, #571]
  * p11-kit: add --login option to login into a token with object
    and profile management commands [#587]
  * p11-kit: adjust behavior of PKCS#11 profile management commands
    [#558, #560, #583, #591]
  * p11-kit: print PKCS#11 URIs in list-modules [#532]
  * bug and build fixes [#528 #529, #534, #537, #540, #541, #545,
    [#547], #550, #557, #572, #575, #579, #585, #586, #590]
  * test fixes [#553, #580]
  * Remove patch fixed upstream:
  - d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698926400">- Update to 0.25.2:
  * fix error code checking of readpassphrase for --login option [#595]
  * build fixes [#594]
  * test fixes [#596]</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 0.25.3:
  * rpc: fix serialization of NULL mechanism pointer [#601]
  * fix meson build failure in macOS (appleframeworks not found) [#603]</changelog>
</package>
<package pkgid="8ecfcb9e4d136caecbec178cb85a8699e1d310234fc842adf44ebdf173d5bee7cd3569692a969c6ca848f4f97b9fc4eb886dcc9ddd72428a40839184ccab3692" name="p11-kit-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.25.3" rel="slfo.1.1_1.2"/>
  <changelog author="lnussel@suse.de" date="1639396800">- Enable systemd support</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 0.24.0:
  * Use inclusive language on certificate distrust. Note: This
    changes the directory and attribute names to distrust certain
    CAs to "blocklist".
  * Fix issues spotted by coverity and ASan.
  * Integrate gettext with tools more tightly.
  * rpc: Forbid use of array of attributes.
  * Build fixes.
- Change dirs from blacklist to blocklist ref upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643112000">- Update to version 0.24.1:
  * rpc: Support protocol version negotiation.
  * proxy: Support copying attribute array recursively.
  * Link libp11-kit so that it cannot unload.
  * Translation improvements.
  * Build fixes.</changelog>
  <changelog author="lnussel@suse.de" date="1646827200">- make sure p11-kit components have matching versions (boo#1196812)</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip testsuite on qemu arches, it fails</changelog>
  <changelog author="pmonreal@suse.com" date="1695211200">- Update to 0.25.0:
  * add PKCS#11 3.0 support
  * add support for profile objects
  * add ability to adjust module and config paths at run-time via
    system environmental exports
  * make terminal output nicer
  * p11-kit: add command to print merged configuration
  * p11-kit: add commands to list, add and delete profiles of a token
  * trust: add command to check format of .p11-kit files
  * virtual: fix libffi type signatures for PKCS#11 3.0 functions
  * server: fix umask setting when --group is specified
  * server: check SHELL only when neither --sh nor --csh is specified
  * rpc: use space string in C_InitToken
  * rpc: fix two off-by-one errors identified by asan
  * modules: make logging message more translatable
  * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms
  * pkcs11.h: add IBM specific mechanism and attributes
  * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms
  * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption
  * po: update translations from Transifex
- Update upstream p11-kit.keyring file
- Add missing lang files
- Switch to using Meson as the build system</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211201">- Add d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch: Fix probing
  of C_GetInterface.</changelog>
  <changelog author="pmonreal@suse.com" date="1698408000">- Update to 0.25.1:
  * fix probing of C_GetInterface [#535]
  * p11-kit: add command to list tokens [#581]
  * p11-kit: add command to list mechanisms supported by a token [#576]
  * p11-kit: add command to generate private-public keypair on a token
    [#551, #582]
  * p11-kit: add commands to import/export certificates and public
    keys into/from a token [#543, #549, #568, #588]
  * p11-kit: add commands to list and delete objects of a token
    [#533, #544, #571]
  * p11-kit: add --login option to login into a token with object
    and profile management commands [#587]
  * p11-kit: adjust behavior of PKCS#11 profile management commands
    [#558, #560, #583, #591]
  * p11-kit: print PKCS#11 URIs in list-modules [#532]
  * bug and build fixes [#528 #529, #534, #537, #540, #541, #545,
    [#547], #550, #557, #572, #575, #579, #585, #586, #590]
  * test fixes [#553, #580]
  * Remove patch fixed upstream:
  - d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698926400">- Update to 0.25.2:
  * fix error code checking of readpassphrase for --login option [#595]
  * build fixes [#594]
  * test fixes [#596]</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 0.25.3:
  * rpc: fix serialization of NULL mechanism pointer [#601]
  * fix meson build failure in macOS (appleframeworks not found) [#603]</changelog>
</package>
<package pkgid="784ba0db0882be7667794d6b4f8035e9d42fb5f5baf215d7f4a6573e3ab6dc6cfe519cf65d54cef54a9e951392dd93044b67b932f1072ff3f6f36cb8a26e4470" name="pam-config-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.11+git.20240906" rel="slfo.1.1_2.1"/>
  <changelog author="kukuk@suse.com" date="1694088000">- Update to version 2.7
  - Add support for aad module</changelog>
  <changelog author="kukuk@suse.com" date="1694174400">- Update to version 2.8
  - Replace aad module with himmelblau</changelog>
  <changelog author="kukuk@suse.com" date="1695988800">- Update to version 2.9
  - Add support for kanidm</changelog>
  <changelog author="kukuk@suse.com" date="1701086400">- Update to version 2.10
  - Enable session and account support for kanidm and himmelblau</changelog>
  <changelog author="kukuk@suse.com" date="1707825600">- Update to version 2.11
  - pam_gnome_keyring: use options in AUTH [bsc#1219767]</changelog>
  <changelog author="kukuk@suse.com" date="1712836800">- Update to version 2.11+git.20240411:
  * Configure Himmelblau correctly w/ other services present
  * Configure other services correctly w/ Himmelblau present
  * Himmelblau session is only optional</changelog>
  <changelog author="kukuk@suse.com" date="1716811200">- Update to version 2.11+git.20240527:
  * Move ecryptfs/fscrypt earlier in session list [bsc#1225290]</changelog>
  <changelog author="kukuk@suse.com" date="1718884800">- Update to version 2.11+git.20240620:
  * Call pam_fscrypt/pam_ecryptfs as first session module
    [bsc#1226452]</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Update to version 2.11+git.20240906:
  * Move pam_limits before pam_systemd</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1747396800">- Stop adding pam_env in AUTH stack, and be sure to put this module at the
  really end of the SESSION stack.
  [bsc#1243226, CVE-2025-6018, remove-pam_env-from-auth-stack.patch]</changelog>
</package>
<package pkgid="5b281f1ed27133bdec3dfed50c1a6379d814fe575fc6da1373ed20158c904b78a9ad2135f776d58fe150ecfa7dc9749a4d1f1c8ddb0d340bd738815650dc9623" name="pam-config-debugsource" arch="aarch64">
  <version epoch="0" ver="2.11+git.20240906" rel="slfo.1.1_2.1"/>
  <changelog author="kukuk@suse.com" date="1694088000">- Update to version 2.7
  - Add support for aad module</changelog>
  <changelog author="kukuk@suse.com" date="1694174400">- Update to version 2.8
  - Replace aad module with himmelblau</changelog>
  <changelog author="kukuk@suse.com" date="1695988800">- Update to version 2.9
  - Add support for kanidm</changelog>
  <changelog author="kukuk@suse.com" date="1701086400">- Update to version 2.10
  - Enable session and account support for kanidm and himmelblau</changelog>
  <changelog author="kukuk@suse.com" date="1707825600">- Update to version 2.11
  - pam_gnome_keyring: use options in AUTH [bsc#1219767]</changelog>
  <changelog author="kukuk@suse.com" date="1712836800">- Update to version 2.11+git.20240411:
  * Configure Himmelblau correctly w/ other services present
  * Configure other services correctly w/ Himmelblau present
  * Himmelblau session is only optional</changelog>
  <changelog author="kukuk@suse.com" date="1716811200">- Update to version 2.11+git.20240527:
  * Move ecryptfs/fscrypt earlier in session list [bsc#1225290]</changelog>
  <changelog author="kukuk@suse.com" date="1718884800">- Update to version 2.11+git.20240620:
  * Call pam_fscrypt/pam_ecryptfs as first session module
    [bsc#1226452]</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Update to version 2.11+git.20240906:
  * Move pam_limits before pam_systemd</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1747396800">- Stop adding pam_env in AUTH stack, and be sure to put this module at the
  really end of the SESSION stack.
  [bsc#1243226, CVE-2025-6018, remove-pam_env-from-auth-stack.patch]</changelog>
</package>
<package pkgid="7eee104a44c8629a4074446d0df945c2508c6fd90d5576e726dae522f0a15a8bdfd7e6c56999273a489c57b561490f0a7e5a60d4ee5ece98dcb638e58d11dd31" name="pam-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.1" rel="slfo.1.1_4.1"/>
  <changelog author="kukuk@suse.com" date="1692792000">- Fix building without SELinux</changelog>
  <changelog author="kukuk@suse.com" date="1705665600">- Add post 1.6.0 release fixes for pam_env and pam_unix:
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-fix_vendordir.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch
- Update to version 1.6.0
  - Added support of configuration files with arbitrarily long lines.
  - build: fixed build outside of the source tree.
  - libpam: added use of getrandom(2) as a source of randomness if available.
  - libpam: fixed calculation of fail delay with very long delays.
  - libpam: fixed potential infinite recursion with includes.
  - libpam: implemented string to number conversions validation when parsing
    controls in configuration.
  - pam_access: added quiet_log option.
  - pam_access: fixed truncation of very long group names.
  - pam_canonicalize_user: new module to canonicalize user name.
  - pam_echo: fixed file handling to prevent overflows and short reads.
  - pam_env: added support of '\' character in environment variable values.
  - pam_exec: allowed expose_authtok for password PAM_TYPE.
  - pam_exec: fixed stack overflow with binary output of programs.
  - pam_faildelay: implemented parameter ranges validation.
  - pam_listfile: changed to treat \r and \n exactly the same in configuration.
  - pam_mkhomedir: hardened directory creation against timing attacks.
  - Please note that using *at functions leads to more open file handles
    during creation.
  - pam_namespace: fixed potential local DoS (CVE-2024-22365).
  - pam_nologin: fixed file handling to prevent short reads.
  - pam_pwhistory: helper binary is now built only if SELinux support is
    enabled.
  - pam_pwhistory: implemented reliable usernames handling when remembering
    passwords.
  - pam_shells: changed to allow shell entries with absolute paths only.
  - pam_succeed_if: fixed treating empty strings as numerical value 0.
  - pam_unix: added support of disabled password aging.
  - pam_unix: synchronized password aging with shadow.
  - pam_unix: implemented string to number conversions validation.
  - pam_unix: fixed truncation of very long user names.
  - pam_unix: corrected rounds retrieval for configured encryption method.
  - pam_unix: implemented reliable usernames handling when remembering
    passwords.
  - pam_unix: changed to always run the helper to obtain shadow password
    entries.
  - pam_unix: unix_update helper binary is now built only if SELinux support
    is enabled.
  - pam_unix: added audit support to unix_update helper.
  - pam_userdb: added gdbm support.
  - Multiple minor bug fixes, portability fixes, documentation improvements,
    and translation updates.
- The following patches are obsolete with the update:
  - pam_access-doc-IPv6-link-local.patch
  - pam_access-hostname-debug.patch
  - pam_shells-fix-econf-memory-leak.patch
  - pam_shells-fix-econf-memory-leak.patch
  - disable-examples.patch
- pam-login_defs-check.sh: adjust checksum, SHA_CRYPT_MAX_ROUNDS
  is no longer used.</changelog>
  <changelog author="kukuk@suse.com" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="kukuk@suse.com" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1749729600">- pam_namespace: convert functions that may operate on a user-controlled path
  to operate on file descriptors instead of absolute path. And keep the
  bind-mount protection from protect_mount() as a defense in depthmeasure.
  [bsc#1244509, CVE-2025-6020,
  pam_inline-introduce-pam_asprintf-pam_snprintf-and-p.patch,
  pam_namespace-fix-potential-privilege-escalation.patch,
  pam_namespace-add-flags-to-indicate-path-safety.patch,
  pam_namespace-secure_opendir-do-not-look-at-the-grou.patch]
- pam_namespace-fix-potential-privilege-escalation.patch adapted and includes
  changes from upstream commits: ds6242a, bc856cd.
  * pam_namespace fix logic in return value handling
  * pam_namespace move functions around</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
</package>
<package pkgid="20ef63caf6165aa9b3913eeb173e7725f73d683d6bca1b008d828a993dffd5a5918fff9b7f5eef4383aff9342bc33c9106ecee315679b2b4496ea74413f9b6b5" name="pam-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.1" rel="slfo.1.1_4.1"/>
  <changelog author="kukuk@suse.com" date="1692792000">- Fix building without SELinux</changelog>
  <changelog author="kukuk@suse.com" date="1705665600">- Add post 1.6.0 release fixes for pam_env and pam_unix:
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-fix_vendordir.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch
- Update to version 1.6.0
  - Added support of configuration files with arbitrarily long lines.
  - build: fixed build outside of the source tree.
  - libpam: added use of getrandom(2) as a source of randomness if available.
  - libpam: fixed calculation of fail delay with very long delays.
  - libpam: fixed potential infinite recursion with includes.
  - libpam: implemented string to number conversions validation when parsing
    controls in configuration.
  - pam_access: added quiet_log option.
  - pam_access: fixed truncation of very long group names.
  - pam_canonicalize_user: new module to canonicalize user name.
  - pam_echo: fixed file handling to prevent overflows and short reads.
  - pam_env: added support of '\' character in environment variable values.
  - pam_exec: allowed expose_authtok for password PAM_TYPE.
  - pam_exec: fixed stack overflow with binary output of programs.
  - pam_faildelay: implemented parameter ranges validation.
  - pam_listfile: changed to treat \r and \n exactly the same in configuration.
  - pam_mkhomedir: hardened directory creation against timing attacks.
  - Please note that using *at functions leads to more open file handles
    during creation.
  - pam_namespace: fixed potential local DoS (CVE-2024-22365).
  - pam_nologin: fixed file handling to prevent short reads.
  - pam_pwhistory: helper binary is now built only if SELinux support is
    enabled.
  - pam_pwhistory: implemented reliable usernames handling when remembering
    passwords.
  - pam_shells: changed to allow shell entries with absolute paths only.
  - pam_succeed_if: fixed treating empty strings as numerical value 0.
  - pam_unix: added support of disabled password aging.
  - pam_unix: synchronized password aging with shadow.
  - pam_unix: implemented string to number conversions validation.
  - pam_unix: fixed truncation of very long user names.
  - pam_unix: corrected rounds retrieval for configured encryption method.
  - pam_unix: implemented reliable usernames handling when remembering
    passwords.
  - pam_unix: changed to always run the helper to obtain shadow password
    entries.
  - pam_unix: unix_update helper binary is now built only if SELinux support
    is enabled.
  - pam_unix: added audit support to unix_update helper.
  - pam_userdb: added gdbm support.
  - Multiple minor bug fixes, portability fixes, documentation improvements,
    and translation updates.
- The following patches are obsolete with the update:
  - pam_access-doc-IPv6-link-local.patch
  - pam_access-hostname-debug.patch
  - pam_shells-fix-econf-memory-leak.patch
  - pam_shells-fix-econf-memory-leak.patch
  - disable-examples.patch
- pam-login_defs-check.sh: adjust checksum, SHA_CRYPT_MAX_ROUNDS
  is no longer used.</changelog>
  <changelog author="kukuk@suse.com" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="kukuk@suse.com" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1749729600">- pam_namespace: convert functions that may operate on a user-controlled path
  to operate on file descriptors instead of absolute path. And keep the
  bind-mount protection from protect_mount() as a defense in depthmeasure.
  [bsc#1244509, CVE-2025-6020,
  pam_inline-introduce-pam_asprintf-pam_snprintf-and-p.patch,
  pam_namespace-fix-potential-privilege-escalation.patch,
  pam_namespace-add-flags-to-indicate-path-safety.patch,
  pam_namespace-secure_opendir-do-not-look-at-the-grou.patch]
- pam_namespace-fix-potential-privilege-escalation.patch adapted and includes
  changes from upstream commits: ds6242a, bc856cd.
  * pam_namespace fix logic in return value handling
  * pam_namespace move functions around</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
</package>
<package pkgid="492ced6eec7c24ece58abf494e5a32e7a4a1fd8dbf290b238da10959c4aaff0e842931060821662e38d58c395c5accdbbe6e270a2237ffa561666fd789a7d035" name="pam_oath-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.11.12" rel="slfo.1.1_2.1"/>
  <changelog author="schwab@suse.de" date="1533556800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="mardnh@gmx.de" date="1609243200">- Update to version 2.6.5
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.
    KEY and OTP may now be given as '-' to mean stdin, or @FILE to
    read from a particular file.  This is recommended on multi-user
    systems, since secrets as command line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.
  * Doc fixes.
- Update to version 2.6.4
  * libpskc: New --with-xmlsec-crypto-engine to hard-code crypto
    engine.  Use it like --with-xmlsec-crypto-engine=gnutls or
  - -with-xmlsec-crypto-engine=openssl if the default dynamic
    loading fails because of runtime linker search path issues.
  * oathtool --totp --verbose now prints TOTP hash mode.
  * oathtool: Hash names (e.g., SHA256) for --totp are now upper
    case.  Lower/mixed case hash names are supported for
    compatibility.
  * pam_oath: Fail gracefully for missing users.
    This allows you to incrementally add support for OATH
    authentication instead of forcing it on all users.
  * Fix libpskc memory corruption bug.
  * Fix man pages.
  * Build fixes.
- Update to version 2.6.3
  * pam_oath: Fix self-tests.
- Drop not longer needed patches:
  * 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch
  * 0003-pam_oath-assign-safe-default-to-alwaysok-config-memb.patch
  * 0002-update_gnulibs_files.patch
  * gnulib-libio.patch
- Use source verification
- Use proper source URLs</changelog>
  <changelog author="mardnh@gmx.de" date="1611144000">- Update to version 2.6.6
  * oathtool: Support for reading KEY and OTP from standard input
    or filename.  KEY and OTP may now be given as '-' to mean
    stdin, or @FILE to read from a particular file.  This is
    recommended on multi-user systems, since secrets as command
    line parameters leak.
  * pam_oath: Fix unlikely logic fail on out of memory conditions.</changelog>
  <changelog author="mardnh@gmx.de" date="1619956800">- Update to version 2.6.7
  * pam_oath: Support variables in usersfile string parameter.
    These changes introduce the ${USER} and ${HOME} placeholder
    values for the usersfile string in the pam_oath configuration
    file. The placeholder values allow the user credentials file
    to be stored in a file path that is relative to the user, and
    mimics similar behavior found in google-authenticator-libpam.
    The motivation for these changes is to allow for
    non-privileged processes to use pam_oath (e.g., for 2FA with
    xscreensaver). Non-privileged and non-suid programs are
    unable to use pam_oath. These changes are a proposed
    alternative to a suid helper binary as well.
  * doc: Fix project URL in man pages.
  * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config.
  * build: Modernize autotools usage.
    Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE
    to make rebuilding from source more safe with future automake
    versions.
  * Updated gnulib files.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- url -&gt; https</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659441600">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="mardnh@gmx.de" date="1688904000">- Update to version 2.6.8
  * libpskc: Fixes for recent libxmlsec releases.
  * pam_oath: Provide fallback pam_modutil_getpwnam implementation.
  * pam_oath: Don't fail authentication when pam_modutil_getpwnam
  doesn't ** know the user when usersfile don't include ${USER}
  or ${HOME}.
  * pam_oath: Self-test improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.6.11
  * liboath: Handle invalid base32 encoded secrets.  Fixes: #41.
  * Various build fixes including updated gnulib files.
  * Improve compatibility with recent libxmlsec.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1726228800">- Fix security issue CVE-2024-47191 by adding
  0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch .
- Add patch to implement new null_usersfile_okay argument
  42-null_usersfile_okay.patch .
- Makes this version 2.6.11.12 to be able to depend on it.</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1729080000">- Update 0001-usersfile-fix-potential-security-issues-in-PAM-modul.patch
  with bsc#1231699 improvements for security fix CVE-2024-47191</changelog>
</package>
<package pkgid="dbe6354ecc95706645d4e737e4a69aafffd0bc7cbc000396a67b1678800bf0da065d979a9777b7254d27f3836750bae1c04bebb6963999aa7d2af383d43f4e90" name="pam_pkcs11-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.6.12" rel="slfo.1.1_4.1"/>
  <changelog author="vcizek@suse.com" date="1534507200">- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.</changelog>
  <changelog author="jsegitz@suse.com" date="1634212800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * pkcs11_eventmgr.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642248000">- update to 0.6.12:
  * Limit signature length to 65536 bytes
  * A number of bug fixes and OpenSSL compatibility updates
  * console output color updates
  * Add support of ECDSA signature in addition to RSA</changelog>
  <changelog author="pgajdos@suse.com" date="1659096000">-  use pam rpm macros [bsc#1190957]</changelog>
  <changelog author="schubi@suse.com" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="davide.benini@suse.com" date="1715083200">- Fix for bsc#1221255:
  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1738756800">- Security fix [bsc#1236314, CVE-2025-24531]
  * fix regression returning PAM_IGNORE in many situations with possible authentication bypass
  * Add pam_pkcs11-CVE-2025-24531.patch
- Fix RPM warnings
- Add %check section running test suite</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1747656000">- Removes pam_env from auth stack for security reason
  [bsc#1243226, CVE-2025-6018]</changelog>
</package>
<package pkgid="70ce3358fadaecf947ca271cd9210d959acfa82fc17eec5ddd41ea38eb12f80a09553a55a660c5995151cd1b90e9d7e4504b0da4b005d280c07537466269411c" name="pam_pkcs11-debugsource" arch="aarch64">
  <version epoch="0" ver="0.6.12" rel="slfo.1.1_4.1"/>
  <changelog author="vcizek@suse.com" date="1534507200">- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.</changelog>
  <changelog author="jsegitz@suse.com" date="1634212800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * pkcs11_eventmgr.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642248000">- update to 0.6.12:
  * Limit signature length to 65536 bytes
  * A number of bug fixes and OpenSSL compatibility updates
  * console output color updates
  * Add support of ECDSA signature in addition to RSA</changelog>
  <changelog author="pgajdos@suse.com" date="1659096000">-  use pam rpm macros [bsc#1190957]</changelog>
  <changelog author="schubi@suse.com" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="davide.benini@suse.com" date="1715083200">- Fix for bsc#1221255:
  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1738756800">- Security fix [bsc#1236314, CVE-2025-24531]
  * fix regression returning PAM_IGNORE in many situations with possible authentication bypass
  * Add pam_pkcs11-CVE-2025-24531.patch
- Fix RPM warnings
- Add %check section running test suite</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1747656000">- Removes pam_env from auth stack for security reason
  [bsc#1243226, CVE-2025-6018]</changelog>
</package>
<package pkgid="804a322b5ddc34a5b15623bec46da803ba507818a467cc9840b670a4e948aa0141e4423c478092d93144bbcd89ad0e669f7285e4431e10736f6d76e5371e8526" name="pam_pwquality-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.5" rel="slfo.1.1_1.2"/>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568894401">- Update to version 1.4.1:
  + Minor bugfix update of the library.
- Drop libpwquality-pythons.patch: Fixed upstream. Following this,
  drop autoconf, automake and libtool BuildRequires and autoreconf
  call.
- Use modern macros.</changelog>
  <changelog author="kukuk@suse.com" date="1588334400">- Add baselibs.conf</changelog>
  <changelog author="fvogt@suse.com" date="1589803200">- Register with pam-config in %post(un)</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.4.2:
  * Fix regression in handling retry, enforce_for_root, and
    local_users_only options introduced with the previous
    release.</changelog>
  <changelog author="dsauer@suse.com" date="1602849600">- update to 1.4.4
  * e11f2bd Fix regression with enabling cracklib check
  * 02e6728 Use make macros in rpm spec file
  * xxxxxxx Translated using Weblate (Polish, Turkish, Ukrainian)
- update to 1.4.3
  * 1213d33 Update translation files
  * a951fbe Add --disable-cracklib-check configure parameter
  * 6a8845b fixup static compilation
  * 92c6066 python: Add missing getters/setters for newly added settings
  * bfef79d Add usersubstr check
  * 09a2e65 pam_pwquality: Add debug message for the local_users_only option
  * a6f7705 Fix some gcc warnings
  * 8c8a260 pwmake: Properly validate the bits parameter.
  * 7be4797 we use Fedora Weblate now
  * xxxxxxx Translated using Weblate (Azerbaijani, Bulgarian,
    Chinese (Simplified), Czech, French, Friulian, Hungarian, Italian,
    Japanese, Norwegian Bokmål, Persian, Russian, Spanish, Turkish)</changelog>
  <changelog author="josef.moellers@suse.com" date="1609848000">- Do not use macro %make_build pre SLE-15
  Use "make -O %{?_smp_mflags}" instead
  [libpwquality.spec]</changelog>
  <changelog author="dimstar@opensuse.org" date="1632830400">- Use %_pam_moduledir instead of hardcoding %{_lib}/security
  (boo#1191042).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Add python-rpm-macros to BuildRequires (boo#1194757).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672056000">- Update to version 1.4.5:
  + Minor bug fixes and documentation enhancements.
  + Updated translations.</changelog>
</package>
<package pkgid="2a79c0eefcd58671bfc0360a070e1a289fd6fb73435ec1c6d3b40b533ed68b61ae3fcd32deee635465b140293dbe338aa3258c8eb630be3f8fbe23bb182bcb97" name="pam_u2f-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="slfo.1.1_2.1"/>
  <changelog author="kbabioch@suse.com" date="1526385600">- Update to version 1.0.7:
  - Add authpending_file to signal authentication activity
  - Add nodetect to skip to avoid unnecessary cue messages</changelog>
  <changelog author="kbabioch@suse.de" date="1559649600">- Version 1.0.8 (released 2019-06-04)
  * Fix insecure debug file handling CVE-2019-12209 (bsc#1135729).
  * Fix debug file descriptor leak CVE-2019-12210 (bsc#1135727).
  * Fix a non-critical buffer oob access.
- Applied spec-cleaner</changelog>
  <changelog author="idonmez@suse.com" date="1602763200">- Update to version 1.1.0
  * Add support to FIDO2 (move from libu2f-host+libu2f-server to libfido2)
  * Add support to User Verification
  * Add support to PIN Verification
  * Add support to Resident Credentials
  * Add support to SSH credential format
- Drop libu2f-host and libu2f-server BuildRequires
- Add BuildRequires on pkgconfig(libfido2)
- Add explicit BuildRequires on pkgconfig(libcrypto), this was being
  pulled down implicitly before.</changelog>
  <changelog author="t.gruner@katodev.de" date="1621512000">- Update to version 1.1.1 (released 2021-05-19)
  * Fix an issue where PIN authentication could be bypassed (CVE-2021-31924).
  * Fix an issue with nodetect and non-resident credentials.
  * Fix build issues with musl libc.
  * Add support for self-attestation in pamu2fcfg.
  * Fix minor bugs found by fuzzing.</changelog>
  <changelog author="paolo.perego@suse.com" date="1634126400">- Update to version 1.2.0 (released 2021-09-22)
  * Added support for EdDSA keys.
  * Added support for SSH ed25519-sk keys.
  * Added authenticator filtering based on user verification options.
  * Fixed an issue with privilege restoration on MacOS.
  * Fixed an issue where credentials created with pamu2fcfg 1.0.8 or earlier were not handled correctly if their origin and appid differed.
  * Miscellaneous improvements to the documentation.
  * Miscellaneous minor bug fixes found by fuzzing.
- Fix for bsc#1190961 - Removed hardcoded library pathnames using %{_pam_moduledir}</changelog>
  <changelog author="t.gruner@katodev.de" date="1634558400">- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="dmueller@suse.com" date="1653825600">- update to 1.2.1:
  * Fixed an issue where native credentials could be truncated, resulting in
    failure to authenticate or successful authentication with missing options.
  * Stricter parsing of sshformat credentials.
  * pamu2fcfg now allows a combination of the --username and --nouser options.
  * Improved documentation on FIDO2 options.
- add keyring for validation</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 1.3.0:
  * Add sanity checking of UV options to pamu2fcfg.
  * Add support for username expansion in the authfile path.
  * Improvements to the documentation.</changelog>
  <changelog author="paolo.perego@suse.com" date="1736510400">- Fix for CVE-2025-23013 (bsc#1233517):
  * Add 0001_fix_for_CVE_2025_23013.patch patch</changelog>
  <changelog author="paolo.perego@suse.com" date="1737460800">- Add 0002_soften_authfile_permission_check.patch introduced upstream to fix an
  issue when authfile has flaky permissions.</changelog>
</package>
<package pkgid="5ffb8db6d69d634a5f487e31bdb004c7ed2bcb9325b1d18c9b293649cc377657ee8c404e59ae42383de84c7e833dbf410c9f63f939edb17e07e2f16a3989b6ac" name="pam_u2f-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="slfo.1.1_2.1"/>
  <changelog author="kbabioch@suse.com" date="1526385600">- Update to version 1.0.7:
  - Add authpending_file to signal authentication activity
  - Add nodetect to skip to avoid unnecessary cue messages</changelog>
  <changelog author="kbabioch@suse.de" date="1559649600">- Version 1.0.8 (released 2019-06-04)
  * Fix insecure debug file handling CVE-2019-12209 (bsc#1135729).
  * Fix debug file descriptor leak CVE-2019-12210 (bsc#1135727).
  * Fix a non-critical buffer oob access.
- Applied spec-cleaner</changelog>
  <changelog author="idonmez@suse.com" date="1602763200">- Update to version 1.1.0
  * Add support to FIDO2 (move from libu2f-host+libu2f-server to libfido2)
  * Add support to User Verification
  * Add support to PIN Verification
  * Add support to Resident Credentials
  * Add support to SSH credential format
- Drop libu2f-host and libu2f-server BuildRequires
- Add BuildRequires on pkgconfig(libfido2)
- Add explicit BuildRequires on pkgconfig(libcrypto), this was being
  pulled down implicitly before.</changelog>
  <changelog author="t.gruner@katodev.de" date="1621512000">- Update to version 1.1.1 (released 2021-05-19)
  * Fix an issue where PIN authentication could be bypassed (CVE-2021-31924).
  * Fix an issue with nodetect and non-resident credentials.
  * Fix build issues with musl libc.
  * Add support for self-attestation in pamu2fcfg.
  * Fix minor bugs found by fuzzing.</changelog>
  <changelog author="paolo.perego@suse.com" date="1634126400">- Update to version 1.2.0 (released 2021-09-22)
  * Added support for EdDSA keys.
  * Added support for SSH ed25519-sk keys.
  * Added authenticator filtering based on user verification options.
  * Fixed an issue with privilege restoration on MacOS.
  * Fixed an issue where credentials created with pamu2fcfg 1.0.8 or earlier were not handled correctly if their origin and appid differed.
  * Miscellaneous improvements to the documentation.
  * Miscellaneous minor bug fixes found by fuzzing.
- Fix for bsc#1190961 - Removed hardcoded library pathnames using %{_pam_moduledir}</changelog>
  <changelog author="t.gruner@katodev.de" date="1634558400">- Define macro _pam_moduledir if not set to fix builds for Leap and SLE</changelog>
  <changelog author="dmueller@suse.com" date="1653825600">- update to 1.2.1:
  * Fixed an issue where native credentials could be truncated, resulting in
    failure to authenticate or successful authentication with missing options.
  * Stricter parsing of sshformat credentials.
  * pamu2fcfg now allows a combination of the --username and --nouser options.
  * Improved documentation on FIDO2 options.
- add keyring for validation</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 1.3.0:
  * Add sanity checking of UV options to pamu2fcfg.
  * Add support for username expansion in the authfile path.
  * Improvements to the documentation.</changelog>
  <changelog author="paolo.perego@suse.com" date="1736510400">- Fix for CVE-2025-23013 (bsc#1233517):
  * Add 0001_fix_for_CVE_2025_23013.patch patch</changelog>
  <changelog author="paolo.perego@suse.com" date="1737460800">- Add 0002_soften_authfile_permission_check.patch introduced upstream to fix an
  issue when authfile has flaky permissions.</changelog>
</package>
<package pkgid="7823fd93772101a8d80970102559255cedbc0e50ec57804633bd5f052099e225645786e7af090b839afd72996fa201cba53a91b69b47efa02d829ace649604d3" name="pango-debugsource" arch="aarch64">
  <version epoch="0" ver="1.50.14" rel="slfo.1.1_1.3"/>
  <changelog author="bjorn.lie@gmail.com" date="1647691200">- Update to version 1.50.6:
  + Drop hb-glib dependency.
  + Fix test font configuration.
  + Maintain order in pango_attr_list_change.
  + Fix a use-after-free in pango_attr_list_change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650888000">- Update to version 1.50.7:
  + coretext: Fix the build.
  + editing: Fix moving across paragraph boundaries in rtl.
  + layout: Try harder to survive without fonts.
  + Windows:
  - Register a sans-serif font.
  - Try harder to load a font.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1656849600">- Update to version 1.50.8:
  + Add some properties to fontmap and family.
  + Fix handling of ligature carets in mixed directions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660132800">- Update to version 1.50.9:
  + Apply show flags to line separators.
  + Fix a thread-safety problem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663329600">- Update to version 1.50.10:
  + Avoid some unnecessary strdups.
  + Fix line height computations with a non-trivial CTM.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1664107200">- Add 639.patch: layout: Fix crash when no font is installed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1664884800">- Update to version 1.50.11:
  + Don't crash for lack of fonts.
  + Avoid a crash in shaping.
- Drop 639.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669809600">- Update to version 1.50.12:
  + Fix weight conversion on MacOS.
  + Update to Unicode 15.
  + Some introspection annotation fixes.
  + Improve PangoAttrList serialization.
  + Fix char offset calculatiosn in multi-paragraph layouts.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676980800">- Update to version 1.50.13:
  + win32:
  - Add back fallback for empty fontsets
  - Improve DirectWrite support
  + Fix word segmentation for Japanese
  + Don't set backspace-deletes-char for math symbols
  + coretext: Fix a crash
  + cairo: Apply metrics hinting to underlines too
  + Treat COLRv1 fonts as color fonts</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677758400">- Update to version 1.50.14:
  + Fix underline thickness in scaled contexts.</changelog>
</package>
<package pkgid="250fc1974efbe801d774d33cfcc09c523d11c85e20f9ca95e77c3470018de22720147828e1666c1be8f52b770cd59e64d722662329e474e562d2e5b1c66a8da0" name="parted-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="ro@suse.de" date="1598356800">- re-add missing hunk to fix bsc#1164907
  parted-type-accept-hex.patch
  type on the cmdline could be specified in hex as 0x82</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
  <changelog author="aschnell@suse.com" date="1627300800">- update to version 3.4:
  * Add new partition type flags chromeos_kernel and bls_boot.
  * Add support for the F2FS filesystem.
  refreshed patches:
  - dummy-bootcode-only-for-x86.patch
  - parted-fix-resizepart-and-rm-command.patch
  - parted-type.patch
  - parted-wipeaix.patch
  - tests-adapt-to-SUSE.patch
  removed patches:
  - parted-fix-end_input-usage.patch
  - parted-resize-alias-to-resizepart.patch</changelog>
  <changelog author="aschnell@suse.com" date="1632139200">- run checks during build
- added patches:
  tests-disable.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- BuildRequire python3-base: Fix execution of test suite. Otherwise
  we fail with
  ./t0282-gpt-move-backup.sh: /usr/bin/python3: bad interpreter: No
  such file or directory.</changelog>
  <changelog author="aschnell@suse.com" date="1634644801">- fixed name of shared library package and split off
  libparted-fs-resize (bsc#1191778)</changelog>
  <changelog author="aschnell@suse.com" date="1650456000">- update to version 3.5:
  * Add support for JSON output.
  * Add support for linux-home flag for GPT.
  * Add --fix option.
  added patches:
  - direct-handling-of-partition-type-id-and-uuid.patch
  - parted-json-no-type-flag.patch
  refreshed patches:
  - libparted-open-the-device-RO-and-lazily-switch-to-RW.patch
  - parted-2.4-ncursesw6.patch
  - parted-add-ignore-busy-option.patch
  - parted-fix-resizepart-and-rm-command.patch
  - parted-implement-wipesignatures-option.patch
  - parted-print-max-partitions-for-yast.patch
  - parted-type.patch
  - tests-disable.patch
  removed patches:
  - parted-escape-printed-device-path.patch
  - parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="aschnell@suse.com" date="1652875200">- add new type command from upstream
  added patches:
  - type-command.patch</changelog>
  <changelog author="dmueller@suse.com" date="1654084800">- use static keyring file (and switch to the release team keyring)</changelog>
  <changelog author="aschnell@suse.com" date="1655985600">- drop type flag (SUSE specific) to fix bsc#1190847
  refreshed patches:
  - parted-mac.patch
  - tests-adapt-to-SUSE.patch
  drop patches:
  - parted-type.patch
  - parted-type-accept-hex.patch
  - parted-json-no-type-flag.patch</changelog>
</package>
<package pkgid="24c9654a5a1322b41c1852450e1aa1f782781f2692c1f6f8b1990f2ff472076651502f1d06a7386ca5835f61d8de742f4e551af1daca6cbd29c428f3611ebc85" name="parted-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="ro@suse.de" date="1598356800">- re-add missing hunk to fix bsc#1164907
  parted-type-accept-hex.patch
  type on the cmdline could be specified in hex as 0x82</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
  <changelog author="aschnell@suse.com" date="1627300800">- update to version 3.4:
  * Add new partition type flags chromeos_kernel and bls_boot.
  * Add support for the F2FS filesystem.
  refreshed patches:
  - dummy-bootcode-only-for-x86.patch
  - parted-fix-resizepart-and-rm-command.patch
  - parted-type.patch
  - parted-wipeaix.patch
  - tests-adapt-to-SUSE.patch
  removed patches:
  - parted-fix-end_input-usage.patch
  - parted-resize-alias-to-resizepart.patch</changelog>
  <changelog author="aschnell@suse.com" date="1632139200">- run checks during build
- added patches:
  tests-disable.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- BuildRequire python3-base: Fix execution of test suite. Otherwise
  we fail with
  ./t0282-gpt-move-backup.sh: /usr/bin/python3: bad interpreter: No
  such file or directory.</changelog>
  <changelog author="aschnell@suse.com" date="1634644801">- fixed name of shared library package and split off
  libparted-fs-resize (bsc#1191778)</changelog>
  <changelog author="aschnell@suse.com" date="1650456000">- update to version 3.5:
  * Add support for JSON output.
  * Add support for linux-home flag for GPT.
  * Add --fix option.
  added patches:
  - direct-handling-of-partition-type-id-and-uuid.patch
  - parted-json-no-type-flag.patch
  refreshed patches:
  - libparted-open-the-device-RO-and-lazily-switch-to-RW.patch
  - parted-2.4-ncursesw6.patch
  - parted-add-ignore-busy-option.patch
  - parted-fix-resizepart-and-rm-command.patch
  - parted-implement-wipesignatures-option.patch
  - parted-print-max-partitions-for-yast.patch
  - parted-type.patch
  - tests-disable.patch
  removed patches:
  - parted-escape-printed-device-path.patch
  - parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="aschnell@suse.com" date="1652875200">- add new type command from upstream
  added patches:
  - type-command.patch</changelog>
  <changelog author="dmueller@suse.com" date="1654084800">- use static keyring file (and switch to the release team keyring)</changelog>
  <changelog author="aschnell@suse.com" date="1655985600">- drop type flag (SUSE specific) to fix bsc#1190847
  refreshed patches:
  - parted-mac.patch
  - tests-adapt-to-SUSE.patch
  drop patches:
  - parted-type.patch
  - parted-type-accept-hex.patch
  - parted-json-no-type-flag.patch</changelog>
</package>
<package pkgid="fcec31f398d952ec258d7a05df21a48b036efb97a83d78c3217e17ed2348f06cf72b9ac112905fd304bb7745bfee266dd2e9ca3e13ad1cff0cdaf30209cf43b7" name="passt-debuginfo" arch="aarch64">
  <version epoch="0" ver="20240906.6b38f07" rel="slfo.1.1_1.6"/>
  <changelog author="dcermak@suse.com" date="1716552000">- Update to version 20240523.765eb0b:
  * apparmor: Fix comments after PID file and AF_UNIX socket creation refactoring
  * conf, passt.h: Rename pid_file in struct ctx to pidfile
  * conf, passt, tap: Open socket and PID files before switching UID/GID
  * passt, util: Move opening of PID file to its own function
  * util: Rename write_pidfile() to pidfile_write()
  * tap: Split tap_sock_unix_init() into opening and listening parts
  * passt, tap: Don't use -1 as uninitialised value for fd_tap_listen
  * tap: Move all-ones initialisation of mac_guest to tap_sock_init()
  * conf: Don't lecture user about starting us as root
  * netlink, test: Ignore deprecated addresses
  * tcp: Remove interim 'tapside' field from connection
  * flow: Record the pifs for each side of each flow
  * flow: Make side 0 always be the initiating side
  * flow: Clarify and enforce flow state transitions
  * inany: Better helpers for using inany and specific family addrs together
  * flow: Properly type callbacks to protocol specific handlers
  * util, tcp: Add helper to display socket addresses
  * apparmor: Fix passt abstraction
  * apparmor: allow netns paths on /tmp
  * clang-tidy: Suppress macro to enum conversion warnings
  * conf: Fix clang-tidy warning about using an undefined enum value
  * passt.c: explicitly include libgen.h for basename
  * netlink: Don't duplicate routes referring to unrelated host interfaces</changelog>
  <changelog author="dcermak@suse.com" date="1718625600">- Update to version 20240607.8a83b53:
  * selinux: Allow access to user_devpts
  * tcp, flow: Fix some error paths which didn't clean up flows properly
  * util: Use 'long' to represent millisecond durations
  * lineread: Use ssize_t for line lengths
  * conf: Safer parsing of MAC addresses
  * util: Use unsigned indices for bits in bitmaps
  * clang-tidy: Enable the bugprone-macro-parentheses check
  * Remove pointless macro parameters in CALL_PROTO_HANDLER
  * udp: Make rport calculation more local
  * tcp: Make pointer const in tcp_revert_seq
  * log: Remove log_to_stdout option
  * conf: Don't print usage via the logging subsystem
  * conf: Remove unhelpful usage() wrapper
  * tcp: move seq_to_tap update to when frame is queued</changelog>
  <changelog author="dcermak@suse.com" date="1719316800">- Update to version 20240624.1ee2eca:
  * udp: Reduce scope of rport in udp_invert_portmap()
  * Revert "udp: Make rport calculation more local"
  * log: Don't report syslog failures to stderr after initialisation
  * conf, passt: Don't call __openlog() if a log file is used
  * treewide: Replace strerror() calls
  * treewide: Replace perror() calls with calls to logging functions
  * log: Add _perror() logging function variants
  * log, passt: Always print to stderr before initialisation is complete
  * conf, log: Instead of abusing log levels, add log_conf_parsed flag
  * conf, passt: Make --stderr do nothing, and deprecate it
  * conf, passt: Don't try to log to stderr after we close it
  * conf: Accept duplicate and conflicting options, the last one wins
  * netlink: Strip nexthop identifiers when duplicating routes
  * passt.1, qrap.1: align license description with SPDX identifier
  * netlink: Ignore EHOSTUNREACH failures when duplicating routes
  * netlink: With no default route, pick the first interface with a route
  * tcp: Don't rely on bind() to fail to decide that connection target is valid
  * siphash: Remove stale prototypes
  * udp: Move management of udp[46]_localname into udp_splice_send()
  * udp: Rework how we divide queued datagrams between sending methods
  * udp: Fold checking of splice flag into udp_mmh_splice_port()
  * util: Split construction of bind socket address from the rest of sock_l4()
  * tap: use in-&gt;buf_size rather than sizeof(pkt_buf)
  * iov: remove iov_copy()
  * vhost-user: compare mode MODE_PASTA and not MODE_PASST
  * udp: rename udp_sock_handler() to udp_buf_sock_handler()
  * udp: refactor UDP header update functions
  * tap: refactor packets handling functions
  * tcp: move buffers management functions to their own file
  * tcp: extract buffer management from tcp_send_flag()
  * cppcheck: Suppress constParameterCallback errors</changelog>
  <changelog author="danish.prakash@suse.com" date="1720094400">- BuildRequire selinux-policy-targeted explicitly to allow building
  on SELinux-enabled projects e.g. SLFO.</changelog>
  <changelog author="dcermak@suse.com" date="1722513600">- Update to version 20240726.57a21d2:
  * tap: Improve handling of partially received frames on qemu socket
  * tap: Correctly handle frames of odd length
  * tap: Don't use EPOLLET on Qemu sockets
  * tap: Don't attempt to carry on if we get a bad frame length from qemu
  * tap: Better report errors receiving from QEMU socket
  * log: Fetch log times with CLOCK_MONOTONIC, not CLOCK_REALTIME
  * log: Initialise timestamp for relative log time also if we use a log file
  * log, util: Fix sub-second part in relative log time calculation
  * test/lib/perf_report: Fix highlight
  * test: Fix spurious test failure with systemd-resolved
  * fwd: Broaden what we consider for DNS specific forwarding rules
  * fwd: Refactor tests in fwd_nat_from_tap() for clarity
  * conf: Accept addresses enclosed by square brackets in port forwarding specifiers
  * tap: Exit if we fail to bind a UNIX domain socket with explicit path
  * test: iperf3 3.16 introduces multiple threads, drop our own implementation of that
  * test: Update names of symbols and slabinfo entries
  * test: Fix memory/passt tests, --netns-only is not a valid option for passt
  * log: Drop newlines in the middle of the perror()-like messages
  * tcp: Change SO_PEEK_OFF support message to debug()
  * tap: Don't quit if pasta gets EIO on writev() to tap, interface might be down
  * tcp: Correctly update SO_PEEK_OFF when tcp_send_frames() drops frames
  * tcp: probe for SO_PEEK_OFF both in tcpv4 and tcp6
  * udp: Rename UDP listening sockets
  * udp: Remove rdelta port forwarding maps
  * udp: Remove obsolete socket tracking
  * udp: Direct datagrams from host to guest via flow table
  * udp: Find or create flows for datagrams from tap interface
  * udp: Remove obsolete splice tracking
  * udp: Handle "spliced" datagrams with per-flow sockets
  * udp: Create flows for datagrams from originating sockets
  * fwd: Update flow forwarding logic for UDP
  * flow, icmp: Use general flow forwarding rules for ICMP
  * flow, tcp: Flow based NAT and port forwarding for TCP
  * icmp: Manage outbound socket address via flow table
  * flow: Helper to create sockets based on flowside
  * icmp: Eliminate icmp_id_map
  * icmp: Look up ping flows using flow hash
  * icmp: Obtain destination addresses from the flowsides
  * icmp: Remove redundant id field from flow table entry
  * tcp: Re-use flow hash for initial sequence number generation
  * flow, tcp: Generalise TCP hash table to general flow hash table
  * tcp, flow: Replace TCP specific hash function with general flow hash
  * tcp_splice: Eliminate SPLICE_V6 flag
  * tcp: Simplify endpoint validation using flowside information
  * tcp: Manage outbound address via flow table
  * tcp: Obtain guest address from flowside
  * tcp, flow: Remove redundant information, repack connection structures
  * flow: Common address information for target side
  * flow: Common address information for initiating side
  * doc: Extend zero-recv test with methods using msghdr
  * doc: Test behaviour of closing duplicate UDP sockets
  * tcp_splice: Use parameterised macros for per-side event/flag bits
  * flow: Introduce flow_foreach_sidei() macro
  * flow, tcp_splice: Prefer 'sidei' for variables referring to side index
  * flow, icmp, tcp: Clean up helpers for getting flow from index
  * udp: Handle errors on UDP sockets
  * util: Add AF_UNSPEC support to sockaddr_ntop()
  * udp, tcp: Tweak handling of no_udp and no_tcp flags
  * udp: Make udp_sock_recv static
  * conf: Don't configure port forwarding for a disabled protocol
  * tcp: handle shrunk window advertisements from guest
  * tcp: leverage support of SO_PEEK_OFF socket option when available
  * doc: Trivial fix for reuseaddr-priority
  * doc: Test behaviour of zero length datagram recv()s
  * doc: Add program to document and test assumptions about SO_REUSEADDR
  * udp: Consolidate datagram batching
  * udp: Move some more of sock_handler tasks into sub-functions
  * udp: Don't repeatedly initialise udp[46]_eth_hdr
  * udp: Unify udp[46]_l2_iov
  * udp: Unify udp[46]_mh_splice
  * udp: Rename IOV and mmsghdr arrays
  * udp: Pass full epoll reference through more of sock handler path
  * flow: Add flow_sidx_valid() helper
  * util: sock_l4() determine protocol from epoll type rather than the reverse
  * conf: Use the right maximum buffer size for c-&gt;sock_path
  * tcp_splice: Check return value of setsockopt() for SO_RCVLOWAT
  * conf: Copy up to MAXDNSRCH - 1 bytes, not MAXDNSRCH</changelog>
  <changelog author="dcermak@suse.com" date="1722945600">- Update to version 20240806.ee36266:
  * log, passt: Keep printing to stderr when passt is running in foreground
  * tcp_splice: Fix side in OUT_WAIT flag setting
  * util: Use unsigned (size_t) value for iov length
  * udp_flow: move all udp_flow functions to udp_flow.c
  * udp_flow: Remove udp_meta_t from the parameters of udp_flow_from_sock()
  * log: Make logfile_write() private
  * pasta: Save errno on signal handler entry, restore on return when needed
  * pasta: modify hostname when detaching new namespace
  * Fix typo in README file
  * fedora/rpkg: List myself as author for changelog entries</changelog>
  <changelog author="dcermak@suse.com" date="1723723200">- Update to version 20240814.61c0b0d:
  * flow: Don't crash if guest attempts to connect to port 0
  * conf: Don't ignore -t and -u options after -D
  * ndp.c: Turn NDP responder into more declarative implementation
  * conf: Delay handling -D option until after addresses are configured
  * Correct inaccurate comments on ip[46]_ctx::addr
  * log: Don't prefix message with timestamp on --debug if it's a continuation
  * conf: Stop parsing options at first non-option argument
  * passt, util: Close any open file that the parent might have leaked
  * nstool: Propagate SIGTERM to processes executed in the namespace
  * nstool: Fix some trivial typos
  * log: Avoid duplicate calls to logtime()
  * log: Handle errors from clock_gettime()
  * log: Correct formatting of timestamps
  * util: Some corrections for timespec_diff_us
  * conf, pasta: Make -g and -a skip route/addresses copy for matching IP version only</changelog>
  <changelog author="dcermak@suse.com" date="1724328000">- Update to version 20240821.1d6142f:
  * README: pasta is indeed a supported back-end for rootless Docker
  * util: Don't stop on unrelated values when looking for --fd in close_open_files()
  * test: Update list of dependencies in README.md
  * tcp, udp: Allow timerfd_gettime64() and recvmmsg_time64() on arm (armhf)
  * util: Provide own version of close_range(), and no-op fallback
  * udp_flow: Add missing unistd.h include for close()
  * test: Duplicate existing recvfrom() valgrind suppression for recv()
  * test/passt.mbuto: Install sshd-session OpenSSH's split process
  * test/passt.mbuto: Run sshd from vsock proxy with absolute path
  * test/lib/setup: Transform i686 kernel architecture name into QEMU name (i386)
  * treewide: Allow additional system calls for i386/i686
  * fwd, conf: Allow NAT of the guest's assigned address
  * fwd: Distinguish translatable from untranslatable addresses on inbound
  * conf: Allow address remapped to host to be configured
  * test: Reconfigure IPv6 address after changing MTU
  * conf, fwd: Split notion of gateway/router from guest-visible host address
  * Don't take "our" MAC address from the host
  * fwd: Split notion of "our tap address" from gateway for IPv4
  * fwd: Helpers to clarify what host addresses aren't guest accessible
  * Initialise our_tap_ll to ip6.gw when suitable
  * Clarify which addresses in ip[46]_ctx are meaningful where
  * treewide: Change misleading 'addr_ll' name
  * util: Correct sock_l4() binding for link local addresses
  * conf: Remove incorrect initialisation of addr_ll_seen
  * conf: Treat --dns addresses as guest visible addresses
  * conf: Correct setting of dns_match address in add_dns6()
  * conf: Move adding of a nameserver from resolv.conf into subfunction
  * conf: Move DNS array bounds checks into add_dns[46]
  * conf: More accurately count entries added in get_dns()
  * conf: Use array indices rather than pointers for DNS array slots
  * treewide: Use struct assignment instead of memcpy() for IP addresses
  * treewide: Rename MAC address fields for clarity
  * util: Helper for formatting MAC addresses
  * treewide: Use "our address" instead of "forwarding address"
  * netlink: Fix typo in function comment for nl_addr_set()
  * pasta: Disable neighbour solicitations on device up to prevent DAD
  * netlink, pasta: Fetch link-local address from namespace interface once it's up
  * netlink, pasta: Disable DAD for link-local addresses on namespace interface
  * netlink, pasta: Turn nl_link_up() into a generic function to set link flags
  * netlink, pasta: Split MTU setting functionality out of nl_link_up()
  * netlink: Fix typo in function comment for nl_addr_get()
  * test: Speed up by cutting on eye candy and performance test duration</changelog>
  <changelog author="dcermak@suse.com" date="1725883200">- Update to version 20240906.6b38f07:
  * apparmor: Allow read access to /proc/sys/net/ipv4/ip_local_port_range
  * selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range
  * tap: Don't risk truncating frames on full buffer in tap_pasta_input()
  * tap: Restructure in tap_pasta_input()
  * tap: Improve handling of EINTR in tap_passt_input()
  * tap: Split out handling of EPOLLIN events
  * util: Fix order of operands and carry of one second in timespec_diff_us()
  * cppcheck: Work around some cppcheck 2.15.0 redundantInitialization warnings
  * tcp: Use EPOLLET for any state of not established connections
  * udp: Handle more error conditions in udp_sock_errs()
  * udp: Treat errors getting errors as unrecoverable
  * udp: Split socket error handling out from udp_sock_recv()
  * flow: Helpers to log details of a flow
  * udp: Allow UDP flows to be prematurely closed
  * flow: Fix incorrect hash probe in flowside_lookup()
  * log: Don't prefix log file messages with time and severity if they're continuations
  * Makefile: Enable _FORTIFY_SOURCE iff needed
  * fwd, conf: Probe host's ephemeral ports
  * conf, fwd: Don't attempt to forward port 0
  * conf, fwd: Make ephemeral port logic more flexible
  * seccomp.sh: Try to account for terminal width while formatting list of system calls
  * udp: Use dual stack sockets for port forwarding when possible
  * udp: Remove unnnecessary local from udp_sock_init()
  * udp: Merge udp[46]_mh_recv arrays
  * test: Look for possible sshd-session paths (if it's there at all) in mbuto's profile</changelog>
  <changelog author="cathy.hu@suse.com" date="1726142400">- Fix passt-selinux to use selinux macros instead of calling semodule
  by hand, which leads to unwanted policy reload on Micro (bsc#1229132)</changelog>
</package>
<package pkgid="a14c85a45241698c2b369a47503d109e4f2e7808a5a90319aa669cf20ca8221a56d1aab569c783e5b07c413fe7148918ab384bda0b315ffd1fd3fe66ffb6e32e" name="passt-debugsource" arch="aarch64">
  <version epoch="0" ver="20240906.6b38f07" rel="slfo.1.1_1.6"/>
  <changelog author="dcermak@suse.com" date="1716552000">- Update to version 20240523.765eb0b:
  * apparmor: Fix comments after PID file and AF_UNIX socket creation refactoring
  * conf, passt.h: Rename pid_file in struct ctx to pidfile
  * conf, passt, tap: Open socket and PID files before switching UID/GID
  * passt, util: Move opening of PID file to its own function
  * util: Rename write_pidfile() to pidfile_write()
  * tap: Split tap_sock_unix_init() into opening and listening parts
  * passt, tap: Don't use -1 as uninitialised value for fd_tap_listen
  * tap: Move all-ones initialisation of mac_guest to tap_sock_init()
  * conf: Don't lecture user about starting us as root
  * netlink, test: Ignore deprecated addresses
  * tcp: Remove interim 'tapside' field from connection
  * flow: Record the pifs for each side of each flow
  * flow: Make side 0 always be the initiating side
  * flow: Clarify and enforce flow state transitions
  * inany: Better helpers for using inany and specific family addrs together
  * flow: Properly type callbacks to protocol specific handlers
  * util, tcp: Add helper to display socket addresses
  * apparmor: Fix passt abstraction
  * apparmor: allow netns paths on /tmp
  * clang-tidy: Suppress macro to enum conversion warnings
  * conf: Fix clang-tidy warning about using an undefined enum value
  * passt.c: explicitly include libgen.h for basename
  * netlink: Don't duplicate routes referring to unrelated host interfaces</changelog>
  <changelog author="dcermak@suse.com" date="1718625600">- Update to version 20240607.8a83b53:
  * selinux: Allow access to user_devpts
  * tcp, flow: Fix some error paths which didn't clean up flows properly
  * util: Use 'long' to represent millisecond durations
  * lineread: Use ssize_t for line lengths
  * conf: Safer parsing of MAC addresses
  * util: Use unsigned indices for bits in bitmaps
  * clang-tidy: Enable the bugprone-macro-parentheses check
  * Remove pointless macro parameters in CALL_PROTO_HANDLER
  * udp: Make rport calculation more local
  * tcp: Make pointer const in tcp_revert_seq
  * log: Remove log_to_stdout option
  * conf: Don't print usage via the logging subsystem
  * conf: Remove unhelpful usage() wrapper
  * tcp: move seq_to_tap update to when frame is queued</changelog>
  <changelog author="dcermak@suse.com" date="1719316800">- Update to version 20240624.1ee2eca:
  * udp: Reduce scope of rport in udp_invert_portmap()
  * Revert "udp: Make rport calculation more local"
  * log: Don't report syslog failures to stderr after initialisation
  * conf, passt: Don't call __openlog() if a log file is used
  * treewide: Replace strerror() calls
  * treewide: Replace perror() calls with calls to logging functions
  * log: Add _perror() logging function variants
  * log, passt: Always print to stderr before initialisation is complete
  * conf, log: Instead of abusing log levels, add log_conf_parsed flag
  * conf, passt: Make --stderr do nothing, and deprecate it
  * conf, passt: Don't try to log to stderr after we close it
  * conf: Accept duplicate and conflicting options, the last one wins
  * netlink: Strip nexthop identifiers when duplicating routes
  * passt.1, qrap.1: align license description with SPDX identifier
  * netlink: Ignore EHOSTUNREACH failures when duplicating routes
  * netlink: With no default route, pick the first interface with a route
  * tcp: Don't rely on bind() to fail to decide that connection target is valid
  * siphash: Remove stale prototypes
  * udp: Move management of udp[46]_localname into udp_splice_send()
  * udp: Rework how we divide queued datagrams between sending methods
  * udp: Fold checking of splice flag into udp_mmh_splice_port()
  * util: Split construction of bind socket address from the rest of sock_l4()
  * tap: use in-&gt;buf_size rather than sizeof(pkt_buf)
  * iov: remove iov_copy()
  * vhost-user: compare mode MODE_PASTA and not MODE_PASST
  * udp: rename udp_sock_handler() to udp_buf_sock_handler()
  * udp: refactor UDP header update functions
  * tap: refactor packets handling functions
  * tcp: move buffers management functions to their own file
  * tcp: extract buffer management from tcp_send_flag()
  * cppcheck: Suppress constParameterCallback errors</changelog>
  <changelog author="danish.prakash@suse.com" date="1720094400">- BuildRequire selinux-policy-targeted explicitly to allow building
  on SELinux-enabled projects e.g. SLFO.</changelog>
  <changelog author="dcermak@suse.com" date="1722513600">- Update to version 20240726.57a21d2:
  * tap: Improve handling of partially received frames on qemu socket
  * tap: Correctly handle frames of odd length
  * tap: Don't use EPOLLET on Qemu sockets
  * tap: Don't attempt to carry on if we get a bad frame length from qemu
  * tap: Better report errors receiving from QEMU socket
  * log: Fetch log times with CLOCK_MONOTONIC, not CLOCK_REALTIME
  * log: Initialise timestamp for relative log time also if we use a log file
  * log, util: Fix sub-second part in relative log time calculation
  * test/lib/perf_report: Fix highlight
  * test: Fix spurious test failure with systemd-resolved
  * fwd: Broaden what we consider for DNS specific forwarding rules
  * fwd: Refactor tests in fwd_nat_from_tap() for clarity
  * conf: Accept addresses enclosed by square brackets in port forwarding specifiers
  * tap: Exit if we fail to bind a UNIX domain socket with explicit path
  * test: iperf3 3.16 introduces multiple threads, drop our own implementation of that
  * test: Update names of symbols and slabinfo entries
  * test: Fix memory/passt tests, --netns-only is not a valid option for passt
  * log: Drop newlines in the middle of the perror()-like messages
  * tcp: Change SO_PEEK_OFF support message to debug()
  * tap: Don't quit if pasta gets EIO on writev() to tap, interface might be down
  * tcp: Correctly update SO_PEEK_OFF when tcp_send_frames() drops frames
  * tcp: probe for SO_PEEK_OFF both in tcpv4 and tcp6
  * udp: Rename UDP listening sockets
  * udp: Remove rdelta port forwarding maps
  * udp: Remove obsolete socket tracking
  * udp: Direct datagrams from host to guest via flow table
  * udp: Find or create flows for datagrams from tap interface
  * udp: Remove obsolete splice tracking
  * udp: Handle "spliced" datagrams with per-flow sockets
  * udp: Create flows for datagrams from originating sockets
  * fwd: Update flow forwarding logic for UDP
  * flow, icmp: Use general flow forwarding rules for ICMP
  * flow, tcp: Flow based NAT and port forwarding for TCP
  * icmp: Manage outbound socket address via flow table
  * flow: Helper to create sockets based on flowside
  * icmp: Eliminate icmp_id_map
  * icmp: Look up ping flows using flow hash
  * icmp: Obtain destination addresses from the flowsides
  * icmp: Remove redundant id field from flow table entry
  * tcp: Re-use flow hash for initial sequence number generation
  * flow, tcp: Generalise TCP hash table to general flow hash table
  * tcp, flow: Replace TCP specific hash function with general flow hash
  * tcp_splice: Eliminate SPLICE_V6 flag
  * tcp: Simplify endpoint validation using flowside information
  * tcp: Manage outbound address via flow table
  * tcp: Obtain guest address from flowside
  * tcp, flow: Remove redundant information, repack connection structures
  * flow: Common address information for target side
  * flow: Common address information for initiating side
  * doc: Extend zero-recv test with methods using msghdr
  * doc: Test behaviour of closing duplicate UDP sockets
  * tcp_splice: Use parameterised macros for per-side event/flag bits
  * flow: Introduce flow_foreach_sidei() macro
  * flow, tcp_splice: Prefer 'sidei' for variables referring to side index
  * flow, icmp, tcp: Clean up helpers for getting flow from index
  * udp: Handle errors on UDP sockets
  * util: Add AF_UNSPEC support to sockaddr_ntop()
  * udp, tcp: Tweak handling of no_udp and no_tcp flags
  * udp: Make udp_sock_recv static
  * conf: Don't configure port forwarding for a disabled protocol
  * tcp: handle shrunk window advertisements from guest
  * tcp: leverage support of SO_PEEK_OFF socket option when available
  * doc: Trivial fix for reuseaddr-priority
  * doc: Test behaviour of zero length datagram recv()s
  * doc: Add program to document and test assumptions about SO_REUSEADDR
  * udp: Consolidate datagram batching
  * udp: Move some more of sock_handler tasks into sub-functions
  * udp: Don't repeatedly initialise udp[46]_eth_hdr
  * udp: Unify udp[46]_l2_iov
  * udp: Unify udp[46]_mh_splice
  * udp: Rename IOV and mmsghdr arrays
  * udp: Pass full epoll reference through more of sock handler path
  * flow: Add flow_sidx_valid() helper
  * util: sock_l4() determine protocol from epoll type rather than the reverse
  * conf: Use the right maximum buffer size for c-&gt;sock_path
  * tcp_splice: Check return value of setsockopt() for SO_RCVLOWAT
  * conf: Copy up to MAXDNSRCH - 1 bytes, not MAXDNSRCH</changelog>
  <changelog author="dcermak@suse.com" date="1722945600">- Update to version 20240806.ee36266:
  * log, passt: Keep printing to stderr when passt is running in foreground
  * tcp_splice: Fix side in OUT_WAIT flag setting
  * util: Use unsigned (size_t) value for iov length
  * udp_flow: move all udp_flow functions to udp_flow.c
  * udp_flow: Remove udp_meta_t from the parameters of udp_flow_from_sock()
  * log: Make logfile_write() private
  * pasta: Save errno on signal handler entry, restore on return when needed
  * pasta: modify hostname when detaching new namespace
  * Fix typo in README file
  * fedora/rpkg: List myself as author for changelog entries</changelog>
  <changelog author="dcermak@suse.com" date="1723723200">- Update to version 20240814.61c0b0d:
  * flow: Don't crash if guest attempts to connect to port 0
  * conf: Don't ignore -t and -u options after -D
  * ndp.c: Turn NDP responder into more declarative implementation
  * conf: Delay handling -D option until after addresses are configured
  * Correct inaccurate comments on ip[46]_ctx::addr
  * log: Don't prefix message with timestamp on --debug if it's a continuation
  * conf: Stop parsing options at first non-option argument
  * passt, util: Close any open file that the parent might have leaked
  * nstool: Propagate SIGTERM to processes executed in the namespace
  * nstool: Fix some trivial typos
  * log: Avoid duplicate calls to logtime()
  * log: Handle errors from clock_gettime()
  * log: Correct formatting of timestamps
  * util: Some corrections for timespec_diff_us
  * conf, pasta: Make -g and -a skip route/addresses copy for matching IP version only</changelog>
  <changelog author="dcermak@suse.com" date="1724328000">- Update to version 20240821.1d6142f:
  * README: pasta is indeed a supported back-end for rootless Docker
  * util: Don't stop on unrelated values when looking for --fd in close_open_files()
  * test: Update list of dependencies in README.md
  * tcp, udp: Allow timerfd_gettime64() and recvmmsg_time64() on arm (armhf)
  * util: Provide own version of close_range(), and no-op fallback
  * udp_flow: Add missing unistd.h include for close()
  * test: Duplicate existing recvfrom() valgrind suppression for recv()
  * test/passt.mbuto: Install sshd-session OpenSSH's split process
  * test/passt.mbuto: Run sshd from vsock proxy with absolute path
  * test/lib/setup: Transform i686 kernel architecture name into QEMU name (i386)
  * treewide: Allow additional system calls for i386/i686
  * fwd, conf: Allow NAT of the guest's assigned address
  * fwd: Distinguish translatable from untranslatable addresses on inbound
  * conf: Allow address remapped to host to be configured
  * test: Reconfigure IPv6 address after changing MTU
  * conf, fwd: Split notion of gateway/router from guest-visible host address
  * Don't take "our" MAC address from the host
  * fwd: Split notion of "our tap address" from gateway for IPv4
  * fwd: Helpers to clarify what host addresses aren't guest accessible
  * Initialise our_tap_ll to ip6.gw when suitable
  * Clarify which addresses in ip[46]_ctx are meaningful where
  * treewide: Change misleading 'addr_ll' name
  * util: Correct sock_l4() binding for link local addresses
  * conf: Remove incorrect initialisation of addr_ll_seen
  * conf: Treat --dns addresses as guest visible addresses
  * conf: Correct setting of dns_match address in add_dns6()
  * conf: Move adding of a nameserver from resolv.conf into subfunction
  * conf: Move DNS array bounds checks into add_dns[46]
  * conf: More accurately count entries added in get_dns()
  * conf: Use array indices rather than pointers for DNS array slots
  * treewide: Use struct assignment instead of memcpy() for IP addresses
  * treewide: Rename MAC address fields for clarity
  * util: Helper for formatting MAC addresses
  * treewide: Use "our address" instead of "forwarding address"
  * netlink: Fix typo in function comment for nl_addr_set()
  * pasta: Disable neighbour solicitations on device up to prevent DAD
  * netlink, pasta: Fetch link-local address from namespace interface once it's up
  * netlink, pasta: Disable DAD for link-local addresses on namespace interface
  * netlink, pasta: Turn nl_link_up() into a generic function to set link flags
  * netlink, pasta: Split MTU setting functionality out of nl_link_up()
  * netlink: Fix typo in function comment for nl_addr_get()
  * test: Speed up by cutting on eye candy and performance test duration</changelog>
  <changelog author="dcermak@suse.com" date="1725883200">- Update to version 20240906.6b38f07:
  * apparmor: Allow read access to /proc/sys/net/ipv4/ip_local_port_range
  * selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range
  * tap: Don't risk truncating frames on full buffer in tap_pasta_input()
  * tap: Restructure in tap_pasta_input()
  * tap: Improve handling of EINTR in tap_passt_input()
  * tap: Split out handling of EPOLLIN events
  * util: Fix order of operands and carry of one second in timespec_diff_us()
  * cppcheck: Work around some cppcheck 2.15.0 redundantInitialization warnings
  * tcp: Use EPOLLET for any state of not established connections
  * udp: Handle more error conditions in udp_sock_errs()
  * udp: Treat errors getting errors as unrecoverable
  * udp: Split socket error handling out from udp_sock_recv()
  * flow: Helpers to log details of a flow
  * udp: Allow UDP flows to be prematurely closed
  * flow: Fix incorrect hash probe in flowside_lookup()
  * log: Don't prefix log file messages with time and severity if they're continuations
  * Makefile: Enable _FORTIFY_SOURCE iff needed
  * fwd, conf: Probe host's ephemeral ports
  * conf, fwd: Don't attempt to forward port 0
  * conf, fwd: Make ephemeral port logic more flexible
  * seccomp.sh: Try to account for terminal width while formatting list of system calls
  * udp: Use dual stack sockets for port forwarding when possible
  * udp: Remove unnnecessary local from udp_sock_init()
  * udp: Merge udp[46]_mh_recv arrays
  * test: Look for possible sshd-session paths (if it's there at all) in mbuto's profile</changelog>
  <changelog author="cathy.hu@suse.com" date="1726142400">- Fix passt-selinux to use selinux macros instead of calling semodule
  by hand, which leads to unwanted policy reload on Micro (bsc#1229132)</changelog>
</package>
<package pkgid="c92d5d5f9bdabbe424555b38cde1ea7e88c2b3e546acd093d9815122bc18c964cfdcf1361694d4462c18aef0456ed70906d3ba9d66be2e261bc74eafaf2b3d65" name="patch-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.7.6" rel="slfo.1.1_1.4"/>
  <changelog author="astieger@suse.com" date="1518004800">- patch 2.7.6:
  * Files specified on the command line are no longer verified to
    be inside the current working directory, so commands like
    "patch -i foo.diff ../foo" will work again
  * Fixes CVE-2016-10713 (Out-of-bounds access within
    pch_write_line() in pch.c could possibly lead to DoS via a
    crafted input file; bsc#1080918)
  * Various fixes</changelog>
  <changelog author="jdelvare@suse.de" date="1521633600">- Add AUTHORS and COPYING to %doc.
- fix-segfault-mangled-rename.patch: Fix segfault with mangled
  rename patch (bsc#1080951, CVE-2018-6951, savannah#53132).</changelog>
  <changelog author="jdelvare@suse.de" date="1521720000">- Move COPYING from %doc to %license.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052800">Fix CVE-2018-1000156 (bsc#1088420, savannah#53566).
- ed-style-01-missing-input-files.patch: Allow input files to be
  missing for ed-style patches.
- ed-style-02-fix-arbitrary-command-execution.patch,
  ed-style-03-update-test-Makefile.patch: Fix arbitrary command
  execution in ed-style patches.
- ed-style-04-invoke-ed-directly.patch: Invoke ed directly instead
  of using the shell.
- ed-style-05-minor-cleanups.patch: Minor cleanups in do_ed_script.
- ed-style-06-fix-test-failure.patch: Fix 'ed-style' test failure.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052801">- Add ed as BuildRequires so ed-style patches can be checked by
  the test suite.</changelog>
  <changelog author="jdelvare@suse.de" date="1525867200">- ed-style-07-dont-leak-tmp-file.patch,
  ed-style-08-dont-leak-tmp-file-multi.patch: Fix temporary file
  leak when applying ed-style patches (bsc#1092500,
  savannah#53820).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Do not query %{verbose} to add V=1 or not: verbose changed
  semantics between rpm versions and there is currently no variant
  supporting rpm &lt; 4.17 and rpm &gt;= 4.17.</changelog>
  <changelog author="jdelvare@suse.de" date="1652184000">- fix-swapping-fake-lines-in-pch_swap.patch: Fix swapping fake
  lines in pch_swap. This bug was causing a double free leading to
  a crash (boo#1080985 CVE-2018-6952).
- abort-when-cleaning-up-fails.patch: Abort when cleaning up fails.
  This bug could cause an infinite loop when a patch wouldn't
  apply, leading to a segmentation fault (boo#1111572).
- dont-follow-symlinks-unless-asked.patch: Don't follow symlinks
  unless --follow-symlinks is given. This increases the security
  against malicious patches (boo#1142041 CVE-2019-13636).
- pass-the-correct-stat-to-backup-files.patch: Pass the correct
  stat to backup files. This bug would occasionally cause backup
  files to be missing when all hunks failed to apply (boo#1198106).</changelog>
  <changelog author="coolo@suse.com" date="1653393600">- Do not link unversioned file by URL
- Replace group keyring not intended for release checking with
  (expired since 2018) public key of Andreas</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1722340800">- CVE-2019-20633.patch: Fix double-free/OOB read in pch.c (bsc#1167721)</changelog>
</package>
<package pkgid="f31330efc50221a1bf19a12bb97f486dfefa31e287b291517c057694500a4be5b8a3387086ed8f6564b9d95bacb0e1e46b2718202d9b68754eb59817bdf5f48a" name="patch-debugsource" arch="aarch64">
  <version epoch="0" ver="2.7.6" rel="slfo.1.1_1.4"/>
  <changelog author="astieger@suse.com" date="1518004800">- patch 2.7.6:
  * Files specified on the command line are no longer verified to
    be inside the current working directory, so commands like
    "patch -i foo.diff ../foo" will work again
  * Fixes CVE-2016-10713 (Out-of-bounds access within
    pch_write_line() in pch.c could possibly lead to DoS via a
    crafted input file; bsc#1080918)
  * Various fixes</changelog>
  <changelog author="jdelvare@suse.de" date="1521633600">- Add AUTHORS and COPYING to %doc.
- fix-segfault-mangled-rename.patch: Fix segfault with mangled
  rename patch (bsc#1080951, CVE-2018-6951, savannah#53132).</changelog>
  <changelog author="jdelvare@suse.de" date="1521720000">- Move COPYING from %doc to %license.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052800">Fix CVE-2018-1000156 (bsc#1088420, savannah#53566).
- ed-style-01-missing-input-files.patch: Allow input files to be
  missing for ed-style patches.
- ed-style-02-fix-arbitrary-command-execution.patch,
  ed-style-03-update-test-Makefile.patch: Fix arbitrary command
  execution in ed-style patches.
- ed-style-04-invoke-ed-directly.patch: Invoke ed directly instead
  of using the shell.
- ed-style-05-minor-cleanups.patch: Minor cleanups in do_ed_script.
- ed-style-06-fix-test-failure.patch: Fix 'ed-style' test failure.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052801">- Add ed as BuildRequires so ed-style patches can be checked by
  the test suite.</changelog>
  <changelog author="jdelvare@suse.de" date="1525867200">- ed-style-07-dont-leak-tmp-file.patch,
  ed-style-08-dont-leak-tmp-file-multi.patch: Fix temporary file
  leak when applying ed-style patches (bsc#1092500,
  savannah#53820).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Do not query %{verbose} to add V=1 or not: verbose changed
  semantics between rpm versions and there is currently no variant
  supporting rpm &lt; 4.17 and rpm &gt;= 4.17.</changelog>
  <changelog author="jdelvare@suse.de" date="1652184000">- fix-swapping-fake-lines-in-pch_swap.patch: Fix swapping fake
  lines in pch_swap. This bug was causing a double free leading to
  a crash (boo#1080985 CVE-2018-6952).
- abort-when-cleaning-up-fails.patch: Abort when cleaning up fails.
  This bug could cause an infinite loop when a patch wouldn't
  apply, leading to a segmentation fault (boo#1111572).
- dont-follow-symlinks-unless-asked.patch: Don't follow symlinks
  unless --follow-symlinks is given. This increases the security
  against malicious patches (boo#1142041 CVE-2019-13636).
- pass-the-correct-stat-to-backup-files.patch: Pass the correct
  stat to backup files. This bug would occasionally cause backup
  files to be missing when all hunks failed to apply (boo#1198106).</changelog>
  <changelog author="coolo@suse.com" date="1653393600">- Do not link unversioned file by URL
- Replace group keyring not intended for release checking with
  (expired since 2018) public key of Andreas</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1722340800">- CVE-2019-20633.patch: Fix double-free/OOB read in pch.c (bsc#1167721)</changelog>
</package>
<package pkgid="33bc17a3d1b54cf2af378dc62e873c8213d5ec994e20c782b5ad6f50a1ad41fe8d72f8e73c4f62dcc7a6f569c63ffeb956f66668a72b9629ca985bf06fa65f76" name="pciutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.0" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1585828800">- Update to version 3.6.4:
  * A new back-end for the GNU Hurd was contributed by Joan Lledó.
  * When printing VPD item identifiers, non-ASCII characters are escaped.
- Changes for version 3.6.3
  * `lspci -t' (tree mode) can be combined with `-s' to show a sub-tree.
    We also fixed potential buffer overflows in the tree dumper.
  * Cleaned messy code for dumping of I/O, memory, and ROM regions.
    This helped fixing a bug, which caused some 64-bit regions to be
    reported as virtual. All flags are now printed after the address
    (previously, "[virtual]" and "[enhanced]" were before it for no good
    reason).
  * Added pci_find_cap_nr() to the library, which handles capabilities
    which occur multiple times in a single device.
  * Minor improvements in printing of PCIe capabilities.
  * We now decode the Multicast and Secondary PCI Express extended
    capabilities.
  * The list of capability names available to setpci was updated.
  * Minor bugs were fixed in FreeBSD and Solaris ports.
  * We now prefer HTTPS URLs in all documentation
  * The pci.ids file has a man page.
  * As usually, updated pci.ids to the current snapshot of the database.
- Drop no longer relevant pciutils-3.2.0_update-dist.patch
- Do not ship update-pciids script - they are provided via hwdata
  package and we dont want to override data by other packages</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- Update to 3.7.0:
  * Add or improved the following capabilities:
    Designated Vendor-Specific, Compute eXpress Link,
    Resizable BARs, VF Resizable BARs, Link Capabilities 2,
    Link Status 2
  * On Linux, lspci can show IOMMU groups
  * setpci can be asked to skip bus scan and operate on a device
    completely specified by its domain/bus/dev/func address
  * back-ends which do not support domains now correctly fail when
    trying to access devices outside domain 0
- Add upstream keyging to verify source signature</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1620734400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642939200">- Set sbindir to /usr/bin to fix Steam issues
  (rh#1858437, gh#ValveSoftware/steam-for-linux#3306)
- Add symlinks from /usr/sbin to /usr/bin</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to 3.8.0:
  * Filters can now match devices based on partially specified
  class code and also on the programming interface.
  * Reporting of link speeds, power limits, and virtual function tags
  has been updated to the current PCIe specification.
  * We decode the Data Object Exchange capability.
  * Bus mapping mode works in non-zero domains.
  * pci_fill_info() can fetch more fields: bridge bases, programming
  interface, revision, subsystem vendor and device ID, OS driver,
  and also parent bridge. Internally, the implementation was rewritten,
  significantly reducing the number of corner cases to be handled.
  * If the configuration space is not readable for some reason
  (e.g., the cfgmgr32 back-end, but also badly implemented sleep mode
  of some devices), lspci prints only information provided by the OS.
  * The Hurd back-end was greatly improved thanks to Joan Lledó.
  * Various minor bug fixes and improvements.
  * As usually, updated pci.ids to the current snapshot of the database.
- Rebase pciutils-3.1.9_pkgconfig.patch
- Rebase pciutils-ocloexec.patch
- Rebase pciutils-endianh.patch
- Drop pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1652356800">- Make shared library executable</changelog>
  <changelog author="dmueller@suse.com" date="1669982400">- update to 3.9.0:
  * We decode Compute Express Link (CXL) capabilities.
  * The tree mode of lspci is now compatible with filtering options.
  * When setpci is used with a named register, it checks whether
    the register is present in the particular header type.
  * Linux: The intel-conf[12] back-ends prefer to use ioperm() instead
    of iopl() to gain access to I/O ports.
  * mmio-conf1(-ext): Added a new back-end implementing the intel-conf1
    interface over MMIO. This is useful on some ARM machines, but it
    requires manual configuration of the MMIO addresses.
  * As usually, updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1683806400">- Update to 3.10.0:
  - Fixed bug in definition of versioned symbol aliases
    in shared libpci, which made compiling with link-time
    optimization fail.
  - Filters now accept "0x..." syntax for backward compatibility.
  - Windows: The cfgmgr32 back-end which provides the list of devices
    can be combined with another back-end which provides access
    to configuration space.
  - ECAM (Enhanced Configuration Access Mechanism), which is defined
    by the PCIe standard, is now supported. It requires root privileges,
    access to physical memory, and also manual configuration on some
    systems.
  - lspci: Tree view now works on multi-domain systems. It now respects
    filters properly.
  - Last but not least, pci.ids were updated to the current snapshot
    of the database. This includes overall cleanup of entries with
    non-ASCII characters in their names -- such characters are allowed,
    but only if they convey interesting information (e.g., umlauts
    in German company names, but not the "registered trade mark" sign).</changelog>
</package>
<package pkgid="66fed30c9380c79e5f35c1c098a1aaed0bc28d7f4edcf4e76213d7aef8cf2ee438cb03e736bfe6f368f9d8177e55619260d792e959f977dfe8a3f725efe22f56" name="pciutils-debugsource" arch="aarch64">
  <version epoch="0" ver="3.10.0" rel="slfo.1.1_1.2"/>
  <changelog author="mpluskal@suse.com" date="1585828800">- Update to version 3.6.4:
  * A new back-end for the GNU Hurd was contributed by Joan Lledó.
  * When printing VPD item identifiers, non-ASCII characters are escaped.
- Changes for version 3.6.3
  * `lspci -t' (tree mode) can be combined with `-s' to show a sub-tree.
    We also fixed potential buffer overflows in the tree dumper.
  * Cleaned messy code for dumping of I/O, memory, and ROM regions.
    This helped fixing a bug, which caused some 64-bit regions to be
    reported as virtual. All flags are now printed after the address
    (previously, "[virtual]" and "[enhanced]" were before it for no good
    reason).
  * Added pci_find_cap_nr() to the library, which handles capabilities
    which occur multiple times in a single device.
  * Minor improvements in printing of PCIe capabilities.
  * We now decode the Multicast and Secondary PCI Express extended
    capabilities.
  * The list of capability names available to setpci was updated.
  * Minor bugs were fixed in FreeBSD and Solaris ports.
  * We now prefer HTTPS URLs in all documentation
  * The pci.ids file has a man page.
  * As usually, updated pci.ids to the current snapshot of the database.
- Drop no longer relevant pciutils-3.2.0_update-dist.patch
- Do not ship update-pciids script - they are provided via hwdata
  package and we dont want to override data by other packages</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- Update to 3.7.0:
  * Add or improved the following capabilities:
    Designated Vendor-Specific, Compute eXpress Link,
    Resizable BARs, VF Resizable BARs, Link Capabilities 2,
    Link Status 2
  * On Linux, lspci can show IOMMU groups
  * setpci can be asked to skip bus scan and operate on a device
    completely specified by its domain/bus/dev/func address
  * back-ends which do not support domains now correctly fail when
    trying to access devices outside domain 0
- Add upstream keyging to verify source signature</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1620734400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642939200">- Set sbindir to /usr/bin to fix Steam issues
  (rh#1858437, gh#ValveSoftware/steam-for-linux#3306)
- Add symlinks from /usr/sbin to /usr/bin</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to 3.8.0:
  * Filters can now match devices based on partially specified
  class code and also on the programming interface.
  * Reporting of link speeds, power limits, and virtual function tags
  has been updated to the current PCIe specification.
  * We decode the Data Object Exchange capability.
  * Bus mapping mode works in non-zero domains.
  * pci_fill_info() can fetch more fields: bridge bases, programming
  interface, revision, subsystem vendor and device ID, OS driver,
  and also parent bridge. Internally, the implementation was rewritten,
  significantly reducing the number of corner cases to be handled.
  * If the configuration space is not readable for some reason
  (e.g., the cfgmgr32 back-end, but also badly implemented sleep mode
  of some devices), lspci prints only information provided by the OS.
  * The Hurd back-end was greatly improved thanks to Joan Lledó.
  * Various minor bug fixes and improvements.
  * As usually, updated pci.ids to the current snapshot of the database.
- Rebase pciutils-3.1.9_pkgconfig.patch
- Rebase pciutils-ocloexec.patch
- Rebase pciutils-endianh.patch
- Drop pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1652356800">- Make shared library executable</changelog>
  <changelog author="dmueller@suse.com" date="1669982400">- update to 3.9.0:
  * We decode Compute Express Link (CXL) capabilities.
  * The tree mode of lspci is now compatible with filtering options.
  * When setpci is used with a named register, it checks whether
    the register is present in the particular header type.
  * Linux: The intel-conf[12] back-ends prefer to use ioperm() instead
    of iopl() to gain access to I/O ports.
  * mmio-conf1(-ext): Added a new back-end implementing the intel-conf1
    interface over MMIO. This is useful on some ARM machines, but it
    requires manual configuration of the MMIO addresses.
  * As usually, updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1683806400">- Update to 3.10.0:
  - Fixed bug in definition of versioned symbol aliases
    in shared libpci, which made compiling with link-time
    optimization fail.
  - Filters now accept "0x..." syntax for backward compatibility.
  - Windows: The cfgmgr32 back-end which provides the list of devices
    can be combined with another back-end which provides access
    to configuration space.
  - ECAM (Enhanced Configuration Access Mechanism), which is defined
    by the PCIe standard, is now supported. It requires root privileges,
    access to physical memory, and also manual configuration on some
    systems.
  - lspci: Tree view now works on multi-domain systems. It now respects
    filters properly.
  - Last but not least, pci.ids were updated to the current snapshot
    of the database. This includes overall cleanup of entries with
    non-ASCII characters in their names -- such characters are allowed,
    but only if they convey interesting information (e.g., umlauts
    in German company names, but not the "registered trade mark" sign).</changelog>
</package>
<package pkgid="0749fd034b687041ec89622d5a91374f91982436700ba224889eb1eb788852c73e1c708afc370cc98db6f8a65c209e833f9eaa8481b2e0cb522ecff2ead0f706" name="pcp-debugsource" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="slfo.1.1_4.1"/>
  <changelog author="dimstar@opensuse.org" date="1700222400">- Only auto-trigger pcp-pmda-postfix for automatic installation
  when pcp and postfix are present. Supplementing pcp alone would
  auto-install postfix on all systems.
- Supplement pcp-pmda-rsyslog against pcp and rsyslog.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1701172800">- This version *does not* break API or ABI compatibility with the
  previous 5.2.5 release.
- Remove 0009-remove-rundir-install.patch. Obsoleted.
- Remove 0011-Revert-systemd-remove-Wants-pmcd-from-pmlogger-and-p.patch.
  Obsoleted.
- Various minor changes/improvements to the RPM spec file.
- Upgrade to 5.3.7. This is the latest release in the 5.X series.
  Changes from 5.3.7:
  - Client tools and utilities:
    pcp2elasticsearch: implement authentication support
    pcp-ss: fixed incorrect client-side filtering
    pcp-ss: fixed reporting of IPv6 sockets in LISTEN state
    pmrep: 'iostat-multipath-wwid' for multipath disk monitoring
  - PMDA additions, enhancements and bug fixes:
    pmdalinux: add disk.wwid.* aggregated multipath metrics
    pmdalinux: add new MPTCP metrics from latest Linux kernel versions
    pmdalinux: fix up TTY metrics on s390x platform
    pmdalinux: add network.tcp.tcploss metric
    pmdamssql: fix config file logic, python string handling
    pmdadenki: fix crash in labels callback with multiple instances
    pmdasockets: changed default filter in sockets PMDA to "state all"
  - Server-side utilities and log management scripts:
    pmlogconf: correctly handle metric state transitions on (re-)probe
    pmie systemd: add missing systemd configuration and shell code
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_web: resolve a number of small memory leaks
  - Security Enhanced Linux:
    selinux: use interface calls instead of a simple rule
    selinux: add several more obscure missing selinux rules
    selinux: additional debugfs policy requirement for pmdakvm
    selinux: resolve an AVC observed on el8 with pmdashping
  - Misc build, infrastructure and packaging updates:
    rpms: switch to conditional selinux dependency for containers
    debs: reproducible build updates
  - Documentation and QA infrastructure:
    docs: add section to pcpcompat(1) about python2
    docs: update notes about sar2pcp, iostat2pcp in pcpcompat(1)
    docs: improve pmproxy --timeseries and pmseries --load documentation
    CI: disable cppcheck for pcp-atop temporarily due to a cppcheck bug
  Changes from 5.3.6:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L468
  Changes from 5.3.5:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L497
  Changes from 5.3.4:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L557
  Changes from 5.3.3:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L606
  Changes from 5.3.2:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L665
  Changes from 5.3.1:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L753
  Changes from 5.3.0:
  https://github.com/performancecopilot/pcp/blob/f3fdd468d09c6e1158433210380a40389516a971/CHANGELOG#L854</changelog>
  <changelog author="mls@suse.de" date="1702555200">- declare the users/groups we create in the preinstall scripts
  (this is needed for newer rpm versions)</changelog>
  <changelog author="tina.mueller@suse.com" date="1706788800">- Change YAML::XS::LibYAML to YAML::XS as this is the module to be used</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1711972800">- Upgrade to 6.2.0 (bsc#1217826 CVE-2023-6917, bsc#1217783):
  * Changes from pcp-6.2.0:
  - Client tools and utilities:
    pmlogger: default to creating version 3 PCP archives
    pmie, pmlogger, pmcd, pmproxy: init script hardening to
    run less as root:root, more as pcp:pcp and more safely
    pcp-reboot-init: new systemd service for $PCP_RC_DIR setup
    pcp2arrow: new, export metrics to parquet format for pandas
    pcp-atop: deterministic process sort when handling NULLs
    pcp-atop: update to v2.10.0 upstream code
    pcp-htop: update to latest upstream fixes
    pcp-geolocate: function with older versions of python
    pcp-meminfo: resolve possible 'broken pipe' diagnostics
    pcp-ss: fix handling of listening state sockets to match ss
    pcp-ss: fix the UDP UNCONN vs LISTEN state handling
  - PMDA additions, enhancements and bug fixes:
    pmdaproc: improvements for process accounting metrics
    pmdalinux: add pgpromote* and pgdemote* memory metrics
    pmdalinux: add metric sysfs.module.zswap.max_pool_percent
    pmdalinux: add new SNMP metric network.ip.outtransmits
    pmdasummary: send state change 0 (no change) back to pmcd
    pmdapostgresql: support the psycopg3 python module as well
    pmdaopenmetrics: kepler support - live metrics and logging
  - Server-side utilities and log management scripts:
    pmlogrewrite, pmlogredact: fix for missing data volumes
    pmcd: cosmetic change to avoid pipe2 name clash
    runaspcp: new helper utility for unprivileged rc scripts
    pmnsmerge: be more defensive in qsort comparison routine
    pmlogsize: fix qsort comparison function handling of equality
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: pmOpenLog refactor for handling previous log files
    libpcp: new __pmCleanMapDir routine to aid log culling
    libpcp &amp; pmcd: READY-NOT-READY hardening
    libpcp: avoid possible thread issues (coverity)
    libpcp: refactor pmDupContext for thread safety
    libpcp_import: add guard in pmiPutMark to prevent SIGSEGV
  - Build, infrastructure and packaging updates:
    build: changes to re-enable builds for FreeBSD 12, 13, 14
    build: add diffutils rpm dep as pmdaproc script uses diff
    build: add main.yml for building and publishing container
    build: resolve compiler warnings in various tools/libraries
    packaging: use tmpfiles.d method to create PCP_RUN_DIR
    build: packaging changes for openSUSE 15.5 and 15.6
    debian: do not ship empty directory /usr/lib/pkgconfig
    build: el10 systemd-presets for pmcd/pmie/pmlogger enabling
    build: drop rpm dep on bpftool as local version used only
    build: change perl YAML::XS::LibYAML module to YAML::XS
  - Security Enhanced Linux:
    selinux: policy improvements for CentOS/RHEL 7 and 8
  - Documentation:
    docs: Fedora 39 found some tbl(1)/troff(1) issues, fix
    docs: add an explicit code-of-conduct for PCP
    docs: pmns(5) note that metric names must only contain ASCII
    docs: update the BPF README to describe bpftool reality
  * Changes from pcp-6.1.1:
  - Client tools and utilities:
    pmie: add -o/--format to control output format with archives
    pcp-geolocate: automatic latitude and longitude metric labels
    pcp-atop: fix segv encountered on a multi-node NUMA system
    pcp-atop: add last level cache support using pmdaresctrl
    pcp-htop: updated with latest fixes from htop.dev
    pcp-netstat: without time options report one sample only
    pcp-netstat: add machine header info
    pcp-meminfo: without time options report one sample only
    pcp-meminfo: add machine header info
    pcp-buddyinfo: resolve a key issue when using python v2
    pcp-zoneinfo: ensure determinism in pcp-zoneinfo output
    pcp-zoneinfo: fix failure with older PCP metric instances
  - PMDA additions, enhancements and bug fixes:
    pmdaresctrl: new PMDA for x86_64 last level cache metrics
    pmdafarm: new Seagate Field Access Reliability Metrics PMDA
    pmdadarwin: updated for changes in NFS stats management
    pmdalinux: new mem.util metrics from recent kernel versions
    pmdalinux: new networking metrics relating to MPTcpExt
    pmdasockets: allow sockets with duplicate sources to exist
    pmdabpftrace: rework exit/wait handling to avoid errors
    pmdahaproxy: fixed connect script handling of string quoting
    pmdastatsd: fixed metadata for a couple of metrics
    pmdalinux: fixed semantics for mem.vmstat.nr_free_cma metric
    pmdadenki: simplification and refactoring of metrics
    pmdagfs2: correct permissions of several installed files
    pmdakvm: fixed semantics for kvm.largepages metric
  - Server-side utilities and log management scripts:
    pmproxy: add support for HTTP compression
    pmlogger: rework heuristic for Latest folio creation
    pmlogctl: fix incorrect rewriting of PCP_ARCHIVE_DIR
    pmlogredact: add latitude and longitude labels to redacted set
    pmlogrewrite: resolve a small memory leak
    pmlogrewrite: use PM_CTXFLAG_METADATA_ONLY for speed
    pmcd: add $PMCD_CREDS_TIMEOUT as an alternative to -q
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: new PM_CTXFLAG_METADATA_ONLY flag for pmNewContext
    libpcp: fix a couple of derived metric bugs
    libpcp_web: implement config override by canonical env vars
  - Misc build, infrastructure and packaging updates:
    build: new CI build to keep PCP for MacOS up-to-date
    build: several fixes to tools when compiling with clang
    build: install pmlog[redact,reduce,rewrite] on default PATH
    build: default to using a path-prefixed PCP_PYTHON_PROG
    build: update the Fedora container to f38
    build: drop of i386/i686 architectures from Fedora builds
    build: enable build of pmdalibvirt on CentOS 7 platform
    build: enable Qt6 in Fedora and post-RHEL-9 rpm spec files
    build: add pyodbc rpm dep for pcp-pmda-mssql in RHEL 9
  - Security Enhanced Linux:
    selinux: allow pmproxy use the io_uring API
    selinux: policy fixes for recent AVCs on RHEL 7.9
    selinux: add netlink_kobject_uevent_socket getattr (bpftrace)
  - Documentation:
    man pages: change all to map font CW -&gt; CR for latest groff
    man: note pmseries Redis timeseries load order limitation
  * Changes from pcp-6.1.0:
  - pmlogredact: new command for archive anonymisation
  - pcp-atop: new bar graph visualisation mode
  - pcp-atop: update to atoptool.nl 2.9.1 sources
  - pcp-htop: support dynamic screens (user-configurable tabs)
  - pcp-htop: update to latest upstream source
  - pcp-htop: default screens for filesystems, disks and cgroups
  - pcp-htop: non-default screens for several libbpf modules
  - pcp-htop: fix mishandling of some process argument shading
  - pcp-buddyinfo: new tool reporting Linux buddyinfo stats
  - pcp-meminfo: new tool reporting Linux kernel memory stats
  - pcp-netstat: new tool reporting networking statistics
  - pcp-slabinfo: new tool reporting Linux slabinfo kernel stats
  - pcp-zoneinfo: new tool reporting Linux zoneinfo kernel stats
  - pmsleep,pmpause: add -w where option for systemd annotation
  - pmieconf: move test_action from primary into a separate group
  - pmieconf: update webhook action for better EDA integration
  - pmlogconf: remove latency-inducing fsync on config write
  - pmlogconf: updates for new metrics used in pcp-atop
  - pmdalinux: add three new /proc/vmstat pscan/pgsteal metrics
  - pmdalinux: fix bug when lsb-release is only /etc/*-release file
  - pmdabpf: add -q/--tryload command line option
  - pmdaopenmetrics: reduce transient instance logs, improve labels
  - libpcp: improved SSL error reporting
  - selinux: add policy updates for pmproxy (io_uring,ipc_lock)
  - build: support for Qt6, drop remaining Qt4 configure-support
  - build: updated licence strings in spec files to follow SPDX
  - build: default to using a path-prefixed PCP_PYTHON_PROG
  - build: fix several makefile clean targets for deb packagers
  - build: configure.ac update to autoconf 2.71
  - build: add tarball upload to release workflow
  - docs: pmie updates to explain action behaviour with archives
  - docs: retire "archive log" phrase from man pages and books
  - docs: transition Artifactory (no free service) to Packagecloud
  * Changes from pcp-6.0.5:
  - pmie: ensure pmie.log.YYYYMMDD is owned by pcp:pcp
  - pcp2json: extend pcp2json with an option to send HTTP POSTs
  - pmlogger: fix pidfile update; pmlogger.pid is for primary only
  - pmdumptext: fix scaling when -i command line option is used
  - pmlogextract: improve resilience in corner-case conditions
  - pmdasmart: additional NVME power state metrics
  - pmdasmart: additional NVME disk information metrics
  - pmdasmart: update help with proper description of DC status
  - pmdasmart: filter out zram devices when probing for devices
  - pmdahacluster: handle pacemaker 2.1.5 crm_mon output changes
  - pmcd: improve debugging flags and diagnostics in general
  - libpcp_pmda: refactor and improve library diagnostics
  - selinux: updates to policy for pmlogger and pmlogger_daily
  - build: switch rpm spec files to SPDX license identifiers
  - build, qa: numerous updates to improve PCP on OpenBSD
  - build: switch from registry.centos.org to quay.io for el6/el7
  - ci: add centos6 back into the fold as its on quay.io now
  - ci: add Debian 12, drop Ubuntu 16 and Fedora 35
  * Changes from pcp-6.0.4:
  - pmcd: propogate a new PMCD_HOSTNAME_CHANGE flag to clients
  - pmdumplog: support preferred alternate name pmlogdump
  - pmlogger: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmlogger_janitor: new script called from pmlogger_check
  - pmlogger: add -d directory argument for alternate naming schemes
  - pmlogrewrite: fix remaining corner case for indom renumbering
  - pmie: changes to accommodate PMCD_HOSTNAME_CHANGE
  - pmie: catching SIGUSR1 triggers a pending task dump
  - pmie_{check,daily}: change pmie.log handling regime
  - pmieconf: add support for a webhook action to pmieconf
  - pmieconf: add a wall rule action for adm group members
  - pmieconf: add support for an action testing rule
  - pmieconf: use correct pmieconf percent type for thermal throttle
  - pmieconf: add minimum pct conjunction to entropy for small poolsizes
  - pminfo: use -b to batch pmDesc retrievals as well as pmResult
  - pmstat: fix corner case handling of automatic pmcd reconnect
  - pcp2influxdb: add requests.post timeout to avoid hangs
  - pcp-dstat: fixes CSV output to show all (not visible) plugins
  - pcp-htop: support File Descriptor Meter
  - pcp-htop: sync latest fixes from upstream htop
  - pcp-mpstat: fixed broken pipe issue
  - pcp-ps: fix exception handling for process name
  - rc scripts: ensure pmcd.conf not rewritten unnecessarily
  - pmdalinux: add a couple of new /proc/net/snmp ICMP metrics
  - pmdalinux: add new network.tcp.tcpplbrehash metric
  - pmdaproc: add new proc.smaps.pss_dirty metric
  - pmdarabbitmq: add timeout handling to http requests
  - pmdastatsd: stats and blocklisted metric names alignment
  - libpcp: new pmAddDerivedText API for derived metric help text
  - libpcp: check level parameter on entry to pmLookupText
  - libpcp: new PMAPI error code addition for bad API arguments
  - libpcp: allow derived metrics semantics of 'similar' indoms
  - selinux: add missing context information on farm services
  - build: fix a number of Debian sub-package dependency issues
  * Changes from pcp-6.0.3:
  - build: fix Debian postinst script handling of missing systemctl
  - pmdaproc: support per-cgroup IRQ PSI metrics in recent kernels
  - pmdalinux: support for system wide IRQ PSI metrics in recent kernels
  - pmlogrewrite: improved handling of unused instance domains
  * Changes from pcp-6.0.2:
  - Client tools and utilities:
    pcp-atop: update to latest upstream atoptool.nl sources
    pcp-atop: cgroup, NUMA memory and NUMA CPU support
    pcp-htop: update to latest upstream htop.dev sources
    pcp-dstat: fix handling of --swap with -f (full) option
    pcp-dstat: fix columns for --net-packets
    pcp-mpstat: fix handling of log-once summary metric values
    pcp-mpstat: improve error handling for the current values
    pcp-ps: added capabilities to show N samples with archives
    pcp-ps: fix handling of the -o option
    pcp-ps: fix broken pipe errors when piping to head(1)
    pcp-ps: fix process "START" column calculation and rounding
    pcp-pidstat: fix broken pipe errors when piping to head(1)
    pmdumplog: extend -x so -xxx reports timestamps in Epoch format
    pmlogger: refactor getting FQDN for local host
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set config default for biosnoop module to disabled
    pmdabpf: port forward to latest vendored libbpf-tools code
    pmdalinux: boolean metric network.interface.virtual from sysfs
    pmdalinux: more careful slabinfo 32/64 bit type multiplication
    pmdalinux: add NUMA external fragmentation metric via sysfs
    pmdalinux: fix pmid numbering issue with hinv.map.scsi_id
    pmdanfsclient: fix srcport handling for RDMA and UDP mounts
    pmdaopenmetrics: validate all names before using them for metrics
    pmdaoverhead: new PMDA to measure overhead for groups of processes
    pmdastatsd: static metric memory leak fix
    pmdastatsd: ragel parser refactor and fix
  - Server-side utilities and log management scripts:
    pmieconf: new pmie rule checking file descriptor limits
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp: fix buffer issue for user/group name lookups
    libpcp_web: improve error handling in pmseries AST parser
  - Misc build, infrastructure and packaging updates:
    configure.ac: fixes for improved C99 compatibility
    configure.ac: use QTDIR search path only when given
    MacOS: build: fix shared library builds on modern Macs
    OpenBSD: build updates for clang, Qt and openssl
    libbpf: updated minimium version to 0.8.0, ARM and PPC support
    Qt: update minimum required versions for libqwt
    Drop no-longer-used pmlogger_daily_report systemd rpm spec code
    Determine clang version without optional llvm-config utility
    Another attempt to get the man/man-db/mandoc stuff sorted
  - Security Enhanced Linux:
    Policy updates for pmdastatsd
  - Documentation and QA infrastructure:
    Add help text for some OpenBSD kernel instance domains
    Provide more detailed explanation for default PMLOGGER_INTERVAL
    pmdaChildren(3): clarify the memory allocation scheme
    pcp-ps(1) man page fixes.
  * Changes from pcp-6.0.1:
  - Security Enhanced Linux:
    selinux: rework policy to use optional_policy
    selinux: rework policy to use an independent policy
    selinux: new cluster_exec_t policy handling for pmdahacluster(1)
    selinux: retire those parts of the build affecting CentOS 6
  - PMDA additions, enhancements and bug fixes:
    pmdabpf: set perf_buffer__poll timeout to 0 for optimal sampling
    pmdabpf: add CO-RE biosnoop
    pmdabpf: no BPF debug messages unless debugging (-Ddev0)
    pmdalinux: add "squashfs" to the list of ignored filesystem types
    pmdasnmp: install agent specific configuration file to PMDATMPDIR
    pmdakvm: initialise perf_event interface only if/when needed
  - Client tools and utilities:
    pcp-ps: initial version of a PCP implementation of ps(1)
    pcp-dstat: add --nomissed command line option for large systems
    pmfind, libpcp_web: MMV and shutdown memory management fixes
    pmlogreduce: fix corner-case in temporal index generation
    pmlogcheck: tighten some pmlogcheck pass0 checks
    pmseries: fix sampling when start &lt; first sample or series has gaps
    shell completion: improve pmrep/zsh instance completion in live mode
    shell tools: convert fgrep and egrep over to grep -F and -E
  - Server-side utilities and log management scripts:
    pmlogger_daily_report: no longer needs any systemd support now
    pmlogger_daily.sh: fix pmlogger_daily_report test for zeroconf
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_web: fix race conditions affecting pmproxy
    libpcp_web: allow scalar operands in pmseries expressions
    libpcp_web: add pmseries float multiplication
  - Misc build, infrastructure and packaging updates:
    build: add PCP archive analysis container
    build: updates to fix Windows platform builds
    build: update configure.ac to allow builds on Mac M1 (arm64)
    build: make openSUSE spec file builds work again
    containers: remove /build directory
    debian: use deb-systemd-helper if available
    build: fix libpcp check-statics regexp error with objects in subdirs
    build: podman PMDA no longer has deps, make it unconditional
    build: don't package and install pmrep xtract-names helper
    build: updates to hiredis code for pmseries and pmproxy
    build: updates to hiredis-cluster code for pmseries and pmproxy
    build: fix Makepkgs handling of argument parameters
    build: use vendored github.com/libbpf/bpftool/libbpf and update
    build: use vendored github.com/iovisor/bcc/libbpf-tools
    build: use vendored git.code.sf.net/p/qwt and update
    build: fix bpf PMDA inclusion check
    build: fix windows default pmcd.conf entry, dup path component
    build: rework Python3 and Python2 configure.ac logic
    packaging: fix rpm systemd-sysusers on f37 and rawhide
  - Documentation and QA infrastructure:
    docs: small typo fixes relating to secure connections
    docs: fix sheet2pcp(1) man page quoting in examples
    pmdasample: additional metrics for testing cases
  * Changes from pcp-6.0.0:
  - Major changes:
    1. Add version 3 PCP archive support: instance domain change-deltas,
    Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary
    timezones support, 64-bit file offsets used throughout for larger
    (beyond 2GB) individual volumes.
  * * Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting. **
  * * Version 2 archives remain the default (for next few years). **
    2. Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
    this impacts on libpcp, PMAPI clients and PMCD use of encryption;
    these are now configured and used consistently with pmproxy HTTPS
    support and redis-server, which were both already using OpenSSL.
    3. New nanosecond precision timestamp PMAPI calls for PCP library
    interfaces that make use of timestamps.  These are all optional,
    and full backward compatibility is preserved for existing tools.
  - Client tools and utilities:
    pcp2elasticsearch: implement authentication support
    pcp-dstat: implement support for the top-alike plugins
    pcp-dstat: add plugin configuration for ZFS metrics
    pcp-dstat: battery charge remaining config using denki metrics
    pcp-htop: update to latest stable upstream release
    pcp-htop: initial support for screen tabs in the user interface
    pcp-pidstat: correct operation of the -p ALL|SELF options
    pmlogger: small changes for handling derived metrics better
    pmlogger, import: support configurable default archive version
    pcp2xxx: ignore pmrep-specific options
    pmlogger: extra hardening, backtrace symbol improvements
    pmlogger: add -V (output archive version) command line option
    pmseries: add sum(), avg() and stdev() functions
    pmseries: add nth_percentile() and topk() functions
    pmseries: add max_inst() and max_sample() functions
    pmseries: add min_inst() and min_sample() functions
    pmseries: be more defensive during shutdown error paths
    pmseries: fix assumption that any 40-character string is a SID
    pmseries: allow reporting values from SIDs (not just queries)
    sheet2pcp: add -V (output archive version) command line option
    ganglia2pcp: add -V (output archive version) command line option
    iostat2pcp: add -V (output archive version) command line option
  - PMDA additions, enhancements and bug fixes:
    pmdaapache: do time_t manipulation with sufficient space
    pmdabcc: sync bcc PMDA modules with upstream bcc tools
    pmdabpf: adds CO-RE (Compile Once - Run Everywhere) modules
    (exitsnoop, oomkill, bashreadline, mountsnoop, vfsstat,
    opensnoop, fsslower, statsnoop, tcpconnlat, tcpconnect)
    pmdabpf: support x86, arm and powerpc
    pmdabpf: fixed persistence of indom and cluster identifiers
    pmdabpf: rework setrlimit() logic for some small memory hosts
    pmdabpftrace: move example autostart scripts to /usr/share
    pmdabpftrace: update biolatency example script for kernel 5.16+
    pmdadenki: fix battery detection for non-intel systems
    pmdadenki: add support for multiple active batteries
    pmdadenki: support the -D option for debugging
    pmdadenki: improve labels associated with metrics
    pmdadenki: add battery capacity metric
    pmdadenki: add separate indom help text
    pmdalinux: add new MpTcpExt metrics from latest Linux 5.x kernels
    pmdalinux: updates for latest /proc/net/netstat kernel changes
    pmdalinux: improve network metrics help text
    pmdalinux: fix of tty metrics on s390x platform
    pmdamailq: update to ensure Y2038-safe time_t handling
    pmdammv: use highest available timestamp resolution
    pmdaopenvswitch: additional interface and coverage stats
    pmdapostfix: harden against a not-yet-running postfix
    pmdaproc: fix psargs string for processes with very large PIDs
    pmdaproc: fix cgroup cpu metrics refresh structures
    pmdasockets: prevent string overwrite of ss_stats_t fields
    pmdasockets: add checking to the pmStore filter strings
    pmdastatsd: fix detection of failure memory allocation
  - Server-side utilities and log management scripts:
    pmproxy: allow request parameters to be sent in the request body
    pmproxy: fix race on teardown of pcp protocol proxy clients
    pmproxy: improve error checking, check uv_pipe_bind result
    pmproxy: harden logging interfaces, racing with startup
    pmieconf: add several pmie rules for Open vSwitch metrics
    pmlogrewrite: subtle change in semantics for error checking
    pmlogreduce: allow sub-second values for -t option
    pmlogreduce: temporal index, add entries after 100k of data volume
    pmlogcheck: beef up pass 0 to check metadata record types
    pmlogconf: fix reprobing with interactive changes
    pmlogmv: fallback to copy for cross-mount case when link fails
    pmlogmv: add -c (paranoid checksum) option
    pmlogger_farm: add default configuration file for farm loggers
    pmlogger_check: increase PMLOGGER_REQUEST_TIMEOUT from 2 to 10 secs
    pmlogger_daily: callbacks for extra daily log processing tasks
    pmlogger_daily, pmlogger_check: additional systemd-driven changes
    pmlogger_daily: move redirection of stdout+stderr earlier in script
    pmlogger_daily: abandom use of fmt(1) - not portable - uses awk now
    pmlogger_daily_report.sh: some major efficiency improvements
    pmlogger_daily_report: re-enabled for rpm and deb builds
    pmie_check: avoid leaving lock file and temp dir behind
    pm{log,ie}ctl: handle embedded shell syntax in control lines
    pm{log,ie}ctl: add -C args option to pass "args" to pm{logger,ie}_check
    systemd units: pmlogger and pmie farm conditional use of type=exec
    rc-pmcd: reorder the systemd paths attempted in migrate_pid_cgroup
    dbpmda: fix an overlapping copy and add error handling
  - libpcp, libpcp_pmda, libpcp_mmv, libpcp_web and language bindings:
    libpcp_archive: new library for apps that write PCP archives
    libpcp: optimize indom handling in fetchgroup code
    libpcp: drop time_t abuse in getdate.y, use safe sizes
    libpcp: add __pmDumpPDUTrace() and circular trace buffer
    libpcp: add PM_ERR_FEATURE, PM_ERR_TLS error codes
    libpcp: refactor __pmDumpStack(), improve direct calling tools
    libpcp_qmc: require Qt5.6 as the minimum version for builds
    libpcp_qmc: resolve the Qt::endl warning more cleanly
    libpcp_web: stop Redis initialization if Redis version tool old
    libpcp_web: honour config settings that disable redis completely
    libpcp_web: fix memory leaks in discovery, query parsing and APIs
    libpcp_web: honor exclude.metrics setting in pmseries --load
    libpcp_web: run pmFetchArchive(3) in a worker thread
    libpcp_web: fix race condition tearing down load baton
    libpcp_pmda: ensure indom cache write handles time_t safely
    libpcp_import: add interface for setting output log version
    libpcp_import: interfaces for samples with high-resolution timestamps
    python api: updates to allow building from outside git repo
    python api: allow tools using pmconfig module to ignore options
    python api: add python wrappers for highres PMAPI routines
    python api: correct refcounting on pmParseMetricSpec source buffer
  - Security Enhanced Linux:
    selinux: additional policy rules, esp glusterd_log_t
    selinux: bcc PMDA policy to exec private memfd ctypes/libffi objects
    selinux: make use of syslogd_var_run_t map rule conditional
    selinux: policy updates needed for the pmdasockets metrics
    selinux: fine-tune netlink_tcpdiag_socket policy for all platforms
  - Misc build, infrastructure and packaging updates:
    build: latest distros supported (ubuntu 22.04, fedora 37, rhel9, etc)
    build: reproducible debian build efforts
    build: use standard dpkg buildflags variables.
    build: add BuildRequires: python*-pymongo to mongodb PMDA
    build: detect libbpf version for the BPF PMDA
    build: do not transform symlink targets when generating the source tarball
    build: update artifactory deploy script, add recalculate_metadata subtask
    build: update configure script for python2 retirement in rhel9
    build: convert libpcp check-statics to using readelf if available
    build: updates to libpcp check-statics for OpenBSD
    build: fix configure detection of backtrace() and associated hooks
    build: fixed source dependencies within libpcp_web makefile
    build: add rpm conflicts lines on postgresql-pgpool-II
    build: remove pmclient reliance on libpcp.h for timed sleep
    build: remove mmvdump reliance on libpcp.h for mmap wrapper
    build: make perl truly conditional in the PCP build
    build: drop no-longer-needed NSS/NSPR package deps
    build: resolve ostree non-writable /var for pmieconf
    packaging: update rpm specs to solve systemd warnings
    container: bump base image version
    Makepkgs: fix for Debian build (and Qt packaging failure in CI)
    vendor: switch to git-subtree for iovisor/bcc libbpf-tools code
  - Documentation and QA infrastructure:
    docs: update notes about sar2pcp, iostat2pcp in pcpcompat(1)
    docs: add section to pcpcompat(1) about python2
    docs: add fix for readthedocs compilation error
    docs: updates to the Quick Guide documents
    docs: clatifications to pmrep et al: man pages
    docs: improve pmproxy timeseries and pmseries load documentation
    docs: further improvements and fixes to the INSTALL doc
    docs: add pmlogger(1) -V, describe $PCP_ARCHIVE_VERSION in pcp.conf.
    docs: small fixes to the pcp-pidstat man page
    docs: fix webapi documentation typo around polltimeout
    pylint: numerous issues resolved, tracking latest versions
    qa: regression tests for bpftrace PMDA: check probes
    qa: pmdabcc pylint fixups
    qa: rework Redis PING-PONG checks
    qa/check: run tests under timeout(1) control if possible
    qa-summary: allow unified reporting from CI and QA Farm
    qa/admin/show-me-all &amp; qa/show-me: changes for CI integration
    qa/check: add support for "triaged" tests
    ci: send report to Slack when QA workflow is triggered manually
    ci: add required packages to enable bpf PMDA on CentOS Stream 9
    ci: run CodeQL daily and for each PR
    ci: run full QA on pull requests, save history
    ci: unset XDG_RUNTIME_DIR when invoking podman
- Refresh patches:
  * 0001-Install-libraries-without-exec-permission.patch
  * 0002-Remove-CPAN-rpaths.patch
  * 0003-Remove-runlevel-4-from-init-scripts.patch
  * 0010-services-switch-logutil-and-pmieutil-scripts-from-ty.patch
- Change dependency from openssl-devel &gt;= 1.1.1 to openssl-devel &gt;= 1.0.2p.
  Required for SLE-12, builds just fine.
- Disable 'pmda-infiniband' subpackage for SLE-12.
  Required so it builds cleanly.
- Introduce pmda-resctrl package, disabled for architectures other
  than x86_64.
- Change the architecture for various subpackages to 'noarch' as they
  contain no binaries, this lowers rpmlint's badness score
  substantially.
- Disable 'pmda-mssql', as it fails to build.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712145600">- Add fix for bsc#1222121 CVE-2024-3019:
  * 0011-disable-redis-proxying-by-default.patch</changelog>
  <changelog author="dmueller@suse.com" date="1713182400">- move pmlogger_daily into main package (bsc#1222815)
- fix compile flags conflusion</changelog>
  <changelog author="ddiss@suse.com" date="1726660800">- Fix symlink race; CVE-2024-45770; (bsc#1230552)
  + 0012-src-pmpost-pmpost.c-guard-against-possible-symlink-a.patch
- Fix pmstore corruption; CVE-2024-45769 (bsc#1230551)
  + 0013-src-libpcp-src-p_result.c-correct-buffer-over-run-te.patch
  + 0014-src-libpcp-src-p_result.c-hardening-of-the-result-PD.patch
  + 0015-src-libpcp-src-p_result.c-hardening-of-result-PDU-ev.patch
  + 0016-src-libpcp-src-p_result.c-rework-PDU-integrity-check.patch
  + 0017-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0018-src-libpcp-src-p_result.c-re-instate-__pmPrintResult.patch
  + 0019-src-libpcp-src-p_result.c-32-bit-fix-for-SUSE-Issue-.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742904000">- Enable custom pcp-selinux module (bsc#1237260)</changelog>
</package>
<package pkgid="8703441ca984c0dbc41809b16fcc36dc6772424a1a6dc65fbe5e4823c5b35cb9bd764b6ab11db25d6a55bb9718c2dee94d04342ac3ed5a92d0f1285f34ffa378" name="pcr-oracle-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.6.0" rel="slfo.1.1_1.1"/>
  <changelog author="glin@suse.com" date="1740139200">- Update the License tag to GPL-2.0-or-later to match the license
  declaration in the source files</changelog>
  <changelog author="glin@suse.com" date="1740571200">- Add fix-bsc1230316-predict-sbatlevelrt.patch to predict
  SbatLevelRT for the next boot (bsc#1230316)</changelog>
  <changelog author="glin@suse.com" date="1741348800">- Add fix-bsc1230316-predict-sbatlevelrt-sb-off.patch to fix the
  prediction of SbatLevelRT when Secure Boot is disabled
  (bsc#1230316)
- Add fix-bsc1230316-make-pcr4-hard-requirement.patch to make PCR4
  a hard requirement for SbatLevelRT prediction (bsc#1230316)</changelog>
  <changelog author="aplanas@suse.com" date="1743508800">- Update to 0.5.5
  + Merge of pending patches into the project
  + No new feature since last release
- Change source to the openSUSE project
- Remove patches (merged)
  + fix-bsc1230316-make-pcr4-hard-requirement.patch
  + fix-bsc1230316-predict-sbatlevelrt.patch
  + fix-bsc1230316-predict-sbatlevelrt-sb-off.patch
  + fix_efi_measure_and_shim.patch
  + fix-event-reshash-for-cryptouuid.patch
  + fix_grub_bls_cmdline.patch
  + fix_grub_bls_entry.patch
  + fix_loader_conf.patch
  + fix-testcase-empty-efi-variables.patch
  + support-ecc-srk.patch</changelog>
  <changelog author="glin@suse.com" date="1747137600">- Update to 0.5.6
  + rsa: adopt OpenSSL 3.0 API to generate RSA key
  + Drop the code for openSSL &lt; 3.0.0
  + Look for signing authority in alternative database
  (bsc#1241957)
- Bump the requirement of libopenssl-devel to 3.0.0</changelog>
  <changelog author="glin@suse.com" date="1748520000">- Update to 0.5.7
  + Support ppc64 events
  + Fix the string comparison for the alternative event
    (bsc#1241957)
- Add the new BuildRequires: libelf-devel and libfdisk-devel</changelog>
  <changelog author="glin@suse.com" date="1759838400">- Update to 0.5.8
  + Fix unsealing failure when using non default PCR bank
  + Extra checks for TPM self-test (bsc#1249079)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1769428800">- Enable build on %{arm} as it is required by sdbootutil</changelog>
  <changelog author="glin@suse.com" date="1770033600">- Update to 0.5.9
  + Fix event skipping due to double increment
  + Add '--persistent-srk' to make SRK persistent (bsc#1248516)</changelog>
  <changelog author="glin@suse.com" date="1773662400">- Update to 0.6.0
  + Initial support for CI tests
  + Fix additional arguments following the PCR index
  + CI: Shutdown the swtpm instance after tests
  + Fix stop event check crash for grub-command (bsc#1258119)
  + Print PCR values during signing or sealing</changelog>
</package>
<package pkgid="dd6ba52993e34ab30eff6067462779a7ac8597b64cac532d64c049182061eac3fff7a0489a0e15130a0cb0ce3a7c99640d8b0e3ac431e41a317d5796e6958fe1" name="pcr-oracle-debugsource" arch="aarch64">
  <version epoch="0" ver="0.6.0" rel="slfo.1.1_1.1"/>
  <changelog author="glin@suse.com" date="1740139200">- Update the License tag to GPL-2.0-or-later to match the license
  declaration in the source files</changelog>
  <changelog author="glin@suse.com" date="1740571200">- Add fix-bsc1230316-predict-sbatlevelrt.patch to predict
  SbatLevelRT for the next boot (bsc#1230316)</changelog>
  <changelog author="glin@suse.com" date="1741348800">- Add fix-bsc1230316-predict-sbatlevelrt-sb-off.patch to fix the
  prediction of SbatLevelRT when Secure Boot is disabled
  (bsc#1230316)
- Add fix-bsc1230316-make-pcr4-hard-requirement.patch to make PCR4
  a hard requirement for SbatLevelRT prediction (bsc#1230316)</changelog>
  <changelog author="aplanas@suse.com" date="1743508800">- Update to 0.5.5
  + Merge of pending patches into the project
  + No new feature since last release
- Change source to the openSUSE project
- Remove patches (merged)
  + fix-bsc1230316-make-pcr4-hard-requirement.patch
  + fix-bsc1230316-predict-sbatlevelrt.patch
  + fix-bsc1230316-predict-sbatlevelrt-sb-off.patch
  + fix_efi_measure_and_shim.patch
  + fix-event-reshash-for-cryptouuid.patch
  + fix_grub_bls_cmdline.patch
  + fix_grub_bls_entry.patch
  + fix_loader_conf.patch
  + fix-testcase-empty-efi-variables.patch
  + support-ecc-srk.patch</changelog>
  <changelog author="glin@suse.com" date="1747137600">- Update to 0.5.6
  + rsa: adopt OpenSSL 3.0 API to generate RSA key
  + Drop the code for openSSL &lt; 3.0.0
  + Look for signing authority in alternative database
  (bsc#1241957)
- Bump the requirement of libopenssl-devel to 3.0.0</changelog>
  <changelog author="glin@suse.com" date="1748520000">- Update to 0.5.7
  + Support ppc64 events
  + Fix the string comparison for the alternative event
    (bsc#1241957)
- Add the new BuildRequires: libelf-devel and libfdisk-devel</changelog>
  <changelog author="glin@suse.com" date="1759838400">- Update to 0.5.8
  + Fix unsealing failure when using non default PCR bank
  + Extra checks for TPM self-test (bsc#1249079)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1769428800">- Enable build on %{arm} as it is required by sdbootutil</changelog>
  <changelog author="glin@suse.com" date="1770033600">- Update to 0.5.9
  + Fix event skipping due to double increment
  + Add '--persistent-srk' to make SRK persistent (bsc#1248516)</changelog>
  <changelog author="glin@suse.com" date="1773662400">- Update to 0.6.0
  + Initial support for CI tests
  + Fix additional arguments following the PCR index
  + CI: Shutdown the swtpm instance after tests
  + Fix stop event check crash for grub-command (bsc#1258119)
  + Print PCR values during signing or sealing</changelog>
</package>
<package pkgid="72350b66e1f9f0b736584e03e7bb2094925b6858cf12a254d6db333219bfc95b5c8a81463235680ff28bc7929227796ced76d8ebd911a56816e2ec9f775e07cc" name="pcre-debugsource" arch="aarch64">
  <version epoch="0" ver="8.45" rel="slfo.1.1_1.4"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1523793600">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
  <changelog author="astieger@suse.com" date="1536062400">- pcre 8.42:
  * Fix outdated real_pcre definitions in pcre.h.in
  * pcregrep was truncating components of file names to 128
    characters when processing files with the -r option, and also
    truncating path names to 512 characters. There is now a check on
    the absolute length of full path file names, which may be up to
    2047 characters long
  * Using pcre_dfa_exec(), in UTF mode when UCP support was not
    defined, there was the possibility of a false positive match when
    caselessly matching a "not this character" item such as
    [^\x{1234}] (with a code point greater than 127) because the
    "other case" variable was not being initialized
  * Although pcre_jit_exec checks whether the pattern is compiled
    in a given mode, it was also expected that at least one mode is
    available. This is fixed and pcre_jit_exec returns with
    PCRE_ERROR_JIT_BADOPTION when the pattern is not optimized by JIT
    at all.
  * The line number and related variables such as match counts in
    pcregrep were all int variables, causing overflow when files with
    more than 2147483647 lines were processed (assuming 32-bit ints).
    They have all been changed to unsigned long ints.
  * If a backreference with a minimum repeat count of zero was first in
    a pattern, apart from assertions, an incorrect first matching
    character could be recorded. For example, for the pattern
    /(?=(a))\1?b/, "b" was incorrectly set as the first character of
    a match.
  * Fix out-of-bounds read for partial matching of /./ against an
    empty string when the newline type is CRLF.
  * When matching using the the REG_STARTEND feature of the POSIX
    API with a non-zero starting offset, unset capturing groups
    with lower numbers than a group that did capture something were
    not being correctly returned as "unset" (that is, with offset
    values of -1).
  * Matching the pattern /(*UTF)\C[^\v]+\x80/ against an 8-bit
    string containing multi-code-unit characters caused bad
    behaviour and possibly a crash. This issue was fixed for other
    kinds of repeat in release 8.37 by change 38, but repeating
    character classes were overlooked.
  * A small fix to pcregrep to avoid compiler warnings for
  - Wformat-overflow=2.
  * Added --enable-jit=auto support to configure.ac.
  * Fix misleading error message in configure.ac.</changelog>
  <changelog author="lauffer@ph-freiburg.de" date="1540468800">- pcreposix patch taken from debian. Solves cyrus-imapd issue #1731, too.
  pcre-8.42-pcreposix.patch</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="mpluskal@suse.com" date="1586952000">- Update to version 8.44:
  * This is a bug-fix release.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1613390400">- package testsuite in a separate RPM (boo#1182235)</changelog>
  <changelog author="schwab@suse.de" date="1613995200">- Copy pcre_jit_test only if jit is enabled</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 8.45:
  * This is the final PCRE1 release. A very few small issues have been fixed.</changelog>
  <changelog author="jsikes@suse.com" date="1652270400">- Added pcre-8.45-bsc1199232-unicode-property-matching.patch
  * bsc#1199232
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="2bdb31f343c039b6ffbfef42d10654602a18deda892dd02c383dd14c16391f484b30318738889653b63de7ae8e61976e101da1fbabe30aca081549896b0f6adc" name="pcre2-debugsource" arch="aarch64">
  <version epoch="0" ver="10.42" rel="slfo.1.1_1.4"/>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- pcre2 10.37:
  * removal of the actual POSIX names regcomp etc. from the POSIX
    wrapper library because these have caused issues for some
    applications, replacing pcre2-symbol-clash.patch
  * fix a hypothetical NULL dereference
  * fix two bugs related to over-large numbers so the behaviour is
    now the same as Perl
  * Fix propagation of \K back from the full pattern recursion
  * Restore single character repetition optimization in JIT</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1635076800">- pcre2 10.38:
  * Following Perl's lead, \K is now locked out in lookaround
    assertions by default, but an option is provided to re-enable
    the previous behaviour</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636113600">- pcre2 10.39:
  * Fix incorrect detection of alternatives in first character
    search in JIT
  * Update to Unicode 14.0.0</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1650110400">- pcre2 10.40:
  * Added support for Bidi_Class and a number of binary Unicode
    properties, including Bidi_Control.
  * A number of changes to script matching for \p and \P:
    speed improvements, add the syntax \p{script:xxx} and
    \p{script_extensions:xxx} (synonyms sc and scx), Changed
    \p{scriptname} from being the same as \p{sc:scriptname} to
    being the same as \p{scx:scriptname}, recognize the standard
    Unicode 4-letter abbreviations for script names, implement
    Unicode and Perl's "loose matching" rules on property names</changelog>
  <changelog author="pgajdos@suse.com" date="1651752000">- enable jit for s390x [bsc#1199196]</changelog>
  <changelog author="pgajdos@suse.com" date="1651752001">- do not enable jit-sealloc [bsc#1182864] [bsc#1199208]</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Fix the profiling call to be non-parallel again (fighting spec cleaner)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670328000">- pcre2 10.41:
  * pcre2grep behaves more like GNU grep for multiple patterns that
    match more than once on a line</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670846401">- pcre2 10.42:
  * Fix 10.41 regression that added the default definition of
    PCRE2_CALL_CONVENTION to pcre2posix.c instead of pcre2posix.h,
    which meant that programs including pcre2posix.h but not pcre2.h
    couldn't compile
  * Fix an intermittent JIT fault and minor issues</changelog>
</package>
<package pkgid="6b0281b320f0b3f06ba52b31c5d57e82c9ab1d0544054da38d4a37eb3ee421a781948f1faf081125d951c793f9bdaa884d22d633e58fc147f1f2ff93aa312314" name="pcsc-ccid-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="slfo.1.1_1.2"/>
  <changelog author="wr@rosenauer.org" date="1593259200">- Version 1.4.33
  * added support for
    Genesys Logic CCID Card Reader (idProduct: 0x0771)
    Swissbit Secure USB PU-50n SE/PE
    TOPPAN FORMS CO.,LTD TC63CUT021
  * Update PCSC submodule to get Unicode support
  * Some minor improvements</changelog>
  <changelog author="dimstar@opensuse.org" date="1597838400">- Rely on _udevrulesdir as provided by the distros.</changelog>
  <changelog author="axel.braun@gmx.de" date="1611489600">- Version 1.4.34
  * Add support for
    ACS ACR1252IMP Reader
    ACS CryptoMate EVO
    Aktiv Rutoken SCR 3001 Reader
    Avtor KP-375BLE
    Avtor SC Reader KP382
    BIT4ID mLector AIR DI V3
    BIT4ID miniLector AIR NFC v3
    Bit4id Digital-DNA Key (ProductID 0x2354)
    Canokeys Canokey
    DESKO GmbH IDenty chrom
    DESKO GmbH PENTA Scanner
    FT Biopass CCID
    FT Biopass FIDO2
    FT Biopass KB CCID
    FT Biopass KB FIDO CCID
    Feitian BLE CCID Dongle
    Feitian R805
    Feitian vR504 Contactless Reader
    GoTrust Idem Key
    Identiv uTrust 3720 Contactless Reader
    Sunrex HP USB Business Slim Smartcard CCID Keyboard
    sysmocom - s.f.m.c. GmbH sysmoOCTSIM
  * Fail if the requested protocol is not supported by reader
  * Disable USB suspend for the AlcorMicro AU9520 reader
  * Return "no smart card" if we get notified during a transmit
  * Minor improvements reported by Maksim Ivanov
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1627214400">- Version 1.4.35
  * Add support of
  - ArkSigner Connect2Sign
  - Circle CCR7115 ICC
  - Circle CCR7315
  - Circle CIR215 CL
  - Circle CIR215 PICC
  - Circle CIR315
  - Circle CIR315 (idProduct: 0x3100)
  - Circle CIR315 CL
  - Circle CIR315 Dual &amp; 1S
  - Circle CIR415 CL &amp; 1S
  - Circle Idaxis SecurePIV
  - DUALi DE-ABCM6 RFRW
  - Feitian R701
  - Generic EMV Smartcard Reader (0x058C:0x9590)
  - INMAX DWR18 HC
  - INMAX DWR18 HPC
  - Identiv Identiv uTrust 4711 F CL + SAM Reader
  - Identiv uTrust 3721 Contactless Reader
  - Infocrypt HWDSSL DEVICE
  - Infocrypt Token++ lite
  - MK Technology KeyPass D1
  - SONY Felica RC-S300/P
  - SONY Felica RC-S300/S
  - SONY Felica RC-S660/U
  - SYNNIX CL-2100R
  - SoloKeys Solo 2
  - Spyrus Inc PocketVault P-3X (idProduct: 0x3203)
  * parse: use "ICCD token" for ICCD tokens
  * Support 4 card slots with Feitian R502 C9
  * ccid_usb: ask for bNumDataRatesSupported data rates
  * Solve a performance issue with T=1 and CCID_CLASS_AUTO_PPS_PROP
  * Fix a possible buffer overflow in T0ProcACK
  * IFDHSetProtocolParameters: set IFSC/IFSD only for TPDU readers
  * CCID serial: Reset buffers on failed read
  * Fix yylex missing symbol
  * Gemalto pinpad: fix incorrect bEntryValidationCondition for
    SecurePINVerify and SecurePINModify
  * Fix bit4id miniLector-EVO pinpad support
  * The Kobil TriBank reader does NOT support extended APDU</changelog>
  <changelog author="axel.braun@gmx.de" date="1630324800">- Version 1.4.36
  * Add support of
  - Lenovo Lenovo Smartcard Wired Keyboard II
  - REINER SCT tanJack USB
  - SafeNet eToken 5110+ FIPS
  - SafeNet eToken 5300 C
  - jSolutions s.r.o. Multi SIM card reader 4/8
  * parse: fix check when bNumDataRatesSupported = 0</changelog>
  <changelog author="axel.braun@gmx.de" date="1643284800">- verson 1.5.0
  * Add support of
  - ACS ACR1281U
  - Circle CCR7125 ICC
  - Circle CIR125 ICC
  - Circle CIR125-DOT ICC
  - Circle CIR215 CL with iProduct 0x2100
  - Circle CIR315 DI
  - Circle CIR315 with idProduct: 0x0324
  - Circle CIR315 with idProduct: 0x7004
  - Circle CIR415 CL
  - Circle CIR515 ICC
  - Circle CIR615 CL
  - Circle CIR615 CL &amp; 1S
  - ELYCTIS CL reader
  - Nitrokey Nitrokey 3
  - Thales Shield M4 Reader
  * Add support of simultaneous slot access on multi slots readers
  * Use FeliCa instead of Felica on SONY request
  * Fix SafeNet eToken 5110 SC issue
  * Allow vendor control commands for Omnikey 5427 CK
  * always compute readTimeout to use a value greater than default 3 seconds
  * Check the bSeq value when receiving a CCID frame
  * Avoid logging errors when a reader is removed
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1668513600">- version 1.5.1
  * Add support of
  - Access IS ATR220 with idProduct: 0x0184
  - Alcor Link AK9567
  - Alcor Link AK9572
  - BLUTRONICS TAURUS NFC
  - CHERRY SmartTerminal ST-1144
  - CREATOR CRT-603(CZ1) CCR
  - Dexon Tecnologias Digitais LTDA DXToken
  - ESMART Reader ER433x ICC
  - ESMART Reader ER773x Dual &amp; 1S
  - Flight system consulting Incredist
  - Ledger Nano S
  - Ledger Nano S Plus
  - Ledger Nano SP
  - Ledger Nano X
  - SafeNet eToken Fusion
  - Sensyl SSC-NFC Reader
  * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
  * configure.ac: add --enable-strict option
  * Fix a problem with AUTO PPS readers and ATR convention inverse cards
  * examples/scardcontrol:
  - add support of 6A xx error codes
  - check WinSCard error early
  - parse wLcdLayout &amp; bEntryValidationCondition
  * macOS: log non sensitive strings as "%{public}s"
  * Some other minor improvements</changelog>
  <changelog author="code@bnavigator.de" date="1675339200">- version 1.5.2
  * Add support of
  - KAPELSE KAP-LINK
  - LDU LANDI
  - Sensyl SSC-HV Reader
  - TOKEN2 MFA NFC Reader
  - TOKEN2 Molto2
  - Thales RF Reader
  * Alcor Micro AU9560: Remove high speeds since they are not
    supported
  * Hack for AlcorMicro AU9560 and Acos-ID card
  * configure.ac: disable the use of --disable-usbdropdir</changelog>
  <changelog author="axel.braun@gmx.de" date="1698667200">- version 1.5.4
  * fix a regression introduced in 1.5.3
- version 1.5.3
  * Add support of
  - ACS ACR1552 1S CL Reader
  - ACS ACR1552 CL Reader
  - ACS ACR1581
  - ACS ACR40T ICC Reader
  - ACS ACR40U ICC Reader
  - ACS WalletMate 1S CL Reader
  - Aktiv Rutoken SCR 3101 NFC Reader
  - CIRIGHT ONE PASS U2F
  - Dexon Tecnologias Digitais LTDA eSmartDX
  - Excelsecu Card reader
  - GHI NC001
  - Identiv uTrust Token Flex
  - SpringCard M519 with idProduct: 0x6212
  - SpringCard M519 with idProduct: 0x621A
  - WCMi SD5931
  * parse: create output.bin file
  * udev: Disable USB-persist for CCID devices
  * configure: fail if flex is not found
  * Some other minor improvements</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700136000">- Fix build dependency - require zlib-devel instead of zlib</changelog>
</package>
<package pkgid="7af4a0f1c4303ba74bd11ecf63505603ce24ebf12ae105808e533d6b235a0810eb42d382bbe5bb78ca2233b77608ee0fd983f9d4ef7f418638552ae47e31756c" name="pcsc-ccid-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="slfo.1.1_1.2"/>
  <changelog author="wr@rosenauer.org" date="1593259200">- Version 1.4.33
  * added support for
    Genesys Logic CCID Card Reader (idProduct: 0x0771)
    Swissbit Secure USB PU-50n SE/PE
    TOPPAN FORMS CO.,LTD TC63CUT021
  * Update PCSC submodule to get Unicode support
  * Some minor improvements</changelog>
  <changelog author="dimstar@opensuse.org" date="1597838400">- Rely on _udevrulesdir as provided by the distros.</changelog>
  <changelog author="axel.braun@gmx.de" date="1611489600">- Version 1.4.34
  * Add support for
    ACS ACR1252IMP Reader
    ACS CryptoMate EVO
    Aktiv Rutoken SCR 3001 Reader
    Avtor KP-375BLE
    Avtor SC Reader KP382
    BIT4ID mLector AIR DI V3
    BIT4ID miniLector AIR NFC v3
    Bit4id Digital-DNA Key (ProductID 0x2354)
    Canokeys Canokey
    DESKO GmbH IDenty chrom
    DESKO GmbH PENTA Scanner
    FT Biopass CCID
    FT Biopass FIDO2
    FT Biopass KB CCID
    FT Biopass KB FIDO CCID
    Feitian BLE CCID Dongle
    Feitian R805
    Feitian vR504 Contactless Reader
    GoTrust Idem Key
    Identiv uTrust 3720 Contactless Reader
    Sunrex HP USB Business Slim Smartcard CCID Keyboard
    sysmocom - s.f.m.c. GmbH sysmoOCTSIM
  * Fail if the requested protocol is not supported by reader
  * Disable USB suspend for the AlcorMicro AU9520 reader
  * Return "no smart card" if we get notified during a transmit
  * Minor improvements reported by Maksim Ivanov
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1627214400">- Version 1.4.35
  * Add support of
  - ArkSigner Connect2Sign
  - Circle CCR7115 ICC
  - Circle CCR7315
  - Circle CIR215 CL
  - Circle CIR215 PICC
  - Circle CIR315
  - Circle CIR315 (idProduct: 0x3100)
  - Circle CIR315 CL
  - Circle CIR315 Dual &amp; 1S
  - Circle CIR415 CL &amp; 1S
  - Circle Idaxis SecurePIV
  - DUALi DE-ABCM6 RFRW
  - Feitian R701
  - Generic EMV Smartcard Reader (0x058C:0x9590)
  - INMAX DWR18 HC
  - INMAX DWR18 HPC
  - Identiv Identiv uTrust 4711 F CL + SAM Reader
  - Identiv uTrust 3721 Contactless Reader
  - Infocrypt HWDSSL DEVICE
  - Infocrypt Token++ lite
  - MK Technology KeyPass D1
  - SONY Felica RC-S300/P
  - SONY Felica RC-S300/S
  - SONY Felica RC-S660/U
  - SYNNIX CL-2100R
  - SoloKeys Solo 2
  - Spyrus Inc PocketVault P-3X (idProduct: 0x3203)
  * parse: use "ICCD token" for ICCD tokens
  * Support 4 card slots with Feitian R502 C9
  * ccid_usb: ask for bNumDataRatesSupported data rates
  * Solve a performance issue with T=1 and CCID_CLASS_AUTO_PPS_PROP
  * Fix a possible buffer overflow in T0ProcACK
  * IFDHSetProtocolParameters: set IFSC/IFSD only for TPDU readers
  * CCID serial: Reset buffers on failed read
  * Fix yylex missing symbol
  * Gemalto pinpad: fix incorrect bEntryValidationCondition for
    SecurePINVerify and SecurePINModify
  * Fix bit4id miniLector-EVO pinpad support
  * The Kobil TriBank reader does NOT support extended APDU</changelog>
  <changelog author="axel.braun@gmx.de" date="1630324800">- Version 1.4.36
  * Add support of
  - Lenovo Lenovo Smartcard Wired Keyboard II
  - REINER SCT tanJack USB
  - SafeNet eToken 5110+ FIPS
  - SafeNet eToken 5300 C
  - jSolutions s.r.o. Multi SIM card reader 4/8
  * parse: fix check when bNumDataRatesSupported = 0</changelog>
  <changelog author="axel.braun@gmx.de" date="1643284800">- verson 1.5.0
  * Add support of
  - ACS ACR1281U
  - Circle CCR7125 ICC
  - Circle CIR125 ICC
  - Circle CIR125-DOT ICC
  - Circle CIR215 CL with iProduct 0x2100
  - Circle CIR315 DI
  - Circle CIR315 with idProduct: 0x0324
  - Circle CIR315 with idProduct: 0x7004
  - Circle CIR415 CL
  - Circle CIR515 ICC
  - Circle CIR615 CL
  - Circle CIR615 CL &amp; 1S
  - ELYCTIS CL reader
  - Nitrokey Nitrokey 3
  - Thales Shield M4 Reader
  * Add support of simultaneous slot access on multi slots readers
  * Use FeliCa instead of Felica on SONY request
  * Fix SafeNet eToken 5110 SC issue
  * Allow vendor control commands for Omnikey 5427 CK
  * always compute readTimeout to use a value greater than default 3 seconds
  * Check the bSeq value when receiving a CCID frame
  * Avoid logging errors when a reader is removed
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1668513600">- version 1.5.1
  * Add support of
  - Access IS ATR220 with idProduct: 0x0184
  - Alcor Link AK9567
  - Alcor Link AK9572
  - BLUTRONICS TAURUS NFC
  - CHERRY SmartTerminal ST-1144
  - CREATOR CRT-603(CZ1) CCR
  - Dexon Tecnologias Digitais LTDA DXToken
  - ESMART Reader ER433x ICC
  - ESMART Reader ER773x Dual &amp; 1S
  - Flight system consulting Incredist
  - Ledger Nano S
  - Ledger Nano S Plus
  - Ledger Nano SP
  - Ledger Nano X
  - SafeNet eToken Fusion
  - Sensyl SSC-NFC Reader
  * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
  * configure.ac: add --enable-strict option
  * Fix a problem with AUTO PPS readers and ATR convention inverse cards
  * examples/scardcontrol:
  - add support of 6A xx error codes
  - check WinSCard error early
  - parse wLcdLayout &amp; bEntryValidationCondition
  * macOS: log non sensitive strings as "%{public}s"
  * Some other minor improvements</changelog>
  <changelog author="code@bnavigator.de" date="1675339200">- version 1.5.2
  * Add support of
  - KAPELSE KAP-LINK
  - LDU LANDI
  - Sensyl SSC-HV Reader
  - TOKEN2 MFA NFC Reader
  - TOKEN2 Molto2
  - Thales RF Reader
  * Alcor Micro AU9560: Remove high speeds since they are not
    supported
  * Hack for AlcorMicro AU9560 and Acos-ID card
  * configure.ac: disable the use of --disable-usbdropdir</changelog>
  <changelog author="axel.braun@gmx.de" date="1698667200">- version 1.5.4
  * fix a regression introduced in 1.5.3
- version 1.5.3
  * Add support of
  - ACS ACR1552 1S CL Reader
  - ACS ACR1552 CL Reader
  - ACS ACR1581
  - ACS ACR40T ICC Reader
  - ACS ACR40U ICC Reader
  - ACS WalletMate 1S CL Reader
  - Aktiv Rutoken SCR 3101 NFC Reader
  - CIRIGHT ONE PASS U2F
  - Dexon Tecnologias Digitais LTDA eSmartDX
  - Excelsecu Card reader
  - GHI NC001
  - Identiv uTrust Token Flex
  - SpringCard M519 with idProduct: 0x6212
  - SpringCard M519 with idProduct: 0x621A
  - WCMi SD5931
  * parse: create output.bin file
  * udev: Disable USB-persist for CCID devices
  * configure: fail if flex is not found
  * Some other minor improvements</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700136000">- Fix build dependency - require zlib-devel instead of zlib</changelog>
</package>
<package pkgid="3005a791a5fa9cc6981c84d0a74a0b9a8d1e93b805cd80aff35e5a860322f89d753e592a19e4ea08b5ae252a96eb1a0e30efe3422cbcfd0d7b857070dd66f206" name="pcsc-lite-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.1" rel="slfo.1.1_1.3"/>
  <changelog author="jsegitz@suse.com" date="1634558400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_pcscd.service.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636804800">- Change to systemd-sysusers</changelog>
  <changelog author="axel.braun@gmx.de" date="1638619200">- version 1.9.5
  * pcscd: autoexit even if no client connects
  * Fix variable substitution in systemd units
  * fix potential race conditions with powerState handling
  * Add and use tag TAG_IFD_DEVICE_REMOVED
  * UnitaryTests: port code to Python 3</changelog>
  <changelog author="axel.braun@gmx.de" date="1652356800">- version 1.9.6
  * do not fail reader removal in some specific cases (USB/Thunderbolt port)
  * improve documentation regarding /etc/reader.conf.d/
  * SCardGetStatusChange: speedup the case DISABLE_AUTO_POWER_ON
  * configure:
  . add --disable-strict option
    By default the compiler arguments are now:
  - Wall -Wextra -Wno-unused-parameter -Werror ${CFLAGS}
  . fail if flex is not found
  * fix different data races
  * pcscdaemon: -v displays internal constants values:
    MAX_READERNAME &amp; PCSCLITE_MAX_READERS_CONTEXTS
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1652443200">- version 1.9.7
  * disable strict compilation by default
  * fix 3 warnings</changelog>
  <changelog author="axel.braun@gmx.de" date="1655035200">- version 1.9.8
  * Install install_spy.sh &amp; uninstall_spy.sh scripts in docdir
  * SCardTransmit(): do not fail if receive buffer is "too large"
  * SCardControl(): do not fail if receive buffer is "too large"
  * fix some memory leaks on shutdown
  * use a better random number generator
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1662897600">- version 1.9.9
  * SCardEstablishContext() may return SCARD_W_SECURITY_VIOLATION if
    refused by Polkit
  * Fix SCardReleaseContext() failure on orphan handles
  * Fix SCardDisconnect() on orphan handle
  * pcsc-spy: log the pioSendPci &amp; pioRecvPci SCardTransmit() parameters
  * Improve the log from pcscd: log the return code in text instead of hex
  * Some other minor improvements</changelog>
  <changelog author="meissner@suse.com" date="1677931200">- add a 32 bit -devel package for use by wine development with wine 8.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1686312000">- Version 2.0.0
  * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
  * Add '--disable-polkit' option
  * Reset eventCounter when a reader is removed
  * Add "polkit" in "pcscd -v" output if enabled
  * Doxygen: document SCARD_E_INVALID_VALUE for some functions
  * use secure_getenv(3) if available
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1700913600">- version 2.0.1
  * SCardConnect(): return SCARD_W_SECURITY_VIOLATION when needed (polkit)
  * SCardCancel(): return SCARD_S_SUCCESS even if the client already finished
  * polkit is enabled by default
  * libpcscspy: fix a crash with NULL pointers
  * Doxygen: fix SCardBeginTransaction() documentation
  * fix pcscd internal thread safety issues (clang -fsanitize=thread)
  * Some other minor improvements</changelog>
</package>
<package pkgid="2f5cf17cd9918736289a03872318afedfe71dcb066b1081b8239d6935d8e9861e7828381aedc7e4525fade0b1c2cdd5c7f19d27b6ffd5a190afb0e70a0e7b042" name="pcsc-lite-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.1" rel="slfo.1.1_1.3"/>
  <changelog author="jsegitz@suse.com" date="1634558400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_pcscd.service.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636804800">- Change to systemd-sysusers</changelog>
  <changelog author="axel.braun@gmx.de" date="1638619200">- version 1.9.5
  * pcscd: autoexit even if no client connects
  * Fix variable substitution in systemd units
  * fix potential race conditions with powerState handling
  * Add and use tag TAG_IFD_DEVICE_REMOVED
  * UnitaryTests: port code to Python 3</changelog>
  <changelog author="axel.braun@gmx.de" date="1652356800">- version 1.9.6
  * do not fail reader removal in some specific cases (USB/Thunderbolt port)
  * improve documentation regarding /etc/reader.conf.d/
  * SCardGetStatusChange: speedup the case DISABLE_AUTO_POWER_ON
  * configure:
  . add --disable-strict option
    By default the compiler arguments are now:
  - Wall -Wextra -Wno-unused-parameter -Werror ${CFLAGS}
  . fail if flex is not found
  * fix different data races
  * pcscdaemon: -v displays internal constants values:
    MAX_READERNAME &amp; PCSCLITE_MAX_READERS_CONTEXTS
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1652443200">- version 1.9.7
  * disable strict compilation by default
  * fix 3 warnings</changelog>
  <changelog author="axel.braun@gmx.de" date="1655035200">- version 1.9.8
  * Install install_spy.sh &amp; uninstall_spy.sh scripts in docdir
  * SCardTransmit(): do not fail if receive buffer is "too large"
  * SCardControl(): do not fail if receive buffer is "too large"
  * fix some memory leaks on shutdown
  * use a better random number generator
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1662897600">- version 1.9.9
  * SCardEstablishContext() may return SCARD_W_SECURITY_VIOLATION if
    refused by Polkit
  * Fix SCardReleaseContext() failure on orphan handles
  * Fix SCardDisconnect() on orphan handle
  * pcsc-spy: log the pioSendPci &amp; pioRecvPci SCardTransmit() parameters
  * Improve the log from pcscd: log the return code in text instead of hex
  * Some other minor improvements</changelog>
  <changelog author="meissner@suse.com" date="1677931200">- add a 32 bit -devel package for use by wine development with wine 8.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1686312000">- Version 2.0.0
  * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
  * Add '--disable-polkit' option
  * Reset eventCounter when a reader is removed
  * Add "polkit" in "pcscd -v" output if enabled
  * Doxygen: document SCARD_E_INVALID_VALUE for some functions
  * use secure_getenv(3) if available
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1700913600">- version 2.0.1
  * SCardConnect(): return SCARD_W_SECURITY_VIOLATION when needed (polkit)
  * SCardCancel(): return SCARD_S_SUCCESS even if the client already finished
  * polkit is enabled by default
  * libpcscspy: fix a crash with NULL pointers
  * Doxygen: fix SCardBeginTransaction() documentation
  * fix pcscd internal thread safety issues (clang -fsanitize=thread)
  * Some other minor improvements</changelog>
</package>
<package pkgid="32e4607e9549bb5e5c6885dc3e16467674d8e81416c4f9ecbdad719738a81ec077daabc0b4c9f165593cf4254b8f1ef86c11ddcafda09b31c5f377921a95913e" name="pcsc-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="slfo.1.1_1.2"/>
  <changelog author="wr@rosenauer.org" date="1524312000">- update to 1.5.3
  * 253 new ATRs
  * pcsc_scan
  - add -v argument (default) for verbose
  - add -q argument for quiet
  - add -r argument to display the reader list
  - allow to use Control-C to break execution</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 1.5.4:
  * Port to gtk+-3.
  * gscriptor: save and restore the window size, remove
    unimplemented Logo.
  * many new ATRs
  * warning fixes</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Update summary.</changelog>
  <changelog author="wr@rosenauer.org" date="1566216000">- added missing dependencies for gscriptor (boo#1145779)</changelog>
  <changelog author="mardnh@gmx.de" date="1594123200">- Update to version 1.5.7
  * 116 new ATRs
  * ATR_analysis: Update URL of the online parser
- Update to version 1.5.6
  * 62 new ATRs
  * pcsc_scan: better support of Windows
- Update to version 1.5.5
  * 353 new ATRs
  * scriptor: add -u option to make stdout unbuffered</changelog>
  <changelog author="mardnh@gmx.de" date="1636372800">- Update to version 1.5.8
  * 360 new ATRs
  * ATR_analysis:
    + fix TB2 parsing error
    + misc spelling fixes
  * pcsc_scan:
    + add maxtime option -t
    + add the option -c to list cards only once
    + no spinner in quiet mode (-q)
    + turn off colour if redirected output
    + Exit if no reader is found and -c or -r is used
- Run spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1643544000">- Update to version 1.6.0
  * 48 new ATRs
  * pcsc_scan:
  + drastically reduce the number of SCardGetStatusChange() calls
  + faster spinning animation</changelog>
  <changelog author="alarrosa@suse.com" date="1666267200">- Replace the requirement for perl(Gtk2) with perl(Gtk3) which is
  what's actually used.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 1.6.1:
  * Fix Hungarian eID URL
  * New ATR for OTP Bank Mastercard
  * new ATRs
  * pcsc_scan: add "wsvt25" as a color terminal</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to 1.6.2:
  * ATR_analysis: URL updates
  * new ATRs
  * LICENCE file now packaged</changelog>
</package>
<package pkgid="7b513151b64c659f184b39aec900206dfb9006db154a7b252ba8cb4d1895c867db5c7b9aa2a6309d70d5d1a4fb00864d41ffacb2a4757f549dff785e8c817264" name="pcsc-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="slfo.1.1_1.2"/>
  <changelog author="wr@rosenauer.org" date="1524312000">- update to 1.5.3
  * 253 new ATRs
  * pcsc_scan
  - add -v argument (default) for verbose
  - add -q argument for quiet
  - add -r argument to display the reader list
  - allow to use Control-C to break execution</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 1.5.4:
  * Port to gtk+-3.
  * gscriptor: save and restore the window size, remove
    unimplemented Logo.
  * many new ATRs
  * warning fixes</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Update summary.</changelog>
  <changelog author="wr@rosenauer.org" date="1566216000">- added missing dependencies for gscriptor (boo#1145779)</changelog>
  <changelog author="mardnh@gmx.de" date="1594123200">- Update to version 1.5.7
  * 116 new ATRs
  * ATR_analysis: Update URL of the online parser
- Update to version 1.5.6
  * 62 new ATRs
  * pcsc_scan: better support of Windows
- Update to version 1.5.5
  * 353 new ATRs
  * scriptor: add -u option to make stdout unbuffered</changelog>
  <changelog author="mardnh@gmx.de" date="1636372800">- Update to version 1.5.8
  * 360 new ATRs
  * ATR_analysis:
    + fix TB2 parsing error
    + misc spelling fixes
  * pcsc_scan:
    + add maxtime option -t
    + add the option -c to list cards only once
    + no spinner in quiet mode (-q)
    + turn off colour if redirected output
    + Exit if no reader is found and -c or -r is used
- Run spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1643544000">- Update to version 1.6.0
  * 48 new ATRs
  * pcsc_scan:
  + drastically reduce the number of SCardGetStatusChange() calls
  + faster spinning animation</changelog>
  <changelog author="alarrosa@suse.com" date="1666267200">- Replace the requirement for perl(Gtk2) with perl(Gtk3) which is
  what's actually used.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 1.6.1:
  * Fix Hungarian eID URL
  * New ATR for OTP Bank Mastercard
  * new ATRs
  * pcsc_scan: add "wsvt25" as a color terminal</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to 1.6.2:
  * ATR_analysis: URL updates
  * new ATRs
  * LICENCE file now packaged</changelog>
</package>
<package pkgid="0b0ec170b08228b40999ec2b4466451e446ba4c05a8344592aa6bdad4856e57b8466d27298e7d289dbe992089aa64dd7c22c43c69c72e1c16da2f9477c07a39d" name="perl-Cairo-GObject-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.005" rel="slfo.1.1_1.2"/>
  <changelog author="malcolmlewis@opensuse.org" date="1546862400">- Fix failing build, add build requires on cairo-gobject.
- Update LICENSE location.</changelog>
  <changelog author="coolo@suse.com" date="1566993600">- updated to 1.005
  see /usr/share/doc/packages/perl-Cairo-GObject/</changelog>
  <changelog author="tina.mueller@suse.com" date="1566993601">- Add BuildRequires:  pkgconfig(cairo-gobject)</changelog>
  <changelog author="tina.mueller@suse.com" date="1567080000">- Add license to cpanspec.yaml and spec</changelog>
</package>
<package pkgid="f4fad46596a9e00c92ea231aa4553fb0e5c7036d48e4fe769a5aaac47e9e8a453476c0435fc5053759c18b2a4dd7d02f458a8989e353c604f3e6988f6dedaa58" name="perl-Cairo-GObject-debugsource" arch="aarch64">
  <version epoch="0" ver="1.005" rel="slfo.1.1_1.2"/>
  <changelog author="malcolmlewis@opensuse.org" date="1546862400">- Fix failing build, add build requires on cairo-gobject.
- Update LICENSE location.</changelog>
  <changelog author="coolo@suse.com" date="1566993600">- updated to 1.005
  see /usr/share/doc/packages/perl-Cairo-GObject/</changelog>
  <changelog author="tina.mueller@suse.com" date="1566993601">- Add BuildRequires:  pkgconfig(cairo-gobject)</changelog>
  <changelog author="tina.mueller@suse.com" date="1567080000">- Add license to cpanspec.yaml and spec</changelog>
</package>
<package pkgid="9229c2ccd3de9be5892b50938193b045c0cf6032359387fb951e22883d45769b3a48c552d2f85681340f6d91b4d766df2c82d524c8661cb6b41082ed15e1c1ec" name="perl-Cairo-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.109" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@suse.com" date="1380888000">- updated to 1.104
  * Avoid misusing the macro PL_na, thus preventing potential issues when Cairo
  is used in conjunction with certain XS modules, among them XML::Parser and
  String::Approx.</changelog>
  <changelog author="coolo@suse.com" date="1440763200">- updated to 1.105
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="bwiedemann@suse.com" date="1440763201">- BuildRequire pkgconfig(cairo)</changelog>
  <changelog author="coolo@suse.com" date="1443787200">- updated to 1.106
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="dimstar@opensuse.org" date="1464868800">- Ignore make check failures for now (equal to other distros).
  Make tests fails since the upgrade to cairo 1.15.2, but now
  blocks a proper rebuild with perl 5.24. The failure is reported
  at fdo#96311.</changelog>
  <changelog author="timueller+perl@suse.de" date="1570536000">- updated to 1.107
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1570536001">- Add license LGPL-2.1-or-later to cpanspec.yml as it couldn't be detected
  automatically</changelog>
  <changelog author="timueller+perl@suse.de" date="1606305600">- updated to 1.108
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1606824000">- Add some files to skip_doc</changelog>
  <changelog author="timueller+perl@suse.de" date="1611230400">- updated to 1.109
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
</package>
<package pkgid="259e0d39fb66ef359c8807719d7e60c9441e713ce67d70b2f8db2a01a06adb637bdc1d21d275f099335a97a83778cb6deeaf3d376bae5c9539c884490a21cd2f" name="perl-Cairo-debugsource" arch="aarch64">
  <version epoch="0" ver="1.109" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@suse.com" date="1380888000">- updated to 1.104
  * Avoid misusing the macro PL_na, thus preventing potential issues when Cairo
  is used in conjunction with certain XS modules, among them XML::Parser and
  String::Approx.</changelog>
  <changelog author="coolo@suse.com" date="1440763200">- updated to 1.105
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="bwiedemann@suse.com" date="1440763201">- BuildRequire pkgconfig(cairo)</changelog>
  <changelog author="coolo@suse.com" date="1443787200">- updated to 1.106
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="dimstar@opensuse.org" date="1464868800">- Ignore make check failures for now (equal to other distros).
  Make tests fails since the upgrade to cairo 1.15.2, but now
  blocks a proper rebuild with perl 5.24. The failure is reported
  at fdo#96311.</changelog>
  <changelog author="timueller+perl@suse.de" date="1570536000">- updated to 1.107
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1570536001">- Add license LGPL-2.1-or-later to cpanspec.yml as it couldn't be detected
  automatically</changelog>
  <changelog author="timueller+perl@suse.de" date="1606305600">- updated to 1.108
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1606824000">- Add some files to skip_doc</changelog>
  <changelog author="timueller+perl@suse.de" date="1611230400">- updated to 1.109
  see /usr/share/doc/packages/perl-Cairo/ChangeLog.pre-git</changelog>
</package>
<package pkgid="756785309b8dd1414793ecd0246525bea222b82ac3c7af1c19907ac9520394dc179cc577b1c9b06b14b841f1f013f5b27e97ea24e70c1494db1b7c3dc89b6db2" name="perl-Glib-Object-Introspection-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.51.0" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@suse.com" date="1527076800">- updated to 0.045
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="coolo@suse.com" date="1538049600">- updated to 0.046
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="opensuse@dstoecker.de" date="1539000000">- Fix autogenerated changes</changelog>
  <changelog author="coolo@suse.com" date="1554292800">- updated to 0.047
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="tina.mueller@suse.com" date="1566907200">- Add BuildRequires to cpanspec.yaml and spec</changelog>
  <changelog author="coolo@suse.com" date="1566993600">- add license to cpanspec.yaml</changelog>
  <changelog author="timueller+perl@suse.de" date="1576065600">- updated to 0.048
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="timueller+perl@suse.de" date="1603368000">- updated to 0.049
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="timueller+perl@suse.de" date="1680004800">- updated to 0.050
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="timueller+perl@suse.de" date="1693915200">- updated to 0.051
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
</package>
<package pkgid="fa3ac369d11bb397915ecec1b2c362847b2b77b1aa4fd2738486b4393dafde9c55037ec129d956706660bc7f7bb20c1a517d63ea8a3e4d2135f76c459d11ee6b" name="perl-Glib-Object-Introspection-debugsource" arch="aarch64">
  <version epoch="0" ver="0.51.0" rel="slfo.1.1_1.2"/>
  <changelog author="coolo@suse.com" date="1527076800">- updated to 0.045
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="coolo@suse.com" date="1538049600">- updated to 0.046
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="opensuse@dstoecker.de" date="1539000000">- Fix autogenerated changes</changelog>
  <changelog author="coolo@suse.com" date="1554292800">- updated to 0.047
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="tina.mueller@suse.com" date="1566907200">- Add BuildRequires to cpanspec.yaml and spec</changelog>
  <changelog author="coolo@suse.com" date="1566993600">- add license to cpanspec.yaml</changelog>
  <changelog author="timueller+perl@suse.de" date="1576065600">- updated to 0.048
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="timueller+perl@suse.de" date="1603368000">- updated to 0.049
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="timueller+perl@suse.de" date="1680004800">- updated to 0.050
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
  <changelog author="timueller+perl@suse.de" date="1693915200">- updated to 0.051
  see /usr/share/doc/packages/perl-Glib-Object-Introspection/</changelog>
</package>
<package pkgid="7a8fd2aeaa6740f1e8465864444f68e049ef41967ad17ed36dc5fbe67504bbf334ac25827fc8e9159834f516147b2710f89e469a068ad9d231c7d53f6152f769" name="perl-Glib-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3294" rel="slfo.1.1_1.2"/>
  <changelog author="opensuse@dstoecker.de" date="1539000000">- Fix autogenerated changes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552651200">- Add perl-Glib-1.328-glib2.59-comment-linebreaks.patch: Fix build
  with new glib2. Patch from fedora.</changelog>
  <changelog author="coolo@suse.com" date="1554292800">- updated to 1.329
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1566907200">- Add patch and glib2-devel dependency to cpanspec.yml</changelog>
  <changelog author="coolo@suse.com" date="1566993600">- updated to 1.3291
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566993601">- Removed patch fixed upstream:
  * perl-Glib-1.328-glib2.59-comment-linebreaks.patch</changelog>
  <changelog author="timueller+perl@suse.de" date="1582113600">- updated to 1.3292
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1582200000">- Add manual license LGPL-2.1-or-later to cpanspec.yml</changelog>
  <changelog author="timueller+perl@suse.de" date="1591531200">- updated to 1.3293
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="timueller+perl@suse.de" date="1693915200">- updated to 1.3294
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
</package>
<package pkgid="91a30e4ae0c43b3ec9cd5f1b9e481502daea0f1688e53bc600379b8fb96cef774ce0b1f61326d9fb526ee8751ece5537b4641978f672ab4b96a14e6496aa7d6f" name="perl-Glib-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3294" rel="slfo.1.1_1.2"/>
  <changelog author="opensuse@dstoecker.de" date="1539000000">- Fix autogenerated changes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552651200">- Add perl-Glib-1.328-glib2.59-comment-linebreaks.patch: Fix build
  with new glib2. Patch from fedora.</changelog>
  <changelog author="coolo@suse.com" date="1554292800">- updated to 1.329
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1566907200">- Add patch and glib2-devel dependency to cpanspec.yml</changelog>
  <changelog author="coolo@suse.com" date="1566993600">- updated to 1.3291
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566993601">- Removed patch fixed upstream:
  * perl-Glib-1.328-glib2.59-comment-linebreaks.patch</changelog>
  <changelog author="timueller+perl@suse.de" date="1582113600">- updated to 1.3292
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="tina.mueller@suse.com" date="1582200000">- Add manual license LGPL-2.1-or-later to cpanspec.yml</changelog>
  <changelog author="timueller+perl@suse.de" date="1591531200">- updated to 1.3293
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
  <changelog author="timueller+perl@suse.de" date="1693915200">- updated to 1.3294
  see /usr/share/doc/packages/perl-Glib/ChangeLog.pre-git</changelog>
</package>
<package pkgid="cc949a7eb9669002c8734388360a670220be381534e76ef1a75700a54b0402c207d08427ad9b21cd76308e04c876a63620329ee1611be634566243a923e4d5aa" name="perl-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.38.2" rel="slfo.1.1_2.1"/>
  <changelog author="mls@suse.de" date="1655985600">- Update to 5.36.0
  * the signatures and isa features are no longer experimental and
    part of the v5.36 feature bundle
  * the v5.36 bundle also enables warnings
  * new '-g' command line flag (alias for -0777)
  * support for unicode 14.0
  * regex sets are no longer considered experimental
  * experimental iterating over multiple values at a time
  * experimental new builtin module
  * experimental defer blocks
  * try/catch can now have a finally block
  * experimental non-ASCII delimiters for quote-like operators
  * a physically empty sort is now a compile-time error
- Rebase perl-5.34.0.dif to perl-5.36.0.diff
- Refresh perl-5.18.2-overflow.diff</changelog>
  <changelog author="adrian@suse.de" date="1657886400">- move builtin.pm to perl-base as File::Copy relies on it since last
  update.
  This fixes execution of builtime source services in OBS.</changelog>
  <changelog author="mls@suse.de" date="1658750400">- fix build on ppc
  * updated patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1673438400">- Replace usage of deprecated fgrep with grep -F.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1685620800">- update to perl 5.36.1 - maintenance release
  * Module::CoreList has been upgraded from version 5.20220520 to 5.20230423.
  * Fixed: An eval() as the last statement in a regex code block could trigger
    an interpreter panic
  * An eval EXPR referring to a lexical sub defined in grandparent scope no
    longer produces an assertion failures.
  * Writing to a magic variables associated with the selected output handle,
    $^, $~, $=, $- and $%, no longer crashes perl if the IO object has been
    cleared from the selected output handle.</changelog>
  <changelog author="mls@suse.de" date="1689768000">- Update to perl 5.38.0
  * new "class" feature
  * support for unicode 15.0
  * defined-or and logical-or assignment default
    expressions in signatures
  * optimistic eval in patterns
  * readline() no longer clears the stream error and eof flags
  * "INIT" blocks no longer run after an "exit()" in "BEGIN"
  * utf8::upgrade() keeps the undef value
  * deprecation of ' as package name separator
  * deprecation of the smart match operator
  * PERL_USE_SAFE_PUTENV is now the default
- Rebase perl-5.36.0.diff to perl-5.38.0.diff
- Refresh perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="ngompa@opensuse.org" date="1695297600">- Use 64-bit integers on all platforms</changelog>
  <changelog author="mls@suse.de" date="1701086400">- Update to perl 5.38.2
  * fixes [CVE-2023-47038] Write past buffer end via illegal
    user-defined Unicode property [bnc#1217084]
  * fixes [CVE-2023-47039] Perl for Windows binary hijacking
    vulnerability [bnc#1217085]</changelog>
  <changelog author="mls@suse.de" date="1744372800">- fix heap buffer overflow with tr// [bsc#1241083] [CVE-2024-56406]
  new patch: perl-pmtrans.diff</changelog>
  <changelog author="mls@suse.de" date="1749124800">- do not change the current directory when cloning an open
  directory handle [bnc#1244079] [CVE-2025-40909]
  new patch: perl-dirdup.diff</changelog>
</package>
<package pkgid="b6623fcb2bf8999c3db66a1a4ba64f8ebe0338e8da50799fdf61565a5b3479bb41bc96fafba1f04effc496ed9c6989643cee4919f814c988cda72c46ad5ae213" name="perl-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.38.2" rel="slfo.1.1_2.1"/>
  <changelog author="mls@suse.de" date="1655985600">- Update to 5.36.0
  * the signatures and isa features are no longer experimental and
    part of the v5.36 feature bundle
  * the v5.36 bundle also enables warnings
  * new '-g' command line flag (alias for -0777)
  * support for unicode 14.0
  * regex sets are no longer considered experimental
  * experimental iterating over multiple values at a time
  * experimental new builtin module
  * experimental defer blocks
  * try/catch can now have a finally block
  * experimental non-ASCII delimiters for quote-like operators
  * a physically empty sort is now a compile-time error
- Rebase perl-5.34.0.dif to perl-5.36.0.diff
- Refresh perl-5.18.2-overflow.diff</changelog>
  <changelog author="adrian@suse.de" date="1657886400">- move builtin.pm to perl-base as File::Copy relies on it since last
  update.
  This fixes execution of builtime source services in OBS.</changelog>
  <changelog author="mls@suse.de" date="1658750400">- fix build on ppc
  * updated patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1673438400">- Replace usage of deprecated fgrep with grep -F.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1685620800">- update to perl 5.36.1 - maintenance release
  * Module::CoreList has been upgraded from version 5.20220520 to 5.20230423.
  * Fixed: An eval() as the last statement in a regex code block could trigger
    an interpreter panic
  * An eval EXPR referring to a lexical sub defined in grandparent scope no
    longer produces an assertion failures.
  * Writing to a magic variables associated with the selected output handle,
    $^, $~, $=, $- and $%, no longer crashes perl if the IO object has been
    cleared from the selected output handle.</changelog>
  <changelog author="mls@suse.de" date="1689768000">- Update to perl 5.38.0
  * new "class" feature
  * support for unicode 15.0
  * defined-or and logical-or assignment default
    expressions in signatures
  * optimistic eval in patterns
  * readline() no longer clears the stream error and eof flags
  * "INIT" blocks no longer run after an "exit()" in "BEGIN"
  * utf8::upgrade() keeps the undef value
  * deprecation of ' as package name separator
  * deprecation of the smart match operator
  * PERL_USE_SAFE_PUTENV is now the default
- Rebase perl-5.36.0.diff to perl-5.38.0.diff
- Refresh perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="ngompa@opensuse.org" date="1695297600">- Use 64-bit integers on all platforms</changelog>
  <changelog author="mls@suse.de" date="1701086400">- Update to perl 5.38.2
  * fixes [CVE-2023-47038] Write past buffer end via illegal
    user-defined Unicode property [bnc#1217084]
  * fixes [CVE-2023-47039] Perl for Windows binary hijacking
    vulnerability [bnc#1217085]</changelog>
  <changelog author="mls@suse.de" date="1744372800">- fix heap buffer overflow with tr// [bsc#1241083] [CVE-2024-56406]
  new patch: perl-pmtrans.diff</changelog>
  <changelog author="mls@suse.de" date="1749124800">- do not change the current directory when cloning an open
  directory handle [bnc#1244079] [CVE-2025-40909]
  new patch: perl-dirdup.diff</changelog>
</package>
<package pkgid="e67b6402f1a0d28273007320bda9e212dbba3e2f0739bb5d4ab0e9092e408a554a7999888720242ef67445da5157f65148b44c85cbba1e43e960ebe2e6c7d525" name="perl-debugsource" arch="aarch64">
  <version epoch="0" ver="5.38.2" rel="slfo.1.1_2.1"/>
  <changelog author="mls@suse.de" date="1655985600">- Update to 5.36.0
  * the signatures and isa features are no longer experimental and
    part of the v5.36 feature bundle
  * the v5.36 bundle also enables warnings
  * new '-g' command line flag (alias for -0777)
  * support for unicode 14.0
  * regex sets are no longer considered experimental
  * experimental iterating over multiple values at a time
  * experimental new builtin module
  * experimental defer blocks
  * try/catch can now have a finally block
  * experimental non-ASCII delimiters for quote-like operators
  * a physically empty sort is now a compile-time error
- Rebase perl-5.34.0.dif to perl-5.36.0.diff
- Refresh perl-5.18.2-overflow.diff</changelog>
  <changelog author="adrian@suse.de" date="1657886400">- move builtin.pm to perl-base as File::Copy relies on it since last
  update.
  This fixes execution of builtime source services in OBS.</changelog>
  <changelog author="mls@suse.de" date="1658750400">- fix build on ppc
  * updated patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1673438400">- Replace usage of deprecated fgrep with grep -F.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1685620800">- update to perl 5.36.1 - maintenance release
  * Module::CoreList has been upgraded from version 5.20220520 to 5.20230423.
  * Fixed: An eval() as the last statement in a regex code block could trigger
    an interpreter panic
  * An eval EXPR referring to a lexical sub defined in grandparent scope no
    longer produces an assertion failures.
  * Writing to a magic variables associated with the selected output handle,
    $^, $~, $=, $- and $%, no longer crashes perl if the IO object has been
    cleared from the selected output handle.</changelog>
  <changelog author="mls@suse.de" date="1689768000">- Update to perl 5.38.0
  * new "class" feature
  * support for unicode 15.0
  * defined-or and logical-or assignment default
    expressions in signatures
  * optimistic eval in patterns
  * readline() no longer clears the stream error and eof flags
  * "INIT" blocks no longer run after an "exit()" in "BEGIN"
  * utf8::upgrade() keeps the undef value
  * deprecation of ' as package name separator
  * deprecation of the smart match operator
  * PERL_USE_SAFE_PUTENV is now the default
- Rebase perl-5.36.0.diff to perl-5.38.0.diff
- Refresh perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="ngompa@opensuse.org" date="1695297600">- Use 64-bit integers on all platforms</changelog>
  <changelog author="mls@suse.de" date="1701086400">- Update to perl 5.38.2
  * fixes [CVE-2023-47038] Write past buffer end via illegal
    user-defined Unicode property [bnc#1217084]
  * fixes [CVE-2023-47039] Perl for Windows binary hijacking
    vulnerability [bnc#1217085]</changelog>
  <changelog author="mls@suse.de" date="1744372800">- fix heap buffer overflow with tr// [bsc#1241083] [CVE-2024-56406]
  new patch: perl-pmtrans.diff</changelog>
  <changelog author="mls@suse.de" date="1749124800">- do not change the current directory when cloning an open
  directory handle [bnc#1244079] [CVE-2025-40909]
  new patch: perl-dirdup.diff</changelog>
</package>
<package pkgid="d4ae5ec7aa63ad687d6bd336658501690d8ec2ab423dab48184eb471c5cd08860bb4de36aaa48dab9098bb628d3e30a8bdce862d1665fd2a857c951d716b9e58" name="perl-pcsc-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.14" rel="slfo.1.1_1.2"/>
  <changelog author="sbrabec@suse.cz" date="1313582400">- New package, version 1.4.10.</changelog>
  <changelog author="sbrabec@suse.cz" date="1313668800">- Fix build for older products.</changelog>
  <changelog author="mardnh@gmx.de" date="1417608000">- update to version 1.4.13
- corrected Source URL
- ran spec-cleaner
- removed patch: pcsc-perl-noSCardSetTimeout.patch (included in upstream since 1.4.11)
- Changes since 1.4.10:
  * PCSC.pm: Support Perl 5.16
  Remove the warning:
  defined(@array) is deprecated at /usr/lib/perl/5.16.3/Chipcard/PCSC.pm line 69.
    (Maybe you should just omit the defined()?)
  Thanks to Viliam Pucik for the bug report
  * PCSC.xs: Also check for SVt_PVIV and not just SVt_IV.
  * PCSC.xs, PCSC.pm, test.pl: Use lines of less than 80 columns
  * PCSCperl.h: SCardCancelTransaction() is no more present in pcsc-lite
  * PCSC.pm, PCSC.pod, PCSC.xs, PCSCperl.h:
    SCardSetTimout is no more present in pcsc-lite &gt; 1.6.4
    It was a pcsc-lite specific and deprecated function</changelog>
  <changelog author="sbrabec@suse.com" date="1501502400">- Update to version 1.4.14:
  * Error processing fixes.
- Add gpg.keyring and pcsc-perl-1.4.14.tar.bz2.asc.</changelog>
</package>
<package pkgid="80d2aa0cc674b419f54c8794e7d7a6a935f893faad7118737c0cc62aa95cb03b2d4a005cb106fd694daadff6108b0b48e32a48a3ac1cbb6118c4b763f06ed537" name="perl-pcsc-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.14" rel="slfo.1.1_1.2"/>
  <changelog author="sbrabec@suse.cz" date="1313582400">- New package, version 1.4.10.</changelog>
  <changelog author="sbrabec@suse.cz" date="1313668800">- Fix build for older products.</changelog>
  <changelog author="mardnh@gmx.de" date="1417608000">- update to version 1.4.13
- corrected Source URL
- ran spec-cleaner
- removed patch: pcsc-perl-noSCardSetTimeout.patch (included in upstream since 1.4.11)
- Changes since 1.4.10:
  * PCSC.pm: Support Perl 5.16
  Remove the warning:
  defined(@array) is deprecated at /usr/lib/perl/5.16.3/Chipcard/PCSC.pm line 69.
    (Maybe you should just omit the defined()?)
  Thanks to Viliam Pucik for the bug report
  * PCSC.xs: Also check for SVt_PVIV and not just SVt_IV.
  * PCSC.xs, PCSC.pm, test.pl: Use lines of less than 80 columns
  * PCSCperl.h: SCardCancelTransaction() is no more present in pcsc-lite
  * PCSC.pm, PCSC.pod, PCSC.xs, PCSCperl.h:
    SCardSetTimout is no more present in pcsc-lite &gt; 1.6.4
    It was a pcsc-lite specific and deprecated function</changelog>
  <changelog author="sbrabec@suse.com" date="1501502400">- Update to version 1.4.14:
  * Error processing fixes.
- Add gpg.keyring and pcsc-perl-1.4.14.tar.bz2.asc.</changelog>
</package>
<package pkgid="01417785dc895c976d27121af9ff9923831d65ed19160b31f3dcaf5f109d5dfffd606bc19b79bd396469482a4c0691c0a7668f3d9a48165d05487028404ed7c7" name="permissions-debugsource" arch="aarch64">
  <version epoch="0" ver="1600_20240206" rel="slfo.1.1_1.5"/>
  <changelog author="dmueller@suse.com" date="1663761600">- skip tests on qemu user builds</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1671537600">- Update to version 20221220:
  * profiles: remove outdated kdesud, apptainer entries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1676635200">- Update to version 20230217:
  * shadow: newgidmap,newuidmap: use capabilities (bsc#1208309)
  * profiles: whitelist kismet capabilities (bsc#1200954) (#171)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1682337600">- Update to version 20230424:
  * profiles: remove dead opiepasswd entry
    (opie was removed via OBS sr#1065964).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1684238400">- Update to version 20230516:
  * common permissions: add icingaweb2 setgid directory (bsc#1211314)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1685707200">- Update to version 20230602:
  * profiles: remove dropped pppoe-wrapper</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701086400">- Remove dependency on /usr/bin/python3, making scripts to depends on
  the real python3 binary, not the link. bsc#1212476</changelog>
  <changelog author="dimstar@opensuse.org" date="1706616000">- Create directory /usr/share/permissions/permissions.d for packages
  to place their drop-ins.</changelog>
  <changelog author="paolo.perego@suse.com" date="1707220800">- Update to version 20240206:
  * Whitelisting libgtop_server2 (bsc#1218921)
  * Removing bogus whitespaces
  * chkstat: harmonize and transform to a more compact coding and doc style
  * gitignore: also ignore hidden ctags
  * build: Create /usr/share/permissions/permissions.d for packagers
  * profiles: drop /usr/sbin/lockdev which is no longer packaged in Factory
  * profiles: drop /etc/ftpusers which is no longer shipped in netcfg</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1707220801">- Drop superfluous mkdir /usr/share/permissions/permissions.d
  This is now created by the Makefile. See also
  commit 5900bc1ffe6275298ded3c96dee03a5c98e4db1c</changelog>
</package>
<package pkgid="c843695632cea7ad5deb8bb9fd8883900b313204052b230c72ef51bdc789376b4763c8077e6fa95aed76921236bbb4d87daa92807a140dd1ba475ce337fad8be" name="pigz-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.8" rel="slfo.1.1_1.2"/>
  <changelog author="uli@suse.com" date="1317384000">- cross-build workaround: use fake cc script to work around build
  system that does not honor CC</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1354017600">- update to 2.2.5:
  * add --rsyncable functionality
  * many bug fixes
- remove all suse patches:
  * pigz-dictzip.patch, large and unmaintained patch. If somebody
    really needs that then we should rebase and test it. In this
    case --dictzip should be probably also added to original gzip.
  * pigz-always-thread.patch was a folloup of pigz-dictzip.patch
  * pigz-do-symlinks.patch added IMO dangerous and stupid behaviour
    for symlinks. The original behaviour is now again like we know
    it from gzip, bzip2 and xz.
  * pigz-spl.patch, why we hacked in special handling of .spl
    files?
  * Generally we want to have pigz to replace gzip (and vice versa)
    so better avoiding interface incompatibilities.
- cleanup spec file</changelog>
  <changelog author="adam@mizerski.pl" date="1363262400">- update to 2.3
  * Don't complain about missing suffix when not writing output file
  * Put all global variables in one global structure for readability
  * Do not decompress concatenated zlib streams -- only gzip streams
  * Add option for compression level 11 to use zopfli
  * Fix handling of junk after compressed data
- added pigz-lm.patch
  * adds missing "-lm"
- provide unpigz binary and manpage as symlink, not copy.
- removed fake cc script - build system honors CC
- cleanup spec file</changelog>
  <changelog author="p.drouand@gmail.com" date="1426075200">- Update to version 2.3.3
  * Portability improvements
  * Update copyright years in documentation
- Add build fix patches
  * pigz-fix-wrong-include.patch
  * pigz-fix-missing-linker.patch
- Remove pigz-lm.patch; fixed
- Use download Url as source</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1502884800">- Update to 2.3.4:
  * no upstream changelog provided</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Update to version 2.4:
  * Generate Zip64 format .zip files when the output is greater
    than or equal to 4 GiB.
  * Improved gzip options processing and return code compatibility
  * Some bug fixes
- Drop no longer needed patches:
  * pigz-fix-missing-linker.patch
  * pigz-fix-wrong-include.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1597233600">- Build with -fexceptions to get compiler/os specific (aka. sane)
  implementations of pthread_cleanup* routines.</changelog>
  <changelog author="dmueller@suse.com" date="1612699200">- update to 2.6:
  * Add --huffman/-H and --rle/U strategy options
  * Fix issue when compiling for no threads
  * Fail silently on a broken pipe
  * Add --alias/-A option to set .zip name for stdin input
  * Add --comment/-C option to add comment in .gz or .zip
  * Several bug and behavior fixes
- drop fortify.patch: obsolete</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1651924800">- update to 2.7:
  * Improved display of multiple-member gzip files
  * Better gzip compatibility and bug fixes
- add pigz-2.7-NOTHREAD-tests.patch to fix tests</changelog>
  <changelog author="pgajdos@suse.com" date="1693828800">- version update to 2.8
  - Fixed a version bug when compiling with the just-released zlib 1.3
  - Will save a modification time only for regular files (just like gzip since 1.10)
  - Will write all available uncompressed data on an error, for partial data recovery
- deleted patches
  - pigz-2.7-NOTHREAD-tests.patch (upstreamed)</changelog>
</package>
<package pkgid="f0cc4fac095ab00c339c8a9c8faddddfecd55dbdc65ae0bb21244d70b59eafbcedcdc2087899862671e49f110a7b320968e85b15d3adde8efcb7970a84110db8" name="pinentry-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="slfo.1.1_1.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1564056000">- Fix a dangling pointer in qt/main.cpp [bsc#1141883]
  * Added pinentry-qt-Fix-use-of-dangling-pointer.patch</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 1.1.1:
  * A EFL-based pinentry has been contributed.
  * Disable echoing in backspace key is pressed first
    (GTK, Qt, TQt, and ncurses pinentries).
  * Support line editing in TTY pinentry.
  * Remove support for old GTK+2 (&lt; 2.12.0).
  * Various minor fixes.
- drop pinentry-qt-Fix-use-of-dangling-pointer.patch (upstream)
- drop pinentry-ncurses6.diff: obsolete</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1611748800">- actually build efl based pinentry
- re-enable validation of upstream signing key</changelog>
  <changelog author="dmueller@suse.com" date="1611921600">- add _multibuild to separate out gui client builds</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1630152000">- pinentry 1.2.0:
  * qt: Show a warning if Caps Lock is on
  * qt: Support password formatting.  This makes generated
    passwords easier to transcribe
  * qt: Fix showing of pinentry window on Wayland
  * qt: Check passphrase constraints before accepting passphrase
    if passphrase constraints are requested to be enforced
  * qt: Improve detection of running in a GUI session
  * qt: Improve accessibility when entering new password</changelog>
  <changelog author="dimstar@opensuse.org" date="1645704000">- Fix name tag for multibuild: name tag should be conditional on
  the multibuild flavor.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Correction for previous change: ensure the packages built in the
  gui flavor do not change their package name. e.g pinentry-qt5
  wrongly got renamed to pinentry-gui-qt5.</changelog>
  <changelog author="dmueller@suse.com" date="1661428800">- update to 1.2.1:
  * qt: Support building with Qt 5.9.  [T5592]
  * curses: Handle an error at curses initialization.  [T5623]
  * curses: Specify fg/bg when an extention of Ncurses is not available.
  * qt: Fix translation of context menu entries.  [T5786]
  * qt: Further improve the accessibility.  [T5863]
  * qt: Fix moving focus to second input field when pressing Enter in
    first input field.  [T5866]
  * qt: Update the cursor position when reformatting the text.  [T5972]
  * qt: Use foreground raising code also with the confirm prompt.
  * Make the legacy qt4 version build again.  [T5569]
  * Make sure an entered PIN is always cleared from memory.  [T5977]
  * Build fixes for Windows.  [T5893]</changelog>
  <changelog author="pgajdos@suse.com" date="1677499200">- add %bcond option to disable fltk backend</changelog>
  <changelog author="fcrozat@suse.com" date="1685620800">- Update signature file and keyring with latest ones from download
  site, they were updated by another approved upstream maintainer.</changelog>
</package>
<package pkgid="22e352fd5cfc1720584b8c9218ab379f5b1a03edc520cfefca93489533b302f1e5c8ecced5674d080451e06b6b25584c9da2c6cbc842045dee8be3bf77a6be30" name="pinentry-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="slfo.1.1_1.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1564056000">- Fix a dangling pointer in qt/main.cpp [bsc#1141883]
  * Added pinentry-qt-Fix-use-of-dangling-pointer.patch</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 1.1.1:
  * A EFL-based pinentry has been contributed.
  * Disable echoing in backspace key is pressed first
    (GTK, Qt, TQt, and ncurses pinentries).
  * Support line editing in TTY pinentry.
  * Remove support for old GTK+2 (&lt; 2.12.0).
  * Various minor fixes.
- drop pinentry-qt-Fix-use-of-dangling-pointer.patch (upstream)
- drop pinentry-ncurses6.diff: obsolete</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1611748800">- actually build efl based pinentry
- re-enable validation of upstream signing key</changelog>
  <changelog author="dmueller@suse.com" date="1611921600">- add _multibuild to separate out gui client builds</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1630152000">- pinentry 1.2.0:
  * qt: Show a warning if Caps Lock is on
  * qt: Support password formatting.  This makes generated
    passwords easier to transcribe
  * qt: Fix showing of pinentry window on Wayland
  * qt: Check passphrase constraints before accepting passphrase
    if passphrase constraints are requested to be enforced
  * qt: Improve detection of running in a GUI session
  * qt: Improve accessibility when entering new password</changelog>
  <changelog author="dimstar@opensuse.org" date="1645704000">- Fix name tag for multibuild: name tag should be conditional on
  the multibuild flavor.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Correction for previous change: ensure the packages built in the
  gui flavor do not change their package name. e.g pinentry-qt5
  wrongly got renamed to pinentry-gui-qt5.</changelog>
  <changelog author="dmueller@suse.com" date="1661428800">- update to 1.2.1:
  * qt: Support building with Qt 5.9.  [T5592]
  * curses: Handle an error at curses initialization.  [T5623]
  * curses: Specify fg/bg when an extention of Ncurses is not available.
  * qt: Fix translation of context menu entries.  [T5786]
  * qt: Further improve the accessibility.  [T5863]
  * qt: Fix moving focus to second input field when pressing Enter in
    first input field.  [T5866]
  * qt: Update the cursor position when reformatting the text.  [T5972]
  * qt: Use foreground raising code also with the confirm prompt.
  * Make the legacy qt4 version build again.  [T5569]
  * Make sure an entered PIN is always cleared from memory.  [T5977]
  * Build fixes for Windows.  [T5893]</changelog>
  <changelog author="pgajdos@suse.com" date="1677499200">- add %bcond option to disable fltk backend</changelog>
  <changelog author="fcrozat@suse.com" date="1685620800">- Update signature file and keyring with latest ones from download
  site, they were updated by another approved upstream maintainer.</changelog>
</package>
<package pkgid="dc6a05d184f044035cd30ac193708d957157628cb7c0fc25c1fa4203928ba2d7b48fb6794fa090159ceea0e15d40c26c9b2199dac5076b092177c426df2271a2" name="pixman-debugsource" arch="aarch64">
  <version epoch="0" ver="0.42.2" rel="slfo.1.1_1.2"/>
  <changelog author="zaitor@opensuse.org" date="1445947200">- Update to version 0.33.4:
  + Important security fix to prevent stack buffer overflow.
  + POWER: New fast-paths and optimizations to existing fast-paths.
  + ARMv6: New fast-path.
  + Tests: New cover and fence-image-self tests.
  + Remove redundant corrections in various calculations for
    COVER-CLIP and COVER analysis.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451736000">- Update to version 0.33.6:
  + configura.ac: fix test for SSE2 &amp; SSSE3 assembler support.
  + mmx: Improve detection of support for "K" constraint.
  + Revert "mmx: Use MMX2 intrinsics from xmmintrin.h directly".</changelog>
  <changelog author="zaitor@opensuse.org" date="1454328000">- Update to version 0.34.0:
  + No changes from last version, stable version release only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459771200">- Add pixman-private-correct-include.patch: pixman-private: include
  &lt;float.h&gt; only in C code, patch from upstream git.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="mvetter@suse.com" date="1542974400">- Update to version 0.36.0:
  + Add tests for (a)rgb floating point formats
  + Add support for argb/xrgb float formats, v5
  + Fix stride calculation in stress-test
  + Adjust for clang's removal of __builtin_shuffle
  + Fix vector loads on ppc64le
  + Promote unsigned short to unsigned int explicitly
  + pixman-filter: Made Gaussian a bit wider
  + pixman-filter: Nested polynomial for cubic
  + pixman-filter: Fix several issues related to normalization
  + pixman-filter: Speed up BOX/BOX filter
  + pixman-filter: integral splitting is only needed for triangle
    filterdd
  + pixman-filter: Correct Simpsons integration
  + pixman-filter: reduce amount of malloc/free/memcpy to generate
    filter
  + pixman-image: Added enable-gnuplot config to view filters in
    gnuplot
  + pixman-fast-path.c: Pick NEAREST affine fast paths before
    BILINEAR ones
  + pixman-private: include &lt;float.h&gt; only in C code
- Remove pixman-private-correct-include.patch: upstreamed</changelog>
  <changelog author="info@paolostivanin.com" date="1587384000">- Update to version 0.40.0:
  + Meson build system improvements
  + Supporting optimizations on Hygon Dhyana processors
    to match what is enabled for Intel/AMD CPUs.
  + A few Loongson fixes/improvements.
  + Lots of other fixes</changelog>
  <changelog author="mgorse@suse.com" date="1667563200">- Update to version 0.42.2 (boo#1205033 CVE-2022-44638):
  + This version contains a fix for a heap overflow.
- Update URL, and tweak source URI.</changelog>
</package>
<package pkgid="6c270fed4b504503e6421a34219dd5b524b3ab79e024ef65aee0dbbdd35b2d2b161775818064e0735c1f34461fecab93f979ff60eb11e8b33220d6d9b4fa5cba" name="pkgconf-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="slfo.1.1_1.5"/>
  <changelog author="ngompa13@gmail.com" date="1563192000">- Fix license tag for pkgconf-m4</changelog>
  <changelog author="ngompa13@gmail.com" date="1565006400">- Add missing -gnu ABI suffix to platform names in pkgconf-pkg-config (boo#1144318)</changelog>
  <changelog author="ngompa13@gmail.com" date="1565352000">- Co-own aclocal directory to avoid requiring autoconf-archive</changelog>
  <changelog author="ngompa13@gmail.com" date="1565611200">- Update to 1.6.3
  + Fixed a memory leak when deduplicating paths.
  + Fixed strndup-related build regression on Windows.
  + Added --modversion description to pkgconf(1) man page.
  + Properly tokenize versions. Versions cannot logically contain
    whitespace, as dependency-lists would not properly tokenize if
    they could. A diagnostic is generated for malformed version
    strings containing whitespace when --validate is used.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592222400">- Update to 1.7.3
  - Bug fixes:
  + Fix a possible out of boundary write when evaluating dependencies.
    Patch by Tobias Stöckmann.
  + Fix escaping logic on Windows.  Patch by Vincent Torri.
  + Fix out of boundary reads and writes with a malformed fragment.
    Patches by Tobias Stöckmann.
  + Fix a possible out of boundary write when evaluating tuples.
    Patch by Tobias Stöckmann.
  + Fix a windows-specific crash relating to path fixups.
  + Fix a possible out of boundary access in the parser for the
    cross-compile database.  Patch by Tobias Stöckmann.
  + Missing files for building with Meson are now included in the
    tarball.  Patch by Neal Gompa.
  + Fix calculation of package atoms on Windows with paths that
    use both directory separator characters.
  + Fix a possible buffer overflow involving newline escaping.
    Patch by Tobias Stöckmann.
  + Fix an out of boundary access in the parser.
    Patch by Tobias Stöckmann.
  + Fix leakage of strcmp() result value in pkgconf_compare_version()
    responses.
  + Return the default personality if loading a cross-compile
    personality file failed.
  + Do not complain about newlines when validating package versions.
  + Properly detect strndup() on Windows when building with Meson.
  - Enhancements:
  + A new --shared option and WantDefaultStatic cross-compile
    configuration option have been added.  This allows for toolchains
    to specify that static linking should be used by default.
  + Support for the PKG_CONFIG_MSVC_SYNTAX environment variable has
    been added.  Patch by Dan Kegel.
  + Support for the PKGCONF_PKG_PKGF_DONT_MERGE_SPECIAL_FRAGMENTS
    client flag which disables emulation of freedesktop.org pkg-config
    fragment merging semantics has been added.
    Patch by Karen Arutyunov.</changelog>
  <changelog author="ngompa13@gmail.com" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds (boo#1175039)</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- do not own directories provided by filesystem
- small cleanups inspired by spec-cleaner</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625054400">- Update to 1.7.4
  + Add PKG_CONFIG_DONT_DEFINE_PREFIX environment variable
  + Handle platforms where realpath(3) requires a pre-allocated
    buffer
  + Fix null-dereference crash when pulling a malformed
    'uninstalled' .pc file into a dependency tree.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1629720000">- Update to version 1.8.0:
  + Fix a minor memory leak relating to cross-personalities
  + Fix some edge cases with --redefine-prefix
  + Do not prepend sysroot_dir if the .pc file does not exist
    in the sysroot
  + Do not perform path filtering on default system include
    and library path lists.</changelog>
  <changelog author="qzhao@suse.com" date="1674993600">- Add pkgconf-CVE-2023-24056.patch: Backport commit 628b2b2baf from
  upstream, test for, and stop string processing, on truncation
  (bsc#1207394 CVE-2023-24056).</changelog>
</package>
<package pkgid="d7c8db4c127d284ad07264ce43cbf2a4f01954b4d95c9fd0c92a93b45cf445ed9bbc6031bb9a3549ed6de0ed5f3cf7ee9c484ff0078e77b5b897ee22b4c6ff1c" name="pkgconf-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="slfo.1.1_1.5"/>
  <changelog author="ngompa13@gmail.com" date="1563192000">- Fix license tag for pkgconf-m4</changelog>
  <changelog author="ngompa13@gmail.com" date="1565006400">- Add missing -gnu ABI suffix to platform names in pkgconf-pkg-config (boo#1144318)</changelog>
  <changelog author="ngompa13@gmail.com" date="1565352000">- Co-own aclocal directory to avoid requiring autoconf-archive</changelog>
  <changelog author="ngompa13@gmail.com" date="1565611200">- Update to 1.6.3
  + Fixed a memory leak when deduplicating paths.
  + Fixed strndup-related build regression on Windows.
  + Added --modversion description to pkgconf(1) man page.
  + Properly tokenize versions. Versions cannot logically contain
    whitespace, as dependency-lists would not properly tokenize if
    they could. A diagnostic is generated for malformed version
    strings containing whitespace when --validate is used.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592222400">- Update to 1.7.3
  - Bug fixes:
  + Fix a possible out of boundary write when evaluating dependencies.
    Patch by Tobias Stöckmann.
  + Fix escaping logic on Windows.  Patch by Vincent Torri.
  + Fix out of boundary reads and writes with a malformed fragment.
    Patches by Tobias Stöckmann.
  + Fix a possible out of boundary write when evaluating tuples.
    Patch by Tobias Stöckmann.
  + Fix a windows-specific crash relating to path fixups.
  + Fix a possible out of boundary access in the parser for the
    cross-compile database.  Patch by Tobias Stöckmann.
  + Missing files for building with Meson are now included in the
    tarball.  Patch by Neal Gompa.
  + Fix calculation of package atoms on Windows with paths that
    use both directory separator characters.
  + Fix a possible buffer overflow involving newline escaping.
    Patch by Tobias Stöckmann.
  + Fix an out of boundary access in the parser.
    Patch by Tobias Stöckmann.
  + Fix leakage of strcmp() result value in pkgconf_compare_version()
    responses.
  + Return the default personality if loading a cross-compile
    personality file failed.
  + Do not complain about newlines when validating package versions.
  + Properly detect strndup() on Windows when building with Meson.
  - Enhancements:
  + A new --shared option and WantDefaultStatic cross-compile
    configuration option have been added.  This allows for toolchains
    to specify that static linking should be used by default.
  + Support for the PKG_CONFIG_MSVC_SYNTAX environment variable has
    been added.  Patch by Dan Kegel.
  + Support for the PKGCONF_PKG_PKGF_DONT_MERGE_SPECIAL_FRAGMENTS
    client flag which disables emulation of freedesktop.org pkg-config
    fragment merging semantics has been added.
    Patch by Karen Arutyunov.</changelog>
  <changelog author="ngompa13@gmail.com" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds (boo#1175039)</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- do not own directories provided by filesystem
- small cleanups inspired by spec-cleaner</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625054400">- Update to 1.7.4
  + Add PKG_CONFIG_DONT_DEFINE_PREFIX environment variable
  + Handle platforms where realpath(3) requires a pre-allocated
    buffer
  + Fix null-dereference crash when pulling a malformed
    'uninstalled' .pc file into a dependency tree.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1629720000">- Update to version 1.8.0:
  + Fix a minor memory leak relating to cross-personalities
  + Fix some edge cases with --redefine-prefix
  + Do not prepend sysroot_dir if the .pc file does not exist
    in the sysroot
  + Do not perform path filtering on default system include
    and library path lists.</changelog>
  <changelog author="qzhao@suse.com" date="1674993600">- Add pkgconf-CVE-2023-24056.patch: Backport commit 628b2b2baf from
  upstream, test for, and stop string processing, on truncation
  (bsc#1207394 CVE-2023-24056).</changelog>
</package>
<package pkgid="ff31065c8f3a29321b84610b901b105778358da01cdee613e9af8b4c72bc470e3d3f197fdc6007e9b1f4bdaed17db4c19bd69ff5b82302f105044a1ed19404a3" name="podman-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.4.2" rel="slfo.1.1_3.1"/>
  <changelog author="danish.prakash@suse.com" date="1728993600">- Add patch for CVE-2024-9675 (bsc#1231499):
  * 0003-Properly-validate-cache-IDs-and-sources.patch
- Add patch for CVE-2024-9407 (bsc#1231208):
  * 0002-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
- Rebase patches:
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1729598400">- Add patch for CVE-2024-9676 (bsc#1231698):
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Rebase patches:
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1739793600">- Add patch for CVE-2024-11218 (bsc#1236270):
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
- Removed patches (merged upstream):
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Add missing podman-clean-transient unit
- Update to version 5.2.5:
  * Bump to v5.2.5 (bsc#1236507)
  * Update release notes for 5.2.5
  * Bump c/storage to v1.55.1 and Buildah to v1.37.5
  * RPM: remove dup Provides
  * Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
  * Bump to v5.2.5-dev
  * Bump to v5.2.4
  * Update release notes for v5.2.4
  * Validate the bind-propagation option to `--mount`
  * Bump Buildah to v1.37.4
  * vendor: update c/common to v0.60.4
  * Bump to v5.2.4-dev
  * Bump to v5.2.3
  * Update release notes for v5.2.3
  * [v5.2] Bump Buildah to v1.37.3
  * pkg/specgen: allow pasta when running inside userns
  * libpod: convert owner IDs only with :idmap
  * docs: update read the docs changes
  * allow exposed sctp ports
  * libpod: setupNetNS() correctly mount netns
  * vendor: update c/common to v0.60.3
  * [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
  * [skip-ci] Packit: Enable sidetags for bodhi updates
  * build: Update gvisor-tap-vsock to 0.7.5
  * CI: podman-machine: do not use cache registry
  * [CI:DOCS] Add v5.2.2 lib updates to RELEASE_NOTES.md
  * Bump to v5.2.3-dev
  * Bump to v5.2.2
  * Update RELEASE_NOTES for v5.2.2
  * [v5.2] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2
  * [v5.2] golangci-lint: make darwin linting happy
  * [v5.2] golangci-lint: make windows linting happy
  * [v5.2] test/e2e: remove kernel version check
  * [v5.2] golangci-lint: remove most skip dirs
  * [v5.2] set !remote build tags where needed
  * [v5.2] update golangci-lint to 1.60.1
  * Packit: update targets for propose-downstream
  * Create volume path before state initialization
  * Update Cirrus DEST_BRANCH
  * Bump to v5.2.2-dev
  * Bump to v5.2.1
  * Update release notes for v5.2.1
  * [v5.2] Add zstd:chunked test fix
  * [v5.2] Bump Buildah to v1.37.1, c/common v0.60.1, c/image v5.32.1
  * libpod: reset state error on init
  * libpod: do not save expected stop errors in ctr state
  * libpod: fix broken saveContainerError()
  * Bump to v5.2.1-dev
  * Bump to v5.2.0
  * Never skip checkout step in release workflow
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc3
  * Update release notes for v5.2.0-rc3
  * Tweak versions in register_images.go
  * fix network cleanup flake in play kube
  * WIP: Fixes for vendoring Buildah
  * Add --compat-volumes option to build and farm build
  * Bump Buildah, c/storage, c/image, c/common
  * libpod: bind ports before network setup
  * pkg/api: do not leak config pointers into specgen
  * build: Update gvisor-tap-vsock to 0.7.4
  * test/system: fix borken pasta interface name checks
  * test/system: fix bridge host.containers.internal test
  * CI: system tests: instrument to allow failure analysis
  * Use uploaded .zip for Windows action
  * RPM: podman-iptables.conf only on Fedora
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc2
  * Update release notes for v5.2.0-rc2
  * test/e2e: fix ncat tests
  * libpod: add hidden env to set sqlite timeout
  * Add support for StopSignal in quadlet .container files
  * podman pod stats: fix race when ctr process exits
  * Update module github.com/vbauerster/mpb/v8 to v8.7.4
  * libpod: correctly capture healthcheck output
  * Bump bundled krunkit to 0.1.2
  * podman stats: fix race when ctr process exists
  * nc -p considered harmful
  * podman pod stats: fix pod rm race
  * podman ps: fix racy pod name query
  * system connection remove: use Args function to validate
  * pkg/machine/compression: skip decompress bar for empty file
  * nc -p considered harmful
  * podman system df: fix fix ErrNoSuchCtr/Volume race
  * podman auto-update: fix ErrNoSuchCtr race
  * Fix name for builder in farm connection
  * 700-play.bats: use unique pod/container/image/volume names
  * safename: consistent within same test, and, dashes
  * 700-kube.bats: refactor $PODMAN_TMPDIR/test.yaml
  * 700-play.bats: eliminate $testYaml
  * 700-play.bats: refactor clumsy yamlfile creation
  * 700-play.bats: move _write_test_yaml up near top
  * chore(deps): update dependency setuptools to v71
  * Expand drop-in search paths * top-level (pod.d) * truncated (unit-.container.d)
  * Remove references and checks for --gpus
  * Do not crash on invalid filters
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.2.0
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc1
  * Keep the volume-driver flag deprecated
  * Vendor in latest containers(common, storage,image, buildah)
  * System tests: safe container/image/volume/etc names
  * Implement disable default mounts via command line
  * test: drop unmount for overlay
  * test: gracefully terminate server
  * libpod: shutdown Stop waits for handlers completion
  * libpod: cleanup store at shutdown
  * Add NetworkAlias= support to quadlet
  * cmd: call shutdown handler stop function
  * fix race conditions in start/attach logic
  * swagger: exlude new docker network types
  * vendor: bump c/storage
  * update to docker 27
  * contrib: use a distinct --pull-option= for each flag
  * Update warning message when using external compose provider
  * Update module github.com/cyphar/filepath-securejoin to v0.3.0
  * Ignore result of EvalSymlinks on ENOENT
  * test/upgrade: fix tests when netavark uses nftables
  * test/system: fix network reload test with nftables
  * test/e2e: rework some --expose tests
  * test: remove publish tests from e2e
  * CI: test nftables driver on fedora
  * CI: use local registry, part 3 of 3: for developers
  * CI: use local registry, part 2 of 3: fix tests
  * CI: use local registry, part 1 of 3: setup
  * CI: test composefs on rawhide
  * chore(deps): update module google.golang.org/grpc to v1.64.1 [security]
  * chore(deps): update dependency setuptools to ~=70.3.0
  * Improve container filenname ambiguity.
  * containers/attach: Note bug around goroutine leak
  * Drop minikube CI test
  * add libkrun test docs
  * fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0
  * cirrus: check for header files in source code check
  * pkg/machine/e2e: run debug command only for macos
  * create runtime's worker queue before queuing any job
  * test/system: fix pasta host.containers.internal test
  * Visual Studio BuildTools as a MinGW alternative
  * SetupRootless(): only reexec when needed
  * pkg/rootless: simplify reexec for container code
  * cirrus: add missing test/tools to danger files
  * fix(deps): update module golang.org/x/tools to v0.23.0
  * Windows Installer: switch to wix5
  * fix(deps): update module golang.org/x/net to v0.27.0
  * pkg/machine/e2e: print tests timings at the end
  * pkg/machine/e2e: run debug commands after init
  * pkg/machine/e2e: improve timeout handling
  * libpod: first delete container then cidfile
  * fix(deps): update module golang.org/x/term to v0.22.0
  * System test fixes
  * cirrus.yml: automatic skips based on source
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.0
  * podman events: fix error race
  * chore(deps): update dependency setuptools to ~=70.2.0
  * fix(deps): update module github.com/gorilla/schema to v1.4.1 [security]
  * Update CI VM images
  * pkg/machine/e2e: fix broken cleanup
  * pkg/machine/e2e: use tmp file for connections
  * test/system: fix podman --image-volume to allow tmpfs storage
  * CI: mount tmpfs for container storage
  * docs: --network remove missing leading sentence
  * specgen: parse devices even with privileged set
  * vendor: update c/storage
  * Remove the unused machine volume-driver
  * feat(quadlet): log option handling
  * Error when machine memory exceeds system memory
  * machine: Always use --log-file with gvproxy
  * CI: Build-Each-Commit test: run only on PRs
  * Small fixes for testing libkrun
  * Podman machine resets all providers
  * Clearly indicate names w/ URLencoded duplicates
  * [skip-ci] Packit: split rhel and centos-stream jobs
  * apple virtiofs: fix racy mount setup
  * cirrus: fix broken macos artifacts URL
  * libpod/container_top_linux.c: fix missing header
  * refactor(build): improve err when file specified by -f does not exist
  * Minor: Remove unhelpful comment
  * Update module github.com/openshift/imagebuilder to v1.2.11
  * Minor: Rename the OSX Cross task
  * [skip-ci] Remove conditionals from changelog
  * podman top: join the container userns
  * Run linting in parallel with building
  * Fix missing Makefile target dependency
  * build API: accept platform comma separated
  * [skip-ci] RPM: create podman-machine subpackage
  * ExitWithError() - more upgrades from Exit()
  * test/e2e: remove podman system service tests
  * cirrus: reduce int tests timeout
  * cirrus: remove redundant skip logic
  * pkg/machine/apple: machine stop timeout
  * CI: logformatter: link to correct PR base
  * Update module github.com/crc-org/crc/v2 to v2.38.0
  * ExitWithError(): continued
  * test/system: Add test steps for journald log check in quadlet
  * restore: fix missing network setup
  * podman run use pod userns even with --pod-id-file
  * macos-installer: bundle krunkit
  * remote API: fix pod top error reporting
  * libpod API: return proper error status code for pod start
  * fix #22233
  * added check for `registry.IsRemote()`. and correct error message.
  * fix #20686
  * pkg/machine/e2e: Remove unnecessary copy of machine image.
  * libpod: intermediate mount if UID not mapped into the userns
  * libpod: avoid chowning the rundir to root in the userns
  * libpod: do not chmod bind mounts
  * libpod: unlock the thread if possible
  * CI Cleanup: Remove cgroups v1 support
  * ExitWithError() - more upgrades from Exit()
  * remote: fix incorrect CONTAINER_CONNECTION parsing
  * container: pass KillSignal and StopTimeout to the systemd scope
  * libpod: fix comment
  * e2e: test container restore in pod by name
  * docs: Adds all PushImage supported paramters to openapi docs.
  * systests: kube: bump up a timeout
  * cirrus.yml: add CI:ALL mode to force all tests
  * cirrus.yml: implement skips based on source changes
  * CI VMs: bump
  * restore: fix container restore into pod
  * sqlite_state: Fix RewriteVolumeConfig
  * chore(deps): update dependency setuptools to ~=70.1.0
  * Quadlet - use specifier for unescaped values for templated container name
  * cirrus: check for system test leaks in nightly
  * test/system: check for leaks in teardown suite
  * test/system: speed up basic_{setup,teardown}()
  * test/system: fix up many tests that do not cleanup
  * test/system: fix podman --authfile=nonexistent-path
  * Update module github.com/containernetworking/plugins to v1.5.1
  * Update module github.com/checkpoint-restore/checkpointctl to v1.2.1
  * Update module github.com/spf13/cobra to v1.8.1
  * Update module github.com/gorilla/schema to v1.4.0
  * pkg/machine/wsl: force terminate wsl instance
  * pkg/machine/wsl: wrap command errors
  * [CI:DOCS] Quadlet - add note about relative path resolution
  * CI: do not install python packages at runtime
  * Release workflow: Include candidate descriptor
  * Minor: Fix indentation in GHA release workflow
  * GHA: Send release notification mail
  * GHA: Validate release version number
  * Remove references to --pull=true and --pull=false
  * ExitWithError, continued
  * podman: add new hidden flag --pull-option
  * [CI:DOCS] Fix typos in podman-build
  * infra: mark storageSet when imagestore is changed
  * [CI:DOCS] Add jnovy as reviewer and approver
  * fix(deps): update module google.golang.org/protobuf to v1.34.2
  * refactor(machine,wsl): improve operations of Windows API
  * --squash --layers=false should be allowed
  * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0
  * update golangci-lint to v1.59.1
  * Rename master to main in CONTRIBUTING.md
  * podman 5, pasta and inter-container networking
  * libpod: do not resuse networking on start
  * machine/linux: Switch to virtiofs by default
  * machine/linux: Support virtiofs mounts (retain 9p default)
  * machine/linux: Use memory-backend-memfd by default
  * ExitWithError() - continued
  * Enable libkrun provider to open a debug console
  * Add new targets on Windows makefile (winmake.ps1)
  * fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1
  * fix(deps): update module golang.org/x/tools to v0.22.0
  * fix(deps): update module golang.org/x/net to v0.26.0
  * libpod: fix 'podman kube generate' on FreeBSD
  * fix(deps): update module golang.org/x/sys to v0.21.0
  * libpod: do not leak systemd hc startup unit timer
  * vendor latest c/common
  * pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly
  * run bats -T, to profile timing hogs
  * test/system: speed up podman ps --external
  * test/system: speed up podman network connect/disconnect
  * test/system: speed up podman network reload
  * test/system: speed up quadlet - pod simple
  * test/system: speed up podman parallel build should not race
  * test/system: speed up podman cp dir from host to container
  * test/system: speed up podman build - workdir, cmd, env, label
  * test/system: speed up podman --log-level recognizes log levels
  * test/system: remove obsolete debug in net connect/disconnect test
  * test/system: speed up quadlet - basic
  * test/system: speed up user namespace preserved root ownership
  * System tests: add `podman system check` tests
  * Add `podman system check` for checking storage consistency
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0
  * fix(libpod): add newline character to the end of container's hostname file
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
  * fix(deps): update github.com/containers/image/v5 digest to aa93504
  * Fix 5.1 release note re: runlabel
  * test/e2e: use local skopeo not image
  * fix(deps): update golang.org/x/exp digest to fd00a4e
  * [CI:DOCS] Add contrib/podmanimage/stable path back in repo
  * chore(deps): update dependency requests to ~=2.32.3
  * fix(deps): update github.com/containers/image/v5 digest to 2343e81
  * libpod: do not move podman with --cgroups=disabled
  * Update release notes on Main to v5.1.0
  * test: look at the file base name
  * tests: simplify expected output
  * Sigh, new VMs again
  * Fail earlier when no containers exist in stats
  * Add Hyper-V option in windows installer
  * libpod: cleanup default cache on system reset
  * vendor: update c/image
  * test/system: speed up kube generate tmpfs on /tmp
  * test/system: speed up podman kube play tests
  * test/system: speed up podman shell completion test
  * test/system: simplify test signal handling in containers
  * test/system: speed up podman container rm ...
  * test/system: speed up podman ps - basic tests
  * test/system: speed up read-only from containers.conf
  * test/system: speed up podman logs - multi ...
  * test/system: speed up podman run --name
  * Debian: switch to crun
  * test/system: speed up podman generate systemd - envar
  * test/system: speed up podman-kube@.service template
  * test/system: speed up kube play healthcheck initialDelaySeconds
  * test/system: speed up exit-code propagation test
  * test/system: speed up "podman run --timeout"
  * test/system: fix slow kube play --wait with siginterrupt
  * undo auto-formatting
  * test/system: speed up podman events tests
  * Quadlet: Add support for .build files
  * test/system: speed up "podman auto-update using systemd"
  * test/system: remove podman wait test
  * tests: disable tests affected by a race condition
  * update golangci-lint to v1.59.0
  * kubernetes_support.md: Mark volumeMounts.subPath as supported
  * working name of pod on start and stop
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
  * Bump Buildah to v1.36.0
  * fix(deps): update module github.com/burntsushi/toml to v1.4.0
  * fix typo in Tutorials.rst
  * Mac PM test: Require pre-installed rosetta
  * test/e2e: fix new error message
  * Add configuration for podmansh
  * Update containers/common to latest main
  * Only stop chowning volumes once they're not empty
  * podman: fix --sdnotify=healthy with --rm
  * libpod: wait another interval for healthcheck
  * quadlet: Add a network requirement on .image units
  * test, pasta: Ignore deprecated addresses in tests
  * [CI:DOCS] performance: update network docs
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
  * CI: disable minikube task
  * [CI:DOCS] Fix windows action trigger
  * chore(deps): update dependency setuptools to v70
  * Check AppleHypervisor before accessing it
  * fix(deps): update module github.com/containernetworking/plugins to v1.5.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2
  * add podman-clean-transient.service service to rootless
  * [CI:DOCS] Update podman network docs
  * fix incorrect host.containers.internal entry for rootless bridge mode
  * vendor latest c/common main
  * Add Rosetta support for Apple Silicon mac
  * bump main to 5.2.0-dev
  * Use a defined constant instead of a hard-coded magic value
  * cirrus: use faster VM's for integration tests
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c
  * [CI:DOCS] Fix Mac pkg link
  * test: remove test_podman* scripts
  * test/system: fix documentation
  * Return StatusNotFound when multiple volumes matching occurs
  * container_api: do not wait for healtchecks if stopped
  * libpod: wait for healthy on main thread
  * `podman events`: check for an error after we finish reading events
  * remote API: restore v4 payload in container inspect
  * Fix updating connection when SSH port conflict happens
  * rootless: fix reexec to use /proc/self/exe
  * ExitWithError() - enforce required exit status &amp; stderr
  * ExitWithError() - a few that I missed
  * [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds
  * Revert "Temporarily disable rootless debian e2e testing"
  * CI tests: enforce TMPDIR on tmpfs
  * use new CI images with tmpfs /tmp
  * run e2e test on tmpfs
  * Update module github.com/crc-org/crc/v2 to v2.36.0
  * Address CVE-2024-3727
  * [CI:DOCS] Use checkout@v4 in GH Actions
  * ExitWithError() - rmi_test
  * ExitWithError() - more r files
  * ExitWithError() - s files
  * ExitWithError() - more run_xxx tests
  * Fix podman-remote support for `podman farm build`
  * [CI:DOCS] Trigger windows installer action properly
  * Revert "container stop: kill conmon"
  * Ensure that containers do not get stuck in stopping
  * [CI:DOCS] Improvements to make validatepr
  * ExitWithError() - rest of the p files
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1
  * Graceful shutdown during podman kube down
  * Remove duplicate  call
  * test/system: fix broken "podman volume globs" test
  * Quadlet/Container: Add GroupAdd option
  * Don't panic if a runtime was configured without paths
  * update c/{buildah,common,image,storage} to latest main
  * update golangci-lint to 1.58
  * machine: Add LibKrun provider detection
  * ExitWithError() - continue tightening
  * fix(deps): update module google.golang.org/protobuf to v1.34.1
  * test: improve test for powercap presence
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3
  * fix(deps): update module go.etcd.io/bbolt to v1.3.10
  * fix(deps): update module golang.org/x/tools to v0.21.0
  * [skip-ci] RPM: `bats` required only on Fedora
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842
  * gpdate and remove parameter settings in `.golangci.yml`
  * ExitWithError() - play_kube_test.go
  * Temporarily disable rootless debian e2e testing
  * fix(deps): update module golang.org/x/crypto to v0.23.0
  * CI Docs: Clarify passthrough_envars() comments
  * Skip machine tests if they don't need to be run
  * Update CI VMs to F40, F39, D13
  * ExitWithError() - v files
  * Update module golang.org/x/term to v0.20.0
  * machine: Add provider detection API
  * util: specify a not empty pause dir for root too
  * Add missing option 'healthy' to output of `podman run --help`
  * [CI:DOCS] Add info on the quay.io images to the README.md
  * Add a random suffix to healthcheck unit names
  * test/e2e: remove toolbox image
  * Also substitute $HOME in runlabel with user's homedir
  * Update module github.com/cyphar/filepath-securejoin to v0.2.5
  * Change tmpDir for macOS
  * ExitWithError() - pod_xxx tests
  * ExitWithError() -- run_test.go
  * Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
  * Update module github.com/shirou/gopsutil/v3 to v3.24.4
  * Update module github.com/docker/docker to v26.1.1+incompatible
  * GHA: Attempt fix exceeded a secondary rate limit
  * vendor ginkgo 2.17.2 into test/tools
  * Fix machine volumes with long path and paths with dashes
  * Update module google.golang.org/protobuf to v1.34.0
  * Update module github.com/crc-org/crc/v2 to v2.35.0
  * Update module github.com/onsi/gomega to v1.33.1
  * test/e2e: podman unshare image mount fix tmpdir leak
  * test/e2e: do not leak /tmp/private_file
  * test/e2e: "persistentVolumeClaim with source" do not leak file
  * e2e tests: use /var/tmp, not $TMPDIR, as workdirs
  * Update dependency pytest to v8.1.2
  * Remove unncessary lines at the end of specfile summary
  * Clean machine pull cache
  * Add krun support to podman machine
  * Use custom image for make validatepr
  * test/e2e: force systemd cgroup manager
  * e2e and bindings tests: fix $PATH setup
  * Makefile: remove useless HACK variable in e2e test
  * test/e2e: fix volumes and suid/dev/exec options
  * test/e2e: volumes and suid/dev/exec options works remote
  * test/e2e: fix limits test
  * Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0
  * Correct option name `ip` -&gt; `ip6`
  * Add the ability to automount images as volumes via play
  * Add support for image volume subpaths
  * Bump Buildah to latest main
  * Update Makefile to Go 1.22 for in-container
  * ExitWithError() - yet more low-hanging fruit
  * ExitWithError() - more low-hanging fruit
  * ExitWithError() - low-hanging fruit
  * chore: fix function names in comment
  * Remove redundant Prerequisite before build section
  * Remove PKG_CONFIG_PATH
  * Add installation instructions for openSUSE
  * Replace golang.org/x/exp/slices with slices from std
  * Update to go 1.21
  * fix(deps): update module github.com/docker/docker to v26.1.0+incompatible
  * [CI:DOCS] Fix artifact action
  * [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals
  * e2e tests: stop littering
  * [CI:DOCS] format podman-pull example as code
  * [CI:DOCS] Build &amp; upload release artifacts with GitHub Actions
  * libpod: getHealthCheckLog() remove unessesary check
  * add containers.conf healthcheck_events support
  * vendor latest c/common
  * libpod: make healthcheck events more efficient
  * libpod: wrap store setup error message
  * [skip-ci] Packit: enable CentOS 10 Stream build jobs
  * pkg/systemd: use fileutils.(Le|E)xists
  * pkg/bindings: use fileutils.(Le|E)xists
  * pkg/util: use fileutils.(Le|E)xists
  * pkg/trust: use fileutils.(Le|E)xists
  * pkg/specgen: use fileutils.(Le|E)xists
  * pkg/rootless: use fileutils.(Le|E)xists
  * pkg/machine: use fileutils.(Le|E)xists
  * pkg/domain: use fileutils.(Le|E)xists
  * pkg/api: use fileutils.(Le|E)xists
  * libpod: use fileutils.(Le|E)xists
  * cmd: use fileutils.(Le|E)xists
  * vendor: update containers/{buildah,common,image,storage}
  * fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security]
  * fix podman-pod-restart.1.md typo
  * [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next
  * fix(deps): update module github.com/onsi/gomega to v1.33.0
  * Add more annnotation information to podman kupe play man page
  * test/compose: remove compose v1 code
  * CI: remove compose v1 tests
  * fix: close resource file
  * [CI:DOCS] Fix windows installer action
  * fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2
  * add `list` as an alias to list networks
  * Add support for updating restart policy
  * Add Compat API for Update
  * Make `podman update` changes persistent
  * Emergency fix (well, skip) for failing bud tests
  * fix swagger doc for manifest create
  * [CI:DOCS] options/network: fix markdown lists
  * Makefile: do not hardcode `GOOS` in `podman-remote-static` target
  * chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  * chore(deps): update dependency setuptools to ~=69.5.0
  * Fix some comments
  * swagger fix infinitive recursion on some types
  * install swagger from source
  * Revert "Swap out javascript engine"
  * podman exec CID without command should exit 125
  * (minor) prefetch systemd image before use
  * Update go-swagger version
  * Swap out javascript engine
  * fix(deps): update module github.com/docker/docker to v26.0.1+incompatible
  * Add os, arch, and ismanifest to libpod image list
  * [CI:DOCS]Initial PR validation
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71
  * vendor ginkgo 2.17.1 into test/tools
  * fix "concurrent map writes" in network ls compat endpoint
  * chore(deps): update dependency pytest to v8
  * e2e: redefine ExitWithError() to require exit code
  * docs: fix missleading run/create --expose description
  * podman ps: show exposed ports under PORTS as well
  * rootless: drop function ReadMappingsProc
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3
  * New CI VMs, to give us pasta 2024-04-05
  * Add big warning to GHA workflow
  * GHA: Fix intermittent workflow error
  * fix(deps): update module golang.org/x/tools to v0.20.0
  * e2e tests: remove requirement for fuse-overlayfs
  * docs: update Quadlet volume Options desc
  * fix(deps): update module golang.org/x/sync to v0.7.0
  * Fix relabeling failures with Z/z volumes on Mac
  * fix(deps): update module golang.org/x/net to v0.24.0
  * Makefile: fix annoying errors in docs generation
  * chore: fix function names in comment
  * Bump tags.cncf.io/container-device-interface to v0.7.1
  * fix(deps): update module golang.org/x/crypto to v0.22.0
  * Detect unhandled reboots and require user intervention
  * podman --runroot: remove 50 char length restriction
  * update github.com/rootless-containers/rootlesskit to v2
  * Update module github.com/gorilla/schema to v1.3.0
  * Update dependency requests-mock to ~=1.12.1
  * Update module github.com/crc-org/crc/v2 to v2.34.1
  * rm --force work for more than one arg
  * [CI:DOCS] Update kube docs
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3
  * [CI:DOCS] Add GitHub action to update version on Podman.io
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2
  * Windows: clean up temporary perl install
  * pkg/util: FindDeviceNodes() ignore ENOENT errors
  * [CI:DOCS] build deps: make-validate needs docs
  * test/system: add rootless-netns test for setup errors
  * vendor latest c/common main
  * container: do not chown to dest target with U
  * [CI:DOCS] golangci-lint: update deprecated flags
  * systests: conditionalize slirp4netns tests
  * CI: systests: instrument flaky tests
  * s3fs docs
  * test: do not skip tests under rootless
  * Add note about host networking to Kube PublishPort option
  * Inject additional build tags from the environment
  * libpod: use original IDs if idmap is provided
  * Switch back to checking out the same branch the action script runs in
  * docs/podman-login: Give an example of writing the persistent path
  * CI: Bump VMs to 2024-03-28
  * [skip-ci] Update dawidd6/action-send-mail action to v3.12.0
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.7
  * Fix reference to deprecated types.Info
  * Use logformatter for podman_machine_windows_task
  * applehv: Print vfkit logs in --log-level debug
  * [CI:DOCS]Add Mario to reviewers list
  * [CI:DOCS] Document CI-maintenance job addition
  * Add golang 1.21 update warning
  * Add rootless network command to `podman info`
  * libpod: don't warn about cgroupsv1 on FreeBSD
  * hyperv: error if not admin
  * Properly parse stderr when updating container status
  * [skip-ci] Packit: specify fedora-latest in propose-downstream
  * Use built-in ssh impl for all non-pty operations
  * Add support for annotations
  * hyperv: fix machine rm -r
  * [skip-ci] Packit: Enable CentOS Stream 10 update job
  * 5.0 release note fix typo in cgroupv1 env var
  * fix remote build isolation on client side
  * chore: remove repetitive words
  * Dont save remote context in temp file but stream and extract
  * fix remote build isolation when server runs as root
  * util: use private propagation with bind
  * util: add some tests for ProcessOptions
  * util: refactor ProcessOptions into an internal function
  * util: rename files to snake case
  * Add LoongArch support for libpod
  * fix(deps): update github.com/containers/common digest to bc5f97c
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1
  * fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security]
  * fix(deps): update module github.com/onsi/gomega to v1.32.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0
  * Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4
  * Fix type-o
  * Use correct extension in suite
  * minikube: instrument tests, to allow debugging failures
  * libpod: restart always reconfigure the netns
  * use new c/common pasta2 setup logic to fix dns
  * utils: drop conversion float-&gt;string-&gt;float
  * utils: do not generate duplicate range
  * logformatter: handle Windows logs
  * utils: add test for the new function
  * utils: move rootless code to a new function
  * CVE-2024-1753 fix for main
  * xref-helpmsgs-manpages: cross-check Commands.rst
  * test/system: Add support for multipath routes in pasta networking tests
  * [skip-ci] rpm: use macro supported vendoring
  * Adjust to the standard location of gvforwarder used in new images
  * Makefile: add target `podman-remote-static`
  * Switch to 5.x WSL machine os stream using new automation
  * Cleanup build scratch dir if remote end disconnects while passing the context
  * bump main to 5.1.0-dev
  * Use faster gzip for compression for 3x speedup for sending large contexts to remote
  * pkg/machine: make checkExclusiveActiveVM race free
  * pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
  * pkg/machine: CheckExclusiveActiveVM should also check for starting
  * pkg/machine: refresh config after we hold lock
  * Update dependency setuptools to ~=69.2.0
  * [skip-ci] rpm: update containers-common dep on f40+
  * fix invalid HTTP header values when hijacking a connection
  * Add doc to build podman on windows without MSYS
  * Removing CRI-O related annotations
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * Pass the restart policy to the individual containers
  * kube play: always pull when both imagePullPolicy and tag are missing</changelog>
  <changelog author="danish.prakash@suse.com" date="1741003200">- Add patch for CVE-2025-27144 (bsc#1237641):
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
- Rebase patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1742299200">- Add patch for CVE-2025-22869 (bsc#1239330):
  * 0003-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Rebase patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch</changelog>
  <changelog author="dcermak@suse.com" date="1743076800">- Depend on runc unconditionally, not only on SLE 15 (bsc#1239088)</changelog>
  <changelog author="danish.prakash@suse.com" date="1747051200">- Add patch for bsc#1242132:
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Removed patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
  * 0003-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Drop iptables support in favor of nftables (required by netavark)
- Fix conditional Requires (remove deprecated sle_version macro)
- Update to version 5.4.2:
  * Bump to v5.4.2
  * Add release notes for v5.4.2
  * Fix a potential deadlock during `podman cp`
  * Improve the file format documentation of podman-import.
  * Revert "podman-import only supports gz and tar"
  * Bump buildah to v1.39.4
  * libpod: do not cover idmapped mountpoint
  * test: Fix runc error message
  * oci: report empty exec path as ENOENT
  * test: adapt tests new crun error messages
  * test: remove duplicate test
  * cirrus: test only on f41/rawhide
  * CI: use z1d instance for windows machine testing
  * New images 2025-03-24
  * test/e2e: use go net.Dial() ov nc
  * test: use ncat over nc
  * New images 2025-03-12
  * RPM: Add riscv64 to ExclusiveArch-es
  * Fix HealthCheck log destination, count, and size defaults
  * Win installer test: hardcode latest GH release ID
  * Packit: Fix action script for fetching upstream commit
  * Bump to v5.4.2-dev
  * Bump to v5.4.1
  * update gvproxy version to 0.8.4
  * Update Buildah to v1.39.2
  * Update release notes for v5.4.1
  * Fix reporting summed image size for compat endpoint
  * podman-import only supports gz and tar
  * quadlet kube: correctly mark unit as failed
  * pkg/domain/infra/abi/play.go: fix two nilness issues
  * kube play: don't print start errors twice
  * libpod: race in WaitForConditionWithInterval()
  * libpod: race in WaitForExit() with autoremove
  * Don't try to resolve host path if copying to container from stdin.
  * Use svg for pkginstaller banner
  * Create quota before _data dir for volumes
  * Packit: clarify secondary status in CI
  * Packit/RPM: Display upstream commit SHA in all rpm builds
  * podman run: fix --pids-limit -1 wrt runc
  * vendor: update github.com/go-jose/go-jose/v3 to v3.0.4
  * chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
  * wire up --retry-delay for artifact pull
  * Revert "silence false positve from golangci-lint"
  * update golangci-lint to v1.64.4
  * update golangci-lint to v1.64.2
  * silence false positve from golangci-lint
  * cmd/podman: refactor Context handling
  * fix new usetesting lint issue
  * Packit/Copr: Fix `podman version` in rpm
  * Remove persist directory when cleaning up Conmon files
  * Bump to v5.4.1-dev
  * Bump to v5.4.0
  * Update release notes for v5.4.0 final
  * In SQLite state, use defaults for empty-string checks
  * Bump FreeBSD version to 13.4
  * docs: add v5.4 to API reference
  * Update rpm/podman.spec
  * RPM: set buildOrigin in LDFLAG
  * RPM: cleanup macro defs
  * Makefile: escape BUILD_ORIGIN properly
  * rootless: fix hang on s390x
  * Set Cirrus DEST_BRANCH appropriately to fix CI
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc3
  * Update release notes for v5.4.0-rc3
  * Add BuildOrigin field to podman info
  * artifact: only allow single manifest
  * test/e2e: improve write/removeConf()
  * Add --noheading to artifact ls
  * Add --no-trunc to artifact ls
  * Add type and annotations to artifact add
  * pkg/api: honor cdi devices from the hostconfig
  * util: replace Walk with WalkDir
  * fix(pkg/rootless): avoid memleak during init() contructor.
  * Add `machine init --playbook`
  * RPM: include empty check to silence rpmlint
  * RPM: adjust qemu dependencies
  * Force use of iptables on Windows WSL
  * rpm: add attr as dependency for podman-tests
  * update gvproxy version
  * [v5.4] Bump Buildah to v1.39.0
  * podman exec: correctly support detaching
  * libpod: remove unused ExecStartAndAttach()
  * [v5.4] Bump c/storage to v1.57.1, c/image v5.34.0, c/common v0.62.0
  * Move detection of libkrun and intel
  * Prevent two podman machines running on darwin
  * Remove unnecessary error handling
  * Remove usused Kind() function
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc2
  * Update release notes for v5.4.0-rc2
  * Safer use of `filepath.EvalSymlinks()` on Windows
  * error with libkrun on intel-based machines
  * chore(deps): update dependency pytest to v8.3.4
  * test/buildah-bud: skip two new problematic tests on remote
  * Fix podman-restart.service when there are no containers
  * Avoid upgrading from v5.3.1 on Windows
  * Clean up after unexpectedly terminated build
  * system-tests: switch ls with getfattr for selinux tests
  * vendor latest c/{buildah,common,image,storage}
  * Makefile: Add validatepr description for 'make help' output
  * docs: Enhance podman build --secret documentation and add examples
  * docs: mount.md - idmapped mounts only work for root user
  * Define, and use, PodmanExitCleanlyWithOptions
  * Eliminate PodmanSystemdScope
  * Fix image ID query
  * Revert "Use the config digest to compare images loaded/pulled using different methods"
  * Update c/image after https://github.com/containers/image/pull/2613
  * Update expected errors when pulling encrypted images
  * Eliminate PodmanExtraFiles
  * Introduce PodmanTestIntegration.PodmanWithOptions
  * Restructure use of options
  * Inline PodmanBase into callers
  * Pass all of PodmanExecOptions to various [mM]akeOptions functions
  * Turn PodmanAsUserBase into PodmanExecBaseWithOptions
  * Avoid indirect links through quadlet(5)
  * do not set the CreateCommand for API users
  * Add podman manifest rm --ignore
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc1
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.2
  * podman artifact
  * vendor latest c/{common,image,storage}
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.2
  * cirrus: bump macos machine test timeout
  * pkg/machine/e2e: improve podman.exe match
  * pkg/machine/e2e: improve "list machine from all providers"
  * Remove JSON tag from UseImageHosts in ContainerConfig
  * Set network ID if available during container inspect
  * Stop creating a patch for v5.3.1 upgrades on windows
  * compose docs: fix typo
  * Document kube-play CDI support
  * docs: Add quadlet debug method systemd-analyze
  * Replace instances of PodmanExitCleanly in play_kube_test.go
  * docs: add 'initialized' state to status filters
  * fix(deps): update module google.golang.org/protobuf to v1.36.3
  * Switch all calls of assert.Nil to assert.NoError
  * Add --no-hostname option
  * Fix unescaping octal escape sequence in values of Quadlet unit files
  * Remove `.exe` suffix if any
  * Add kube play support for CDI resource allocation
  * add support to `;` for comments in unit files as per systemd documentation
  * Use PodmanExitCleanly in attach_test.go
  * Introduce PodmanTestIntegration.PodmanExitCleanly
  * chore(deps): update dependency setuptools to ~=75.8.0
  * Add newer c/i to support artifacts
  * fix(deps): update module golang.org/x/tools to v0.29.0
  * fix(deps): update module golang.org/x/net to v0.34.0
  * specgenutil: Fix parsing of mount option ptmxmode
  * namespaces: allow configuring keep-id userns size
  * Update description for completion
  * Quadlet - make sure the /etc/containers/systemd/users is traversed in rootless
  * Document .build for Image .container option
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.9.1
  * New VM Images
  * update golangci/golangci-lint to v1.63.4
  * fix(deps): update module google.golang.org/protobuf to v1.36.2
  * chore(deps): update dependency setuptools to ~=75.7.0
  * Fixing ~/.ssh/identity handling
  * vendor latest c/common from main
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.12
  * fix(deps): update module github.com/opencontainers/runc to v1.2.4
  * specgen: fix comment
  * Add hint to restart Podman machine to really accept new certificates
  * fix(deps): update module github.com/onsi/gomega to v1.36.2
  * fix(deps): update module github.com/moby/term to v0.5.2
  * Pass container hostname to netavark
  * Fix slirp4netns typo in podman-network.1.md
  * Add support to ShmSize in Pods with Quadlet
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.1
  * chore(deps): update module golang.org/x/crypto to v0.31.0 [security]
  * fix(deps): update module golang.org/x/net to v0.33.0 [security]
  * Kube volumes can not container _
  * fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
  * test/system: fix "podman play --build private registry" error
  * test/system: CopyDirectory() do not chown files
  * test/system: remove system dial-stdio test
  * shell completion: respect CONTAINERS_REGISTRIES_CONF
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.6
  * When generating host volumes for k8s, force to lowercase
  * test: enable newly added test
  * vfkit: Use 0.6.0 binary
  * gvproxy: Use 0.8.1 binary
  * systemd: simplify parser and fix infinite loop
  * Revert "win-installer test: revert to v5.3.0"
  * Avoid rebooting twice when installing WSL
  * Avoid rebooting on Windows when upgrading and WSL isn't installed
  * Add win installer patch
  * Bump WiX toolset version to 5.0.2
  * test/e2e: SkipOnOSVersion() add reason field
  * test/e2e: remove outdated SkipOnOSVersion() calls
  * Update VM images
  * fix(deps): update module golang.org/x/crypto to v0.31.0 [security]
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.45.0
  * fix(deps): update module github.com/opencontainers/runc to v1.2.3
  * quadlet: fix inter-dependency of containers in `Network=`
  * Add man pages to Mac installer
  * fix(deps): update module github.com/onsi/gomega to v1.36.1
  * fix(deps): update module github.com/docker/docker to v27.4.0+incompatible
  * Fix device limitations in podman-remote update on remote systems
  * Use latest version of VS BuildTools
  * bin/docker: fix broken escaping and variable substitution
  * manifest annotate: connect IndexAnnotations
  * Fix panic in `manifest annotate --index`
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.5
  * fix(deps): update module golang.org/x/net to v0.32.0
  * fix(deps): update module golang.org/x/tools to v0.28.0
  * fix(deps): update module golang.org/x/crypto to v0.30.0
  * fix(deps): update module golang.org/x/sys to v0.28.0
  * Fix overwriting of LinuxResources structure in the database
  * api: replace inspectID with name
  * fix(deps): update github.com/opencontainers/runtime-tools digest to f7e3563
  * Replace ExclusiveArch with ifarch
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.1
  * Improve platform specific URL handling in `podman compose` for machines
  * Fix `podman info` with multiple imagestores
  * Switch to fixed common
  * refact: use uptime.minutes instead of uptime.seconds
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.11
  * fix(deps): update golang.org/x/exp digest to 2d47ceb
  * fix(deps): update github.com/godbus/dbus/v5 digest to c266b19
  * Cover Unix socket in inpect test on Windows platform
  * Add a test for forcing compression and v2s2 format
  * fix(deps): update module github.com/crc-org/vfkit to v0.6.0
  * Package podman-machine on supported architectures only.
  * Fixes missing binary in systemd.
  * stats: ignore errors from containers without cgroups
  * api: Error checking before NULL dereference
  * [skip-ci] Packit/copr: switch to fedora-all
  * make remotesystem: fail early if serial tests fail
  * spec: clamp rlimits without CAP_SYS_RESOURCE
  * Clarify the reason for skip_if_remote
  * Sanity-check that the test is really using partial pulls
  * Fix apparent typos in zstd:chunked tests
  * Fix compilation issues in QEMU machine files (Windows platform)
  * Mount volumes before copying into a container
  * Revert "libpod: remove shutdown.Unregister()"
  * docs: improve documentation for internal networks
  * docs: document bridge mode option
  * [skip-ci] Packit: remove epel and re-enable c9s
  * chore(deps): update dependency golangci/golangci-lint to v1.62.2
  * vendor: update containers/common
  * OWNERS: remove edsantiago
  * fix(deps): update module github.com/onsi/gomega to v1.36.0
  * fix(deps): update github.com/containers/common digest to ceceb40
  * refact: EventerType and improve consistency
  * Add --hosts-file flag to container and pod commands
  * Add nohosts option to /build and /libpod/build
  * fix(deps): update module github.com/stretchr/testify to v1.10.0
  * Quadlet - Use = sign when setting the pull arg for build
  * win-installer test: revert to v5.3.0
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.44.0
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.0
  * chore(deps): update dependency setuptools to ~=75.6.0
  * Update windows installer tests
  * Windows: don't install WSL/HyperV on update
  * Switch to non-installing WSL by default
  * fix(deps): update github.com/containers/buildah digest to 52437ef
  * Configure HealthCheck with `podman update`
  * CI: --image-volume test: robustify
  * docs: add 5.3 as Reference version
  * Bump CI VMs
  * libpod: pass down NoPivotRoot to Buildah
  * vendor: bump containers/buildah
  * fix(deps): update module github.com/opencontainers/runc to v1.2.2
  * Overlay mounts supersede image volumes &amp; volumes-from
  * libpod: addHosts() prevent nil deref
  * only read ssh_config for non machine connections
  * ssh_config: allow IdentityFile file with tilde
  * ssh_config: do not overwrite values from config file
  * connection: ignore errors when parsing ssh_config
  * Bump bundled krunkit to 0.1.4
  * fix(deps): update module google.golang.org/protobuf to v1.35.2
  * add support for driver-specific options during container creation
  * doc: fix words repetitions
  * Update release notes on main for v5.3.0
  * chore(deps): update dependency setuptools to ~=75.5.0
  * CI: system tests: parallelize 010
  * fix podman machine init --ignition-path
  * vendor: update containers/common
  * spec: clamp rlimits in a userns
  * Add subpath support to volumes in `--mount` option
  * refactor: simplify LinuxNS type definition and String method
  * test/e2e: remove FIPS test
  * vendor containers projects to tagged versions
  * fix(deps): update module github.com/moby/sys/capability to v0.4.0
  * chore(deps): update dependency setuptools to ~=75.4.0
  * system tests: safer install_kube_template()
  * Buildah treadmill tweaks
  * update golangci-lint to v1.62.0
  * fix(deps): update module golang.org/x/net to v0.31.0
  * fix(deps): update module golang.org/x/tools to v0.27.0
  * Revert "Reapply "CI: test nftables driver on fedora""
  * Yet another bump, f41 with fixed kernel
  * test: add zstd:chunked system tests
  * pkg/machine/e2e: remove dead code
  * fix(deps): update module golang.org/x/crypto to v0.29.0
  * kube SIGINT system test: fix race in timeout handling
  * New `system connection add` tests
  * Update codespell to v2.3.0
  * Avoid printing PR text to stdout in system test
  * Exclude symlink from pre-commit end-of-file-fixer
  * api: Add error check
  * [CI:ALL] Bump main to v5.4.0-dev
  * test/buildah-bud: build new inet helper
  * test/system: add regression test for TZDIR local issue
  * vendor latest c/{buildah,common,image,storage}
  * Reapply "CI: test nftables driver on fedora"
  * Revert "cirrus: test only on f40/rawhide"
  * test f41 VMs
  * AdditionalSupport for SubPath volume mounts
  * wsl-e2e: Add a test to ensure port 2222 is free with usermode networking
  * winmake.ps1: Fix the syntax of the function call Win-SSHProxy
  * volume ls: fix race that caused it to fail
  * gvproxy: Disable port-forwarding on WSL
  * build: update gvisor-tap-vsock to 0.8.0
  * podman: update roadmap
  * Log network creation and removal events in Podman
  * libpod: journald do not lock thread
  * Add key to control if a container can get started by its pod
  * Honor users requests in quadlet files
  * CI: systests: workaround for parallel podman-stop flake
  * Fix inconsistent line ending in win-installer project
  * fix(deps): update module github.com/opencontainers/runc to v1.2.1
  * Quadlet - support image file based mount in container file
  * API: container logs flush status code
  * rework event code to improve API errors
  * events: remove memory eventer
  * libpod: log file use Wait() over event API
  * Makefile: vendor target should always remove toolchain
  * cirrus: check consitent vendoring in test/tools
  * test/tools/go.mod: remove toolchain
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10
  * fix(deps): update module github.com/onsi/gomega to v1.35.1
  * doc: explain --interactive in more detail
  * fix(deps): update golang.org/x/exp digest to f66d83c
  * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
  * fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c
  * add default polling interval to Container.Wait
  * Instrument cleanup tracer to log weird volume removal flake
  * make podman-clean-transient.service work as user
  * Add default remote socket path if empty
  * Use current user if no user specified
  * Add support for ssh_config for connection
  * libpod: use pasta Setup() over Setup2()
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0
  * fix(deps): update module github.com/onsi/gomega to v1.35.0
  * logformatter: add cleanup tracer log link
  * docs: fix broken example
  * docs: add missing swagger links for the stable branches
  * readthedocs: build extra formats
  * pkg/machine/e2e: remove debug
  * fix(docs): Integrate pasta in rootless tutorial
  * chore(deps): update dependency setuptools to ~=75.3.0
  * libpod: report cgroups deleted during Stat() call
  * chore: fix some function names in comment
  * CI: parallelize 450-interactive system tests
  * CI: parallelize 520-checkpoint tests
  * CI: make 070-build.bats use safe image names
  * test/system: add podman network reload test to distro gating
  * System tests: clean up unit file leaks
  * healthcheck: do not leak service on failed stop
  * healthcheck: do not leak statup service
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0
  * Add Startup HealthCheck configuration to the podman inspect
  * buildah version display: use progress()
  * new showrun() for displaying and running shell commands
  * Buildah treadmill: redo the .cirrus.yml tweaks
  * Buildah treadmill: more allow-empty options
  * Buildah treadmill: improve test-failure instructions
  * Buildah treadmill: improve wording in test-fail instructions
  * doc: Remove whitespace before comma
  * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0
  * ps: fix display of exposed ports
  * ps: do not loop over port protocol
  * readme: Add reference to pasta in the readme
  * test/system: Fix spurious "duplicate tests" failures in pasta tests
  * Improve "podman load - from URL"
  * Try to repair c/storage after removing an additional image store
  * Use the config digest to compare images loaded/pulled using different methods
  * Simplify the additional store test
  * Fix the store choice in "podman pull image with additional store"
  * Bump to v5.3.0-dev
  * Bump to v5.3.0-rc1
  * Set quota on volume root directory, not _data
  * fix(deps): update module github.com/opencontainers/runc to v1.2.0
  * test: set soft ulimit
  * Vagrantfile: Delete
  * Enable pod restore with crun
  * vendor: update c/{buildah,common,image,storage}
  * Fix 330-corrupt-images.bats in composefs test runs
  * quadlet: add default network dependencies to all units
  * quadlet: ensure user units wait for the network
  * add new podman-user-wait-network-online.service
  * contrib/systemd: switch user symlink for file symlinks
  * Makefile: remove some duplication from install.systemd
  * contrib/systemd: move podman-auto-update units
  * quadlet: do not reject RemapUsers=keep-id as root
  * test/e2e: test quadlet with and without --user
  * CI: e2e: fix checkpoint flake
  * APIv2 test fix: image history
  * pasta udp tests: new bytecheck helper
  * Document packaging process
  * [skip-ci] RPM: remove dup Provides
  * Update dependency setuptools to ~=75.2.0
  * System tests: safer pause-image creation
  * Update module github.com/opencontainers/selinux to v1.11.1
  * Added escaping to invoked powershell command for hyperv stubber.
  * use slices.Clone instead of assignment
  * libpod API: only return exit code without conditions
  * Housekeeping: remove duplicates from success_task
  * Thorough overhaul of CONTRIBUTING doc.
  * api: Replace close function in condition body
  * test/e2e: fix default signal exit code test
  * Test new VM build
  * CI: fix changing-rootFsSize flake
  * scp: add option types
  * Unlock mutex before returning from function
  * Note in the README that we are moving to timed releases
  * cirrus: let tar extract figure out the compression
  * Make error messages more descriptive
  * Mention containers.conf settings for podman machine commands
  * [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks"
  * cmd: use logrus to print error
  * podman: do not set rlimits to the default value
  * spec: always specify default rlimits
  * vendor: update containers/common
  * Note in the README that we are moving to timed releases
  * Revert "CI: test nftables driver on fedora"
  * cirrus: use zstd over bzip2 for repo archive
  * cirrus: use shared repo_prep/repo_artifacts scripts
  * cirrus: speed up postbuild
  * cirrus: change alt arch task to only compile binaries
  * cirrus: run make with parallel jobs where useful
  * Makefile: allow man-page-check to be run in parallel
  * cirrus: use fastvm for builds
  * test/e2e: skip some Containerized checkpoint tests
  * test: update timezone checks
  * cirrus: update CI images
  * test/e2e: try debug potential pasta issue
  * CI: quadlet system tests: use airgapped testimage
  * Allow removing implicit quadlet systemd dependencies
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
  * libpod API: make wait endpoint better against rm races
  * podman-remote run: improve how we get the exit code
  * [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
  * 055-rm test: clean up a test, and document
  * CI: remove skips for libkrun
  * Bump bundled krunkit to 0.1.3
  * fix(deps): update module google.golang.org/protobuf to v1.35.0
  * fix(deps): update module golang.org/x/net to v0.30.0
  * server: fix url parsing in info
  * fix(deps): update module golang.org/x/tools to v0.26.0
  * Makefile: fix ginkgo FOCUS option
  * fix(deps): update module golang.org/x/crypto to v0.28.0
  * podman-systemd.unit.5: adjust example options
  * docs: prefer --network to --net
  * fix(deps): update module golang.org/x/term to v0.25.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24
  * fix(deps): update module golang.org/x/sys to v0.26.0
  * OWNERS file audit and update
  * Exposed ports are only included when not --net=host
  * libpod: hasCurrentUserMapped checks for gid too
  * [CI:DOCS] Document TESTFLAGS in test README file
  * Validate the bind-propagation option to `--mount`
  * Fix typo in secret inspect examples
  * Mention `no_hosts` and `base_hosts_file` configs in CLI option docs
  * Fixes for vendoring Buildah
  * vendor: update buildah to latest
  * Makefile - silence skipped tests when focusing on a file
  * vendor: update to latest c/common
  * Quadlet - prefer "param val" over "param=val" to allow env expansion
  * System tests: sdnotify: wait for socket file creation
  * Switch to moby/sys/capability
  * platformInspectContainerHostConfig: rm dead code
  * CI: require and test CI_DESIRED_NETWORK on RHEL
  * Add ExposedPorts to Inspect's ContainerConfig
  * fix(deps): update golang.org/x/exp digest to 701f63a
  * quadlet: allow variables in PublishPort
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9
  * fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c
  * Document that zstd:chunked is downgraded to zstd when encrypting
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
  * chore(deps): update dependency ubuntu to v24
  * rpm: do not load iptables modules on f41+
  * adding docs for network-cmd-path
  * Include exposed ports in inspect output when net=host
  * feat(libpod): support kube play tar content-type (#24015)
  * podman mount: some better error wrapping
  * podman mount: ignore ErrLayerUnknown
  * Quadlet - make sure the order of the UnitsDir is deterministic
  * packit: disable Centos Stream/fedora ELN teasks
  * libpod: remove shutdown.Unregister()
  * libpod: rework shutdown handler flow
  * libpod: ensure we are not killed during netns creation
  * Update module github.com/moby/sys/capability to v0.3.0
  * Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options
  * Update documentation of `--add-host` CLI option
  * System tests: set a default XDG_RUNTIME_DIR
  * Modify machine "Remove machine" test
  * CORS system test: clean up
  * Add --health-max-log-count, --health-max-log-size, --health-log-destination flags
  * troubleshooting: adjust home path in tip 44
  * test/system: For pasta port forwarding tests don't bind socat server
  * Update connection on removal
  * Simplify `RemoveConnections`
  * Move `DefaultMachineName` to `pkg/machine/define`
  * vendor: update containers/image
  * vendor: update containers/storage
  * CI: skip the flaking quadlet test
  * CI: make systemd tests parallel-safe (*)
  * CI: run and collect cleanup tracer logs
  * add epbf program to trace podman cleanup errors
  * CI: parallelize logs test as much as possible
  * CI: format test: use local registry if available
  * CI: make 700-play parallel-safe
  * docs: Fix missing negation
  * bin/docker support warning message suppression from user config dir
  * Update module github.com/docker/docker to v27.3.1+incompatible
  * Quadlet - add full support for Symlinks
  * libpod: setupNetNS() correctly mount netns
  * vendor latest c/common
  * docs: remove usage of deprecated `--storage`
  * Update module github.com/docker/docker to v27.3.0+incompatible
  * CI: Quadlet rootfs test: use container image as rootfs
  * CI: system test registry: use --net=host
  * CI: rm system test: bump grace period
  * CI: system tests: minor documentation on parallel
  * fix typo in error message Fixes: containers/podman#24001
  * CI: system tests: always create pause image
  * CI: quadlet system test: be more forgiving
  * vendor latest c/common
  * CI: make 200-pod parallel-safe
  * allow exposed sctp ports
  * test/e2e: add netns leak check
  * test/system: netns leak check for rootless as well
  * test/system: Improve TODO comments on IPv6 pasta custom DNS forward test
  * test/system: Clarify "Local forwarder" pasta tests
  * test/system: Simplify testing for nameserver connectivity
  * test/system: Consolidate "External resolver" pasta tests
  * test/system: Move test for default forwarder into its own case
  * CI: make 090-events parallel-safe
  * Misc minor test fixes
  * Add network namespace leak check
  * Add workaround for buildah parallel bug
  * registry: lock start attempts
  * Update system test template and README
  * bats log: differentiate parallel tests from sequential
  * ci: bump system tests to fastvm
  * clean_setup: create pause image
  * CI: make 012-manifest parallel-safe
  * podman-manifest-remove: update docs and help output
  * test/system: remove wait workaround
  * wait: fix handling of multiple conditions with exited
  * Match output of Compat Top API to Docker
  * system test parallelization: enable two-pass approach
  * New VMs: test crun 1.17
  * libpod: hides env secrets from container inspect
  * CI: e2e: workaround for events out-of-sequence flake
  * update golangci-lint to 1.61.0
  * libpod: convert owner IDs only with :idmap
  * Podman CLI --add-host with multiple host for a single IP
  * Quadlet - Split getUnitDirs to small functions
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5
  * chore(deps): update dependency setuptools to ~=75.1.0
  * Fxi typo in cache-ttl.md
  * Get WSL disk as an OCI artifact
  * CI: make 260-sdnotify parallel-safe
  * quadlet: do not log ENOENT errors
  * pkg/specgen: allow pasta when running inside userns
  * troubleshooting: add tip about the user containers
  * chore(deps): update dependency setuptools to v75
  * Convert windows paths in volume arg of the build command
  * Improve error when starting multiple machines
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
  * Minor typo noticed when reading podman man page
  * Remove `RemoveFilesAndConnections`
  * Add `GetAllMachinesAndRootfulness`
  * rewrite typo osascript
  * typo
  * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
  * Add radio buttons to select WSL or Hyper-V in windows setup.exe
  * [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
  * [skip-ci] Packit: Enable sidetags for bodhi updates
  * vendor: update c/common
  * CI: make 710-kube parallel-safe
  * CI: mark 320-system-df *NOT* parallel safe
  * Add kube play support for image volume source
  * refactor: add sshClient function
  * fix(deps): update module golang.org/x/tools to v0.25.0
  * CI: make 505-pasta parallel safe
  * CI: make 020-tag parallel-safe
  * CI: make 410-selinux parallel-safe
  * Bump VMs. ShellCheck is now built-in
  * troubleshooting: add tip about auto, keep-id, nomap
  * libpod: make use of new pasta option from c/common
  * vendor latest c/common
  * podman images: sort repository with tags
  * Remove containers/common/pkg/config from pkg/util
  * fix(deps): update module golang.org/x/net to v0.29.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23
  * fix(deps): update module golang.org/x/crypto to v0.27.0
  * Fix CI
  * Detect and fix typos using codespell
  * Fix typo: replace buildin with built-in
  * Add codespell config, pre-commit definition, and move options from Makefile
  * prune: support clearing build cache using CleanCacheMount
  * test/e2e: fix network prune flake
  * Add support for Job to kube generate &amp; play
  * Add podman-rootless.7 man page
  * Add DNS, DNSOption and DNSSearch to quadlet pod
  * podman.1.md: improve policy.json section
  * e2e: flake fix: SIGPIPE in hook test
  * libpod: fix rootless cgroup path with --cgroup-parent
  * vendor: update c/storage
  * CI: make 055-rm parallel-safe
  * CI: make 130-kill parallel-safe
  * CI: make 125-import parallel-safe
  * CI: make 110-history parallel-safe
  * CI: system tests: parallelize low-hanging fruit
  * Add disclaimer to `podman machine info` manpage.
  * man pages: refactor two more options
  * update github.com/opencontainers/runc to v1.2.0-rc.3
  * update go.etcd.io/bbolt to v1.3.11
  * update github.com/onsi/{ginkgo,gomega}
  * Update module github.com/shirou/gopsutil to v4
  * packit: update fedora and epel targets
  * bump go to 1.22
  * cirrus: test only on f40/rawhide
  * cirrus: remove CI_DESIRED_NETWORK reference
  * cirrus: prebuild use f40 for extra tests
  * chore(deps): update dependency setuptools to ~=74.1.0
  * libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD
  * fix(deps): update golang.org/x/exp digest to 9b4947d
  * Implement publishing API UNIX socket on Windows platforms
  * Vendor c/common:8483ef6022b4
  * quadlet: support container network reusing
  * docs: update read the docs changes
  * CI: parallel-safe network system test
  * Quadlet - Support multiple image tags in .build files
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3
  * cirrus: remove _bail_if_test_can_be_skipped
  * cirrus: move renovate check into validate
  * cirrus: remove 3rd party connectivity check
  * cirrus: remove cross jobs for aarch64 and x86_64
  * cirrus: do not upload alt arch cross artifacts
  * cirrus: remove ginkgo-e2e.json artifact
  * cirrus: fix default timeouts
  * github: remove fcos-podman-next-build-prepush
  * Clarify podman machine volume mounting behavior under WSL
  * machine: Add -all-providers flag to machine list
  * Create a podman-troubleshooting man page
  * chore(deps): update dependency setuptools to v74
  * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
  * Fix an improperly ignored error in SQLite
  * CI: flake workaround: ignore socat waitpid warnings
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1
  * Stop skipping machine volume test on Hyper-V
  * cleanup: add new --stopped-only option
  * fix races in the HTTP attach API
  * cirrus: skip windows/macos machine task on RHEL branches
  * Update module github.com/containers/gvisor-tap-vsock to v0.7.5
  * run: fix detach passthrough and --rmi
  * podman run: ignore image rm error
  * Add support for AddHost in quadlet .pod and .container
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
  * update github.com/vishvananda/netlink to v1.3.0
  * build: Update gvisor-tap-vsock to 0.7.5
  * Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page:
  * fix typo in podman-network-create.1.md
  * Use HTTP path prefix of TCP connections to match Docker context behavior
  * Makefile: remotesystem: use real podman server, no --url
  * Update module github.com/openshift/imagebuilder to v1.2.15
  * CI: parallel-safe userns test
  * Update module github.com/onsi/ginkgo/v2 to v2.20.1
  * Add support for IP in quadlet .pod files
  * Specify format to use for referencing fixed bugs.
  * CI: parallel-safe run system test
  * Revert "test/e2e: work around for pasta issue"
  * CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked
  * quadlet: support user mapping in pod unit
  * Update Release Process
  * Test new VM build
  * command is not optional to podman exec
  * CI: parallel-safe namespaces system test
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
  * quadlet: add key CgroupsMode
  * Fix `podman stop` and `podman run --rmi`
  * quadlet: set infra name to %s-infra
  * chore(deps): update dependency setuptools to v73
  * [skip-ci] Packit: update targets for propose-downstream
  * Do not segfault on hard stop
  * Fix description of :Z to talk about pods
  * CI: disable ginkgo flake retries
  * vendor: update go-criu to latest
  * golangci-lint: make darwin linting happy
  * golangci-lint: make windows linting happy
  * test/e2e: remove kernel version check
  * golangci-lint: remove most skip dirs
  * set !remote build tags where needed
  * update golangci-lint to 1.60.1
  * test/e2e: rm systemd start test
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1
  * podman wait: allow waiting for removal of containers
  * libpod: remove UpdateContainerStatus()
  * podman mount: fix storage/libpod ctr race
  * CI: quadlet tests: make parallel-safe
  * CI: system tests: make random_free_port() parallel-safe
  * remove trailing comma in example
  * CI: format test: make parallel-safe
  * Fix podman-docker.sh under -eu shells (fixes #23628)
  * docs: update podman-wait man page
  * libpod: remove duplicated HasVolume() check
  * podman volume rm --force: fix ABBA deadlock
  * test/system: fix network cleanup restart test
  * libpod: do not stop pod on init ctr exit
  * libpod: simplify WaitForExit()
  * CI: remove build-time quay check
  * Fix known_hosts file clogging and remote host id
  * Update docker.io/library/golang Docker tag to v1.23
  * Update dependency setuptools to ~=72.2.0
  * Update module github.com/docker/docker to v27.1.2+incompatible
  * healthcheck system check: reduce raciness
  * CI: healthcheck system test: make parallel-safe
  * Validate renovate config in every PR
  * pkg/machine: Read stderr from ssh-keygen correctly
  * Fix renovate config syntax error
  * CI: 080-pause.bats: make parallel-safe
  * CI: 050-stop.bats: make parallel-safe
  * Additional potential race condition on os.Readdir
  * pkg/bindings/containers: handle ignore for stop
  * remote: fix invalid --cidfile + --ignore
  * Update/simplify renovate config header comment
  * Migrate renovate config to latest schema
  * Fix race condition when listing /dev
  * docs/podman-systemd: Try to clarify `Exec=` more
  * libpod: reset state error on init
  * test/system: pasta_test_do add explicit port check
  * test/e2e: work around new push warning
  * vendor: update c/common to latest
  * stopIfOnlyInfraRemains: log all errors
  * libpod: do not save expected stop errors in ctr state
  * libpod: fix broken saveContainerError()
  * Quadlet: fix filters failure when the search paths are symlinks
  * readme: replace GPG with PGP
  * Drop APIv2 CNI configuration
  * De-duplicate docker-py testing
  * chore(podmansnoop): explain why crun comm is 3
  * libpod: cleanupNetwork() return error
  * fix(deps): update module golang.org/x/sys to v0.24.0
  * Reduce python APIv2 test net dependency
  * Fix not testing registry.conf updates
  * test/e2e: improve command timeout handling
  * Update module github.com/onsi/ginkgo/v2 to v2.20.0
  * Update module github.com/moby/sys/user to v0.3.0
  * Add passwd validate and generate steps
  * podman container cleanup: ignore common errors
  * Quadlet - Allow the user to override the default service name
  * CI: e2e: serialize root containerPort tests
  * Should not force conversion of manifest type to DockerV2ListMediaType
  * fix(deps): update module golang.org/x/tools to v0.24.0
  * fix(deps): update github.com/containers/common digest to 05b2e1f
  * CI: mount system test: parallelize
  * Update module golang.org/x/net to v0.28.0
  * Ignore ERROR_SHARING_VIOLATION error on windows
  * CI: manifest system tests: make parallel-safe
  * Create volume path before state initialization
  * vendor: update c/storage
  * CI: fix broken libkrun test
  * test/e2e: work around for pasta issue
  * test/e2e: fix missing exit code checks
  * Test new CI images
  * Remove another race condition when mounting containers or images
  * fix(deps): update github.com/containers/common digest to c0cc6b7
  * Change Windows installer MajorUpgrade Schedule
  * Ignore missing containers when calling GetExternalContainerLists
  * Remove runc edit to lock to specific version
  * fix(deps): update module golang.org/x/sys to v0.23.0
  * CI: podman-machine: do not use cache registry
  * CI: completion system test: use safename
  * Temporarly disable failing Windows Installer CI test
  * libpod: fix volume copyup with idmap
  * libpod: avoid hang on errors
  * Temp. disable PM basic Volume ops test
  * Add libkrun Mac task
  * Never skip checkout step in release workflow
  * System tests: leak_test: readable output
  * fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431
  * vendor: bump c/common
  * Version: bump to v5.3.0-dev
  * libpod: inhibit SIGTERM during cleanup()
  * Tweak versions in register_images.go
  * fix network cleanup flake in play kube
  * WIP: Fixes for vendoring Buildah
  * Add --compat-volumes option to build and farm build
  * Bump to Buildah v1.37.0
  * Quadlet test - Split between success, warning and error cases
  * libpod: bind ports before network setup
  * Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false
  * Use new syntax for selinux options in quadlet
  * fix(deps): update module github.com/onsi/gomega to v1.34.1
  * CI: kube test: fix broken external-storage test
  * Update dependency setuptools to v72
  * Convert additional build context paths on Windows
  * pkg/api: do not leak config pointers into specgen
  * Quadlet - Allow the user to set the service name for .pod files
  * Quadlet tests - allow overriding the expected service name
  * fix(deps): update module github.com/moby/sys/user to v0.2.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5
  * CI: enable root user namespaces
  * libpod: force rootfs for OCI path with idmap
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
  * Add test steps for automount with multi images
  * CI: cp tests: use safename
  * [skip-ci] RPM: podman-iptables.conf only on Fedora
  * CI: 700-play: fix a leaked non-safename
  * test: check that kube generate/play restores the userns
  * test: disable artifacts cache with composefs
  * test: fix podman pull tests
  * vendor: bump c/storage
  * Update module github.com/cyphar/filepath-securejoin to v0.3.1
  * Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs
  * build: Update gvisor-tap-vsock to 0.7.4
  * test/system: fix borken pasta interface name checks
  * test/system: fix bridge host.containers.internal test
  * api: honor the userns for the infra container
  * play: handle 'private' as 'auto'
  * kube: record infra user namespace
  * infra: user ns annotation higher precedence
  * specgenutil: record the pod userns in the annotations
  * kube: invert branches
  * CI: system log test: use safe names
  * Update encryption tests to avoid a warning if zstd:chunked is the default
  * Fix "podman pull and decrypt"/"from local registry"
  * Use unique image names for the encrypted test images
  * CI: system tests: instrument to allow failure analysis
  * Fix outdated comment for the build step win-gvproxy
  * Add utility to convert VMFile to URL for UNIX sockets
  * Run codespell on source
  * fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
  * chore(deps): update dependency setuptools to ~=71.1.0
  * logformatter: tweaks to pass html tidy
  * More information for podman --remote build and running out of space.
  * Fix windows installer deleting machine provider config file
  * Use uploaded .zip for Windows action
  * pr-should-include-tests: no more CI:DOCS override</changelog>
  <changelog author="danish.prakash@suse.com" date="1755086400">- Add patch for CVE-2025-6032 (bsc#1245320):
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1759492800">- Add patch for CVE-2025-9566 (bsc#1249154):
  * 0004-CVE-2025-9566-kube-play-don-t-follow-volume-symlinks.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1769688000">- Add symlink to catatonit in /usr/libexec/podman (bsc#1248988)</changelog>
</package>
<package pkgid="0ecea87ce85177a8d5730466f2ef8ae945d7f14e1f7020a5089db83357859674ee533071a6bb1c8301532854c951581baa1e869884d3b2f7bda047e5084749cc" name="podman-remote-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.4.2" rel="slfo.1.1_3.1"/>
  <changelog author="danish.prakash@suse.com" date="1728993600">- Add patch for CVE-2024-9675 (bsc#1231499):
  * 0003-Properly-validate-cache-IDs-and-sources.patch
- Add patch for CVE-2024-9407 (bsc#1231208):
  * 0002-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
- Rebase patches:
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1729598400">- Add patch for CVE-2024-9676 (bsc#1231698):
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Rebase patches:
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1739793600">- Add patch for CVE-2024-11218 (bsc#1236270):
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
- Removed patches (merged upstream):
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Add missing podman-clean-transient unit
- Update to version 5.2.5:
  * Bump to v5.2.5 (bsc#1236507)
  * Update release notes for 5.2.5
  * Bump c/storage to v1.55.1 and Buildah to v1.37.5
  * RPM: remove dup Provides
  * Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
  * Bump to v5.2.5-dev
  * Bump to v5.2.4
  * Update release notes for v5.2.4
  * Validate the bind-propagation option to `--mount`
  * Bump Buildah to v1.37.4
  * vendor: update c/common to v0.60.4
  * Bump to v5.2.4-dev
  * Bump to v5.2.3
  * Update release notes for v5.2.3
  * [v5.2] Bump Buildah to v1.37.3
  * pkg/specgen: allow pasta when running inside userns
  * libpod: convert owner IDs only with :idmap
  * docs: update read the docs changes
  * allow exposed sctp ports
  * libpod: setupNetNS() correctly mount netns
  * vendor: update c/common to v0.60.3
  * [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
  * [skip-ci] Packit: Enable sidetags for bodhi updates
  * build: Update gvisor-tap-vsock to 0.7.5
  * CI: podman-machine: do not use cache registry
  * [CI:DOCS] Add v5.2.2 lib updates to RELEASE_NOTES.md
  * Bump to v5.2.3-dev
  * Bump to v5.2.2
  * Update RELEASE_NOTES for v5.2.2
  * [v5.2] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2
  * [v5.2] golangci-lint: make darwin linting happy
  * [v5.2] golangci-lint: make windows linting happy
  * [v5.2] test/e2e: remove kernel version check
  * [v5.2] golangci-lint: remove most skip dirs
  * [v5.2] set !remote build tags where needed
  * [v5.2] update golangci-lint to 1.60.1
  * Packit: update targets for propose-downstream
  * Create volume path before state initialization
  * Update Cirrus DEST_BRANCH
  * Bump to v5.2.2-dev
  * Bump to v5.2.1
  * Update release notes for v5.2.1
  * [v5.2] Add zstd:chunked test fix
  * [v5.2] Bump Buildah to v1.37.1, c/common v0.60.1, c/image v5.32.1
  * libpod: reset state error on init
  * libpod: do not save expected stop errors in ctr state
  * libpod: fix broken saveContainerError()
  * Bump to v5.2.1-dev
  * Bump to v5.2.0
  * Never skip checkout step in release workflow
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc3
  * Update release notes for v5.2.0-rc3
  * Tweak versions in register_images.go
  * fix network cleanup flake in play kube
  * WIP: Fixes for vendoring Buildah
  * Add --compat-volumes option to build and farm build
  * Bump Buildah, c/storage, c/image, c/common
  * libpod: bind ports before network setup
  * pkg/api: do not leak config pointers into specgen
  * build: Update gvisor-tap-vsock to 0.7.4
  * test/system: fix borken pasta interface name checks
  * test/system: fix bridge host.containers.internal test
  * CI: system tests: instrument to allow failure analysis
  * Use uploaded .zip for Windows action
  * RPM: podman-iptables.conf only on Fedora
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc2
  * Update release notes for v5.2.0-rc2
  * test/e2e: fix ncat tests
  * libpod: add hidden env to set sqlite timeout
  * Add support for StopSignal in quadlet .container files
  * podman pod stats: fix race when ctr process exits
  * Update module github.com/vbauerster/mpb/v8 to v8.7.4
  * libpod: correctly capture healthcheck output
  * Bump bundled krunkit to 0.1.2
  * podman stats: fix race when ctr process exists
  * nc -p considered harmful
  * podman pod stats: fix pod rm race
  * podman ps: fix racy pod name query
  * system connection remove: use Args function to validate
  * pkg/machine/compression: skip decompress bar for empty file
  * nc -p considered harmful
  * podman system df: fix fix ErrNoSuchCtr/Volume race
  * podman auto-update: fix ErrNoSuchCtr race
  * Fix name for builder in farm connection
  * 700-play.bats: use unique pod/container/image/volume names
  * safename: consistent within same test, and, dashes
  * 700-kube.bats: refactor $PODMAN_TMPDIR/test.yaml
  * 700-play.bats: eliminate $testYaml
  * 700-play.bats: refactor clumsy yamlfile creation
  * 700-play.bats: move _write_test_yaml up near top
  * chore(deps): update dependency setuptools to v71
  * Expand drop-in search paths * top-level (pod.d) * truncated (unit-.container.d)
  * Remove references and checks for --gpus
  * Do not crash on invalid filters
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.2.0
  * Bump to v5.2.0-dev
  * Bump to v5.2.0-rc1
  * Keep the volume-driver flag deprecated
  * Vendor in latest containers(common, storage,image, buildah)
  * System tests: safe container/image/volume/etc names
  * Implement disable default mounts via command line
  * test: drop unmount for overlay
  * test: gracefully terminate server
  * libpod: shutdown Stop waits for handlers completion
  * libpod: cleanup store at shutdown
  * Add NetworkAlias= support to quadlet
  * cmd: call shutdown handler stop function
  * fix race conditions in start/attach logic
  * swagger: exlude new docker network types
  * vendor: bump c/storage
  * update to docker 27
  * contrib: use a distinct --pull-option= for each flag
  * Update warning message when using external compose provider
  * Update module github.com/cyphar/filepath-securejoin to v0.3.0
  * Ignore result of EvalSymlinks on ENOENT
  * test/upgrade: fix tests when netavark uses nftables
  * test/system: fix network reload test with nftables
  * test/e2e: rework some --expose tests
  * test: remove publish tests from e2e
  * CI: test nftables driver on fedora
  * CI: use local registry, part 3 of 3: for developers
  * CI: use local registry, part 2 of 3: fix tests
  * CI: use local registry, part 1 of 3: setup
  * CI: test composefs on rawhide
  * chore(deps): update module google.golang.org/grpc to v1.64.1 [security]
  * chore(deps): update dependency setuptools to ~=70.3.0
  * Improve container filenname ambiguity.
  * containers/attach: Note bug around goroutine leak
  * Drop minikube CI test
  * add libkrun test docs
  * fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0
  * cirrus: check for header files in source code check
  * pkg/machine/e2e: run debug command only for macos
  * create runtime's worker queue before queuing any job
  * test/system: fix pasta host.containers.internal test
  * Visual Studio BuildTools as a MinGW alternative
  * SetupRootless(): only reexec when needed
  * pkg/rootless: simplify reexec for container code
  * cirrus: add missing test/tools to danger files
  * fix(deps): update module golang.org/x/tools to v0.23.0
  * Windows Installer: switch to wix5
  * fix(deps): update module golang.org/x/net to v0.27.0
  * pkg/machine/e2e: print tests timings at the end
  * pkg/machine/e2e: run debug commands after init
  * pkg/machine/e2e: improve timeout handling
  * libpod: first delete container then cidfile
  * fix(deps): update module golang.org/x/term to v0.22.0
  * System test fixes
  * cirrus.yml: automatic skips based on source
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.0
  * podman events: fix error race
  * chore(deps): update dependency setuptools to ~=70.2.0
  * fix(deps): update module github.com/gorilla/schema to v1.4.1 [security]
  * Update CI VM images
  * pkg/machine/e2e: fix broken cleanup
  * pkg/machine/e2e: use tmp file for connections
  * test/system: fix podman --image-volume to allow tmpfs storage
  * CI: mount tmpfs for container storage
  * docs: --network remove missing leading sentence
  * specgen: parse devices even with privileged set
  * vendor: update c/storage
  * Remove the unused machine volume-driver
  * feat(quadlet): log option handling
  * Error when machine memory exceeds system memory
  * machine: Always use --log-file with gvproxy
  * CI: Build-Each-Commit test: run only on PRs
  * Small fixes for testing libkrun
  * Podman machine resets all providers
  * Clearly indicate names w/ URLencoded duplicates
  * [skip-ci] Packit: split rhel and centos-stream jobs
  * apple virtiofs: fix racy mount setup
  * cirrus: fix broken macos artifacts URL
  * libpod/container_top_linux.c: fix missing header
  * refactor(build): improve err when file specified by -f does not exist
  * Minor: Remove unhelpful comment
  * Update module github.com/openshift/imagebuilder to v1.2.11
  * Minor: Rename the OSX Cross task
  * [skip-ci] Remove conditionals from changelog
  * podman top: join the container userns
  * Run linting in parallel with building
  * Fix missing Makefile target dependency
  * build API: accept platform comma separated
  * [skip-ci] RPM: create podman-machine subpackage
  * ExitWithError() - more upgrades from Exit()
  * test/e2e: remove podman system service tests
  * cirrus: reduce int tests timeout
  * cirrus: remove redundant skip logic
  * pkg/machine/apple: machine stop timeout
  * CI: logformatter: link to correct PR base
  * Update module github.com/crc-org/crc/v2 to v2.38.0
  * ExitWithError(): continued
  * test/system: Add test steps for journald log check in quadlet
  * restore: fix missing network setup
  * podman run use pod userns even with --pod-id-file
  * macos-installer: bundle krunkit
  * remote API: fix pod top error reporting
  * libpod API: return proper error status code for pod start
  * fix #22233
  * added check for `registry.IsRemote()`. and correct error message.
  * fix #20686
  * pkg/machine/e2e: Remove unnecessary copy of machine image.
  * libpod: intermediate mount if UID not mapped into the userns
  * libpod: avoid chowning the rundir to root in the userns
  * libpod: do not chmod bind mounts
  * libpod: unlock the thread if possible
  * CI Cleanup: Remove cgroups v1 support
  * ExitWithError() - more upgrades from Exit()
  * remote: fix incorrect CONTAINER_CONNECTION parsing
  * container: pass KillSignal and StopTimeout to the systemd scope
  * libpod: fix comment
  * e2e: test container restore in pod by name
  * docs: Adds all PushImage supported paramters to openapi docs.
  * systests: kube: bump up a timeout
  * cirrus.yml: add CI:ALL mode to force all tests
  * cirrus.yml: implement skips based on source changes
  * CI VMs: bump
  * restore: fix container restore into pod
  * sqlite_state: Fix RewriteVolumeConfig
  * chore(deps): update dependency setuptools to ~=70.1.0
  * Quadlet - use specifier for unescaped values for templated container name
  * cirrus: check for system test leaks in nightly
  * test/system: check for leaks in teardown suite
  * test/system: speed up basic_{setup,teardown}()
  * test/system: fix up many tests that do not cleanup
  * test/system: fix podman --authfile=nonexistent-path
  * Update module github.com/containernetworking/plugins to v1.5.1
  * Update module github.com/checkpoint-restore/checkpointctl to v1.2.1
  * Update module github.com/spf13/cobra to v1.8.1
  * Update module github.com/gorilla/schema to v1.4.0
  * pkg/machine/wsl: force terminate wsl instance
  * pkg/machine/wsl: wrap command errors
  * [CI:DOCS] Quadlet - add note about relative path resolution
  * CI: do not install python packages at runtime
  * Release workflow: Include candidate descriptor
  * Minor: Fix indentation in GHA release workflow
  * GHA: Send release notification mail
  * GHA: Validate release version number
  * Remove references to --pull=true and --pull=false
  * ExitWithError, continued
  * podman: add new hidden flag --pull-option
  * [CI:DOCS] Fix typos in podman-build
  * infra: mark storageSet when imagestore is changed
  * [CI:DOCS] Add jnovy as reviewer and approver
  * fix(deps): update module google.golang.org/protobuf to v1.34.2
  * refactor(machine,wsl): improve operations of Windows API
  * --squash --layers=false should be allowed
  * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0
  * update golangci-lint to v1.59.1
  * Rename master to main in CONTRIBUTING.md
  * podman 5, pasta and inter-container networking
  * libpod: do not resuse networking on start
  * machine/linux: Switch to virtiofs by default
  * machine/linux: Support virtiofs mounts (retain 9p default)
  * machine/linux: Use memory-backend-memfd by default
  * ExitWithError() - continued
  * Enable libkrun provider to open a debug console
  * Add new targets on Windows makefile (winmake.ps1)
  * fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1
  * fix(deps): update module golang.org/x/tools to v0.22.0
  * fix(deps): update module golang.org/x/net to v0.26.0
  * libpod: fix 'podman kube generate' on FreeBSD
  * fix(deps): update module golang.org/x/sys to v0.21.0
  * libpod: do not leak systemd hc startup unit timer
  * vendor latest c/common
  * pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly
  * run bats -T, to profile timing hogs
  * test/system: speed up podman ps --external
  * test/system: speed up podman network connect/disconnect
  * test/system: speed up podman network reload
  * test/system: speed up quadlet - pod simple
  * test/system: speed up podman parallel build should not race
  * test/system: speed up podman cp dir from host to container
  * test/system: speed up podman build - workdir, cmd, env, label
  * test/system: speed up podman --log-level recognizes log levels
  * test/system: remove obsolete debug in net connect/disconnect test
  * test/system: speed up quadlet - basic
  * test/system: speed up user namespace preserved root ownership
  * System tests: add `podman system check` tests
  * Add `podman system check` for checking storage consistency
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0
  * fix(libpod): add newline character to the end of container's hostname file
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
  * fix(deps): update github.com/containers/image/v5 digest to aa93504
  * Fix 5.1 release note re: runlabel
  * test/e2e: use local skopeo not image
  * fix(deps): update golang.org/x/exp digest to fd00a4e
  * [CI:DOCS] Add contrib/podmanimage/stable path back in repo
  * chore(deps): update dependency requests to ~=2.32.3
  * fix(deps): update github.com/containers/image/v5 digest to 2343e81
  * libpod: do not move podman with --cgroups=disabled
  * Update release notes on Main to v5.1.0
  * test: look at the file base name
  * tests: simplify expected output
  * Sigh, new VMs again
  * Fail earlier when no containers exist in stats
  * Add Hyper-V option in windows installer
  * libpod: cleanup default cache on system reset
  * vendor: update c/image
  * test/system: speed up kube generate tmpfs on /tmp
  * test/system: speed up podman kube play tests
  * test/system: speed up podman shell completion test
  * test/system: simplify test signal handling in containers
  * test/system: speed up podman container rm ...
  * test/system: speed up podman ps - basic tests
  * test/system: speed up read-only from containers.conf
  * test/system: speed up podman logs - multi ...
  * test/system: speed up podman run --name
  * Debian: switch to crun
  * test/system: speed up podman generate systemd - envar
  * test/system: speed up podman-kube@.service template
  * test/system: speed up kube play healthcheck initialDelaySeconds
  * test/system: speed up exit-code propagation test
  * test/system: speed up "podman run --timeout"
  * test/system: fix slow kube play --wait with siginterrupt
  * undo auto-formatting
  * test/system: speed up podman events tests
  * Quadlet: Add support for .build files
  * test/system: speed up "podman auto-update using systemd"
  * test/system: remove podman wait test
  * tests: disable tests affected by a race condition
  * update golangci-lint to v1.59.0
  * kubernetes_support.md: Mark volumeMounts.subPath as supported
  * working name of pod on start and stop
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
  * Bump Buildah to v1.36.0
  * fix(deps): update module github.com/burntsushi/toml to v1.4.0
  * fix typo in Tutorials.rst
  * Mac PM test: Require pre-installed rosetta
  * test/e2e: fix new error message
  * Add configuration for podmansh
  * Update containers/common to latest main
  * Only stop chowning volumes once they're not empty
  * podman: fix --sdnotify=healthy with --rm
  * libpod: wait another interval for healthcheck
  * quadlet: Add a network requirement on .image units
  * test, pasta: Ignore deprecated addresses in tests
  * [CI:DOCS] performance: update network docs
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
  * CI: disable minikube task
  * [CI:DOCS] Fix windows action trigger
  * chore(deps): update dependency setuptools to v70
  * Check AppleHypervisor before accessing it
  * fix(deps): update module github.com/containernetworking/plugins to v1.5.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2
  * add podman-clean-transient.service service to rootless
  * [CI:DOCS] Update podman network docs
  * fix incorrect host.containers.internal entry for rootless bridge mode
  * vendor latest c/common main
  * Add Rosetta support for Apple Silicon mac
  * bump main to 5.2.0-dev
  * Use a defined constant instead of a hard-coded magic value
  * cirrus: use faster VM's for integration tests
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c
  * [CI:DOCS] Fix Mac pkg link
  * test: remove test_podman* scripts
  * test/system: fix documentation
  * Return StatusNotFound when multiple volumes matching occurs
  * container_api: do not wait for healtchecks if stopped
  * libpod: wait for healthy on main thread
  * `podman events`: check for an error after we finish reading events
  * remote API: restore v4 payload in container inspect
  * Fix updating connection when SSH port conflict happens
  * rootless: fix reexec to use /proc/self/exe
  * ExitWithError() - enforce required exit status &amp; stderr
  * ExitWithError() - a few that I missed
  * [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds
  * Revert "Temporarily disable rootless debian e2e testing"
  * CI tests: enforce TMPDIR on tmpfs
  * use new CI images with tmpfs /tmp
  * run e2e test on tmpfs
  * Update module github.com/crc-org/crc/v2 to v2.36.0
  * Address CVE-2024-3727
  * [CI:DOCS] Use checkout@v4 in GH Actions
  * ExitWithError() - rmi_test
  * ExitWithError() - more r files
  * ExitWithError() - s files
  * ExitWithError() - more run_xxx tests
  * Fix podman-remote support for `podman farm build`
  * [CI:DOCS] Trigger windows installer action properly
  * Revert "container stop: kill conmon"
  * Ensure that containers do not get stuck in stopping
  * [CI:DOCS] Improvements to make validatepr
  * ExitWithError() - rest of the p files
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1
  * Graceful shutdown during podman kube down
  * Remove duplicate  call
  * test/system: fix broken "podman volume globs" test
  * Quadlet/Container: Add GroupAdd option
  * Don't panic if a runtime was configured without paths
  * update c/{buildah,common,image,storage} to latest main
  * update golangci-lint to 1.58
  * machine: Add LibKrun provider detection
  * ExitWithError() - continue tightening
  * fix(deps): update module google.golang.org/protobuf to v1.34.1
  * test: improve test for powercap presence
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3
  * fix(deps): update module go.etcd.io/bbolt to v1.3.10
  * fix(deps): update module golang.org/x/tools to v0.21.0
  * [skip-ci] RPM: `bats` required only on Fedora
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842
  * gpdate and remove parameter settings in `.golangci.yml`
  * ExitWithError() - play_kube_test.go
  * Temporarily disable rootless debian e2e testing
  * fix(deps): update module golang.org/x/crypto to v0.23.0
  * CI Docs: Clarify passthrough_envars() comments
  * Skip machine tests if they don't need to be run
  * Update CI VMs to F40, F39, D13
  * ExitWithError() - v files
  * Update module golang.org/x/term to v0.20.0
  * machine: Add provider detection API
  * util: specify a not empty pause dir for root too
  * Add missing option 'healthy' to output of `podman run --help`
  * [CI:DOCS] Add info on the quay.io images to the README.md
  * Add a random suffix to healthcheck unit names
  * test/e2e: remove toolbox image
  * Also substitute $HOME in runlabel with user's homedir
  * Update module github.com/cyphar/filepath-securejoin to v0.2.5
  * Change tmpDir for macOS
  * ExitWithError() - pod_xxx tests
  * ExitWithError() -- run_test.go
  * Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
  * Update module github.com/shirou/gopsutil/v3 to v3.24.4
  * Update module github.com/docker/docker to v26.1.1+incompatible
  * GHA: Attempt fix exceeded a secondary rate limit
  * vendor ginkgo 2.17.2 into test/tools
  * Fix machine volumes with long path and paths with dashes
  * Update module google.golang.org/protobuf to v1.34.0
  * Update module github.com/crc-org/crc/v2 to v2.35.0
  * Update module github.com/onsi/gomega to v1.33.1
  * test/e2e: podman unshare image mount fix tmpdir leak
  * test/e2e: do not leak /tmp/private_file
  * test/e2e: "persistentVolumeClaim with source" do not leak file
  * e2e tests: use /var/tmp, not $TMPDIR, as workdirs
  * Update dependency pytest to v8.1.2
  * Remove unncessary lines at the end of specfile summary
  * Clean machine pull cache
  * Add krun support to podman machine
  * Use custom image for make validatepr
  * test/e2e: force systemd cgroup manager
  * e2e and bindings tests: fix $PATH setup
  * Makefile: remove useless HACK variable in e2e test
  * test/e2e: fix volumes and suid/dev/exec options
  * test/e2e: volumes and suid/dev/exec options works remote
  * test/e2e: fix limits test
  * Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0
  * Correct option name `ip` -&gt; `ip6`
  * Add the ability to automount images as volumes via play
  * Add support for image volume subpaths
  * Bump Buildah to latest main
  * Update Makefile to Go 1.22 for in-container
  * ExitWithError() - yet more low-hanging fruit
  * ExitWithError() - more low-hanging fruit
  * ExitWithError() - low-hanging fruit
  * chore: fix function names in comment
  * Remove redundant Prerequisite before build section
  * Remove PKG_CONFIG_PATH
  * Add installation instructions for openSUSE
  * Replace golang.org/x/exp/slices with slices from std
  * Update to go 1.21
  * fix(deps): update module github.com/docker/docker to v26.1.0+incompatible
  * [CI:DOCS] Fix artifact action
  * [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals
  * e2e tests: stop littering
  * [CI:DOCS] format podman-pull example as code
  * [CI:DOCS] Build &amp; upload release artifacts with GitHub Actions
  * libpod: getHealthCheckLog() remove unessesary check
  * add containers.conf healthcheck_events support
  * vendor latest c/common
  * libpod: make healthcheck events more efficient
  * libpod: wrap store setup error message
  * [skip-ci] Packit: enable CentOS 10 Stream build jobs
  * pkg/systemd: use fileutils.(Le|E)xists
  * pkg/bindings: use fileutils.(Le|E)xists
  * pkg/util: use fileutils.(Le|E)xists
  * pkg/trust: use fileutils.(Le|E)xists
  * pkg/specgen: use fileutils.(Le|E)xists
  * pkg/rootless: use fileutils.(Le|E)xists
  * pkg/machine: use fileutils.(Le|E)xists
  * pkg/domain: use fileutils.(Le|E)xists
  * pkg/api: use fileutils.(Le|E)xists
  * libpod: use fileutils.(Le|E)xists
  * cmd: use fileutils.(Le|E)xists
  * vendor: update containers/{buildah,common,image,storage}
  * fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security]
  * fix podman-pod-restart.1.md typo
  * [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next
  * fix(deps): update module github.com/onsi/gomega to v1.33.0
  * Add more annnotation information to podman kupe play man page
  * test/compose: remove compose v1 code
  * CI: remove compose v1 tests
  * fix: close resource file
  * [CI:DOCS] Fix windows installer action
  * fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2
  * add `list` as an alias to list networks
  * Add support for updating restart policy
  * Add Compat API for Update
  * Make `podman update` changes persistent
  * Emergency fix (well, skip) for failing bud tests
  * fix swagger doc for manifest create
  * [CI:DOCS] options/network: fix markdown lists
  * Makefile: do not hardcode `GOOS` in `podman-remote-static` target
  * chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  * chore(deps): update dependency setuptools to ~=69.5.0
  * Fix some comments
  * swagger fix infinitive recursion on some types
  * install swagger from source
  * Revert "Swap out javascript engine"
  * podman exec CID without command should exit 125
  * (minor) prefetch systemd image before use
  * Update go-swagger version
  * Swap out javascript engine
  * fix(deps): update module github.com/docker/docker to v26.0.1+incompatible
  * Add os, arch, and ismanifest to libpod image list
  * [CI:DOCS]Initial PR validation
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71
  * vendor ginkgo 2.17.1 into test/tools
  * fix "concurrent map writes" in network ls compat endpoint
  * chore(deps): update dependency pytest to v8
  * e2e: redefine ExitWithError() to require exit code
  * docs: fix missleading run/create --expose description
  * podman ps: show exposed ports under PORTS as well
  * rootless: drop function ReadMappingsProc
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3
  * New CI VMs, to give us pasta 2024-04-05
  * Add big warning to GHA workflow
  * GHA: Fix intermittent workflow error
  * fix(deps): update module golang.org/x/tools to v0.20.0
  * e2e tests: remove requirement for fuse-overlayfs
  * docs: update Quadlet volume Options desc
  * fix(deps): update module golang.org/x/sync to v0.7.0
  * Fix relabeling failures with Z/z volumes on Mac
  * fix(deps): update module golang.org/x/net to v0.24.0
  * Makefile: fix annoying errors in docs generation
  * chore: fix function names in comment
  * Bump tags.cncf.io/container-device-interface to v0.7.1
  * fix(deps): update module golang.org/x/crypto to v0.22.0
  * Detect unhandled reboots and require user intervention
  * podman --runroot: remove 50 char length restriction
  * update github.com/rootless-containers/rootlesskit to v2
  * Update module github.com/gorilla/schema to v1.3.0
  * Update dependency requests-mock to ~=1.12.1
  * Update module github.com/crc-org/crc/v2 to v2.34.1
  * rm --force work for more than one arg
  * [CI:DOCS] Update kube docs
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3
  * [CI:DOCS] Add GitHub action to update version on Podman.io
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2
  * Windows: clean up temporary perl install
  * pkg/util: FindDeviceNodes() ignore ENOENT errors
  * [CI:DOCS] build deps: make-validate needs docs
  * test/system: add rootless-netns test for setup errors
  * vendor latest c/common main
  * container: do not chown to dest target with U
  * [CI:DOCS] golangci-lint: update deprecated flags
  * systests: conditionalize slirp4netns tests
  * CI: systests: instrument flaky tests
  * s3fs docs
  * test: do not skip tests under rootless
  * Add note about host networking to Kube PublishPort option
  * Inject additional build tags from the environment
  * libpod: use original IDs if idmap is provided
  * Switch back to checking out the same branch the action script runs in
  * docs/podman-login: Give an example of writing the persistent path
  * CI: Bump VMs to 2024-03-28
  * [skip-ci] Update dawidd6/action-send-mail action to v3.12.0
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.7
  * Fix reference to deprecated types.Info
  * Use logformatter for podman_machine_windows_task
  * applehv: Print vfkit logs in --log-level debug
  * [CI:DOCS]Add Mario to reviewers list
  * [CI:DOCS] Document CI-maintenance job addition
  * Add golang 1.21 update warning
  * Add rootless network command to `podman info`
  * libpod: don't warn about cgroupsv1 on FreeBSD
  * hyperv: error if not admin
  * Properly parse stderr when updating container status
  * [skip-ci] Packit: specify fedora-latest in propose-downstream
  * Use built-in ssh impl for all non-pty operations
  * Add support for annotations
  * hyperv: fix machine rm -r
  * [skip-ci] Packit: Enable CentOS Stream 10 update job
  * 5.0 release note fix typo in cgroupv1 env var
  * fix remote build isolation on client side
  * chore: remove repetitive words
  * Dont save remote context in temp file but stream and extract
  * fix remote build isolation when server runs as root
  * util: use private propagation with bind
  * util: add some tests for ProcessOptions
  * util: refactor ProcessOptions into an internal function
  * util: rename files to snake case
  * Add LoongArch support for libpod
  * fix(deps): update github.com/containers/common digest to bc5f97c
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1
  * fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security]
  * fix(deps): update module github.com/onsi/gomega to v1.32.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0
  * Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4
  * Fix type-o
  * Use correct extension in suite
  * minikube: instrument tests, to allow debugging failures
  * libpod: restart always reconfigure the netns
  * use new c/common pasta2 setup logic to fix dns
  * utils: drop conversion float-&gt;string-&gt;float
  * utils: do not generate duplicate range
  * logformatter: handle Windows logs
  * utils: add test for the new function
  * utils: move rootless code to a new function
  * CVE-2024-1753 fix for main
  * xref-helpmsgs-manpages: cross-check Commands.rst
  * test/system: Add support for multipath routes in pasta networking tests
  * [skip-ci] rpm: use macro supported vendoring
  * Adjust to the standard location of gvforwarder used in new images
  * Makefile: add target `podman-remote-static`
  * Switch to 5.x WSL machine os stream using new automation
  * Cleanup build scratch dir if remote end disconnects while passing the context
  * bump main to 5.1.0-dev
  * Use faster gzip for compression for 3x speedup for sending large contexts to remote
  * pkg/machine: make checkExclusiveActiveVM race free
  * pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
  * pkg/machine: CheckExclusiveActiveVM should also check for starting
  * pkg/machine: refresh config after we hold lock
  * Update dependency setuptools to ~=69.2.0
  * [skip-ci] rpm: update containers-common dep on f40+
  * fix invalid HTTP header values when hijacking a connection
  * Add doc to build podman on windows without MSYS
  * Removing CRI-O related annotations
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * Pass the restart policy to the individual containers
  * kube play: always pull when both imagePullPolicy and tag are missing</changelog>
  <changelog author="danish.prakash@suse.com" date="1741003200">- Add patch for CVE-2025-27144 (bsc#1237641):
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
- Rebase patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1742299200">- Add patch for CVE-2025-22869 (bsc#1239330):
  * 0003-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Rebase patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch</changelog>
  <changelog author="dcermak@suse.com" date="1743076800">- Depend on runc unconditionally, not only on SLE 15 (bsc#1239088)</changelog>
  <changelog author="danish.prakash@suse.com" date="1747051200">- Add patch for bsc#1242132:
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Removed patches:
  * 0001-vendor-bump-buildah-to-1.37.6-CVE-2024-11218.patch
  * 0002-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
  * 0003-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Drop iptables support in favor of nftables (required by netavark)
- Fix conditional Requires (remove deprecated sle_version macro)
- Update to version 5.4.2:
  * Bump to v5.4.2
  * Add release notes for v5.4.2
  * Fix a potential deadlock during `podman cp`
  * Improve the file format documentation of podman-import.
  * Revert "podman-import only supports gz and tar"
  * Bump buildah to v1.39.4
  * libpod: do not cover idmapped mountpoint
  * test: Fix runc error message
  * oci: report empty exec path as ENOENT
  * test: adapt tests new crun error messages
  * test: remove duplicate test
  * cirrus: test only on f41/rawhide
  * CI: use z1d instance for windows machine testing
  * New images 2025-03-24
  * test/e2e: use go net.Dial() ov nc
  * test: use ncat over nc
  * New images 2025-03-12
  * RPM: Add riscv64 to ExclusiveArch-es
  * Fix HealthCheck log destination, count, and size defaults
  * Win installer test: hardcode latest GH release ID
  * Packit: Fix action script for fetching upstream commit
  * Bump to v5.4.2-dev
  * Bump to v5.4.1
  * update gvproxy version to 0.8.4
  * Update Buildah to v1.39.2
  * Update release notes for v5.4.1
  * Fix reporting summed image size for compat endpoint
  * podman-import only supports gz and tar
  * quadlet kube: correctly mark unit as failed
  * pkg/domain/infra/abi/play.go: fix two nilness issues
  * kube play: don't print start errors twice
  * libpod: race in WaitForConditionWithInterval()
  * libpod: race in WaitForExit() with autoremove
  * Don't try to resolve host path if copying to container from stdin.
  * Use svg for pkginstaller banner
  * Create quota before _data dir for volumes
  * Packit: clarify secondary status in CI
  * Packit/RPM: Display upstream commit SHA in all rpm builds
  * podman run: fix --pids-limit -1 wrt runc
  * vendor: update github.com/go-jose/go-jose/v3 to v3.0.4
  * chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
  * wire up --retry-delay for artifact pull
  * Revert "silence false positve from golangci-lint"
  * update golangci-lint to v1.64.4
  * update golangci-lint to v1.64.2
  * silence false positve from golangci-lint
  * cmd/podman: refactor Context handling
  * fix new usetesting lint issue
  * Packit/Copr: Fix `podman version` in rpm
  * Remove persist directory when cleaning up Conmon files
  * Bump to v5.4.1-dev
  * Bump to v5.4.0
  * Update release notes for v5.4.0 final
  * In SQLite state, use defaults for empty-string checks
  * Bump FreeBSD version to 13.4
  * docs: add v5.4 to API reference
  * Update rpm/podman.spec
  * RPM: set buildOrigin in LDFLAG
  * RPM: cleanup macro defs
  * Makefile: escape BUILD_ORIGIN properly
  * rootless: fix hang on s390x
  * Set Cirrus DEST_BRANCH appropriately to fix CI
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc3
  * Update release notes for v5.4.0-rc3
  * Add BuildOrigin field to podman info
  * artifact: only allow single manifest
  * test/e2e: improve write/removeConf()
  * Add --noheading to artifact ls
  * Add --no-trunc to artifact ls
  * Add type and annotations to artifact add
  * pkg/api: honor cdi devices from the hostconfig
  * util: replace Walk with WalkDir
  * fix(pkg/rootless): avoid memleak during init() contructor.
  * Add `machine init --playbook`
  * RPM: include empty check to silence rpmlint
  * RPM: adjust qemu dependencies
  * Force use of iptables on Windows WSL
  * rpm: add attr as dependency for podman-tests
  * update gvproxy version
  * [v5.4] Bump Buildah to v1.39.0
  * podman exec: correctly support detaching
  * libpod: remove unused ExecStartAndAttach()
  * [v5.4] Bump c/storage to v1.57.1, c/image v5.34.0, c/common v0.62.0
  * Move detection of libkrun and intel
  * Prevent two podman machines running on darwin
  * Remove unnecessary error handling
  * Remove usused Kind() function
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc2
  * Update release notes for v5.4.0-rc2
  * Safer use of `filepath.EvalSymlinks()` on Windows
  * error with libkrun on intel-based machines
  * chore(deps): update dependency pytest to v8.3.4
  * test/buildah-bud: skip two new problematic tests on remote
  * Fix podman-restart.service when there are no containers
  * Avoid upgrading from v5.3.1 on Windows
  * Clean up after unexpectedly terminated build
  * system-tests: switch ls with getfattr for selinux tests
  * vendor latest c/{buildah,common,image,storage}
  * Makefile: Add validatepr description for 'make help' output
  * docs: Enhance podman build --secret documentation and add examples
  * docs: mount.md - idmapped mounts only work for root user
  * Define, and use, PodmanExitCleanlyWithOptions
  * Eliminate PodmanSystemdScope
  * Fix image ID query
  * Revert "Use the config digest to compare images loaded/pulled using different methods"
  * Update c/image after https://github.com/containers/image/pull/2613
  * Update expected errors when pulling encrypted images
  * Eliminate PodmanExtraFiles
  * Introduce PodmanTestIntegration.PodmanWithOptions
  * Restructure use of options
  * Inline PodmanBase into callers
  * Pass all of PodmanExecOptions to various [mM]akeOptions functions
  * Turn PodmanAsUserBase into PodmanExecBaseWithOptions
  * Avoid indirect links through quadlet(5)
  * do not set the CreateCommand for API users
  * Add podman manifest rm --ignore
  * Bump to v5.4.0-dev
  * Bump to v5.4.0-rc1
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.2
  * podman artifact
  * vendor latest c/{common,image,storage}
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.2
  * cirrus: bump macos machine test timeout
  * pkg/machine/e2e: improve podman.exe match
  * pkg/machine/e2e: improve "list machine from all providers"
  * Remove JSON tag from UseImageHosts in ContainerConfig
  * Set network ID if available during container inspect
  * Stop creating a patch for v5.3.1 upgrades on windows
  * compose docs: fix typo
  * Document kube-play CDI support
  * docs: Add quadlet debug method systemd-analyze
  * Replace instances of PodmanExitCleanly in play_kube_test.go
  * docs: add 'initialized' state to status filters
  * fix(deps): update module google.golang.org/protobuf to v1.36.3
  * Switch all calls of assert.Nil to assert.NoError
  * Add --no-hostname option
  * Fix unescaping octal escape sequence in values of Quadlet unit files
  * Remove `.exe` suffix if any
  * Add kube play support for CDI resource allocation
  * add support to `;` for comments in unit files as per systemd documentation
  * Use PodmanExitCleanly in attach_test.go
  * Introduce PodmanTestIntegration.PodmanExitCleanly
  * chore(deps): update dependency setuptools to ~=75.8.0
  * Add newer c/i to support artifacts
  * fix(deps): update module golang.org/x/tools to v0.29.0
  * fix(deps): update module golang.org/x/net to v0.34.0
  * specgenutil: Fix parsing of mount option ptmxmode
  * namespaces: allow configuring keep-id userns size
  * Update description for completion
  * Quadlet - make sure the /etc/containers/systemd/users is traversed in rootless
  * Document .build for Image .container option
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.9.1
  * New VM Images
  * update golangci/golangci-lint to v1.63.4
  * fix(deps): update module google.golang.org/protobuf to v1.36.2
  * chore(deps): update dependency setuptools to ~=75.7.0
  * Fixing ~/.ssh/identity handling
  * vendor latest c/common from main
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.12
  * fix(deps): update module github.com/opencontainers/runc to v1.2.4
  * specgen: fix comment
  * Add hint to restart Podman machine to really accept new certificates
  * fix(deps): update module github.com/onsi/gomega to v1.36.2
  * fix(deps): update module github.com/moby/term to v0.5.2
  * Pass container hostname to netavark
  * Fix slirp4netns typo in podman-network.1.md
  * Add support to ShmSize in Pods with Quadlet
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.1
  * chore(deps): update module golang.org/x/crypto to v0.31.0 [security]
  * fix(deps): update module golang.org/x/net to v0.33.0 [security]
  * Kube volumes can not container _
  * fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
  * test/system: fix "podman play --build private registry" error
  * test/system: CopyDirectory() do not chown files
  * test/system: remove system dial-stdio test
  * shell completion: respect CONTAINERS_REGISTRIES_CONF
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.6
  * When generating host volumes for k8s, force to lowercase
  * test: enable newly added test
  * vfkit: Use 0.6.0 binary
  * gvproxy: Use 0.8.1 binary
  * systemd: simplify parser and fix infinite loop
  * Revert "win-installer test: revert to v5.3.0"
  * Avoid rebooting twice when installing WSL
  * Avoid rebooting on Windows when upgrading and WSL isn't installed
  * Add win installer patch
  * Bump WiX toolset version to 5.0.2
  * test/e2e: SkipOnOSVersion() add reason field
  * test/e2e: remove outdated SkipOnOSVersion() calls
  * Update VM images
  * fix(deps): update module golang.org/x/crypto to v0.31.0 [security]
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.45.0
  * fix(deps): update module github.com/opencontainers/runc to v1.2.3
  * quadlet: fix inter-dependency of containers in `Network=`
  * Add man pages to Mac installer
  * fix(deps): update module github.com/onsi/gomega to v1.36.1
  * fix(deps): update module github.com/docker/docker to v27.4.0+incompatible
  * Fix device limitations in podman-remote update on remote systems
  * Use latest version of VS BuildTools
  * bin/docker: fix broken escaping and variable substitution
  * manifest annotate: connect IndexAnnotations
  * Fix panic in `manifest annotate --index`
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.5
  * fix(deps): update module golang.org/x/net to v0.32.0
  * fix(deps): update module golang.org/x/tools to v0.28.0
  * fix(deps): update module golang.org/x/crypto to v0.30.0
  * fix(deps): update module golang.org/x/sys to v0.28.0
  * Fix overwriting of LinuxResources structure in the database
  * api: replace inspectID with name
  * fix(deps): update github.com/opencontainers/runtime-tools digest to f7e3563
  * Replace ExclusiveArch with ifarch
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.1
  * Improve platform specific URL handling in `podman compose` for machines
  * Fix `podman info` with multiple imagestores
  * Switch to fixed common
  * refact: use uptime.minutes instead of uptime.seconds
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.11
  * fix(deps): update golang.org/x/exp digest to 2d47ceb
  * fix(deps): update github.com/godbus/dbus/v5 digest to c266b19
  * Cover Unix socket in inpect test on Windows platform
  * Add a test for forcing compression and v2s2 format
  * fix(deps): update module github.com/crc-org/vfkit to v0.6.0
  * Package podman-machine on supported architectures only.
  * Fixes missing binary in systemd.
  * stats: ignore errors from containers without cgroups
  * api: Error checking before NULL dereference
  * [skip-ci] Packit/copr: switch to fedora-all
  * make remotesystem: fail early if serial tests fail
  * spec: clamp rlimits without CAP_SYS_RESOURCE
  * Clarify the reason for skip_if_remote
  * Sanity-check that the test is really using partial pulls
  * Fix apparent typos in zstd:chunked tests
  * Fix compilation issues in QEMU machine files (Windows platform)
  * Mount volumes before copying into a container
  * Revert "libpod: remove shutdown.Unregister()"
  * docs: improve documentation for internal networks
  * docs: document bridge mode option
  * [skip-ci] Packit: remove epel and re-enable c9s
  * chore(deps): update dependency golangci/golangci-lint to v1.62.2
  * vendor: update containers/common
  * OWNERS: remove edsantiago
  * fix(deps): update module github.com/onsi/gomega to v1.36.0
  * fix(deps): update github.com/containers/common digest to ceceb40
  * refact: EventerType and improve consistency
  * Add --hosts-file flag to container and pod commands
  * Add nohosts option to /build and /libpod/build
  * fix(deps): update module github.com/stretchr/testify to v1.10.0
  * Quadlet - Use = sign when setting the pull arg for build
  * win-installer test: revert to v5.3.0
  * fix(deps): update module github.com/crc-org/crc/v2 to v2.44.0
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.0
  * chore(deps): update dependency setuptools to ~=75.6.0
  * Update windows installer tests
  * Windows: don't install WSL/HyperV on update
  * Switch to non-installing WSL by default
  * fix(deps): update github.com/containers/buildah digest to 52437ef
  * Configure HealthCheck with `podman update`
  * CI: --image-volume test: robustify
  * docs: add 5.3 as Reference version
  * Bump CI VMs
  * libpod: pass down NoPivotRoot to Buildah
  * vendor: bump containers/buildah
  * fix(deps): update module github.com/opencontainers/runc to v1.2.2
  * Overlay mounts supersede image volumes &amp; volumes-from
  * libpod: addHosts() prevent nil deref
  * only read ssh_config for non machine connections
  * ssh_config: allow IdentityFile file with tilde
  * ssh_config: do not overwrite values from config file
  * connection: ignore errors when parsing ssh_config
  * Bump bundled krunkit to 0.1.4
  * fix(deps): update module google.golang.org/protobuf to v1.35.2
  * add support for driver-specific options during container creation
  * doc: fix words repetitions
  * Update release notes on main for v5.3.0
  * chore(deps): update dependency setuptools to ~=75.5.0
  * CI: system tests: parallelize 010
  * fix podman machine init --ignition-path
  * vendor: update containers/common
  * spec: clamp rlimits in a userns
  * Add subpath support to volumes in `--mount` option
  * refactor: simplify LinuxNS type definition and String method
  * test/e2e: remove FIPS test
  * vendor containers projects to tagged versions
  * fix(deps): update module github.com/moby/sys/capability to v0.4.0
  * chore(deps): update dependency setuptools to ~=75.4.0
  * system tests: safer install_kube_template()
  * Buildah treadmill tweaks
  * update golangci-lint to v1.62.0
  * fix(deps): update module golang.org/x/net to v0.31.0
  * fix(deps): update module golang.org/x/tools to v0.27.0
  * Revert "Reapply "CI: test nftables driver on fedora""
  * Yet another bump, f41 with fixed kernel
  * test: add zstd:chunked system tests
  * pkg/machine/e2e: remove dead code
  * fix(deps): update module golang.org/x/crypto to v0.29.0
  * kube SIGINT system test: fix race in timeout handling
  * New `system connection add` tests
  * Update codespell to v2.3.0
  * Avoid printing PR text to stdout in system test
  * Exclude symlink from pre-commit end-of-file-fixer
  * api: Add error check
  * [CI:ALL] Bump main to v5.4.0-dev
  * test/buildah-bud: build new inet helper
  * test/system: add regression test for TZDIR local issue
  * vendor latest c/{buildah,common,image,storage}
  * Reapply "CI: test nftables driver on fedora"
  * Revert "cirrus: test only on f40/rawhide"
  * test f41 VMs
  * AdditionalSupport for SubPath volume mounts
  * wsl-e2e: Add a test to ensure port 2222 is free with usermode networking
  * winmake.ps1: Fix the syntax of the function call Win-SSHProxy
  * volume ls: fix race that caused it to fail
  * gvproxy: Disable port-forwarding on WSL
  * build: update gvisor-tap-vsock to 0.8.0
  * podman: update roadmap
  * Log network creation and removal events in Podman
  * libpod: journald do not lock thread
  * Add key to control if a container can get started by its pod
  * Honor users requests in quadlet files
  * CI: systests: workaround for parallel podman-stop flake
  * Fix inconsistent line ending in win-installer project
  * fix(deps): update module github.com/opencontainers/runc to v1.2.1
  * Quadlet - support image file based mount in container file
  * API: container logs flush status code
  * rework event code to improve API errors
  * events: remove memory eventer
  * libpod: log file use Wait() over event API
  * Makefile: vendor target should always remove toolchain
  * cirrus: check consitent vendoring in test/tools
  * test/tools/go.mod: remove toolchain
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10
  * fix(deps): update module github.com/onsi/gomega to v1.35.1
  * doc: explain --interactive in more detail
  * fix(deps): update golang.org/x/exp digest to f66d83c
  * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
  * fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c
  * add default polling interval to Container.Wait
  * Instrument cleanup tracer to log weird volume removal flake
  * make podman-clean-transient.service work as user
  * Add default remote socket path if empty
  * Use current user if no user specified
  * Add support for ssh_config for connection
  * libpod: use pasta Setup() over Setup2()
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0
  * fix(deps): update module github.com/onsi/gomega to v1.35.0
  * logformatter: add cleanup tracer log link
  * docs: fix broken example
  * docs: add missing swagger links for the stable branches
  * readthedocs: build extra formats
  * pkg/machine/e2e: remove debug
  * fix(docs): Integrate pasta in rootless tutorial
  * chore(deps): update dependency setuptools to ~=75.3.0
  * libpod: report cgroups deleted during Stat() call
  * chore: fix some function names in comment
  * CI: parallelize 450-interactive system tests
  * CI: parallelize 520-checkpoint tests
  * CI: make 070-build.bats use safe image names
  * test/system: add podman network reload test to distro gating
  * System tests: clean up unit file leaks
  * healthcheck: do not leak service on failed stop
  * healthcheck: do not leak statup service
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0
  * Add Startup HealthCheck configuration to the podman inspect
  * buildah version display: use progress()
  * new showrun() for displaying and running shell commands
  * Buildah treadmill: redo the .cirrus.yml tweaks
  * Buildah treadmill: more allow-empty options
  * Buildah treadmill: improve test-failure instructions
  * Buildah treadmill: improve wording in test-fail instructions
  * doc: Remove whitespace before comma
  * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0
  * ps: fix display of exposed ports
  * ps: do not loop over port protocol
  * readme: Add reference to pasta in the readme
  * test/system: Fix spurious "duplicate tests" failures in pasta tests
  * Improve "podman load - from URL"
  * Try to repair c/storage after removing an additional image store
  * Use the config digest to compare images loaded/pulled using different methods
  * Simplify the additional store test
  * Fix the store choice in "podman pull image with additional store"
  * Bump to v5.3.0-dev
  * Bump to v5.3.0-rc1
  * Set quota on volume root directory, not _data
  * fix(deps): update module github.com/opencontainers/runc to v1.2.0
  * test: set soft ulimit
  * Vagrantfile: Delete
  * Enable pod restore with crun
  * vendor: update c/{buildah,common,image,storage}
  * Fix 330-corrupt-images.bats in composefs test runs
  * quadlet: add default network dependencies to all units
  * quadlet: ensure user units wait for the network
  * add new podman-user-wait-network-online.service
  * contrib/systemd: switch user symlink for file symlinks
  * Makefile: remove some duplication from install.systemd
  * contrib/systemd: move podman-auto-update units
  * quadlet: do not reject RemapUsers=keep-id as root
  * test/e2e: test quadlet with and without --user
  * CI: e2e: fix checkpoint flake
  * APIv2 test fix: image history
  * pasta udp tests: new bytecheck helper
  * Document packaging process
  * [skip-ci] RPM: remove dup Provides
  * Update dependency setuptools to ~=75.2.0
  * System tests: safer pause-image creation
  * Update module github.com/opencontainers/selinux to v1.11.1
  * Added escaping to invoked powershell command for hyperv stubber.
  * use slices.Clone instead of assignment
  * libpod API: only return exit code without conditions
  * Housekeeping: remove duplicates from success_task
  * Thorough overhaul of CONTRIBUTING doc.
  * api: Replace close function in condition body
  * test/e2e: fix default signal exit code test
  * Test new VM build
  * CI: fix changing-rootFsSize flake
  * scp: add option types
  * Unlock mutex before returning from function
  * Note in the README that we are moving to timed releases
  * cirrus: let tar extract figure out the compression
  * Make error messages more descriptive
  * Mention containers.conf settings for podman machine commands
  * [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks"
  * cmd: use logrus to print error
  * podman: do not set rlimits to the default value
  * spec: always specify default rlimits
  * vendor: update containers/common
  * Note in the README that we are moving to timed releases
  * Revert "CI: test nftables driver on fedora"
  * cirrus: use zstd over bzip2 for repo archive
  * cirrus: use shared repo_prep/repo_artifacts scripts
  * cirrus: speed up postbuild
  * cirrus: change alt arch task to only compile binaries
  * cirrus: run make with parallel jobs where useful
  * Makefile: allow man-page-check to be run in parallel
  * cirrus: use fastvm for builds
  * test/e2e: skip some Containerized checkpoint tests
  * test: update timezone checks
  * cirrus: update CI images
  * test/e2e: try debug potential pasta issue
  * CI: quadlet system tests: use airgapped testimage
  * Allow removing implicit quadlet systemd dependencies
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
  * libpod API: make wait endpoint better against rm races
  * podman-remote run: improve how we get the exit code
  * [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
  * 055-rm test: clean up a test, and document
  * CI: remove skips for libkrun
  * Bump bundled krunkit to 0.1.3
  * fix(deps): update module google.golang.org/protobuf to v1.35.0
  * fix(deps): update module golang.org/x/net to v0.30.0
  * server: fix url parsing in info
  * fix(deps): update module golang.org/x/tools to v0.26.0
  * Makefile: fix ginkgo FOCUS option
  * fix(deps): update module golang.org/x/crypto to v0.28.0
  * podman-systemd.unit.5: adjust example options
  * docs: prefer --network to --net
  * fix(deps): update module golang.org/x/term to v0.25.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24
  * fix(deps): update module golang.org/x/sys to v0.26.0
  * OWNERS file audit and update
  * Exposed ports are only included when not --net=host
  * libpod: hasCurrentUserMapped checks for gid too
  * [CI:DOCS] Document TESTFLAGS in test README file
  * Validate the bind-propagation option to `--mount`
  * Fix typo in secret inspect examples
  * Mention `no_hosts` and `base_hosts_file` configs in CLI option docs
  * Fixes for vendoring Buildah
  * vendor: update buildah to latest
  * Makefile - silence skipped tests when focusing on a file
  * vendor: update to latest c/common
  * Quadlet - prefer "param val" over "param=val" to allow env expansion
  * System tests: sdnotify: wait for socket file creation
  * Switch to moby/sys/capability
  * platformInspectContainerHostConfig: rm dead code
  * CI: require and test CI_DESIRED_NETWORK on RHEL
  * Add ExposedPorts to Inspect's ContainerConfig
  * fix(deps): update golang.org/x/exp digest to 701f63a
  * quadlet: allow variables in PublishPort
  * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9
  * fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c
  * Document that zstd:chunked is downgraded to zstd when encrypting
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
  * chore(deps): update dependency ubuntu to v24
  * rpm: do not load iptables modules on f41+
  * adding docs for network-cmd-path
  * Include exposed ports in inspect output when net=host
  * feat(libpod): support kube play tar content-type (#24015)
  * podman mount: some better error wrapping
  * podman mount: ignore ErrLayerUnknown
  * Quadlet - make sure the order of the UnitsDir is deterministic
  * packit: disable Centos Stream/fedora ELN teasks
  * libpod: remove shutdown.Unregister()
  * libpod: rework shutdown handler flow
  * libpod: ensure we are not killed during netns creation
  * Update module github.com/moby/sys/capability to v0.3.0
  * Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options
  * Update documentation of `--add-host` CLI option
  * System tests: set a default XDG_RUNTIME_DIR
  * Modify machine "Remove machine" test
  * CORS system test: clean up
  * Add --health-max-log-count, --health-max-log-size, --health-log-destination flags
  * troubleshooting: adjust home path in tip 44
  * test/system: For pasta port forwarding tests don't bind socat server
  * Update connection on removal
  * Simplify `RemoveConnections`
  * Move `DefaultMachineName` to `pkg/machine/define`
  * vendor: update containers/image
  * vendor: update containers/storage
  * CI: skip the flaking quadlet test
  * CI: make systemd tests parallel-safe (*)
  * CI: run and collect cleanup tracer logs
  * add epbf program to trace podman cleanup errors
  * CI: parallelize logs test as much as possible
  * CI: format test: use local registry if available
  * CI: make 700-play parallel-safe
  * docs: Fix missing negation
  * bin/docker support warning message suppression from user config dir
  * Update module github.com/docker/docker to v27.3.1+incompatible
  * Quadlet - add full support for Symlinks
  * libpod: setupNetNS() correctly mount netns
  * vendor latest c/common
  * docs: remove usage of deprecated `--storage`
  * Update module github.com/docker/docker to v27.3.0+incompatible
  * CI: Quadlet rootfs test: use container image as rootfs
  * CI: system test registry: use --net=host
  * CI: rm system test: bump grace period
  * CI: system tests: minor documentation on parallel
  * fix typo in error message Fixes: containers/podman#24001
  * CI: system tests: always create pause image
  * CI: quadlet system test: be more forgiving
  * vendor latest c/common
  * CI: make 200-pod parallel-safe
  * allow exposed sctp ports
  * test/e2e: add netns leak check
  * test/system: netns leak check for rootless as well
  * test/system: Improve TODO comments on IPv6 pasta custom DNS forward test
  * test/system: Clarify "Local forwarder" pasta tests
  * test/system: Simplify testing for nameserver connectivity
  * test/system: Consolidate "External resolver" pasta tests
  * test/system: Move test for default forwarder into its own case
  * CI: make 090-events parallel-safe
  * Misc minor test fixes
  * Add network namespace leak check
  * Add workaround for buildah parallel bug
  * registry: lock start attempts
  * Update system test template and README
  * bats log: differentiate parallel tests from sequential
  * ci: bump system tests to fastvm
  * clean_setup: create pause image
  * CI: make 012-manifest parallel-safe
  * podman-manifest-remove: update docs and help output
  * test/system: remove wait workaround
  * wait: fix handling of multiple conditions with exited
  * Match output of Compat Top API to Docker
  * system test parallelization: enable two-pass approach
  * New VMs: test crun 1.17
  * libpod: hides env secrets from container inspect
  * CI: e2e: workaround for events out-of-sequence flake
  * update golangci-lint to 1.61.0
  * libpod: convert owner IDs only with :idmap
  * Podman CLI --add-host with multiple host for a single IP
  * Quadlet - Split getUnitDirs to small functions
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5
  * chore(deps): update dependency setuptools to ~=75.1.0
  * Fxi typo in cache-ttl.md
  * Get WSL disk as an OCI artifact
  * CI: make 260-sdnotify parallel-safe
  * quadlet: do not log ENOENT errors
  * pkg/specgen: allow pasta when running inside userns
  * troubleshooting: add tip about the user containers
  * chore(deps): update dependency setuptools to v75
  * Convert windows paths in volume arg of the build command
  * Improve error when starting multiple machines
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
  * Minor typo noticed when reading podman man page
  * Remove `RemoveFilesAndConnections`
  * Add `GetAllMachinesAndRootfulness`
  * rewrite typo osascript
  * typo
  * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
  * Add radio buttons to select WSL or Hyper-V in windows setup.exe
  * [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
  * [skip-ci] Packit: Enable sidetags for bodhi updates
  * vendor: update c/common
  * CI: make 710-kube parallel-safe
  * CI: mark 320-system-df *NOT* parallel safe
  * Add kube play support for image volume source
  * refactor: add sshClient function
  * fix(deps): update module golang.org/x/tools to v0.25.0
  * CI: make 505-pasta parallel safe
  * CI: make 020-tag parallel-safe
  * CI: make 410-selinux parallel-safe
  * Bump VMs. ShellCheck is now built-in
  * troubleshooting: add tip about auto, keep-id, nomap
  * libpod: make use of new pasta option from c/common
  * vendor latest c/common
  * podman images: sort repository with tags
  * Remove containers/common/pkg/config from pkg/util
  * fix(deps): update module golang.org/x/net to v0.29.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23
  * fix(deps): update module golang.org/x/crypto to v0.27.0
  * Fix CI
  * Detect and fix typos using codespell
  * Fix typo: replace buildin with built-in
  * Add codespell config, pre-commit definition, and move options from Makefile
  * prune: support clearing build cache using CleanCacheMount
  * test/e2e: fix network prune flake
  * Add support for Job to kube generate &amp; play
  * Add podman-rootless.7 man page
  * Add DNS, DNSOption and DNSSearch to quadlet pod
  * podman.1.md: improve policy.json section
  * e2e: flake fix: SIGPIPE in hook test
  * libpod: fix rootless cgroup path with --cgroup-parent
  * vendor: update c/storage
  * CI: make 055-rm parallel-safe
  * CI: make 130-kill parallel-safe
  * CI: make 125-import parallel-safe
  * CI: make 110-history parallel-safe
  * CI: system tests: parallelize low-hanging fruit
  * Add disclaimer to `podman machine info` manpage.
  * man pages: refactor two more options
  * update github.com/opencontainers/runc to v1.2.0-rc.3
  * update go.etcd.io/bbolt to v1.3.11
  * update github.com/onsi/{ginkgo,gomega}
  * Update module github.com/shirou/gopsutil to v4
  * packit: update fedora and epel targets
  * bump go to 1.22
  * cirrus: test only on f40/rawhide
  * cirrus: remove CI_DESIRED_NETWORK reference
  * cirrus: prebuild use f40 for extra tests
  * chore(deps): update dependency setuptools to ~=74.1.0
  * libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD
  * fix(deps): update golang.org/x/exp digest to 9b4947d
  * Implement publishing API UNIX socket on Windows platforms
  * Vendor c/common:8483ef6022b4
  * quadlet: support container network reusing
  * docs: update read the docs changes
  * CI: parallel-safe network system test
  * Quadlet - Support multiple image tags in .build files
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3
  * cirrus: remove _bail_if_test_can_be_skipped
  * cirrus: move renovate check into validate
  * cirrus: remove 3rd party connectivity check
  * cirrus: remove cross jobs for aarch64 and x86_64
  * cirrus: do not upload alt arch cross artifacts
  * cirrus: remove ginkgo-e2e.json artifact
  * cirrus: fix default timeouts
  * github: remove fcos-podman-next-build-prepush
  * Clarify podman machine volume mounting behavior under WSL
  * machine: Add -all-providers flag to machine list
  * Create a podman-troubleshooting man page
  * chore(deps): update dependency setuptools to v74
  * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
  * Fix an improperly ignored error in SQLite
  * CI: flake workaround: ignore socat waitpid warnings
  * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1
  * Stop skipping machine volume test on Hyper-V
  * cleanup: add new --stopped-only option
  * fix races in the HTTP attach API
  * cirrus: skip windows/macos machine task on RHEL branches
  * Update module github.com/containers/gvisor-tap-vsock to v0.7.5
  * run: fix detach passthrough and --rmi
  * podman run: ignore image rm error
  * Add support for AddHost in quadlet .pod and .container
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
  * update github.com/vishvananda/netlink to v1.3.0
  * build: Update gvisor-tap-vsock to 0.7.5
  * Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page:
  * fix typo in podman-network-create.1.md
  * Use HTTP path prefix of TCP connections to match Docker context behavior
  * Makefile: remotesystem: use real podman server, no --url
  * Update module github.com/openshift/imagebuilder to v1.2.15
  * CI: parallel-safe userns test
  * Update module github.com/onsi/ginkgo/v2 to v2.20.1
  * Add support for IP in quadlet .pod files
  * Specify format to use for referencing fixed bugs.
  * CI: parallel-safe run system test
  * Revert "test/e2e: work around for pasta issue"
  * CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked
  * quadlet: support user mapping in pod unit
  * Update Release Process
  * Test new VM build
  * command is not optional to podman exec
  * CI: parallel-safe namespaces system test
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
  * quadlet: add key CgroupsMode
  * Fix `podman stop` and `podman run --rmi`
  * quadlet: set infra name to %s-infra
  * chore(deps): update dependency setuptools to v73
  * [skip-ci] Packit: update targets for propose-downstream
  * Do not segfault on hard stop
  * Fix description of :Z to talk about pods
  * CI: disable ginkgo flake retries
  * vendor: update go-criu to latest
  * golangci-lint: make darwin linting happy
  * golangci-lint: make windows linting happy
  * test/e2e: remove kernel version check
  * golangci-lint: remove most skip dirs
  * set !remote build tags where needed
  * update golangci-lint to 1.60.1
  * test/e2e: rm systemd start test
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1
  * podman wait: allow waiting for removal of containers
  * libpod: remove UpdateContainerStatus()
  * podman mount: fix storage/libpod ctr race
  * CI: quadlet tests: make parallel-safe
  * CI: system tests: make random_free_port() parallel-safe
  * remove trailing comma in example
  * CI: format test: make parallel-safe
  * Fix podman-docker.sh under -eu shells (fixes #23628)
  * docs: update podman-wait man page
  * libpod: remove duplicated HasVolume() check
  * podman volume rm --force: fix ABBA deadlock
  * test/system: fix network cleanup restart test
  * libpod: do not stop pod on init ctr exit
  * libpod: simplify WaitForExit()
  * CI: remove build-time quay check
  * Fix known_hosts file clogging and remote host id
  * Update docker.io/library/golang Docker tag to v1.23
  * Update dependency setuptools to ~=72.2.0
  * Update module github.com/docker/docker to v27.1.2+incompatible
  * healthcheck system check: reduce raciness
  * CI: healthcheck system test: make parallel-safe
  * Validate renovate config in every PR
  * pkg/machine: Read stderr from ssh-keygen correctly
  * Fix renovate config syntax error
  * CI: 080-pause.bats: make parallel-safe
  * CI: 050-stop.bats: make parallel-safe
  * Additional potential race condition on os.Readdir
  * pkg/bindings/containers: handle ignore for stop
  * remote: fix invalid --cidfile + --ignore
  * Update/simplify renovate config header comment
  * Migrate renovate config to latest schema
  * Fix race condition when listing /dev
  * docs/podman-systemd: Try to clarify `Exec=` more
  * libpod: reset state error on init
  * test/system: pasta_test_do add explicit port check
  * test/e2e: work around new push warning
  * vendor: update c/common to latest
  * stopIfOnlyInfraRemains: log all errors
  * libpod: do not save expected stop errors in ctr state
  * libpod: fix broken saveContainerError()
  * Quadlet: fix filters failure when the search paths are symlinks
  * readme: replace GPG with PGP
  * Drop APIv2 CNI configuration
  * De-duplicate docker-py testing
  * chore(podmansnoop): explain why crun comm is 3
  * libpod: cleanupNetwork() return error
  * fix(deps): update module golang.org/x/sys to v0.24.0
  * Reduce python APIv2 test net dependency
  * Fix not testing registry.conf updates
  * test/e2e: improve command timeout handling
  * Update module github.com/onsi/ginkgo/v2 to v2.20.0
  * Update module github.com/moby/sys/user to v0.3.0
  * Add passwd validate and generate steps
  * podman container cleanup: ignore common errors
  * Quadlet - Allow the user to override the default service name
  * CI: e2e: serialize root containerPort tests
  * Should not force conversion of manifest type to DockerV2ListMediaType
  * fix(deps): update module golang.org/x/tools to v0.24.0
  * fix(deps): update github.com/containers/common digest to 05b2e1f
  * CI: mount system test: parallelize
  * Update module golang.org/x/net to v0.28.0
  * Ignore ERROR_SHARING_VIOLATION error on windows
  * CI: manifest system tests: make parallel-safe
  * Create volume path before state initialization
  * vendor: update c/storage
  * CI: fix broken libkrun test
  * test/e2e: work around for pasta issue
  * test/e2e: fix missing exit code checks
  * Test new CI images
  * Remove another race condition when mounting containers or images
  * fix(deps): update github.com/containers/common digest to c0cc6b7
  * Change Windows installer MajorUpgrade Schedule
  * Ignore missing containers when calling GetExternalContainerLists
  * Remove runc edit to lock to specific version
  * fix(deps): update module golang.org/x/sys to v0.23.0
  * CI: podman-machine: do not use cache registry
  * CI: completion system test: use safename
  * Temporarly disable failing Windows Installer CI test
  * libpod: fix volume copyup with idmap
  * libpod: avoid hang on errors
  * Temp. disable PM basic Volume ops test
  * Add libkrun Mac task
  * Never skip checkout step in release workflow
  * System tests: leak_test: readable output
  * fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431
  * vendor: bump c/common
  * Version: bump to v5.3.0-dev
  * libpod: inhibit SIGTERM during cleanup()
  * Tweak versions in register_images.go
  * fix network cleanup flake in play kube
  * WIP: Fixes for vendoring Buildah
  * Add --compat-volumes option to build and farm build
  * Bump to Buildah v1.37.0
  * Quadlet test - Split between success, warning and error cases
  * libpod: bind ports before network setup
  * Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false
  * Use new syntax for selinux options in quadlet
  * fix(deps): update module github.com/onsi/gomega to v1.34.1
  * CI: kube test: fix broken external-storage test
  * Update dependency setuptools to v72
  * Convert additional build context paths on Windows
  * pkg/api: do not leak config pointers into specgen
  * Quadlet - Allow the user to set the service name for .pod files
  * Quadlet tests - allow overriding the expected service name
  * fix(deps): update module github.com/moby/sys/user to v0.2.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5
  * CI: enable root user namespaces
  * libpod: force rootfs for OCI path with idmap
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
  * Add test steps for automount with multi images
  * CI: cp tests: use safename
  * [skip-ci] RPM: podman-iptables.conf only on Fedora
  * CI: 700-play: fix a leaked non-safename
  * test: check that kube generate/play restores the userns
  * test: disable artifacts cache with composefs
  * test: fix podman pull tests
  * vendor: bump c/storage
  * Update module github.com/cyphar/filepath-securejoin to v0.3.1
  * Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs
  * build: Update gvisor-tap-vsock to 0.7.4
  * test/system: fix borken pasta interface name checks
  * test/system: fix bridge host.containers.internal test
  * api: honor the userns for the infra container
  * play: handle 'private' as 'auto'
  * kube: record infra user namespace
  * infra: user ns annotation higher precedence
  * specgenutil: record the pod userns in the annotations
  * kube: invert branches
  * CI: system log test: use safe names
  * Update encryption tests to avoid a warning if zstd:chunked is the default
  * Fix "podman pull and decrypt"/"from local registry"
  * Use unique image names for the encrypted test images
  * CI: system tests: instrument to allow failure analysis
  * Fix outdated comment for the build step win-gvproxy
  * Add utility to convert VMFile to URL for UNIX sockets
  * Run codespell on source
  * fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
  * chore(deps): update dependency setuptools to ~=71.1.0
  * logformatter: tweaks to pass html tidy
  * More information for podman --remote build and running out of space.
  * Fix windows installer deleting machine provider config file
  * Use uploaded .zip for Windows action
  * pr-should-include-tests: no more CI:DOCS override</changelog>
  <changelog author="danish.prakash@suse.com" date="1755086400">- Add patch for CVE-2025-6032 (bsc#1245320):
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1759492800">- Add patch for CVE-2025-9566 (bsc#1249154):
  * 0004-CVE-2025-9566-kube-play-don-t-follow-volume-symlinks.patch
- Rebase patches:
  * 0001-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
  * 0002-Fix-Remove-appending-rw-as-the-default-mount-option.patch
  * 0003-CVE-2025-6032-machine-init-fix-tls-check.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1769688000">- Add symlink to catatonit in /usr/libexec/podman (bsc#1248988)</changelog>
</package>
<package pkgid="7673fc93e8df393eff747dee641e229387dee532f023be3857f75ba6498113f8ba7c576d1949643350a6d6518bb614bbb97e2b60a9889e7b2514c0706214dc65" name="policycoreutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.5"/>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * fixfiles: Use parallel relabeling
- Refreshed patches
  * get_os_version.patch
  * run_init.pamd.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1655812800">- Build and package translations for python-utils (boo#1200752).</changelog>
  <changelog author="jsegitz@suse.com" date="1655899200">- Handle missing translations properly in chcat. Added
  chcat_handle_missing_translations.patch (bsc#1200752)</changelog>
  <changelog author="jsegitz@suse.com" date="1658750400">- Add recommends for ausearch binary (bsc#1201043)</changelog>
  <changelog author="schubi@suse.com" date="1670587200">- Migration PAM settings to /usr/etc: Saving user changed
  configuration files in /etc and restoring them while an RPM
  update.</changelog>
  <changelog author="schubi@suse.com" date="1671192000">- Error in spec file: No "config" tag in "/usr/ should be used.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1671451200">- Use %_pam_vendordir</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * fixfiles: Unmount temporary bind mounts on SIGINT
  * Lots of smaller changes
- Refreshed get_os_version.patch
- Drop chcat_handle_missing_translations.patch, is upstream
- Add additional BuildRequires for python
- Added additional developer key (Jason Zaman)
- Add requires for python3-distro for the devel package</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683633600">- Add python-wheel build dependency to build correctly with latest
  python-pip version.</changelog>
  <changelog author="cathy.hu@suse.com" date="1698235200">- Add reproducible-build.patch to make the output of "sepolicy manpage"
  deterministic (bsc#1216452)</changelog>
</package>
<package pkgid="4b9c1a56016fa455817a7706cbc762e754b6e5f8499f9e1ca377b8a36f0cf01b34b07f8b5145d704cb26cd664af5c876c5914743cb09f5e7d59ca9db3ff8d294" name="policycoreutils-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.5"/>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * fixfiles: Use parallel relabeling
- Refreshed patches
  * get_os_version.patch
  * run_init.pamd.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1655812800">- Build and package translations for python-utils (boo#1200752).</changelog>
  <changelog author="jsegitz@suse.com" date="1655899200">- Handle missing translations properly in chcat. Added
  chcat_handle_missing_translations.patch (bsc#1200752)</changelog>
  <changelog author="jsegitz@suse.com" date="1658750400">- Add recommends for ausearch binary (bsc#1201043)</changelog>
  <changelog author="schubi@suse.com" date="1670587200">- Migration PAM settings to /usr/etc: Saving user changed
  configuration files in /etc and restoring them while an RPM
  update.</changelog>
  <changelog author="schubi@suse.com" date="1671192000">- Error in spec file: No "config" tag in "/usr/ should be used.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1671451200">- Use %_pam_vendordir</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * fixfiles: Unmount temporary bind mounts on SIGINT
  * Lots of smaller changes
- Refreshed get_os_version.patch
- Drop chcat_handle_missing_translations.patch, is upstream
- Add additional BuildRequires for python
- Added additional developer key (Jason Zaman)
- Add requires for python3-distro for the devel package</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683633600">- Add python-wheel build dependency to build correctly with latest
  python-pip version.</changelog>
  <changelog author="cathy.hu@suse.com" date="1698235200">- Add reproducible-build.patch to make the output of "sepolicy manpage"
  deterministic (bsc#1216452)</changelog>
</package>
<package pkgid="31e13da38dba91297814e6fcc2a48f70da3f87fea24397a33fa360a0e3ffde3ddfb5296d26fb1f97e05ac341616baac7413f691516d2a7b209b185b842b8caf5" name="policycoreutils-devel-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.5"/>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * fixfiles: Use parallel relabeling
- Refreshed patches
  * get_os_version.patch
  * run_init.pamd.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1655812800">- Build and package translations for python-utils (boo#1200752).</changelog>
  <changelog author="jsegitz@suse.com" date="1655899200">- Handle missing translations properly in chcat. Added
  chcat_handle_missing_translations.patch (bsc#1200752)</changelog>
  <changelog author="jsegitz@suse.com" date="1658750400">- Add recommends for ausearch binary (bsc#1201043)</changelog>
  <changelog author="schubi@suse.com" date="1670587200">- Migration PAM settings to /usr/etc: Saving user changed
  configuration files in /etc and restoring them while an RPM
  update.</changelog>
  <changelog author="schubi@suse.com" date="1671192000">- Error in spec file: No "config" tag in "/usr/ should be used.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1671451200">- Use %_pam_vendordir</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * fixfiles: Unmount temporary bind mounts on SIGINT
  * Lots of smaller changes
- Refreshed get_os_version.patch
- Drop chcat_handle_missing_translations.patch, is upstream
- Add additional BuildRequires for python
- Added additional developer key (Jason Zaman)
- Add requires for python3-distro for the devel package</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683633600">- Add python-wheel build dependency to build correctly with latest
  python-pip version.</changelog>
  <changelog author="cathy.hu@suse.com" date="1698235200">- Add reproducible-build.patch to make the output of "sepolicy manpage"
  deterministic (bsc#1216452)</changelog>
</package>
<package pkgid="a396df6630cba2d6189456c8e900936ab41f56a3c49a836d37fc2029258289410093edb630b6bf382ef90105dd24785501e373abec192fbf40f5d09aa2dfd154" name="polkit-debuginfo" arch="aarch64">
  <version epoch="0" ver="121" rel="slfo.1.1_2.1"/>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="aschnell@suse.com" date="1667995200">- read actions also from /etc/polkit-1/actions (jsc#PED-1405)
  added polkit-actions-in-etc.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
  <changelog author="meissner@suse.com" date="1752580800">- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
  added 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch</changelog>
</package>
<package pkgid="56db1dda35fbbb35b938a652d38ae817c8da0ffbf3df6ed0fbeaf82405b6ec1ce8e349f37515ca4b738091bc06a57845421fc945dfd3a362a34bb6af1f37c7d9" name="polkit-debugsource" arch="aarch64">
  <version epoch="0" ver="121" rel="slfo.1.1_2.1"/>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="aschnell@suse.com" date="1667995200">- read actions also from /etc/polkit-1/actions (jsc#PED-1405)
  added polkit-actions-in-etc.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
  <changelog author="meissner@suse.com" date="1752580800">- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
  added 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch</changelog>
</package>
<package pkgid="3095ebcb361b2d07739daf2699c2eafe1cb2b87933d2130d5d282c385b74b2527348b99a3472e5c79f269a75293293d7193d46391a76b011cc8ee54e1c13c9d4" name="popt-debugsource" arch="aarch64">
  <version epoch="0" ver="1.19" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1373198400">- Fix typo in popt-libc-updates.patch that prevented it to work
  with glibc before 2.17.
- More robust make install call; remove redundant %clean section</changelog>
  <changelog author="schwab@suse.de" date="1381147200">- popt-alignment-checks.patch: fix alignment checks</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Remove --with-pic which is only for static libs.
- Fix RPM groups.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="meissner@suse.com" date="1548504000">- build a 32bit library generically, for use by 32bit fuzzing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- fix URLs, rpm5.org is no more</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1593172800">- Update to version 1.18:
  * fix an ugly and ancient security issue with popt failing to drop privileges on alias exec from a SUID/SGID program
  * perform rudimentary sanity checks when reading in popt config files
  * collect accumulated misc fixes (memleaks etc) from distros
  * convert translations to utf-8 encoding
  * convert old postscript documentation to pdf
  * dust off ten years worth of autotools sediment
  * reorganize and clean up the source tree for clarity
  * remove the obnoxious splint annotations from the sources
- popt-alignment-checks.patch removed: contained in upstream
- popt-libc-updates.patch changed: to be compatible with new version.</changelog>
  <changelog author="jengelh@inai.de" date="1598270400">- Update homepage URL.
- Drop old rpm constructs.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654603200">- Create lang subpackage</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1663416000">- popt 1.19:
  * various build system fixes
  * various developer visible fixes
  * Fix the handling of superfluous args passed with =
  * Fix multiple resource and memory leaks
  * Fix '=' getting shown for short options
  * Improve random number handling
  * translation updates and documentation improvements
- refresh spec file, run tests, package license in every package,
  and treat all compiler warnings and errors</changelog>
</package>
<package pkgid="81818bba0cf3ea8417f71a8a41412ec818225abef8f2c587f47534627866dd4f3c86e63b7715e107c99a55b530497c3c6e63d90bb1b3460494a6da317bcb8e64" name="ppp-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.9" rel="slfo.1.1_1.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1587902400">- add upstream signing keyring and verify source signature</changelog>
  <changelog author="pgajdos@suse.com" date="1588852800">- /usr/lib/systemd instead %{_libexecdir}/systemd</changelog>
  <changelog author="dimstar@opensuse.org" date="1589889600">- Fixup previous fix: use the defined macro %_unitdir for the
  systemd unit.</changelog>
  <changelog author="max@suse.com" date="1596456000">- New version 2.4.8.
  * New pppd options have been added:
  * ifname, to set the name for the PPP interface device
  * defaultroute-metric, to set the metric for the default route
  * defaultroute6, to add an IPv6 default route (with
    nodefaultroute6 to prevent adding an IPv6 default route).
  * up_sdnotify, to have pppd notify systemd when the link is up.
  * The rp-pppoe plugin has new options:
  * host-uniq, to set the Host-Uniq value to send
  * pppoe-padi-timeout, to set the timeout for discovery packets
  * pppoe-padi-attempts, to set the number of discovery attempts.
  * Added the CLASS attribute in radius packets.
  * Fixed warnings and issues found by static analysis.
- Obsoleted patches:
  * ppp-2.4.3-pppoatm.diff
  * ppp-2.4.4-strncatfix.patch
  * ppp-2.4.6-ifname.diff
  * ppp-2.4.7-DES-openssl.patch
  * ppp-2.4.7.tar.gz.asc
  * ppp-send-padt.patch
- Patches that got renamed, because they needed rediffing:
  * ppp-2.4.1-higher-speeds.diff -&gt; ppp-higher-speeds.patch
  * ppp-2.4.1-higher-speeds.diff -&gt; ppp-higher-speeds.patch
  * ppp-2.4.2-__P.diff -&gt; ppp-__P.patch
  * ppp-2.4.2-cifdefroute.diff -&gt; ppp-cifdefroute.patch
  * ppp-2.4.2-pie.patch -&gt; ppp-pie.patch
  * ppp-2.4.2-smpppd.diff -&gt; ppp-smpppd.patch
  * ppp-2.4.3-filter.diff -&gt; ppp-filter.patch
  * ppp-2.4.3-fork-fix.diff -&gt; ppp-fork-fix.patch
  * ppp-2.4.4-var_run_resolv_conf.patch -&gt; ppp-var_run_resolv_conf.patch
  * ppp-2.4.6-lib64.patch -&gt; ppp-lib64.patch
  * ppp-2.4.6-make.diff -&gt; ppp-make.patch
  * ppp-2.4.6-misc.diff -&gt; ppp-misc.patch
  * ppp-2.4.7-fix-bashisms.patch -&gt; ppp-fix-bashisms.patch
- bsc#1172916: Fix an outdated comment for lcp-echo-interval.</changelog>
  <changelog author="dimstar@opensuse.org" date="1602244800">- Fix build with RPM 4.16: error: bare words are no longer
  supported, please use "...":  lib64 == lib64.</changelog>
  <changelog author="ilya@ilya.cf" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.
  * Removed obsolete constructs (creating dialout group via shadow).</changelog>
  <changelog author="ilya@ilya.cf" date="1646913600">- Removed Wants=network.target from modem@.service (bsc#1196359).</changelog>
  <changelog author="rpm@fthiessen.de" date="1653307200">- Update to version 2.4.9
  * Support for new EAP (Extensible Authentication Protocol) methods
  * Support for EAP-TLS
  * Support for EAP-MSCHAPv2
  * New pppd options:
  * chap-timeout
  * chapms-strip-domain
  * replacedefaultroute
  * noreplacedefaultroute
  * ipv6cp-accept-remote
  * lcp-echo-adaptive
  * ip-up-script
  * ip-down-script
  * ca
  * capath
  * cert
  * key
  * crl-dir
  * crl
  * max-tls-version
  * need-peer-eap
  * Fixes for CVE-2020-8597 and CVE-2015-3310.
  * The rp-pppoe plugin has been renamed to pppoe, to distinguish it
    from the upstream rp-pppoe code.  Its options have changed names,
    but the old names are kept as aliases.
  * Many bug fixes and cleanups.
- Drop upstream fixed patches
  * ppp-2.4.3-winbind-setuidfix.patch
  * fix-header-conflict.patch
  * ppp-CVE-2015-3310.patch
  * ppp-CVE-2020-8597.patch
  * ppp-cifdefroute.patch
  * ppp-higher-speeds.patch
  * ppp-2.4.3-strip.diff
  * ppp-filter.patch
  * ppp-__P.patch
- Drop upstream resolved ppp-make.patch use `--cflags` configure
  switch instead</changelog>
  <changelog author="mliska@suse.cz" date="1653566400">- Add ppp-compiling-with-clang-encounters-an-error-in-eap-tls..patch
  that fixed the following rpmlint error:
  executable-stack (Badness: 10000) /usr/sbin/pppd</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
</package>
<package pkgid="9d0d6d92e799b02e56704bb72a6890ffebe06a15256bed2f894fdc49740a96804be279dadb4dc14c0354dfa995d7690b0be230a0fb7f599200f5e6d97e6b730b" name="procmail-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.24" rel="slfo.1.1_1.3"/>
  <changelog author="dimstar@opensuse.org" date="1419249600">- Drop .keyring and .sig files: procmail is signed using an MD5
  type key, which is no longer accepted by GPG 2.1
- Drop the usage of gpg-offline: we don't have keys to verify and
  the source validator performs the action transparent nowadays.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to have binaries independent of speed
  of compile system (boo#1041534)</changelog>
  <changelog author="werner@suse.de" date="1510920000">- Add patch procmail-formisc.c.patch to fix bug bsc#1068648
  CVE-2017-16844</changelog>
  <changelog author="mliska@suse.cz" date="1562932800">- Add procmail-fix-Werror=return-type.patch in order to fix
  - Werror=return-type errors.</changelog>
  <changelog author="werner@suse.de" date="1573214400">- Add latest patch sets from Debian:
  * patch set 27 replaces procmail-3.22-CVE-2014-3618.patch
  * patch set 28 does fix off-by-one error that makes procmail to
    segfault on certain .procmailrc files
  * patch set 29 does fix formail memory corruption
  * patch set 30 replaces procmail-formisc.c.patch for CVE-2017-16844
- Remove obsolate patches
  * procmail-3.22-CVE-2014-3618.patch
  * procmail-formisc.c.patch</changelog>
  <changelog author="werner@suse.de" date="1603454400">- Do not use lto compiler flags at all with this kind of code</changelog>
  <changelog author="bwiedemann@suse.com" date="1606392000">- Add reproducible2.patch to negate influences from preinstallimage
  to make package build reproducible</changelog>
  <changelog author="dmueller@suse.com" date="1619956800">- modernize spec file (move license to licensedir)</changelog>
  <changelog author="werner@suse.de" date="1691582400">- Update to procmail 3.24 (New Upstream)
  - Don't coredump in comsat code if interrupted early
  - Correctly handle COMSAT=on
  - Once used, the 'H' and 'r' flags would never be cleared
  - Fix possible buffer overflow in variable-capture actions
  - Fix up the parsing of variable-capture actions
  - LMTP code assumed sizeof(long)==sizeof(int)
  - SHELL is now always preset to /bin/sh.  USER_SHELL contains
    the shell from the user's passwd entry
  - When HOST is mismatched, reset it for the next rcfile
  - Always read in a new, global rcfile (/etc/procmail.conf)
    to allow runtime configuration of variables like DEFAULT.
    This rcfile cannot deliver or filter messages
  - Mismatched HOST in /etc/procmailrc didn't discard the message
  - backquote expansion in a condition disabled header
    concatenation for that condition
  - LMTP didn't correctly handle quoted localparts
  - Removed SIZE extension from LMTP (unsupportable semantics)
  - Don't coredump if unable to exec /bin/sh
  - Enable "+detail" processing in LMTP mode by passing the
    delimiter (e.g., "+") as an optional argument after -z
  - In LMTP mode, save the domain of the recipient in
    PROCMAIL_DOMAIN
  - Set PROCMAIL_MODE to one of "d", "m", "z", or "" to reflect
    the mode option it was invoked with, if any
  - Fixed all bugs collected by Debian and others
    during the past 21 years.  See the git commit history
    for detailed descriptions.
- Port patches
  * procmail-3.22-autoconf.dif
  * procmail-3.22-headerconcat.dif
  * procmail-3.22-ipv6.patch
  * procmail-3.22-mailstat.patch
  * procmail-3.22-owl-truncate.dif
  * procmail-3.22.dif
  * procmail-cflags.dif
- Remove former Debian and SUSE patches from procmail-3.22-patches.tar.bz2
  * 04
  * 06
  * 10
  * 11
  * 12
  * 13
  * 14
  * 15
  * 16
  * 17
  * 18
  * 19
  * 22
  * 23
  * 24
  * 25
  * 26
  * 27
  * 28
  * 29
  * 30
- Collect and port our patches from old procmail-3.22-patches.tar.bz2
  into new procmail-3.24-patches.tar.bz2
  * 01
  * 02
  * 03
  * 05
  * 07
  * 08
  * 09
  * 20
  * 21</changelog>
</package>
<package pkgid="bb4a789d9f67b9eed8469a61b50939f54a36fed078d66ba3ba910b917154737074f0a0a8a77990d12babe6abebb74300379a34de3efbfee1dc30d896389e8595" name="procmail-debugsource" arch="aarch64">
  <version epoch="0" ver="3.24" rel="slfo.1.1_1.3"/>
  <changelog author="dimstar@opensuse.org" date="1419249600">- Drop .keyring and .sig files: procmail is signed using an MD5
  type key, which is no longer accepted by GPG 2.1
- Drop the usage of gpg-offline: we don't have keys to verify and
  the source validator performs the action transparent nowadays.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to have binaries independent of speed
  of compile system (boo#1041534)</changelog>
  <changelog author="werner@suse.de" date="1510920000">- Add patch procmail-formisc.c.patch to fix bug bsc#1068648
  CVE-2017-16844</changelog>
  <changelog author="mliska@suse.cz" date="1562932800">- Add procmail-fix-Werror=return-type.patch in order to fix
  - Werror=return-type errors.</changelog>
  <changelog author="werner@suse.de" date="1573214400">- Add latest patch sets from Debian:
  * patch set 27 replaces procmail-3.22-CVE-2014-3618.patch
  * patch set 28 does fix off-by-one error that makes procmail to
    segfault on certain .procmailrc files
  * patch set 29 does fix formail memory corruption
  * patch set 30 replaces procmail-formisc.c.patch for CVE-2017-16844
- Remove obsolate patches
  * procmail-3.22-CVE-2014-3618.patch
  * procmail-formisc.c.patch</changelog>
  <changelog author="werner@suse.de" date="1603454400">- Do not use lto compiler flags at all with this kind of code</changelog>
  <changelog author="bwiedemann@suse.com" date="1606392000">- Add reproducible2.patch to negate influences from preinstallimage
  to make package build reproducible</changelog>
  <changelog author="dmueller@suse.com" date="1619956800">- modernize spec file (move license to licensedir)</changelog>
  <changelog author="werner@suse.de" date="1691582400">- Update to procmail 3.24 (New Upstream)
  - Don't coredump in comsat code if interrupted early
  - Correctly handle COMSAT=on
  - Once used, the 'H' and 'r' flags would never be cleared
  - Fix possible buffer overflow in variable-capture actions
  - Fix up the parsing of variable-capture actions
  - LMTP code assumed sizeof(long)==sizeof(int)
  - SHELL is now always preset to /bin/sh.  USER_SHELL contains
    the shell from the user's passwd entry
  - When HOST is mismatched, reset it for the next rcfile
  - Always read in a new, global rcfile (/etc/procmail.conf)
    to allow runtime configuration of variables like DEFAULT.
    This rcfile cannot deliver or filter messages
  - Mismatched HOST in /etc/procmailrc didn't discard the message
  - backquote expansion in a condition disabled header
    concatenation for that condition
  - LMTP didn't correctly handle quoted localparts
  - Removed SIZE extension from LMTP (unsupportable semantics)
  - Don't coredump if unable to exec /bin/sh
  - Enable "+detail" processing in LMTP mode by passing the
    delimiter (e.g., "+") as an optional argument after -z
  - In LMTP mode, save the domain of the recipient in
    PROCMAIL_DOMAIN
  - Set PROCMAIL_MODE to one of "d", "m", "z", or "" to reflect
    the mode option it was invoked with, if any
  - Fixed all bugs collected by Debian and others
    during the past 21 years.  See the git commit history
    for detailed descriptions.
- Port patches
  * procmail-3.22-autoconf.dif
  * procmail-3.22-headerconcat.dif
  * procmail-3.22-ipv6.patch
  * procmail-3.22-mailstat.patch
  * procmail-3.22-owl-truncate.dif
  * procmail-3.22.dif
  * procmail-cflags.dif
- Remove former Debian and SUSE patches from procmail-3.22-patches.tar.bz2
  * 04
  * 06
  * 10
  * 11
  * 12
  * 13
  * 14
  * 15
  * 16
  * 17
  * 18
  * 19
  * 22
  * 23
  * 24
  * 25
  * 26
  * 27
  * 28
  * 29
  * 30
- Collect and port our patches from old procmail-3.22-patches.tar.bz2
  into new procmail-3.24-patches.tar.bz2
  * 01
  * 02
  * 03
  * 05
  * 07
  * 08
  * 09
  * 20
  * 21</changelog>
</package>
<package pkgid="7168f64dd63d0487981dd9d805a39e45fe0efe5f41196a950ea4edcf701ec33f75038692766ab61e7ad46e0b6355079b31db74b6098bc9ae40262a884cd3ef53" name="procps-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.3.17" rel="slfo.1.1_1.2"/>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="kukuk@suse.com" date="1698667200">- procps-ng-3.3.17-logind.patch: Fix crash of "w -s -h"</changelog>
  <changelog author="kukuk@suse.com" date="1702555200">- procps-3.3.17-ignore-sysctl_conf.patch: ignore dangling symlink
  to missing /etc/sysctl.conf file [bsc#1217990]</changelog>
</package>
<package pkgid="682cf774b6c3992c5f3e9bfe39a84c3364dd3fd5b577cd504cce20186e71915e632124031a9ff11a3c848462e767b1aba6c7e62ce10b5693217829597408c72c" name="procps-debugsource" arch="aarch64">
  <version epoch="0" ver="3.3.17" rel="slfo.1.1_1.2"/>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="kukuk@suse.com" date="1698667200">- procps-ng-3.3.17-logind.patch: Fix crash of "w -s -h"</changelog>
  <changelog author="kukuk@suse.com" date="1702555200">- procps-3.3.17-ignore-sysctl_conf.patch: ignore dangling symlink
  to missing /etc/sysctl.conf file [bsc#1217990]</changelog>
</package>
<package pkgid="301607dc077ff236bbee5b5c3c4d151e3bf2e7760b9cde7491ae116ebf4253de96c588a4f7c959755b5bc26fa0d109a75f06d6884dcddd62d6614a43a988950d" name="protobuf-c-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="slfo.1.1_1.4"/>
  <changelog author="adam.majer@suse.de" date="1585828800">- Update to new upstream release 1.3.3
  * Fixes cmake endiness check</changelog>
  <changelog author="jengelh@inai.de" date="1621425600">- Update to release 1.4.0
  * protoc-c: Add custom options support
  * Fix packed repeated bool parsing</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637323200">- Fold main package into devel package, as it needed its own
  devel-package, add a protobuf-c = version Provides to devel
  sub-package. (bsc#1213443)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Drop no longer needed rpmlintrc.
- Also add a protobuf-c =&lt; version Obsoletes to devel sub-package.</changelog>
  <changelog author="adam.majer@suse.de" date="1657022400">- Do not build static libraries
- Run unit tests
- Explicit files and directories for includedir, so we can detect
  what we actually install there
- 508.patch: fixes invalid arithmetic shift (bsc#1200908, CVE-2022-33070)</changelog>
  <changelog author="jengelh@inai.de" date="1657540800">- Update to release 1.4.1 (jsc#PED-5634)
  * Fixed unsigned integer overflow (GH#499, bsc#1210323, CVE-2022-48468)
  * Avoid shifting signed values (GH#508)
- Remove 508.patch (merged)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO again.</changelog>
  <changelog author="adam.majer@suse.de" date="1682337600">- Add protobuf-devel to devel package recommends as the binary there
  is required to actually generated protobuf headers.</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- limit to protobuf &lt; 22 as it is not compatible with newer
  versions (gh#protobuf-c#544)</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 1.5.0:
  * Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
  * remove deprecated functionality
  * Avoid "unused variable" compiler warning
  * Update autotools
  * Support for new Google protobuf 22.x, 23.x releases
  * Remove protobuf 2.x support</changelog>
</package>
<package pkgid="1511836999d60309262eecf46220b54950ee2433dc6505dfd62b0fb4c5f61a52153876dd2df6f58738e89b393d482850d0991eacc879e95544108786fa9990fd" name="psmisc-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.6" rel="slfo.1.1_1.3"/>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1620388800">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1621512000">- Do not change CAP within spec file (boo#1186258)</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Update to 23.4:
  * killall: Dynamically link to selinux and use security attributes
  * pstree: Do not crash on missing processes !21
  * pstree: fix layout when using -C !24
  * pstree: add time namespace !25
  * pstree: Dynamically link to selinux and use attr
  * fuser: Get less confused about duplicate dev_id !10
  * fuser: Only check pathname on non-block devices !31
- Rebase 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
- Rebase 0002-Use-new-statx-2-system-call-to-avoid-hangs-on-NFS.patch
- Port psmisc-22.21-pstree.patch
- Delete psmisc-v23.3-selinux.patch as not needed anymore
- Rename psmisc-v23.3.dif which is now psmisc-v23.4.dif with correct offsets</changelog>
  <changelog author="werner@suse.de" date="1643716800">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).
- Adopt patch 0002-Use-new-statx-2-system-call-to-avoid-hangs-on-NFS.patch</changelog>
  <changelog author="werner@suse.de" date="1645617600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.</changelog>
  <changelog author="werner@suse.de" date="1669377600">- Add patch socket-fix.patch
  * Add test to check for named sockets as file as well as on mounts
  * Fix code to find named sockets
- The former test requires nc at build aka netcat from openbsd to
  create a named socket on the fly</changelog>
  <changelog author="werner@suse.de" date="1670932800">- Update to 23.6:
  * buildsys: Fix DEJAGNU work-around Debian #1015089
  * killall: Use kill if pidfd_send_signal fails Debian #1015228
  * fuser: Do not mention nonexistent - reset option #42
  * fuser: Use modern statn where possible
  * pstree: Better AppArmor support !30
  * killall: Check truncated names !28
  * killall: Use openat and pidfd_send_signal #37
  * killall: Don't check paths of sockets #35
  * pstree: Check for process with show_parents #38
  * pstree: Don't disable compaction with show pgids #34
  * pstree: Fix storage leak !29
- Enable new apparmor support
- Remove patch now upstream
  0002-Use-new-statx-2-system-call-to-avoid-hangs-on-NFS.patch
- Port patch psmisc-22.21-pstree.patch
- Port patch psmisc-v23.4.dif which now becomes psmisc-v23.6.dif
- Merge patch socket-fix.patch with ported patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="lnussel@suse.de" date="1676548800">- allow to switch off Apparmor support via bcond</changelog>
</package>
<package pkgid="67b2ae9ad0915dfb0e12d17d95a210460e41a9e61ef02d30e9b8e30817d14509f1f8556a3f5d75acbd8e2197140685228c6fb2c5b9760a1026e51aea5f108f31" name="psmisc-debugsource" arch="aarch64">
  <version epoch="0" ver="23.6" rel="slfo.1.1_1.3"/>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1620388800">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1621512000">- Do not change CAP within spec file (boo#1186258)</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Update to 23.4:
  * killall: Dynamically link to selinux and use security attributes
  * pstree: Do not crash on missing processes !21
  * pstree: fix layout when using -C !24
  * pstree: add time namespace !25
  * pstree: Dynamically link to selinux and use attr
  * fuser: Get less confused about duplicate dev_id !10
  * fuser: Only check pathname on non-block devices !31
- Rebase 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
- Rebase 0002-Use-new-statx-2-system-call-to-avoid-hangs-on-NFS.patch
- Port psmisc-22.21-pstree.patch
- Delete psmisc-v23.3-selinux.patch as not needed anymore
- Rename psmisc-v23.3.dif which is now psmisc-v23.4.dif with correct offsets</changelog>
  <changelog author="werner@suse.de" date="1643716800">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).
- Adopt patch 0002-Use-new-statx-2-system-call-to-avoid-hangs-on-NFS.patch</changelog>
  <changelog author="werner@suse.de" date="1645617600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.</changelog>
  <changelog author="werner@suse.de" date="1669377600">- Add patch socket-fix.patch
  * Add test to check for named sockets as file as well as on mounts
  * Fix code to find named sockets
- The former test requires nc at build aka netcat from openbsd to
  create a named socket on the fly</changelog>
  <changelog author="werner@suse.de" date="1670932800">- Update to 23.6:
  * buildsys: Fix DEJAGNU work-around Debian #1015089
  * killall: Use kill if pidfd_send_signal fails Debian #1015228
  * fuser: Do not mention nonexistent - reset option #42
  * fuser: Use modern statn where possible
  * pstree: Better AppArmor support !30
  * killall: Check truncated names !28
  * killall: Use openat and pidfd_send_signal #37
  * killall: Don't check paths of sockets #35
  * pstree: Check for process with show_parents #38
  * pstree: Don't disable compaction with show pgids #34
  * pstree: Fix storage leak !29
- Enable new apparmor support
- Remove patch now upstream
  0002-Use-new-statx-2-system-call-to-avoid-hangs-on-NFS.patch
- Port patch psmisc-22.21-pstree.patch
- Port patch psmisc-v23.4.dif which now becomes psmisc-v23.6.dif
- Merge patch socket-fix.patch with ported patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="lnussel@suse.de" date="1676548800">- allow to switch off Apparmor support via bcond</changelog>
</package>
<package pkgid="717ee9523908247b81484d73d675a0376cba471e0d922f70fa286d6b88409fa3bd087b8b262a23e801f31b849c26aafe212cda8ab64237181b1b01b0184246c4" name="pv-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 1.6.6
  * Fix target buffer size (-B) being ignored
  * Cap read/write sizes, and check elapsed time during read/write
    cycle to avoid display hangs with large buffers or slow media.
  * Report error in "-d" if process fd directory is unreadable, or
    if process disappears before we start the main loop.</changelog>
  <changelog author="jengelh@inai.de" date="1599566400">- Trim old specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1636113600">- Update to release 1.6.20
  * Starting pv in the background no longer immediately stops
    unless the transfer is to/from the terminal.
  * Using -B, -A, or -T now switches on -C implicitly.</changelog>
  <changelog author="jengelh@inai.de" date="1689595200">- Update to release 1.7.0
  * The "--size" option now accepts "@filename" to use the size
    of another file.
  * New "--bits" option to show bit count instead of byte count.
  * New "--average-rate-window" option, to set the window over
    which the average rate is calculated, also used for ETA.
  * The "--watchfd" option will now show relative filenames, if
    they are under the current directory.
  * Add burst rate limit to transfer, so rate limits are not
    broken by bursty traffic.
  * Corrected elapsed time display to show as D:HH:MM:SS after 1
    day, like the ETA does.</changelog>
  <changelog author="jengelh@inai.de" date="1690545600">- Update to release 1.7.18
  * New "--sync" option to flush cache to disk after every write
  * New "--direct-io" option to bypass cache</changelog>
  <changelog author="jengelh@inai.de" date="1690718400">- Update to release 1.7.24
  * correct terminal size detection (was broken by 1.7.17)</changelog>
  <changelog author="pgajdos@suse.com" date="1695729600">- add _constraints [bsc#1215338]</changelog>
  <changelog author="pgajdos@suse.com" date="1700049600">- increase required memory in _constraints [bsc#1217165]
  (tests still fails in ETA related tests)</changelog>
  <changelog author="pgajdos@suse.com" date="1701345600">- disable testsuite for s390x [bsc#1215338]
- remove _constraints again as it didn't help
- deleted sources
  - _constraints (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 1.8.5
  * Corrected percentage formatting so it does not jump from 2 to 3
    characters wide at 100%.
  * Replaced `--remote` mechanism to use a temporary file instead
    of SysV IPC, so it can work reliably even when there are
    multiple pv instances.
  * feature: new `--discard` option to discard input as if writing
    to /dev/null.
  * feature: new `--error-skip-block` option to make `--skip-
    errors` skip whole blocks.
  * feature: use `posix_fadvise()` like cat(1) does, to improve
    efficiency.
  * security: with `--pidfile`, write to a temporary file and
    rename it into place, to improve security.
  * security: ignore _TMP_ / _TMPDIR_ environment variables when
    using a terminal lock file.
  * Only report errors about missing files when starting to
    transfer from them, not while calculating size, and behave more
    like cat(1) by skipping them and moving on.
  * Auto-calculate total line count with `--line-mode` when all
    inputs are regular files.
  * Cope with machine suspend/resume and botched timestamps.
  * If `--width` or `--height` were provided, do not change them
    when the window size changes.
  * When a file descriptor position in `--watchfd` moves backwards,
    show the rate using the correct prefix.
  * Rewrite terminal state save/restore so state is not
    intermittently garbled on exit when using `--cursor`.
  * Licensing change from Artistic 2.0 to GPLv3+.</changelog>
</package>
<package pkgid="418734a6083973571bb39a660e7fbfb80475bdf78c10426110bb52d9fe3649105ae20f16ac3de38aa8c5aace0a24714d90dc1ec241b2bf4c214c9cdef662c998" name="pv-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 1.6.6
  * Fix target buffer size (-B) being ignored
  * Cap read/write sizes, and check elapsed time during read/write
    cycle to avoid display hangs with large buffers or slow media.
  * Report error in "-d" if process fd directory is unreadable, or
    if process disappears before we start the main loop.</changelog>
  <changelog author="jengelh@inai.de" date="1599566400">- Trim old specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1636113600">- Update to release 1.6.20
  * Starting pv in the background no longer immediately stops
    unless the transfer is to/from the terminal.
  * Using -B, -A, or -T now switches on -C implicitly.</changelog>
  <changelog author="jengelh@inai.de" date="1689595200">- Update to release 1.7.0
  * The "--size" option now accepts "@filename" to use the size
    of another file.
  * New "--bits" option to show bit count instead of byte count.
  * New "--average-rate-window" option, to set the window over
    which the average rate is calculated, also used for ETA.
  * The "--watchfd" option will now show relative filenames, if
    they are under the current directory.
  * Add burst rate limit to transfer, so rate limits are not
    broken by bursty traffic.
  * Corrected elapsed time display to show as D:HH:MM:SS after 1
    day, like the ETA does.</changelog>
  <changelog author="jengelh@inai.de" date="1690545600">- Update to release 1.7.18
  * New "--sync" option to flush cache to disk after every write
  * New "--direct-io" option to bypass cache</changelog>
  <changelog author="jengelh@inai.de" date="1690718400">- Update to release 1.7.24
  * correct terminal size detection (was broken by 1.7.17)</changelog>
  <changelog author="pgajdos@suse.com" date="1695729600">- add _constraints [bsc#1215338]</changelog>
  <changelog author="pgajdos@suse.com" date="1700049600">- increase required memory in _constraints [bsc#1217165]
  (tests still fails in ETA related tests)</changelog>
  <changelog author="pgajdos@suse.com" date="1701345600">- disable testsuite for s390x [bsc#1215338]
- remove _constraints again as it didn't help
- deleted sources
  - _constraints (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 1.8.5
  * Corrected percentage formatting so it does not jump from 2 to 3
    characters wide at 100%.
  * Replaced `--remote` mechanism to use a temporary file instead
    of SysV IPC, so it can work reliably even when there are
    multiple pv instances.
  * feature: new `--discard` option to discard input as if writing
    to /dev/null.
  * feature: new `--error-skip-block` option to make `--skip-
    errors` skip whole blocks.
  * feature: use `posix_fadvise()` like cat(1) does, to improve
    efficiency.
  * security: with `--pidfile`, write to a temporary file and
    rename it into place, to improve security.
  * security: ignore _TMP_ / _TMPDIR_ environment variables when
    using a terminal lock file.
  * Only report errors about missing files when starting to
    transfer from them, not while calculating size, and behave more
    like cat(1) by skipping them and moving on.
  * Auto-calculate total line count with `--line-mode` when all
    inputs are regular files.
  * Cope with machine suspend/resume and botched timestamps.
  * If `--width` or `--height` were provided, do not change them
    when the window size changes.
  * When a file descriptor position in `--watchfd` moves backwards,
    show the rate using the correct prefix.
  * Rewrite terminal state save/restore so state is not
    intermittently garbled on exit when using `--cursor`.
  * Licensing change from Artistic 2.0 to GPLv3+.</changelog>
</package>
<package pkgid="3a9052230807b14939c20fc07f753465da9ac8976d87a60babdd36bbc8bbfbb6bc5ddc48c5265dc20ad83351d326ca02fd84afa1de70ea6c4c535aee4316ac7a" name="python-M2Crypto-debugsource" arch="aarch64">
  <version epoch="0" ver="0.39.0" rel="slfo.1.1_1.2"/>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="mcepl@suse.com" date="1688472000">- Update to 0.39.0:
  - SUPPORT FOR PYTHON 2 HAS BEEN DEPRECATED AND IT WILL BE
    COMPLETELY REMOVED IN THE NEXT RELEASE.
  - Remove dependency on parameterized and use unittest.subTest
    instead.
  - Upgrade embedded six.py module to 1.16.0 (really tiny
    inconsequential changes).
  - Make tests working on MacOS again (test_bio_membuf: Use fork)
  - Use OpenSSL_version_num() instead of unrealiable parsing of
    .h file.
  - Mitigate the Bleichenbacher timing attacks in the RSA
    decryption API (CVE-2020-25657)
  - Add functionality to extract EC key from public key + Update
    tests
  - Worked around compatibility issues with OpenSSL 3.*
  - Support for Twisted has been deprecated (they have their own
    SSL support anyway).
  - Generate TAP while testing.
  - Stop using GitHub for testing.
  - Accept a small deviation from time in the testsuite (for
    systems with non-standard HZ kernel parameter).
  - Use the default BIO.__del__ rather tha overriding in BIO.File
    (avoid a memleak).
  - Resolve "X509_Name.as_der() method from X509.py -&gt; class
    X509_Name caused segmentation fault"
- Remove upstreamed patches:
  - CVE-2020-25657-Bleichenbacher-attack.patch
  - m2crypto-0.38-ossl3-tests.patch
  - openssl-adapt-tests-for-3.1.0.patch
  - openssl-stop-parsing-header.patch
  - timeout_300hz.patch</changelog>
</package>
<package pkgid="c13d53545bf6f2ad3a72885a6f0dd2cfe233251a7b13053dfb5d9733f1b0e0b92a08fe9bfde6dfdbb434a64c754f2fb49cd2d9b824b880d1f4aab86cb2e4e3f4" name="python-MarkupSafe-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1.3" rel="slfo.1.1_1.2"/>
  <changelog author="dmueller@suse.com" date="1618574400">- allow tests to be disabled (still on by default)</changelog>
  <changelog author="alarrosa@suse.com" date="1622548800">- Update to v2.0.1
  * Mark top-level names as exported so type checking understands
    imports in user projects.
  * Fix some types that weren’t available in Python 3.6.0.
- Update to v2.0.0
  * Drop Python 2.7, 3.4, and 3.5 support.
  * Markup.unescape uses html.unescape() to support HTML5 character
    references. #117
  * Add type annotations for static typing tools. #149</changelog>
  <changelog author="michael@stroeder.com" date="1623585600">- skip building for Python 2.x</changelog>
  <changelog author="arun@gmx.de" date="1647604800">- specfile:
  * update copyright year
  * require python &gt;= 3.7
- update to version 2.1.1:
  * Avoid ambiguous regex matches in "striptags". :pr:`293`
- changes from version 2.1.0:
  * Drop support for Python 3.6. :pr:`262`
  * Remove "soft_unicode", which was previously deprecated. Use
    "soft_str" instead. :pr:`261`
  * Raise error on missing single placeholder during string
    interpolation. :issue:`225`
  * Disable speedups module for GraalPython. :issue:`277`</changelog>
  <changelog author="asn@cryptomilk.org" date="1654776000">- Require python 3.6. There is no need to require a newer version and
  this way it builds on openSUSE Leap &gt;= 15.3</changelog>
  <changelog author="me@manueljacob.de" date="1656072000">- Patch PKG-INFO to avoid pip failing on Python 3.6 with
  `ERROR: Package 'MarkupSafe' requires a different Python:
  3.6.15 not in '&gt;=3.7'`.</changelog>
  <changelog author="dmueller@suse.com" date="1674993600">- update to 2.1.2:
  * Fix ``striptags`` not stripping tags containing newlines.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1687176000">- update to 2.1.3:
  * Implement ``format_map``, ``casefold``, ``removeprefix``,
    and ``removesuffix`` methods.
  * Fix static typing for basic ``str`` methods on ``Markup``.
  * Use ``Self`` for annotating return types. :pr:`379`</changelog>
</package>
<package pkgid="ecf9a70f531b74234fe58a3240a437e701d9395f665f681df7534554e6cf66b9dba04612af24b14d77291d830e3617f257ff784bdfd38f8dd2c0da695fd1c1c1" name="python-PyYAML-debugsource" arch="aarch64">
  <version epoch="0" ver="6.0.1" rel="slfo.1.1_1.2"/>
  <changelog author="mimi.vx@gmail.com" date="1584619200">- update to 5.3.1
  * fixes boo#1165439 (cve-2020-1747) Prevents arbitrary code execution
  during python/object/new constructor</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 5.4.1 (bsc#1174514, CVE-2020-14343):
  * Fix stub compat with older pyyaml versions that may unwittingly load it
  * Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
  * Fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
  * Fix memory leak in implicit resolver setup
  * Fix py2 copy support for timezone objects
  * Fix compatibility with Jython</changelog>
  <changelog author="tina.mueller@suse.com" date="1635768000">- Add patch setuptools.patch
- update to 6.0
  * drop Python 2.7
  * always require `Loader` arg to `yaml.load()`
  * fix float resolver to ignore `.` and `._`
  * fix representation of Enum subclasses
  * fix libyaml extension compiler warnings
  * fix ResourceWarning on leaked file descriptors
  * remove remaining direct distutils usage</changelog>
  <changelog author="pgajdos@suse.com" date="1646827200">- do not use setup.py test construct
  https://trello.com/c/me9Z4sIv/121-setuppy-test-leftovers</changelog>
  <changelog author="mcepl@suse.com" date="1655294400">- Clean up the SPEC file.</changelog>
  <changelog author="code@bnavigator.de" date="1656331200">- Actually we DO want to build the bindings.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1691928000">- update to 6.0.1:
  * pin Cython to &lt; 3.0</changelog>
  <changelog author="dmueller@suse.com" date="1695124800">- cleanup</changelog>
</package>
<package pkgid="d3080a465968a0aca868d7edea41df5c62160daa038550f6175125a6755699a8e3a2ac537c73dc4029533f00f9f611274b8e624827ce50df7d2f1d68eff7231e" name="python-cffi-debugsource" arch="aarch64">
  <version epoch="0" ver="1.15.1" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 1.14.3:
  * no upstream changelog provided</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 1.14.4:
  * no upstream changelog provided</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 1.14.5:
  * Source fix for old gcc versions</changelog>
  <changelog author="dmueller@suse.com" date="1626436800">- update to 1.14.6:
  * Revert "grovel: detect :float and :double in the :auto type"</changelog>
  <changelog author="dmueller@suse.com" date="1636200000">- update to 1.15.0:
  * Fixed MANIFEST.in to include missing file for Windows arm64 support
  * Fixed Linux wheel build to use gcc default ISA for libffi
  * Updated setup.py Python trove specifiers to currently-tested Python versions
  * CPython 3.10 support (including wheels)
  * MacOS arm64 support (including wheels)
  * Initial Windows arm64 support
  * Misc. doc and test updates</changelog>
  <changelog author="dmueller@suse.com" date="1658232000">- update to 1.15.1:
  * If you call ffi.embedding_api() but don’t write any extern “Python” function
    there, then the resulting C code would fail an assert. Fixed.
  * Updated Windows/arm64 embedded libffi static lib to v3.4.2, and scripted to
    ease future updates (thanks Niyas Sait!)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670241600">- Add python-py as test dependency</changelog>
  <changelog author="dmueller@suse.com" date="1673006400">- add 8a3c2c816d789639b49d3ae867213393ed7abdff.patch to resolve
  testsuite failures with Python 3.11</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="22ebbaba0b0ac0343d78654e5a14387c4b53eec9e1afb09221fa9dde7373bfae2d38623d3de8a1f7fa163a187da34dbcc214d6a9cabba6101846c3ce6bf022ab" name="python-dbus-python-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="slfo.1.1_1.2"/>
  <changelog author="jmatejek@suse.com" date="1513598400">- drop unneeded epydoc requirement properly</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Use requires_ge instead of the rpm calls</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Version update to version 1.2.8:
  * Python 2.7 required or 3.4 respectively
  * Tests use tap.py functionality
  * Upstream dropped epydoc completely
  * See NEWS for more</changelog>
  <changelog author="nicolas.bock@suse.com" date="1538395200">- Add missing dependency for pkg-config files</changelog>
  <changelog author="mgorse@suse.com" date="1578484800">- Version update to version 1.2.14:
  * Ensure that the numeric types from dbus.types get the same
    str() under Python 3.8 that they did under previous versions.
  * Disable -Winline.
  * Add Python 3.8 to CI.
  - Changes in version 1.2.12:
  * Don't save and restore the exception indicator when called
    from C code.
  - Changes in version 1.2.10:
  * Rewrite CONTRIBUTING.md document, based on Wayland's equivalent
  * Add clearer license information using SPDX-License-Identifier.
  * Improve test coverage.
  * Don't set deprecated tp_print to NULL under Python 3.
  * Include inherited methods and properties when documenting
    objects, which regressed when migrating from epydoc to sphinx.
  * Add missing variant_level member to UnixFd type, for parity
    with the other dbus.types types (dbus-python!3.
  - Note that this is a potentially incompatible change: unknown
    keyword arguments were previously ignored (!) and are now an
    error.
  * Don't reply to method calls if they have the NO_REPLY_EXPECTED
    flag (fd.o#32529, dbus-python#26.
  * Silence -Wcast-function-type with gcc 8.
  * Fix distcheck with python3.7 by deleting __pycache__ during
    uninstall.
  * Consistently save and restore the exception indicator when
    called from C code.
  * Avoid a long-standing race condition in the automated tests.
  * Fix Qt website URL.
- Up dbus dependency; 1.8 is now required.</changelog>
  <changelog author="code@bnavigator.de" date="1607688000">- Support builds with more than one python3 flavor
  gh#openSUSE/python-rpm-macros#66
- Remove shebang from examples (rpmlint warning, is in common doc)
- Clean duplicate python flavor variables for configure
- Update the provides/obsoletes tags for old-style dbus-1-$python</changelog>
  <changelog author="dmueller@suse.com" date="1610193600">- update to 1.2.16:
  * All tests are run even if the tap.py module is not available, although
    diagnostics for failing tests will be better if it is present.
  * Forbid unexpanded AX-prefixed macros more selectively</changelog>
  <changelog author="sflees@suse.de" date="1623240000">- Enable testsuite</changelog>
  <changelog author="dmueller@suse.com" date="1627387200">- update to 1.2.18:
  * dbus-python will be built for python3
  * Python 2 reached end-of-life on 2020-01-01. A future version of
    dbus-python is likely to remove Python 2 support.
  * Move from collections.Sequence to collections.abc.Sequence on
    Python ≥ 3.3, for Python 3.10 compatibility
  * Avoid another deprecation warning for inspect.getargspec().
    This is similar to the one fixed in 1.2.4, but for dbus.decorators.signal
    rather than dbus.decorators.method. (dbus-python!8; Martin Stumpf)
  * Fix an unlikely fd leak if memory allocation fails for UnixFd
  * Fix memory and fd leak if UnixFd is given an invalid negative
    variant_level
  * Avoid more deprecation warnings
  * Disable -Wdeclaration-after-statement. Python 3.9 relies on intermixed
    declarations and statements in its headers, so we can no longer
    enforce this. (Simon McVittie)
  * Convert examples to Python 3 (Simon McVittie)
  * Use the same Python executable for build and dist/distcheck by default
  * CI fixes</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 1.3.2:
  * Python 3, version 3.5 or later, is required.
  * Installing from source code using Autotools requires Python 3.5 or
    later.
  * dbus.gobject_service, dbus.types.UTF8String and the utf8_strings
  keyword argument were only usable with Python 2, and therefore have
  been removed, along with the rest of the special cases for Python 2.
  * Add methods to Message objects to manipulate the interactive
  authorization flag
  * Add licensing information in REUSE format
  * Raise ValueError instead of crashing with assertion failure when a
  Unix fd index number is greater than the number of fds actually attached
  to the message (firewalld#985; Simon McVittie)
  * Raise ValueError instead of crashing with assertion failure when
  a negative number is passed to the UnixFd constructor
  * Fix undefined escape sequences in docstrings
  * Make `distcheck` compatible with Automake 1.16.4, by forcing an
  appropriate prefix to be used
  * Update AX_PYTHON_DEVEL from autoconf-archive for better
  forwards-compatibility
  * Avoid various deprecation warnings in the build system
  - distutils.sysconfig → sysconfig
  - distutils.util → sysconfig</changelog>
</package>
<package pkgid="4639c273e863122eb713c70b6cd1c7a4df0e6f732bb47323d4fe8d47dbadab8eac8da2b02bb3295263465d0239701a7c853f4208500d199ec0c82478ccdc4be0" name="python-gobject-debugsource" arch="aarch64">
  <version epoch="0" ver="3.44.1" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="code@bnavigator.de" date="1657972800">- Work around vendored distutils in setuptools &gt;= 60 incorrectly
  installing pkgconfig files into the wrong libdir</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1658491200">- Update to version 3.42.2:
  + Error out instead of crashing when marshaling unsupported
    fundamental types in some cases.
  + Add a workaround for a PyPy 3.9+ bug when threads are used.
  + Fix crashes when marshaling zero terminated arrays for certain
    item types.
  + Fix a crash/refcounting error in case marshaling a hash table
    fails.
  + Make the test suite pass again with PyPy.
  + tests: support running tests with (MSVC) CPython 3.8+ on
    Windows.
  + interface: Fix leak when overriding GInterfaceInfo.
  + setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677240000">- Update to version 3.43.1:
  + Drop support for Python 3.6
  + meson: bump minimum version to 0.53.0 and update subprojects
  + gimodule: fix floating state of python objects created with
    g_object_new
  + Gtk.Template: Accept PathLike objects as a filename
  + info: Show which type/object callables are bound to
  + IntrospectionModule: handle two threads loading type at same
    time
  + Port to Py_TRASHCAN_BEGIN
  + Other cleanups/improvements</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679227200">- Update to version 3.44.0:
  + No changes compared to 3.43.1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679659200">- Update to version 3.44.1:
  + Fix tests with glib 2.76.x</changelog>
</package>
<package pkgid="4fbc389f5bf3db430730a6ee31aaa647d17374a25ee2048ba50abcc884156362734e341b5bffb87ed4d910b8bef812946070a770db0dc046fc1d2f168dcc028b" name="python-immutables-debugsource" arch="aarch64">
  <version epoch="0" ver="0.19" rel="slfo.1.1_1.2"/>
  <changelog author="dmueller@suse.com" date="1602590400">- skip tests that fail on 32bit</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Add skip_32bit_tests.patch (gh#MagicStack/immutables#53) to skip tests
  which fail on 32bit architectures.</changelog>
  <changelog author="dmueller@suse.com" date="1619092800">- update to 0.15
  * python 3.9 support</changelog>
  <changelog author="mcepl@suse.com" date="1628164800">- Upstream fixed problems with 32bit systems
  (gh#MagicStack/immutables#69) so we have removed
  skip_32bit_tests.patch and added new solution which actually fixes the
  issue: test_none_collisions-32-bit.patch.</changelog>
  <changelog author="dmueller@suse.com" date="1645531200">- update to 0.16:
  * Refactor typings
  * Update Python 3.10 support, drop Python 3.5
  * Fix test_none_collisions on 32-bit systems
  * Clarify the license of the included pythoncapi_compat.h header
  * Use cibuildwheel to build wheels
- drop skip_32bit_tests.patch, test_none_collisions-32-bit.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1658232000">- update to 0.18:
  * Fix iteration when tree is 7 levels deep and has collissions
  * Test on python 3.10
  * consolidate mypy and pytest config into pyproject.toml</changelog>
  <changelog author="code@bnavigator.de" date="1661169600">- Don't do mypy static type checking of the sources in order to
  avoid mypy in Ring1. The functionality of the binary rpm package
  is not affected by properly typed python sources.
- Remove obsolete setup.py sed fix
- Don't catchall sitearch files in %files section</changelog>
  <changelog author="yarunachalam@suse.com" date="1665576000">- Update to version 0.19
  * Support for Python 3.11</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="19c6412162374c38af92977eedb474ae4c1163a424d308733497b223fe82f37ff832dec5b0587d3cfd6e5097c1649f5be199b9609249056cc0e926bfebe8225d" name="python-libvirt-python-debugsource" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="jfehlig@suse.com" date="1683028800">- Update to 9.3.0
  - Add all new APIs and constants in libvirt 9.3.0</changelog>
  <changelog author="jfehlig@suse.com" date="1685707200">- Update to 9.4.0
  - Add all new APIs and constants in libvirt 9.4.0</changelog>
  <changelog author="jfehlig@suse.com" date="1688644800">- Update to 9.5.0
  - Add all new APIs and constants in libvirt 9.5.0</changelog>
  <changelog author="jfehlig@suse.com" date="1690977600">- Update to 9.6.0
  - Add all new APIs and constants in libvirt 9.6.0
  - jsc#PED-3725</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to 9.7.0
  - Add all new APIs and constants in libvirt 9.7.0
  - jsc#PED-3279</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to 9.8.0
  - Add all new APIs and constants in libvirt 9.8.0
  - jsc#PED-3279</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to 9.9.0
  - Add all new APIs and constants in libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to 9.10.0
  - Add all new APIs and constants in libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to 10.0.0
  - Add all new APIs and constants in libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851</changelog>
</package>
<package pkgid="8a6689a36f206dbda684c06f31e93bae313603308da7283c4a71590ae02fc2e8f43820e907ed35e3a71c000ec203e9947721cdea09cd2e7fc5e30a096a1145a9" name="python-lxml-debugsource" arch="aarch64">
  <version epoch="0" ver="4.9.3" rel="slfo.1.1_1.2"/>
  <changelog author="mcepl@suse.com" date="1674216000">- Add close_file_before_test.patch, to make sure the testing data
  are flushed to the file (bsc#1206555).</changelog>
  <changelog author="dmueller@suse.com" date="1676548800">- allow building against any libxml2 version in sle15</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681905600">- Add patch skip-test-under-libxml2-2.10.4.patch:
  * Skip a test if using libxml2 &gt;= 2.10.4</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- New hotness is the sle15_python_module_pythons macro.</changelog>
  <changelog author="mcepl@suse.com" date="1682251201">- Switch documentation to be within the main package.</changelog>
  <changelog author="david.anes@suse.com" date="1683201600">- Add patch skip-test-under-libxml2-2.11.1.patch:
  * Skip a test if using libxml2 &gt;= 2.11.1</changelog>
  <changelog author="mcepl@suse.com" date="1689336000">- Add ISO-Schematron-schema-optional.patch and
  remove-ISO-Schematron-schema.patch to remove non-free RNG
  schema file (bsc#1213351).</changelog>
  <changelog author="dmueller@suse.com" date="1691928000">- update to 4.9.3:
  * ``lxml.objectify`` accepted non-decimal numbers like ``²²²``
    as integers.
  * A memory leak in ``lxml.html.clean`` was resolved by
    switching to Cython 0.29.34+.
  * GH#348: URL checking in the HTML cleaner was improved.
  * GH#371, GH#373: Some regex strings were changed to raw
    strings to fix Python warnings.
  * Built with Cython 0.29.36 to adapt to changes in Python 3.12.</changelog>
  <changelog author="dmueller@suse.com" date="1694001600">- skip html5lib tests - cyclic dependency with html5lib tests
- remove python 2.x from testing</changelog>
</package>
<package pkgid="3e08aae90f473bea2f6b18891ce36c3a97962a0dd3a40d3d5d28b5fd345f626941aac3a85533f58a5e94995384fe6d850af83c02f3d8f005b5c6118ae9a3b7bc" name="python-msgpack-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="slfo.1.1_1.3"/>
  <changelog author="alarrosa@suse.com" date="1548763200">- Use %license</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551960000">- update to 0.6.1
  * unpackb(data) configures max_*_len options from len(data), instead
    of static default sizes.
  * Unpacker(max_buffer_len=N) configures max_*_len options from N, instead
    of static default sizes.
  * max_bin_len, max_str_len, and max_ext_len are deprecated.
  * unpacker: Default value of input limits are smaller than before to
    avoid DoS attack
  * Unpacker doesn't wrap underlaying ValueError (including UnicodeError)
    into UnpackValueError. If you want to catch all exception during unpack,
    you need to use try ... except Exception with minimum try code block.
  * PackValueError and PackOverflowError are also removed. You need to catch
    normal ValueError and OverflowError.
  * Unpacker has strict_map_key option now. When it is true, only bytes
    and str (unicode in Python 2) are allowed for map keys.
  * Extension modules are merged. There is msgpack._cmsgpack instead
    of msgpack._packer and msgpack._unpacker.
  * Add Unpacker.getbuffer() method.
  * unpacker: msgpack.StackError is raised when input data contains too nested data
  * unpacker: msgpack.FormatError is raised when input data is not valid msgpack format.</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 0.6.2:
  * Support Python 3.8.
  * Update Cython to 0.29.13 for support Python 3.8.
  * Some small optimizations.</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Fix build without python2</changelog>
  <changelog author="pgajdos@suse.com" date="1585656000">- version update to 1.0.0
  * Remove Python 2 support from the msgpack/_cmsgpack. msgpack/fallback still supports Python 2.
  * Remove encoding option from the Packer and Unpacker.
  * Unpacker: The default value of max_buffer_type is changed to 100MiB.
  * Unpacker: strict_map_key is True by default now.
  * Unpacker: String map keys are interned.
  * Drop old buffer protocol support.
  * Support Timestamp type.
  * Support serializing and decerializing datetime object with tzinfo.
  * Unpacker: Fix Unpacker.read_bytes() in fallback implementation. (#352)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 1.0.2:
  * Python 3.9 support
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 1.0.3:
  * add python 3.10 support
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1655640000">- update to 1.0.4:
  * Support Python 3.11 (beta)
  * refresh ci settings.
  * Don't define _*ENDIAN macro on Unix.
  * Update setuptools and black
  * Use PyFloat_Pack8() on Python 3.11a7
  * Upgrade black to fix CI
  * Fix Unpacker max_buffer_length handling
  * ci: Update action versions.</changelog>
  <changelog author="dmueller@suse.com" date="1679832000">- update to 1.0.5:
  * Fallback to compiler defines when __BYTE_ORDER is not
    available
  * Fix build error caused by ntohs, ntohl
  * Add python 3.11 wheels
  * fallback: Fix packing multidim memoryview
  * minor type in exception message</changelog>
  <changelog author="kastl@b1-systems.de" date="1683547200">- add sle15_python_module_pythons</changelog>
</package>
<package pkgid="e5dd7caae35b6d15c3d508b3da69b409869231ff304809383d40a38e8ff2dede5788ad502bebba6893e40145a7604f16b925f583b8578dd204371e98b25a39db" name="python-psutil-debugsource" arch="aarch64">
  <version epoch="0" ver="5.9.5" rel="slfo.1.1_1.2"/>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to version 5.9.2:
  * Bug fixes
    + 2093_, [FreeBSD], **[critical]**: `pids()`_ may fail with
    ENOMEM. Dynamically increase the "malloc()" buffer size until
    it's big enough.
    + 2095_, [Linux]: `net_if_stats()`_ returns incorrect interface
    speed for 100GbE network cards.
    + 2113_, [FreeBSD], **[critical]**: `virtual_memory()`_ may raise
    ENOMEM due to missing "#include &lt;sys/param.h&gt;" directive.
    (patch by Peter Jeremy)
    + 2128_, [NetBSD]: `swap_memory()`_ was miscalculated.  (patch by
    Thomas Klausner)</changelog>
  <changelog author="arun@gmx.de" date="1666440000">- update to version 5.9.3:
  * Enhancements
    + 2040, [macOS]: provide wheels for arm64 architecture. (patch by
    Matthieu Darbois)
  * Bug fixes
    + 2116, [macOS], [critical]: `psutil.net_connections`_ fails with
    RuntimeError.
    + 2135, [macOS]: Process.environ() may contain garbage data. Fix
    out-of-bounds read around sysctl_procargs. (patch by Bernhard
    Urban-Forster)
    + 2138, [Linux], [critical]: can't compile psutil on Android due
    to undefined ethtool_cmd_speed symbol.
    + 2142, [POSIX]: net_if_stats() 's flags on Python 2 returned
    unicode instead of str. (patch by Matthieu Darbois)
    + 2147, [macOS] Fix disk usage report on macOS 12+. (patch by
    Matthieu Darbois)
    + 2150, [Linux] Process.threads() may raise NoSuchProcess. Fix
    race condition. (patch by Daniel Li)
    + 2153, [macOS] Fix race condition in
    test_posix.TestProcess.test_cmdline. (patch by Matthieu Darbois)</changelog>
  <changelog author="michael@stroeder.com" date="1667822400">- update to version 5.9.4:
  * Enhancements
  - 2102: use Limited API when building wheels with CPython 3.6+ on Linux,
    macOS and Windows. This allows to use pre-built wheels in all future
    versions of cPython 3. (patch by Matthieu Darbois)
  * Bug fixes
  - 2077, [Windows]: Use system-level values for virtual_memory().
    (patch by Daniel Widdis)
  - 2156, [Linux]: compilation may fail on very old gcc compilers due to
    missing SPEED_UNKNOWN definition. (patch by Amir Rossert)
  - 2010, [macOS]: on MacOS, arm64 IFM_1000_TX and IFM_1000_T are
    the same value, causing a build failure. (patch by Lawrence D'Anna)</changelog>
  <changelog author="code@bnavigator.de" date="1670500800">- Require unittest2 only for python2: make this suitable for
  the 15.4_py39 target in devel:languages:python:backports.
- Merge skip-obs.patch into skip_failing_tests.patch and add
  test_linux.py::test_cpu_affinity because it depends on the
  obs vm-type or worker CPU.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 5.9.5:
  * in case of exception, display a cleaner error
    traceback by hiding the `KeyError` bit deriving from a
    missed cache hit.
  * print the full traceback when a `DeprecationWarning`
    or `UserWarning` is raised.
  * there are cases where `Process.cwd()`_ cannot be
    determined (e.g. directory no longer exists), in which case
    we returned either ``None`` or an empty string.
    This was consolidated and we now return ``""`` on all
    platforms.
  * [UNIX]: if process is a zombie, and we can only
    determine part of the its truncated `Process.name()`_
    (15 chars), don't fail with `ZombieProcess`_ when we try
    to guess the full name from the `Process.cmdline()`_. Just
    return the truncated name.
  * on certain kernels, ``"MemAvailable"`` field
    from ``/proc/meminfo`` returns ``0`` (possibly a kernel bug), in
    which case we calculate an approximation for ``available``
    memory which matches "free" CLI utility.
  * `disk_partitions()`_: do not unnecessarily
    read /proc/filesystems and raise `AccessDenied`_ unless user
    specified `all=False` argument.
  * `users()`_ loses precision for ``started``
    attribute (off by 1 minute).
  * if cwd no longer exists. Return an empty string instead.</changelog>
  <changelog author="aplanas@suse.com" date="1692792000">- Add logind_y2038.patch to use logind if systemd &gt;= 254 is used, to
  fix the issue of ut_tv.tv_sec and the Y2038 problem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1694001600">- BuildRequire /usr/bin/who: called by the test suite. With
  coreutils 9.4 'who' is no longer part of the main package but is
  shipped as part of coreutils-systemd.</changelog>
</package>
<package pkgid="93378437a33383a3c5dd68e81e91330b47d85cd8cc7d5717827711e2cee7687bc30d067bd518a9e6fa1d9dfdf25e83a3ba16b45913d09dc4b87cd12d73e736a6" name="python-pycairo-debugsource" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="slfo.1.1_1.2"/>
  <changelog author="code@bnavigator.de" date="1606910400">- Move the pkgconfig file to the common package
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="code@bnavigator.de" date="1606996800">- Update to 1.20.0
  * Require Python 3.6+ #pr-201
  * Require cairo 1.15.10+ #pr-204
  * docs: support Sphinx 3.0 #pr-207
  * meson: add ‘tests’ option to skip tests #pr-188
  * Windows: build wheels #pr-197
  * Add support for Python 3.9 and 3.10 #pr-198 #pr-202
  * examples: add a Jupyter Notebook example #pr-181
  * Raise an error early when being passed a file object not opened
    in binary mode #pr-205
  * Add a pyproject.toml file #pr-206
- move header file in sitearch to devel package (rpmlint error)
  header is packaged twice: gh#pygobject/pycairo#98</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 1.20.1
  * setup.py: Respect the PKG_CONFIG environment variable
  * Make import_cairo inline in addition to static
  * docs: Fix example in Pattern.set_filter() docs _pr_`221`
  * docs: Fix build with newer sphinx
  * docs: Fix NumPy width, height-conventions in examples
  * docs: Last parameter of rel_curve_to should be dy3, not dy4
  * mypy: Fixes for mypy 0.800+
  * mypy: Don't run mypy via pytest</changelog>
  <changelog author="fcrozat@suse.com" date="1628769600">- Add Obsoletes/Provides for python3-cairo-devel.</changelog>
  <changelog author="code@bnavigator.de" date="1657972800">- Work around vendored distutils in setuptools &gt;= 60 incorrectly
  installing pkgconfig files into the wrong libdir
- Deduplicate files in python_sitearch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663070400">- Update to version 1.21.0:
  * Require Python 3.7+
  * Require meson 0.53+
  * Using setup.py directly to build/install pycairo is deprecated.
    Use meson instead.
  * setup.py now requires setuptools. Previously it was optional.
  * The complete API reference is now included in the typing stubs,
    so it can be consumed/shown by IDEs.
- Add f5a795ea.patch: Some test improvements for cairo 1.17.6</changelog>
  <changelog author="dimstar@opensuse.org" date="1669636800">- Updtae to version 1.22.0:
  * Officially support Python 3.11.
  * PDFSurface.version_to_string(): Fix crash with negative
    versions.
  * typing: ImageSurface.get_stride() returns an int.
  * typing: Fix incorrect interface for Matrix constructor.
  * typing: Use Generic for Context.
  * docs: some cairo.Context fixes.
  * docs: try to make create_from_png/write_to_png more clear.
  * docs: add an example for how to convert a surface to pillow.
  * docs: cairo.Format.RGB24: document that unused bytes may be
    overwritten.
  * tests: don’t depend on specific ref counts.
  * tests: compatibility fixes for cairo 1.17.6.
- Drop f5a795ea.patch: fixed upstream.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to version 1.23.0
  * Reminder to distro packagers: Building/installing pycairo using setup.py is deprecated, please use meson instead.
  * git: changed default branch from “master” to “main”
  * Windows: Update the cairo version included in the wheels from 1.17.2 to 1.17.6 #pr-243
  * docs: Document how to look up pycairo headers without loading the module #pr-300
  * tests: don’t error out if cairo wasn’t built with all features #pr-293
  New APIs:
  * Status.DWRITE_ERROR #pr-294
  * Format.RGB96F, Format.RGBA128F #pr-295
  * PDFVersion.VERSION_1_6, PDFVersion.VERSION_1_7 #pr-296
  * HAS_DWRITE_FONT #pr-297
  * Context.set_hairline(), Context.get_hairline() #pr-298
  * PDFSurface.set_custom_metadata() #pr-299</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Switch to single spec version build for PSP</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- update to 1.24.0:
  * Dropped Python 3.7 support
  * Bumped meson version requirement from 0.53.0 to 0.56.0
  * Various cairo dependency updates for the Windows wheel build
  * Various code cleanups :pr:`306`
  * Added Python 3.12 Windows wheels</changelog>
</package>
<package pkgid="29f7abaef2a42d8bd0d0fec2f28bc9b17fc9f646412894d44122bc4007e9c009138062e0a9b930651f9e7db3d3a981cbc1c11cb434f07c998be8b3a580880d33" name="python-pycurl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.45.2" rel="slfo.1.1_1.2"/>
  <changelog author="pmonreal@suse.com" date="1615204800">- Remove a failing test-case until fixed in curl:
  * Upstream issue: https://github.com/curl/curl/issues/6615</changelog>
  <changelog author="mcepl@suse.com" date="1622808000">- Add curl7770_compatibility.patch to have package compatible
  with curl 7.77.0.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651147200">- Update to 7.45.1:
  * Fixed build against libcurl &lt; 7.64.1 (patch by Scott Talbert).
  * Add CURLOPT_MAXLIFETIME_CONN (patch by fsbs).
  * Easy handle duplication support (patch by fsbs).
  * Support for unsetting a number of multi options (patch by fsbs).
  * pycurl classes can now be subclassed (patch by fsbs).
  * Multi callbacks' thread state management fixed (patch by fsbs).
  * Add CURL_LOCK_DATA_PSL (patch by fsbs).
  * Add support for SecureTransport SSL backend (MacOS)
    (patch by Scott Talbert).
  * Fixed Python thread initialization causing hangs on operations
    (patch by Scott Talbert).
  * getinfo(CURLINFO_FTP_ENTRY_PATH) now handles NULL return from
    libcurl, returning None in this case.
  * Python 3.9 is now officially supported (patch by Bill Collins).
  * Added CURLOPT_DOH_URL (patch by resokou).
  * Best effort Python 2 support has been reinstated.
  * Added missing fields to curl_version_info struct (patch by Hasan).
  * Added CURLINFO_CONDITION_UNMET (patch by Dima Tisnek).
  * Exposed MAX_CONCURRENT_STREAMS in CurlMulti (patch by Alexandre Pion).
  * Compilation fixed against Python 3.10 alpha (patch by Kamil Dudka).
- Remove patch curl7770_compatibility.patch and remove_nose.patch:
  * They have both merged upstream.
- Modify patch disable_randomly_failing_tests.patch:
  * Use pytest rather than nose methods.
- Add patch curl-789-error-message.patch:
  * Handle missing ! in a returned error message.</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 7.45.2:
  * Python 3.9 compatibility for Py_TRASHCAN_SAFE_BEGIN
  * Add support for CURL_HTTP_VERSION_3
  * Add CURLOPT_TLS13_CIPHERS and CURLOPT_PROXY_TLS13_CIPHERS options
  * Added HTTP09_ALLOWED option
  * Removed use of distutils
- drop curl-789-error-message.patch (upstream)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1677240000">- Disable http3 tests if it's not supported</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="mcepl@cepl.eu" date="1697112000">- Skip test_multi_socket_select (gh#pycurl/pycurl#819),
  test_multi_socket_action (gh#pycurl/pycurl#729), and
  test_request_with_verifypeer (gh#pycurl/pycurl#822).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1702641600">- Add patch pause-unpause-xfail.patch:
  * XFAIL a test due to gh#pycurl/pycurl#729 (bsc#1218062)</changelog>
</package>
<package pkgid="2a86693484ef5375fcbfbf566d9348c42fbd207b4c2765eb98453217fc242435d8b82606abb9c2adb9049fee04094da63d6fd40d46a46ba65280e0850456242a" name="python-pyrsistent-debugsource" arch="aarch64">
  <version epoch="0" ver="0.19.3" rel="slfo.1.1_1.2"/>
  <changelog author="tchvatal@suse.com" date="1564401600">- Update to 0.15.4:
  * support new pytest
  * Fix #174, fix a GC traversal bug in pvector evolver C extension.</changelog>
  <changelog author="dmueller@suse.com" date="1582891200">- update to 0.15.7:
  * Fix #186, type errors with more recent versions of MyPy. Thanks @qhesz for this!
  * Build and test on ARM during CI. Thanks @ossdev07 for this!
  * Set absolute imports for python2 compatibility. Thanks @michalvi for this!
  * Fix #182 moduleinit name clash.
  * Fix #179 Fixed 'ignore_extra' factory parameter for pvector. Thanks @ss18 for this!</changelog>
  <changelog author="dmueller@suse.com" date="1594987200">- update to 0.16.0:
  * No major updates but Python 2 support no longer guaranteed.
  * Fix #192, 'ignore_extra' for 'pvector_field'. Thanks @ss18 for this!
  * Fix #191, include LICENCE in distribution. Thanks @johnthagen for this!
  * Fix #190, minor MyPy errors. Thanks @Qhesz for this!</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 0.17.3:
  * Fix #208, release v0.17.3 with proper meta data requiring Python &gt;= 3.5.
  * Add "python_requires &gt;= 2.7" to setup.py in preparation for Python 2.7 incompatible updates
  * Same as 0.17.1 released with more recent version of setuptools to get proper meta data for in place.
  * Restrict package to Python &gt;= 3.5 to not break unpinned Python 2 dependencies. Thanks @vphilippon
  * Remove Python 2 support code. This includes dropping some compatibility code and the dependency on
  six. Thanks @djailla for this.
  * Fix #200, python 3 exception chaining. This is a minor backwards incompatibility, hence stepping
  to 0.17.0. Thanks @cool-RR for this!</changelog>
  <changelog author="code@bnavigator.de" date="1613390400">- Remove remnant requirements of six and numpy: These are neither
  used anywhere in the package code, nor in the tests.</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 0.18.0:
  * Fix #209 Update freeze recurse into pyrsistent data structures and thaw to
    recurse into lists and dicts
  * Fix #226, stop using deprecated exception.message.
  * Fix #211, add union operator to persistent maps.
  * Fix #194, declare build dependencies through pyproject.toml.
  * Officially drop Python 3.5 support.
  * Fix #223, release wheels for all major platforms.
  * Fix #221, KeyError obscured by TypeError if key is a tuple.
  * Fix LICENSE file name spelling.
  * Fix #216, add abstractmethod decorator for CheckedType and ABCMeta for
    _CheckedTypeMeta.
  * Fix #228, rename example classes in tests to avoid name clashes with pytest.</changelog>
  <changelog author="dmueller@suse.com" date="1643976000">- update to 0.18.1:
  * Add universal wheels for MacOS, thanks @ntamas for this!
  * Add support for Python 3.10, thanks @hugovk for this!
  * Fix #236 compilation errors under Python 3.10.
  * Drop official support for Python 3.6 since it's EOL since 2021-12-23.
  * Fix #238, failing doc tests on Python 3.11, thanks @musicinmybrain for this!</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- update to 0.19.3:
  * Fix #264, add wheels and official support for Python 3.11.
  * Fix #263, pmap regression in 0.19.1. Element access sometimes unreliable
  after insert.
  * Fix #159 (through PR #243). Pmap keys/values/items now behave more like the
  corresponding Python 3 methods on dicts. Previously they returned a
  materialized PVector holding the items, now they return
  views instead.
  * Fix #244, type for argument to PVector.delete missing.
  * Fix #249, rename perf test directory to avoid tripping up automatic
  discovery in more recent setuptools versions
  * Fix #247, performance bug when setting elements in maps and adding elements
  to sets
  * Fix #248, build pure Python wheels. This is used by some installers.
  * Fix #254, #258, support manylinux_2014_aarch64 wheels.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="9cebe57375e4c9b5a8c0dccc24bae8af8d9adf4971d37271b88635f2df905100194ea8c32dd519a4208bd157cc47f4ba1e3194733e5d4424a08b53dd84037b8b" name="python-pyzmq-debugsource" arch="aarch64">
  <version epoch="0" ver="25.1.1" rel="slfo.1.1_1.2"/>
  <changelog author="code@bnavigator.de" date="1641384000">- Skip test_log due to flaky socket handling inside obs environments.
- Add less-flaky.patch to increase flakiness of test_retry_poll
  and test_timeout.</changelog>
  <changelog author="code@bnavigator.de" date="1656417600">- Update to 23.2.0
  * Use zmq.Event enums in parse_monitor_message for nicer reprs
  * Fix building bundled libzmq with ZMQ_DRAFT_API=1
  * Fix subclassing zmq.Context with additional arguments in the
    constructor. Subclasses may now have full control over the
    signature, rather than purely adding keyword-only arguments
  * Typos and other small fixes
- Release 23.1.0
  * Fix global name of zmq.EVENT_HANDSHAKE_* constants
  * Fix constants missing when using import zmq.green as zmq
  * {func}zmq.utils.monitor.recv_monitor_msg now supports async
    Sockets.
- Release 23.0.0
  * all zmq constants are now available as Python enums (e.g.
    zmq.SocketType.PULL, zmq.SocketOption.IDENTITY), generated
    statically from zmq.h instead of at compile-time. This means
    that checks for the presence of a constant (hasattr(zmq,
    'RADIO')) is not a valid check for the presence of a feature.
    This practice has never been robust, but it may have worked
    sometimes. Use direct checks via e.g. {func}zmq.has or
    {func}zmq.zmq_version_info.
  * A bit more type coverage of Context.term and Context.socket
  * Remove all use of deprecated stdlib distutils
  * Update to Cython 0.29.30 (required for Python 3.11
    compatibility)
  * Compatibility with Python 3.11.0b1
  * Switch to myst for docs
  * Deprecate zmq.utils.strtypes, now unused
  * Updates to autoformatting, linting
- Drop less-flaky.patch: pytest-rerunfailures without the flaky
  package can handle it.
- Fix rpmlint errors
  * no-dependency-on python-base 3.X: depend on python(abi) = 3.X
  * unused-rpmlintrc-filter: Was unflavored, not required with the
    above -- drop rpmlintc
  * spurious-executable-perm: fix by chmod -x
  * obsolete-suse-version-check 1000. This package is not branched
    into any project for the maintenance of other distributions</changelog>
  <changelog author="arun@gmx.de" date="1660737600">- update to version 23.2.1:
  * Improvements:
    + First release with wheels for Python 3.11 (thanks
    cibuildwheel!).
    + linux aarch64 wheels now bundle the same libzmq (4.3.4) as all
    other builds, thanks to switching to native arm builds on
    CircleCI.
  * Fixes:
    + Some type annotation fixes in devices.</changelog>
  <changelog author="arun@gmx.de" date="1663416000">- update to version 24.0.0:
  * Breaking changes:
    + Due to a libzmq bug causing unavoidable crashes for some users,
    Windows wheels no longer bundle libzmq with AF_UNIX support. In
    order to enable AF_UNIX on Windows, pyzmq must be built from
    source, linking an appropriate build of libzmq
    (e.g. libzmq-v142). AF_UNIX support will be re-enabled in pyzmq
    wheels when libzmq published fixed releases.
    + Using a {class}zmq.Context as a context manager or deleting a
    context without closing it now calls {meth}zmq.Context.destroy
    at exit instead of {meth}zmq.Context.term. This will have little
    effect on most users, but changes what happens when user bugs
    result in a context being implicitly destroyed while sockets are
    left open. In almost all cases, this will turn what used to be a
    hang into a warning. However, there may be some cases where
    sockets are actively used in threads, which could result in a
    crash. To use sockets across threads, it is critical to properly
    and explicitly close your contexts and sockets, which will
    always avoid this issue.</changelog>
  <changelog author="arun@gmx.de" date="1664107200">- update to version 24.0.1:
  * Fix several possible resource warnings and deprecation warnings
    when cleaning up contexts and sockets, especially in pyzmq's own
    tests and when implicit teardown of objects is happening during
    process teardown.</changelog>
  <changelog author="pmonreal@suse.com" date="1667995200">- Fix build with OpenSSL 3.0 [bsc#1205042]
  * Temporarily disable test_on_recv_basic</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- skip numy tests for the testsuite on SLE15</changelog>
  <changelog author="mmachova@suse.com" date="1683892800">- Update to version 25.0.2
  * Bundled subset of tornado's IOLoop (deprecated since pyzmq 17) is removed,
    so ZMQStream cannot be used without an actual install of tornado.
  * Remove support for tornado 4.
  * Added `socket_class` argument to zmq.Context.socket
  * Support shadowing sockets with socket objects.
  * In zmq.auth and zmq.eventloop.zmqstream callbacks may now be async.
  * License files have been renamed to more standard LICENSE.BSD, LICENSE.LESSER
    to appease some license auto-detect tools.</changelog>
  <changelog author="arun@gmx.de" date="1689163200">- update to version 25.1.0:
  * Enhancements:
    + Include address in error message when bind/connect fail.
  * Packaging changes:
    + Fix inclusion of some test files in source distributions.
    + Add Cython as a build-time dependency in build-system.requires
    metadata, following current recommendations of the Cython
    maintainers. We still ship generated Cython sources in source
    distributions, so it is not a strict dependency for packagers
    using --no-build-isolation, but pip will install Cython as part
    of building pyzmq from source. This makes it more likely that
    past pyzmq releases will install on future Python releases,
    which often require an update to Cython but not pyzmq
    itself. For Python 3.12, Cython &gt;=3.0.0b3 is required.</changelog>
  <changelog author="arun@gmx.de" date="1691668800">- update to version 25.1.1:
  * Changes:
    + Allow Cython 0.29.35 to build Python 3.12 wheels (no longer
    require Cython 3)
  * Bugs fixed:
    + Fix builds on Solaris by including generated platform.hpp
    + Cleanup futures in Socket.poll() that are cancelled and never
    return
    + Fix builds with -j when numpy is present in the build env</changelog>
</package>
<package pkgid="a13bca023ba63894521803a73989f42c3d9216a2f9d5db3b4186482e68aa9dc1bc6e4364cebc9db9e0fd04c3b1518ffffd87bc004dc58f4670f2cc3608a618eb" name="python-rpm-debugsource" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="slfo.1.1_2.1"/>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="asmorodskyi@suse.com" date="1542888000">- Fix python-module compatibility with older distros</changelog>
  <changelog author="mls@suse.de" date="1570017600">- update to rpm-4.15.0</changelog>
  <changelog author="mls@suse.de" date="1574164800">- update to rpm-4.15.1</changelog>
  <changelog author="mls@suse.de" date="1601467200">- update to rpm-4.16.0</changelog>
  <changelog author="mls@suse.de" date="1617105600">- update to rpm-4.16.1.3</changelog>
  <changelog author="mls@suse.de" date="1632398400">- update to rpm-4.17.0</changelog>
  <changelog author="mls@suse.de" date="1658404800">- update to rpm-4.17.1</changelog>
  <changelog author="mls@suse.de" date="1669982400">- update to rpm-4.18.0</changelog>
  <changelog author="jsrain@suse.com" date="1685448000">- add _multibuild for multiple .spec-files</changelog>
</package>
<package pkgid="89904cb2561713c1fa8fa4967b4bbd3e0d0f4e29f80d1f360359e2c7601db6d01a10907dd44075df21dd7de942ab512847297c5d0b97515a15012c186aeb49fb" name="python-semanage-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591963200">- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization)
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1592308800">- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * Improved manpage
  * fsync final files before rename</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * dropped old and deprecated symbols and functions
    libsemanage version was bumped to libsemanage.so.2
  * libsemanage tries to sync data to prevent empty files in SELinux module
    store</changelog>
  <changelog author="jsegitz@suse.com" date="1616068800">- Minor spec file cleanups</changelog>
  <changelog author="fvogt@suse.com" date="1629115200">- Call "make -j8 pywrap" instead of "make -j8 all pywrap" to fix random
  build failures. The toplevel Makefile does not support concurrency,
  and it resulted in parallel "make all" and "make pywrap" which weren't
  aware of each other and stepped over the other's artifacts.</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * Fixed use-after-free in parse_module_store()
  * Fixed use_after_free in semanage_direct_write_langext()</changelog>
  <changelog author="jsegitz@suse.com" date="1644494400">- Drop Buildrequires for libustr-devel, not needed anymore</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * Optionally rebuild policy when modules are changed externally
  * Fix USE_AFTER_FREE (CWE-672) in semanage_direct_get_module_info()
  * Allow spaces in user/group names</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)</changelog>
</package>
<package pkgid="1e7b00151525a1be0011a5f68f5f26a4469fe14cd7edc009d0ac98a1656b306496e392288c07fc49c54cf8f482a6120c3cbc03877399c41e8eca25350b808de1" name="python-simplejson-debugsource" arch="aarch64">
  <version epoch="0" ver="3.19.1" rel="slfo.1.1_1.2"/>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
  <changelog author="dmueller@suse.com" date="1626436800">- update to 3.17.3:
  * Replaced Travis-CI and AppVeyor with Github Actions,
    adding wheels for Python 3.9.</changelog>
  <changelog author="dmueller@suse.com" date="1631016000">- update to 3.17.5:
  * Fix the C extension module to harden is_namedtuple against looks-a-likes such
    as Mocks. Also prevent dict encoding from causing an unraised SystemError when
    encountering a non-Dict. Noticed by running user tests against a CPython
    interpreter with C asserts enabled (COPTS += -UNDEBUG).</changelog>
  <changelog author="dmueller@suse.com" date="1638187200">- update to 3.17.6:
  * Declare support for Python 3.10 and add wheels</changelog>
  <changelog author="yarunachalam@suse.com" date="1670155200">- Update to v3.18.0
  * Allow serialization of classes that implement for_json or _asdict by
  ignoring TypeError when those methods are called
  https://github.com/simplejson/simplejson/pull/302
  * Raise JSONDecodeError instead of ValueError in invalid unicode escape
  sequence edge case
  https://github.com/simplejson/simplejson/pull/298</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 3.18.1:
  * Remove unnecessary `i` variable from encoder module namespace
  * Declare support for Python 3.11 and add wheels</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 3.19.1:
  * This release contains security hardening measures based on
    recommendations by a security audit sponsored by OSTIF and
    conducted by X41 D-Sec GmbH.
    Several of these measures include changing defaults to be
    more strict, by default simplejson will now only consume
    and produce compliant JSON, but the flags still exist for
    any backwards compatibility needs.
    No high priority issues were discovered, the reference
    count leak is thought to be unreachable since the digits of the
    float are checked before PyOS_string_to_double is called.
  * Fix invalid handling of unicode escape sequences in the pure
    Python implementation of the decoder (SJ-PT-23-01)
  * Fix missing reference count decrease if PyOS_string_to_double
    raises an exception in Python 2.x; was probably unreachable (SJ-
    PT-23-02)
  * Backport the integer string length limitation from Python
    3.11 to limit quadratic number parsing (SJ-PT-23-03)
  * Fix inconsistencies with error messages between the C and
    Python implementations (SJ-PT-23-100)
  * Remove unused unichr import from encoder (SJ-PT-23-101)
  * Remove unused namedtuple_as_object and tuple_as_array
    arguments from simplejson.load (SJ-PT-23-102)
  * Remove vestigial _one_shot code from iterencode (SJ-
    PT-23-103)
  * Change default of allow_nan from True to False and add
    allow_nan to decoder (SJ-PT-23-107)
  * Test the sdist to prevent future regressions
  * Fix regression in sdist archive</changelog>
</package>
<package pkgid="d03eaff890259e9306e80513f7c97fd572f353300d9c21e04340ce49aefc8e2c94b1fbce57ab58318530549dacc942ede8e2031a744cf03a75dac850d101e16b" name="python-systemd-debugsource" arch="aarch64">
  <version epoch="0" ver="235" rel="slfo.1.1_1.3"/>
  <changelog author="jweberhofer@weberhofer.at" date="1498478400">- exclude-tests-on-obs.patch: Exclude test which fail because of
  a bug in the OBS: https://github.com/openSUSE/obs-build/pull/351
- Upgrade to release 234
  * _daemon,_reader: return ENOSYS instead of NotImplemented
  * _daemon: allow specifying flowinfo
  * Added section for installation on openSUSE &amp; SLE
  * Adjust import order, spacing, operators as recommended by pylint
  * build-sys: add sign and upload targets
  * daemon: add basic support for sd_is_socket_sockaddr
  * daemon: add wrapper for sd_is_socket_sockaddr and tests
  * daemon: properly skip sd_is_socket_sockaddr calls if not available
  * Fix handling of addresses without port and add tests
  * Fix styling to match PEP8 in most places
  * Improve test skipping on old systems
  * Include all fields from record
  * journal: do not convert extra args to string in JournalHandler
  * journal: fix repr of JournalHandler to match python3.6
  * journal: improve docstring formatting a bit
  * journal: rename SENDER_FUNCTION to sender_function
  * Makefile: add "doc" target for convenience
  * Makefile: add convenience "shell" target to start python shell
  * Makefile: remove unneeded -I/usr/include from flags
  * Makefile: use $(INCLUDE_DIR) also for compilation
  * Prevent non-str values from being concatenated with +
  * Python 3.6 invalid escape sequence deprecation fixes
  * Remove mid from JournalHandler
  * replace dict.iteritems() with dict.items() to support py3
  * setup.py: allow LIBSYSTEMD_VERSION to be overridden
  * test_daemon: xfail test_notify_with_socket if bind() fails
  * test_journal: add tests for MESSAGE_ID passing
  * tests: move login tests from doctest to separate file
  * tests: skip journal.stream tests on ENOENT error
  * Update to constants from systemd-233
  * util: add compatibility for old glibc</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507377600">- singlespec</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1509969600">- iso-c-90.patch added to fix building on SLE12-SP3</changelog>
  <changelog author="mpluskal@suse.com" date="1510660800">- Use more of python building macros
- Do not build documentation (build is broken if /usr/bin/python is
  not present anyways)
- Run spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1580644800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1656849600">- 0002-reader-make-PY_SSIZE_T_CLEAN.patch added to fix boo#1200686
  reader: make PY_SSIZE_T_CLEAN</changelog>
  <changelog author="mcepl@suse.com" date="1656849601">- Remove exclude-tests-on-obs.patch, this is not the way how to
  do it, besides %python_exec setup.py check doesn't the test
  suite.
- Make tests running properly again</changelog>
  <changelog author="mcepl@suse.com" date="1660737600">- Update to version 235:
  * Adapt the rename of systemd-activate to
    systemd-socket-activate performed in systemd 230.
  * Support for sd_listen_fds_with_names added in systemd 227.
  * Support for sd_journal_get_cutoff_realtime_usec added in
    systemd 186.
  * Make the Reader PY_SSIZE_T_CLEAN for py3.10 compatibility.
  * id128: update for systemd-243 compatibility and other fixes.
  * C syntax modernization. A minimum of C99 is assumed.
  * Fix seek_realtime to work with timezone aware date on Python 3.
  * journal: add namespace support.
  * Fixes for memory leaks and documentation.
  * Support for Python 2 will be removed after this release.
- Remove upstreamed 0002-reader-make-PY_SSIZE_T_CLEAN.patch.
- Skip two failing tests (gh#systemd/python-systemd#118)</changelog>
  <changelog author="mcepl@suse.com" date="1660737601">- Add OBS_missing_etc_machine_id.patch to partially fix
  gh#systemd/python-systemd#118.</changelog>
  <changelog author="ecsos@opensuse.org" date="1686484800">- Add %{?sle15_python_module_pythons}</changelog>
</package>
<package pkgid="49b7c9a48db273f072d201f8d48fe34cebbb2eb665231775e8a37b887a8fb046f7dccef856fd1edf305b049f96371d39a3060b4a1b6ef7f41f99ce798a66e3c9" name="python-tornado6-debugsource" arch="aarch64">
  <version epoch="0" ver="6.4" rel="slfo.1.1_4.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- update to 6.2:
  * https://www.tornadoweb.org/en/stable/releases/v6.2.0.html
- drop remove-multiheader-http-test.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dcermak@suse.com" date="1685448000">- New upstream release 6.3.2 (bsc#1211741, CVE-2023-28370)
  - Security improvements
  - Fixed an open redirect vulnerability in StaticFileHandler
    under certain configurations.
  - ``tornado.web``
  - `.RequestHandler.set_cookie` once again accepts capitalized
    keyword arguments for backwards compatibility. This is
    deprecated and in Tornado 7.0 only lowercase arguments will
    be accepted.
  - What's new in Tornado 6.3.0
  - The new `.Application` setting ``xsrf_cookie_name``
    can now be used to take advantage of the ``__Host``
    cookie prefix for improved security.  To use it, add
    ``{"xsrf_cookie_name": "__Host-xsrf", "xsrf_cookie_kwargs":
    {"secure": True}}`` to your `.Application` settings. Note
    that this feature currently only works when HTTPS is used.
  - `.WSGIContainer` now supports running the application in
    a ``ThreadPoolExecutor`` so the event loop is no longer
    blocked.
  - `.AsyncTestCase` and `.AsyncHTTPTestCase`, which were
    deprecated in Tornado 6.2, are no longer deprecated.
  - WebSockets are now much faster at receiving large messages
    split into many fragments.
  - General changes
  - Python 3.7 is no longer supported; the minimum supported  .
    Python version is 3.8 Python 3.12 is now supported        .
  - To avoid spurious deprecation warnings, users of Python
    3.10 should upgrade to at least version 3.10.9, and users
    of Python 3.11 should upgrade to at least version 3.11.1.
  - Tornado submodules are now imported automatically on
    demand. This means it is now possible to use a single
    ``import tornado`` statement and refer to objects in
    submodules such as `tornado.web.RequestHandler`.
  - Deprecation notices
  - In Tornado 7.0, `tornado.testing.ExpectLog` will match
    ``WARNING`` and above regardless of the current logging
    configuration, unless the ``level`` argument is used.
  - `.RequestHandler.get_secure_cookie` is now a deprecated
    alias for `.RequestHandler.get_signed_cookie`.
    `.RequestHandler.set_secure_cookie` is now a deprecated
    alias for `.RequestHandler.set_signed_cookie`.
  - `.RequestHandler.clear_all_cookies` is
    deprecated. No direct replacement is provided;
    `.RequestHandler.clear_cookie` should be used on individual
    cookies.
  - Calling the `.IOLoop` constructor without a
    ``make_current`` argument, which was deprecated in Tornado
    6.2, is no longer deprecated.
  - `.AsyncTestCase` and `.AsyncHTTPTestCase`, which were
    deprecated in Tornado 6.2, are no longer deprecated.
  - `.AsyncTestCase.get_new_ioloop` is deprecated.
  - ``tornado.auth``
  - New method `.GoogleOAuth2Mixin.get_google_oauth_settings`
    can now be overridden to get credentials from a source
    other than the `.Application` settings.
  - ``tornado.gen``
  - `contextvars` now work properly when a ``@gen.coroutine``
    calls a native coroutine.
  - ``tornado.options``
  - `~.OptionParser.parse_config_file` now recognizes single
    comma-separated strings (in addition to lists of strings)
    for options with ``multiple=True``.
  - ``tornado.web``
  - New `.Application` setting ``xsrf_cookie_name`` can be used
    to change the name of the XSRF cookie. This is most useful
    to take advantage of the ``__Host-`` cookie prefix.
  - `.RequestHandler.get_secure_cookie` and
    `.RequestHandler.set_secure_cookie` (and related
    methods and attributes) have been renamed
    to `~.RequestHandler.get_signed_cookie` and
    `~.RequestHandler.set_signed_cookie`.  This makes it
    more explicit what kind of security is provided, and
    avoids confusion with the ``Secure`` cookie attribute
    and ``__Secure-`` cookie prefix.  The old names remain
    supported as deprecated aliases.
  - `.RequestHandler.clear_cookie` now accepts all keyword
    arguments accepted by `~.RequestHandler.set_cookie`. In
    some cases clearing a cookie requires certain arguments to
    be passed the same way in which it was set.
  - `.RequestHandler.clear_all_cookies` now accepts
    additional keyword arguments for the same reason as
    ``clear_cookie``. However, since the requirements for
    additional arguments mean that it cannot reliably clear all
    cookies, this method is now deprecated.
  - ``tornado.websocket``
  - It is now much faster (no longer quadratic) to receive
    large messages that have been split into many fragments.
  - `.websocket_connect` now accepts a ``resolver`` parameter.
  - ``tornado.wsgi``
  - `.WSGIContainer` now accepts an ``executor`` parameter
    which can be used to run the WSGI application on a thread
    pool.
  - What's new in Tornado 6.2.0
  - Deprecation notice
  - Python 3.10 has begun the process of significant changes
    to the APIs for managing the event loop. Calls to
    methods such as `asyncio.get_event_loop` may now raise
    `DeprecationWarning` if no event loop is running. This
    has significant impact on the patterns for initializing
    applications, and in particular invalidates patterns that
    have long been the norm in Tornado's documentation and
    actual usage. In the future (with some as-yet-unspecified
    future version of Python), the old APIs will be
    removed. The new recommended pattern is to start the event
    loop with `asyncio.run`. More detailed migration guides
    will be coming in the future.
  - The `.IOLoop` constructor is deprecated unless
    the ``make_current=False`` argument is used. Use
    `.IOLoop.current` when the loop is already running
    instead.
  - `.AsyncTestCase` (and `.AsyncHTTPTestCase`) are
    deprecated. Use `unittest.IsolatedAsyncioTestCase`
    instead.
  - Multi-process `.TCPServer.bind`/`.TCPServer.start`
    is deprecated. See `.TCPServer` docs for supported
    alternatives.
  - `.AnyThreadEventLoopPolicy` is deprecated. This class
    controls the creation of the "current" event loop so it
    will be removed when that concept is no longer supported.
  - `.IOLoop.make_current` and `.IOLoop.clear_current` are
    deprecated. In the future the concept of a "current"
    event loop as distinct from one that is currently running
    will be removed.
  - ``TwistedResolver`` and ``CaresResolver`` are deprecated
    and will be removed in Tornado 7.0.
  - General changes
  - The minimum supported Python version is now 3.7.
  - Wheels are now published with the Python stable ABI
    (``abi3``) for compatibility across versions of Python.
  - SSL certificate verfication and hostname checks are now
    enabled by default in more places (primarily in client-side
    usage of `.SSLIOStream`).
  - Various improvements to type hints throughout the package.
  - CI has moved from Travis and Appveyor to Github Actions.
  - `tornado.gen`
  - Fixed a bug in which ``WaitIterator.current_index`` could
    be incorrect.
  - ``tornado.gen.TimeoutError``` is now an alias for
    `asyncio.TimeoutError`.
  - `tornado.http1connection`
  - ``max_body_size`` may now be set to zero to disallow a
    non-empty body.
  - ``Content-Encoding: gzip`` is now recognized
    case-insensitively.
  - `tornado.httpclient`
  - ``curl_httpclient`` now supports non-ASCII (ISO-8859-1)
    header values, same as ``simple_httpclient``.
  - `tornado.ioloop`
  - `.PeriodicCallback` now understands coroutines and will not
    start multiple copies if a previous invocation runs too
    long.
  - `.PeriodicCallback` now accepts `datetime.timedelta`
    objects in addition to numbers of milliseconds.
  - Avoid logging "Event loop is closed" during
    shutdown-related race conditions.
  - Tornado no longer calls `logging.basicConfig` when starting
    an IOLoop; this has been unnecessary since Python 3.2 added
    a logger of last resort.
  - The `.IOLoop` constructor now accepts an ``asyncio_loop``
    keyword argument to initialize with a specfied asyncio
    event loop.
  - It is now possible to construct an `.IOLoop` on one thread
    (with ``make_current=False``) and start it on a different
    thread.
  - `tornado.iostream`
  - `.SSLIOStream` now supports reading more than 2GB at a
    time.
  - ``IOStream.write`` now supports typed `memoryview` objects.
  - `tornado.locale`
  - `.load_gettext_translations` no longer logs errors when
    language directories exist but do not contain the expected
    file.
  - `tornado.netutil`
  - `.is_valid_ip` no longer raises exceptions when the input
    is too long.
  - The default resolver now uses the same methods (and thread
    pool) as `asyncio`.
  - `tornado.tcpserver`
  - `.TCPServer.listen` now supports more arguments to pass
    through to `.netutil.bind_sockets`.
  - `tornado.testing`
  - `.bind_unused_port` now takes an optional ``address``
    argument.
  - Wrapped test methods now include the ``__wrapped__``
    attribute.
  - `tornado.web`
  - When using a custom `.StaticFileHandler` subclass, the
    ``reset()`` method is now called on this subclass instead
    of the base class.
  - Improved handling of the ``Accept-Language`` header.
  - `.Application.listen` now supports more arguments to pass
    through to `.netutil.bind_sockets`.
  - `tornado.websocket`
  - `.WebSocketClientConnection.write_message` now
    accepts `dict` arguments for consistency with
    `.WebSocketHandler.write_message`.
  - `.WebSocketClientConnection.write_message` now raises
    an exception as documented if the connection is already
    closed.
- Gave rpmlint a hug
- Remove upstreamed ignore-py310-deprecation-warnings.patch</changelog>
  <changelog author="mmachova@suse.com" date="1695297600">- Update to 6.3.3
  * The Content-Length header and chunked Transfer-Encoding sizes
    are now parsed more strictly (according to the relevant RFCs)
    to avoid potential request-smuggling vulnerabilities when
    deployed behind certain proxies.
- Add py312-datetime.patch to fix build with Python 3.12</changelog>
  <changelog author="dmueller@suse.com" date="1704283200">- update to 6.4:
  * https://www.tornadoweb.org/en/stable/releases/v6.4.0.html
  * Python 3.12 is now supported.
- drop py312-datetime.patch (upstream)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704974400">- Add patch openssl-3.2.patch gh#tornadoweb/tornado#3355</changelog>
  <changelog author="steven.kowalik@suse.com" date="1732708800">- Add patch CVE-2024-52804-avoid-quadratic-cookie-parsing.patch:
  * Avoid quadratic performance of cookie parsing.
    (CVE-2024-52804, bsc#1233668)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1748260800">- Add patch CVE-2025-47287.patch:
  * httputil: Raise errors instead of logging in multipart/form-data parsing
    (CVE-2025-47287, bsc#1243268, gh#tornadoweb/tornado#3497)</changelog>
  <changelog author="nico.krapp@suse.com" date="1765800000">- Add security patches:
  * CVE-2025-67724.patch (bsc#1254903)
  * CVE-2025-67725.patch (bsc#1254905)
  * CVE-2025-67726.patch (bsc#1254904)</changelog>
  <changelog author="nico.krapp@suse.com" date="1773748800">- CVE-2026-31958: parsing large multipart bodies with many parts can cause a
  denial of service (bsc#1259553)
  * added CVE-2026-31958.patch
- VUL-0: incomplete validation of cookie attributes allows for injection of
  user-controlled values in other cookie attributes (bsc#1259630)
  * added VUL-0-cookie-attribute-validation.patch</changelog>
</package>
<package pkgid="d8ea72aebda4d2818a6e2852d5005206de7757f64c3713c003494cc8afe31124957c72ffc5c014b455582ec7bf2a77538f1853817a446b9cccadc1a3bc571ec8" name="python3-audit-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.1" rel="slfo.1.1_2.1"/>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1671105600">- Enable build for ARM (32-bit)
- Update to version 3.0.9:
  * In auditd, release the async flush lock on stop
  * Don't allow auditd to log directly into /var/log when log_group is non-zero
  * Cleanup krb5 memory leaks on error paths
  * Update auditd.cron to use auditctl --signal
  * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
  * In auparse, special case kernel module name interpretation
  * If overflow_action is ignore, don't treat as an error
  (3.0.8)
  * Add gcc function attributes for access and allocation
  * Add some more man pages (MIZUTA Takeshi)
  * In auditd, change the reinitializing of the plugin queue
  * Fix path normalization in auparse (Sergio Correia)
  * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
  * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
  * Drop ProtectHome from auditd.service as it interferes with rules
  (3.0.7)
  * Add support for the OPENAT2 record type (Richard Guy Briggs)
  * In auditd, close the logging file descriptor when logging is suspended
  * Update the capabilities lookup table to match 5.16 kernel
  * Improve interpretation of renamat &amp; faccessat family of syscalls
  * Update syscall table for the 5.16 kernel
  * Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
  * audit-allow-manual-stop.patch
  * audit-ausearch-do-not-require-tclass.patch
  * audit-no-gss.patch
  * enable-stop-rules.patch
  * fix-hardened-service.patch
  * harden_auditd.service.patch
- Remove patches (fixed by version update):
  * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1757073600">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="976ba463dca56cdcac0eaf7d5e7138cfb046c65a8d651eca68940f781297c958c66c86166e519dae94a42dcdd232951eb49ce739f730a0b9a2d73a3831cc2e3e" name="python3-selinux-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * Ignore the stem when looking up all matches in file context
  * Save digest of all partial matches for directory
  * Use Python distutils to install SELinux python bindings
  * ensure that digest_len is not zero
  * fix string conversion of unknown perms
  * mark all exported function "extern"</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated
  * Refreshed python3.8-compat.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2:
  * Use mmap()'ed kernel status page instead of netlink by default.
    See "KERNEL STATUS PAGE" section in avc_init(3) for more details.
  * New log callback levels for enforcing and policy load notices -
    SELINUX_POLICYLOAD, SELINUX_SETENFORCE
  * Changed userspace AVC setenforce and policy load messages to audit
    format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Switch to pcre2:
  + Replace pcre-devel BuildRequires with pkgconfig(libpcre2-8)
  + Pass USE_PCRE2=y to make.</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Refreshed python3.8-compat.patch
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine now.</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Add python-wheel build dependency to build correctly with latest
  python-pip version.</changelog>
</package>
<package pkgid="3ed7980d32894e9beb31cc826d10a9b8a88d2913435e8bda629b7e5b3e8cd8e609a8b93ea38ad6e170fb838dacec590f48d4760d9a8ad75140c8246b7aded061" name="python311-M2Crypto-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.39.0" rel="slfo.1.1_1.2"/>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="mcepl@suse.com" date="1688472000">- Update to 0.39.0:
  - SUPPORT FOR PYTHON 2 HAS BEEN DEPRECATED AND IT WILL BE
    COMPLETELY REMOVED IN THE NEXT RELEASE.
  - Remove dependency on parameterized and use unittest.subTest
    instead.
  - Upgrade embedded six.py module to 1.16.0 (really tiny
    inconsequential changes).
  - Make tests working on MacOS again (test_bio_membuf: Use fork)
  - Use OpenSSL_version_num() instead of unrealiable parsing of
    .h file.
  - Mitigate the Bleichenbacher timing attacks in the RSA
    decryption API (CVE-2020-25657)
  - Add functionality to extract EC key from public key + Update
    tests
  - Worked around compatibility issues with OpenSSL 3.*
  - Support for Twisted has been deprecated (they have their own
    SSL support anyway).
  - Generate TAP while testing.
  - Stop using GitHub for testing.
  - Accept a small deviation from time in the testsuite (for
    systems with non-standard HZ kernel parameter).
  - Use the default BIO.__del__ rather tha overriding in BIO.File
    (avoid a memleak).
  - Resolve "X509_Name.as_der() method from X509.py -&gt; class
    X509_Name caused segmentation fault"
- Remove upstreamed patches:
  - CVE-2020-25657-Bleichenbacher-attack.patch
  - m2crypto-0.38-ossl3-tests.patch
  - openssl-adapt-tests-for-3.1.0.patch
  - openssl-stop-parsing-header.patch
  - timeout_300hz.patch</changelog>
</package>
<package pkgid="46202c7c849647507b19abcd4dba62970b52b1752a221dfe486456e70d713621c2e1312c9f3d4acd9a464ce497894e86e88889969fc5ed674d0bc7ca5d58b451" name="python311-MarkupSafe-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.3" rel="slfo.1.1_1.2"/>
  <changelog author="dmueller@suse.com" date="1618574400">- allow tests to be disabled (still on by default)</changelog>
  <changelog author="alarrosa@suse.com" date="1622548800">- Update to v2.0.1
  * Mark top-level names as exported so type checking understands
    imports in user projects.
  * Fix some types that weren’t available in Python 3.6.0.
- Update to v2.0.0
  * Drop Python 2.7, 3.4, and 3.5 support.
  * Markup.unescape uses html.unescape() to support HTML5 character
    references. #117
  * Add type annotations for static typing tools. #149</changelog>
  <changelog author="michael@stroeder.com" date="1623585600">- skip building for Python 2.x</changelog>
  <changelog author="arun@gmx.de" date="1647604800">- specfile:
  * update copyright year
  * require python &gt;= 3.7
- update to version 2.1.1:
  * Avoid ambiguous regex matches in "striptags". :pr:`293`
- changes from version 2.1.0:
  * Drop support for Python 3.6. :pr:`262`
  * Remove "soft_unicode", which was previously deprecated. Use
    "soft_str" instead. :pr:`261`
  * Raise error on missing single placeholder during string
    interpolation. :issue:`225`
  * Disable speedups module for GraalPython. :issue:`277`</changelog>
  <changelog author="asn@cryptomilk.org" date="1654776000">- Require python 3.6. There is no need to require a newer version and
  this way it builds on openSUSE Leap &gt;= 15.3</changelog>
  <changelog author="me@manueljacob.de" date="1656072000">- Patch PKG-INFO to avoid pip failing on Python 3.6 with
  `ERROR: Package 'MarkupSafe' requires a different Python:
  3.6.15 not in '&gt;=3.7'`.</changelog>
  <changelog author="dmueller@suse.com" date="1674993600">- update to 2.1.2:
  * Fix ``striptags`` not stripping tags containing newlines.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1687176000">- update to 2.1.3:
  * Implement ``format_map``, ``casefold``, ``removeprefix``,
    and ``removesuffix`` methods.
  * Fix static typing for basic ``str`` methods on ``Markup``.
  * Use ``Self`` for annotating return types. :pr:`379`</changelog>
</package>
<package pkgid="5a0b3938116651125d6c6021e4af7ee3c0b23c1411d2bdd3812e1ec5b2cc8ff55dc5a1d1c47c0866964d8bb42f79e82d2b8b986a6792a4c539d903f2ea2665fe" name="python311-PyYAML-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.0.1" rel="slfo.1.1_1.2"/>
  <changelog author="mimi.vx@gmail.com" date="1584619200">- update to 5.3.1
  * fixes boo#1165439 (cve-2020-1747) Prevents arbitrary code execution
  during python/object/new constructor</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 5.4.1 (bsc#1174514, CVE-2020-14343):
  * Fix stub compat with older pyyaml versions that may unwittingly load it
  * Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
  * Fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
  * Fix memory leak in implicit resolver setup
  * Fix py2 copy support for timezone objects
  * Fix compatibility with Jython</changelog>
  <changelog author="tina.mueller@suse.com" date="1635768000">- Add patch setuptools.patch
- update to 6.0
  * drop Python 2.7
  * always require `Loader` arg to `yaml.load()`
  * fix float resolver to ignore `.` and `._`
  * fix representation of Enum subclasses
  * fix libyaml extension compiler warnings
  * fix ResourceWarning on leaked file descriptors
  * remove remaining direct distutils usage</changelog>
  <changelog author="pgajdos@suse.com" date="1646827200">- do not use setup.py test construct
  https://trello.com/c/me9Z4sIv/121-setuppy-test-leftovers</changelog>
  <changelog author="mcepl@suse.com" date="1655294400">- Clean up the SPEC file.</changelog>
  <changelog author="code@bnavigator.de" date="1656331200">- Actually we DO want to build the bindings.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1691928000">- update to 6.0.1:
  * pin Cython to &lt; 3.0</changelog>
  <changelog author="dmueller@suse.com" date="1695124800">- cleanup</changelog>
</package>
<package pkgid="20434022d9ca6adcab1425cd04d85d24dcd712bbb9389ca7b0ff1d32c93b4296c211d019ba526dae0560f436b24d5fecf97df34ad49598e698909318bd10d5a0" name="python311-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.11.15" rel="slfo.1.1_1.1"/>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="dimstar@opensuse.org" date="1758196800">- Require AppStream to validate appdata file instead of deprecated
  appstream-glib.
- Update idle3.appdata.xml to pass the more pedantic appstreamcli.</changelog>
  <changelog author="dimstar@opensuse.org" date="1758283200">- Drop AppStream buildrequires and don't run appstreamcli validate
  as part of the build process: the appdata.xml is not updated by
  source directly, so we have more contol. Having Appstream or the
  deprecated appstream-glib result in a build cycle.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1759147200">- Add gh139257-Support-docutils-0.22.patch to fix build with latest
  docutils (&gt;=0.22) gh#python/cpython#139257</changelog>
  <changelog author="daniel.garcia@suse.com" date="1760529600">- Update to 3.11.14:
  - Security
  - gh-139700: Check consistency of the zip64 end of central
    directory record. Support records with “zip64 extensible data”
    if there are no bytes prepended to the ZIP file
    (CVE-2025-8291, bsc#1251305).
  - gh-139400: xml.parsers.expat: Make sure that parent Expat
    parsers are only garbage-collected once they are no longer
    referenced by subparsers created by
    ExternalEntityParserCreate(). Patch by Sebastian Pipping.
  - gh-135661: Fix parsing start and end tags in
    html.parser.HTMLParser according to the HTML5 standard.
  * Whitespaces no longer accepted between &lt;/ and the tag name. E.g.
    &lt;/ script&gt; does not end the script section.
  * Vertical tabulation (\v) and non-ASCII whitespaces no longer
    recognized as whitespaces. The only whitespaces are \t\n\r\f and
    space.
  * Null character (U+0000) no longer ends the tag name.
  * Attributes and slashes after the tag name in end tags are now
    ignored, instead of terminating after the first &gt; in quoted
    attribute value. E.g. &lt;/script/foo="&gt;"/&gt;.
  * Multiple slashes and whitespaces between the last attribute and
    closing &gt; are now ignored in both start and end tags. E.g. &lt;a
    foo=bar/ //&gt;.
  * Multiple = between attribute name and value are no longer
    collapsed. E.g. &lt;a foo==bar&gt; produces attribute “foo” with value
    “=bar”.
  - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser
    according to the HTML5 standard: ] ]&gt; and ]] &gt; no longer end the
    CDATA section. Add private method _set_support_cdata() which can
    be used to specify how to parse &lt;[CDATA[ — as a CDATA section in
    foreign content (SVG or MathML) or as a bogus comment in the
    HTML namespace.
  - gh-102555: Fix comment parsing in html.parser.HTMLParser
    according to the HTML5 standard. --!&gt; now ends the comment. -- &gt;
    no longer ends the comment. Support abnormally ended empty
    comments &lt;--&gt; and &lt;---&gt;.
  - gh-135462: Fix quadratic complexity in processing specially
    crafted input in html.parser.HTMLParser. End-of-file errors are
    now handled according to the HTML5 specs – comments and
    declarations are automatically closed, tags are ignored.
  - gh-118350: Fix support of escapable raw text mode (elements
    “textarea” and “title”) in html.parser.HTMLParser.
  - gh-86155: html.parser.HTMLParser.close() no longer loses data
    when the &lt;script&gt; tag is not closed. Patch by Waylan Limberg.
  - Library
  - gh-139312: Upgrade bundled libexpat to 2.7.3
  - gh-138998: Update bundled libexpat to 2.7.2
  - gh-130577: tarfile now validates archives to ensure member
    offsets are non-negative. (Contributed by Alexander Enrique
    Urieles Nieto in gh-130577.)
  - gh-135374: Update the bundled copy of setuptools to 79.0.1.
- Drop upstreamed patches:
  - CVE-2025-8194-tarfile-no-neg-offsets.patch
  - CVE-2025-6069-quad-complex-HTMLParser.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Readjusted patches:
  - CVE-2023-52425-libexpat-2.6.0-backport.patch
  - CVE-2023-52425-remove-reparse_deferral-tests.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
  <changelog author="mcepl@suse.com" date="1770811200">- CVE-2025-11468: preserving parens when folding comments in
  email headers (bsc#1257029, gh#python/cpython#143935).
  CVE-2025-11468-email-hdr-fold-comment.patch
- CVE-2026-0672: rejects control characters in http cookies.
  (bsc#1257031, gh#python/cpython#143919)
  CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
- CVE-2026-0865: rejecting control characters in
  wsgiref.headers.Headers, which could be abused for injecting
  false HTTP headers. (bsc#1257042, gh#python/cpython#143916)
  CVE-2026-0865-wsgiref-ctrl-chars.patch
- CVE-2025-15366: basically the same as the previous patch for
  IMAP protocol. (bsc#1257044, gh#python/cpython#143921)
  CVE-2025-15366-imap-ctrl-chars.patch
- CVE-2025-15282: basically the same as the previous patch for
  urllib library. (bsc#1257046, gh#python/cpython#143925)
  CVE-2025-15282-urllib-ctrl-chars.patch
- CVE-2025-15367: basically the same as the previous patch for
  poplib library. (bsc#1257041, gh#python/cpython#143923)
  CVE-2025-15367-poplib-ctrl-chars.patch
- CVE-2025-12781: fix decoding with non-standard Base64 alphabet
  (bsc#1257108, gh#python/cpython#125346)
  CVE-2025-12781-b64decode-alt-chars.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1772798400">- Update to 3.11.15:
  - Security
  - gh-144125: BytesGenerator will now refuse to serialize
    (write) headers that are unsafely folded or delimited; see
    verify_generated_headers. (Contributed by Bas Bloemsaat and
    Petr Viktorin in gh-121650).
  - gh-143935: Fixed a bug in the folding of comments when
    flattening an email message using a modern email policy.
    Comments consisting of a very long sequence of non-foldable
    characters could trigger a forced line wrap that omitted
    the required leading space on the continuation line,
    causing the remainder of the comment to be interpreted as
    a new header field. This enabled header injection with
    carefully crafted inputs (bsc#1257029 CVE-2025-11468).
  - gh-143925: Reject control characters in data: URL media
    types (bsc#1257046, CVE-2025-15282).
  - gh-143919: Reject control characters in http.cookies.Morsel
    fields and values (bsc#1257031, CVE-2026-0672).
  - gh-143916: Reject C0 control characters within
    wsgiref.headers.Headers fields, values, and parameters
    (bsc#1257042, CVE-2026-0865).
  - gh-142145: Remove quadratic behavior in xml.minidom node ID
    cache clearing. In order to do this without breaking
    existing users, we also add the ownerDocument attribute to
    xml.dom.minidom elements and attributes created by directly
    instantiating the Element or Attr class. Note that this way
    of creating nodes is not supported; creator functions like
    xml.dom.Document.documentElement() should be used instead
    (bsc#1254997, CVE-2025-12084).
  - gh-137836: Add support of the “plaintext” element, RAWTEXT
    elements “xmp”, “iframe”, “noembed” and “noframes”, and
    optionally RAWTEXT element “noscript” in
    html.parser.HTMLParser.
  - gh-136063: email.message: ensure linear complexity for
    legacy HTTP parameters parsing. Patch by Bénédikt Tran.
  - gh-136065: Fix quadratic complexity in
    os.path.expandvars() (bsc#1252974, CVE-2025-6075).
  - gh-119451: Fix a potential memory denial of service in the
    http.client module. When connecting to a malicious server,
    it could cause an arbitrary amount of memory to be
    allocated. This could have led to symptoms including
    a MemoryError, swapping, out of memory (OOM) killed
    processes or containers, or even system crashes
    (CVE-2025-13836, bsc#1254400).
  - gh-119452: Fix a potential memory denial of service in the
    http.server module. When a malicious user is connected to
    the CGI server on Windows, it could cause an arbitrary
    amount of memory to be allocated. This could have led to
    symptoms including a MemoryError, swapping, out of memory
    (OOM) killed processes or containers, or even system
    crashes.
  - gh-119342: Fix a potential memory denial of service in the
    plistlib module. When reading a Plist file received from
    untrusted source, it could cause an arbitrary amount of
    memory to be allocated. This could have led to symptoms
    including a MemoryError, swapping, out of memory (OOM)
    killed processes or containers, or even system crashes
    (bsc#1254401, CVE-2025-13837).
  - Library
  - gh-144833: Fixed a use-after-free in ssl when SSL_new()
    returns NULL in newPySSLSocket(). The error was reported
    via a dangling pointer after the object had already been
    freed.
  - gh-144363: Update bundled libexpat to 2.7.4
  - gh-90949: Add SetAllocTrackerActivationThreshold() and
    SetAllocTrackerMaximumAmplification() to xmlparser objects
    to prevent use of disproportional amounts of dynamic memory
    from within an Expat parser. Patch by Bénédikt Tran.
  - Core and Builtins
  - gh-120384: Fix an array out of bounds crash in
    list_ass_subscript, which could be invoked via some
    specificly tailored input: including concurrent
    modification of a list object, where one thread assigns
    a slice and another clears it.
  - gh-120298: Fix use-after free in list_richcompare_impl
    which can be invoked via some specificly tailored evil
    input.
  Remove upstreamed patches:
  - CVE-2025-11468-email-hdr-fold-comment.patch
  - CVE-2025-12084-minidom-quad-search.patch
  - CVE-2025-13836-http-resp-cont-len.patch
  - CVE-2025-13837-plistlib-mailicious-length.patch
  - CVE-2025-6075-expandvars-perf-degrad.patch
  - CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
  - CVE-2026-0865-wsgiref-ctrl-chars.patch
  - CVE-2025-15282-urllib-ctrl-chars.patch</changelog>
</package>
<package pkgid="ef4b61f146a368540c89cfa22ac895c399f283ce45e6064554681292c1ac81aaebb9902f2e37a7d1edca09ee45942207ed4c67682975a39e411fbd296cd30b86" name="python311-cffi-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15.1" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 1.14.3:
  * no upstream changelog provided</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 1.14.4:
  * no upstream changelog provided</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 1.14.5:
  * Source fix for old gcc versions</changelog>
  <changelog author="dmueller@suse.com" date="1626436800">- update to 1.14.6:
  * Revert "grovel: detect :float and :double in the :auto type"</changelog>
  <changelog author="dmueller@suse.com" date="1636200000">- update to 1.15.0:
  * Fixed MANIFEST.in to include missing file for Windows arm64 support
  * Fixed Linux wheel build to use gcc default ISA for libffi
  * Updated setup.py Python trove specifiers to currently-tested Python versions
  * CPython 3.10 support (including wheels)
  * MacOS arm64 support (including wheels)
  * Initial Windows arm64 support
  * Misc. doc and test updates</changelog>
  <changelog author="dmueller@suse.com" date="1658232000">- update to 1.15.1:
  * If you call ffi.embedding_api() but don’t write any extern “Python” function
    there, then the resulting C code would fail an assert. Fixed.
  * Updated Windows/arm64 embedded libffi static lib to v3.4.2, and scripted to
    ease future updates (thanks Niyas Sait!)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670241600">- Add python-py as test dependency</changelog>
  <changelog author="dmueller@suse.com" date="1673006400">- add 8a3c2c816d789639b49d3ae867213393ed7abdff.patch to resolve
  testsuite failures with Python 3.11</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="95f2572482c33fb50b40b741440165e4937f6429edc7edb4dc538c2e92c0c375bf1d2b5ab72a036f659e1c126be626b8422b98fefd20e1970d24db4a4f1a9485" name="python311-core-debugsource" arch="aarch64">
  <version epoch="0" ver="3.11.15" rel="slfo.1.1_1.1"/>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="dimstar@opensuse.org" date="1758196800">- Require AppStream to validate appdata file instead of deprecated
  appstream-glib.
- Update idle3.appdata.xml to pass the more pedantic appstreamcli.</changelog>
  <changelog author="dimstar@opensuse.org" date="1758283200">- Drop AppStream buildrequires and don't run appstreamcli validate
  as part of the build process: the appdata.xml is not updated by
  source directly, so we have more contol. Having Appstream or the
  deprecated appstream-glib result in a build cycle.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1759147200">- Add gh139257-Support-docutils-0.22.patch to fix build with latest
  docutils (&gt;=0.22) gh#python/cpython#139257</changelog>
  <changelog author="daniel.garcia@suse.com" date="1760529600">- Update to 3.11.14:
  - Security
  - gh-139700: Check consistency of the zip64 end of central
    directory record. Support records with “zip64 extensible data”
    if there are no bytes prepended to the ZIP file
    (CVE-2025-8291, bsc#1251305).
  - gh-139400: xml.parsers.expat: Make sure that parent Expat
    parsers are only garbage-collected once they are no longer
    referenced by subparsers created by
    ExternalEntityParserCreate(). Patch by Sebastian Pipping.
  - gh-135661: Fix parsing start and end tags in
    html.parser.HTMLParser according to the HTML5 standard.
  * Whitespaces no longer accepted between &lt;/ and the tag name. E.g.
    &lt;/ script&gt; does not end the script section.
  * Vertical tabulation (\v) and non-ASCII whitespaces no longer
    recognized as whitespaces. The only whitespaces are \t\n\r\f and
    space.
  * Null character (U+0000) no longer ends the tag name.
  * Attributes and slashes after the tag name in end tags are now
    ignored, instead of terminating after the first &gt; in quoted
    attribute value. E.g. &lt;/script/foo="&gt;"/&gt;.
  * Multiple slashes and whitespaces between the last attribute and
    closing &gt; are now ignored in both start and end tags. E.g. &lt;a
    foo=bar/ //&gt;.
  * Multiple = between attribute name and value are no longer
    collapsed. E.g. &lt;a foo==bar&gt; produces attribute “foo” with value
    “=bar”.
  - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser
    according to the HTML5 standard: ] ]&gt; and ]] &gt; no longer end the
    CDATA section. Add private method _set_support_cdata() which can
    be used to specify how to parse &lt;[CDATA[ — as a CDATA section in
    foreign content (SVG or MathML) or as a bogus comment in the
    HTML namespace.
  - gh-102555: Fix comment parsing in html.parser.HTMLParser
    according to the HTML5 standard. --!&gt; now ends the comment. -- &gt;
    no longer ends the comment. Support abnormally ended empty
    comments &lt;--&gt; and &lt;---&gt;.
  - gh-135462: Fix quadratic complexity in processing specially
    crafted input in html.parser.HTMLParser. End-of-file errors are
    now handled according to the HTML5 specs – comments and
    declarations are automatically closed, tags are ignored.
  - gh-118350: Fix support of escapable raw text mode (elements
    “textarea” and “title”) in html.parser.HTMLParser.
  - gh-86155: html.parser.HTMLParser.close() no longer loses data
    when the &lt;script&gt; tag is not closed. Patch by Waylan Limberg.
  - Library
  - gh-139312: Upgrade bundled libexpat to 2.7.3
  - gh-138998: Update bundled libexpat to 2.7.2
  - gh-130577: tarfile now validates archives to ensure member
    offsets are non-negative. (Contributed by Alexander Enrique
    Urieles Nieto in gh-130577.)
  - gh-135374: Update the bundled copy of setuptools to 79.0.1.
- Drop upstreamed patches:
  - CVE-2025-8194-tarfile-no-neg-offsets.patch
  - CVE-2025-6069-quad-complex-HTMLParser.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Readjusted patches:
  - CVE-2023-52425-libexpat-2.6.0-backport.patch
  - CVE-2023-52425-remove-reparse_deferral-tests.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
  <changelog author="mcepl@suse.com" date="1770811200">- CVE-2025-11468: preserving parens when folding comments in
  email headers (bsc#1257029, gh#python/cpython#143935).
  CVE-2025-11468-email-hdr-fold-comment.patch
- CVE-2026-0672: rejects control characters in http cookies.
  (bsc#1257031, gh#python/cpython#143919)
  CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
- CVE-2026-0865: rejecting control characters in
  wsgiref.headers.Headers, which could be abused for injecting
  false HTTP headers. (bsc#1257042, gh#python/cpython#143916)
  CVE-2026-0865-wsgiref-ctrl-chars.patch
- CVE-2025-15366: basically the same as the previous patch for
  IMAP protocol. (bsc#1257044, gh#python/cpython#143921)
  CVE-2025-15366-imap-ctrl-chars.patch
- CVE-2025-15282: basically the same as the previous patch for
  urllib library. (bsc#1257046, gh#python/cpython#143925)
  CVE-2025-15282-urllib-ctrl-chars.patch
- CVE-2025-15367: basically the same as the previous patch for
  poplib library. (bsc#1257041, gh#python/cpython#143923)
  CVE-2025-15367-poplib-ctrl-chars.patch
- CVE-2025-12781: fix decoding with non-standard Base64 alphabet
  (bsc#1257108, gh#python/cpython#125346)
  CVE-2025-12781-b64decode-alt-chars.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1772798400">- Update to 3.11.15:
  - Security
  - gh-144125: BytesGenerator will now refuse to serialize
    (write) headers that are unsafely folded or delimited; see
    verify_generated_headers. (Contributed by Bas Bloemsaat and
    Petr Viktorin in gh-121650).
  - gh-143935: Fixed a bug in the folding of comments when
    flattening an email message using a modern email policy.
    Comments consisting of a very long sequence of non-foldable
    characters could trigger a forced line wrap that omitted
    the required leading space on the continuation line,
    causing the remainder of the comment to be interpreted as
    a new header field. This enabled header injection with
    carefully crafted inputs (bsc#1257029 CVE-2025-11468).
  - gh-143925: Reject control characters in data: URL media
    types (bsc#1257046, CVE-2025-15282).
  - gh-143919: Reject control characters in http.cookies.Morsel
    fields and values (bsc#1257031, CVE-2026-0672).
  - gh-143916: Reject C0 control characters within
    wsgiref.headers.Headers fields, values, and parameters
    (bsc#1257042, CVE-2026-0865).
  - gh-142145: Remove quadratic behavior in xml.minidom node ID
    cache clearing. In order to do this without breaking
    existing users, we also add the ownerDocument attribute to
    xml.dom.minidom elements and attributes created by directly
    instantiating the Element or Attr class. Note that this way
    of creating nodes is not supported; creator functions like
    xml.dom.Document.documentElement() should be used instead
    (bsc#1254997, CVE-2025-12084).
  - gh-137836: Add support of the “plaintext” element, RAWTEXT
    elements “xmp”, “iframe”, “noembed” and “noframes”, and
    optionally RAWTEXT element “noscript” in
    html.parser.HTMLParser.
  - gh-136063: email.message: ensure linear complexity for
    legacy HTTP parameters parsing. Patch by Bénédikt Tran.
  - gh-136065: Fix quadratic complexity in
    os.path.expandvars() (bsc#1252974, CVE-2025-6075).
  - gh-119451: Fix a potential memory denial of service in the
    http.client module. When connecting to a malicious server,
    it could cause an arbitrary amount of memory to be
    allocated. This could have led to symptoms including
    a MemoryError, swapping, out of memory (OOM) killed
    processes or containers, or even system crashes
    (CVE-2025-13836, bsc#1254400).
  - gh-119452: Fix a potential memory denial of service in the
    http.server module. When a malicious user is connected to
    the CGI server on Windows, it could cause an arbitrary
    amount of memory to be allocated. This could have led to
    symptoms including a MemoryError, swapping, out of memory
    (OOM) killed processes or containers, or even system
    crashes.
  - gh-119342: Fix a potential memory denial of service in the
    plistlib module. When reading a Plist file received from
    untrusted source, it could cause an arbitrary amount of
    memory to be allocated. This could have led to symptoms
    including a MemoryError, swapping, out of memory (OOM)
    killed processes or containers, or even system crashes
    (bsc#1254401, CVE-2025-13837).
  - Library
  - gh-144833: Fixed a use-after-free in ssl when SSL_new()
    returns NULL in newPySSLSocket(). The error was reported
    via a dangling pointer after the object had already been
    freed.
  - gh-144363: Update bundled libexpat to 2.7.4
  - gh-90949: Add SetAllocTrackerActivationThreshold() and
    SetAllocTrackerMaximumAmplification() to xmlparser objects
    to prevent use of disproportional amounts of dynamic memory
    from within an Expat parser. Patch by Bénédikt Tran.
  - Core and Builtins
  - gh-120384: Fix an array out of bounds crash in
    list_ass_subscript, which could be invoked via some
    specificly tailored input: including concurrent
    modification of a list object, where one thread assigns
    a slice and another clears it.
  - gh-120298: Fix use-after free in list_richcompare_impl
    which can be invoked via some specificly tailored evil
    input.
  Remove upstreamed patches:
  - CVE-2025-11468-email-hdr-fold-comment.patch
  - CVE-2025-12084-minidom-quad-search.patch
  - CVE-2025-13836-http-resp-cont-len.patch
  - CVE-2025-13837-plistlib-mailicious-length.patch
  - CVE-2025-6075-expandvars-perf-degrad.patch
  - CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
  - CVE-2026-0865-wsgiref-ctrl-chars.patch
  - CVE-2025-15282-urllib-ctrl-chars.patch</changelog>
</package>
<package pkgid="09049b429c85c89f14884255c24b6b6119edb2122232d06390cc300c93e3dc98a6b653d68c53b21fafc78f1e078fb6286eabce636cb80ef39986be3007d214fb" name="python311-curses-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.11.15" rel="slfo.1.1_1.1"/>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="dimstar@opensuse.org" date="1758196800">- Require AppStream to validate appdata file instead of deprecated
  appstream-glib.
- Update idle3.appdata.xml to pass the more pedantic appstreamcli.</changelog>
  <changelog author="dimstar@opensuse.org" date="1758283200">- Drop AppStream buildrequires and don't run appstreamcli validate
  as part of the build process: the appdata.xml is not updated by
  source directly, so we have more contol. Having Appstream or the
  deprecated appstream-glib result in a build cycle.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1759147200">- Add gh139257-Support-docutils-0.22.patch to fix build with latest
  docutils (&gt;=0.22) gh#python/cpython#139257</changelog>
  <changelog author="daniel.garcia@suse.com" date="1760529600">- Update to 3.11.14:
  - Security
  - gh-139700: Check consistency of the zip64 end of central
    directory record. Support records with “zip64 extensible data”
    if there are no bytes prepended to the ZIP file
    (CVE-2025-8291, bsc#1251305).
  - gh-139400: xml.parsers.expat: Make sure that parent Expat
    parsers are only garbage-collected once they are no longer
    referenced by subparsers created by
    ExternalEntityParserCreate(). Patch by Sebastian Pipping.
  - gh-135661: Fix parsing start and end tags in
    html.parser.HTMLParser according to the HTML5 standard.
  * Whitespaces no longer accepted between &lt;/ and the tag name. E.g.
    &lt;/ script&gt; does not end the script section.
  * Vertical tabulation (\v) and non-ASCII whitespaces no longer
    recognized as whitespaces. The only whitespaces are \t\n\r\f and
    space.
  * Null character (U+0000) no longer ends the tag name.
  * Attributes and slashes after the tag name in end tags are now
    ignored, instead of terminating after the first &gt; in quoted
    attribute value. E.g. &lt;/script/foo="&gt;"/&gt;.
  * Multiple slashes and whitespaces between the last attribute and
    closing &gt; are now ignored in both start and end tags. E.g. &lt;a
    foo=bar/ //&gt;.
  * Multiple = between attribute name and value are no longer
    collapsed. E.g. &lt;a foo==bar&gt; produces attribute “foo” with value
    “=bar”.
  - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser
    according to the HTML5 standard: ] ]&gt; and ]] &gt; no longer end the
    CDATA section. Add private method _set_support_cdata() which can
    be used to specify how to parse &lt;[CDATA[ — as a CDATA section in
    foreign content (SVG or MathML) or as a bogus comment in the
    HTML namespace.
  - gh-102555: Fix comment parsing in html.parser.HTMLParser
    according to the HTML5 standard. --!&gt; now ends the comment. -- &gt;
    no longer ends the comment. Support abnormally ended empty
    comments &lt;--&gt; and &lt;---&gt;.
  - gh-135462: Fix quadratic complexity in processing specially
    crafted input in html.parser.HTMLParser. End-of-file errors are
    now handled according to the HTML5 specs – comments and
    declarations are automatically closed, tags are ignored.
  - gh-118350: Fix support of escapable raw text mode (elements
    “textarea” and “title”) in html.parser.HTMLParser.
  - gh-86155: html.parser.HTMLParser.close() no longer loses data
    when the &lt;script&gt; tag is not closed. Patch by Waylan Limberg.
  - Library
  - gh-139312: Upgrade bundled libexpat to 2.7.3
  - gh-138998: Update bundled libexpat to 2.7.2
  - gh-130577: tarfile now validates archives to ensure member
    offsets are non-negative. (Contributed by Alexander Enrique
    Urieles Nieto in gh-130577.)
  - gh-135374: Update the bundled copy of setuptools to 79.0.1.
- Drop upstreamed patches:
  - CVE-2025-8194-tarfile-no-neg-offsets.patch
  - CVE-2025-6069-quad-complex-HTMLParser.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Readjusted patches:
  - CVE-2023-52425-libexpat-2.6.0-backport.patch
  - CVE-2023-52425-remove-reparse_deferral-tests.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
  <changelog author="mcepl@suse.com" date="1770811200">- CVE-2025-11468: preserving parens when folding comments in
  email headers (bsc#1257029, gh#python/cpython#143935).
  CVE-2025-11468-email-hdr-fold-comment.patch
- CVE-2026-0672: rejects control characters in http cookies.
  (bsc#1257031, gh#python/cpython#143919)
  CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
- CVE-2026-0865: rejecting control characters in
  wsgiref.headers.Headers, which could be abused for injecting
  false HTTP headers. (bsc#1257042, gh#python/cpython#143916)
  CVE-2026-0865-wsgiref-ctrl-chars.patch
- CVE-2025-15366: basically the same as the previous patch for
  IMAP protocol. (bsc#1257044, gh#python/cpython#143921)
  CVE-2025-15366-imap-ctrl-chars.patch
- CVE-2025-15282: basically the same as the previous patch for
  urllib library. (bsc#1257046, gh#python/cpython#143925)
  CVE-2025-15282-urllib-ctrl-chars.patch
- CVE-2025-15367: basically the same as the previous patch for
  poplib library. (bsc#1257041, gh#python/cpython#143923)
  CVE-2025-15367-poplib-ctrl-chars.patch
- CVE-2025-12781: fix decoding with non-standard Base64 alphabet
  (bsc#1257108, gh#python/cpython#125346)
  CVE-2025-12781-b64decode-alt-chars.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1772798400">- Update to 3.11.15:
  - Security
  - gh-144125: BytesGenerator will now refuse to serialize
    (write) headers that are unsafely folded or delimited; see
    verify_generated_headers. (Contributed by Bas Bloemsaat and
    Petr Viktorin in gh-121650).
  - gh-143935: Fixed a bug in the folding of comments when
    flattening an email message using a modern email policy.
    Comments consisting of a very long sequence of non-foldable
    characters could trigger a forced line wrap that omitted
    the required leading space on the continuation line,
    causing the remainder of the comment to be interpreted as
    a new header field. This enabled header injection with
    carefully crafted inputs (bsc#1257029 CVE-2025-11468).
  - gh-143925: Reject control characters in data: URL media
    types (bsc#1257046, CVE-2025-15282).
  - gh-143919: Reject control characters in http.cookies.Morsel
    fields and values (bsc#1257031, CVE-2026-0672).
  - gh-143916: Reject C0 control characters within
    wsgiref.headers.Headers fields, values, and parameters
    (bsc#1257042, CVE-2026-0865).
  - gh-142145: Remove quadratic behavior in xml.minidom node ID
    cache clearing. In order to do this without breaking
    existing users, we also add the ownerDocument attribute to
    xml.dom.minidom elements and attributes created by directly
    instantiating the Element or Attr class. Note that this way
    of creating nodes is not supported; creator functions like
    xml.dom.Document.documentElement() should be used instead
    (bsc#1254997, CVE-2025-12084).
  - gh-137836: Add support of the “plaintext” element, RAWTEXT
    elements “xmp”, “iframe”, “noembed” and “noframes”, and
    optionally RAWTEXT element “noscript” in
    html.parser.HTMLParser.
  - gh-136063: email.message: ensure linear complexity for
    legacy HTTP parameters parsing. Patch by Bénédikt Tran.
  - gh-136065: Fix quadratic complexity in
    os.path.expandvars() (bsc#1252974, CVE-2025-6075).
  - gh-119451: Fix a potential memory denial of service in the
    http.client module. When connecting to a malicious server,
    it could cause an arbitrary amount of memory to be
    allocated. This could have led to symptoms including
    a MemoryError, swapping, out of memory (OOM) killed
    processes or containers, or even system crashes
    (CVE-2025-13836, bsc#1254400).
  - gh-119452: Fix a potential memory denial of service in the
    http.server module. When a malicious user is connected to
    the CGI server on Windows, it could cause an arbitrary
    amount of memory to be allocated. This could have led to
    symptoms including a MemoryError, swapping, out of memory
    (OOM) killed processes or containers, or even system
    crashes.
  - gh-119342: Fix a potential memory denial of service in the
    plistlib module. When reading a Plist file received from
    untrusted source, it could cause an arbitrary amount of
    memory to be allocated. This could have led to symptoms
    including a MemoryError, swapping, out of memory (OOM)
    killed processes or containers, or even system crashes
    (bsc#1254401, CVE-2025-13837).
  - Library
  - gh-144833: Fixed a use-after-free in ssl when SSL_new()
    returns NULL in newPySSLSocket(). The error was reported
    via a dangling pointer after the object had already been
    freed.
  - gh-144363: Update bundled libexpat to 2.7.4
  - gh-90949: Add SetAllocTrackerActivationThreshold() and
    SetAllocTrackerMaximumAmplification() to xmlparser objects
    to prevent use of disproportional amounts of dynamic memory
    from within an Expat parser. Patch by Bénédikt Tran.
  - Core and Builtins
  - gh-120384: Fix an array out of bounds crash in
    list_ass_subscript, which could be invoked via some
    specificly tailored input: including concurrent
    modification of a list object, where one thread assigns
    a slice and another clears it.
  - gh-120298: Fix use-after free in list_richcompare_impl
    which can be invoked via some specificly tailored evil
    input.
  Remove upstreamed patches:
  - CVE-2025-11468-email-hdr-fold-comment.patch
  - CVE-2025-12084-minidom-quad-search.patch
  - CVE-2025-13836-http-resp-cont-len.patch
  - CVE-2025-13837-plistlib-mailicious-length.patch
  - CVE-2025-6075-expandvars-perf-degrad.patch
  - CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
  - CVE-2026-0865-wsgiref-ctrl-chars.patch
  - CVE-2025-15282-urllib-ctrl-chars.patch</changelog>
</package>
<package pkgid="d6be301285e9fb15719a6bc075104ae3f04b6039e7ca5a6437ec68d5ab8b30b6d9fd99da25872a86147ecac37b7088744140247e9c4e585439f49bb464bb7b29" name="python311-dbus-python-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="slfo.1.1_1.2"/>
  <changelog author="jmatejek@suse.com" date="1513598400">- drop unneeded epydoc requirement properly</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Use requires_ge instead of the rpm calls</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Version update to version 1.2.8:
  * Python 2.7 required or 3.4 respectively
  * Tests use tap.py functionality
  * Upstream dropped epydoc completely
  * See NEWS for more</changelog>
  <changelog author="nicolas.bock@suse.com" date="1538395200">- Add missing dependency for pkg-config files</changelog>
  <changelog author="mgorse@suse.com" date="1578484800">- Version update to version 1.2.14:
  * Ensure that the numeric types from dbus.types get the same
    str() under Python 3.8 that they did under previous versions.
  * Disable -Winline.
  * Add Python 3.8 to CI.
  - Changes in version 1.2.12:
  * Don't save and restore the exception indicator when called
    from C code.
  - Changes in version 1.2.10:
  * Rewrite CONTRIBUTING.md document, based on Wayland's equivalent
  * Add clearer license information using SPDX-License-Identifier.
  * Improve test coverage.
  * Don't set deprecated tp_print to NULL under Python 3.
  * Include inherited methods and properties when documenting
    objects, which regressed when migrating from epydoc to sphinx.
  * Add missing variant_level member to UnixFd type, for parity
    with the other dbus.types types (dbus-python!3.
  - Note that this is a potentially incompatible change: unknown
    keyword arguments were previously ignored (!) and are now an
    error.
  * Don't reply to method calls if they have the NO_REPLY_EXPECTED
    flag (fd.o#32529, dbus-python#26.
  * Silence -Wcast-function-type with gcc 8.
  * Fix distcheck with python3.7 by deleting __pycache__ during
    uninstall.
  * Consistently save and restore the exception indicator when
    called from C code.
  * Avoid a long-standing race condition in the automated tests.
  * Fix Qt website URL.
- Up dbus dependency; 1.8 is now required.</changelog>
  <changelog author="code@bnavigator.de" date="1607688000">- Support builds with more than one python3 flavor
  gh#openSUSE/python-rpm-macros#66
- Remove shebang from examples (rpmlint warning, is in common doc)
- Clean duplicate python flavor variables for configure
- Update the provides/obsoletes tags for old-style dbus-1-$python</changelog>
  <changelog author="dmueller@suse.com" date="1610193600">- update to 1.2.16:
  * All tests are run even if the tap.py module is not available, although
    diagnostics for failing tests will be better if it is present.
  * Forbid unexpanded AX-prefixed macros more selectively</changelog>
  <changelog author="sflees@suse.de" date="1623240000">- Enable testsuite</changelog>
  <changelog author="dmueller@suse.com" date="1627387200">- update to 1.2.18:
  * dbus-python will be built for python3
  * Python 2 reached end-of-life on 2020-01-01. A future version of
    dbus-python is likely to remove Python 2 support.
  * Move from collections.Sequence to collections.abc.Sequence on
    Python ≥ 3.3, for Python 3.10 compatibility
  * Avoid another deprecation warning for inspect.getargspec().
    This is similar to the one fixed in 1.2.4, but for dbus.decorators.signal
    rather than dbus.decorators.method. (dbus-python!8; Martin Stumpf)
  * Fix an unlikely fd leak if memory allocation fails for UnixFd
  * Fix memory and fd leak if UnixFd is given an invalid negative
    variant_level
  * Avoid more deprecation warnings
  * Disable -Wdeclaration-after-statement. Python 3.9 relies on intermixed
    declarations and statements in its headers, so we can no longer
    enforce this. (Simon McVittie)
  * Convert examples to Python 3 (Simon McVittie)
  * Use the same Python executable for build and dist/distcheck by default
  * CI fixes</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 1.3.2:
  * Python 3, version 3.5 or later, is required.
  * Installing from source code using Autotools requires Python 3.5 or
    later.
  * dbus.gobject_service, dbus.types.UTF8String and the utf8_strings
  keyword argument were only usable with Python 2, and therefore have
  been removed, along with the rest of the special cases for Python 2.
  * Add methods to Message objects to manipulate the interactive
  authorization flag
  * Add licensing information in REUSE format
  * Raise ValueError instead of crashing with assertion failure when a
  Unix fd index number is greater than the number of fds actually attached
  to the message (firewalld#985; Simon McVittie)
  * Raise ValueError instead of crashing with assertion failure when
  a negative number is passed to the UnixFd constructor
  * Fix undefined escape sequences in docstrings
  * Make `distcheck` compatible with Automake 1.16.4, by forcing an
  appropriate prefix to be used
  * Update AX_PYTHON_DEVEL from autoconf-archive for better
  forwards-compatibility
  * Avoid various deprecation warnings in the build system
  - distutils.sysconfig → sysconfig
  - distutils.util → sysconfig</changelog>
</package>
<package pkgid="c39b2029ba8617a3ffbf4c8dfb85e79ab4fa6d405ec05023aada1dc9607c0cc8860a3b1e8f3915948893ab8bb314c515df1895a362c525b5f374524a9996db13" name="python311-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.11.15" rel="slfo.1.1_1.1"/>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="dimstar@opensuse.org" date="1758196800">- Require AppStream to validate appdata file instead of deprecated
  appstream-glib.
- Update idle3.appdata.xml to pass the more pedantic appstreamcli.</changelog>
  <changelog author="dimstar@opensuse.org" date="1758283200">- Drop AppStream buildrequires and don't run appstreamcli validate
  as part of the build process: the appdata.xml is not updated by
  source directly, so we have more contol. Having Appstream or the
  deprecated appstream-glib result in a build cycle.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1759147200">- Add gh139257-Support-docutils-0.22.patch to fix build with latest
  docutils (&gt;=0.22) gh#python/cpython#139257</changelog>
  <changelog author="daniel.garcia@suse.com" date="1760529600">- Update to 3.11.14:
  - Security
  - gh-139700: Check consistency of the zip64 end of central
    directory record. Support records with “zip64 extensible data”
    if there are no bytes prepended to the ZIP file
    (CVE-2025-8291, bsc#1251305).
  - gh-139400: xml.parsers.expat: Make sure that parent Expat
    parsers are only garbage-collected once they are no longer
    referenced by subparsers created by
    ExternalEntityParserCreate(). Patch by Sebastian Pipping.
  - gh-135661: Fix parsing start and end tags in
    html.parser.HTMLParser according to the HTML5 standard.
  * Whitespaces no longer accepted between &lt;/ and the tag name. E.g.
    &lt;/ script&gt; does not end the script section.
  * Vertical tabulation (\v) and non-ASCII whitespaces no longer
    recognized as whitespaces. The only whitespaces are \t\n\r\f and
    space.
  * Null character (U+0000) no longer ends the tag name.
  * Attributes and slashes after the tag name in end tags are now
    ignored, instead of terminating after the first &gt; in quoted
    attribute value. E.g. &lt;/script/foo="&gt;"/&gt;.
  * Multiple slashes and whitespaces between the last attribute and
    closing &gt; are now ignored in both start and end tags. E.g. &lt;a
    foo=bar/ //&gt;.
  * Multiple = between attribute name and value are no longer
    collapsed. E.g. &lt;a foo==bar&gt; produces attribute “foo” with value
    “=bar”.
  - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser
    according to the HTML5 standard: ] ]&gt; and ]] &gt; no longer end the
    CDATA section. Add private method _set_support_cdata() which can
    be used to specify how to parse &lt;[CDATA[ — as a CDATA section in
    foreign content (SVG or MathML) or as a bogus comment in the
    HTML namespace.
  - gh-102555: Fix comment parsing in html.parser.HTMLParser
    according to the HTML5 standard. --!&gt; now ends the comment. -- &gt;
    no longer ends the comment. Support abnormally ended empty
    comments &lt;--&gt; and &lt;---&gt;.
  - gh-135462: Fix quadratic complexity in processing specially
    crafted input in html.parser.HTMLParser. End-of-file errors are
    now handled according to the HTML5 specs – comments and
    declarations are automatically closed, tags are ignored.
  - gh-118350: Fix support of escapable raw text mode (elements
    “textarea” and “title”) in html.parser.HTMLParser.
  - gh-86155: html.parser.HTMLParser.close() no longer loses data
    when the &lt;script&gt; tag is not closed. Patch by Waylan Limberg.
  - Library
  - gh-139312: Upgrade bundled libexpat to 2.7.3
  - gh-138998: Update bundled libexpat to 2.7.2
  - gh-130577: tarfile now validates archives to ensure member
    offsets are non-negative. (Contributed by Alexander Enrique
    Urieles Nieto in gh-130577.)
  - gh-135374: Update the bundled copy of setuptools to 79.0.1.
- Drop upstreamed patches:
  - CVE-2025-8194-tarfile-no-neg-offsets.patch
  - CVE-2025-6069-quad-complex-HTMLParser.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Readjusted patches:
  - CVE-2023-52425-libexpat-2.6.0-backport.patch
  - CVE-2023-52425-remove-reparse_deferral-tests.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
  <changelog author="mcepl@suse.com" date="1770811200">- CVE-2025-11468: preserving parens when folding comments in
  email headers (bsc#1257029, gh#python/cpython#143935).
  CVE-2025-11468-email-hdr-fold-comment.patch
- CVE-2026-0672: rejects control characters in http cookies.
  (bsc#1257031, gh#python/cpython#143919)
  CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
- CVE-2026-0865: rejecting control characters in
  wsgiref.headers.Headers, which could be abused for injecting
  false HTTP headers. (bsc#1257042, gh#python/cpython#143916)
  CVE-2026-0865-wsgiref-ctrl-chars.patch
- CVE-2025-15366: basically the same as the previous patch for
  IMAP protocol. (bsc#1257044, gh#python/cpython#143921)
  CVE-2025-15366-imap-ctrl-chars.patch
- CVE-2025-15282: basically the same as the previous patch for
  urllib library. (bsc#1257046, gh#python/cpython#143925)
  CVE-2025-15282-urllib-ctrl-chars.patch
- CVE-2025-15367: basically the same as the previous patch for
  poplib library. (bsc#1257041, gh#python/cpython#143923)
  CVE-2025-15367-poplib-ctrl-chars.patch
- CVE-2025-12781: fix decoding with non-standard Base64 alphabet
  (bsc#1257108, gh#python/cpython#125346)
  CVE-2025-12781-b64decode-alt-chars.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1772798400">- Update to 3.11.15:
  - Security
  - gh-144125: BytesGenerator will now refuse to serialize
    (write) headers that are unsafely folded or delimited; see
    verify_generated_headers. (Contributed by Bas Bloemsaat and
    Petr Viktorin in gh-121650).
  - gh-143935: Fixed a bug in the folding of comments when
    flattening an email message using a modern email policy.
    Comments consisting of a very long sequence of non-foldable
    characters could trigger a forced line wrap that omitted
    the required leading space on the continuation line,
    causing the remainder of the comment to be interpreted as
    a new header field. This enabled header injection with
    carefully crafted inputs (bsc#1257029 CVE-2025-11468).
  - gh-143925: Reject control characters in data: URL media
    types (bsc#1257046, CVE-2025-15282).
  - gh-143919: Reject control characters in http.cookies.Morsel
    fields and values (bsc#1257031, CVE-2026-0672).
  - gh-143916: Reject C0 control characters within
    wsgiref.headers.Headers fields, values, and parameters
    (bsc#1257042, CVE-2026-0865).
  - gh-142145: Remove quadratic behavior in xml.minidom node ID
    cache clearing. In order to do this without breaking
    existing users, we also add the ownerDocument attribute to
    xml.dom.minidom elements and attributes created by directly
    instantiating the Element or Attr class. Note that this way
    of creating nodes is not supported; creator functions like
    xml.dom.Document.documentElement() should be used instead
    (bsc#1254997, CVE-2025-12084).
  - gh-137836: Add support of the “plaintext” element, RAWTEXT
    elements “xmp”, “iframe”, “noembed” and “noframes”, and
    optionally RAWTEXT element “noscript” in
    html.parser.HTMLParser.
  - gh-136063: email.message: ensure linear complexity for
    legacy HTTP parameters parsing. Patch by Bénédikt Tran.
  - gh-136065: Fix quadratic complexity in
    os.path.expandvars() (bsc#1252974, CVE-2025-6075).
  - gh-119451: Fix a potential memory denial of service in the
    http.client module. When connecting to a malicious server,
    it could cause an arbitrary amount of memory to be
    allocated. This could have led to symptoms including
    a MemoryError, swapping, out of memory (OOM) killed
    processes or containers, or even system crashes
    (CVE-2025-13836, bsc#1254400).
  - gh-119452: Fix a potential memory denial of service in the
    http.server module. When a malicious user is connected to
    the CGI server on Windows, it could cause an arbitrary
    amount of memory to be allocated. This could have led to
    symptoms including a MemoryError, swapping, out of memory
    (OOM) killed processes or containers, or even system
    crashes.
  - gh-119342: Fix a potential memory denial of service in the
    plistlib module. When reading a Plist file received from
    untrusted source, it could cause an arbitrary amount of
    memory to be allocated. This could have led to symptoms
    including a MemoryError, swapping, out of memory (OOM)
    killed processes or containers, or even system crashes
    (bsc#1254401, CVE-2025-13837).
  - Library
  - gh-144833: Fixed a use-after-free in ssl when SSL_new()
    returns NULL in newPySSLSocket(). The error was reported
    via a dangling pointer after the object had already been
    freed.
  - gh-144363: Update bundled libexpat to 2.7.4
  - gh-90949: Add SetAllocTrackerActivationThreshold() and
    SetAllocTrackerMaximumAmplification() to xmlparser objects
    to prevent use of disproportional amounts of dynamic memory
    from within an Expat parser. Patch by Bénédikt Tran.
  - Core and Builtins
  - gh-120384: Fix an array out of bounds crash in
    list_ass_subscript, which could be invoked via some
    specificly tailored input: including concurrent
    modification of a list object, where one thread assigns
    a slice and another clears it.
  - gh-120298: Fix use-after free in list_richcompare_impl
    which can be invoked via some specificly tailored evil
    input.
  Remove upstreamed patches:
  - CVE-2025-11468-email-hdr-fold-comment.patch
  - CVE-2025-12084-minidom-quad-search.patch
  - CVE-2025-13836-http-resp-cont-len.patch
  - CVE-2025-13837-plistlib-mailicious-length.patch
  - CVE-2025-6075-expandvars-perf-degrad.patch
  - CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
  - CVE-2026-0865-wsgiref-ctrl-chars.patch
  - CVE-2025-15282-urllib-ctrl-chars.patch</changelog>
</package>
<package pkgid="29e49b0ccfdc40bf79485d0800a03766faf1fd9c33d54ed9e8e94061a79b4408321fa7d12ce03d4f4ad57abf67af4d6cea6d6ef050796acf65ab138a13540961" name="python311-debugsource" arch="aarch64">
  <version epoch="0" ver="3.11.15" rel="slfo.1.1_1.1"/>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="dimstar@opensuse.org" date="1758196800">- Require AppStream to validate appdata file instead of deprecated
  appstream-glib.
- Update idle3.appdata.xml to pass the more pedantic appstreamcli.</changelog>
  <changelog author="dimstar@opensuse.org" date="1758283200">- Drop AppStream buildrequires and don't run appstreamcli validate
  as part of the build process: the appdata.xml is not updated by
  source directly, so we have more contol. Having Appstream or the
  deprecated appstream-glib result in a build cycle.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1759147200">- Add gh139257-Support-docutils-0.22.patch to fix build with latest
  docutils (&gt;=0.22) gh#python/cpython#139257</changelog>
  <changelog author="daniel.garcia@suse.com" date="1760529600">- Update to 3.11.14:
  - Security
  - gh-139700: Check consistency of the zip64 end of central
    directory record. Support records with “zip64 extensible data”
    if there are no bytes prepended to the ZIP file
    (CVE-2025-8291, bsc#1251305).
  - gh-139400: xml.parsers.expat: Make sure that parent Expat
    parsers are only garbage-collected once they are no longer
    referenced by subparsers created by
    ExternalEntityParserCreate(). Patch by Sebastian Pipping.
  - gh-135661: Fix parsing start and end tags in
    html.parser.HTMLParser according to the HTML5 standard.
  * Whitespaces no longer accepted between &lt;/ and the tag name. E.g.
    &lt;/ script&gt; does not end the script section.
  * Vertical tabulation (\v) and non-ASCII whitespaces no longer
    recognized as whitespaces. The only whitespaces are \t\n\r\f and
    space.
  * Null character (U+0000) no longer ends the tag name.
  * Attributes and slashes after the tag name in end tags are now
    ignored, instead of terminating after the first &gt; in quoted
    attribute value. E.g. &lt;/script/foo="&gt;"/&gt;.
  * Multiple slashes and whitespaces between the last attribute and
    closing &gt; are now ignored in both start and end tags. E.g. &lt;a
    foo=bar/ //&gt;.
  * Multiple = between attribute name and value are no longer
    collapsed. E.g. &lt;a foo==bar&gt; produces attribute “foo” with value
    “=bar”.
  - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser
    according to the HTML5 standard: ] ]&gt; and ]] &gt; no longer end the
    CDATA section. Add private method _set_support_cdata() which can
    be used to specify how to parse &lt;[CDATA[ — as a CDATA section in
    foreign content (SVG or MathML) or as a bogus comment in the
    HTML namespace.
  - gh-102555: Fix comment parsing in html.parser.HTMLParser
    according to the HTML5 standard. --!&gt; now ends the comment. -- &gt;
    no longer ends the comment. Support abnormally ended empty
    comments &lt;--&gt; and &lt;---&gt;.
  - gh-135462: Fix quadratic complexity in processing specially
    crafted input in html.parser.HTMLParser. End-of-file errors are
    now handled according to the HTML5 specs – comments and
    declarations are automatically closed, tags are ignored.
  - gh-118350: Fix support of escapable raw text mode (elements
    “textarea” and “title”) in html.parser.HTMLParser.
  - gh-86155: html.parser.HTMLParser.close() no longer loses data
    when the &lt;script&gt; tag is not closed. Patch by Waylan Limberg.
  - Library
  - gh-139312: Upgrade bundled libexpat to 2.7.3
  - gh-138998: Update bundled libexpat to 2.7.2
  - gh-130577: tarfile now validates archives to ensure member
    offsets are non-negative. (Contributed by Alexander Enrique
    Urieles Nieto in gh-130577.)
  - gh-135374: Update the bundled copy of setuptools to 79.0.1.
- Drop upstreamed patches:
  - CVE-2025-8194-tarfile-no-neg-offsets.patch
  - CVE-2025-6069-quad-complex-HTMLParser.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Readjusted patches:
  - CVE-2023-52425-libexpat-2.6.0-backport.patch
  - CVE-2023-52425-remove-reparse_deferral-tests.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
  <changelog author="mcepl@suse.com" date="1770811200">- CVE-2025-11468: preserving parens when folding comments in
  email headers (bsc#1257029, gh#python/cpython#143935).
  CVE-2025-11468-email-hdr-fold-comment.patch
- CVE-2026-0672: rejects control characters in http cookies.
  (bsc#1257031, gh#python/cpython#143919)
  CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
- CVE-2026-0865: rejecting control characters in
  wsgiref.headers.Headers, which could be abused for injecting
  false HTTP headers. (bsc#1257042, gh#python/cpython#143916)
  CVE-2026-0865-wsgiref-ctrl-chars.patch
- CVE-2025-15366: basically the same as the previous patch for
  IMAP protocol. (bsc#1257044, gh#python/cpython#143921)
  CVE-2025-15366-imap-ctrl-chars.patch
- CVE-2025-15282: basically the same as the previous patch for
  urllib library. (bsc#1257046, gh#python/cpython#143925)
  CVE-2025-15282-urllib-ctrl-chars.patch
- CVE-2025-15367: basically the same as the previous patch for
  poplib library. (bsc#1257041, gh#python/cpython#143923)
  CVE-2025-15367-poplib-ctrl-chars.patch
- CVE-2025-12781: fix decoding with non-standard Base64 alphabet
  (bsc#1257108, gh#python/cpython#125346)
  CVE-2025-12781-b64decode-alt-chars.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1772798400">- Update to 3.11.15:
  - Security
  - gh-144125: BytesGenerator will now refuse to serialize
    (write) headers that are unsafely folded or delimited; see
    verify_generated_headers. (Contributed by Bas Bloemsaat and
    Petr Viktorin in gh-121650).
  - gh-143935: Fixed a bug in the folding of comments when
    flattening an email message using a modern email policy.
    Comments consisting of a very long sequence of non-foldable
    characters could trigger a forced line wrap that omitted
    the required leading space on the continuation line,
    causing the remainder of the comment to be interpreted as
    a new header field. This enabled header injection with
    carefully crafted inputs (bsc#1257029 CVE-2025-11468).
  - gh-143925: Reject control characters in data: URL media
    types (bsc#1257046, CVE-2025-15282).
  - gh-143919: Reject control characters in http.cookies.Morsel
    fields and values (bsc#1257031, CVE-2026-0672).
  - gh-143916: Reject C0 control characters within
    wsgiref.headers.Headers fields, values, and parameters
    (bsc#1257042, CVE-2026-0865).
  - gh-142145: Remove quadratic behavior in xml.minidom node ID
    cache clearing. In order to do this without breaking
    existing users, we also add the ownerDocument attribute to
    xml.dom.minidom elements and attributes created by directly
    instantiating the Element or Attr class. Note that this way
    of creating nodes is not supported; creator functions like
    xml.dom.Document.documentElement() should be used instead
    (bsc#1254997, CVE-2025-12084).
  - gh-137836: Add support of the “plaintext” element, RAWTEXT
    elements “xmp”, “iframe”, “noembed” and “noframes”, and
    optionally RAWTEXT element “noscript” in
    html.parser.HTMLParser.
  - gh-136063: email.message: ensure linear complexity for
    legacy HTTP parameters parsing. Patch by Bénédikt Tran.
  - gh-136065: Fix quadratic complexity in
    os.path.expandvars() (bsc#1252974, CVE-2025-6075).
  - gh-119451: Fix a potential memory denial of service in the
    http.client module. When connecting to a malicious server,
    it could cause an arbitrary amount of memory to be
    allocated. This could have led to symptoms including
    a MemoryError, swapping, out of memory (OOM) killed
    processes or containers, or even system crashes
    (CVE-2025-13836, bsc#1254400).
  - gh-119452: Fix a potential memory denial of service in the
    http.server module. When a malicious user is connected to
    the CGI server on Windows, it could cause an arbitrary
    amount of memory to be allocated. This could have led to
    symptoms including a MemoryError, swapping, out of memory
    (OOM) killed processes or containers, or even system
    crashes.
  - gh-119342: Fix a potential memory denial of service in the
    plistlib module. When reading a Plist file received from
    untrusted source, it could cause an arbitrary amount of
    memory to be allocated. This could have led to symptoms
    including a MemoryError, swapping, out of memory (OOM)
    killed processes or containers, or even system crashes
    (bsc#1254401, CVE-2025-13837).
  - Library
  - gh-144833: Fixed a use-after-free in ssl when SSL_new()
    returns NULL in newPySSLSocket(). The error was reported
    via a dangling pointer after the object had already been
    freed.
  - gh-144363: Update bundled libexpat to 2.7.4
  - gh-90949: Add SetAllocTrackerActivationThreshold() and
    SetAllocTrackerMaximumAmplification() to xmlparser objects
    to prevent use of disproportional amounts of dynamic memory
    from within an Expat parser. Patch by Bénédikt Tran.
  - Core and Builtins
  - gh-120384: Fix an array out of bounds crash in
    list_ass_subscript, which could be invoked via some
    specificly tailored input: including concurrent
    modification of a list object, where one thread assigns
    a slice and another clears it.
  - gh-120298: Fix use-after free in list_richcompare_impl
    which can be invoked via some specificly tailored evil
    input.
  Remove upstreamed patches:
  - CVE-2025-11468-email-hdr-fold-comment.patch
  - CVE-2025-12084-minidom-quad-search.patch
  - CVE-2025-13836-http-resp-cont-len.patch
  - CVE-2025-13837-plistlib-mailicious-length.patch
  - CVE-2025-6075-expandvars-perf-degrad.patch
  - CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
  - CVE-2026-0865-wsgiref-ctrl-chars.patch
  - CVE-2025-15282-urllib-ctrl-chars.patch</changelog>
</package>
<package pkgid="b55db1eee12ca585b7568c5cbf9e300f06a04014d24daa9af15f39bd6f916a4a481f4bfb0f70166923ff33529521a0d7160dd311ad686a447195b5e61aad58d8" name="python311-gobject-cairo-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.44.1" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="code@bnavigator.de" date="1657972800">- Work around vendored distutils in setuptools &gt;= 60 incorrectly
  installing pkgconfig files into the wrong libdir</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1658491200">- Update to version 3.42.2:
  + Error out instead of crashing when marshaling unsupported
    fundamental types in some cases.
  + Add a workaround for a PyPy 3.9+ bug when threads are used.
  + Fix crashes when marshaling zero terminated arrays for certain
    item types.
  + Fix a crash/refcounting error in case marshaling a hash table
    fails.
  + Make the test suite pass again with PyPy.
  + tests: support running tests with (MSVC) CPython 3.8+ on
    Windows.
  + interface: Fix leak when overriding GInterfaceInfo.
  + setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677240000">- Update to version 3.43.1:
  + Drop support for Python 3.6
  + meson: bump minimum version to 0.53.0 and update subprojects
  + gimodule: fix floating state of python objects created with
    g_object_new
  + Gtk.Template: Accept PathLike objects as a filename
  + info: Show which type/object callables are bound to
  + IntrospectionModule: handle two threads loading type at same
    time
  + Port to Py_TRASHCAN_BEGIN
  + Other cleanups/improvements</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679227200">- Update to version 3.44.0:
  + No changes compared to 3.43.1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679659200">- Update to version 3.44.1:
  + Fix tests with glib 2.76.x</changelog>
</package>
<package pkgid="24fe76052a5e742c8e6fa8b17f5e2db28eb8e36a04f47d05e9be6377b9bfc3d0a7744cebd93af018c9fd9e6489c0d67ce331f4aef7aa5b8f606dec50460e12fd" name="python311-gobject-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.44.1" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="code@bnavigator.de" date="1657972800">- Work around vendored distutils in setuptools &gt;= 60 incorrectly
  installing pkgconfig files into the wrong libdir</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1658491200">- Update to version 3.42.2:
  + Error out instead of crashing when marshaling unsupported
    fundamental types in some cases.
  + Add a workaround for a PyPy 3.9+ bug when threads are used.
  + Fix crashes when marshaling zero terminated arrays for certain
    item types.
  + Fix a crash/refcounting error in case marshaling a hash table
    fails.
  + Make the test suite pass again with PyPy.
  + tests: support running tests with (MSVC) CPython 3.8+ on
    Windows.
  + interface: Fix leak when overriding GInterfaceInfo.
  + setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677240000">- Update to version 3.43.1:
  + Drop support for Python 3.6
  + meson: bump minimum version to 0.53.0 and update subprojects
  + gimodule: fix floating state of python objects created with
    g_object_new
  + Gtk.Template: Accept PathLike objects as a filename
  + info: Show which type/object callables are bound to
  + IntrospectionModule: handle two threads loading type at same
    time
  + Port to Py_TRASHCAN_BEGIN
  + Other cleanups/improvements</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679227200">- Update to version 3.44.0:
  + No changes compared to 3.43.1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679659200">- Update to version 3.44.1:
  + Fix tests with glib 2.76.x</changelog>
</package>
<package pkgid="08f5279de9f6885c5ec7c6ad6d6c94939052ecf4a1c3a2ba482fc41ca50c5045b26d8e7b82b116bff29c74b04af82b39faf7db166a254d34f7324710f953abdb" name="python311-immutables-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.19" rel="slfo.1.1_1.2"/>
  <changelog author="dmueller@suse.com" date="1602590400">- skip tests that fail on 32bit</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Add skip_32bit_tests.patch (gh#MagicStack/immutables#53) to skip tests
  which fail on 32bit architectures.</changelog>
  <changelog author="dmueller@suse.com" date="1619092800">- update to 0.15
  * python 3.9 support</changelog>
  <changelog author="mcepl@suse.com" date="1628164800">- Upstream fixed problems with 32bit systems
  (gh#MagicStack/immutables#69) so we have removed
  skip_32bit_tests.patch and added new solution which actually fixes the
  issue: test_none_collisions-32-bit.patch.</changelog>
  <changelog author="dmueller@suse.com" date="1645531200">- update to 0.16:
  * Refactor typings
  * Update Python 3.10 support, drop Python 3.5
  * Fix test_none_collisions on 32-bit systems
  * Clarify the license of the included pythoncapi_compat.h header
  * Use cibuildwheel to build wheels
- drop skip_32bit_tests.patch, test_none_collisions-32-bit.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1658232000">- update to 0.18:
  * Fix iteration when tree is 7 levels deep and has collissions
  * Test on python 3.10
  * consolidate mypy and pytest config into pyproject.toml</changelog>
  <changelog author="code@bnavigator.de" date="1661169600">- Don't do mypy static type checking of the sources in order to
  avoid mypy in Ring1. The functionality of the binary rpm package
  is not affected by properly typed python sources.
- Remove obsolete setup.py sed fix
- Don't catchall sitearch files in %files section</changelog>
  <changelog author="yarunachalam@suse.com" date="1665576000">- Update to version 0.19
  * Support for Python 3.11</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="a86976bf48a7efbfdf4f1f051646cef98cee7cd88d6c61ceaef8cba670bee8c2b4fb418e71c420d9bf380271ee58bd31f726544c88832dc12a2c7f1eee0b0cb1" name="python311-libvirt-python-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="slfo.1.1_1.1"/>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="jfehlig@suse.com" date="1683028800">- Update to 9.3.0
  - Add all new APIs and constants in libvirt 9.3.0</changelog>
  <changelog author="jfehlig@suse.com" date="1685707200">- Update to 9.4.0
  - Add all new APIs and constants in libvirt 9.4.0</changelog>
  <changelog author="jfehlig@suse.com" date="1688644800">- Update to 9.5.0
  - Add all new APIs and constants in libvirt 9.5.0</changelog>
  <changelog author="jfehlig@suse.com" date="1690977600">- Update to 9.6.0
  - Add all new APIs and constants in libvirt 9.6.0
  - jsc#PED-3725</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to 9.7.0
  - Add all new APIs and constants in libvirt 9.7.0
  - jsc#PED-3279</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to 9.8.0
  - Add all new APIs and constants in libvirt 9.8.0
  - jsc#PED-3279</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to 9.9.0
  - Add all new APIs and constants in libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to 9.10.0
  - Add all new APIs and constants in libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to 10.0.0
  - Add all new APIs and constants in libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851</changelog>
</package>
<package pkgid="0ebe757c69fc3fc0a716f1b0c7688a898869dfc92eec3ea6edce5d881e2813e4a96b8840f470da0a028c5092f20e8624c9acc82d0c8dc1bd9836d14734264c80" name="python311-libxml2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.11.6" rel="slfo.1.1_8.1"/>
  <changelog author="pgajdos@suse.com" date="1740139200">- security update
- added patches
  fix CVE-2024-56171 [bsc#1237363], use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  + libxml2-CVE-2024-56171.patch
  fix CVE-2025-24928 [bsc#1237370], stack-based buffer overflow in xmlSnprintfElements in valid.c
  + libxml2-CVE-2025-24928.patch
  fix CVE-2025-27113 [bsc#1237418], NULL Pointer Dereference in libxml2 xmlPatMatch
  + libxml2-CVE-2025-27113.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1749038400">- security update
- added patches
  CVE-2024-40896 [bsc#1234812], XXE vulnerability
  + libxml2-CVE-2024-40896.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1769083200">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="5b3716d4c433da6dc1fe81364b239807b420ba3a5b5b81dfcccee062e603a5e9a7a2efdf86fb18be07b8e11f1ab275b159d1f3c8201d4917c863cb5f7e145e20" name="python311-lxml-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.9.3" rel="slfo.1.1_1.2"/>
  <changelog author="mcepl@suse.com" date="1674216000">- Add close_file_before_test.patch, to make sure the testing data
  are flushed to the file (bsc#1206555).</changelog>
  <changelog author="dmueller@suse.com" date="1676548800">- allow building against any libxml2 version in sle15</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681905600">- Add patch skip-test-under-libxml2-2.10.4.patch:
  * Skip a test if using libxml2 &gt;= 2.10.4</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- New hotness is the sle15_python_module_pythons macro.</changelog>
  <changelog author="mcepl@suse.com" date="1682251201">- Switch documentation to be within the main package.</changelog>
  <changelog author="david.anes@suse.com" date="1683201600">- Add patch skip-test-under-libxml2-2.11.1.patch:
  * Skip a test if using libxml2 &gt;= 2.11.1</changelog>
  <changelog author="mcepl@suse.com" date="1689336000">- Add ISO-Schematron-schema-optional.patch and
  remove-ISO-Schematron-schema.patch to remove non-free RNG
  schema file (bsc#1213351).</changelog>
  <changelog author="dmueller@suse.com" date="1691928000">- update to 4.9.3:
  * ``lxml.objectify`` accepted non-decimal numbers like ``²²²``
    as integers.
  * A memory leak in ``lxml.html.clean`` was resolved by
    switching to Cython 0.29.34+.
  * GH#348: URL checking in the HTML cleaner was improved.
  * GH#371, GH#373: Some regex strings were changed to raw
    strings to fix Python warnings.
  * Built with Cython 0.29.36 to adapt to changes in Python 3.12.</changelog>
  <changelog author="dmueller@suse.com" date="1694001600">- skip html5lib tests - cyclic dependency with html5lib tests
- remove python 2.x from testing</changelog>
</package>
<package pkgid="c9ba2403e76a84210aeeeed0ca297f8fda896e1cc6fca1fa20e9fee9ad20360787777c72e3de01fb866749eb7803ee3fbf026dc1060f906e1b620dddf8e9f1ea" name="python311-msgpack-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="slfo.1.1_1.3"/>
  <changelog author="alarrosa@suse.com" date="1548763200">- Use %license</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551960000">- update to 0.6.1
  * unpackb(data) configures max_*_len options from len(data), instead
    of static default sizes.
  * Unpacker(max_buffer_len=N) configures max_*_len options from N, instead
    of static default sizes.
  * max_bin_len, max_str_len, and max_ext_len are deprecated.
  * unpacker: Default value of input limits are smaller than before to
    avoid DoS attack
  * Unpacker doesn't wrap underlaying ValueError (including UnicodeError)
    into UnpackValueError. If you want to catch all exception during unpack,
    you need to use try ... except Exception with minimum try code block.
  * PackValueError and PackOverflowError are also removed. You need to catch
    normal ValueError and OverflowError.
  * Unpacker has strict_map_key option now. When it is true, only bytes
    and str (unicode in Python 2) are allowed for map keys.
  * Extension modules are merged. There is msgpack._cmsgpack instead
    of msgpack._packer and msgpack._unpacker.
  * Add Unpacker.getbuffer() method.
  * unpacker: msgpack.StackError is raised when input data contains too nested data
  * unpacker: msgpack.FormatError is raised when input data is not valid msgpack format.</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 0.6.2:
  * Support Python 3.8.
  * Update Cython to 0.29.13 for support Python 3.8.
  * Some small optimizations.</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Fix build without python2</changelog>
  <changelog author="pgajdos@suse.com" date="1585656000">- version update to 1.0.0
  * Remove Python 2 support from the msgpack/_cmsgpack. msgpack/fallback still supports Python 2.
  * Remove encoding option from the Packer and Unpacker.
  * Unpacker: The default value of max_buffer_type is changed to 100MiB.
  * Unpacker: strict_map_key is True by default now.
  * Unpacker: String map keys are interned.
  * Drop old buffer protocol support.
  * Support Timestamp type.
  * Support serializing and decerializing datetime object with tzinfo.
  * Unpacker: Fix Unpacker.read_bytes() in fallback implementation. (#352)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 1.0.2:
  * Python 3.9 support
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 1.0.3:
  * add python 3.10 support
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1655640000">- update to 1.0.4:
  * Support Python 3.11 (beta)
  * refresh ci settings.
  * Don't define _*ENDIAN macro on Unix.
  * Update setuptools and black
  * Use PyFloat_Pack8() on Python 3.11a7
  * Upgrade black to fix CI
  * Fix Unpacker max_buffer_length handling
  * ci: Update action versions.</changelog>
  <changelog author="dmueller@suse.com" date="1679832000">- update to 1.0.5:
  * Fallback to compiler defines when __BYTE_ORDER is not
    available
  * Fix build error caused by ntohs, ntohl
  * Add python 3.11 wheels
  * fallback: Fix packing multidim memoryview
  * minor type in exception message</changelog>
  <changelog author="kastl@b1-systems.de" date="1683547200">- add sle15_python_module_pythons</changelog>
</package>
<package pkgid="c13cd4ccad2e70ed1a021af4cdaed2047425f348aabf4295a5c2309d7186343d12a96a7880cd1864102acc23a0b2be8159e1a78631c049af2892c1aeed36ba27" name="python311-psutil-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.9.5" rel="slfo.1.1_1.2"/>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to version 5.9.2:
  * Bug fixes
    + 2093_, [FreeBSD], **[critical]**: `pids()`_ may fail with
    ENOMEM. Dynamically increase the "malloc()" buffer size until
    it's big enough.
    + 2095_, [Linux]: `net_if_stats()`_ returns incorrect interface
    speed for 100GbE network cards.
    + 2113_, [FreeBSD], **[critical]**: `virtual_memory()`_ may raise
    ENOMEM due to missing "#include &lt;sys/param.h&gt;" directive.
    (patch by Peter Jeremy)
    + 2128_, [NetBSD]: `swap_memory()`_ was miscalculated.  (patch by
    Thomas Klausner)</changelog>
  <changelog author="arun@gmx.de" date="1666440000">- update to version 5.9.3:
  * Enhancements
    + 2040, [macOS]: provide wheels for arm64 architecture. (patch by
    Matthieu Darbois)
  * Bug fixes
    + 2116, [macOS], [critical]: `psutil.net_connections`_ fails with
    RuntimeError.
    + 2135, [macOS]: Process.environ() may contain garbage data. Fix
    out-of-bounds read around sysctl_procargs. (patch by Bernhard
    Urban-Forster)
    + 2138, [Linux], [critical]: can't compile psutil on Android due
    to undefined ethtool_cmd_speed symbol.
    + 2142, [POSIX]: net_if_stats() 's flags on Python 2 returned
    unicode instead of str. (patch by Matthieu Darbois)
    + 2147, [macOS] Fix disk usage report on macOS 12+. (patch by
    Matthieu Darbois)
    + 2150, [Linux] Process.threads() may raise NoSuchProcess. Fix
    race condition. (patch by Daniel Li)
    + 2153, [macOS] Fix race condition in
    test_posix.TestProcess.test_cmdline. (patch by Matthieu Darbois)</changelog>
  <changelog author="michael@stroeder.com" date="1667822400">- update to version 5.9.4:
  * Enhancements
  - 2102: use Limited API when building wheels with CPython 3.6+ on Linux,
    macOS and Windows. This allows to use pre-built wheels in all future
    versions of cPython 3. (patch by Matthieu Darbois)
  * Bug fixes
  - 2077, [Windows]: Use system-level values for virtual_memory().
    (patch by Daniel Widdis)
  - 2156, [Linux]: compilation may fail on very old gcc compilers due to
    missing SPEED_UNKNOWN definition. (patch by Amir Rossert)
  - 2010, [macOS]: on MacOS, arm64 IFM_1000_TX and IFM_1000_T are
    the same value, causing a build failure. (patch by Lawrence D'Anna)</changelog>
  <changelog author="code@bnavigator.de" date="1670500800">- Require unittest2 only for python2: make this suitable for
  the 15.4_py39 target in devel:languages:python:backports.
- Merge skip-obs.patch into skip_failing_tests.patch and add
  test_linux.py::test_cpu_affinity because it depends on the
  obs vm-type or worker CPU.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 5.9.5:
  * in case of exception, display a cleaner error
    traceback by hiding the `KeyError` bit deriving from a
    missed cache hit.
  * print the full traceback when a `DeprecationWarning`
    or `UserWarning` is raised.
  * there are cases where `Process.cwd()`_ cannot be
    determined (e.g. directory no longer exists), in which case
    we returned either ``None`` or an empty string.
    This was consolidated and we now return ``""`` on all
    platforms.
  * [UNIX]: if process is a zombie, and we can only
    determine part of the its truncated `Process.name()`_
    (15 chars), don't fail with `ZombieProcess`_ when we try
    to guess the full name from the `Process.cmdline()`_. Just
    return the truncated name.
  * on certain kernels, ``"MemAvailable"`` field
    from ``/proc/meminfo`` returns ``0`` (possibly a kernel bug), in
    which case we calculate an approximation for ``available``
    memory which matches "free" CLI utility.
  * `disk_partitions()`_: do not unnecessarily
    read /proc/filesystems and raise `AccessDenied`_ unless user
    specified `all=False` argument.
  * `users()`_ loses precision for ``started``
    attribute (off by 1 minute).
  * if cwd no longer exists. Return an empty string instead.</changelog>
  <changelog author="aplanas@suse.com" date="1692792000">- Add logind_y2038.patch to use logind if systemd &gt;= 254 is used, to
  fix the issue of ut_tv.tv_sec and the Y2038 problem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1694001600">- BuildRequire /usr/bin/who: called by the test suite. With
  coreutils 9.4 'who' is no longer part of the main package but is
  shipped as part of coreutils-systemd.</changelog>
</package>
<package pkgid="207fecf9a63d297018b22234827d7de0db9b5c326ed1d2c178f546da2ff256dcf72bc0f041c6e581d241edadc37a7bb872d9bf98e4a02ab20f56b276c1d6346a" name="python311-pycairo-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="slfo.1.1_1.2"/>
  <changelog author="code@bnavigator.de" date="1606910400">- Move the pkgconfig file to the common package
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="code@bnavigator.de" date="1606996800">- Update to 1.20.0
  * Require Python 3.6+ #pr-201
  * Require cairo 1.15.10+ #pr-204
  * docs: support Sphinx 3.0 #pr-207
  * meson: add ‘tests’ option to skip tests #pr-188
  * Windows: build wheels #pr-197
  * Add support for Python 3.9 and 3.10 #pr-198 #pr-202
  * examples: add a Jupyter Notebook example #pr-181
  * Raise an error early when being passed a file object not opened
    in binary mode #pr-205
  * Add a pyproject.toml file #pr-206
- move header file in sitearch to devel package (rpmlint error)
  header is packaged twice: gh#pygobject/pycairo#98</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 1.20.1
  * setup.py: Respect the PKG_CONFIG environment variable
  * Make import_cairo inline in addition to static
  * docs: Fix example in Pattern.set_filter() docs _pr_`221`
  * docs: Fix build with newer sphinx
  * docs: Fix NumPy width, height-conventions in examples
  * docs: Last parameter of rel_curve_to should be dy3, not dy4
  * mypy: Fixes for mypy 0.800+
  * mypy: Don't run mypy via pytest</changelog>
  <changelog author="fcrozat@suse.com" date="1628769600">- Add Obsoletes/Provides for python3-cairo-devel.</changelog>
  <changelog author="code@bnavigator.de" date="1657972800">- Work around vendored distutils in setuptools &gt;= 60 incorrectly
  installing pkgconfig files into the wrong libdir
- Deduplicate files in python_sitearch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663070400">- Update to version 1.21.0:
  * Require Python 3.7+
  * Require meson 0.53+
  * Using setup.py directly to build/install pycairo is deprecated.
    Use meson instead.
  * setup.py now requires setuptools. Previously it was optional.
  * The complete API reference is now included in the typing stubs,
    so it can be consumed/shown by IDEs.
- Add f5a795ea.patch: Some test improvements for cairo 1.17.6</changelog>
  <changelog author="dimstar@opensuse.org" date="1669636800">- Updtae to version 1.22.0:
  * Officially support Python 3.11.
  * PDFSurface.version_to_string(): Fix crash with negative
    versions.
  * typing: ImageSurface.get_stride() returns an int.
  * typing: Fix incorrect interface for Matrix constructor.
  * typing: Use Generic for Context.
  * docs: some cairo.Context fixes.
  * docs: try to make create_from_png/write_to_png more clear.
  * docs: add an example for how to convert a surface to pillow.
  * docs: cairo.Format.RGB24: document that unused bytes may be
    overwritten.
  * tests: don’t depend on specific ref counts.
  * tests: compatibility fixes for cairo 1.17.6.
- Drop f5a795ea.patch: fixed upstream.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to version 1.23.0
  * Reminder to distro packagers: Building/installing pycairo using setup.py is deprecated, please use meson instead.
  * git: changed default branch from “master” to “main”
  * Windows: Update the cairo version included in the wheels from 1.17.2 to 1.17.6 #pr-243
  * docs: Document how to look up pycairo headers without loading the module #pr-300
  * tests: don’t error out if cairo wasn’t built with all features #pr-293
  New APIs:
  * Status.DWRITE_ERROR #pr-294
  * Format.RGB96F, Format.RGBA128F #pr-295
  * PDFVersion.VERSION_1_6, PDFVersion.VERSION_1_7 #pr-296
  * HAS_DWRITE_FONT #pr-297
  * Context.set_hairline(), Context.get_hairline() #pr-298
  * PDFSurface.set_custom_metadata() #pr-299</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Switch to single spec version build for PSP</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- update to 1.24.0:
  * Dropped Python 3.7 support
  * Bumped meson version requirement from 0.53.0 to 0.56.0
  * Various cairo dependency updates for the Windows wheel build
  * Various code cleanups :pr:`306`
  * Added Python 3.12 Windows wheels</changelog>
</package>
<package pkgid="dbe65d08fc8c2a7fc02fd2e783d03cf48dda9c9804e2c71b1c769a8c5d1ebac580a0237812f4aeae0f2004c478ca46cbec9a294403ed18e1770aa787db02ce91" name="python311-pycurl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.45.2" rel="slfo.1.1_1.2"/>
  <changelog author="pmonreal@suse.com" date="1615204800">- Remove a failing test-case until fixed in curl:
  * Upstream issue: https://github.com/curl/curl/issues/6615</changelog>
  <changelog author="mcepl@suse.com" date="1622808000">- Add curl7770_compatibility.patch to have package compatible
  with curl 7.77.0.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651147200">- Update to 7.45.1:
  * Fixed build against libcurl &lt; 7.64.1 (patch by Scott Talbert).
  * Add CURLOPT_MAXLIFETIME_CONN (patch by fsbs).
  * Easy handle duplication support (patch by fsbs).
  * Support for unsetting a number of multi options (patch by fsbs).
  * pycurl classes can now be subclassed (patch by fsbs).
  * Multi callbacks' thread state management fixed (patch by fsbs).
  * Add CURL_LOCK_DATA_PSL (patch by fsbs).
  * Add support for SecureTransport SSL backend (MacOS)
    (patch by Scott Talbert).
  * Fixed Python thread initialization causing hangs on operations
    (patch by Scott Talbert).
  * getinfo(CURLINFO_FTP_ENTRY_PATH) now handles NULL return from
    libcurl, returning None in this case.
  * Python 3.9 is now officially supported (patch by Bill Collins).
  * Added CURLOPT_DOH_URL (patch by resokou).
  * Best effort Python 2 support has been reinstated.
  * Added missing fields to curl_version_info struct (patch by Hasan).
  * Added CURLINFO_CONDITION_UNMET (patch by Dima Tisnek).
  * Exposed MAX_CONCURRENT_STREAMS in CurlMulti (patch by Alexandre Pion).
  * Compilation fixed against Python 3.10 alpha (patch by Kamil Dudka).
- Remove patch curl7770_compatibility.patch and remove_nose.patch:
  * They have both merged upstream.
- Modify patch disable_randomly_failing_tests.patch:
  * Use pytest rather than nose methods.
- Add patch curl-789-error-message.patch:
  * Handle missing ! in a returned error message.</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 7.45.2:
  * Python 3.9 compatibility for Py_TRASHCAN_SAFE_BEGIN
  * Add support for CURL_HTTP_VERSION_3
  * Add CURLOPT_TLS13_CIPHERS and CURLOPT_PROXY_TLS13_CIPHERS options
  * Added HTTP09_ALLOWED option
  * Removed use of distutils
- drop curl-789-error-message.patch (upstream)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1677240000">- Disable http3 tests if it's not supported</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="mcepl@cepl.eu" date="1697112000">- Skip test_multi_socket_select (gh#pycurl/pycurl#819),
  test_multi_socket_action (gh#pycurl/pycurl#729), and
  test_request_with_verifypeer (gh#pycurl/pycurl#822).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1702641600">- Add patch pause-unpause-xfail.patch:
  * XFAIL a test due to gh#pycurl/pycurl#729 (bsc#1218062)</changelog>
</package>
<package pkgid="23291fe90972158bc84cd05356e5d44fb326839d0a498f756e42f25274bba9c7e2b395450daa98289a1d36ce2cc83f09e581e45bd357c0409cfe5375ea8a16f9" name="python311-pyrsistent-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.19.3" rel="slfo.1.1_1.2"/>
  <changelog author="tchvatal@suse.com" date="1564401600">- Update to 0.15.4:
  * support new pytest
  * Fix #174, fix a GC traversal bug in pvector evolver C extension.</changelog>
  <changelog author="dmueller@suse.com" date="1582891200">- update to 0.15.7:
  * Fix #186, type errors with more recent versions of MyPy. Thanks @qhesz for this!
  * Build and test on ARM during CI. Thanks @ossdev07 for this!
  * Set absolute imports for python2 compatibility. Thanks @michalvi for this!
  * Fix #182 moduleinit name clash.
  * Fix #179 Fixed 'ignore_extra' factory parameter for pvector. Thanks @ss18 for this!</changelog>
  <changelog author="dmueller@suse.com" date="1594987200">- update to 0.16.0:
  * No major updates but Python 2 support no longer guaranteed.
  * Fix #192, 'ignore_extra' for 'pvector_field'. Thanks @ss18 for this!
  * Fix #191, include LICENCE in distribution. Thanks @johnthagen for this!
  * Fix #190, minor MyPy errors. Thanks @Qhesz for this!</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 0.17.3:
  * Fix #208, release v0.17.3 with proper meta data requiring Python &gt;= 3.5.
  * Add "python_requires &gt;= 2.7" to setup.py in preparation for Python 2.7 incompatible updates
  * Same as 0.17.1 released with more recent version of setuptools to get proper meta data for in place.
  * Restrict package to Python &gt;= 3.5 to not break unpinned Python 2 dependencies. Thanks @vphilippon
  * Remove Python 2 support code. This includes dropping some compatibility code and the dependency on
  six. Thanks @djailla for this.
  * Fix #200, python 3 exception chaining. This is a minor backwards incompatibility, hence stepping
  to 0.17.0. Thanks @cool-RR for this!</changelog>
  <changelog author="code@bnavigator.de" date="1613390400">- Remove remnant requirements of six and numpy: These are neither
  used anywhere in the package code, nor in the tests.</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 0.18.0:
  * Fix #209 Update freeze recurse into pyrsistent data structures and thaw to
    recurse into lists and dicts
  * Fix #226, stop using deprecated exception.message.
  * Fix #211, add union operator to persistent maps.
  * Fix #194, declare build dependencies through pyproject.toml.
  * Officially drop Python 3.5 support.
  * Fix #223, release wheels for all major platforms.
  * Fix #221, KeyError obscured by TypeError if key is a tuple.
  * Fix LICENSE file name spelling.
  * Fix #216, add abstractmethod decorator for CheckedType and ABCMeta for
    _CheckedTypeMeta.
  * Fix #228, rename example classes in tests to avoid name clashes with pytest.</changelog>
  <changelog author="dmueller@suse.com" date="1643976000">- update to 0.18.1:
  * Add universal wheels for MacOS, thanks @ntamas for this!
  * Add support for Python 3.10, thanks @hugovk for this!
  * Fix #236 compilation errors under Python 3.10.
  * Drop official support for Python 3.6 since it's EOL since 2021-12-23.
  * Fix #238, failing doc tests on Python 3.11, thanks @musicinmybrain for this!</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- update to 0.19.3:
  * Fix #264, add wheels and official support for Python 3.11.
  * Fix #263, pmap regression in 0.19.1. Element access sometimes unreliable
  after insert.
  * Fix #159 (through PR #243). Pmap keys/values/items now behave more like the
  corresponding Python 3 methods on dicts. Previously they returned a
  materialized PVector holding the items, now they return
  views instead.
  * Fix #244, type for argument to PVector.delete missing.
  * Fix #249, rename perf test directory to avoid tripping up automatic
  discovery in more recent setuptools versions
  * Fix #247, performance bug when setting elements in maps and adding elements
  to sets
  * Fix #248, build pure Python wheels. This is used by some installers.
  * Fix #254, #258, support manylinux_2014_aarch64 wheels.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="302e124cbdad726f6aed80406da574467263676cf77085e8008150f7140ee20f23be419ffcd77017f39933d2d8a7125e2d975b681f12f5d96c49a93f3ece15e8" name="python311-pyzmq-debuginfo" arch="aarch64">
  <version epoch="0" ver="25.1.1" rel="slfo.1.1_1.2"/>
  <changelog author="code@bnavigator.de" date="1641384000">- Skip test_log due to flaky socket handling inside obs environments.
- Add less-flaky.patch to increase flakiness of test_retry_poll
  and test_timeout.</changelog>
  <changelog author="code@bnavigator.de" date="1656417600">- Update to 23.2.0
  * Use zmq.Event enums in parse_monitor_message for nicer reprs
  * Fix building bundled libzmq with ZMQ_DRAFT_API=1
  * Fix subclassing zmq.Context with additional arguments in the
    constructor. Subclasses may now have full control over the
    signature, rather than purely adding keyword-only arguments
  * Typos and other small fixes
- Release 23.1.0
  * Fix global name of zmq.EVENT_HANDSHAKE_* constants
  * Fix constants missing when using import zmq.green as zmq
  * {func}zmq.utils.monitor.recv_monitor_msg now supports async
    Sockets.
- Release 23.0.0
  * all zmq constants are now available as Python enums (e.g.
    zmq.SocketType.PULL, zmq.SocketOption.IDENTITY), generated
    statically from zmq.h instead of at compile-time. This means
    that checks for the presence of a constant (hasattr(zmq,
    'RADIO')) is not a valid check for the presence of a feature.
    This practice has never been robust, but it may have worked
    sometimes. Use direct checks via e.g. {func}zmq.has or
    {func}zmq.zmq_version_info.
  * A bit more type coverage of Context.term and Context.socket
  * Remove all use of deprecated stdlib distutils
  * Update to Cython 0.29.30 (required for Python 3.11
    compatibility)
  * Compatibility with Python 3.11.0b1
  * Switch to myst for docs
  * Deprecate zmq.utils.strtypes, now unused
  * Updates to autoformatting, linting
- Drop less-flaky.patch: pytest-rerunfailures without the flaky
  package can handle it.
- Fix rpmlint errors
  * no-dependency-on python-base 3.X: depend on python(abi) = 3.X
  * unused-rpmlintrc-filter: Was unflavored, not required with the
    above -- drop rpmlintc
  * spurious-executable-perm: fix by chmod -x
  * obsolete-suse-version-check 1000. This package is not branched
    into any project for the maintenance of other distributions</changelog>
  <changelog author="arun@gmx.de" date="1660737600">- update to version 23.2.1:
  * Improvements:
    + First release with wheels for Python 3.11 (thanks
    cibuildwheel!).
    + linux aarch64 wheels now bundle the same libzmq (4.3.4) as all
    other builds, thanks to switching to native arm builds on
    CircleCI.
  * Fixes:
    + Some type annotation fixes in devices.</changelog>
  <changelog author="arun@gmx.de" date="1663416000">- update to version 24.0.0:
  * Breaking changes:
    + Due to a libzmq bug causing unavoidable crashes for some users,
    Windows wheels no longer bundle libzmq with AF_UNIX support. In
    order to enable AF_UNIX on Windows, pyzmq must be built from
    source, linking an appropriate build of libzmq
    (e.g. libzmq-v142). AF_UNIX support will be re-enabled in pyzmq
    wheels when libzmq published fixed releases.
    + Using a {class}zmq.Context as a context manager or deleting a
    context without closing it now calls {meth}zmq.Context.destroy
    at exit instead of {meth}zmq.Context.term. This will have little
    effect on most users, but changes what happens when user bugs
    result in a context being implicitly destroyed while sockets are
    left open. In almost all cases, this will turn what used to be a
    hang into a warning. However, there may be some cases where
    sockets are actively used in threads, which could result in a
    crash. To use sockets across threads, it is critical to properly
    and explicitly close your contexts and sockets, which will
    always avoid this issue.</changelog>
  <changelog author="arun@gmx.de" date="1664107200">- update to version 24.0.1:
  * Fix several possible resource warnings and deprecation warnings
    when cleaning up contexts and sockets, especially in pyzmq's own
    tests and when implicit teardown of objects is happening during
    process teardown.</changelog>
  <changelog author="pmonreal@suse.com" date="1667995200">- Fix build with OpenSSL 3.0 [bsc#1205042]
  * Temporarily disable test_on_recv_basic</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- skip numy tests for the testsuite on SLE15</changelog>
  <changelog author="mmachova@suse.com" date="1683892800">- Update to version 25.0.2
  * Bundled subset of tornado's IOLoop (deprecated since pyzmq 17) is removed,
    so ZMQStream cannot be used without an actual install of tornado.
  * Remove support for tornado 4.
  * Added `socket_class` argument to zmq.Context.socket
  * Support shadowing sockets with socket objects.
  * In zmq.auth and zmq.eventloop.zmqstream callbacks may now be async.
  * License files have been renamed to more standard LICENSE.BSD, LICENSE.LESSER
    to appease some license auto-detect tools.</changelog>
  <changelog author="arun@gmx.de" date="1689163200">- update to version 25.1.0:
  * Enhancements:
    + Include address in error message when bind/connect fail.
  * Packaging changes:
    + Fix inclusion of some test files in source distributions.
    + Add Cython as a build-time dependency in build-system.requires
    metadata, following current recommendations of the Cython
    maintainers. We still ship generated Cython sources in source
    distributions, so it is not a strict dependency for packagers
    using --no-build-isolation, but pip will install Cython as part
    of building pyzmq from source. This makes it more likely that
    past pyzmq releases will install on future Python releases,
    which often require an update to Cython but not pyzmq
    itself. For Python 3.12, Cython &gt;=3.0.0b3 is required.</changelog>
  <changelog author="arun@gmx.de" date="1691668800">- update to version 25.1.1:
  * Changes:
    + Allow Cython 0.29.35 to build Python 3.12 wheels (no longer
    require Cython 3)
  * Bugs fixed:
    + Fix builds on Solaris by including generated platform.hpp
    + Cleanup futures in Socket.poll() that are cancelled and never
    return
    + Fix builds with -j when numpy is present in the build env</changelog>
</package>
<package pkgid="d25ac0147e3c255034e64fde36bf09b5880a4f9f0d462ecfc9ee1adc6ab30363b120029f4fc9ad89a716db3a678948a8316a12d26e89d8fa7470aad3945ad7dd" name="python311-rpm-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="slfo.1.1_2.1"/>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="asmorodskyi@suse.com" date="1542888000">- Fix python-module compatibility with older distros</changelog>
  <changelog author="mls@suse.de" date="1570017600">- update to rpm-4.15.0</changelog>
  <changelog author="mls@suse.de" date="1574164800">- update to rpm-4.15.1</changelog>
  <changelog author="mls@suse.de" date="1601467200">- update to rpm-4.16.0</changelog>
  <changelog author="mls@suse.de" date="1617105600">- update to rpm-4.16.1.3</changelog>
  <changelog author="mls@suse.de" date="1632398400">- update to rpm-4.17.0</changelog>
  <changelog author="mls@suse.de" date="1658404800">- update to rpm-4.17.1</changelog>
  <changelog author="mls@suse.de" date="1669982400">- update to rpm-4.18.0</changelog>
  <changelog author="jsrain@suse.com" date="1685448000">- add _multibuild for multiple .spec-files</changelog>
</package>
<package pkgid="64c21de942f3013058c08b2bcaadc2b59634817016a42175044f873d68874dc50a5a6e7accc12974f1becab060b45213bb076b94219d110f8a28b8d94505ec94" name="python311-semanage-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591963200">- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization)
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1592308800">- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * Improved manpage
  * fsync final files before rename</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * dropped old and deprecated symbols and functions
    libsemanage version was bumped to libsemanage.so.2
  * libsemanage tries to sync data to prevent empty files in SELinux module
    store</changelog>
  <changelog author="jsegitz@suse.com" date="1616068800">- Minor spec file cleanups</changelog>
  <changelog author="fvogt@suse.com" date="1629115200">- Call "make -j8 pywrap" instead of "make -j8 all pywrap" to fix random
  build failures. The toplevel Makefile does not support concurrency,
  and it resulted in parallel "make all" and "make pywrap" which weren't
  aware of each other and stepped over the other's artifacts.</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * Fixed use-after-free in parse_module_store()
  * Fixed use_after_free in semanage_direct_write_langext()</changelog>
  <changelog author="jsegitz@suse.com" date="1644494400">- Drop Buildrequires for libustr-devel, not needed anymore</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * Optionally rebuild policy when modules are changed externally
  * Fix USE_AFTER_FREE (CWE-672) in semanage_direct_get_module_info()
  * Allow spaces in user/group names</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)</changelog>
</package>
<package pkgid="57a9595f27a1c8908ca62b21109ca9d0b3542f2e13a1e649109b2fbb5789ff267061500fc19cfdf9b868529614a43c546639468c272d288bd5d24829ffcb2898" name="python311-setools-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.4.3" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.com" date="1603281600">- Cleanup BuildRequires
- Fix setools-gui dependencies, we are using python-qt5 and not
  tcl/tk</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Stay on a single python3 flavor even if there are more than one
  gh#openSUSE/python-rpm-macros#73</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to the version 4.4.0:
  * Added support for old Boolean name substitution in seinfo and sesearch.
  * Added sechecker tool which is a configuration file driven analysis tool.</changelog>
  <changelog author="dimstar@opensuse.org" date="1623153600">- Fix dependency of python3-setools: require python3, not python
  (which is python2).</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1645531200">- Add make_networkx_optional.patch to cut down installation requirements
- Change python3-networkx from require into recommend</changelog>
  <changelog author="jsegitz@suse.com" date="1662120000">- Added README.SUSE and drop recommend for python3-networkx altogether
  (bsc#1202676)</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
</package>
<package pkgid="075f188a746370e950fceacc5e830003cba421cbf24703e412f0b2b437c500e12ab3309a99949dfc424ff3cd4a23590b17ee67ffd2bc09b1cbf36f84d972744a" name="python311-simplejson-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.19.1" rel="slfo.1.1_1.2"/>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
  <changelog author="dmueller@suse.com" date="1626436800">- update to 3.17.3:
  * Replaced Travis-CI and AppVeyor with Github Actions,
    adding wheels for Python 3.9.</changelog>
  <changelog author="dmueller@suse.com" date="1631016000">- update to 3.17.5:
  * Fix the C extension module to harden is_namedtuple against looks-a-likes such
    as Mocks. Also prevent dict encoding from causing an unraised SystemError when
    encountering a non-Dict. Noticed by running user tests against a CPython
    interpreter with C asserts enabled (COPTS += -UNDEBUG).</changelog>
  <changelog author="dmueller@suse.com" date="1638187200">- update to 3.17.6:
  * Declare support for Python 3.10 and add wheels</changelog>
  <changelog author="yarunachalam@suse.com" date="1670155200">- Update to v3.18.0
  * Allow serialization of classes that implement for_json or _asdict by
  ignoring TypeError when those methods are called
  https://github.com/simplejson/simplejson/pull/302
  * Raise JSONDecodeError instead of ValueError in invalid unicode escape
  sequence edge case
  https://github.com/simplejson/simplejson/pull/298</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 3.18.1:
  * Remove unnecessary `i` variable from encoder module namespace
  * Declare support for Python 3.11 and add wheels</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 3.19.1:
  * This release contains security hardening measures based on
    recommendations by a security audit sponsored by OSTIF and
    conducted by X41 D-Sec GmbH.
    Several of these measures include changing defaults to be
    more strict, by default simplejson will now only consume
    and produce compliant JSON, but the flags still exist for
    any backwards compatibility needs.
    No high priority issues were discovered, the reference
    count leak is thought to be unreachable since the digits of the
    float are checked before PyOS_string_to_double is called.
  * Fix invalid handling of unicode escape sequences in the pure
    Python implementation of the decoder (SJ-PT-23-01)
  * Fix missing reference count decrease if PyOS_string_to_double
    raises an exception in Python 2.x; was probably unreachable (SJ-
    PT-23-02)
  * Backport the integer string length limitation from Python
    3.11 to limit quadratic number parsing (SJ-PT-23-03)
  * Fix inconsistencies with error messages between the C and
    Python implementations (SJ-PT-23-100)
  * Remove unused unichr import from encoder (SJ-PT-23-101)
  * Remove unused namedtuple_as_object and tuple_as_array
    arguments from simplejson.load (SJ-PT-23-102)
  * Remove vestigial _one_shot code from iterencode (SJ-
    PT-23-103)
  * Change default of allow_nan from True to False and add
    allow_nan to decoder (SJ-PT-23-107)
  * Test the sdist to prevent future regressions
  * Fix regression in sdist archive</changelog>
</package>
<package pkgid="f3b7c9e4f4a8d9d763ad41112fb40ecc990690cc6f41a9f75d97b744255ded63a23d8f710c478d8cb1c634a406c6ccb741581441d8986126d6c27d0f769c1f39" name="python311-systemd-debuginfo" arch="aarch64">
  <version epoch="0" ver="235" rel="slfo.1.1_1.3"/>
  <changelog author="jweberhofer@weberhofer.at" date="1498478400">- exclude-tests-on-obs.patch: Exclude test which fail because of
  a bug in the OBS: https://github.com/openSUSE/obs-build/pull/351
- Upgrade to release 234
  * _daemon,_reader: return ENOSYS instead of NotImplemented
  * _daemon: allow specifying flowinfo
  * Added section for installation on openSUSE &amp; SLE
  * Adjust import order, spacing, operators as recommended by pylint
  * build-sys: add sign and upload targets
  * daemon: add basic support for sd_is_socket_sockaddr
  * daemon: add wrapper for sd_is_socket_sockaddr and tests
  * daemon: properly skip sd_is_socket_sockaddr calls if not available
  * Fix handling of addresses without port and add tests
  * Fix styling to match PEP8 in most places
  * Improve test skipping on old systems
  * Include all fields from record
  * journal: do not convert extra args to string in JournalHandler
  * journal: fix repr of JournalHandler to match python3.6
  * journal: improve docstring formatting a bit
  * journal: rename SENDER_FUNCTION to sender_function
  * Makefile: add "doc" target for convenience
  * Makefile: add convenience "shell" target to start python shell
  * Makefile: remove unneeded -I/usr/include from flags
  * Makefile: use $(INCLUDE_DIR) also for compilation
  * Prevent non-str values from being concatenated with +
  * Python 3.6 invalid escape sequence deprecation fixes
  * Remove mid from JournalHandler
  * replace dict.iteritems() with dict.items() to support py3
  * setup.py: allow LIBSYSTEMD_VERSION to be overridden
  * test_daemon: xfail test_notify_with_socket if bind() fails
  * test_journal: add tests for MESSAGE_ID passing
  * tests: move login tests from doctest to separate file
  * tests: skip journal.stream tests on ENOENT error
  * Update to constants from systemd-233
  * util: add compatibility for old glibc</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507377600">- singlespec</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1509969600">- iso-c-90.patch added to fix building on SLE12-SP3</changelog>
  <changelog author="mpluskal@suse.com" date="1510660800">- Use more of python building macros
- Do not build documentation (build is broken if /usr/bin/python is
  not present anyways)
- Run spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1580644800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1656849600">- 0002-reader-make-PY_SSIZE_T_CLEAN.patch added to fix boo#1200686
  reader: make PY_SSIZE_T_CLEAN</changelog>
  <changelog author="mcepl@suse.com" date="1656849601">- Remove exclude-tests-on-obs.patch, this is not the way how to
  do it, besides %python_exec setup.py check doesn't the test
  suite.
- Make tests running properly again</changelog>
  <changelog author="mcepl@suse.com" date="1660737600">- Update to version 235:
  * Adapt the rename of systemd-activate to
    systemd-socket-activate performed in systemd 230.
  * Support for sd_listen_fds_with_names added in systemd 227.
  * Support for sd_journal_get_cutoff_realtime_usec added in
    systemd 186.
  * Make the Reader PY_SSIZE_T_CLEAN for py3.10 compatibility.
  * id128: update for systemd-243 compatibility and other fixes.
  * C syntax modernization. A minimum of C99 is assumed.
  * Fix seek_realtime to work with timezone aware date on Python 3.
  * journal: add namespace support.
  * Fixes for memory leaks and documentation.
  * Support for Python 2 will be removed after this release.
- Remove upstreamed 0002-reader-make-PY_SSIZE_T_CLEAN.patch.
- Skip two failing tests (gh#systemd/python-systemd#118)</changelog>
  <changelog author="mcepl@suse.com" date="1660737601">- Add OBS_missing_etc_machine_id.patch to partially fix
  gh#systemd/python-systemd#118.</changelog>
  <changelog author="ecsos@opensuse.org" date="1686484800">- Add %{?sle15_python_module_pythons}</changelog>
</package>
<package pkgid="1489567204429061fdf340855da1a2b7bbe0b1beed7f6de508b0934635f67a65816afb7d6906561c93c69d613d7695cb991cbad789bdedc2ac00b77c077ebd3f" name="python311-tornado6-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4" rel="slfo.1.1_4.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- update to 6.2:
  * https://www.tornadoweb.org/en/stable/releases/v6.2.0.html
- drop remove-multiheader-http-test.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dcermak@suse.com" date="1685448000">- New upstream release 6.3.2 (bsc#1211741, CVE-2023-28370)
  - Security improvements
  - Fixed an open redirect vulnerability in StaticFileHandler
    under certain configurations.
  - ``tornado.web``
  - `.RequestHandler.set_cookie` once again accepts capitalized
    keyword arguments for backwards compatibility. This is
    deprecated and in Tornado 7.0 only lowercase arguments will
    be accepted.
  - What's new in Tornado 6.3.0
  - The new `.Application` setting ``xsrf_cookie_name``
    can now be used to take advantage of the ``__Host``
    cookie prefix for improved security.  To use it, add
    ``{"xsrf_cookie_name": "__Host-xsrf", "xsrf_cookie_kwargs":
    {"secure": True}}`` to your `.Application` settings. Note
    that this feature currently only works when HTTPS is used.
  - `.WSGIContainer` now supports running the application in
    a ``ThreadPoolExecutor`` so the event loop is no longer
    blocked.
  - `.AsyncTestCase` and `.AsyncHTTPTestCase`, which were
    deprecated in Tornado 6.2, are no longer deprecated.
  - WebSockets are now much faster at receiving large messages
    split into many fragments.
  - General changes
  - Python 3.7 is no longer supported; the minimum supported  .
    Python version is 3.8 Python 3.12 is now supported        .
  - To avoid spurious deprecation warnings, users of Python
    3.10 should upgrade to at least version 3.10.9, and users
    of Python 3.11 should upgrade to at least version 3.11.1.
  - Tornado submodules are now imported automatically on
    demand. This means it is now possible to use a single
    ``import tornado`` statement and refer to objects in
    submodules such as `tornado.web.RequestHandler`.
  - Deprecation notices
  - In Tornado 7.0, `tornado.testing.ExpectLog` will match
    ``WARNING`` and above regardless of the current logging
    configuration, unless the ``level`` argument is used.
  - `.RequestHandler.get_secure_cookie` is now a deprecated
    alias for `.RequestHandler.get_signed_cookie`.
    `.RequestHandler.set_secure_cookie` is now a deprecated
    alias for `.RequestHandler.set_signed_cookie`.
  - `.RequestHandler.clear_all_cookies` is
    deprecated. No direct replacement is provided;
    `.RequestHandler.clear_cookie` should be used on individual
    cookies.
  - Calling the `.IOLoop` constructor without a
    ``make_current`` argument, which was deprecated in Tornado
    6.2, is no longer deprecated.
  - `.AsyncTestCase` and `.AsyncHTTPTestCase`, which were
    deprecated in Tornado 6.2, are no longer deprecated.
  - `.AsyncTestCase.get_new_ioloop` is deprecated.
  - ``tornado.auth``
  - New method `.GoogleOAuth2Mixin.get_google_oauth_settings`
    can now be overridden to get credentials from a source
    other than the `.Application` settings.
  - ``tornado.gen``
  - `contextvars` now work properly when a ``@gen.coroutine``
    calls a native coroutine.
  - ``tornado.options``
  - `~.OptionParser.parse_config_file` now recognizes single
    comma-separated strings (in addition to lists of strings)
    for options with ``multiple=True``.
  - ``tornado.web``
  - New `.Application` setting ``xsrf_cookie_name`` can be used
    to change the name of the XSRF cookie. This is most useful
    to take advantage of the ``__Host-`` cookie prefix.
  - `.RequestHandler.get_secure_cookie` and
    `.RequestHandler.set_secure_cookie` (and related
    methods and attributes) have been renamed
    to `~.RequestHandler.get_signed_cookie` and
    `~.RequestHandler.set_signed_cookie`.  This makes it
    more explicit what kind of security is provided, and
    avoids confusion with the ``Secure`` cookie attribute
    and ``__Secure-`` cookie prefix.  The old names remain
    supported as deprecated aliases.
  - `.RequestHandler.clear_cookie` now accepts all keyword
    arguments accepted by `~.RequestHandler.set_cookie`. In
    some cases clearing a cookie requires certain arguments to
    be passed the same way in which it was set.
  - `.RequestHandler.clear_all_cookies` now accepts
    additional keyword arguments for the same reason as
    ``clear_cookie``. However, since the requirements for
    additional arguments mean that it cannot reliably clear all
    cookies, this method is now deprecated.
  - ``tornado.websocket``
  - It is now much faster (no longer quadratic) to receive
    large messages that have been split into many fragments.
  - `.websocket_connect` now accepts a ``resolver`` parameter.
  - ``tornado.wsgi``
  - `.WSGIContainer` now accepts an ``executor`` parameter
    which can be used to run the WSGI application on a thread
    pool.
  - What's new in Tornado 6.2.0
  - Deprecation notice
  - Python 3.10 has begun the process of significant changes
    to the APIs for managing the event loop. Calls to
    methods such as `asyncio.get_event_loop` may now raise
    `DeprecationWarning` if no event loop is running. This
    has significant impact on the patterns for initializing
    applications, and in particular invalidates patterns that
    have long been the norm in Tornado's documentation and
    actual usage. In the future (with some as-yet-unspecified
    future version of Python), the old APIs will be
    removed. The new recommended pattern is to start the event
    loop with `asyncio.run`. More detailed migration guides
    will be coming in the future.
  - The `.IOLoop` constructor is deprecated unless
    the ``make_current=False`` argument is used. Use
    `.IOLoop.current` when the loop is already running
    instead.
  - `.AsyncTestCase` (and `.AsyncHTTPTestCase`) are
    deprecated. Use `unittest.IsolatedAsyncioTestCase`
    instead.
  - Multi-process `.TCPServer.bind`/`.TCPServer.start`
    is deprecated. See `.TCPServer` docs for supported
    alternatives.
  - `.AnyThreadEventLoopPolicy` is deprecated. This class
    controls the creation of the "current" event loop so it
    will be removed when that concept is no longer supported.
  - `.IOLoop.make_current` and `.IOLoop.clear_current` are
    deprecated. In the future the concept of a "current"
    event loop as distinct from one that is currently running
    will be removed.
  - ``TwistedResolver`` and ``CaresResolver`` are deprecated
    and will be removed in Tornado 7.0.
  - General changes
  - The minimum supported Python version is now 3.7.
  - Wheels are now published with the Python stable ABI
    (``abi3``) for compatibility across versions of Python.
  - SSL certificate verfication and hostname checks are now
    enabled by default in more places (primarily in client-side
    usage of `.SSLIOStream`).
  - Various improvements to type hints throughout the package.
  - CI has moved from Travis and Appveyor to Github Actions.
  - `tornado.gen`
  - Fixed a bug in which ``WaitIterator.current_index`` could
    be incorrect.
  - ``tornado.gen.TimeoutError``` is now an alias for
    `asyncio.TimeoutError`.
  - `tornado.http1connection`
  - ``max_body_size`` may now be set to zero to disallow a
    non-empty body.
  - ``Content-Encoding: gzip`` is now recognized
    case-insensitively.
  - `tornado.httpclient`
  - ``curl_httpclient`` now supports non-ASCII (ISO-8859-1)
    header values, same as ``simple_httpclient``.
  - `tornado.ioloop`
  - `.PeriodicCallback` now understands coroutines and will not
    start multiple copies if a previous invocation runs too
    long.
  - `.PeriodicCallback` now accepts `datetime.timedelta`
    objects in addition to numbers of milliseconds.
  - Avoid logging "Event loop is closed" during
    shutdown-related race conditions.
  - Tornado no longer calls `logging.basicConfig` when starting
    an IOLoop; this has been unnecessary since Python 3.2 added
    a logger of last resort.
  - The `.IOLoop` constructor now accepts an ``asyncio_loop``
    keyword argument to initialize with a specfied asyncio
    event loop.
  - It is now possible to construct an `.IOLoop` on one thread
    (with ``make_current=False``) and start it on a different
    thread.
  - `tornado.iostream`
  - `.SSLIOStream` now supports reading more than 2GB at a
    time.
  - ``IOStream.write`` now supports typed `memoryview` objects.
  - `tornado.locale`
  - `.load_gettext_translations` no longer logs errors when
    language directories exist but do not contain the expected
    file.
  - `tornado.netutil`
  - `.is_valid_ip` no longer raises exceptions when the input
    is too long.
  - The default resolver now uses the same methods (and thread
    pool) as `asyncio`.
  - `tornado.tcpserver`
  - `.TCPServer.listen` now supports more arguments to pass
    through to `.netutil.bind_sockets`.
  - `tornado.testing`
  - `.bind_unused_port` now takes an optional ``address``
    argument.
  - Wrapped test methods now include the ``__wrapped__``
    attribute.
  - `tornado.web`
  - When using a custom `.StaticFileHandler` subclass, the
    ``reset()`` method is now called on this subclass instead
    of the base class.
  - Improved handling of the ``Accept-Language`` header.
  - `.Application.listen` now supports more arguments to pass
    through to `.netutil.bind_sockets`.
  - `tornado.websocket`
  - `.WebSocketClientConnection.write_message` now
    accepts `dict` arguments for consistency with
    `.WebSocketHandler.write_message`.
  - `.WebSocketClientConnection.write_message` now raises
    an exception as documented if the connection is already
    closed.
- Gave rpmlint a hug
- Remove upstreamed ignore-py310-deprecation-warnings.patch</changelog>
  <changelog author="mmachova@suse.com" date="1695297600">- Update to 6.3.3
  * The Content-Length header and chunked Transfer-Encoding sizes
    are now parsed more strictly (according to the relevant RFCs)
    to avoid potential request-smuggling vulnerabilities when
    deployed behind certain proxies.
- Add py312-datetime.patch to fix build with Python 3.12</changelog>
  <changelog author="dmueller@suse.com" date="1704283200">- update to 6.4:
  * https://www.tornadoweb.org/en/stable/releases/v6.4.0.html
  * Python 3.12 is now supported.
- drop py312-datetime.patch (upstream)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704974400">- Add patch openssl-3.2.patch gh#tornadoweb/tornado#3355</changelog>
  <changelog author="steven.kowalik@suse.com" date="1732708800">- Add patch CVE-2024-52804-avoid-quadratic-cookie-parsing.patch:
  * Avoid quadratic performance of cookie parsing.
    (CVE-2024-52804, bsc#1233668)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1748260800">- Add patch CVE-2025-47287.patch:
  * httputil: Raise errors instead of logging in multipart/form-data parsing
    (CVE-2025-47287, bsc#1243268, gh#tornadoweb/tornado#3497)</changelog>
  <changelog author="nico.krapp@suse.com" date="1765800000">- Add security patches:
  * CVE-2025-67724.patch (bsc#1254903)
  * CVE-2025-67725.patch (bsc#1254905)
  * CVE-2025-67726.patch (bsc#1254904)</changelog>
  <changelog author="nico.krapp@suse.com" date="1773748800">- CVE-2026-31958: parsing large multipart bodies with many parts can cause a
  denial of service (bsc#1259553)
  * added CVE-2026-31958.patch
- VUL-0: incomplete validation of cookie attributes allows for injection of
  user-controlled values in other cookie attributes (bsc#1259630)
  * added VUL-0-cookie-attribute-validation.patch</changelog>
</package>
<package pkgid="d2910eb6efff8ea45fb2f8e9ac11408c664b89786370870192a94f4851f09bb224769b9a46f1bdd3c7d33266f8efc4c9cc94c4eccec5fef09fa2197b7345d57f" name="qemu-arm-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="db5f621b9b991c049af7b6b3aab4569225505241f1d985f43ef6d9e18fbe9318ba9d1c12877ed5d0568192aceda8ce7a33226129103cfc7c64ce9523c263ace0" name="qemu-audio-spice-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="05ddec50e0e37896babb68af553bcf09b5f2834c99bed5b2abd8f0b5547b604fec63a38c9f51719a923cda86060f0246a1e510784084fdd710c519e4ae021873" name="qemu-block-curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="b018fcaad79415419ac89fd934497328f512ec71095879bb833243e5276d69a9c89201e4a2596e25b5a4bf6c85765428280602828ae6cd6179307d19efeb4cb2" name="qemu-block-iscsi-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="94e7ab787972a9a468459ee5a091f694dac862501e78a40cc4afdde3b816f16205573e2e34bcc09a78342a6ce8d870cfd6c6971d59b9453f690f64b6dae18190" name="qemu-block-nfs-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="39f51f1b1b0e3d05b32c3d4820bd807f6894495044bfe09ade287aad852145ecd5a8f666129fb4a7647d55ec75c28faf655a4367b43d92f9460c55a1a90d041e" name="qemu-block-rbd-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="f8f05cefae59403659468f8b92d14cfd7d88d4d8dc39650b91511df2224541aeb93676c22ef5e27dd13849dbffbc98792d0305b250dce3d76e583d38c1a568cc" name="qemu-block-ssh-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="7aa522742839c49f50fb1a28993b7ae59c6640a0f329973ea96b4a92e9c47cef463afb605780c2bb0e3f06b9d64d4a47da9025acb426041f718db8d5f7a5ebba" name="qemu-chardev-spice-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="3159b60d02f9fbb026981a17977919405d6c25264584fa84ef59cf4c200bafc56abcdefe443509b0513b49518144ef342617d5ead5c7f4c46cd7e1cb87f39df3" name="qemu-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="5c7df1c9edf13eff7bf1e2e44943e3222d8d24cf0eb20b43106088e2a0fa18e1f19d92596ef2cc88f25fe61e768751c757229b1a89c340b7bf94a72e946c5fc5" name="qemu-debugsource" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="649c167895ac9074c584eb0c0b3d98aee9c1e504356baa83f038bc17048580c659ccf9d3504627b72d97723857032570ec817e1ad1e976ab1e68e998a8337f13" name="qemu-guest-agent-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="5858d722c5358176e94736d9b4aca90aaf324edad5cf8de39a36e9f5955406c2d20a0c809015b98eea8d1c7e16fde9418915f00236d1423911ca306303c32b21" name="qemu-hw-display-qxl-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="bdf43111b12ff0064ff2b92d37850f47d57602d7edab7d91c3b7fc7692572639e8bf15e07f12afcc17b8e0ad57b0f6ec71d8bfb61dcedd732697cc3c8c849daa" name="qemu-hw-display-virtio-gpu-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="2afa6d1c57989ca745a7ef1270d671796a3f280252a8e81456a8e34be455c872d8427db487ebbf57ad3eae7df979e6112332d89d6fcb8a6102757143701ccb22" name="qemu-hw-display-virtio-gpu-pci-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="ba55bd32fdbfef1f0260a6fd5456365c9bc3a4cac94d69520ac6c4a39effa75459080cff056d5d1019fb1fc75ca18c4a4da8d6e31a3c13faa4f9db19b4ff5839" name="qemu-hw-display-virtio-vga-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="ab15d4ad8c248f5f58afd9d7d85332164b218c44570bad6ed4f5295e01d428773cee041086979035b12087f24542e411b77ed1f56b43f47a4bd6514882e34d8e" name="qemu-hw-usb-host-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="4970ba628927f4500162ffe4afaddcb1d7d02a6afecfa3915f865a10e2c65e9e0f0921917cf37b9e460886e62e7cdf25ea4ea868e1a9a7769b0f3baa4b7e4e7b" name="qemu-hw-usb-redirect-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="41da4944158e4cac17a423be4022a2fd3e8b3d55a44fe122717ccfa0ec13c9237eb8f4e6e35fc387846bf60cd6621b7eabeb9fb3458cd9673ec33ecb4a409f8c" name="qemu-img-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="7520d9bb3926d8e8783f2750e4c01aeb535519b331a0aa5db28230a99b5349ab8f78047f4ea186ea4b976503304fc416a8fcd1ebfc9fe16d5df0fc9633ea8792" name="qemu-pr-helper-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="9bd15004319636157a7d0e059829964b55afcf87f170df609619f97ab3352db3a749e5fe757f4b61318cce178c0614eb52f62c9c6b07c0de491d55d977faebb2" name="qemu-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="36d16433f9106982b5e037c9aaea21b6cd182fe3728dd0aa4143aaeb5e807ff90d922e556a16766fef4ea833c18be5f432c51ee1751a93ee14b8533fbfff99ef" name="qemu-ui-opengl-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="d5f1397c3a4c4315dd8da61d406899b4e1c4bca2f20dc583b48b58b4ed758d8322708737dfd2185ee9f353266ca16aa78d6b7a89263ec3721844a9484e6f830e" name="qemu-ui-spice-core-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.2.10" rel="slfo.1.1_4.1"/>
  <changelog author="dfaggioli@suse.com" date="1742817600">- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)</changelog>
  <changelog author="dfaggioli@suse.com" date="1749816000">- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...</changelog>
  <changelog author="dfaggioli@suse.com" date="1750248000">- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)</changelog>
  <changelog author="dfaggioli@suse.com" date="1753185600">- Fix bsc#1246566:
  * [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566)</changelog>
  <changelog author="dfaggioli@suse.com" date="1760097600">- fix bsc#1230042:
  * .gitmodules: move u-boot mirrors to qemu-project-mirrors
  * [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)</changelog>
  <changelog author="dfaggioli@suse.com" date="1763035200">- Bugfixes:
  * io: fix use after free in websocket handshake code (bsc#1250984, CVE-2025-11234)
  * io: move websock resource release to close method (bsc#1250984, CVE-2025-11234)
  * io: release active GSource in TLS channel finalizer (bsc#1250984, CVE-2025-11234)
  * block/curl: fix curl internal handles handling (bsc#1252768, CVE-2025-11234)</changelog>
  <changelog author="dfaggioli@suse.com" date="1765886400">- Bug and CVE fixes:
  * [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286)
  * net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002, CVE-2025-12464)</changelog>
  <changelog author="dfaggioli@suse.com" date="1766059200">- We *always* want a display driver in x86 too:
  * [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too</changelog>
  <changelog author="dfaggioli@suse.com" date="1766404800">- More spec file cleanup:
  * [openSUSE][RPM} spec: delete old specfile constructs</changelog>
  <changelog author="dfaggioli@suse.com" date="1772020800">- Bug and CVE fixes:
  * cryptodev-builtin: Limit the maximum size (bsc#1255400, CVE-2025-14876)
  * hw/virtio/virtio-crypto: verify asym request size (bsc#1255400, CVE-2025-14876)
  * hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (bsc#1256484, CVE-2026-0665)</changelog>
</package>
<package pkgid="7624d122a3f807b2d11f52e955a83fa2e993a9d2ca9dc46a066d08e647a6290e3e727daa110f819a40ac494b929f0353605bc988c20b6bd3325ee22c2a7a2602" name="qrencode-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.1" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1360929600">- build also against libpng16
  * libpng16.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1374840000">- Update to 3.4.2:
  * Memory leak bug has been fixed.
  * Micro QR Code encoding bug has been fixed.
  * String splitting has been improved.
- Removed qrencode-libpng16.patch (fixed upstream).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1384603200">- Update to 3.4.3:
  * New option "--rle" has been added to the command line tool.
  * Bug fixes in the library and command line tool.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf, needed for kdebase4-workspace-libs-32bit</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1412337600">- Update to 3.4.4
  * Bugfix release. See the changelog file for the list of changes.
  * New option "--verbose" has been added to the command line tool.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to github as an url so people can see the progress
  * web is not really up-to-date
- Remove compat support for sle11</changelog>
  <changelog author="christophe@krop.fr" date="1516795200">- Update to 4.0.0
  * EPS output now supports foreground and background color
  * XPM and PNG32 support added
  * CMake support added
  * Various bugs and performance fixes
- Add qrencode-fix-installation.patch. Fixes installation for x86_64
  targets.</changelog>
  <changelog author="aloisio@gmx.com" date="1567771200">- Update to version 4.0.2
  * Build script fixes. (Thanks to @mgorny)
  version 4.0.1
  * CMake support improved.
  * New test scripts have been added.
  * Some compile time warnings have been fixed.
- Refreshed qrencode-fix-installation.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599912000">- update to 4.1.0:
  * Command line tool "qrencode" has been improved:
  * New option "--inline" has been added. (Thanks to @jp-bennett)
  * New option "--strict-version" has been added.
  * UTF8 mode now supports ANSI256 color. (Thanks to András Veres-
    Szentkirályi)
  * Micro QR Code no longer requires to specify the version number.
  * 'make check' allows to run the test programs. (Thanks to Jan Tojnar)
  * Some compile time warnings have been fixed.
  * Various CMake support improvements. (Thanks to @mgorny and @sdf5)
  * Some minor bug fixes. (Thanks to Lonnie Abelbeck and Frédéric Wang)
  * Some documentation/manpage improvements. (Thanks to Dan Jacobson)
  * Some performance improvements. (Thanks to @4061N and Mika Lindqvist)
- remove qrencode-fix-installation.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1602763200">- update to 4.1.1:
  * Some minor bugs in Micro QR Code generation have been fixed.
  * The data capacity calculations are now correct. These bugs probably did not
    affect the Micro QR Code generation.</changelog>
</package>
<package pkgid="6819fe5cf9ef0e80b616f6ceafe808e99fdebca0a88b12bee29786eefa1ccad50afa1b5189c0c0780003d0747ad331e99e173ad9a8787558e717ac6612754cda" name="qrencode-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1.1" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1360929600">- build also against libpng16
  * libpng16.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1374840000">- Update to 3.4.2:
  * Memory leak bug has been fixed.
  * Micro QR Code encoding bug has been fixed.
  * String splitting has been improved.
- Removed qrencode-libpng16.patch (fixed upstream).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1384603200">- Update to 3.4.3:
  * New option "--rle" has been added to the command line tool.
  * Bug fixes in the library and command line tool.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf, needed for kdebase4-workspace-libs-32bit</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1412337600">- Update to 3.4.4
  * Bugfix release. See the changelog file for the list of changes.
  * New option "--verbose" has been added to the command line tool.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to github as an url so people can see the progress
  * web is not really up-to-date
- Remove compat support for sle11</changelog>
  <changelog author="christophe@krop.fr" date="1516795200">- Update to 4.0.0
  * EPS output now supports foreground and background color
  * XPM and PNG32 support added
  * CMake support added
  * Various bugs and performance fixes
- Add qrencode-fix-installation.patch. Fixes installation for x86_64
  targets.</changelog>
  <changelog author="aloisio@gmx.com" date="1567771200">- Update to version 4.0.2
  * Build script fixes. (Thanks to @mgorny)
  version 4.0.1
  * CMake support improved.
  * New test scripts have been added.
  * Some compile time warnings have been fixed.
- Refreshed qrencode-fix-installation.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599912000">- update to 4.1.0:
  * Command line tool "qrencode" has been improved:
  * New option "--inline" has been added. (Thanks to @jp-bennett)
  * New option "--strict-version" has been added.
  * UTF8 mode now supports ANSI256 color. (Thanks to András Veres-
    Szentkirályi)
  * Micro QR Code no longer requires to specify the version number.
  * 'make check' allows to run the test programs. (Thanks to Jan Tojnar)
  * Some compile time warnings have been fixed.
  * Various CMake support improvements. (Thanks to @mgorny and @sdf5)
  * Some minor bug fixes. (Thanks to Lonnie Abelbeck and Frédéric Wang)
  * Some documentation/manpage improvements. (Thanks to Dan Jacobson)
  * Some performance improvements. (Thanks to @4061N and Mika Lindqvist)
- remove qrencode-fix-installation.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1602763200">- update to 4.1.1:
  * Some minor bugs in Micro QR Code generation have been fixed.
  * The data capacity calculations are now correct. These bugs probably did not
    affect the Micro QR Code generation.</changelog>
</package>
<package pkgid="899a97bd3f210035016a0144634658ca6caff963571f38204516303a73048f65aef83069769f5f1a020d01748297914e3bde9944618db26ec181daeb4b134d5b" name="rdma-core-debuginfo" arch="aarch64">
  <version epoch="0" ver="49.1" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
</package>
<package pkgid="7f0fac9a8d4bee9b9ed01960e49d2a2f537fc7ee2e8eb93140cbf2718a471fc778df33b3fd59ae05d934a7ee7bd77ec78e7b0aebc98ce291d3a330691b8b52e3" name="rdma-core-debugsource" arch="aarch64">
  <version epoch="0" ver="49.1" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
</package>
<package pkgid="b4700224768df5eab40c685c360c26ee3e3fdc11b98aa8903996e852bb4d43d7b1832200aef9c4c182d16914b367902fe731053fbe6e920c526fe2dc45ecc39a" name="readline-debugsource" arch="aarch64">
  <version epoch="0" ver="8.2" rel="slfo.1.1_1.4"/>
  <changelog author="werner@suse.de" date="1610366400">- Update to final readline-8.1
  which is mainly rc3
- Remove obsolate patches and the signatures
  * readline80-001
  * readline80-001.sig
  * readline80-002
  * readline80-002.sig
  * readline80-003
  * readline80-003.sig
  * readline80-004
  * readline80-004.sig
- Port patches
  * readline-5.2-conf.patch
  * readline-6.2-metamode.patch
  * readline-6.3-destdir.patch
  * readline-6.3-input.dif
  * readline-6.3-rltrace.patch
  * readline-7.0-screen.patch
- Port and rename patch readline-8.0.dif which is now readline-8.1.dif</changelog>
  <changelog author="werner@suse.de" date="1620216000">- Add official patch readline81-001 and its signature
  * The code to check readline versions in an inputrc file had the sense of the
    comparisons reversed.</changelog>
  <changelog author="werner@suse.de" date="1642161600">- Add official patch readline81-002 and its signature
  * There are some characters (e.g., cyrillic) that can't be displayed using
    certain single-byte encodings (e.g., cp1251) because the negative signed
    int is interpreted as EOF and not displayed.</changelog>
  <changelog author="werner@suse.de" date="1651147200">- Update to readline-8.2-beta
  a. There is now an HS_HISTORY_VERSION containing the version number of the
    history library for applications to use.
  b. History expansion better understands multiple history expansions that may
    contain strings that would ordinarily inhibit history expansion (e.g.,
    `abc!$!$').
  c. There is a new framework for readline timeouts, including new public
    functions to set timeouts and query how much time is remaining before a
    timeout hits, and a hook function that can trigger when readline times
    out. There is a new state value to indicate a timeout.
  d. Automatically bind termcap key sequences for page-up and page-down to
    history-search-backward and history-search-forward, respectively.
  e. There is a new `fetch-history' bindable command that retrieves the history
    entry corresponding to its numeric argument. Negative arguments count back
    from the end of the history.
  f. `vi-undo' is now a bindable command.
  g. There is a new option: `enable-active-region'. This separates control of
    the active region and bracketed-paste. It has the same default value as
    bracketed-paste, and enabling bracketed paste enables the active region.
    Users can now turn off the active region while leaving bracketed paste
    enabled.
  h. rl_completer_word_break_characters is now `const char *' like
    rl_basic_word_break_characters.
  i. Readline looks in $LS_COLORS for a custom filename extension
    (*.readline-colored-completion-prefix) and uses that as the default color
    for the common prefix displayed when `colored-completion-prefix' is set.
  j. Two new bindable string variables: active-region-start-color and
    active-region-end-color. The first sets the color used to display the
    active region; the second turns it off. If set, these are used in place
    of terminal standout mode.
  k. New readline state (RL_STATE_EOF) and application-visible variable
    (rl_eof_found) to allow applications to detect when readline reads EOF
    before calling the deprep-terminal hook.
  l. There is a new configuration option: --with-shared-termcap-library, which
    forces linking the shared readline library with the shared termcap (or
    curses/ncurses/termlib) library so applications don't have to do it.
- Remove upstream patches and their signatures now obsolete
  * readline81-001
  * readline81-001.sig
  * readline81-002
  * readline81-002.sig
- Port patches
  * readline-5.2-conf.patch
  * readline-6.2-metamode.patch
  * readline-6.2-xmalloc.dif
  * readline-6.3-input.dif
  * readline-6.3-rltrace.patch
  * readline-7.0-screen.patch
- Port patch readline-8.1.dif and rename it to readline-8.2.dif</changelog>
  <changelog author="werner@suse.de" date="1655899200">- use https:// for source urls
- Update to readline-8.2-rc1</changelog>
  <changelog author="werner@suse.de" date="1658923200">- Update to readline-8.2-rc2</changelog>
  <changelog author="werner@suse.de" date="1663070400">- Update to readline-8.2-rc4
  m. Readline now checks for changes to locale settings (LC_ALL/LC_CTYPE/LANG)
    each time it is called, and modifies the appropriate locale-specific display
    and key binding variables when the locale changes.
- Port patch readline-8.2.dif</changelog>
  <changelog author="werner@suse.de" date="1664280000">- Update to final readline-8.2
  r. When replacing a history entry, make sure the existing entry has a non-NULL
    timestamp before copying it; it may have been added by the application, not
    the history library.</changelog>
  <changelog author="werner@suse.de" date="1665057600">- Add patch readline82-001 and its signing readline82-001
  * Starting a readline application with an invalid locale
    specification for LC_ALL/LANG/LC_CTYPE can cause it crash on
    the first call to readline.</changelog>
  <changelog author="werner@suse.de" date="1666353600">- Extend version linker map file to detect usage of new symbols (boo#1204336)</changelog>
</package>
<package pkgid="5b6dc6b308f9fc4204cf3b152e7b0fa305800a3be1b1d6a4e674558b567a6471d80771fafb0995003a674b4e1c003c30347213951d0366ff1ca4cf8f81da6c55" name="rebootmgr-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4+git20240524.30e5383" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.com" date="1593604800">- Update to version 1.3
  - Fix documentation of is-active return  value [bsc#1173484]
  - Fix crash if rebootmgrd is already running
  - Fix systemctl restart; also removes KillMode=none from systemd
    service file [bsc#1186510]</changelog>
  <changelog author="kukuk@suse.com" date="1615377600">- Update to version 1.3.1
  - Move all dbus config files to /usr/share/dbus-1</changelog>
  <changelog author="kukuk@suse.com" date="1666785600">- Update to version 2.0
  - Remove outdated etcd code
  - Fix issue#10:
    Reboots happen at the first moment of the maintenance window</changelog>
  <changelog author="avinesh.kumar@suse.com" date="1691755200">- Typo fix in spec description</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- Update to version 2.1
  - Support systemctl soft-reboot (systemd &gt;= v254)</changelog>
  <changelog author="kukuk@suse.com" date="1707307200">- Update to version 2.2
  - Make sure /run/reboot-needed get's deleted after a soft-reboot</changelog>
  <changelog author="kukuk@suse.com" date="1709899200">- Update to version 2.3
  - rebootmgrd: add verbose mode
  - Enable verbose mode in rebootmgr.service by default</changelog>
  <changelog author="kukuk@suse.com" date="1710504000">- Update to version 2.4
  - Make sure systemctl reboot will not switch to soft-reboot
    automatically</changelog>
  <changelog author="kukuk@suse.com" date="1714737600">- Remove rcrebootmgr symlink
- Update to version 2.4+git20240503.5b98913:
  * Don't generate html documentation anymore
  * Fix manual page dependencies for parallel build
  * Update configure.ac
  * Fix soft-reboot detection in forced mode</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Update to version 2.4+git20240524.30e5383:
  * Move tmpfiles.d/soft-reboot-cleanup.conf to aaa_base</changelog>
</package>
<package pkgid="cad7453c7ff27db8aba18ee35a8eaede4fac735f4ce279ffb7379d87ef6dbb290ae1eb02197552b4afdb6b2bbc887c1050acded91a83fcde72c4beb6a73a5d62" name="rebootmgr-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4+git20240524.30e5383" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.com" date="1593604800">- Update to version 1.3
  - Fix documentation of is-active return  value [bsc#1173484]
  - Fix crash if rebootmgrd is already running
  - Fix systemctl restart; also removes KillMode=none from systemd
    service file [bsc#1186510]</changelog>
  <changelog author="kukuk@suse.com" date="1615377600">- Update to version 1.3.1
  - Move all dbus config files to /usr/share/dbus-1</changelog>
  <changelog author="kukuk@suse.com" date="1666785600">- Update to version 2.0
  - Remove outdated etcd code
  - Fix issue#10:
    Reboots happen at the first moment of the maintenance window</changelog>
  <changelog author="avinesh.kumar@suse.com" date="1691755200">- Typo fix in spec description</changelog>
  <changelog author="kukuk@suse.com" date="1692360000">- Update to version 2.1
  - Support systemctl soft-reboot (systemd &gt;= v254)</changelog>
  <changelog author="kukuk@suse.com" date="1707307200">- Update to version 2.2
  - Make sure /run/reboot-needed get's deleted after a soft-reboot</changelog>
  <changelog author="kukuk@suse.com" date="1709899200">- Update to version 2.3
  - rebootmgrd: add verbose mode
  - Enable verbose mode in rebootmgr.service by default</changelog>
  <changelog author="kukuk@suse.com" date="1710504000">- Update to version 2.4
  - Make sure systemctl reboot will not switch to soft-reboot
    automatically</changelog>
  <changelog author="kukuk@suse.com" date="1714737600">- Remove rcrebootmgr symlink
- Update to version 2.4+git20240503.5b98913:
  * Don't generate html documentation anymore
  * Fix manual page dependencies for parallel build
  * Update configure.ac
  * Fix soft-reboot detection in forced mode</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Update to version 2.4+git20240524.30e5383:
  * Move tmpfiles.d/soft-reboot-cleanup.conf to aaa_base</changelog>
</package>
<package pkgid="bb9acd0823280e9079882315d30deed89d27296bd9df467bde9840d3697346ed363d16271dbe39bfd876ae7e3b0b8429c7e849cef9df782d7f6f55324ae1af33" name="restorecond-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1588852800">- %{_libexecdir} now expands to /usr/libexec, so do not use it
  where /usr/lib was intended</changelog>
  <changelog author="jsegitz@suse.de" date="1589284800">- Use %{_unitdir} for the location of the .service file</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * `restorecond_user.service` - new systemd user service which runs
    `restorecond -u`</changelog>
  <changelog author="jsegitz@suse.com" date="1594814400">- Use proper macros for SYSTEMDSYSTEMUNITDIR and SYSTEMDUSERUNITDIR</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * Fix a double-close of a file descriptor</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * No user visible changes</changelog>
  <changelog author="jsegitz@suse.com" date="1636977600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_restorecond.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1638446400">- Claim ownership for %{_sysconfdir}/selinux</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * Support parallel relabeling</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * Code improvements, no user visible changes
- Added additional developer key (Jason Zaman)</changelog>
</package>
<package pkgid="5065d38cea2b4e940566921d00d25fbe9cb99595ed1779ad757ef5f977a90cebc876fbdeb2024e847e837f3878085ea5981cc1f0fe6e4943325e878a4f61482a" name="restorecond-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.2"/>
  <changelog author="pgajdos@suse.com" date="1588852800">- %{_libexecdir} now expands to /usr/libexec, so do not use it
  where /usr/lib was intended</changelog>
  <changelog author="jsegitz@suse.de" date="1589284800">- Use %{_unitdir} for the location of the .service file</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * `restorecond_user.service` - new systemd user service which runs
    `restorecond -u`</changelog>
  <changelog author="jsegitz@suse.com" date="1594814400">- Use proper macros for SYSTEMDSYSTEMUNITDIR and SYSTEMDUSERUNITDIR</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * Fix a double-close of a file descriptor</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * No user visible changes</changelog>
  <changelog author="jsegitz@suse.com" date="1636977600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_restorecond.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1638446400">- Claim ownership for %{_sysconfdir}/selinux</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * Support parallel relabeling</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * Code improvements, no user visible changes
- Added additional developer key (Jason Zaman)</changelog>
</package>
<package pkgid="01fc87b223ad8768cd4092072a1c5f0643539de5b120f63d68c7486c55743f488ef6d647a2252eeb8de40f2d0938ed1f4a3b69c8fcbf5a145dea4b7ccf516953" name="rootlesskit-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.0" rel="slfo.1.1_1.2"/>
  <changelog author="rbrown@suse.com" date="1637668800">- Initial Packaging</changelog>
  <changelog author="rpm@fthiessen.de" date="1650628800">- Update to version 1.0.0:
  * use Go 1.18
  * updated some dependencies</changelog>
  <changelog author="andrea.manzini@suse.com" date="1671883200">- Update to version 1.1.0:
  * Support using /usr/bin/getsubids (`--subid-source=dynamic`)
    Useful for SSSD environments (subid: sss in /etc/nsswitch.conf)
    Full changes: https://github.com/rootless-containers/rootlesskit/milestone/3?closed=1
- bump vendor dependencies</changelog>
  <changelog author="tamuratak.9876@gmail.com" date="1675598400">- Install rootlesskit-docker-proxy</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Update to version 1.1.1:
  * v1.1.1
  * Bump up deps
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.25.4 to 2.25.5
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.25.3 to 2.25.4
  * Remove duplicate id ranges returned by getsubu/gid for username/uid
  * Build(deps): Bump github.com/sirupsen/logrus from 1.9.1 to 1.9.2
  * Build(deps): Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.1
  * Build(deps): Bump golang.org/x/sys from 0.7.0 to 0.8.0
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.25.1 to 2.25.3
  * Build(deps): Bump golang.org/x/sys from 0.6.0 to 0.7.0
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.25.0 to 2.25.1
  * Build(deps): Bump golang.org/x/sys from 0.5.0 to 0.6.0
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.24.4 to 2.25.0
  * Build(deps): Bump golang.org/x/net from 0.1.0 to 0.7.0
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.24.3 to 2.24.4
  * CI: update Docker to v23.0.0
  * Build(deps): Bump golang.org/x/sys from 0.4.0 to 0.5.0
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.24.2 to 2.24.3
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.24.1 to 2.24.2
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.23.7 to 2.24.1
  * CI: update Docker to v23.0.0-rc.1
  * Bump github.com/urfave/cli/v2 from 2.23.6 to 2.23.7
  * Bump golang.org/x/sys from 0.3.0 to 0.4.0
  * Bump github.com/urfave/cli/v2 from 2.23.5 to 2.23.6
  * Bump golang.org/x/sys from 0.2.0 to 0.3.0
  * v1.1.0+dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1696939200">- Bump go version to 1.21 (bsc#1215611)</changelog>
  <changelog author="danish.prakash@suse.com" date="1706011200">- Update to version 2.0.0:
  * v2.0.0
  * v2.0.0-beta.0+dev
  * v2.0.0-beta.0
  * CI: update Docker to v24.0.7
  * CI: update pasta (2023_12_30.f091893)
  * Write `$ROOTLESSKIT_STATE_DIR/resolv.conf`
  * Build(deps): Bump golang.org/x/sys from 0.15.0 to 0.16.0
  * fix typo
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.26.0 to 2.27.1
  * Build(deps): Bump github.com/google/uuid from 1.4.0 to 1.5.0
  * Build(deps): Bump github.com/containernetworking/plugins
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.25.7 to 2.26.0
  * v2.0.0-alpha.2+dev
  * v2.0.0-alpha.2
  * CI: update pasta (2023_12_04.b86afe3)
  * pasta: add debug logs
  * Build(deps): Bump golang.org/x/sys from 0.14.0 to 0.15.0
  * Build(deps): Bump github.com/moby/sys/mountinfo from 0.6.2 to 0.7.1
  * Build(deps): Bump github.com/gorilla/mux from 1.8.0 to 1.8.1
  * Build(deps): Bump golang.org/x/sys from 0.13.0 to 0.14.0
  * Build(deps): Bump github.com/google/uuid from 1.3.1 to 1.4.0
  * Build(deps): Bump golang.org/x/net from 0.10.0 to 0.17.0
  * v2.0.0-alpha.1+dev
  * v2.0.0-alpha.1
  * release.yaml: migrate from `hub` to `gh`
  * Build(deps): Bump golang.org/x/sys from 0.12.0 to 0.13.0
  * Build(deps): Bump gotest.tools/v3 from 3.5.0 to 3.5.1
  * Build(deps): Bump golang.org/x/sys from 0.11.0 to 0.12.0
  * Build(deps): Bump github.com/google/uuid from 1.3.0 to 1.3.1
  * lxc-user-nic: support detach-netns
  * Build(deps): Bump golang.org/x/sys from 0.10.0 to 0.11.0
  * Build(deps): Bump golang.org/x/sys from 0.9.0 to 0.10.0
  * Build(deps): Bump gotest.tools/v3 from 3.4.0 to 3.5.0
  * v2.0.0-alpha.0+dev
  * v2.0.0-alpha.0; add --print-semver=(major|minor|patch)
  * new network driver: `pasta` (with port driver `implicit`)
  * [Carry 362] support detach-netns
  * pkg/port: ChildContext: remove unused PID field
  * cmd/rootlesskit: format logs
  * Refactor parent-child communication (Add message union)
  * Refactor parent-child communication (Remove "stages")
  * pkg/api: split pkg/httputil
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.25.6 to 2.25.7
  * Build(deps): Bump golang.org/x/sys from 0.8.0 to 0.9.0
  * Build(deps): Bump github.com/urfave/cli/v2 from 2.25.5 to 2.25.6
  * Build(deps): Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
  * v1.1.1+dev</changelog>
</package>
<package pkgid="d164478d53a2402d67d919f74bedf2ff05954c9eeabef0e27b7b03622b9e93c2190ad2d0af23ae2944a23c63c2f00e501a9b0f8f502a217e6fc2552305d16e80" name="rp-pppoe-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.0" rel="slfo.1.1_1.2"/>
  <changelog author="ilya@ilya.cf" date="1510228800">- Refresh pppoe.spec via spec-cleaner.</changelog>
  <changelog author="ilya@ilya.cf" date="1511438400">- Add Requires/Requires(pre) group(dialout) (boo#1067511).
- Add %verify_permissions script for pppoe-wrapper.</changelog>
  <changelog author="ilya@ilya.cf" date="1520683200">- Refresh spec-file via spec-cleaner and manual optimisations.
- Add %license macro.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ilya@ilya.cf" date="1560772800">- Refresh spec-file via spec-cleaner and manual optimisations.
  * New URL and Source project.
  * Add pkgconfig for BuildRequires.
- Update rp-pppoe to version 3.13.
  * Fix potential use-after-free bug.
  * Properly detecte kernel-mode PPPoE.</changelog>
  <changelog author="ilya@ilya.cf" date="1590667200">- Refresh spec-file via spec-cleaner and manual optimisations.
  * Add make_build and autopatch macros.
  * Remove group tag and obsoleted conditions.
- Refresh and rename patches:
  * docdir.diff to rp-pppoe-3.14-docdir.patch
  * nonrfc-modems.diff to rp-pppoe-3.14-nonrfc-modems.patch
  * release-buildsystem.diff to rp-pppoe-3.14-release-buildsystem.patch
  * resolve-conf.diff to rp-pppoe-3.14-resolve-conf.patch
  * rp-pppoe-3.10-config.patch to rp-pppoe-3.14-config.patch
  * rp-pppoe-3.10-init.patch to rp-pppoe-3.14-init.patch
  * rp-pppoe-pie.patch to rp-pppoe-3.14-pie.patch
  * strip.diff to rp-pppoe-3.14-strip.patch
- Update to 3.14
  * Add -H and -M options for sending HURL and MOTM packets respectively.
  * Change VERSION macro to RP_VERSION to avoid conflict with pppd macro.</changelog>
  <changelog author="ilya@ilya.cf" date="1620475200">- Refreshed spec-file via spec-cleaner and manual optimisations.
  * Changed files: pppoe-connect, pppoe-setup, pppoe-status and
    pppoe-stop (replaced /var/run by /run).
- Updated to 3.15
  * Don't ignore SIGTERM and SIGINT.
    Send PADT and exit if one of those signals is received.
  * Switch from net-tools to iproute2.</changelog>
  <changelog author="ilya@ilya.cf" date="1646913600">- Removed Wants=network.target from pppoe.service (bsc#1196359).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- Converted usage of egrep to "grep -E" (boo#1203092).</changelog>
  <changelog author="fcrozat@suse.com" date="1684152000">- Updated to 4.0:
  * SPDX-License-Identifier: tags added to most source files
  * rp-pppoe.so plugin: Modified to compile against both pppd &gt;= 2.5.0 and
    pppd &lt; 2.5.0.
  * pppoe-server: If -L or -R option is specified as 0.0.0.0, then IP allocation
    is delegated to pppd.
  * pppoe-server: New -g option specifies the path of the rp-pppoe.so plugin to
    use with pppd in kernel-mode PPPoE.
  * pppoe-server: New -U option specifies a UNIX-domain control socket.  This
    lets you send control commands to the server while it is running; see the
    pppoe-server man page for details.
  * All source code: Many cleanups and use of standard types like uint16_t rather
    than ones we define.
  * All source code: Support for OSes other than Linux has been dropped.
  * Documentation: Updated from modern Linux systems.
  * Cleanup: The following old and obsolete files have been removed:
  - Old connection scripts scripts/pppoe-connect.in, scripts/pppoe-start.in,
    scripts/pppoe-init-suse.in, scripts/pppoe-setup.in, scripts/pppoe-status,
    scripts/pppoe-init.in, and scripts/pppoe-stop.in
  * Obsolete firewall scripts configs/firewall-standalone and
    configs/firewall-masq
  - Obsolete configuration files configs/pppoe.conf and configs/pap-secrets
  - The Tcl/Tk gui script gui/tkpppoe.in and supporting files
  - The RPM spec file rp-pppoe.spec
- Drop rp-pppoe-3.14-nonrfc-modems.patch, rp-pppoe-3.14-resolve-conf.patch,
  rp-pppoe-3.14-config.patch, rp-pppoe-3.14-init.patch,
  patched scripts no longer exists.
- Drop rp-pppoe-3.14-release-buildsystem.patch, rp-pppoe-3.14-pie.patch
  rp-pppoe-3.14-strip.patch, no longer needed.</changelog>
</package>
<package pkgid="56b7dc6859cde4df3f1c084be981b777fb1e4ed06319b2616b5177214ba91f4db49b4f538a7b1bdddba3c9815276770aa1d233a5625a0d5ea766fd9bdb119bc7" name="rp-pppoe-debugsource" arch="aarch64">
  <version epoch="0" ver="4.0" rel="slfo.1.1_1.2"/>
  <changelog author="ilya@ilya.cf" date="1510228800">- Refresh pppoe.spec via spec-cleaner.</changelog>
  <changelog author="ilya@ilya.cf" date="1511438400">- Add Requires/Requires(pre) group(dialout) (boo#1067511).
- Add %verify_permissions script for pppoe-wrapper.</changelog>
  <changelog author="ilya@ilya.cf" date="1520683200">- Refresh spec-file via spec-cleaner and manual optimisations.
- Add %license macro.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ilya@ilya.cf" date="1560772800">- Refresh spec-file via spec-cleaner and manual optimisations.
  * New URL and Source project.
  * Add pkgconfig for BuildRequires.
- Update rp-pppoe to version 3.13.
  * Fix potential use-after-free bug.
  * Properly detecte kernel-mode PPPoE.</changelog>
  <changelog author="ilya@ilya.cf" date="1590667200">- Refresh spec-file via spec-cleaner and manual optimisations.
  * Add make_build and autopatch macros.
  * Remove group tag and obsoleted conditions.
- Refresh and rename patches:
  * docdir.diff to rp-pppoe-3.14-docdir.patch
  * nonrfc-modems.diff to rp-pppoe-3.14-nonrfc-modems.patch
  * release-buildsystem.diff to rp-pppoe-3.14-release-buildsystem.patch
  * resolve-conf.diff to rp-pppoe-3.14-resolve-conf.patch
  * rp-pppoe-3.10-config.patch to rp-pppoe-3.14-config.patch
  * rp-pppoe-3.10-init.patch to rp-pppoe-3.14-init.patch
  * rp-pppoe-pie.patch to rp-pppoe-3.14-pie.patch
  * strip.diff to rp-pppoe-3.14-strip.patch
- Update to 3.14
  * Add -H and -M options for sending HURL and MOTM packets respectively.
  * Change VERSION macro to RP_VERSION to avoid conflict with pppd macro.</changelog>
  <changelog author="ilya@ilya.cf" date="1620475200">- Refreshed spec-file via spec-cleaner and manual optimisations.
  * Changed files: pppoe-connect, pppoe-setup, pppoe-status and
    pppoe-stop (replaced /var/run by /run).
- Updated to 3.15
  * Don't ignore SIGTERM and SIGINT.
    Send PADT and exit if one of those signals is received.
  * Switch from net-tools to iproute2.</changelog>
  <changelog author="ilya@ilya.cf" date="1646913600">- Removed Wants=network.target from pppoe.service (bsc#1196359).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- Converted usage of egrep to "grep -E" (boo#1203092).</changelog>
  <changelog author="fcrozat@suse.com" date="1684152000">- Updated to 4.0:
  * SPDX-License-Identifier: tags added to most source files
  * rp-pppoe.so plugin: Modified to compile against both pppd &gt;= 2.5.0 and
    pppd &lt; 2.5.0.
  * pppoe-server: If -L or -R option is specified as 0.0.0.0, then IP allocation
    is delegated to pppd.
  * pppoe-server: New -g option specifies the path of the rp-pppoe.so plugin to
    use with pppd in kernel-mode PPPoE.
  * pppoe-server: New -U option specifies a UNIX-domain control socket.  This
    lets you send control commands to the server while it is running; see the
    pppoe-server man page for details.
  * All source code: Many cleanups and use of standard types like uint16_t rather
    than ones we define.
  * All source code: Support for OSes other than Linux has been dropped.
  * Documentation: Updated from modern Linux systems.
  * Cleanup: The following old and obsolete files have been removed:
  - Old connection scripts scripts/pppoe-connect.in, scripts/pppoe-start.in,
    scripts/pppoe-init-suse.in, scripts/pppoe-setup.in, scripts/pppoe-status,
    scripts/pppoe-init.in, and scripts/pppoe-stop.in
  * Obsolete firewall scripts configs/firewall-standalone and
    configs/firewall-masq
  - Obsolete configuration files configs/pppoe.conf and configs/pap-secrets
  - The Tcl/Tk gui script gui/tkpppoe.in and supporting files
  - The RPM spec file rp-pppoe.spec
- Drop rp-pppoe-3.14-nonrfc-modems.patch, rp-pppoe-3.14-resolve-conf.patch,
  rp-pppoe-3.14-config.patch, rp-pppoe-3.14-init.patch,
  patched scripts no longer exists.
- Drop rp-pppoe-3.14-release-buildsystem.patch, rp-pppoe-3.14-pie.patch
  rp-pppoe-3.14-strip.patch, no longer needed.</changelog>
</package>
<package pkgid="52b43965455e8e54cda58769df330b64496cf1b43418449468f14ab2579e3aca86b9c19c492acdbe8c3d1f01d4fbf74dd4efca1de968b0b905a38d54ffa1878c" name="rpcbind-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="slfo.1.1_1.2"/>
  <changelog author="Thomas.Blume@suse.com" date="1544616000">- add ordering dependency to rpcbind.service (bsc#1117217)
  * modify 0001-systemd-unit-files.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1560340800">- change rpcbind locking path from /var/run/rpcbind.lock to
  /run/rpcbind.lock (bsc#1134659)
  add 0001-change-lockingdir-to-run.patch
- change the order of socket/service in the %postun scriptlet to
  avoid an error from rpcbind.socket when rpcbind is running
  during package update</changelog>
  <changelog author="kukuk@suse.com" date="1583755200">- rpc-user.conf: use sysusers method to create rpc user
- Minimize dependencies for container usage</changelog>
  <changelog author="pvorel@suse.cz" date="1591358400">- Enable debug (--enable-debug, needed for getting messages with -d)</changelog>
  <changelog author="fvogt@suse.com" date="1618315200">- Specify the appropriate set of local nss modules (boo#1177461)</changelog>
  <changelog author="pvorel@suse.cz" date="1621252800">- Update to rpcbind 1.2.6
- Remove 0031-rpcbind-manpage.patch (accepted upstream in commit 4bedcee)
- Drop pmap_set.c (installed as pmap_set2): bnc#446388 is from 2008, for
  openSUSE 11.
- Refresh 0001-change-lockingdir-to-run.patch
- Replace %setup with %autosetup</changelog>
  <changelog author="gmbr3@opensuse.org" date="1624276800">- Add now working CONFIG parameter to sysusers generator
- UsrMerge changes</changelog>
  <changelog author="jsegitz@suse.com" date="1637064000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rpcbind.service.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Remove unused libnsl build requires</changelog>
</package>
<package pkgid="515f510f2652961a4473b84c6020eb34130218c05d9afb19c46ee7dd3cf725cc73f2be1d9eff8e0cd8e97237f72678ff07e911c59422cbaa8c8edb5a1f0640f6" name="rpcbind-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="slfo.1.1_1.2"/>
  <changelog author="Thomas.Blume@suse.com" date="1544616000">- add ordering dependency to rpcbind.service (bsc#1117217)
  * modify 0001-systemd-unit-files.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1560340800">- change rpcbind locking path from /var/run/rpcbind.lock to
  /run/rpcbind.lock (bsc#1134659)
  add 0001-change-lockingdir-to-run.patch
- change the order of socket/service in the %postun scriptlet to
  avoid an error from rpcbind.socket when rpcbind is running
  during package update</changelog>
  <changelog author="kukuk@suse.com" date="1583755200">- rpc-user.conf: use sysusers method to create rpc user
- Minimize dependencies for container usage</changelog>
  <changelog author="pvorel@suse.cz" date="1591358400">- Enable debug (--enable-debug, needed for getting messages with -d)</changelog>
  <changelog author="fvogt@suse.com" date="1618315200">- Specify the appropriate set of local nss modules (boo#1177461)</changelog>
  <changelog author="pvorel@suse.cz" date="1621252800">- Update to rpcbind 1.2.6
- Remove 0031-rpcbind-manpage.patch (accepted upstream in commit 4bedcee)
- Drop pmap_set.c (installed as pmap_set2): bnc#446388 is from 2008, for
  openSUSE 11.
- Refresh 0001-change-lockingdir-to-run.patch
- Replace %setup with %autosetup</changelog>
  <changelog author="gmbr3@opensuse.org" date="1624276800">- Add now working CONFIG parameter to sysusers generator
- UsrMerge changes</changelog>
  <changelog author="jsegitz@suse.com" date="1637064000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rpcbind.service.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Remove unused libnsl build requires</changelog>
</package>
<package pkgid="3117ff145d5240a2629f420d86a72def904a9ac72950a638db6edbb4687335d4f72b8926c130be443e50bafe81494e0a689fe2ce7992d2242781a0bb3e9937af" name="rpm-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="slfo.1.1_2.1"/>
  <changelog author="mls@suse.de" date="1669982400">- update to rpm-4.18.0
  * documentation updates
  * fix query arguments containing ^ not working
  * add downgrade (--oldpackage) support to --freshe
  * add --path query for support for stateless file information
  * add --shell option for interactive macro shell to rpmspec
  * add --justdb counterpart --nodb option and matching API flag
  * fix intermediate symlinks not verified (CVE-2021-35939)
  * fix unowned directories created unsafely (bsc#1157880)
    (CVE-2021-35938)
  * fix %posttrans argument on upgrade
  * fix package build tree not getting removed on successful build
  * add new %conf spec section for build configuration
  * add %bcond macro as a nicer way of defining build conditionals
  * add new rpmuncompress cli tool
  * deprecate implicit "%patch number zero" syntax
- refreshed patches:
  * brp-compress-no-img.patch
  * brp.diff
  * brpcompress.diff
  * db_conversion.diff
  * findsupplements.diff
  * headeradddb.diff
  * nextiteratorheaderblob.diff
  * posttrans.diff
  * rpmqpack.diff
  * rpmrc.diff
  * selinux_transactional_update.patch
- removed patches:
  * dbrointerruptable.diff
  * leave-malloc-check-set.diff</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- add x86_64-microarchitectures.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="fvogt@suse.com" date="1678363200">- add cpuid_lzcnt.patch</changelog>
  <changelog author="mliska@suse.cz" date="1678968000">- Add upstream patch libmagic-exceptions.patch that speeds up libreoffice
  package build.</changelog>
  <changelog author="jsrain@suse.com" date="1685448000">- add _multibuild for multiple .spec-files</changelog>
  <changelog author="dmueller@suse.com" date="1691496000">- add remove-awk-dependency.patch to be able to drop awk dependency
  from containers</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1724328000">- Add patches to enable reproducible builds by default (bsc#1148824). For
  upstream versions see:
  https://github.com/rpm-software-management/rpm/pull/2880
  0001-Add-option-to-set-mtime-of-files-in-rpms.patch
  0002-log-build-time-if-it-is-set-from-SOURCE_DATE_EPOCH.patch
  0003-Error-out-on-a-missing-changelog-date.patch</changelog>
  <changelog author="mls@suse.de" date="1752667200">- fix --runposttrans not working correctly with the --root
  option [bnc#1216091]
  * updated patch: posttrans.diff
  * added "rpm_fixed_runposttrans" provides for libzypp
- print scriptlet messages in --runposttrans
  * needed to fix leaking tmp files [bsc#1218459]
  * updated patch: posttrans.diff
- fix memory leak in str2locale [bsc#1241052]
  * updated patch: localetag.diff</changelog>
</package>
<package pkgid="31d5c114609aacc9453c315d7be14c3d3095c68d9e46c83050aead07b2cc2d73b787d39921c34361f38a4baea7b48c661f74bfa36d5be8648bae72c61e612676" name="rpm-debugsource" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="slfo.1.1_2.1"/>
  <changelog author="mls@suse.de" date="1669982400">- update to rpm-4.18.0
  * documentation updates
  * fix query arguments containing ^ not working
  * add downgrade (--oldpackage) support to --freshe
  * add --path query for support for stateless file information
  * add --shell option for interactive macro shell to rpmspec
  * add --justdb counterpart --nodb option and matching API flag
  * fix intermediate symlinks not verified (CVE-2021-35939)
  * fix unowned directories created unsafely (bsc#1157880)
    (CVE-2021-35938)
  * fix %posttrans argument on upgrade
  * fix package build tree not getting removed on successful build
  * add new %conf spec section for build configuration
  * add %bcond macro as a nicer way of defining build conditionals
  * add new rpmuncompress cli tool
  * deprecate implicit "%patch number zero" syntax
- refreshed patches:
  * brp-compress-no-img.patch
  * brp.diff
  * brpcompress.diff
  * db_conversion.diff
  * findsupplements.diff
  * headeradddb.diff
  * nextiteratorheaderblob.diff
  * posttrans.diff
  * rpmqpack.diff
  * rpmrc.diff
  * selinux_transactional_update.patch
- removed patches:
  * dbrointerruptable.diff
  * leave-malloc-check-set.diff</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- add x86_64-microarchitectures.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="fvogt@suse.com" date="1678363200">- add cpuid_lzcnt.patch</changelog>
  <changelog author="mliska@suse.cz" date="1678968000">- Add upstream patch libmagic-exceptions.patch that speeds up libreoffice
  package build.</changelog>
  <changelog author="jsrain@suse.com" date="1685448000">- add _multibuild for multiple .spec-files</changelog>
  <changelog author="dmueller@suse.com" date="1691496000">- add remove-awk-dependency.patch to be able to drop awk dependency
  from containers</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1724328000">- Add patches to enable reproducible builds by default (bsc#1148824). For
  upstream versions see:
  https://github.com/rpm-software-management/rpm/pull/2880
  0001-Add-option-to-set-mtime-of-files-in-rpms.patch
  0002-log-build-time-if-it-is-set-from-SOURCE_DATE_EPOCH.patch
  0003-Error-out-on-a-missing-changelog-date.patch</changelog>
  <changelog author="mls@suse.de" date="1752667200">- fix --runposttrans not working correctly with the --root
  option [bnc#1216091]
  * updated patch: posttrans.diff
  * added "rpm_fixed_runposttrans" provides for libzypp
- print scriptlet messages in --runposttrans
  * needed to fix leaking tmp files [bsc#1218459]
  * updated patch: posttrans.diff
- fix memory leak in str2locale [bsc#1241052]
  * updated patch: localetag.diff</changelog>
</package>
<package pkgid="593c35f03c67fa6e098f9720e0be65b09250e117e854a1aed967037c21fb60b08a5385ce7f62361d6d6e42f0cdf234d12e6e346b1c0350c089e5ef50c924e592" name="rsync-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.3.0" rel="slfo.1.1_4.1"/>
  <changelog author="schubi@suse.com" date="1701259200">- Moved rsyncd.conf and rsyncd.secrets to /usr/etc.
  * Add rsync-usr-etc.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1710244800">- Avoid package changes in %check</changelog>
  <changelog author="david.anes@suse.com" date="1713441600">- Update to 3.3.0
  * BUG FIXES:
  - Fixed a bug with --sparse --inplace where a trailing gap in
    the source file would not clear out the trailing data in the
    destination file.
  - Fixed an buffer overflow in the checksum2 code if SHA1 is
    being used for the checksum2 algorithm.
  - Fixed an issue when rsync is compiled using _FORTIFY_SOURCE so
    that the extra tests don't complain about a strlcpy() limit
    value (which was too large, even though it wasn't possible for
    the larger value to cause an overflow).
    (fix bsc#1214616, bsc#1214249)
  - Add a backtick to the list of characters that the filename
    quoting needs to escape using backslashes.
  - Fixed a string-comparison issue in the internal handling of
  - -progress (a locale such as tr_TR.utf-8 needed the internal
    triggering of --info options to use upper-case flag names to
    ensure that they match).
  - Make sure that a local transfer marks the sender side as
    trusted.
  - Change the argv handling to work with a newer popt library
  - ⁠-⁠ one that likes to free more data than it used to.
  - Rsync now calls OpenSSL_add_all_algorithms() when compiled
    against an older openssl library.
  - Fixed a problem in the daemon auth for older protocols
    (29 and before) if the openssl library is being used to
    compute MD4 checksums.
  - Fixed rsync -VV on Cygwin -⁠-⁠ it needed a flush of stdout.
  - Fixed an old stats bug that counted devices as symlinks.
  * ENHANCEMENTS:
  - Enhanced rrsync with the -no-overwrite option that allows you
    to ensure that existing files on your restricted but writable
    directory can't be modified.
  - Enhanced the manpages to mark links with .UR &amp; .UE. If your
    nroff doesn't support these idioms, touch the file
    .md2man-force in the source directory so that md-convert gets
    called with the --force-link-text option, and that should
    ensure that your manpages are still readable even with the
    ignored markup.
  - Some manpage improvements on the handling of [global] modules.
  - Changed the mapfrom &amp; mapto perl scripts (in the support dir)
    into a single python script named idmap. Converted a couple
    more perl scripts into python.
  - Changed the mnt-excl perl script (in the support dir) into a
    python script.
  * DEVELOPER RELATED:
  - Updated config.guess (timestamp 2023-01-01) and config.sub
    (timestamp 2023-01-21).
- Drop rsync-fortified-strlcpy-fix.patch (included upstream).</changelog>
  <changelog author="david.anes@suse.com" date="1716465600">- Correcly enable SIMD in x64: the flag was renamed from
  - -enable-simd to -enable-roll-simd in 3.2.4
- Remove leftovers from previous versions:
  * rsync-patches-3.2.7.tar.gz
  * rsync-patches-3.2.7.tar.gz.asc</changelog>
  <changelog author="kukuk@suse.com" date="1724673600">- add patch rsync-run-dir.patch:
  * Drop dependency on /var/run compat symlink, this causes problems
    on image based systems</changelog>
  <changelog author="angel.yankov@suse.com" date="1736424000">- Security update, fix multiple vulnerabilities:
  * CVE-2024-12084, bsc#1234100 - Heap Buffer Overflow in Checksum Parsing
  * CVE-2024-12085, bsc#1234101 - Info Leak via uninitialized Stack contents defeats ASLR
  * CVE-2024-12086, bsc#1234102 - Server leaks arbitrary client files
  * CVE-2024-12087, bsc#1234103 - Server can make client write files outside of destination directory using symbolic links
  * CVE-2024-12088, bsc#1234104 - --safe-links Bypass
  * Added rsync-CVE-2024-12084-overflow-01.patch
  * Added rsync-CVE-2024-12084-overflow-02.patch
  * Added rsync-CVE-2024-12085.patch
  * Added rsync-CVE-2024-12086_01.patch
  * Added rsync-CVE-2024-12086_02.patch
  * Added rsync-CVE-2024-12086_03.patch
  * Added rsync-CVE-2024-12086_04.patch
  * Added rsync-CVE-2024-12087_01.patch
  * Added rsync-CVE-2024-12087_02.patch
  * Added rsync-CVE-2024-12088.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1736856000">- Security update,CVE-2024-12747, bsc#1235475 race condition in handling symbolic links
  * Added rsync-CVE-2024-12747.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1736942400">- Fix FLAG_GOT_DIR_FLIST collission with FLAG_HLINKED
  * Added rsync-fix-FLAG_GOT_DIR_FLIST.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1737633600">- Bump protocol version to 32 - make it easier to show server is patched.
  * Add rsync-protocol-version-32.patch</changelog>
  <changelog author="david.anes@suse.com" date="1765886400">- Security update (CVE-2025-10158, bsc#1254441): rsync: Out of
  bounds array access via negative index
  - Add rsync-CVE-2025-10158.patch</changelog>
</package>
<package pkgid="d4c9444fbd3c8e57ed83e92795ddb5a454741d6e3d931d514c3522d2e102a10a59bbbc6c821e1eab37aaecbab9bc6caca1173efecf405f4425d8c7b5f93a537e" name="rsync-debugsource" arch="aarch64">
  <version epoch="0" ver="3.3.0" rel="slfo.1.1_4.1"/>
  <changelog author="schubi@suse.com" date="1701259200">- Moved rsyncd.conf and rsyncd.secrets to /usr/etc.
  * Add rsync-usr-etc.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1710244800">- Avoid package changes in %check</changelog>
  <changelog author="david.anes@suse.com" date="1713441600">- Update to 3.3.0
  * BUG FIXES:
  - Fixed a bug with --sparse --inplace where a trailing gap in
    the source file would not clear out the trailing data in the
    destination file.
  - Fixed an buffer overflow in the checksum2 code if SHA1 is
    being used for the checksum2 algorithm.
  - Fixed an issue when rsync is compiled using _FORTIFY_SOURCE so
    that the extra tests don't complain about a strlcpy() limit
    value (which was too large, even though it wasn't possible for
    the larger value to cause an overflow).
    (fix bsc#1214616, bsc#1214249)
  - Add a backtick to the list of characters that the filename
    quoting needs to escape using backslashes.
  - Fixed a string-comparison issue in the internal handling of
  - -progress (a locale such as tr_TR.utf-8 needed the internal
    triggering of --info options to use upper-case flag names to
    ensure that they match).
  - Make sure that a local transfer marks the sender side as
    trusted.
  - Change the argv handling to work with a newer popt library
  - ⁠-⁠ one that likes to free more data than it used to.
  - Rsync now calls OpenSSL_add_all_algorithms() when compiled
    against an older openssl library.
  - Fixed a problem in the daemon auth for older protocols
    (29 and before) if the openssl library is being used to
    compute MD4 checksums.
  - Fixed rsync -VV on Cygwin -⁠-⁠ it needed a flush of stdout.
  - Fixed an old stats bug that counted devices as symlinks.
  * ENHANCEMENTS:
  - Enhanced rrsync with the -no-overwrite option that allows you
    to ensure that existing files on your restricted but writable
    directory can't be modified.
  - Enhanced the manpages to mark links with .UR &amp; .UE. If your
    nroff doesn't support these idioms, touch the file
    .md2man-force in the source directory so that md-convert gets
    called with the --force-link-text option, and that should
    ensure that your manpages are still readable even with the
    ignored markup.
  - Some manpage improvements on the handling of [global] modules.
  - Changed the mapfrom &amp; mapto perl scripts (in the support dir)
    into a single python script named idmap. Converted a couple
    more perl scripts into python.
  - Changed the mnt-excl perl script (in the support dir) into a
    python script.
  * DEVELOPER RELATED:
  - Updated config.guess (timestamp 2023-01-01) and config.sub
    (timestamp 2023-01-21).
- Drop rsync-fortified-strlcpy-fix.patch (included upstream).</changelog>
  <changelog author="david.anes@suse.com" date="1716465600">- Correcly enable SIMD in x64: the flag was renamed from
  - -enable-simd to -enable-roll-simd in 3.2.4
- Remove leftovers from previous versions:
  * rsync-patches-3.2.7.tar.gz
  * rsync-patches-3.2.7.tar.gz.asc</changelog>
  <changelog author="kukuk@suse.com" date="1724673600">- add patch rsync-run-dir.patch:
  * Drop dependency on /var/run compat symlink, this causes problems
    on image based systems</changelog>
  <changelog author="angel.yankov@suse.com" date="1736424000">- Security update, fix multiple vulnerabilities:
  * CVE-2024-12084, bsc#1234100 - Heap Buffer Overflow in Checksum Parsing
  * CVE-2024-12085, bsc#1234101 - Info Leak via uninitialized Stack contents defeats ASLR
  * CVE-2024-12086, bsc#1234102 - Server leaks arbitrary client files
  * CVE-2024-12087, bsc#1234103 - Server can make client write files outside of destination directory using symbolic links
  * CVE-2024-12088, bsc#1234104 - --safe-links Bypass
  * Added rsync-CVE-2024-12084-overflow-01.patch
  * Added rsync-CVE-2024-12084-overflow-02.patch
  * Added rsync-CVE-2024-12085.patch
  * Added rsync-CVE-2024-12086_01.patch
  * Added rsync-CVE-2024-12086_02.patch
  * Added rsync-CVE-2024-12086_03.patch
  * Added rsync-CVE-2024-12086_04.patch
  * Added rsync-CVE-2024-12087_01.patch
  * Added rsync-CVE-2024-12087_02.patch
  * Added rsync-CVE-2024-12088.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1736856000">- Security update,CVE-2024-12747, bsc#1235475 race condition in handling symbolic links
  * Added rsync-CVE-2024-12747.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1736942400">- Fix FLAG_GOT_DIR_FLIST collission with FLAG_HLINKED
  * Added rsync-fix-FLAG_GOT_DIR_FLIST.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1737633600">- Bump protocol version to 32 - make it easier to show server is patched.
  * Add rsync-protocol-version-32.patch</changelog>
  <changelog author="david.anes@suse.com" date="1765886400">- Security update (CVE-2025-10158, bsc#1254441): rsync: Out of
  bounds array access via negative index
  - Add rsync-CVE-2025-10158.patch</changelog>
</package>
<package pkgid="22602f13fe8ff772a37e7ae96613f1da8cc8e3afd7e055bb95615c2743362ebf0247058f1e9c2f55b8c86984e5a5c6792e4046c9ae21cd671842101193f38556" name="rt-tests-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.5" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1536840000">- Fix grammar in description.
- Have some more %make_install.</changelog>
  <changelog author="jcheung@suse.com" date="1592308800">- Update to version 1.6:
  * New feature to get a snapshot of a running instance of cyclictest without stopping it by
    sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful
    if running cyclictest over a long period of time
  * Add SPDX tags V3
  * Some fixes
- Changes from version 1.5
  * Mostly small clean-ups and bug fixes
- Changes from version 1.4
  * Added a number of new programs to the rt-tests suite
  - queuelat : simulates a network queue checking for latency violations in packet processing.
  - cyclicdeadline : used to test the deadline scheduler (SCHED_DEADLINE)
  - deadline_test : tests the deadline scheduler in a cyclictest manner
  - ssdd : a tracer to do a bunch of PTRACE_SINGLESTEPs
- Add rt-tests-1.6-Makefile.patch</changelog>
  <changelog author="jcheung@suse.com" date="1609848000">- Update to upstream version 1.10 (SLE-12981)
  * rt-tests: queuelat: Remove get_cpuinfo_mhz.sh and old Makefile
  * rt-tests: determine_maximum_mpps.sh: Add a menu to get user settings.
  * rt-numa: Introduce NUMA helpers
  * cyclictest: Only report the first incident
  * Streamline usage and man page
- Add rt-tests-1.10-Makefile.patch and remove  rt-tests-1.6-Makefile.patch
- Cleanup spec file
- Changes from version 1.9
  * signaltest: Only print from the first thread stats when quiet
  * rt-tests: cyclictest: Move ftrace helpers into rt-utils.[ch]
  * pi_stress: limit the number of inversion groups to the number of online cores
  * rt-tests: Install new man page get_cyclictest_snapshot.8
  * rt-tests: Add a man page for get_cyclictest_snapshot
  * rt-tests: ptsematest.8: Update the ptsematest man page
  * rt-tests: improvements to the python style in get_cyclictest_snapshot
  * cyclictest: Fix setaffinity error on large NUMA machines
- Changes from version 1.8
  * cyclictest: Make the affinity mask apply to the main thread too
  * Remove support for compiling without NUMA
  * cyclictest: Only run on runtime affinity and user supplied affinity
  * cyclictest: Only run on available cpus according to the affinity
  * cyclictest: Report all errors from pthread_setaffinity_np
- Changes from version 1.7
  * Add get_cyclictest_snapshot to Makefile
  * Add the get_cyclictest_snapshot.py utility
  * determine_maximum_mpps.sh: Fix quoting and other shell issue
  * queuelat: get_cpuinfo_mhz.sh highest value
  * cyclicdeadline: Add a simple manpage for cyclicdeadline</changelog>
  <changelog author="daniel.wagner@suse.com" date="1624622400">- Update to upstream version 2.0
  * All test programs can output their results in JSON format
  * cyclictest: Allow to specify main thread affinity</changelog>
  <changelog author="daniel.wagner@suse.com" date="1625054400">- Update to upstream version 2.1
  * Avoid pagefault at startup which made the first cycle
    in cyclictest measure a huge latency spike.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1627560000">- Enable build on all architectures.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1630411200">- Update to upstream version v2.2
  * signaltest: Fix JSON output latency values for 32bit machines
  * oslat: Don't take trace_threshold into account during preheat
  * sched_deadline: Update HRTICK_DL location
  * Allow static builds by dropping dependency on pthread_getaffinity_np</changelog>
  <changelog author="pvorel@suse.cz" date="1669291200">- Update to upstream version v2.4
  https://lore.kernel.org/linux-rt-users/20220708150017.13462-1-jkacur@redhat.com/
- Update to upstream version v2.3
  https://lore.kernel.org/linux-rt-users/20211210184649.11084-1-jkacur@redhat.com/
- Remove old patch rt-tests-1.10-Makefile.patch, which installed
  src/cyclictest/get_cyclictest_snapshot.8. Upstream guarded it with PYLIB in
  3d1976b ("Makefile: manpages: only add get_cyclictest_snapshot if PYLIB")
  but PYLIB should be defined due BuildRequires:  python3-base
- Backport runtime fixes from upcomming release:
  * 0001-cyclictest-Fix-threads-being-affined-even-when-a-isn.patch
  * 0002-rt-tests-Remove-arbitrary-num-of-threads-limits.patch
  * 0003-rt-tests-hackbench-Add-error-checking-to-connect-and.patch
  * 0004-rt-tests-hwlatdetect-Update-to-integer-division.patch
- Use %autosetup (not having to add -p1 for patches)</changelog>
  <changelog author="mpluskal@suse.com" date="1669377600">- Use sources which are actually published</changelog>
  <changelog author="mpluskal@suse.com" date="1681819200">- Update to version 2.5:
  https://lore.kernel.org/linux-rt-users/20230120205220.26218-1-jkacur@redhat.com/T/#u
- Drop upstreamed patches:
  * 0001-cyclictest-Fix-threads-being-affined-even-when-a-isn.patch
  * 0002-rt-tests-Remove-arbitrary-num-of-threads-limits.patch
  * 0003-rt-tests-hackbench-Add-error-checking-to-connect-and.patch
  * 0004-rt-tests-hwlatdetect-Update-to-integer-division.patch</changelog>
</package>
<package pkgid="e4157376144caeb16840dca7d647afd9071c5ee1497ef804d02fc5baa231cd0415b21d64f0b8802c07065fd30927e7dc757c954e717f3028e6ea5461df46773f" name="rt-tests-debugsource" arch="aarch64">
  <version epoch="0" ver="2.5" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1536840000">- Fix grammar in description.
- Have some more %make_install.</changelog>
  <changelog author="jcheung@suse.com" date="1592308800">- Update to version 1.6:
  * New feature to get a snapshot of a running instance of cyclictest without stopping it by
    sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful
    if running cyclictest over a long period of time
  * Add SPDX tags V3
  * Some fixes
- Changes from version 1.5
  * Mostly small clean-ups and bug fixes
- Changes from version 1.4
  * Added a number of new programs to the rt-tests suite
  - queuelat : simulates a network queue checking for latency violations in packet processing.
  - cyclicdeadline : used to test the deadline scheduler (SCHED_DEADLINE)
  - deadline_test : tests the deadline scheduler in a cyclictest manner
  - ssdd : a tracer to do a bunch of PTRACE_SINGLESTEPs
- Add rt-tests-1.6-Makefile.patch</changelog>
  <changelog author="jcheung@suse.com" date="1609848000">- Update to upstream version 1.10 (SLE-12981)
  * rt-tests: queuelat: Remove get_cpuinfo_mhz.sh and old Makefile
  * rt-tests: determine_maximum_mpps.sh: Add a menu to get user settings.
  * rt-numa: Introduce NUMA helpers
  * cyclictest: Only report the first incident
  * Streamline usage and man page
- Add rt-tests-1.10-Makefile.patch and remove  rt-tests-1.6-Makefile.patch
- Cleanup spec file
- Changes from version 1.9
  * signaltest: Only print from the first thread stats when quiet
  * rt-tests: cyclictest: Move ftrace helpers into rt-utils.[ch]
  * pi_stress: limit the number of inversion groups to the number of online cores
  * rt-tests: Install new man page get_cyclictest_snapshot.8
  * rt-tests: Add a man page for get_cyclictest_snapshot
  * rt-tests: ptsematest.8: Update the ptsematest man page
  * rt-tests: improvements to the python style in get_cyclictest_snapshot
  * cyclictest: Fix setaffinity error on large NUMA machines
- Changes from version 1.8
  * cyclictest: Make the affinity mask apply to the main thread too
  * Remove support for compiling without NUMA
  * cyclictest: Only run on runtime affinity and user supplied affinity
  * cyclictest: Only run on available cpus according to the affinity
  * cyclictest: Report all errors from pthread_setaffinity_np
- Changes from version 1.7
  * Add get_cyclictest_snapshot to Makefile
  * Add the get_cyclictest_snapshot.py utility
  * determine_maximum_mpps.sh: Fix quoting and other shell issue
  * queuelat: get_cpuinfo_mhz.sh highest value
  * cyclicdeadline: Add a simple manpage for cyclicdeadline</changelog>
  <changelog author="daniel.wagner@suse.com" date="1624622400">- Update to upstream version 2.0
  * All test programs can output their results in JSON format
  * cyclictest: Allow to specify main thread affinity</changelog>
  <changelog author="daniel.wagner@suse.com" date="1625054400">- Update to upstream version 2.1
  * Avoid pagefault at startup which made the first cycle
    in cyclictest measure a huge latency spike.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1627560000">- Enable build on all architectures.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1630411200">- Update to upstream version v2.2
  * signaltest: Fix JSON output latency values for 32bit machines
  * oslat: Don't take trace_threshold into account during preheat
  * sched_deadline: Update HRTICK_DL location
  * Allow static builds by dropping dependency on pthread_getaffinity_np</changelog>
  <changelog author="pvorel@suse.cz" date="1669291200">- Update to upstream version v2.4
  https://lore.kernel.org/linux-rt-users/20220708150017.13462-1-jkacur@redhat.com/
- Update to upstream version v2.3
  https://lore.kernel.org/linux-rt-users/20211210184649.11084-1-jkacur@redhat.com/
- Remove old patch rt-tests-1.10-Makefile.patch, which installed
  src/cyclictest/get_cyclictest_snapshot.8. Upstream guarded it with PYLIB in
  3d1976b ("Makefile: manpages: only add get_cyclictest_snapshot if PYLIB")
  but PYLIB should be defined due BuildRequires:  python3-base
- Backport runtime fixes from upcomming release:
  * 0001-cyclictest-Fix-threads-being-affined-even-when-a-isn.patch
  * 0002-rt-tests-Remove-arbitrary-num-of-threads-limits.patch
  * 0003-rt-tests-hackbench-Add-error-checking-to-connect-and.patch
  * 0004-rt-tests-hwlatdetect-Update-to-integer-division.patch
- Use %autosetup (not having to add -p1 for patches)</changelog>
  <changelog author="mpluskal@suse.com" date="1669377600">- Use sources which are actually published</changelog>
  <changelog author="mpluskal@suse.com" date="1681819200">- Update to version 2.5:
  https://lore.kernel.org/linux-rt-users/20230120205220.26218-1-jkacur@redhat.com/T/#u
- Drop upstreamed patches:
  * 0001-cyclictest-Fix-threads-being-affined-even-when-a-isn.patch
  * 0002-rt-tests-Remove-arbitrary-num-of-threads-limits.patch
  * 0003-rt-tests-hackbench-Add-error-checking-to-connect-and.patch
  * 0004-rt-tests-hwlatdetect-Update-to-integer-division.patch</changelog>
</package>
<package pkgid="77dc1a7f9ca61c54d87473ea164d14bb23ad51ee3ca6da11ad94490987e732c6e13b07851e94e7b0fdc4617f9bb76c5036ada44af7a0167fb0a1fb648d842528" name="runc-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="slfo.1.1_1.1"/>
  <changelog author="asarai@suse.com" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="asarai@suse.com" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="asarai@suse.com" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="asarai@suse.com" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="asarai@suse.com" date="1764331200">- Update to runc v1.3.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.4&gt;. bsc#1254362</changelog>
</package>
<package pkgid="2e5bd5b16d76b2e317b39cfd5a9681330dfc64a5ec97df2d9b459b332adc595319f1acc98555b947585d912c7407efa60d8b994350c8ab6181f01cc5ddd99b78" name="rust-keylime-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.2.8+116" rel="slfo.1.1_1.1"/>
  <changelog author="aplanas@suse.com" date="1715860800">- Update to version 0.2.5~4:
  * Fix 'unnecessary qualification' warnings
  * fix IAK template to match IDevID
  * rpm: fix COPR RPMs build for centos-stream-10
  * Build COPR RPMs for centos-stream-10</changelog>
  <changelog author="aplanas@suse.com" date="1718366400">- Update to version 0.2.6~0:
  * Bump version to 0.2.6
  * build(deps): bump libc from 0.2.153 to 0.2.155
  * build(deps): bump serde from 1.0.196 to 1.0.203
  * rpm/fedora: Update rust macro usage
  * config: Support hostnames in registrar_ip option
  * added use of persisted IAK and IDevID and authorisation values
  * config changes
  * Adding /agent/info API to agent
  * Fix leftover 'unnecessary qualification' warnings on tests</changelog>
  <changelog author="aplanas@suse.com" date="1725278400">- Update vendored crates (bsc#1229952, bsc#1230029, CVE-2024-43806)
  * rustix 0.37.25
  * rustix 0.38.34
  * shlex  1.3.0
- Update to version 0.2.6+13:
  * Enable test functional/iak-idevid-persisted-and-protected
  * build(deps): bump uuid from 1.7.0 to 1.10.0
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * keylime-agent/src/revocation: Fix comment indentation
  * keylime/crypto: Fix indentation of documentation comment
  * build(deps): bump thiserror from 1.0.59 to 1.0.63
  * build(deps): bump serde_json from 1.0.116 to 1.0.120
  * dependabot: Extend to also monitor workflow actions
  * ci: Disable Packit CI on CentOS Stream 9
  * ci: use CODECOV_TOKEN when submitting coverage data
  * revocation: Use into() for unfallible transformation
  * secure_mount: Fix possible infinite loop
  * error: Rename enum variants to avoid clippy warning</changelog>
  <changelog author="aplanas@suse.com" date="1737979200">- Update to version 0.2.7+1:
  * dist: Enable logging for keylime library in the service
  * Bump version to 0.2.7
  * scripts: Download coverage data from Testing Farm directly
  * main: Remove unnecessary lifetime
  * cargo: Bump pretty_env_logger to version 0.5.0
  * scripts: Fix regex in download_packit_coverage.sh
  * cargo: Bump clap crate to version 4.5.23
  * cargo: Bump base64 crate to version 0.22.1
  * build(deps): bump log from 0.4.22 to 0.4.25
  * build(deps): bump serde_json from 1.0.133 to 1.0.135
  * cargo: Bump tokio crate to version 1.42.0
  * packit: Fix RPM builds on copr
  * cargo: Bump thiserror crate to version 0.2.9
  * cargo: Update reqwest to version 0.12.12
  * build(deps): bump libc from 0.2.168 to 0.2.169
  * build(deps): bump glob from 0.3.1 to 0.3.2
  * version: Implement API version validation and ordering
  * main: Support using multiple API versions for registration
  * keylime: Introduce the registrar_client module
  * Provide endpoints under multiple API versions
  * Move 'serialization' module to the keylime library
  * Drop unnecessary dependency on common::API_VERSION
  * keylime-agent.conf: Bump version to 2.3
  * build(deps): bump serde from 1.0.210 to 1.0.217
  * build(deps): bump pest_derive from 2.7.14 to 2.7.15
  * build(deps): bump pest from 2.7.14 to 2.7.15
  * build(deps): bump libc from 0.2.167 to 0.2.168
  * config: Make IAK and IDevID certificates optional
  * Fix warnings reported by clippy
  * workflows: Run job in the CI container directly
  * tests: Add unit test for device ID builder
  * main: Move IAK/IDevID related code to dedicated module
  * tests: Add script to generate IAK and IDevID certificates
  * build(deps): bump openssl from 0.10.66 to 0.10.68
  * build(deps): bump uuid from 1.10.0 to 1.11.0
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * build(deps): bump actix-web from 4.5.1 to 4.9.0
  * build(deps): bump reqwest from 0.12.7 to 0.12.9
  * tests/setup_swtpm.sh: Add script to setup temporary TPM
  * Use a single TPM context and avoid race conditions during tests
  * config: Enable passing a hostname instead of IP
  * build(deps): bump clap from 4.3.11 to 4.5.21
  * build(deps): bump tempfile from 3.10.1 to 3.14.0
  * build(deps): bump pest_derive from 2.7.6 to 2.7.14
  * build(deps): bump pest from 2.7.6 to 2.7.14
  * build(deps): bump codecov/codecov-action from 4 to 5
  * workflows: Submit the coverage for merged PR from Fedora 41
  * tests: Use Fedora 41 to generate code coverage
  * api: Make API configuration modular
  * agent_handler: Move the /agent scope configuration
  * notifications_handler: Move the /notifications scope configuration
  * quotes_handler: Move the /quotes scope configuration to quotes_handler
  * keys_handler: Move /keys scope configuration to keys_handler
  * Use ${DESTDIR} for config
  * Fix showing wrong UUID
  * build(deps): bump actix-rt from 2.9.0 to 2.10.0
  * config: Refactor AgentConfig Source trait implementation
  * build(deps): bump log from 0.4.21 to 0.4.22
  * build(deps): bump serde_json from 1.0.120 to 1.0.128
  * tpm: check if EK certificate has valid ASN.1 DER encoding
  * build(deps): bump futures from 0.3.27 to 0.3.31
  * cargo: Bump reqwest to version 0.12.7
  * build(deps): bump serde from 1.0.203 to 1.0.210
  * tests: Add more tests to Packit CI
  * build(deps): bump docker/build-push-action from 5 to 6
  * tests: apply workarounds to known bugs</changelog>
  <changelog author="aplanas@suse.com" date="1749124800">- Update vendored crates (bsc#1243861, CVE-2024-12224)
  * idna 1.0.3
- Add Cargo_lock.patch to adjust versions that will allow the
  compilation of mbox crate
- Update to version 0.2.7+70:
  * build(deps): bump wiremock from 0.6.2 to 0.6.3
  * build(deps): bump uuid from 1.16.0 to 1.17.0
  * lib: Introduce AgentIdentity structure
  * gitignore: Add *.swp and *.orig to be ignored
  * build(deps): bump clap from 4.5.38 to 4.5.39
  * build(deps): bump tokio from 1.45.0 to 1.45.1
  * Unify Push Model structures time formats to UTC (#1016)
  * Add Quote related structures to Keylime library
  * Remove configuration file trailing whitespaces (#1012)
  * keylime-agent.conf: add all accepted TPM encryption algs
  * tpm: add policy auth for EK to activate crendential
  * Enable non standard key sizes and curves for EK and AK
  * config: Use next_back() instead of last() for iterators
  * Update to tss-esapi v7.6.0
  * Avoid duplicated call to ctx.create_ek
  * build(deps): bump clap from 4.5.23 to 4.5.38
  * Add registration for Push Model client
  * build(deps): bump tokio from 1.44.2 to 1.45.0
  * build(deps): bump chrono from 0.4.40 to 0.4.41
  * build(deps): bump tempfile from 3.17.1 to 3.20.0
  * Refactor code: move error, registration to lib
  * Move structure filling and URL selection code (#999)
  * build(deps): bump pest_derive from 2.7.15 to 2.8.0
  * build(deps): bump pest from 2.7.15 to 2.8.0
  * build(deps): bump libc from 0.2.169 to 0.2.172
  * Add Evidence/Authentication messages to prototype
  * build(deps): bump uuid from 1.15.1 to 1.16.0
  * build(deps): bump thiserror from 2.0.11 to 2.0.12
  * build(deps): bump signal-hook from 0.3.17 to 0.3.18
  * build(deps): bump log from 0.4.25 to 0.4.27
  * build(deps): bump assert_cmd from 2.0.16 to 2.0.17
  * build(deps): bump actix-web from 4.9.0 to 4.10.2
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * build(deps): bump serde from 1.0.217 to 1.0.219
  * Add unit tests for sessions.rs structures
  * Add auth(sessions) structures
  * Fix minor README.md issue (#988)
  * Define EvidenceHandling structures (#971)
  * Add mockoon test scenario
  * Add client certificates to push-attestation prototype
  * Cargo: bump url crate to version 2.5.4
  * Add logging to the push attestation prototype
  * Do not use certificate on insecure mode
  * common: Move the EncryptedData structure from common to the library
  * common: Move AuthTag from common to the library
  * build(deps): bump openssl from 0.10.71 to 0.10.72
  * common: Move Symmkey to library as crypto::symmkey
  * common: Remove unused constants and static values
  * build(deps): bump tokio from 1.43.0 to 1.44.2
  * Refactor code: Include AgentIdentity structure
  * Push model prototype
  * Add support for ek certificate chain, stored in TPM NVRAM.
  * Recover key_class field and set it as "asymmetric"
  * Update push model structures to latest values
  * build(deps): bump serde_json from 1.0.138 to 1.0.140
  * packit: Add identifier for each copr_build job
  * keylime-agent.conf: only mention ecdsa and rsassa for signing
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump uuid from 1.13.2 to 1.15.1
  * Add capabilities_negotiation structures
  * packit: Add compatibility/api_version_compatibility test
  * build(deps): bump uuid from 1.11.0 to 1.13.2
  * build(deps): bump serde_json from 1.0.135 to 1.0.138
  * build(deps): bump thiserror from 2.0.9 to 2.0.11
  * build(deps): bump tempfile from 3.14.0 to 3.17.1
  * Allow agent to start as non-root
  * scripts: Fix coverage information downloading script
  * build(deps): bump openssl from 0.10.68 to 0.10.70
  * build(deps): bump tokio from 1.42.0 to 1.43.0</changelog>
  <changelog author="aplanas@suse.com" date="1752494400">- Update vendored crates (bsc#1242623, CVE-2025-3416)
  * openssl 0.10.73
- Update to version 0.2.7+117:
  * Increase coverage in evidence handling structure
  * Add Capabilities Negotiations resp. missing fields
  * Fix UEFI test to check file access in all cases
  * context_info_handler: Do not assume /var/lib/keylime exists
  * Fix clippy warnings about uninlined format arguments
  * attestation: Allow unwrap() in tests
  * Increase coverage (groom code, extend unit tests)
  * Include IMA/UEFI logs in Evidence Handling request
  * Include method to get all IMA entries as string
  * Send correct list of pcr banks and sign algorithms
  * Try to fix TPM tests related issues
  * Define attestation perform asynchronous
  * Perform attestation in push model agent binary
  * Refactor code to use new attestation.rs
  * Create attestation.rs for Attestation stuff
  * Move ContextInfo management to its own handler
  * Adjust context_info.rs after rebase
  * Add attestation function to ContextInfo structure
  * Add prohibited signing algorithms, avoid ecschnorr
  * keylime/config: Use macro to implement PushModelConfigTrait
  * Introduce keylime-macros and define_view_trait
  * config: Remove KeylimeConfig structure
  * config: Remove unnecessary options and lazy initialization
  * Fix pcr_bank function to send all possible slots
  * Send Content-Type:application/json on request (#1039)
  * Send correct 'key_algorithm' in certification_keys (#1035)
  * Push Model: Persist Attestation Key to file
  * Add Keylime push model binary to root GNUmakefile
  * Use singleton to avoid multiple Context allocation
  * tests: Do not assume `/var/lib/keylime` exists (#1030)
  * lib/cert: Fix race condition due to use of same file path
  * payloads: Fix race condition in tests
  * Add uefi_log_handler.rs to parse UEFI binary
  * Use IMA log parser to send correct entry count
  * Add IMA log parser
  * build(deps): bump once_cell from 1.19.0 to 1.21.3
  * lib/config/base.rs: Add more unit tests
  * lib/permissions: Add unit tests
  * keylime-agent: move JsonWrapper from common.rs to the library
  * lib/agent_data: Move agent_data related tests from common
  * common: Replace APIVersion with the library Version structure
  * keylime_agent: Move secure_mount.rs to the library
  * lib: Rename keylime_error.rs as error.rs
  * config: Move config to keylime library
  * config: Rename push_model_config to push_model
  * lib: Move permissions.rs from keylime-agent to the lib
  * Extract Capabilities Negotiation info from TPM (#1014)</changelog>
  <changelog author="aplanas@suse.com" date="1754568000">- Update vendored crates (bsc#1247193, CVE-2025-58266)
  * shlex 1.3.0
- Rebase keylime-agent.conf.diff for current configuration
- Drop Cargo_lock.patch patch, already present in Cargo.lock
- Update to version 0.2.7+141:
  * service: Use WantedBy=multi-user.target
  * rpm: Add subpackage for push-attestation agent
  * push-model: implement continuous attestation with configurable intervals
  * Retry registration forever in the state machine
  * Add Verifier URL to configuration
  * Align exp.backoff to current configuration format
  * Increase coverage of state machine (using Context)
  * Increase coverage of struct_filler.rs
  * Groom code (remove dead code)
  * Fix exponential backoff (10secs, 4xx accepted)
  * test: Add documentation test to tests/run.sh
  * tpm: Avoid running code example during documentation tests
  * state_machine: Always start the agent from the Unregistered state
  * Add fixes for the URL construction
  * Refactor evidences collection in push attestation agent
  * push-model: refactor attestation logic into a state machine
  * Fix body sending by allowing serializing strings (#1057)
  * Log ResilientClient errors/response status codes (#1055)
  * Add AK signing scheme and hash algorithm to negotiation
  * tpm: Add method to extract signing scheme and hash algorithm from AK
  * Allow custom content-type/accept headers
  * Integrate exponential backoff to registration (#1052)
  * keylime/structures: Rename ShaValues to PcrBanks
  * Add resilient_client for exponential backoff (#1048)</changelog>
  <changelog author="aplanas@suse.com" date="1755691200">- Update vendored crates (bsc#1248006, CVE-2025-55159)
  * slab 0.4.11
- Add Cargo_lock.patch patch to update slab and other dependencies
- Update to version 0.2.8+12:
  * build(deps): bump actions/checkout from 4 to 5
  * build(deps): bump cfg-if from 1.0.0 to 1.0.1
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump clap from 4.5.39 to 4.5.45
  * build(deps): bump pest from 2.8.0 to 2.8.1
  * Fix clippy warnings
  * Use verifier-provided interval for continuous attestation timing
  * Add meta object with seconds_to_next_attestation to evidence response
  * Fix boot time retrieval
  * Fix IMA log format (it must be ['text/plain']) (#1073)
  * Remove unnecessary configuration fields
  * cargo: Bump retry-policies to version 0.4.0
  * Bump version to 0.2.8</changelog>
  <changelog author="aplanas@suse.com" date="1767787200">- Use tmpfiles.d for /var directories (PED-14736)
  + tmpfiles.keylime renamed to rust-keylime.conf and extended
- Update to version 0.2.8+96:
  * build(deps): bump wiremock from 0.6.4 to 0.6.5
  * build(deps): bump actions/checkout from 5 to 6
  * build(deps): bump chrono from 0.4.41 to 0.4.42
  * packit: Get coverage from Fedora 43 runs
  * Fix issues pointed out by clippy
  * Replace mutex unwraps with proper error handling in TPM library
  * Remove unused session request methods from StructureFiller
  * Fix config panic on missing ek_handle in push model agent
  * build(deps): bump tempfile from 3.21.0 to 3.23.0
  * build(deps): bump actions/upload-artifact from 4 to 6 (#1163)
  * Fix clippy warnings project-wide
  * Add KEYLIME_DIR support for verifier TLS certificates in push model agent
  * Thread privileged resources and use MeasurementList for IMA reading
  * Add privileged resource initialization and privilege dropping to push model agent
  * Fix privilege dropping order in run_as()
  * add documentation on FQDN hostnames
  * Remove confusing logs for push mode agent
  * Set correct default Verifier port (8891-&gt;8881) (#1159)
  * Add verifier_url to reference configuration file (#1158)
  * Add TLS support for Registrar communication (#1139)
  * Fix agent handling of 403 registration responses (#1154)
  * Add minor README.md rephrasing (#1151)
  * build(deps): bump actions/checkout from 5 to 6 (#1153)
  * ci: update spec files for packit COPR build
  * docs: improve challenge encoding and async TPM documentation
  * refactor: improve middleware and error handling
  * feat: add authentication client with middleware integration
  * docker: Include keylime_push_model_agent binary
  * Include attestation_interval configuration (#1146)
  * Persist payload keys to avoid attestation failure on restart
  * crypto: Implement the load or generate pattern for keys
  * Use simple algorithm specifiers in certification_keys object (#1140)
  * tests: Enable more tests in CI
  * Fix RSA2048 algorithm reporting in keylime agent
  * Remove disabled_signing_algorithms configuration
  * rpm: Fix metadata patches to apply to current code
  * workflows/rpm.yml: Use more strict patching
  * build(deps): bump uuid from 1.17.0 to 1.18.1
  * Fix ECC algorithm selection and reporting for keylime agent
  * Improve logging consistency and coherency
  * Implement minimal RFC compliance for Location header and URI parsing (#1125)
  * Use separate keys for payload mechanism and mTLS
  * docker: update rust to 1.81 for distroless Dockerfile
  * Ensure UEFI log capabilities are set to false
  * build(deps): bump http from 1.1.0 to 1.3.1
  * build(deps): bump log from 0.4.27 to 0.4.28
  * build(deps): bump cfg-if from 1.0.1 to 1.0.3
  * build(deps): bump actix-rt from 2.10.0 to 2.11.0
  * build(deps): bump async-trait from 0.1.88 to 0.1.89
  * build(deps): bump trybuild from 1.0.105 to 1.0.110
  * Accept evidence handling structures null entries
  * workflows: Add test to check if RPM patches still apply
  * CI: Enable test add-agent-with-malformed-ek-cert
  * config: Fix singleton tests
  * FSM: Remove needless lifetime annotations (#1105)
  * rpm: Do not remove wiremock which is now available in Fedora
  * Use latest Fedora httpdate version (1.0.3)
  * Enhance coverage with parse_retry_after test
  * Fix issues reported by CI regarding unwrap() calls
  * Reuse max retries indicated to the ResilientClient
  * Include limit of retries to 5 for Retry-After
  * Add policy to handle Retry-After response headers
  * build(deps): bump wiremock from 0.6.3 to 0.6.4
  * build(deps): bump serde_json from 1.0.140 to 1.0.143
  * build(deps): bump pest_derive from 2.8.0 to 2.8.1
  * build(deps): bump syn from 2.0.90 to 2.0.106
  * build(deps): bump tempfile from 3.20.0 to 3.21.0
  * build(deps): bump thiserror from 2.0.12 to 2.0.16
  * rpm: Fix patches to apply to current master code
  * build(deps): bump anyhow from 1.0.98 to 1.0.99
  * state_machine: Automatically clean config override during tests
  * config: Implement singleton and factory pattern
  * testing: Support overriding configuration during tests
  * feat: implement standalone challenge-response authentication module
  * structures: rename session structs for clarity and fix typos
  * tpm: refactor certify_credential_with_iak() into a more generic function
  * Add Push Model Agent Mermaid FSM chart (#1095)
  * Add state to avoid exiting on wrong attestation (#1093)
  * Add 6 alphanumeric lowercase X-Request-ID header
  * Enhance Evidence Handling response parsing
  * build(deps): bump quote from 1.0.35 to 1.0.40
  * build(deps): bump libc from 0.2.172 to 0.2.175
  * build(deps): bump glob from 0.3.2 to 0.3.3
  * build(deps): bump actix-web from 4.10.2 to 4.11.0</changelog>
  <changelog author="aplanas@suse.com" date="1770638400">- Update vendored crates (bsc#1257908, CVE-2026-25727)
  * time 0.3.47
- Update to version 0.2.8+116:
  * build(deps): bump bytes from 1.7.2 to 1.11.1
  * api: Modify /version endpoint output in version 2.5
  * Add API v2.5 with backward-compatible /v2.5/quotes/integrity
  * tests: add unit test for resolve_agent_id (#1182)
  * (pull-model): enable retry logic for registration
  * rpm: Update specfiles to apply on master
  * workflows: Add test to detect unused crates
  * lib: Drop unused crates
  * push-model: Drop unused crates
  * keylime-agent: Drop unused crates
  * build(deps): bump uuid from 1.18.1 to 1.19.0
  * Update reqwest-retry to 0.8, retry-policies to 0.5
  * rpm: Fix cargo_build macro usage on CentOS Stream
  * fix(push-model): resolve hash_ek uuid to actual EK hash
  * build(deps): bump thiserror from 2.0.16 to 2.0.17
  * workflows: Separate upstream test suite from e2e coverage
  * Send UEFI measured boot logs as raw bytes (#1173)
  * auth: Add unit tests for SecretToken implementation
  * packit: Enable push-attestation tests
  * resilient_client: Prevent authentication token leakage in logs</changelog>
</package>
<package pkgid="67f628af834af886cba8f4f198ac9ff8637d39e96961e5807bbf635cd7f1cba6a87b68134b34b48b9a10c4776c28851f1d9be794f8b77983b481253132e3ede4" name="rust-keylime-debugsource" arch="aarch64">
  <version epoch="0" ver="0.2.8+116" rel="slfo.1.1_1.1"/>
  <changelog author="aplanas@suse.com" date="1715860800">- Update to version 0.2.5~4:
  * Fix 'unnecessary qualification' warnings
  * fix IAK template to match IDevID
  * rpm: fix COPR RPMs build for centos-stream-10
  * Build COPR RPMs for centos-stream-10</changelog>
  <changelog author="aplanas@suse.com" date="1718366400">- Update to version 0.2.6~0:
  * Bump version to 0.2.6
  * build(deps): bump libc from 0.2.153 to 0.2.155
  * build(deps): bump serde from 1.0.196 to 1.0.203
  * rpm/fedora: Update rust macro usage
  * config: Support hostnames in registrar_ip option
  * added use of persisted IAK and IDevID and authorisation values
  * config changes
  * Adding /agent/info API to agent
  * Fix leftover 'unnecessary qualification' warnings on tests</changelog>
  <changelog author="aplanas@suse.com" date="1725278400">- Update vendored crates (bsc#1229952, bsc#1230029, CVE-2024-43806)
  * rustix 0.37.25
  * rustix 0.38.34
  * shlex  1.3.0
- Update to version 0.2.6+13:
  * Enable test functional/iak-idevid-persisted-and-protected
  * build(deps): bump uuid from 1.7.0 to 1.10.0
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * keylime-agent/src/revocation: Fix comment indentation
  * keylime/crypto: Fix indentation of documentation comment
  * build(deps): bump thiserror from 1.0.59 to 1.0.63
  * build(deps): bump serde_json from 1.0.116 to 1.0.120
  * dependabot: Extend to also monitor workflow actions
  * ci: Disable Packit CI on CentOS Stream 9
  * ci: use CODECOV_TOKEN when submitting coverage data
  * revocation: Use into() for unfallible transformation
  * secure_mount: Fix possible infinite loop
  * error: Rename enum variants to avoid clippy warning</changelog>
  <changelog author="aplanas@suse.com" date="1737979200">- Update to version 0.2.7+1:
  * dist: Enable logging for keylime library in the service
  * Bump version to 0.2.7
  * scripts: Download coverage data from Testing Farm directly
  * main: Remove unnecessary lifetime
  * cargo: Bump pretty_env_logger to version 0.5.0
  * scripts: Fix regex in download_packit_coverage.sh
  * cargo: Bump clap crate to version 4.5.23
  * cargo: Bump base64 crate to version 0.22.1
  * build(deps): bump log from 0.4.22 to 0.4.25
  * build(deps): bump serde_json from 1.0.133 to 1.0.135
  * cargo: Bump tokio crate to version 1.42.0
  * packit: Fix RPM builds on copr
  * cargo: Bump thiserror crate to version 0.2.9
  * cargo: Update reqwest to version 0.12.12
  * build(deps): bump libc from 0.2.168 to 0.2.169
  * build(deps): bump glob from 0.3.1 to 0.3.2
  * version: Implement API version validation and ordering
  * main: Support using multiple API versions for registration
  * keylime: Introduce the registrar_client module
  * Provide endpoints under multiple API versions
  * Move 'serialization' module to the keylime library
  * Drop unnecessary dependency on common::API_VERSION
  * keylime-agent.conf: Bump version to 2.3
  * build(deps): bump serde from 1.0.210 to 1.0.217
  * build(deps): bump pest_derive from 2.7.14 to 2.7.15
  * build(deps): bump pest from 2.7.14 to 2.7.15
  * build(deps): bump libc from 0.2.167 to 0.2.168
  * config: Make IAK and IDevID certificates optional
  * Fix warnings reported by clippy
  * workflows: Run job in the CI container directly
  * tests: Add unit test for device ID builder
  * main: Move IAK/IDevID related code to dedicated module
  * tests: Add script to generate IAK and IDevID certificates
  * build(deps): bump openssl from 0.10.66 to 0.10.68
  * build(deps): bump uuid from 1.10.0 to 1.11.0
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * build(deps): bump actix-web from 4.5.1 to 4.9.0
  * build(deps): bump reqwest from 0.12.7 to 0.12.9
  * tests/setup_swtpm.sh: Add script to setup temporary TPM
  * Use a single TPM context and avoid race conditions during tests
  * config: Enable passing a hostname instead of IP
  * build(deps): bump clap from 4.3.11 to 4.5.21
  * build(deps): bump tempfile from 3.10.1 to 3.14.0
  * build(deps): bump pest_derive from 2.7.6 to 2.7.14
  * build(deps): bump pest from 2.7.6 to 2.7.14
  * build(deps): bump codecov/codecov-action from 4 to 5
  * workflows: Submit the coverage for merged PR from Fedora 41
  * tests: Use Fedora 41 to generate code coverage
  * api: Make API configuration modular
  * agent_handler: Move the /agent scope configuration
  * notifications_handler: Move the /notifications scope configuration
  * quotes_handler: Move the /quotes scope configuration to quotes_handler
  * keys_handler: Move /keys scope configuration to keys_handler
  * Use ${DESTDIR} for config
  * Fix showing wrong UUID
  * build(deps): bump actix-rt from 2.9.0 to 2.10.0
  * config: Refactor AgentConfig Source trait implementation
  * build(deps): bump log from 0.4.21 to 0.4.22
  * build(deps): bump serde_json from 1.0.120 to 1.0.128
  * tpm: check if EK certificate has valid ASN.1 DER encoding
  * build(deps): bump futures from 0.3.27 to 0.3.31
  * cargo: Bump reqwest to version 0.12.7
  * build(deps): bump serde from 1.0.203 to 1.0.210
  * tests: Add more tests to Packit CI
  * build(deps): bump docker/build-push-action from 5 to 6
  * tests: apply workarounds to known bugs</changelog>
  <changelog author="aplanas@suse.com" date="1749124800">- Update vendored crates (bsc#1243861, CVE-2024-12224)
  * idna 1.0.3
- Add Cargo_lock.patch to adjust versions that will allow the
  compilation of mbox crate
- Update to version 0.2.7+70:
  * build(deps): bump wiremock from 0.6.2 to 0.6.3
  * build(deps): bump uuid from 1.16.0 to 1.17.0
  * lib: Introduce AgentIdentity structure
  * gitignore: Add *.swp and *.orig to be ignored
  * build(deps): bump clap from 4.5.38 to 4.5.39
  * build(deps): bump tokio from 1.45.0 to 1.45.1
  * Unify Push Model structures time formats to UTC (#1016)
  * Add Quote related structures to Keylime library
  * Remove configuration file trailing whitespaces (#1012)
  * keylime-agent.conf: add all accepted TPM encryption algs
  * tpm: add policy auth for EK to activate crendential
  * Enable non standard key sizes and curves for EK and AK
  * config: Use next_back() instead of last() for iterators
  * Update to tss-esapi v7.6.0
  * Avoid duplicated call to ctx.create_ek
  * build(deps): bump clap from 4.5.23 to 4.5.38
  * Add registration for Push Model client
  * build(deps): bump tokio from 1.44.2 to 1.45.0
  * build(deps): bump chrono from 0.4.40 to 0.4.41
  * build(deps): bump tempfile from 3.17.1 to 3.20.0
  * Refactor code: move error, registration to lib
  * Move structure filling and URL selection code (#999)
  * build(deps): bump pest_derive from 2.7.15 to 2.8.0
  * build(deps): bump pest from 2.7.15 to 2.8.0
  * build(deps): bump libc from 0.2.169 to 0.2.172
  * Add Evidence/Authentication messages to prototype
  * build(deps): bump uuid from 1.15.1 to 1.16.0
  * build(deps): bump thiserror from 2.0.11 to 2.0.12
  * build(deps): bump signal-hook from 0.3.17 to 0.3.18
  * build(deps): bump log from 0.4.25 to 0.4.27
  * build(deps): bump assert_cmd from 2.0.16 to 2.0.17
  * build(deps): bump actix-web from 4.9.0 to 4.10.2
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * build(deps): bump serde from 1.0.217 to 1.0.219
  * Add unit tests for sessions.rs structures
  * Add auth(sessions) structures
  * Fix minor README.md issue (#988)
  * Define EvidenceHandling structures (#971)
  * Add mockoon test scenario
  * Add client certificates to push-attestation prototype
  * Cargo: bump url crate to version 2.5.4
  * Add logging to the push attestation prototype
  * Do not use certificate on insecure mode
  * common: Move the EncryptedData structure from common to the library
  * common: Move AuthTag from common to the library
  * build(deps): bump openssl from 0.10.71 to 0.10.72
  * common: Move Symmkey to library as crypto::symmkey
  * common: Remove unused constants and static values
  * build(deps): bump tokio from 1.43.0 to 1.44.2
  * Refactor code: Include AgentIdentity structure
  * Push model prototype
  * Add support for ek certificate chain, stored in TPM NVRAM.
  * Recover key_class field and set it as "asymmetric"
  * Update push model structures to latest values
  * build(deps): bump serde_json from 1.0.138 to 1.0.140
  * packit: Add identifier for each copr_build job
  * keylime-agent.conf: only mention ecdsa and rsassa for signing
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump uuid from 1.13.2 to 1.15.1
  * Add capabilities_negotiation structures
  * packit: Add compatibility/api_version_compatibility test
  * build(deps): bump uuid from 1.11.0 to 1.13.2
  * build(deps): bump serde_json from 1.0.135 to 1.0.138
  * build(deps): bump thiserror from 2.0.9 to 2.0.11
  * build(deps): bump tempfile from 3.14.0 to 3.17.1
  * Allow agent to start as non-root
  * scripts: Fix coverage information downloading script
  * build(deps): bump openssl from 0.10.68 to 0.10.70
  * build(deps): bump tokio from 1.42.0 to 1.43.0</changelog>
  <changelog author="aplanas@suse.com" date="1752494400">- Update vendored crates (bsc#1242623, CVE-2025-3416)
  * openssl 0.10.73
- Update to version 0.2.7+117:
  * Increase coverage in evidence handling structure
  * Add Capabilities Negotiations resp. missing fields
  * Fix UEFI test to check file access in all cases
  * context_info_handler: Do not assume /var/lib/keylime exists
  * Fix clippy warnings about uninlined format arguments
  * attestation: Allow unwrap() in tests
  * Increase coverage (groom code, extend unit tests)
  * Include IMA/UEFI logs in Evidence Handling request
  * Include method to get all IMA entries as string
  * Send correct list of pcr banks and sign algorithms
  * Try to fix TPM tests related issues
  * Define attestation perform asynchronous
  * Perform attestation in push model agent binary
  * Refactor code to use new attestation.rs
  * Create attestation.rs for Attestation stuff
  * Move ContextInfo management to its own handler
  * Adjust context_info.rs after rebase
  * Add attestation function to ContextInfo structure
  * Add prohibited signing algorithms, avoid ecschnorr
  * keylime/config: Use macro to implement PushModelConfigTrait
  * Introduce keylime-macros and define_view_trait
  * config: Remove KeylimeConfig structure
  * config: Remove unnecessary options and lazy initialization
  * Fix pcr_bank function to send all possible slots
  * Send Content-Type:application/json on request (#1039)
  * Send correct 'key_algorithm' in certification_keys (#1035)
  * Push Model: Persist Attestation Key to file
  * Add Keylime push model binary to root GNUmakefile
  * Use singleton to avoid multiple Context allocation
  * tests: Do not assume `/var/lib/keylime` exists (#1030)
  * lib/cert: Fix race condition due to use of same file path
  * payloads: Fix race condition in tests
  * Add uefi_log_handler.rs to parse UEFI binary
  * Use IMA log parser to send correct entry count
  * Add IMA log parser
  * build(deps): bump once_cell from 1.19.0 to 1.21.3
  * lib/config/base.rs: Add more unit tests
  * lib/permissions: Add unit tests
  * keylime-agent: move JsonWrapper from common.rs to the library
  * lib/agent_data: Move agent_data related tests from common
  * common: Replace APIVersion with the library Version structure
  * keylime_agent: Move secure_mount.rs to the library
  * lib: Rename keylime_error.rs as error.rs
  * config: Move config to keylime library
  * config: Rename push_model_config to push_model
  * lib: Move permissions.rs from keylime-agent to the lib
  * Extract Capabilities Negotiation info from TPM (#1014)</changelog>
  <changelog author="aplanas@suse.com" date="1754568000">- Update vendored crates (bsc#1247193, CVE-2025-58266)
  * shlex 1.3.0
- Rebase keylime-agent.conf.diff for current configuration
- Drop Cargo_lock.patch patch, already present in Cargo.lock
- Update to version 0.2.7+141:
  * service: Use WantedBy=multi-user.target
  * rpm: Add subpackage for push-attestation agent
  * push-model: implement continuous attestation with configurable intervals
  * Retry registration forever in the state machine
  * Add Verifier URL to configuration
  * Align exp.backoff to current configuration format
  * Increase coverage of state machine (using Context)
  * Increase coverage of struct_filler.rs
  * Groom code (remove dead code)
  * Fix exponential backoff (10secs, 4xx accepted)
  * test: Add documentation test to tests/run.sh
  * tpm: Avoid running code example during documentation tests
  * state_machine: Always start the agent from the Unregistered state
  * Add fixes for the URL construction
  * Refactor evidences collection in push attestation agent
  * push-model: refactor attestation logic into a state machine
  * Fix body sending by allowing serializing strings (#1057)
  * Log ResilientClient errors/response status codes (#1055)
  * Add AK signing scheme and hash algorithm to negotiation
  * tpm: Add method to extract signing scheme and hash algorithm from AK
  * Allow custom content-type/accept headers
  * Integrate exponential backoff to registration (#1052)
  * keylime/structures: Rename ShaValues to PcrBanks
  * Add resilient_client for exponential backoff (#1048)</changelog>
  <changelog author="aplanas@suse.com" date="1755691200">- Update vendored crates (bsc#1248006, CVE-2025-55159)
  * slab 0.4.11
- Add Cargo_lock.patch patch to update slab and other dependencies
- Update to version 0.2.8+12:
  * build(deps): bump actions/checkout from 4 to 5
  * build(deps): bump cfg-if from 1.0.0 to 1.0.1
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump clap from 4.5.39 to 4.5.45
  * build(deps): bump pest from 2.8.0 to 2.8.1
  * Fix clippy warnings
  * Use verifier-provided interval for continuous attestation timing
  * Add meta object with seconds_to_next_attestation to evidence response
  * Fix boot time retrieval
  * Fix IMA log format (it must be ['text/plain']) (#1073)
  * Remove unnecessary configuration fields
  * cargo: Bump retry-policies to version 0.4.0
  * Bump version to 0.2.8</changelog>
  <changelog author="aplanas@suse.com" date="1767787200">- Use tmpfiles.d for /var directories (PED-14736)
  + tmpfiles.keylime renamed to rust-keylime.conf and extended
- Update to version 0.2.8+96:
  * build(deps): bump wiremock from 0.6.4 to 0.6.5
  * build(deps): bump actions/checkout from 5 to 6
  * build(deps): bump chrono from 0.4.41 to 0.4.42
  * packit: Get coverage from Fedora 43 runs
  * Fix issues pointed out by clippy
  * Replace mutex unwraps with proper error handling in TPM library
  * Remove unused session request methods from StructureFiller
  * Fix config panic on missing ek_handle in push model agent
  * build(deps): bump tempfile from 3.21.0 to 3.23.0
  * build(deps): bump actions/upload-artifact from 4 to 6 (#1163)
  * Fix clippy warnings project-wide
  * Add KEYLIME_DIR support for verifier TLS certificates in push model agent
  * Thread privileged resources and use MeasurementList for IMA reading
  * Add privileged resource initialization and privilege dropping to push model agent
  * Fix privilege dropping order in run_as()
  * add documentation on FQDN hostnames
  * Remove confusing logs for push mode agent
  * Set correct default Verifier port (8891-&gt;8881) (#1159)
  * Add verifier_url to reference configuration file (#1158)
  * Add TLS support for Registrar communication (#1139)
  * Fix agent handling of 403 registration responses (#1154)
  * Add minor README.md rephrasing (#1151)
  * build(deps): bump actions/checkout from 5 to 6 (#1153)
  * ci: update spec files for packit COPR build
  * docs: improve challenge encoding and async TPM documentation
  * refactor: improve middleware and error handling
  * feat: add authentication client with middleware integration
  * docker: Include keylime_push_model_agent binary
  * Include attestation_interval configuration (#1146)
  * Persist payload keys to avoid attestation failure on restart
  * crypto: Implement the load or generate pattern for keys
  * Use simple algorithm specifiers in certification_keys object (#1140)
  * tests: Enable more tests in CI
  * Fix RSA2048 algorithm reporting in keylime agent
  * Remove disabled_signing_algorithms configuration
  * rpm: Fix metadata patches to apply to current code
  * workflows/rpm.yml: Use more strict patching
  * build(deps): bump uuid from 1.17.0 to 1.18.1
  * Fix ECC algorithm selection and reporting for keylime agent
  * Improve logging consistency and coherency
  * Implement minimal RFC compliance for Location header and URI parsing (#1125)
  * Use separate keys for payload mechanism and mTLS
  * docker: update rust to 1.81 for distroless Dockerfile
  * Ensure UEFI log capabilities are set to false
  * build(deps): bump http from 1.1.0 to 1.3.1
  * build(deps): bump log from 0.4.27 to 0.4.28
  * build(deps): bump cfg-if from 1.0.1 to 1.0.3
  * build(deps): bump actix-rt from 2.10.0 to 2.11.0
  * build(deps): bump async-trait from 0.1.88 to 0.1.89
  * build(deps): bump trybuild from 1.0.105 to 1.0.110
  * Accept evidence handling structures null entries
  * workflows: Add test to check if RPM patches still apply
  * CI: Enable test add-agent-with-malformed-ek-cert
  * config: Fix singleton tests
  * FSM: Remove needless lifetime annotations (#1105)
  * rpm: Do not remove wiremock which is now available in Fedora
  * Use latest Fedora httpdate version (1.0.3)
  * Enhance coverage with parse_retry_after test
  * Fix issues reported by CI regarding unwrap() calls
  * Reuse max retries indicated to the ResilientClient
  * Include limit of retries to 5 for Retry-After
  * Add policy to handle Retry-After response headers
  * build(deps): bump wiremock from 0.6.3 to 0.6.4
  * build(deps): bump serde_json from 1.0.140 to 1.0.143
  * build(deps): bump pest_derive from 2.8.0 to 2.8.1
  * build(deps): bump syn from 2.0.90 to 2.0.106
  * build(deps): bump tempfile from 3.20.0 to 3.21.0
  * build(deps): bump thiserror from 2.0.12 to 2.0.16
  * rpm: Fix patches to apply to current master code
  * build(deps): bump anyhow from 1.0.98 to 1.0.99
  * state_machine: Automatically clean config override during tests
  * config: Implement singleton and factory pattern
  * testing: Support overriding configuration during tests
  * feat: implement standalone challenge-response authentication module
  * structures: rename session structs for clarity and fix typos
  * tpm: refactor certify_credential_with_iak() into a more generic function
  * Add Push Model Agent Mermaid FSM chart (#1095)
  * Add state to avoid exiting on wrong attestation (#1093)
  * Add 6 alphanumeric lowercase X-Request-ID header
  * Enhance Evidence Handling response parsing
  * build(deps): bump quote from 1.0.35 to 1.0.40
  * build(deps): bump libc from 0.2.172 to 0.2.175
  * build(deps): bump glob from 0.3.2 to 0.3.3
  * build(deps): bump actix-web from 4.10.2 to 4.11.0</changelog>
  <changelog author="aplanas@suse.com" date="1770638400">- Update vendored crates (bsc#1257908, CVE-2026-25727)
  * time 0.3.47
- Update to version 0.2.8+116:
  * build(deps): bump bytes from 1.7.2 to 1.11.1
  * api: Modify /version endpoint output in version 2.5
  * Add API v2.5 with backward-compatible /v2.5/quotes/integrity
  * tests: add unit test for resolve_agent_id (#1182)
  * (pull-model): enable retry logic for registration
  * rpm: Update specfiles to apply on master
  * workflows: Add test to detect unused crates
  * lib: Drop unused crates
  * push-model: Drop unused crates
  * keylime-agent: Drop unused crates
  * build(deps): bump uuid from 1.18.1 to 1.19.0
  * Update reqwest-retry to 0.8, retry-policies to 0.5
  * rpm: Fix cargo_build macro usage on CentOS Stream
  * fix(push-model): resolve hash_ek uuid to actual EK hash
  * build(deps): bump thiserror from 2.0.16 to 2.0.17
  * workflows: Separate upstream test suite from e2e coverage
  * Send UEFI measured boot logs as raw bytes (#1173)
  * auth: Add unit tests for SecretToken implementation
  * packit: Enable push-attestation tests
  * resilient_client: Prevent authentication token leakage in logs</changelog>
</package>
<package pkgid="28041f4347e0ed1340ceab247dd476cc72bdd5067736517c38a2cb0bc9c5c28cf0b0abfc9b40c074cc19d764ebbce3e8f14f6daaa573e55164f4f958d733c405" name="samba-client-libs-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.20.2+git.348.4fb6af61307" rel="slfo.1.1_1.8"/>
  <changelog author="dmulder@suse.com" date="1698062400">- packaging: samba-tool domain provision requires python3-Markdown;
  (bsc#1216519).</changelog>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);</changelog>
  <changelog author="scabrero@suse.de" date="1717416000">- Fix non deterministic builds; (bsc#1225754); (bso#13213);</changelog>
  <changelog author="nopower@suse.com" date="1718798400">- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).</changelog>
  <changelog author="pgajdos@suse.com" date="1720094400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.de" date="1720094401">- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);</changelog>
</package>
<package pkgid="b7cdfd9c57c6c396804ff75377cb45bb64560c9ff24785584261c36dee5493ba5fbcf18a2d669beb7b6193e881e6a33623cb01c718855270daf7f9436730944a" name="samba-debugsource" arch="aarch64">
  <version epoch="0" ver="4.20.2+git.348.4fb6af61307" rel="slfo.1.1_1.8"/>
  <changelog author="dmulder@suse.com" date="1698062400">- packaging: samba-tool domain provision requires python3-Markdown;
  (bsc#1216519).</changelog>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);</changelog>
  <changelog author="scabrero@suse.de" date="1717416000">- Fix non deterministic builds; (bsc#1225754); (bso#13213);</changelog>
  <changelog author="nopower@suse.com" date="1718798400">- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).</changelog>
  <changelog author="pgajdos@suse.com" date="1720094400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.de" date="1720094401">- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);</changelog>
</package>
<package pkgid="b1402f6437575e07d7ae656ae00dde9d694966182bb35929b8c91a92c2610568ed5bd8d52ee0e1aed7c24615171dfa51cf0c01cf1019515f776cb5289d197480" name="schily-debugsource" arch="aarch64">
  <version epoch="0" ver="2022.10.16" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="2a852ccd6821ac513ed0c6104385c0d77242f93a22ca2cb3509e348e885b09d0d757bc5881df87554724628c3b8bd17134bde36d6b423df9be2fcee1bfed10d4" name="sed-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.9" rel="slfo.1.1_1.2"/>
  <changelog author="bwiedemann@suse.com" date="1523707200">- Make package build reproducible (boo#1040589)</changelog>
  <changelog author="mpluskal@suse.com" date="1545307200">- Update to version 4.6:
  * sed now prints a clear error message when r/R/w/W (and s///w)
    commands are missing a filename.
  * sed now uses fully-buffered output (instead of line-buffered)
    when writing to files.
  * sed no longer accesses invalid memory (heap overflow) when
    given invalid backreferences in 's' command
  * sed no longer adds extraneous NUL when given s/$//n command.
  * sed no longer accesses invalid memory (heap overflow) with
    s/$//n regexes.
  * New option, --debug: print the input sed script in canonical
    form and annotate program execution.
- Refresh sed-dont_close_twice.patch</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- GNU sed 4.7:
  * Fix some fails with \b in the C locale and with the DFA matcher
  - ------------------------------------------------------------------</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="mliska@suse.cz" date="1574251200">- Add disable-null-ptr-argument.patch in order to fix
  boo#1157218.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1579435200">- GNU sed 4.8:
  * "sed -i" now creates temporary files with correct umask
  (limited to u=rwx), to avoid prolems with fuse-like file systems
  * improved DFA performance through gnulib update
- drop disable-null-ptr-argument.patch, upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- sed.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1667822400">- GNU sed 4.9:
  * 'sed --follow-symlinks -i' no longer loops forever when its
    operand is a symbolic link cycle.
  * a program with an execution line longer than 2GB can no longer
    trigger an out-of-bounds memory write.
  * using the R command to read an input line of length longer than
    2GB can no longer trigger an out-of-bounds memory read.
  * In locales using UTF-8 encoding, the regular expression '.' no
    longer sometimes fails to match Unicode characters U+D400
    through U+D7FF (some Hangul Syllables, and Hangul Jamo
    Extended-B) and Unicode characters U+108000 through U+10FFFF
    (half of Supplemental Private Use Area plane B).
  * I/O errors involving temp files no longer confuse sed into
    using a FILE * pointer after fclosing it, which has undefined
    behavior in C.
  * New: The 'r' command now accepts address 0, allowing inserting
    a file before the first line.
  * Sed now prints the less-surprising variant in a corner case of
    POSIX-unspecified behavior.  Before, this would print "n".
    Now, it prints "X":
    printf n | sed 'sn\nnXn'; echo
- drop patches now upstream:
  * gnulib-test-avoid-FP-perror-strerror.patch
  * sed-dont_close_twice.patch
- disable profile guided optimization in build due to what seems to
  be a bug in gnulib</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="4a052a52c0e236dc1e4f40c7a91406fbd66cc10cbce7d55e23db68614b8bb3a0bb7bd76ca2b66367e19ef3811e62d7cd575c77bb41d6c4074f9327bfe6ea3155" name="sed-debugsource" arch="aarch64">
  <version epoch="0" ver="4.9" rel="slfo.1.1_1.2"/>
  <changelog author="bwiedemann@suse.com" date="1523707200">- Make package build reproducible (boo#1040589)</changelog>
  <changelog author="mpluskal@suse.com" date="1545307200">- Update to version 4.6:
  * sed now prints a clear error message when r/R/w/W (and s///w)
    commands are missing a filename.
  * sed now uses fully-buffered output (instead of line-buffered)
    when writing to files.
  * sed no longer accesses invalid memory (heap overflow) when
    given invalid backreferences in 's' command
  * sed no longer adds extraneous NUL when given s/$//n command.
  * sed no longer accesses invalid memory (heap overflow) with
    s/$//n regexes.
  * New option, --debug: print the input sed script in canonical
    form and annotate program execution.
- Refresh sed-dont_close_twice.patch</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- GNU sed 4.7:
  * Fix some fails with \b in the C locale and with the DFA matcher
  - ------------------------------------------------------------------</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="mliska@suse.cz" date="1574251200">- Add disable-null-ptr-argument.patch in order to fix
  boo#1157218.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1579435200">- GNU sed 4.8:
  * "sed -i" now creates temporary files with correct umask
  (limited to u=rwx), to avoid prolems with fuse-like file systems
  * improved DFA performance through gnulib update
- drop disable-null-ptr-argument.patch, upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- sed.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1667822400">- GNU sed 4.9:
  * 'sed --follow-symlinks -i' no longer loops forever when its
    operand is a symbolic link cycle.
  * a program with an execution line longer than 2GB can no longer
    trigger an out-of-bounds memory write.
  * using the R command to read an input line of length longer than
    2GB can no longer trigger an out-of-bounds memory read.
  * In locales using UTF-8 encoding, the regular expression '.' no
    longer sometimes fails to match Unicode characters U+D400
    through U+D7FF (some Hangul Syllables, and Hangul Jamo
    Extended-B) and Unicode characters U+108000 through U+10FFFF
    (half of Supplemental Private Use Area plane B).
  * I/O errors involving temp files no longer confuse sed into
    using a FILE * pointer after fclosing it, which has undefined
    behavior in C.
  * New: The 'r' command now accepts address 0, allowing inserting
    a file before the first line.
  * Sed now prints the less-surprising variant in a corner case of
    POSIX-unspecified behavior.  Before, this would print "n".
    Now, it prints "X":
    printf n | sed 'sn\nnXn'; echo
- drop patches now upstream:
  * gnulib-test-avoid-FP-perror-strerror.patch
  * sed-dont_close_twice.patch
- disable profile guided optimization in build due to what seems to
  be a bug in gnulib</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="ff8957c6f070281ee56bd7d5680f935e47f4d2c0cd4cbab24ab84d765143cd0caad71acc0ed5fee0fc3ca23cf178247675440ed7a42515dfb8c7fcf99132f6db" name="selinux-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5" rel="slfo.1.1_1.3"/>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Add missing libselinux-utils Provides to selinux-tools so that
  %selinux_requires works</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1644926400">- Add Requires for exact libselinux1 version for selinux-tools
- Simplyfied check for correct boot paramaters in selinux-ready
  (bsc#1195361)</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1653998400">- Added restorecon_pin_file.patch. Fixes issus when running
  fixfiles/restorecon</changelog>
  <changelog author="jsegitz@suse.com" date="1657195200">- Fixed initrd check in selinux-ready (bnc#1186127)</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine now.</changelog>
  <changelog author="jsegitz@suse.com" date="1679659200">- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
</package>
<package pkgid="042a0b238ccfa30fa5e02b678aa498acc924d6b0b3bfbe1ec2379701d8bb349762f9cc3edc8c90aeb9bed42b070a5c645b8c36fd81dd8337b39affb630b610ca" name="sensors-debugsource" arch="aarch64">
  <version epoch="0" ver="3.6.0" rel="slfo.1.1_1.2"/>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1551614400">- Join %service_* lines to generate less scriptlet boilerplate.</changelog>
  <changelog author="smar@smar.fi" date="1575374400">- Removed upstreamed patch lm_sensors-3.4.0-sensors-detect-ppc64le.patch
- Update to version 3.6.0:
  + configs: Added a number of new configuration files
  + fancontrol: AVERAGE env variable can be used to set the number of previous readings to average
  + Makefile: The MACHINE variable has been renamed to ARCH
  + sensord: Add an option -1/--oneline to print chip and adapter on the same line
  + sensors: Fixed a stray comma bug in the JSON output
  * Fixed Fahrenheit conversion with raw and JSON output
  * Scale voltage and current values in the default output format
  + sensors-detect: Add detection of AMD Family 17h, models 30h, 70h
  * Add detection of some AMD Family 15h models
  * Add detection of AMD Family 16h model 30h power sensors
  * Add detection of Hygon Family 18h thermal sensors
  * Add detection of Nuvoton NCT6797D
  * Add detection of Nuvoton NCT6798D
  * Add detection of Nuvoton NCT6112D/NCT6114D/NCT6116D
  * Fix printing CPU info on non-x86 arches
  * Fix printing lm_sensors version
  * Mark Fintek F75387SG/RG as supported by the f75375s driver</changelog>
  <changelog author="jdelvare@suse.com" date="1589284800">- lm_sensors-3.6.0-sensors-detect-fix-driver-for-w83677hgi.patch:
  Point owners of Nuvoton W83677HG-I and compatible chipsets to
  the nct6775 driver, as support was just removed from the
  w83627ehf driver (bsc#1169316).</changelog>
  <changelog author="jdelvare@suse.com" date="1613044800">- pwmconfig-handle-fan-input-error.patch: pwmconfig: Deal
  gracefully with unreadable fan inputs (boo#1181890).
- pwmconfig-raise-fan-threshold.patch: pwmconfig: Further raise the
  fan threshold (boo#1181890).</changelog>
  <changelog author="jdelvare@suse.com" date="1619438400">- change-pidfile-path-from-var-run-to-run.patch: Change PIDFile
  path from /var/run to /run (bsc#1185183).
- var-run-deprecated.patch: /var/run is deprecated (bsc#1185183).</changelog>
  <changelog author="jengelh@inai.de" date="1629460800">- Trim ExcludeArch, package build is successful.</changelog>
  <changelog author="jsegitz@suse.com" date="1637064000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_fancontrol.service.patch
  * harden_lm_sensors.service.patch
  * harden_sensord.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1638187200">- Remove ProtectKernelTunables from harden_lm_sensors.service.patch,
  breaks service (boo#1193149)</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Also remove ProtectKernelTunables from harden_fancontrol.service.patch,
  breaks service (boo#1193149)</changelog>
</package>
<package pkgid="6a1f916b782023a954224a450933093f05fca27549894b32e0aa1f3d146eb4979ad779ff86340d86e5b21b0bd0b4dc8cf0ae6cc18a12f97c45ba56856346bc51" name="setools-debugsource" arch="aarch64">
  <version epoch="0" ver="4.4.3" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.com" date="1603281600">- Cleanup BuildRequires
- Fix setools-gui dependencies, we are using python-qt5 and not
  tcl/tk</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Stay on a single python3 flavor even if there are more than one
  gh#openSUSE/python-rpm-macros#73</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to the version 4.4.0:
  * Added support for old Boolean name substitution in seinfo and sesearch.
  * Added sechecker tool which is a configuration file driven analysis tool.</changelog>
  <changelog author="dimstar@opensuse.org" date="1623153600">- Fix dependency of python3-setools: require python3, not python
  (which is python2).</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1645531200">- Add make_networkx_optional.patch to cut down installation requirements
- Change python3-networkx from require into recommend</changelog>
  <changelog author="jsegitz@suse.com" date="1662120000">- Added README.SUSE and drop recommend for python3-networkx altogether
  (bsc#1202676)</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1675684800">- Update to version 4.4.1:
  * Replace deprecated NetworkX function use in information flow and domain
    transition analysis. This function was removed in NetworkX 3.0.
  * Fix bug in apol copy and cut functions when copying from a tree view.
  * Fix bug with extended permission set construction when a range includes
    0x0.
  * Add sesearch -Sp option for permission subset match.
  * Fix error in man page description for sesearch -ep option.
  * Improve output stability in constraint, common, class, role, and user
    queries.
  * Updated permission map.
  * Fix bug in sechecker parsing of multiline values.
  * Other code cleanups not visible to users.</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1682510400">- Update to version 4.4.2:
  * Make NetworkX optional. sedta and seinfoflow tools, along with the
    equivalent analyses in apol require NetworkX.
  * Remove neverallow options in sesearch and apol. These are not usable
    since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1690891200">- Update to version 4.4.3:
  * Fix compilation with Cython 3.0.0.
  * Improve man pages.
  * Remove neverallow options in sediff.
  * Add -r option to seinfoflow to get flows into the source type.
  * Reject a rule with no permissions as invalid policy.</changelog>
</package>
<package pkgid="d112438f564d90148e0274453db9bd7d3f3f676e0873105d908d698831923db0fd73667a0e9632c585204f7d5936fdfc55227ac2c2e26e03cbff047fc4b6030a" name="setroubleshoot-debugsource" arch="aarch64">
  <version epoch="0" ver="3.3.32" rel="slfo.1.1_1.3"/>
  <changelog author="jsegitz@suse.com" date="1628596800">- Delete setroubleshoot-rpmlintrc. For the devel project it's not
  necessary and for official products we don't allow to reduce the
  badness of the warnings listed in there</changelog>
  <changelog author="gmbr3@opensuse.org" date="1629460800">- Ensure /run is used, not /var/run
- Add CONFIG parameter to %sysusers_generate_pre
- Don't fdupes unnecessarily</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Drop build requirement for gtk2-devel</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Switch runtime requirement of server package from ancient
  PyGObject 2 to the current version. Build requirement was already
  current.</changelog>
  <changelog author="zkubala@suse.cz" date="1666267200">- Update to version 3.3.30 (bnc#1204344)
  Summary of changes from 3.3.26 to 3.3.30:
  * sedispatch: check read_size
  * SafeConfigParser is deprecated and will be dropped
  * Fix typos in --help, man pages and developer's guide
  * Improve DSP module reporting
  * Look for modules in /usr/share/selinux/packages
  * Always use rpm source package for reporting
  * Improve after_first email filter behavior
  * Set right ownership on /var/lib/setroubleshoot
  * Install systemd-sysusers config
  * Remove Requires(pre) useradd &amp; groupadd
  * Introduce email.use_sendmail option
  * Update translations
  * Miscellaneous python and build system changes
  * Fix couple of typos
  * Drop Python2 support
  * Use inspect.signature() instead of instead.getargspec()
  Spec file modification to reflect openSUSE dependencies and paths.
  Removed old patches
  * setroubleshoot-Stop-SetroubleshootFixit-after-10-seconds-of-inactiv.patch
  * setroubleshoot-Do-not-use-Python-slip-package.patch
  * setroubleshoot-Gracefully-handle-unavailable-libreport.patch</changelog>
  <changelog author="zkubala@suse.cz" date="1669809600">- Fix dbus conf file location to /usr/share/dbus-1</changelog>
  <changelog author="zkubala@suse.cz" date="1670500800">- Small adjustments in a spec file for dirs and files
- Add documentation to be build in setroubleshoot-doc</changelog>
  <changelog author="fcrozat@suse.com" date="1674561600">- Update to version 3.3.31:
  * Add a screen reader label to the icon
  * seapplet: avoid ValueError when parsing sealert.conf
  * doc: Document performance related changes
  * Decrease setroubleshootd priority and limit RAM utilization to 1GB
- Add python3-setuptools and python3-pip to BuildRequires.</changelog>
  <changelog author="zkubala@suse.cz" date="1686139200">- Add patch remove-pip-from-makefile.patch to temp fix build error
  caused by invoking `-m pip install` within build process by
  return to `setup.py install` - we do not allow network
  connection in secure build mode in OBS</changelog>
  <changelog author="fcrozat@suse.com" date="1699617600">- Update to version 3.3.32:
  * Rename session bus name to org.fedoraproject.sealert
  * seapplet: wrap SEApplet() to try except
  * util.py: Add doctext test for build_module_type_cache()
  * Update translations
- Add explicit dependency on python3-six for server subpackage.
- Remove buildrequires on gtk2-devel</changelog>
</package>
<package pkgid="8aa84aa300fbc9af268cf9a45a39e472f3c969063ccd5f2573ee7b024712c9b129c5d1f5a49e25dab9609cd765c058150da177f7f81d57ee98ce879b921b573a" name="setroubleshoot-server-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.3.32" rel="slfo.1.1_1.3"/>
  <changelog author="jsegitz@suse.com" date="1628596800">- Delete setroubleshoot-rpmlintrc. For the devel project it's not
  necessary and for official products we don't allow to reduce the
  badness of the warnings listed in there</changelog>
  <changelog author="gmbr3@opensuse.org" date="1629460800">- Ensure /run is used, not /var/run
- Add CONFIG parameter to %sysusers_generate_pre
- Don't fdupes unnecessarily</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Drop build requirement for gtk2-devel</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Switch runtime requirement of server package from ancient
  PyGObject 2 to the current version. Build requirement was already
  current.</changelog>
  <changelog author="zkubala@suse.cz" date="1666267200">- Update to version 3.3.30 (bnc#1204344)
  Summary of changes from 3.3.26 to 3.3.30:
  * sedispatch: check read_size
  * SafeConfigParser is deprecated and will be dropped
  * Fix typos in --help, man pages and developer's guide
  * Improve DSP module reporting
  * Look for modules in /usr/share/selinux/packages
  * Always use rpm source package for reporting
  * Improve after_first email filter behavior
  * Set right ownership on /var/lib/setroubleshoot
  * Install systemd-sysusers config
  * Remove Requires(pre) useradd &amp; groupadd
  * Introduce email.use_sendmail option
  * Update translations
  * Miscellaneous python and build system changes
  * Fix couple of typos
  * Drop Python2 support
  * Use inspect.signature() instead of instead.getargspec()
  Spec file modification to reflect openSUSE dependencies and paths.
  Removed old patches
  * setroubleshoot-Stop-SetroubleshootFixit-after-10-seconds-of-inactiv.patch
  * setroubleshoot-Do-not-use-Python-slip-package.patch
  * setroubleshoot-Gracefully-handle-unavailable-libreport.patch</changelog>
  <changelog author="zkubala@suse.cz" date="1669809600">- Fix dbus conf file location to /usr/share/dbus-1</changelog>
  <changelog author="zkubala@suse.cz" date="1670500800">- Small adjustments in a spec file for dirs and files
- Add documentation to be build in setroubleshoot-doc</changelog>
  <changelog author="fcrozat@suse.com" date="1674561600">- Update to version 3.3.31:
  * Add a screen reader label to the icon
  * seapplet: avoid ValueError when parsing sealert.conf
  * doc: Document performance related changes
  * Decrease setroubleshootd priority and limit RAM utilization to 1GB
- Add python3-setuptools and python3-pip to BuildRequires.</changelog>
  <changelog author="zkubala@suse.cz" date="1686139200">- Add patch remove-pip-from-makefile.patch to temp fix build error
  caused by invoking `-m pip install` within build process by
  return to `setup.py install` - we do not allow network
  connection in secure build mode in OBS</changelog>
  <changelog author="fcrozat@suse.com" date="1699617600">- Update to version 3.3.32:
  * Rename session bus name to org.fedoraproject.sealert
  * seapplet: wrap SEApplet() to try except
  * util.py: Add doctext test for build_module_type_cache()
  * Update translations
- Add explicit dependency on python3-six for server subpackage.
- Remove buildrequires on gtk2-devel</changelog>
</package>
<package pkgid="790420cb50a458fde068550c3542d1458fe6c395b478ff10b227702d7be082b7917438b7a49ce6d8a15d31f1f01f02a754a9a6ee6089e438d3dd2f4dd5e23bee" name="sg3_utils-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.48~20221101+1.142dace" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option; sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
</package>
<package pkgid="37109030ef7f2288bd49aabd59f7a6db7f167a4895ca4ff4329b76e0a1f40736514cefc74199a451afdb3f72081d3907842b615c3d218035bd05833376a5a98e" name="sg3_utils-debugsource" arch="aarch64">
  <version epoch="0" ver="1.48~20221101+1.142dace" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option; sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
</package>
<package pkgid="cb407dc4c3e55ee798448abedff8356f5e85164615ec2a46a00b7ce97513d5d5650c3fd27750233f15b216e14c48af5f1fdd81261989ef3f61bc457287bc1c67" name="sha1collisiondetection-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.3" rel="slfo.1.1_1.2"/>
  <changelog author="astieger@suse.com" date="1488283200">- CLI to check for SHA-1 collisions bsc#1026646 - CVE-2005-4900
- initial package (cli only)</changelog>
  <changelog author="astieger@suse.com" date="1491825600">- update to 1.0.3:
  * SIMD code removed
  * performance improvements
- package library
- conflicts with libmd-devel</changelog>
  <changelog author="astieger@suse.com" date="1495454400">- better printing of errors, and allow hashing stdin
  add sha1collisiondetection-1.0.3-io-fixes.patch</changelog>
  <changelog author="tiwai@suse.de" date="1501848000">- Fix include header path to /usr/include/sha1dc/sha1.h as supposed
  by upstream installation
- Remove conflicts with libmd-devel, as we changed the header path</changelog>
  <changelog author="ro@suse.de" date="1517400000">- add sha1collisiondetection-endian_detection.patch
  fix detection of endianness at compile time</changelog>
  <changelog author="ro@suse.de" date="1517400001">- cleaner solution for the endian detection issue:
  include the proper header file</changelog>
</package>
<package pkgid="3af936913b0dec599a511e726b082757ea602fbdb47035de28ec10604835473822b9b7b16aa87b5329166fac829aaf6f451d23e6edf1e01ad68cfcc9031b6c5c" name="shadow-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.15.1" rel="slfo.1.1_1.3"/>
  <changelog author="mvetter@suse.com" date="1696593600">- Update to 4.14.1:
  Build system: Merge libshadow and libmisc into a single libshadow.
  This fixes problems in the linker, which were reported at least
  in Gentoo. #791
- Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- Update to 4.14.2:
  * libshadow:
    + Fix build with musl libc.
    + Avoid NULL dereference.
    + Update utmp at an initial login
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
  * Manual:
    + Document --prefix in chage(1), chpasswd(8), and passwd(1)
- Drop upstreamed shadow-4.14.0-selinux-labels.patch</changelog>
  <changelog author="mvetter@suse.com" date="1704801600">- bsc#1199026 bsc#1203823:
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="mvetter@suse.com" date="1705406400">- Update to 4.14.3:
  * libshadow:
    + Avoid null pointer dereference (#904)</changelog>
  <changelog author="mvetter@suse.com" date="1707739200">- Update to 4.14.4:
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
  * libshadow:
    + Fix build error (parameter name omitted).
    + Fix off-by-one bug.
    + Remove warning.
- Add shadow-4.14.4-chgpasswd-typo.patch: to fix build. See #926
- Update patch macro `patchN` -&gt; `patch -P N`</changelog>
  <changelog author="mvetter@suse.com" date="1707825600">- Update to 4.14.5:
  * Build system:
    + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had
    been deleted from a Makefile variable, but it should have been
    chpasswd.
- Remove shadow-4.14.4-chgpasswd-typo.patch</changelog>
  <changelog author="mvetter@suse.com" date="1709467200">- Update to 4.14.6:
  * login(1):
    + Fix off-by-one bugs.
  * passwd(1):
    + Don't silently truncate passwords of length &gt;= 200 characters.
    Instead, accept a length of PASS_MAX, and reject longer ones.
  * libshadow:
    + Fix calculation in strtoday(), which caused a wrong half-day
    offset in some cases (bsc#1176006)
    + Fix parsing of dates in get_date() (bsc#1176006)
    + Use utmpx instead of utmp. This fixes a regression introduced in
    4.14.0.</changelog>
  <changelog author="mvetter@suse.com" date="1710072000">- Update to 4.15.0
  * libshadow:
    + Use utmpx instead of utmp. This fixes a regression introduced
    in 4.14.0.
    + Fix build error (parameter name omitted).
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
    + Merge libshadow and libmisc into a single libshadow. This fixes
    problems in the linker, which were reported at least in Gentoo.
    + Fix build with musl libc.
    + Support out of tree builds
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
- Update Serge Hallyns GPG key
- Update shadow-login_defs-unused-by-pam.patch</changelog>
  <changelog author="mvetter@suse.com" date="1711022400">- Add shadow-4.15.0-fix-definition.patch:
  Fix error messages about config options.
  See gh/shadow-maint/shadow#967</changelog>
  <changelog author="mvetter@suse.com" date="1711281600">- Update to 4.15.1:
  * Fix a bug that caused spurious error messages about unknown
    login.defs configuration options #967
  * Adding checks for fd omission #964
  * Use temporary stat buffer #974
  * Fix wrong french translation #975
- Drop shadow-4.15.0-fix-definition.patch</changelog>
</package>
<package pkgid="9ddab976ce6fb56270614ebedc077e9c4d8ede981ff7e3d61f2f7138b87dd83f3fd12bd4676045e7754bc7b985ef0c60cc60358bfa7502df853d5b64737ec872" name="shadow-debugsource" arch="aarch64">
  <version epoch="0" ver="4.15.1" rel="slfo.1.1_1.3"/>
  <changelog author="mvetter@suse.com" date="1696593600">- Update to 4.14.1:
  Build system: Merge libshadow and libmisc into a single libshadow.
  This fixes problems in the linker, which were reported at least
  in Gentoo. #791
- Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- Update to 4.14.2:
  * libshadow:
    + Fix build with musl libc.
    + Avoid NULL dereference.
    + Update utmp at an initial login
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
  * Manual:
    + Document --prefix in chage(1), chpasswd(8), and passwd(1)
- Drop upstreamed shadow-4.14.0-selinux-labels.patch</changelog>
  <changelog author="mvetter@suse.com" date="1704801600">- bsc#1199026 bsc#1203823:
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="mvetter@suse.com" date="1705406400">- Update to 4.14.3:
  * libshadow:
    + Avoid null pointer dereference (#904)</changelog>
  <changelog author="mvetter@suse.com" date="1707739200">- Update to 4.14.4:
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
  * libshadow:
    + Fix build error (parameter name omitted).
    + Fix off-by-one bug.
    + Remove warning.
- Add shadow-4.14.4-chgpasswd-typo.patch: to fix build. See #926
- Update patch macro `patchN` -&gt; `patch -P N`</changelog>
  <changelog author="mvetter@suse.com" date="1707825600">- Update to 4.14.5:
  * Build system:
    + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had
    been deleted from a Makefile variable, but it should have been
    chpasswd.
- Remove shadow-4.14.4-chgpasswd-typo.patch</changelog>
  <changelog author="mvetter@suse.com" date="1709467200">- Update to 4.14.6:
  * login(1):
    + Fix off-by-one bugs.
  * passwd(1):
    + Don't silently truncate passwords of length &gt;= 200 characters.
    Instead, accept a length of PASS_MAX, and reject longer ones.
  * libshadow:
    + Fix calculation in strtoday(), which caused a wrong half-day
    offset in some cases (bsc#1176006)
    + Fix parsing of dates in get_date() (bsc#1176006)
    + Use utmpx instead of utmp. This fixes a regression introduced in
    4.14.0.</changelog>
  <changelog author="mvetter@suse.com" date="1710072000">- Update to 4.15.0
  * libshadow:
    + Use utmpx instead of utmp. This fixes a regression introduced
    in 4.14.0.
    + Fix build error (parameter name omitted).
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
    + Merge libshadow and libmisc into a single libshadow. This fixes
    problems in the linker, which were reported at least in Gentoo.
    + Fix build with musl libc.
    + Support out of tree builds
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
- Update Serge Hallyns GPG key
- Update shadow-login_defs-unused-by-pam.patch</changelog>
  <changelog author="mvetter@suse.com" date="1711022400">- Add shadow-4.15.0-fix-definition.patch:
  Fix error messages about config options.
  See gh/shadow-maint/shadow#967</changelog>
  <changelog author="mvetter@suse.com" date="1711281600">- Update to 4.15.1:
  * Fix a bug that caused spurious error messages about unknown
    login.defs configuration options #967
  * Adding checks for fd omission #964
  * Use temporary stat buffer #974
  * Fix wrong french translation #975
- Drop shadow-4.15.0-fix-definition.patch</changelog>
</package>
<package pkgid="1286b9f289db9d36d5b8229ddf51fa7fe6d5259f835724bb03091ab40ca44f07701abac27e79c4a1045a5be8e25ad6b86d7d84c12e27a3fc00ea451b3be43408" name="shared-mime-info-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.2" rel="slfo.1.1_1.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1588766400">- Update to version 2.0
  + Port build system to meson, and ship test suite with tarball.
  + Install ITS file to allow gettext to translate mime-type
    descriptions.
  + Add BPS and IPS patch formats.
  + Lower weight for "use strict" and similar in the perl mimetype.
  + Add new magic for Sega Mega Drive ROMs.
  + Add Common Lisp mime-type.
  + Rename text/x-tcl to text/tcl.
  + Add text/vbscript.
  + Add PySpread spreadsheet mime-types.
  + Add Kotlin source mime-type.
  + Add AVIF image mime-type.
  + Split versions of the Audible audio mime types.
  + Add *.spx glob for audio/x-speex+ogg.
  + Add Apple System Profiler XML mime-type.
- Adjust build dependencies: Add meson and xmlto, drop intltool.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588939200">- Add smi-Fix-pkg-config-installation-path.patch: Fix pkg-config
  installation path.</changelog>
  <changelog author="dimstar@opensuse.org" date="1589198400">- Create and own /usr/share/mime/application: many packages install
  files in there and it makes sense to continue delivering the
  basic directory layout.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1589889600">- Revert the previous change, we should not own
  /usr/share/mime/application: ref the spec upstream, this is
  wrong. Any application depending on this previous error needs to
  be fixed on a individual basis. Upstream ref:
  https://specifications.freedesktop.org/shared-mime-info-spec/shared-mime-info-spec-0.18.html#idm45709761658688</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- Update to version 2.1:
  + Adapt to xdgmime behaviour change: in case of multiple glob
    matches, and the magic match is unrelated to all of them,
    ignore the magic and pick one of the glob matches. xdgmime was
    actually deviating from the spec on this.
  + Improve text/vnd.trolltech.linguist magic to reduce false
    positives for MPEG TS files.
  + audio/mpeg: add layer 2, 2.5, and 1 protected magics.
  + Add many aliases for image/x-tga.
  + audio/x-mod: improve magic for 669 Composer files.
  + Add mime-type image/ktx2 (Khronos image texture format
    version 2).
  + application/oxps: differentiate from /vnd.ms-xpsdocument.
  + Make image/g3fax the canonical name for image/fax-g3.
  + Make text/vnd.trolltech.linguist the canonical name for
    text/vnd.qt.linguist.
  + Make application/vnd.smaf the canonical name for
    application/x-smaf,
  + Make application/vnd.apple.keynote the canonical name for
    application/x-iwork-keynote-sffkey.
  + Add mime-type image/astc (Adaptive Scalable Texture Compression
    files).
  + Add mime-type for SageMath script files (*.sage).
  + Add mime-type for Kaitai Struct.
  + Remove application/x-dc-rom.
  + Add mime-type for MAME compressed hard disk image
    (application/x-mame-chd).
  + Add mime-types application/nintendo-3ds-executable,
    application/x-nintendo-3ds-rom.
  + Add mime-types application/x-dreamcast-rom,
    application/x-gd-rom-cue, application/x-discjuggler-cd-image.
  + Add mime-type application/x-compressed-iso (*.cso).
  + Remove image/avif-sequence.
  + Fix application/x-sharedlib vs application/x-executable
    confusion for PIE executables.
- Drop smi-Fix-pkg-config-installation-path.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Do not ghost own %{_datadir}/mime/[a-ms-vxX]*: as those
  files/directories do not exist during build, RPM can't expand the
  glob and adds it literally to the file list, not having any
  effect in the end. A cleanup of the directory structure would not
  work anyway, as there are also files generated inside.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Add fix-build-meson-0_60.patch: Fix build with meson 0.60 and
  newer.
- Add drop-itstool-dep.patch: Drop itstool as it is no longer
  needed, upstream was missing this in the patch. Following this:
  drop itstool BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1648468800">- Update to 2.2:
  * model/3mf: new type
  * Match shared libraries with version suffix
  * model/obj: add mtllib and Blender comment based magic
  * model/mtl: add Blender comment magic, increase newmtl range
  * model/obj, model/mtl: new types
  * Add Electron Archive Format type application/x-asar
  * text/x-qml: Lower match priority to avoid conflicts with Python
  * Move '*.blend' to top of Blender glob list
  * Adding SPARQL media types
  * application/zip: Add `*.zipx` glob and test fixture
  * Added DSD mime type
  * Differentiate comic book archives
  * FITS: Add missing `application/fits` and legacy globs
  * Add Godot engine files
  * Add FlashForge "xgcode" mime-type
  * text/x-objc++src: new type
  * image/heif: test .hif extension too
  * image/hif: add *.hif glob
  * image/heif: add another test case
  * image/heif: add magics
  * Add a build-tools option to allow installing only the mime data
  * Add compressed SVG glob pattern `*.svg.gz`
  * Add Apple Wallet pass type application/vnd.apple.pkpass
  * migrate from custom itstool to builtin msgfmt for creating
    translated XML
  * Make the remaining plain text types subclasses of text/plain
  * audio/mobile-xmf: separate from audio/x-xmf
  * Adding ZIM file
  * Make text/x-mrml a subclass of application/xml
  * image/avif: move acronym and expansion to separate fields from
    comment
  * freedesktop_generate.sh: Don't hardcode ninja
  * Add text/x-mpl2
  * application/x-apple-systemprofiler+xml: require
    _SPCommandLineArguments in plist
  * image/jpeg: add test case with embedded property list XML
  * audio/vnd.dts.hd: include parent type magic in magic match
  * model/gltf+json: new type
  * model/gltf-binary: new type
  * application/x-object: add *.mod and a test case
  * application/x-mod: add some ProTracker magics and a test case
  * image/jxl: include test files in test list
  * tests: add trailing linefeed to mime-detection list
  * Make application/x-mswinurl a subclass of text/plain
  * Change description for *.desktop files to "desktop entry"
  * application/x-x509-ca-cert: add magics and test cases
  * application/pkix-cert: add BEGIN/END X509 CERTIFICATE magic
  * application/pkix-crl: add magic and test case
  * application/pkix-cert: add magic and test case
  * image/jxl: new type
  * Added .sc filename extension for Scala source code, as it is
    occasionally used
  * application/schema+json: new type
  * Add text/x-crystal
  * application/x-krita: remove stray period from comment
  * adding org-mode
  * Add Elixir source code mime type
  * Add two new offsets for .kra and .krz
  * text/x-python3: add *.pyi glob (Python stub files)
  * image/x-canon-cr3: new type
  * image/x-xpixmap: make XPM3 magic more specific
  * image/x-xpixmap: add XPM2 magic
  * application/x-troff-man: add *.[1-9] glob
  * application/toml: new type
  * Lower priority of "BEGIN {" for perl, awk uses that too
  * Add Smacker video type video/vnd.radgamettools.smacker
  * Clarify database license
  * meson: make xmlto optional, build spec only if found
  * application/x-7z-compressed: add *.7z.001 glob
  * Add Bink video type video/vnd.radgamettools.bink
  * image/x-nikon-nrw: add test case
  * image/x-nikon-nrw: new type
  * application/x-vhdx-disk: improve acronym and its expansion
  * application/ovf: new type
  * application/x-qed-disk: new type
  * application/x-vdi-disk: new type
  * application/x-vmdk-disk: new type
  * application/x-vhd-disk, /x-vhdx-disk: new types
  * application/vnd.apple.numbers, .pages: add older magics and
    test cases
  * Add text/x-dart
  * application/vnd.apple.numbers, /vnd.apple.pages: new types
  * xdgmime: configure as submodule
- Drop obsolete patches:
  * fix-build-meson-0_60.patch
  * drop-itstool-dep.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1680091200">- Filter out dependency on /usr/bin/pkg-config: this package is
  installed on basically all systems, but it also contains a .pc
  file. Splitting this into a -devel package seems not reasonable.</changelog>
</package>
<package pkgid="22f319952ca5cd310256a9851635afdf1bcbd8c5cc618830022c35c8866900f91b05c498c039c03a471edad9f594e3d7f007efcc375ae4156e6036e11741b638" name="shared-mime-info-debugsource" arch="aarch64">
  <version epoch="0" ver="2.2" rel="slfo.1.1_1.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1588766400">- Update to version 2.0
  + Port build system to meson, and ship test suite with tarball.
  + Install ITS file to allow gettext to translate mime-type
    descriptions.
  + Add BPS and IPS patch formats.
  + Lower weight for "use strict" and similar in the perl mimetype.
  + Add new magic for Sega Mega Drive ROMs.
  + Add Common Lisp mime-type.
  + Rename text/x-tcl to text/tcl.
  + Add text/vbscript.
  + Add PySpread spreadsheet mime-types.
  + Add Kotlin source mime-type.
  + Add AVIF image mime-type.
  + Split versions of the Audible audio mime types.
  + Add *.spx glob for audio/x-speex+ogg.
  + Add Apple System Profiler XML mime-type.
- Adjust build dependencies: Add meson and xmlto, drop intltool.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588939200">- Add smi-Fix-pkg-config-installation-path.patch: Fix pkg-config
  installation path.</changelog>
  <changelog author="dimstar@opensuse.org" date="1589198400">- Create and own /usr/share/mime/application: many packages install
  files in there and it makes sense to continue delivering the
  basic directory layout.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1589889600">- Revert the previous change, we should not own
  /usr/share/mime/application: ref the spec upstream, this is
  wrong. Any application depending on this previous error needs to
  be fixed on a individual basis. Upstream ref:
  https://specifications.freedesktop.org/shared-mime-info-spec/shared-mime-info-spec-0.18.html#idm45709761658688</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- Update to version 2.1:
  + Adapt to xdgmime behaviour change: in case of multiple glob
    matches, and the magic match is unrelated to all of them,
    ignore the magic and pick one of the glob matches. xdgmime was
    actually deviating from the spec on this.
  + Improve text/vnd.trolltech.linguist magic to reduce false
    positives for MPEG TS files.
  + audio/mpeg: add layer 2, 2.5, and 1 protected magics.
  + Add many aliases for image/x-tga.
  + audio/x-mod: improve magic for 669 Composer files.
  + Add mime-type image/ktx2 (Khronos image texture format
    version 2).
  + application/oxps: differentiate from /vnd.ms-xpsdocument.
  + Make image/g3fax the canonical name for image/fax-g3.
  + Make text/vnd.trolltech.linguist the canonical name for
    text/vnd.qt.linguist.
  + Make application/vnd.smaf the canonical name for
    application/x-smaf,
  + Make application/vnd.apple.keynote the canonical name for
    application/x-iwork-keynote-sffkey.
  + Add mime-type image/astc (Adaptive Scalable Texture Compression
    files).
  + Add mime-type for SageMath script files (*.sage).
  + Add mime-type for Kaitai Struct.
  + Remove application/x-dc-rom.
  + Add mime-type for MAME compressed hard disk image
    (application/x-mame-chd).
  + Add mime-types application/nintendo-3ds-executable,
    application/x-nintendo-3ds-rom.
  + Add mime-types application/x-dreamcast-rom,
    application/x-gd-rom-cue, application/x-discjuggler-cd-image.
  + Add mime-type application/x-compressed-iso (*.cso).
  + Remove image/avif-sequence.
  + Fix application/x-sharedlib vs application/x-executable
    confusion for PIE executables.
- Drop smi-Fix-pkg-config-installation-path.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Do not ghost own %{_datadir}/mime/[a-ms-vxX]*: as those
  files/directories do not exist during build, RPM can't expand the
  glob and adds it literally to the file list, not having any
  effect in the end. A cleanup of the directory structure would not
  work anyway, as there are also files generated inside.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Add fix-build-meson-0_60.patch: Fix build with meson 0.60 and
  newer.
- Add drop-itstool-dep.patch: Drop itstool as it is no longer
  needed, upstream was missing this in the patch. Following this:
  drop itstool BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1648468800">- Update to 2.2:
  * model/3mf: new type
  * Match shared libraries with version suffix
  * model/obj: add mtllib and Blender comment based magic
  * model/mtl: add Blender comment magic, increase newmtl range
  * model/obj, model/mtl: new types
  * Add Electron Archive Format type application/x-asar
  * text/x-qml: Lower match priority to avoid conflicts with Python
  * Move '*.blend' to top of Blender glob list
  * Adding SPARQL media types
  * application/zip: Add `*.zipx` glob and test fixture
  * Added DSD mime type
  * Differentiate comic book archives
  * FITS: Add missing `application/fits` and legacy globs
  * Add Godot engine files
  * Add FlashForge "xgcode" mime-type
  * text/x-objc++src: new type
  * image/heif: test .hif extension too
  * image/hif: add *.hif glob
  * image/heif: add another test case
  * image/heif: add magics
  * Add a build-tools option to allow installing only the mime data
  * Add compressed SVG glob pattern `*.svg.gz`
  * Add Apple Wallet pass type application/vnd.apple.pkpass
  * migrate from custom itstool to builtin msgfmt for creating
    translated XML
  * Make the remaining plain text types subclasses of text/plain
  * audio/mobile-xmf: separate from audio/x-xmf
  * Adding ZIM file
  * Make text/x-mrml a subclass of application/xml
  * image/avif: move acronym and expansion to separate fields from
    comment
  * freedesktop_generate.sh: Don't hardcode ninja
  * Add text/x-mpl2
  * application/x-apple-systemprofiler+xml: require
    _SPCommandLineArguments in plist
  * image/jpeg: add test case with embedded property list XML
  * audio/vnd.dts.hd: include parent type magic in magic match
  * model/gltf+json: new type
  * model/gltf-binary: new type
  * application/x-object: add *.mod and a test case
  * application/x-mod: add some ProTracker magics and a test case
  * image/jxl: include test files in test list
  * tests: add trailing linefeed to mime-detection list
  * Make application/x-mswinurl a subclass of text/plain
  * Change description for *.desktop files to "desktop entry"
  * application/x-x509-ca-cert: add magics and test cases
  * application/pkix-cert: add BEGIN/END X509 CERTIFICATE magic
  * application/pkix-crl: add magic and test case
  * application/pkix-cert: add magic and test case
  * image/jxl: new type
  * Added .sc filename extension for Scala source code, as it is
    occasionally used
  * application/schema+json: new type
  * Add text/x-crystal
  * application/x-krita: remove stray period from comment
  * adding org-mode
  * Add Elixir source code mime type
  * Add two new offsets for .kra and .krz
  * text/x-python3: add *.pyi glob (Python stub files)
  * image/x-canon-cr3: new type
  * image/x-xpixmap: make XPM3 magic more specific
  * image/x-xpixmap: add XPM2 magic
  * application/x-troff-man: add *.[1-9] glob
  * application/toml: new type
  * Lower priority of "BEGIN {" for perl, awk uses that too
  * Add Smacker video type video/vnd.radgamettools.smacker
  * Clarify database license
  * meson: make xmlto optional, build spec only if found
  * application/x-7z-compressed: add *.7z.001 glob
  * Add Bink video type video/vnd.radgamettools.bink
  * image/x-nikon-nrw: add test case
  * image/x-nikon-nrw: new type
  * application/x-vhdx-disk: improve acronym and its expansion
  * application/ovf: new type
  * application/x-qed-disk: new type
  * application/x-vdi-disk: new type
  * application/x-vmdk-disk: new type
  * application/x-vhd-disk, /x-vhdx-disk: new types
  * application/vnd.apple.numbers, .pages: add older magics and
    test cases
  * Add text/x-dart
  * application/vnd.apple.numbers, /vnd.apple.pages: new types
  * xdgmime: configure as submodule
- Drop obsolete patches:
  * fix-build-meson-0_60.patch
  * drop-itstool-dep.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1680091200">- Filter out dependency on /usr/bin/pkg-config: this package is
  installed on basically all systems, but it also contains a .pc
  file. Splitting this into a -devel package seems not reasonable.</changelog>
</package>
<package pkgid="2c16d7fc505f19f6a6e31489b123a5599bdfec060fcba406036c7984b6bfac0c25800ef6f4540aefccca0893054daafe4f781516d5584d4a87177f2437a2ccb4" name="shim-debuginfo" arch="aarch64">
  <version epoch="0" ver="16.1" rel="slfo.1.1_1.1"/>
  <changelog author="meissner@suse.com" date="1689076800">- remove compat efi dir and binaries</changelog>
  <changelog author="glin@suse.com" date="1689249600">- Upgrade shim-install to support TPM 2.0 Key File
  b540061 Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector</changelog>
  <changelog author="glin@suse.com" date="1695211200">- Update shim-install to fix boot failure of ext4 root file system
  on RAID10 (bsc#1205855)
  226c94ca5cfca  Use hint in looking for root if possible
- Adopt the macros from fde-tpm-helper-macros to update the
  signature in the sealed key after a bootloader upgrade</changelog>
  <changelog author="glin@suse.com" date="1710417600">- Update shim-install to set the SRK algorithm for the grub2
  TPM2 key protector (bsc#1213945)
  92d0f4305df73  Set the SRK algorithm for the TPM2 protector
- Add the missing BuildRequires: update-bootloader-rpm-macros
  for the update_bootloader_* macros in %post and %posttrans</changelog>
  <changelog author="dennis.tseng@suse.com" date="1716120000">-- Update to version 15.8
  - Various CVE fixes are already merged into this version
    mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
    avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
    Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
    Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
    pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
    pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)
  - remove shim-Enable-the-NX-compatibility-flag-by-default.patch
    The codes in this patch are already existing in shim-15.8
    The NX flag is disable which is same as the default value of shim-15.8,
    hence, not need to enable it by this patch now.
  - Patches (git log --oneline --reverse 15.7..15.8)
    657b248 Make sbat_var.S parse right with buggy gcc/binutils
    7c76425 Enable the NX compatibility flag by default.
    89972ae CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc wrapper
    c7b3051 pe: Align section size up to page size for mem attrs
    e4f40ae pe: Add IS_PAGE_ALIGNED macro
    f23883c Don't loop forever in load_certs() with buggy firmware
    1f38cb3 Optionally allow to keep shim protocol installed
    102a658 Drop invalid calls to `CRYPTO_set_mem_functions`
    aae3df0 test-sbat: Fix exit code
    cca3933 Block Debian grub binaries with SBAT &lt; 4
    cf59f34 Further improve load_certs() for non-compliant drivers/firmwares
    0601f44 SBAT-related documents formatting and spelling
    0640e13 Add a security contact email address in README.md
    0bfc397 Work around malformed path delimiters in file paths from DHCP
    a8b0b60 pe: only process RelocDir-&gt;Size of reloc section
    f7a4338 Skip testing msleep()
    549d346 Rename 'msecs' to 'usecs' to avoid potential confusion
    908c388 Change type of fallback_verbose_wait from int to unsigned long
    05eae92 Add SbatLevel_Variable.txt to document the various revocations
    243f125 Use -Wno-unused-but-set-variable for Cryptlib and OpenSSL
    89d25a1 Add a make rule for compile_commands.json
    118ff87 Add gnu-stack notes
    f132655 test: Make our fake dprintf be a statement.
    be00279 Remove CentOS 7 test builds.
    9964960 Split pe.c up even more.
    569270d Test (and fix) ImageAddress()
    61e9894 Verify signature before verifying sbat levels
    1578b55 Add libFuzzer support for csv.c
    a0673e3 Fix a 1-byte memory leak in .sbat parsing.
    e246812 Add libFuzzer support to the .sbat parser.
    fd43eda Work around ImageAddress() usage mistake
    1e985a3 Correctly free memory allocated in handle_image()
    dbbe3c8 mok: Avoid underflow in maximum variable size calculation
    04111d4 Make some of the static analysis tools a little easier to run
    7ba7440 compile_commands.json: remove stuff clang doesn't like
    66e6579 CVE-2023-40546 mok: fix LogError() invocation
    f271826 Add primitives for overflow-checked arithmetic operations.
    8372147 pe-relocate: Add a fuzzer for read_header()
    5a5147d CVE-2023-40551: pe-relocate: Fix bounds check for MZ binaries
    e912071 pe-relocate: make read_header() use checked arithmetic operations.
    93ce255 CVE-2023-40550 pe: Fix an out-of-bound read in verify_buffer_sbat()
    e7f5fdf pe-relocate: Ensure nothing else implements CVE-2023-40550
    afdc503 CVE-2023-40549 Authenticode: verify that the signature header is in bounds.
    96dccc2 CVE-2023-40548 Fix integer overflow on SBAT section size on 32-bit system
    dae82f6 Further mitigations against CVE-2023-40546 as a class
    ea0f9df Allow SbatLevel data from external binary
    b078ef2 Always clear SbatLevel when Secure Boot is disabled
    7dfb687 BS Variables for bootmgr revocations
    a967c0e shim should not self revoke
    577cedd Print message when refusing to apply SbatLevel
    e801b0d sbat revocations: check the full section name
    0226b56 CVE-2023-40547 - avoid incorrectly trusting HTTP headers
    6f0c8d2 Print errors when setting/clearing memory attrs
    57c0eed Updated Revocations for January 2024 CVEs
    49c6d95 Fix some minor ia32 build issues.
    be8ff7c post-process-pe: Don't set the NX_COMPAT flag by default after all.
    13abd9f pe-relocate: Avoid __builtin_add_overflow() on GCC &lt; 5
    c46c975 Suppress "Failed to open &lt;..&gt;\revocations.efi" when file does not exist
    30a4f37 Rename "previous" revocations to "automatic"
    6f395c2 Build time selectable automatic SBATLevel revocations
    a23e2f0 netboot read_image() should not hardcode DEFAULT_LOADER
    993a345 Try to load revocations.efi even if directory read fails
    1770a03 gitmodules: use shim-15.8 for gnu-efi branch
    5914984 (HEAD -&gt; main, tag: latest-release, tag: 15.8, origin/main, origin/HEAD) Bump version to 15.8</changelog>
  <changelog author="glin@suse.com" date="1726488000">- Update shim-install to use the 'removable' way for SL-Micro
  (bsc#1230316)
  * 433cc4e Always use the removable way for SL-Micro</changelog>
  <changelog author="glin@suse.com" date="1726747200">- Update shim-install to limit the scope of the 'removable'
  SL-Micro to the image booting with TPM2 unsealing (bsc#1210382)
  * 769e41d Limit the removable option to encrypted SL-Micro</changelog>
  <changelog author="jlee@suse.com" date="1765540800">- Update to 16.1
  - RPMs
    shim-16.1-150300.4.31.1.x86_64.rpm
    shim-debuginfo-16.1-150300.4.31.1.x86_64.rpm
    shim-debugsource-16.1-150300.4.31.1.x86_64.rpm
    shim-16.1-150300.4.31.1.aarch64.rpm
    shim-debuginfo-16.1-150300.4.31.1.aarch64.rpm
    shim-debugsource-16.1-150300.4.31.1.aarch64.rpm
  - submitreq: https://build.suse.de/request/show/395247
  - repo: https://build.suse.de/package/show/SUSE:Maintenance:39913/shim.SUSE_SLE-15-SP3_Update
  - Patches (git log --oneline --reverse 16.0..16.1)
    4040ec4 shim_start_image(): fix guid/handle pairing when uninstalling protocols
    39c0aa1 str2ip6(): parsing of "uncompressed" ipv6 addresses
    3133d19 test-mock-variables: make our filter list entries safer.
    d44405e mock-variables: remove unused variable
    0e8459f Update CI to use ubuntu-24.04 instead of ubuntu-20.04
    d16a5a6 SbatLevel_Variable.txt: minor typo fix.
    32804cf Realloc() needs one more byte for sprintf()
    431d370 IPv6: Add more check to avoid multiple double colon and illegal char
    5e4d93c Loader Proto: make freeing of bprop.buffer conditional.
    33deac2 Prepare to move things from shim.c to verify.c
    030e7df Move a bunch of stuff from shim.c to verify.c
    f3ddda7 handle_image(): make verification conditional
    774f226 Cache sections of a loaded image and sub-images from them.
    eb0d20b loader-protocol: handle sub-section loading for UKIs
    2f64bb9 loader-protocol: add workaround for EDK2 2025.02 page fault on FreePages
    1abc7ca loader-protocol: NULL output variable in load_image on failure
    fb77b44 Generate Authenticode for the entire PE file
    b86b909 README: mention new loader protocol and interaction with UKIs
    8522612 ci: add mkosi configuration and CI
    9ebab84 mkosi workflow: fix the branch name for main.
    72a4c41 shim: change automatically enable MOK_POLICY_REQUIRE_NX
    a2f0dfa This is an organizational patch to move some things around in mok.c
    54b9946 Update to the shim-16.1 branch of gnu-efi to get AsciiSPrint()
    a5a6922 get_max_var_sz(): add more debugging for apple platforms
    77a2922 Add a "VariableInfo" variable to mok-variables.
    efc71c9 build: Avoid passing *FLAGS to sub-make
    7670932 Fixes for 'make TOPDIR=... clean'
    13ab598 add SbatLevel entry 2025051000 for PSA-2025-00012-1
    617aed5 Update version to 16.1~rc1
    d316ba8 format_variable_info(): fix wrong size test.
    f5fad0e _do_sha256_sum(): Fix missing error check.
    3a9734d doc: add howto for running mkosi locally
    ced5f71 mkosi: remove spurious slashes from script
    0076155 ci: update mkosi commit
    5481105 fix http boot
    121cddf loader-protocol: Handle UnloadImage after StartImage properly
    6a1d1a9 loader-protocol: Fix memory leaks
    27a5d22 gitignore: add more mkosi dirs and vscode dir
    346ed15 mkosi: disable repository key check on Fedora
    afc4955 Update version to 16.1
  - 16.1 release note https://github.com/rhboot/shim/releases
    shim_start_image(): fix guid/handle pairing when uninstalling protocols by @vathpela in #738
    Fix uncompressed ipv6 netboot by @hrvach in #742
    fix test segfaults caused by uninitialized memory by @Fabian-Gruenbichler in #739
    Update CI to use ubuntu-24.04 instead of ubuntu-20.04 by @vathpela in #749
    SbatLevel_Variable.txt: minor typo fix. by @vathpela in #751
    Realloc() needs to allocate one more byte for sprintf() by @dennis-tseng99 in #746
    IPv6: Add more check to avoid multiple double colon and illegal char by @dennis-tseng99 in #753
    Loader proto v2 by @vathpela in #748
    loader-protocol: add workaround for EDK2 2025.02 page fault on FreePages by @bluca in #750
    Generate Authenticode for the entire PE file by @esnowberg in #604
    README: mention new loader protocol and interaction with UKIs by @bluca in #755
    ci: add mkosi configuration and CI by @bluca in #764
    shim: change automatically enable MOK_POLICY_REQUIRE_NX by @vathpela in #761
    Save var info by @vathpela in #763
    build: Avoid passing *FLAGS to sub-make by @rosslagerwall in #758
    Fixes for 'make TOPDIR=... clean' by @bluca in #762
    add SbatLevel entry 2025051000 for PSA-2025-00012-1 by @Fabian-Gruenbichler in #766
    Coverity fixes 20250804 by @vathpela in #767
    ci: fixlets and docs for mkosi workflow by @bluca in #768
    fix http boot by @jsetje in #770
    Fix double free and leak in the loader protocol by @rosslagerwall in #769
    gitignore: add more mkosi dirs and vscode dir by @bluca in #771
  - Drop upstreamed patch:
    The following patches are merged to 16.1
  - shim-alloc-one-more-byte-for-sprintf.patch
  - 32804cf5d9 Realloc() needs one more byte for sprintf()    [16.1]
  - shim-change-automatically-enable-MOK_POLICY_REQUIRE_NX.patch (bsc#1205588)
  - 72a4c41877 shim: change automatically enable MOK_POLICY_REQUIRE_NX [16.1]
- Building MokManager.efi and fallback.efi with POST_PROCESS_PE_FLAGS=-n (bsc#1205588)
- Building with the latest version of gcc in the codebase:
  - The gcc13 can workaround dxe_get_mem_attrs() hsi_status problem
  - We prefer that building shim with the latest version of gcc in codebase.
  - Set the minimum version is gcc-13.
  (bsc#1247432)
- SLE shim should includes vendor-dbx-sles.esl instead of
  vendor-dbx-opensuse.esl. Fixed it in shim.spec.</changelog>
  <changelog author="jlee@suse.com" date="1765800000">- Add DER format certificate files for the pretrans script to verify
  that the necessary certificate is in the UEFI db
  - openSUSE Secure Boot CA, 2013-2035
    openSUSE_Secure_Boot_CA_2013.crt
  - SUSE Linux Enterprise Secure Boot CA, 2013-2035
    SUSE_Linux_Enterprise_Secure_Boot_CA_2013.crt
  - Microsoft Corporation UEFI CA 2011, 2011-2026
    Microsoft_Corporation_UEFI_CA_2011.crt
  - Microsoft UEFI CA 2023, 2023-2038
    Microsoft_UEFI_CA_2023.crt
- shim.spec: Add a pretrans script to verify that the necessary certificate
  is in the UEFI db.
- Always put SUSE Linux Enterprise Secure Boot CA to target array.
  (bsc#1254679)</changelog>
  <changelog author="jlee@suse.com" date="1765886400">- shim-install: Add ca_string for SL Micro to update fallback loader
  The fallback loader, /boot/efi/EFI/BOOT/bootaa64.efi or bootx64.efi,
  cannot be upgraded by shim-install on SL Micro. The issue case is
  SL Micro 6.0. It causes that system gets regression bug because it's
  fallback to a old shim. So this patch adds ca_string to SL Micro.
  (bsc#1254336)</changelog>
</package>
<package pkgid="2713f1d6c2d23c0cb6e9e1da5e8814dbf6a2f439e89461aa9d247f9a8b68a6ad6f3202e17ca4807b5b06c8c8e6cb4ddec0eecd9dabdbfe12996f1bfa88ec6e22" name="shim-debugsource" arch="aarch64">
  <version epoch="0" ver="16.1" rel="slfo.1.1_1.1"/>
  <changelog author="meissner@suse.com" date="1689076800">- remove compat efi dir and binaries</changelog>
  <changelog author="glin@suse.com" date="1689249600">- Upgrade shim-install to support TPM 2.0 Key File
  b540061 Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector</changelog>
  <changelog author="glin@suse.com" date="1695211200">- Update shim-install to fix boot failure of ext4 root file system
  on RAID10 (bsc#1205855)
  226c94ca5cfca  Use hint in looking for root if possible
- Adopt the macros from fde-tpm-helper-macros to update the
  signature in the sealed key after a bootloader upgrade</changelog>
  <changelog author="glin@suse.com" date="1710417600">- Update shim-install to set the SRK algorithm for the grub2
  TPM2 key protector (bsc#1213945)
  92d0f4305df73  Set the SRK algorithm for the TPM2 protector
- Add the missing BuildRequires: update-bootloader-rpm-macros
  for the update_bootloader_* macros in %post and %posttrans</changelog>
  <changelog author="dennis.tseng@suse.com" date="1716120000">-- Update to version 15.8
  - Various CVE fixes are already merged into this version
    mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
    avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
    Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
    Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
    pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
    pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)
  - remove shim-Enable-the-NX-compatibility-flag-by-default.patch
    The codes in this patch are already existing in shim-15.8
    The NX flag is disable which is same as the default value of shim-15.8,
    hence, not need to enable it by this patch now.
  - Patches (git log --oneline --reverse 15.7..15.8)
    657b248 Make sbat_var.S parse right with buggy gcc/binutils
    7c76425 Enable the NX compatibility flag by default.
    89972ae CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc wrapper
    c7b3051 pe: Align section size up to page size for mem attrs
    e4f40ae pe: Add IS_PAGE_ALIGNED macro
    f23883c Don't loop forever in load_certs() with buggy firmware
    1f38cb3 Optionally allow to keep shim protocol installed
    102a658 Drop invalid calls to `CRYPTO_set_mem_functions`
    aae3df0 test-sbat: Fix exit code
    cca3933 Block Debian grub binaries with SBAT &lt; 4
    cf59f34 Further improve load_certs() for non-compliant drivers/firmwares
    0601f44 SBAT-related documents formatting and spelling
    0640e13 Add a security contact email address in README.md
    0bfc397 Work around malformed path delimiters in file paths from DHCP
    a8b0b60 pe: only process RelocDir-&gt;Size of reloc section
    f7a4338 Skip testing msleep()
    549d346 Rename 'msecs' to 'usecs' to avoid potential confusion
    908c388 Change type of fallback_verbose_wait from int to unsigned long
    05eae92 Add SbatLevel_Variable.txt to document the various revocations
    243f125 Use -Wno-unused-but-set-variable for Cryptlib and OpenSSL
    89d25a1 Add a make rule for compile_commands.json
    118ff87 Add gnu-stack notes
    f132655 test: Make our fake dprintf be a statement.
    be00279 Remove CentOS 7 test builds.
    9964960 Split pe.c up even more.
    569270d Test (and fix) ImageAddress()
    61e9894 Verify signature before verifying sbat levels
    1578b55 Add libFuzzer support for csv.c
    a0673e3 Fix a 1-byte memory leak in .sbat parsing.
    e246812 Add libFuzzer support to the .sbat parser.
    fd43eda Work around ImageAddress() usage mistake
    1e985a3 Correctly free memory allocated in handle_image()
    dbbe3c8 mok: Avoid underflow in maximum variable size calculation
    04111d4 Make some of the static analysis tools a little easier to run
    7ba7440 compile_commands.json: remove stuff clang doesn't like
    66e6579 CVE-2023-40546 mok: fix LogError() invocation
    f271826 Add primitives for overflow-checked arithmetic operations.
    8372147 pe-relocate: Add a fuzzer for read_header()
    5a5147d CVE-2023-40551: pe-relocate: Fix bounds check for MZ binaries
    e912071 pe-relocate: make read_header() use checked arithmetic operations.
    93ce255 CVE-2023-40550 pe: Fix an out-of-bound read in verify_buffer_sbat()
    e7f5fdf pe-relocate: Ensure nothing else implements CVE-2023-40550
    afdc503 CVE-2023-40549 Authenticode: verify that the signature header is in bounds.
    96dccc2 CVE-2023-40548 Fix integer overflow on SBAT section size on 32-bit system
    dae82f6 Further mitigations against CVE-2023-40546 as a class
    ea0f9df Allow SbatLevel data from external binary
    b078ef2 Always clear SbatLevel when Secure Boot is disabled
    7dfb687 BS Variables for bootmgr revocations
    a967c0e shim should not self revoke
    577cedd Print message when refusing to apply SbatLevel
    e801b0d sbat revocations: check the full section name
    0226b56 CVE-2023-40547 - avoid incorrectly trusting HTTP headers
    6f0c8d2 Print errors when setting/clearing memory attrs
    57c0eed Updated Revocations for January 2024 CVEs
    49c6d95 Fix some minor ia32 build issues.
    be8ff7c post-process-pe: Don't set the NX_COMPAT flag by default after all.
    13abd9f pe-relocate: Avoid __builtin_add_overflow() on GCC &lt; 5
    c46c975 Suppress "Failed to open &lt;..&gt;\revocations.efi" when file does not exist
    30a4f37 Rename "previous" revocations to "automatic"
    6f395c2 Build time selectable automatic SBATLevel revocations
    a23e2f0 netboot read_image() should not hardcode DEFAULT_LOADER
    993a345 Try to load revocations.efi even if directory read fails
    1770a03 gitmodules: use shim-15.8 for gnu-efi branch
    5914984 (HEAD -&gt; main, tag: latest-release, tag: 15.8, origin/main, origin/HEAD) Bump version to 15.8</changelog>
  <changelog author="glin@suse.com" date="1726488000">- Update shim-install to use the 'removable' way for SL-Micro
  (bsc#1230316)
  * 433cc4e Always use the removable way for SL-Micro</changelog>
  <changelog author="glin@suse.com" date="1726747200">- Update shim-install to limit the scope of the 'removable'
  SL-Micro to the image booting with TPM2 unsealing (bsc#1210382)
  * 769e41d Limit the removable option to encrypted SL-Micro</changelog>
  <changelog author="jlee@suse.com" date="1765540800">- Update to 16.1
  - RPMs
    shim-16.1-150300.4.31.1.x86_64.rpm
    shim-debuginfo-16.1-150300.4.31.1.x86_64.rpm
    shim-debugsource-16.1-150300.4.31.1.x86_64.rpm
    shim-16.1-150300.4.31.1.aarch64.rpm
    shim-debuginfo-16.1-150300.4.31.1.aarch64.rpm
    shim-debugsource-16.1-150300.4.31.1.aarch64.rpm
  - submitreq: https://build.suse.de/request/show/395247
  - repo: https://build.suse.de/package/show/SUSE:Maintenance:39913/shim.SUSE_SLE-15-SP3_Update
  - Patches (git log --oneline --reverse 16.0..16.1)
    4040ec4 shim_start_image(): fix guid/handle pairing when uninstalling protocols
    39c0aa1 str2ip6(): parsing of "uncompressed" ipv6 addresses
    3133d19 test-mock-variables: make our filter list entries safer.
    d44405e mock-variables: remove unused variable
    0e8459f Update CI to use ubuntu-24.04 instead of ubuntu-20.04
    d16a5a6 SbatLevel_Variable.txt: minor typo fix.
    32804cf Realloc() needs one more byte for sprintf()
    431d370 IPv6: Add more check to avoid multiple double colon and illegal char
    5e4d93c Loader Proto: make freeing of bprop.buffer conditional.
    33deac2 Prepare to move things from shim.c to verify.c
    030e7df Move a bunch of stuff from shim.c to verify.c
    f3ddda7 handle_image(): make verification conditional
    774f226 Cache sections of a loaded image and sub-images from them.
    eb0d20b loader-protocol: handle sub-section loading for UKIs
    2f64bb9 loader-protocol: add workaround for EDK2 2025.02 page fault on FreePages
    1abc7ca loader-protocol: NULL output variable in load_image on failure
    fb77b44 Generate Authenticode for the entire PE file
    b86b909 README: mention new loader protocol and interaction with UKIs
    8522612 ci: add mkosi configuration and CI
    9ebab84 mkosi workflow: fix the branch name for main.
    72a4c41 shim: change automatically enable MOK_POLICY_REQUIRE_NX
    a2f0dfa This is an organizational patch to move some things around in mok.c
    54b9946 Update to the shim-16.1 branch of gnu-efi to get AsciiSPrint()
    a5a6922 get_max_var_sz(): add more debugging for apple platforms
    77a2922 Add a "VariableInfo" variable to mok-variables.
    efc71c9 build: Avoid passing *FLAGS to sub-make
    7670932 Fixes for 'make TOPDIR=... clean'
    13ab598 add SbatLevel entry 2025051000 for PSA-2025-00012-1
    617aed5 Update version to 16.1~rc1
    d316ba8 format_variable_info(): fix wrong size test.
    f5fad0e _do_sha256_sum(): Fix missing error check.
    3a9734d doc: add howto for running mkosi locally
    ced5f71 mkosi: remove spurious slashes from script
    0076155 ci: update mkosi commit
    5481105 fix http boot
    121cddf loader-protocol: Handle UnloadImage after StartImage properly
    6a1d1a9 loader-protocol: Fix memory leaks
    27a5d22 gitignore: add more mkosi dirs and vscode dir
    346ed15 mkosi: disable repository key check on Fedora
    afc4955 Update version to 16.1
  - 16.1 release note https://github.com/rhboot/shim/releases
    shim_start_image(): fix guid/handle pairing when uninstalling protocols by @vathpela in #738
    Fix uncompressed ipv6 netboot by @hrvach in #742
    fix test segfaults caused by uninitialized memory by @Fabian-Gruenbichler in #739
    Update CI to use ubuntu-24.04 instead of ubuntu-20.04 by @vathpela in #749
    SbatLevel_Variable.txt: minor typo fix. by @vathpela in #751
    Realloc() needs to allocate one more byte for sprintf() by @dennis-tseng99 in #746
    IPv6: Add more check to avoid multiple double colon and illegal char by @dennis-tseng99 in #753
    Loader proto v2 by @vathpela in #748
    loader-protocol: add workaround for EDK2 2025.02 page fault on FreePages by @bluca in #750
    Generate Authenticode for the entire PE file by @esnowberg in #604
    README: mention new loader protocol and interaction with UKIs by @bluca in #755
    ci: add mkosi configuration and CI by @bluca in #764
    shim: change automatically enable MOK_POLICY_REQUIRE_NX by @vathpela in #761
    Save var info by @vathpela in #763
    build: Avoid passing *FLAGS to sub-make by @rosslagerwall in #758
    Fixes for 'make TOPDIR=... clean' by @bluca in #762
    add SbatLevel entry 2025051000 for PSA-2025-00012-1 by @Fabian-Gruenbichler in #766
    Coverity fixes 20250804 by @vathpela in #767
    ci: fixlets and docs for mkosi workflow by @bluca in #768
    fix http boot by @jsetje in #770
    Fix double free and leak in the loader protocol by @rosslagerwall in #769
    gitignore: add more mkosi dirs and vscode dir by @bluca in #771
  - Drop upstreamed patch:
    The following patches are merged to 16.1
  - shim-alloc-one-more-byte-for-sprintf.patch
  - 32804cf5d9 Realloc() needs one more byte for sprintf()    [16.1]
  - shim-change-automatically-enable-MOK_POLICY_REQUIRE_NX.patch (bsc#1205588)
  - 72a4c41877 shim: change automatically enable MOK_POLICY_REQUIRE_NX [16.1]
- Building MokManager.efi and fallback.efi with POST_PROCESS_PE_FLAGS=-n (bsc#1205588)
- Building with the latest version of gcc in the codebase:
  - The gcc13 can workaround dxe_get_mem_attrs() hsi_status problem
  - We prefer that building shim with the latest version of gcc in codebase.
  - Set the minimum version is gcc-13.
  (bsc#1247432)
- SLE shim should includes vendor-dbx-sles.esl instead of
  vendor-dbx-opensuse.esl. Fixed it in shim.spec.</changelog>
  <changelog author="jlee@suse.com" date="1765800000">- Add DER format certificate files for the pretrans script to verify
  that the necessary certificate is in the UEFI db
  - openSUSE Secure Boot CA, 2013-2035
    openSUSE_Secure_Boot_CA_2013.crt
  - SUSE Linux Enterprise Secure Boot CA, 2013-2035
    SUSE_Linux_Enterprise_Secure_Boot_CA_2013.crt
  - Microsoft Corporation UEFI CA 2011, 2011-2026
    Microsoft_Corporation_UEFI_CA_2011.crt
  - Microsoft UEFI CA 2023, 2023-2038
    Microsoft_UEFI_CA_2023.crt
- shim.spec: Add a pretrans script to verify that the necessary certificate
  is in the UEFI db.
- Always put SUSE Linux Enterprise Secure Boot CA to target array.
  (bsc#1254679)</changelog>
  <changelog author="jlee@suse.com" date="1765886400">- shim-install: Add ca_string for SL Micro to update fallback loader
  The fallback loader, /boot/efi/EFI/BOOT/bootaa64.efi or bootx64.efi,
  cannot be upgraded by shim-install on SL Micro. The issue case is
  SL Micro 6.0. It causes that system gets regression bug because it's
  fallback to a old shim. So this patch adds ca_string to SL Micro.
  (bsc#1254336)</changelog>
</package>
<package pkgid="35d1fabd0f8c38c6ceb8ef04b89ef7a73c70593b09a5d99c508f4ff7e858c9d5408abad70e29f42d801e09463c960166c0ccdefe6ad100a4814bccabbd825a92" name="skopeo-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.15.1" rel="slfo.1.1_2.1"/>
  <changelog author="danish.prakash@suse.com" date="1690286400">- Update to version 1.13.1:
  * [release-1.13] Bump to v1.13.1
  * [release-1.13] Bump c/common to v0.55.2
  * [release-1.13 backport] [CI:BUILD] Packit: install golist before updating downstream spec
  * [release-1.13] Bump to v1.13.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 1.13.2:
  * [release-1.13] Bump to v1.13.2
  * [release-1.31] Bump c/common v0.55.3
  * Packit: remove pre-sync action
  * [release-1.13] Bump to v1.13.2-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1696939200">- Bump go version to 1.21 (bsc#1215611)</changelog>
  <changelog author="danish.prakash@suse.com" date="1700740800">- Update to version 1.14.0:
  * Bump to v1.14.0
  * fix(deps): update module github.com/containers/common to v0.57.0
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update module github.com/containers/image/v5 to v5.29.0
  * Add documentation and smoke tests for the new --compat-auth-file options
  * Update c/image and c/common to latest
  * fix(deps): update module github.com/containers/storage to v1.51.0
  * fix(deps): update module golang.org/x/term to v0.14.0
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * fix(deps): update github.com/containers/common digest to 3e5caa0
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.9
  * Update github.com/klauspost/compress to v1.17.2
  * chore(deps): update module github.com/docker/docker to v24.0.7+incompatible [security]
  * Fix ENTRYPOINT documentation, drop others.
  * Remove unused environment variables in Cirrus
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * chore(deps): update dependency containers/automation_images to v20231004
  * chore(deps): update module golang.org/x/net to v0.17.0 [security]
  * copy: Note support for `zstd:chunked`
  * fix(deps): update module golang.org/x/term to v0.13.0
  * fix(deps): update module github.com/docker/distribution to v2.8.3+incompatible
  * fix(deps): update github.com/containers/common digest to 745eaa4
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * Packit: tag @lsm5 on copr build failures
  * vendor of containers/common
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * fix(deps): update module github.com/containers/common to v0.56.0
  * Cirrus: Remove multi-arch skopeo image builds
  * fix(deps): update module github.com/containers/image/v5 to v5.28.0
  * Increase the golangci-lint timeout
  * fix(deps): update module github.com/containers/storage to v1.50.2
  * fix(deps): update module github.com/containers/storage to v1.50.1
  * fix(deps): update golang.org/x/exp digest to 9212866
  * Fix a man page link
  * fix(deps): update github.com/containers/image/v5 digest to 58d5eb6
  * GHA: Closed issue/PR comment-lock test
  * fix(deps): update module github.com/containers/common to v0.55.4
  * fix(deps): update module github.com/containers/storage to v1.49.0
  * rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to v1.54.2
  * chore(deps): update dependency containers/automation_images to v20230816
  * Packit: set eln target correctly
  * packit: Build PRs into default packit COPRs
  * DOCS: Update Go version requirement info
  * DOCS: Add information about the cross-build
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.8
  * fix(deps): update module github.com/containers/common to v0.55.3
  * Update c/image after https://github.com/containers/image/pull/2070
  * chore(deps): update dependency golangci/golangci-lint to v1.54.1
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update golang.org/x/exp digest to 352e893
  * chore(deps): update dependency containers/automation_images to v20230807
  * Update to Go 1.19
  * fix(deps): update module golang.org/x/term to v0.11.0
  * Update c/image for golang.org/x/exp
  * RPM: define gobuild macro for rhel/centos stream
  * Fix handling the unexpected return value combination from IsRunningImageAllowed
  * Close the PolicyContext, as required by the API
  * Use globalOptions.getPolicyContext instead of an image-targeted SystemContext
  * Packit: remove pre-sync action
  * fix(deps): update module github.com/containers/common to v0.55.2
  * proxy: Change the imgid to uint64
  * [CI:BUILD] Packit: install golist before updating downstream spec
  * Update module golang.org/x/term to v0.10.0
  * Bump to v1.14.0-dev
  * Bump to v1.13.0</changelog>
  <changelog author="dcermak@suse.com" date="1705924800">- Update to version 1.14.1:
  * Bump to v1.14.1
  * fix(deps): update module github.com/containers/common to v0.57.2
  * fix(deps): update module github.com/containers/image/v5 to v5.29.1
  * chore(deps): update dependency containers/automation_images to v20240102
  * Fix libsubid detection
  * fix(deps): update module golang.org/x/term to v0.16.0
  * fix(deps): update golang.org/x/exp digest to 02704c9
  * chore(deps): update dependency containers/automation_images to v20231208
  * [skip-ci] Update actions/stale action to v9
  * fix(deps): update module github.com/containers/common to v0.57.1
  * fix(deps): update golang.org/x/exp digest to 6522937
  * DOCS: add Gentoo in install.md
  * DOCS: Update to add Arch Linux in install.md
  * fix(deps): update module golang.org/x/term to v0.15.0
  * Bump to v1.14.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1707134400">- Update to version 1.14.2:
  * [release-1.14] Bump Skopeo to v1.14.2
  * [release-1.14] Bump c/image to v5.29.2, c/common to v0.57.3 (fixes bsc#1219563)</changelog>
  <changelog author="dcermak@suse.com" date="1710504000">- Update to version 1.15.0:
  * Bump to v1.15.0
  * chore(deps): update module google.golang.org/protobuf to v1.33.0 [security]
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
  * chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
  * [CI:DOCS] Migrate skopeo container image
  * fix(deps): update module github.com/containers/common to v0.58.0
  * fix(deps): update module github.com/containers/image/v5 to v5.30.0
  * fix(deps): update module github.com/containers/storage to v1.53.0
  * fix(deps): update module golang.org/x/term to v0.18.0
  * fix(deps): update github.com/containers/image/v5 digest to faa4f4f
  * Move a go.mod dependency entry to the right section
  * Avoid a warning by gopls / VSCode
  * fix typo
  * update docs based on review
  * docs: make sure that CGO_ENABLED='1'
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1
  * Update c/image after https://github.com/containers/image/pull/2273
  * Also change the MIME type in manifest when decompressing a layer
  * Replace decompress-dirs.sh with Go code
  * Split decompressDir from runDecompressDirs
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.0
  * fix(deps): update module github.com/containers/common to v0.57.4
  * fix(deps): update golang.org/x/exp digest to 1b97071
  * fix(deps): update module github.com/containers/common to v0.57.3
  * Update github.com/containers/image/v5 to post-v5.29.2 main
  * Run codespell on code
  * fix(deps): update module github.com/containers/storage to v1.52.0
  * add kubasobon:semver changes
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
  * Bump to v1.15.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1716206400">- Update to version 1.15.1:
  * [release-1.15] Bump to v1.15.1
  * [release-1.15] Freeze the fedora-minimal image reference
  * [release-1.15] CVE-2024-3727 (bsc#1224123)</changelog>
  <changelog author="dcermak@suse.com" date="1738843200">- Add patches for CVE-2024-6104 &amp; CVE-2023-45288
  Add patches:
  * 0001-http2-close-connections-when-receiving-too-many-head.patch (CVE-2023-45288, bsc#1236483)
  * 0002-Switch-hashicorp-go-retryablehttp-to-the-SUSE-fork.patch (CVE-2024-6104, bsc#1227056)</changelog>
  <changelog author="dcermak@suse.com" date="1740744000">- Add patch for CVE-2025-27144 (bsc#1237613)
  Add patch:
  * 0003-Don-t-allow-unbounded-amounts-of-splits-https-github.patch
  Rebase patches:
  * 0001-http2-close-connections-when-receiving-too-many-head.patch
  * 0002-Switch-hashicorp-go-retryablehttp-to-the-SUSE-fork.patch</changelog>
</package>
<package pkgid="410ace40e27ef7906156132082206f5d23b34e0cffea15cc75c74e1549c7e6460b88ff9fa345aa6cecbebb478c65218831b1a404c71b1a66cd10b1d53dd22a85" name="slang-debugsource" arch="aarch64">
  <version epoch="0" ver="2.3.3" rel="slfo.1.1_1.2"/>
  <changelog author="jengelh@inai.de" date="1497009600">- Rectify RPM groups. Trim filler wording from description.</changelog>
  <changelog author="werner@suse.de" date="1518177600">- Add upstream commit 6dd5ade9a97b52ace4ac033779a6d3c1c51db4d1 as
  patch git-6dd5ade9a97b52ace4ac033779a6d3c1c51db4d1.patch (boo#1079543)
  * Added support for the new ncurses 32-bit terminfo database entries</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519992000">- BuildRequire default libpng on the system, builds and test
  pass fine. (drops slang-libpng12-linker-flag.patch)</changelog>
  <changelog author="ro@suse.de" date="1521115200">- handle s390 like s390x</changelog>
  <changelog author="schwab@suse.de" date="1537790400">- overflow.patch: fix overflow checks not to depend on undefined behaviour</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="adam.majer@suse.de" date="1586174400">- slang 2.3.2:
  * It is now possible to use reserved words as struct
  field names without quoting them.  For example, it is now possible
  to write
    s = struct { public = value };
  Previously, this required the field name to be quoted:
    s = struct { "public" = value };
- drop static library and its LTO workaround
- git-6dd5ade9a97b52ace4ac033779a6d3c1c51db4d1.patch: upstreamed
- slang-fsuid.patch: refreshed</changelog>
  <changelog author="coolo@suse.com" date="1664193600">- slang 2.3.3:
  * This version includes a number of backward-compatible enhancements to
    the interpreter and its modules, as well as support for so-called
    user-defined terminfo extensions.  It is also binary compatible with
    prior 2.x.y versions of the library.
  * See changes.txt
- obsolete overflow.patch and rebase autoconf.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709294400">- Drop slsh/lib/test/test_timestamp.sl: Do not test timestamps but
  trust on upstream (calculations in leap years are off in the
  test).</changelog>
</package>
<package pkgid="98a94b32b33dc4043614d37931d6a23e227b03cc2aaec8ef1b953a34366f844d9a6f5210d04c170866294e590fc0840440f82d0688a9738efca9ecae9d31c062" name="slirp4netns-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="slfo.1.1_1.3"/>
  <changelog author="rhafer@suse.com" date="1585310400">- Update to 0.4.4 (bsc#1167850)
  * libslirp: Update to v4.2.0:
  * New API function slirp_add_unix: add a forward rule to a Unix
    socket.
  * New API function slirp_remove_guestfwd: remove a forward rule
    previously added by slirp_add_exec, slirp_add_unix or
    slirp_add_guestfwd
  * New SlirpConfig.outbound_addr{,6} fields to bind output
    socket to a specific address
  * socket: do not fallback on host loopback if get_dns_addr()
    failed or the address is in slirp network
  * ncsi: fix checksum OOB memory access
  * tcp_emu(): fix OOB accesses
  * tftp: restrict relative path access
  * state: fix loading of guestfwd state</changelog>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Update to 1.0.0
  * libslirp to v0.4.3:
  * libslirp is no longer included in slirp4netns and needs be
    installed separately
  * --enable-sandbox is now out of experimental
  * New build dependeny: libslirp-devel &gt;= 4.1</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.1.8:
  * v1.1.8
  * CI: bump libslirp to v4.4.0
  * tests: Avoid closing pipe grep in cidr test
  * v1.1.7+dev
  * v1.1.7
  * test-slirp4netns-cidr.sh: avoid EPIPE
  * CI: s/test-centos/test-centos7/ for clarity
  * CI: Test with libslirp 4.3.1 on CentOS 7
  * .gitignore: add .vagrant
  * Vagrantfile: change VirtualBox itself's slirp CIDR</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.11:
  * Add --macaddress option to specify the MAC address of the tap
    interface.
  * Updated the man page.</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- New upstream release 1.2.0:
  * Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
  * Explicitly support DHCP (#270)
  * Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd
  * Refactored tests (#271)
- modernize spec file</changelog>
  <changelog author="danish.prakash@suse.com" date="1692619200">- Update to version 1.2.1:
  * sandbox: Add support for escaping resolv.conf symlinks (#318)
  * parson: update to v1.5.2 (#320)</changelog>
  <changelog author="pgajdos@suse.com" date="1696248000">- version update to 1.2.2
  * Enabled reproducible builds (#324, #325, #326)</changelog>
  <changelog author="dcermak@suse.com" date="1707307200">- New upstream release 1.2.3:
  * Fix some FD leaks (#334, thanks to @giuseppe)</changelog>
  <changelog author="dcermak@suse.com" date="1714132800">- New upstream release 1.3.0
  * Support new `--netns-type=tapfd` (#340, thanks to @helmutg)
  * Do not leak socket in case of success (#339, thanks to @jnovy)</changelog>
  <changelog author="dcermak@suse.com" date="1715688000">- New upstream release 1.3.1, no relevant source change</changelog>
</package>
<package pkgid="76489ab18f74055a95af6b64fec8904d45f719beb93e7ffead50aaa783acdb9bb54b30efccb2479d0198f145c76394a6cc966eba2c30b455b08b3dd47d898ec7" name="slirp4netns-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="slfo.1.1_1.3"/>
  <changelog author="rhafer@suse.com" date="1585310400">- Update to 0.4.4 (bsc#1167850)
  * libslirp: Update to v4.2.0:
  * New API function slirp_add_unix: add a forward rule to a Unix
    socket.
  * New API function slirp_remove_guestfwd: remove a forward rule
    previously added by slirp_add_exec, slirp_add_unix or
    slirp_add_guestfwd
  * New SlirpConfig.outbound_addr{,6} fields to bind output
    socket to a specific address
  * socket: do not fallback on host loopback if get_dns_addr()
    failed or the address is in slirp network
  * ncsi: fix checksum OOB memory access
  * tcp_emu(): fix OOB accesses
  * tftp: restrict relative path access
  * state: fix loading of guestfwd state</changelog>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Update to 1.0.0
  * libslirp to v0.4.3:
  * libslirp is no longer included in slirp4netns and needs be
    installed separately
  * --enable-sandbox is now out of experimental
  * New build dependeny: libslirp-devel &gt;= 4.1</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.1.8:
  * v1.1.8
  * CI: bump libslirp to v4.4.0
  * tests: Avoid closing pipe grep in cidr test
  * v1.1.7+dev
  * v1.1.7
  * test-slirp4netns-cidr.sh: avoid EPIPE
  * CI: s/test-centos/test-centos7/ for clarity
  * CI: Test with libslirp 4.3.1 on CentOS 7
  * .gitignore: add .vagrant
  * Vagrantfile: change VirtualBox itself's slirp CIDR</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.11:
  * Add --macaddress option to specify the MAC address of the tap
    interface.
  * Updated the man page.</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- New upstream release 1.2.0:
  * Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
  * Explicitly support DHCP (#270)
  * Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd
  * Refactored tests (#271)
- modernize spec file</changelog>
  <changelog author="danish.prakash@suse.com" date="1692619200">- Update to version 1.2.1:
  * sandbox: Add support for escaping resolv.conf symlinks (#318)
  * parson: update to v1.5.2 (#320)</changelog>
  <changelog author="pgajdos@suse.com" date="1696248000">- version update to 1.2.2
  * Enabled reproducible builds (#324, #325, #326)</changelog>
  <changelog author="dcermak@suse.com" date="1707307200">- New upstream release 1.2.3:
  * Fix some FD leaks (#334, thanks to @giuseppe)</changelog>
  <changelog author="dcermak@suse.com" date="1714132800">- New upstream release 1.3.0
  * Support new `--netns-type=tapfd` (#340, thanks to @helmutg)
  * Do not leak socket in case of success (#339, thanks to @jnovy)</changelog>
  <changelog author="dcermak@suse.com" date="1715688000">- New upstream release 1.3.1, no relevant source change</changelog>
</package>
<package pkgid="79a7e9ad85fb90df5d2f0836ea3854a57c29f5f7f9d7576cd93a774ad7b69d091bb081146d8fb3d38eb897c011d19aaa1e7ddf859d097fae87e3162a9f00c90f" name="snapper-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.11.2" rel="slfo.1.1_1.2"/>
  <changelog author="aschnell@suse.com" date="1710849600">- improved error message (gh#openSUSE/snapper#864)
  Sat  9 Mar 09:44:17 GMT 2024 - infinity0@pwned.gg
- add support for quarterly snapshots</changelog>
  <changelog author="aschnell@suse.com" date="1711022400">- improved log message (see gh#openSUSE/snapper#866)</changelog>
  <changelog author="aschnell@suse.com" date="1712577600">- avoid excessive logging (gh#openSUSE/snapper#892)</changelog>
  <changelog author="aschnell@suse.com" date="1713268800">- disable qgroup if it does not exist to avoid failure creating
  snapshots with kernel 6.8.4 (gh#openSUSE/snapper#894)</changelog>
  <changelog author="aschnell@suse.com" date="1713355200">- run cleanup service every hour (gh#openSUSE/snapper#885)</changelog>
  <changelog author="aschnell@suse.com" date="1713355201">- reverted some parts of PR#884 to fix build in obs</changelog>
  <changelog author="aschnell@suse.com" date="1713441600">- async cleanup of stale btrfs qgroups (bsc#1222847)
- version 0.11.0</changelog>
  <changelog author="aschnell@suse.com" date="1716379200">- fixed error message (gh#openSUSE/snapper#907)</changelog>
  <changelog author="aschnell@suse.com" date="1720180800">- handle content-length of stomp in zypper plugin
  (gh#openSUSE/snapper#918)
- version 0.11.1</changelog>
  <changelog author="aschnell@suse.com" date="1724932800">- use .snapshots dir for 'btrfs qgroup clear-stale' (bsc#1229904)
- version 0.11.2</changelog>
</package>
<package pkgid="3655d210c865f784426bbd14a14db768a1c731bb7e259dd9add3871c119c2f9be1b1bba2afdaefd1cbec3b38aa922bbe52fe1108013f951de2a6a4d4fc11fc14" name="snapper-debugsource" arch="aarch64">
  <version epoch="0" ver="0.11.2" rel="slfo.1.1_1.2"/>
  <changelog author="aschnell@suse.com" date="1710849600">- improved error message (gh#openSUSE/snapper#864)
  Sat  9 Mar 09:44:17 GMT 2024 - infinity0@pwned.gg
- add support for quarterly snapshots</changelog>
  <changelog author="aschnell@suse.com" date="1711022400">- improved log message (see gh#openSUSE/snapper#866)</changelog>
  <changelog author="aschnell@suse.com" date="1712577600">- avoid excessive logging (gh#openSUSE/snapper#892)</changelog>
  <changelog author="aschnell@suse.com" date="1713268800">- disable qgroup if it does not exist to avoid failure creating
  snapshots with kernel 6.8.4 (gh#openSUSE/snapper#894)</changelog>
  <changelog author="aschnell@suse.com" date="1713355200">- run cleanup service every hour (gh#openSUSE/snapper#885)</changelog>
  <changelog author="aschnell@suse.com" date="1713355201">- reverted some parts of PR#884 to fix build in obs</changelog>
  <changelog author="aschnell@suse.com" date="1713441600">- async cleanup of stale btrfs qgroups (bsc#1222847)
- version 0.11.0</changelog>
  <changelog author="aschnell@suse.com" date="1716379200">- fixed error message (gh#openSUSE/snapper#907)</changelog>
  <changelog author="aschnell@suse.com" date="1720180800">- handle content-length of stomp in zypper plugin
  (gh#openSUSE/snapper#918)
- version 0.11.1</changelog>
  <changelog author="aschnell@suse.com" date="1724932800">- use .snapshots dir for 'btrfs qgroup clear-stale' (bsc#1229904)
- version 0.11.2</changelog>
</package>
<package pkgid="d9ca3a99128cc3df99a1365c254451ba74d21344081b5a2d4ca6651567514eb5fa3886ff6be1a9b3ce8d43adf47536f1fe6a289ea77ded2b82aa2e60f8cf6c7e" name="snappy-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.10" rel="slfo.1.1_1.3"/>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626177600">- Update to 1.1.9:
  * Performance improvements
- Add fix-always-inline.patch
- Add use-system-test-libs.patch
- Add a hardcoded snappy.pc file</changelog>
  <changelog author="tserong@suse.com" date="1635336000">- Re-enable RTTI, without which other applications can't subclass
  snappy::Source (this breaks Ceph, as one example)
- Add reenable-rtti.patch</changelog>
  <changelog author="dmueller@suse.com" date="1699617600">- update to 1.1.10:
  * Performance improvements
  * Compilation fixes for various environments
- drop fix-always-inline.patch (obsolete)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711368000">- Fix build with GTest 1.14.0 by using C++14, bsc#1221872</changelog>
</package>
<package pkgid="7cb01a5af5637f22c02678e7528ef1070e901537255c32b6fb68b58a7ea58a9b25d3287eac21f2e768ee26498327495c5bc236a8f1e997ef7388bf81dc534688" name="snowball-debugsource" arch="aarch64">
  <version epoch="0" ver="2.2.0" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1620734400">- Initial package, version 2.1.0, based on work by darix and dabian</changelog>
  <changelog author="dimstar@opensuse.org" date="1696939200">- Update to version 2.2.0:
  + New code generator: Ada generator.
  + Javascript: Fix generated code to use integer division rather
    than floating point division.
  + Python:
  - Python 2 is no longer actively supported.
  - Fix code generated for division.  Previously the Python code
    we generated used integer division but rounded negative
    fractions towards negative infinity rather than zero under
    Python 2, and under Python 3 used floating point division.
  + For more information, see shipped NEWS file.
- Rebase build-options.diff and shared-library.diff.
- Bump libstemmer.so.0d to libstemmer.so.1d: we have no guarantee
  that upstreams static-only-library maintains any kind of ABI.</changelog>
</package>
<package pkgid="fa8acd4e025e2e730864fb0dea1dba5de9a1e723e95be81c8b4e1394cbbc1eea5357646cd9fb25eb27ad54f9ca713ae3ecf732d6eb2cef397103283c52c5020a" name="socat-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.4.3" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1535630400">- We HAVE_SSLv23_*_method, just not as functions, but macros
  add the relevant defines in the command line so support for
  autonegotiation of the highest TLS version is restored.</changelog>
  <changelog author="jengelh@inai.de" date="1536580800">- Replace old variables by modern counterparts.</changelog>
  <changelog author="mardnh@gmx.de" date="1554552000">- Update to version 1.7.3.3:
  * bugfix release, see the CHANGES file for all changes
- Drop patch:
  * socat-openssl-1.1-tests.patch (not longer needed)
- Run spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1580817600">- socat-common-fixes.patch: include tcpd.h where needed to fix
  - fno-common bsc#1160293</changelog>
  <changelog author="mpluskal@suse.com" date="1587124800">- Update to version 1.7.3.4:
  * bugfix release, see the CHANGES file for all changes
- Refresh patches:
  * socat-common-fixes.patch
  * socat-ignore-tests-failure-boo1078346.patch</changelog>
  <changelog author="dmueller@suse.com" date="1610366400">- update to 1.7.4.1:
  Security:
  * Buffer size option (-b) is internally doubled for CR-CRLF conversion,
    but not checked for integer overflow. This could lead to heap based buffer
    overflow, assuming the attacker could provide this parameter.
  * Many further bugfixes and new features, see the CHANGES file</changelog>
  <changelog author="mardnh@gmx.de" date="1635768000">- Update to version 1.7.4.2:
  * Fixes a lot of bugs, e.g., for options -r and -R.
  * Further bugfixes, see the CHANGES file</changelog>
  <changelog author="dmueller@suse.com" date="1642852800">- update to 1.7.4.3:
  * fixes the TCP_INFO issue that broke building on non-Linux platforms.
  * building on AIX works again.
  * A few more corrections and improvements have been added</changelog>
  <changelog author="mliska@suse.cz" date="1649851200">- Use autosetup
- Add socat-fix-asan-error.patch that is offered to upstream
  and that fixes an ASAN error seen for 'test 313 NESTEDOVFL'.</changelog>
</package>
<package pkgid="dd0aff837697e9fecbf7c6623b493ccc4f0481fd1f28e46c8e4c682753ab9c56f0eedf1aa912facd86f238521d433562f6239916c2c0bfaa5fb68f4fead76b60" name="socat-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.4.3" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1535630400">- We HAVE_SSLv23_*_method, just not as functions, but macros
  add the relevant defines in the command line so support for
  autonegotiation of the highest TLS version is restored.</changelog>
  <changelog author="jengelh@inai.de" date="1536580800">- Replace old variables by modern counterparts.</changelog>
  <changelog author="mardnh@gmx.de" date="1554552000">- Update to version 1.7.3.3:
  * bugfix release, see the CHANGES file for all changes
- Drop patch:
  * socat-openssl-1.1-tests.patch (not longer needed)
- Run spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1580817600">- socat-common-fixes.patch: include tcpd.h where needed to fix
  - fno-common bsc#1160293</changelog>
  <changelog author="mpluskal@suse.com" date="1587124800">- Update to version 1.7.3.4:
  * bugfix release, see the CHANGES file for all changes
- Refresh patches:
  * socat-common-fixes.patch
  * socat-ignore-tests-failure-boo1078346.patch</changelog>
  <changelog author="dmueller@suse.com" date="1610366400">- update to 1.7.4.1:
  Security:
  * Buffer size option (-b) is internally doubled for CR-CRLF conversion,
    but not checked for integer overflow. This could lead to heap based buffer
    overflow, assuming the attacker could provide this parameter.
  * Many further bugfixes and new features, see the CHANGES file</changelog>
  <changelog author="mardnh@gmx.de" date="1635768000">- Update to version 1.7.4.2:
  * Fixes a lot of bugs, e.g., for options -r and -R.
  * Further bugfixes, see the CHANGES file</changelog>
  <changelog author="dmueller@suse.com" date="1642852800">- update to 1.7.4.3:
  * fixes the TCP_INFO issue that broke building on non-Linux platforms.
  * building on AIX works again.
  * A few more corrections and improvements have been added</changelog>
  <changelog author="mliska@suse.cz" date="1649851200">- Use autosetup
- Add socat-fix-asan-error.patch that is offered to upstream
  and that fixes an ASAN error seen for 'test 313 NESTEDOVFL'.</changelog>
</package>
<package pkgid="e1f1d5dee2f78af1976a8173acb31e4131f62a1e45b4a216d7aab7d75d656e97913e0832857c9f4a11624b0d8ee15402965dbb324e42b9cc24811f3eee77557b" name="spice-debugsource" arch="aarch64">
  <version epoch="0" ver="0.15.1" rel="slfo.1.1_1.3"/>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="9+suse@cirno.systems" date="1578657600">- Enable video codec support (VPX and MJPEG)</changelog>
  <changelog author="brogers@suse.com" date="1582891200">- Update to v0.14.3 release
  The main changes are WebSocket and support for Windows.
  * Add support for WebSocket, this will allow to use spice-html5
    without proxy
  * Support Windows, now Qemu Windows can be build enabling Spice
  * Fix some alignment problem
  * Converted some documentation to Asciidoc format to make easier
    to update, updated some
  * Minor compatibility fix for PPC64EL and ARMHF
  * Minor fixes for big endian machines like MIPS
  * Avoid some crashes with some buggy guest drivers, simply
    ignore the invalid request
  * Fix for old OpenSSL versions
  * Minor fix for Windows clients and brushes, fixed an issue with
    Photoshop under Windows 7
  * Add ability to query video-codecs
  * Small use-after-free fix
  * Fix for debugging recording/replaying using QUIC images
  * Fix a regression where spice reported no monitors to the client
  * Fix DoS in spicevmc if WebDAV used
  * Updated and improved test migration script
  * Some minor fixes to smartcard support
  * Avoid possible disconnection using proxies using a in-flow
    keepalive mechanism
- The NEWS file is now named CHANGELOG.md, and the previously
  provided ChangeLog, which was a summary of the git log is no
  longer provided</changelog>
  <changelog author="brogers@suse.com" date="1583755200">- Clean up some spec file conditionals that are no longer helpful</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vunerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="brogers@suse.com" date="1602244800">- Note: The Mar 9, 2020 spec file cleanup and the following change
  satisfy jsc#SLE-15520
- Remove gstreamer-plugins-libav and gstreamer-plugins-good as
  BuildRequires. Even though the configure step of the package
  build does report detection of features from these packages, the
  build is actually not otherwise influenced by the presence of
  these packages. It is at runtime when these plugin packages are
  utilized, so leave the Recommends for these in the package spec,
  so that if the packages are available in a distro they can get
  installed and utilized.</changelog>
  <changelog author="carnold@suse.com" date="1620388800">- Update to v0.15.0 release
  This is the first release in the new 0.15.x stable series.
  * Minor updates to CI
  * Some compatibility with OpenSSL
  * Change the behavior of handle_dev_start ignoring multiple start requests
  * Ignore multiple calls to handle_dev_stop
  * Pick up newer spice-common to fix a buffer overflow issue
- Dropped patches contained in new tarball
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1648036800">- Add patch to let spice build with gstreamer 1.20.x
  (https://gitlab.freedesktop.org/spice/spice/-/merge_requests/207)
  * fix-build-with-gstreamer-1.20.patch</changelog>
  <changelog author="carnold@suse.com" date="1669723200">- Update to v0.15.1 release
  * This is a bug fix release with no upstream changelog
- Drop fix-build-with-gstreamer-1.20.patch</changelog>
</package>
<package pkgid="ab69bf948dcd440d2dc342d5ecedd02ad5a4f2aceee026b0c9306a9745c876e8de8ba6ba08deb4883694189dfa3074b26b542b34ee26f955ff11acdf345aefd4" name="sqlite3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.51.3" rel="slfo.1.1_1.1"/>
  <changelog author="max@suse.com" date="1746619200">- Update to release 3.49.2:
  * Fix a bug in the NOT NULL optimization of version 3.40.0 that
    can lead to a memory error if abused.
  * Fix the count-of-view optimization so that it does not give an
    incorrect answer for a DISTINCT query.
  * Fix a possible incorrect answer that can result if a UNIQUE
    constraint of a table contains the PRIMARY KEY column and that
    UNIQUE constraint is used by an IN operator.
  * Fix obscure problems with the generate_series() extension
    function.
  * Incremental improvements to the configure/make.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1749470400">- Update to 3.50 (3.50.1):
  * Improved handling and robust output of control characters
  * sqlite3_rsync no longer requires WAL mode and needs less
    bandwidth
  * Bug fixes and optimized JSON handling
  * Performance optimizations and developer visible fixes</changelog>
  <changelog author="max@suse.com" date="1751371200">- Update to 3.50.2:
  * Fix the concat_ws() SQL function so that it includes empty
    strings in the concatenation.
  * Avoid writing frames with no checksums into the wal file if a
    savepoint is rolled back after dirty pages have already been
    spilled into the wal file.
  * Fix the Bitvec object to avoid stack overflow when the
    database is within 60 pages of its maximum size.
  * Fix a problem with UPDATEs on fts5 tables that contain BLOB
    values.
  * Fix an issue with transitive IS constraints on a RIGHT JOIN.
  * CVE-2025-6965, bsc#1246597:
    Raise an error early if the number of aggregate terms in a
    query exceeds the maximum number of columns, to avoid
    downstream assertion faults.
  * Ensure that sqlite3_setlk_timeout() holds the database mutex.</changelog>
  <changelog author="max@suse.com" date="1752753600">- Update to version 3.50.3:
  * Fix a possible memory error that can occur if a query is made
    against against FTS5 index that has been deliberately corrupted
    in a very specific way (CVE-2025-7709, bsc#1254670).
  * Fix the parser so that it ignored SQL comments in all places of
    a CREATE TRIGGER statement. This resolves a problem that was
    introduced by the introduction of the
    SQLITE_DBCONFIG_ENABLE_COMMENTS feature in version 3.49.0.
  * Fix an incorrect answer due to over-optimization of an AND
    operator.</changelog>
  <changelog author="max@suse.com" date="1754913600">- Update to version 3.50.4:
  * Fix two long-standings cases of the use of uninitialized
    variables in obscure circumstances.</changelog>
  <changelog author="max@suse.com" date="1756209600">- bsc#1248586: Fix icu-enabled build.</changelog>
  <changelog author="max@suse.com" date="1761048000">- bsc#1252217: Add a %license file.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Update to version 3.51.1:
  * Fix incorrect results from nested EXISTS queries caused by the
    optimization in item 6b in the 3.51.0 release.
  * Fix a latent bug in fts5vocab virtual table, exposed by new
    optimizations in the 3.51.0 release
- Changes in version 3.51.0:
  * New macros in sqlite3.h:
  - SQLITE_SCM_BRANCH → the name of the branch from which the
    source code is taken.
  - SQLITE_SCM_TAGS → space-separated list of tags on the source
    code check-in.
  - SQLITE_SCM_DATETIME → ISO-8601 date and time of the source
    code check-in.
  * Two new JSON functions, jsonb_each() and jsonb_tree() work the
    same as the existing json_each() and json_tree() functions
    except that they return JSONB for the "value" column when the
    "type" is 'array' or 'object'.
  * The carray and percentile extensions are now built into the
    amalgamation, though they are disabled by default and must be
    activated at compile-time using the -DSQLITE_ENABLE_CARRAY
    and/or -DSQLITE_ENABLE_PERCENTILE options, respectively.
  * Enhancements to TCL Interface:
  - Add the -asdict flag to the eval command to have it set the
    row data as a dict instead of an array.
  - User-defined functions may now break to return an SQL NULL.
  * CLI enhancements:
  - Increase the precision of ".timer" to microseconds.
  - Enhance the "box" and "column" formatting modes to deal with
    double-wide characters.
  - The ".imposter" command provides read-only imposter tables
    that work with VACUUM and do not require the --unsafe-testing
    option.
  - Add the --ifexists option to the CLI command-line option and
    to the .open command.
  - Limit columns widths set by the ".width" command to 30,000 or
    less, as there is not good reason to have wider columns, but
    supporting wider columns provides opportunity to malefactors.
  * Performance enhancements:
  - Use fewer CPU cycles to commit a read transaction.
  - Early detection of joins that return no rows due to one or
    more of the tables containing no rows.
  - Avoid evaluation of scalar subqueries if the result of the
    subquery does not change the result of the overall expression.
  - Faster window function queries when using
    "BETWEEN :x FOLLOWING AND :y FOLLOWING" with a large :y.
  * Add the PRAGMA wal_checkpoint=NOOP; command and the
    SQLITE_CHECKPOINT_NOOP argument for sqlite3_wal_checkpoint_v2().
  * Add the sqlite3_set_errmsg() API for use by extensions.
  * Add the sqlite3_db_status64() API, which works just like the
    existing sqlite3_db_status() API except that it returns 64-bit
    results.
  * Add the SQLITE_DBSTATUS_TEMPBUF_SPILL option to the
    sqlite3_db_status() and sqlite3_db_status64() interfaces.
  * In the session extension add the sqlite3changeset_apply_v3()
    interface.
  * For the built-in printf() and the format() SQL function, omit
    the leading '-' from negative floating point numbers if the '+'
    flag is omitted and the "#" flag is present and all displayed
    digits are '0'. Use '%#f' or similar to avoid outputs like
    '-0.00' and instead show just '0.00'.
  * Improved error messages generated by FTS5.
  * Enforce STRICT typing on computed columns.
  * Improved support for VxWorks
  * JavaScript/WASM now supports 64-bit WASM. The canonical builds
    continue to be 32-bit but creating one's own 64-bit build is
    now as simple as running "make".
  * Improved resistance to database corruption caused by an
    application breaking Posix advisory locks using close().</changelog>
  <changelog author="max@suse.com" date="1769083200">- Update to version 3.51.2:
  * bsc#1259619, CVE-2025-70873: zipfile extension may disclose
    uninitialized heap memory during inflation.
  * Fix an obscure deadlock in the new broken-posix-lock detection
    logic.
  * Fix multiple problems in the EXISTS-to-JOIN optimization.
  * Other minor bug fixes.</changelog>
  <changelog author="max@suse.com" date="1773403200">- Update to version 3.51.3:
  * Fix the WAL-reset database corruption bug:
    https://sqlite.org/wal.html#walresetbug
  * Other minor bug fixes.</changelog>
</package>
<package pkgid="fb2b5a02d0342bbbab004faa1ed78123a27b1eddd4010bfdb3da42b7df4a47f4f0b226d413711f7c837403e20559040a63653eca05c4e6f7308bd75d021369a3" name="squashfs-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.6.1" rel="slfo.1.1_1.2"/>
  <changelog author="p.seiler@linuxmail.org" date="1559736000">-  Add -offset function to skip n bytes at the beginning of the squashfs…
  https://github.com/plougher/squashfs-tools/commit/5a498ad24dcfeac9f3d747e894f22901f3ac10
  (0003-Add-offset-function-to-skip-n-bytes.patch)</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1571659200">- Version 4.4 - 2019-08-29:
  * Reproducible builds, new compressors,
  CVE fixes, security hardening and new options
  for Mksquashfs/Unsquashfs.
- Overall improvements:
  * Mksquashfs now generates reproducible images by default.
  * Mkfs time and file timestamps can also be specified.
  * Support for the Zstandard (ZSTD) compression algorithm.
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
- Mksquashfs improvements and major bug fixes:
  * Pseudo files now support symbolic links.
  * New -mkfs-time option.
  * New -all-time option.
  * New -root-mode option.
  * New -quiet option.
  * New -noId option.
  * New -offset option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, don't allow "/" pseudo filenames.
  * Bug fix, allow quoting of pseudo files, to
  better handle filenames with spaces.
  * Fix compilation with glibc 2.25+.
- Unsquashfs improvements and major bug fixes:
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
  * Unsquashfs has been further hardened against corrupted
  filestems.
  * Unsquashfs is now more strict about error handling.
  * New -ignore-errors option.
  * New -strict-errors option.
  * New -lln[umeric] option.
  * New -lc option.
  * New -llc option.
  * New -mkfs-time option.
  * New -UTC option.
  * New -offset option.
  * New -quiet option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, fatal and non-fatal errors now set the exit
  code to 1.
  * Bug fix, fix time setting for symlinks.
  * Bug fix, try to set sticky-bit when running as a
  user process.
  * Fix compilation with glibc 2.25+.
- build changes:
  * re-created patches to fit squashfs 4.4
  * removed 0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  (new version includes this change)
  * removed 0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch
  (new version includes this change)
  * removed 0003-Add-offset-function-to-skip-n-bytes.patch
  (new version includes this change)
  * removed sysmacros.patch
  (new version includes this change)</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon in order to fix boo#1160294.</changelog>
  <changelog author="bjoernv@arcor.de" date="1598961600">- enabled ZSTD compression support for openSUSE &gt;= 15.1</changelog>
  <changelog author="dmueller@suse.com" date="1639224000">- update to 4.5:
  * Mksquashfs now supports "Actions".
  * New sqfstar command which will create a Squashfs image from a tar archive.
  * Tar style handling of source pathnames in Mksquashfs.
  * Cpio style handling of source pathnames in Mksquashfs.
  * New option to throttle the amount of CPU and I/O.
  * Mksquashfs now allows no source directory to be specified.
  * New Pseudo file "R" definition which allows a Regular file
    o be created with data stored within the Pseudo file.
  * Symbolic links are now followed in extract files
  * Unsquashfs now supports "exclude" files.
  * Max depth traversal option added.
  * Unsquashfs can now output a "Pseudo file" representing the
    input Squashfs filesystem.
  * New -one-file-system option in Mksquashfs.
  * New -no-hardlinks option in Mksquashfs.
  * Exit code in Unsquashfs changed to distinguish between
    non-fatal errors (exit 2), and fatal errors (exit 1).
  * Xattr id count added in Unsquashfs "-stat" output.
  * Unsquashfs "write outside directory" exploit fixed.
  * Error handling in Unsquashfs writer thread fixed.
  * Fix failure to truncate destination if appending aborted.
  * Prevent Mksquashfs reading the destination file.</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 4.5.1 (bsc#1190531, CVE-2021-41072):
  * This release adds Manpages for Mksquashfs(1), Unsquashfs(1),
    Sqfstar(1) and Sqfscat(1).
  * The -help text output from the utilities has been improved
    and extended as well (but the Manpages are now more
    comprehensive).
  * CVE-2021-41072 which is a writing outside of destination
    exploit, has been fixed.
  * The number of hard-links in the filesystem is now also
    displayed by Mksquashfs in the output summary.
  * The number of hard-links written by Unsquashfs is now
    also displayed in the output summary.
  * Unsquashfs will now write to a pre-existing destination
    directory, rather than aborting.
  * Unsquashfs now allows "." to used as the destination, to
    extract to the current directory.
  * The Unsquashfs progress bar now tracks empty files and
    hardlinks, in addition to data blocks.
  * -no-hardlinks option has been implemented for Sqfstar.
  * More sanity checking for "corrupted" filesystems, including
    checks for multiply linked directories and directory loops.
  * Options that may cause filesystems to be unmountable have
    been moved into a new "experts" category in the Mksquashfs
    help text (and Manpage).
  * Maximum cpiostyle filename limited to PATH_MAX.  This
    prevents attempts to overflow the stack, or cause system
    calls to fail with a too long pathname.
  * Don't always use "max open file limit" when calculating
    length of queues, as a very large file limit can cause
    Unsquashfs to abort.  Instead use the smaller of max open
    file limit and cache size.
  * Fix Mksquashfs silently ignoring Pseudo file definitions
    when appending.
  * Don't abort if no XATTR support has been built in, and
    there's XATTRs in the filesystem.  This is a regression
    introduced in 2019 in Version 4.4.
  * Fix duplicate check when the last file block is sparse.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1652011200">- set LZMA_XZ_SUPPORT=1 so you can (un)squash -comp lzma images</changelog>
  <changelog author="duwe@suse.com" date="1665748800">- Do not repeat openSUSE / SLE version tests
- Actually format and package the man pages</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 4.6.1:
  * Race condition which can cause corruption of the "fragment
    table" fixed.  This is a regression introduced in August 2022,
    and it has been seen when tailend packing is used (-tailends option).
  * Fix build failure when the tools are being built without
    extended attribute (XATTRs) support.
  * Fix XATTR error message when an unrecognised prefix is
    found
  * Fix incorrect free of pointer when an unrecognised XATTR
    prefix is found.
  * Major improvements in extended attribute handling,
    pseudo file handling, and miscellaneous new options and
    improvements
  * Extended attribute handling improved in Mksquashfs and
    Sqfstar
  * New Pseudo file xattr definition to add extended
    attributes to files.
  * New xattrs-add Action to add extended attributes to files
  * Extended attribute handling improved in Unsquashfs
  * Other major improvements
  * Unsquashfs can now output Pseudo files to standard out.
  * Mksquashfs can now input Pseudo files from standard in.
  * Squashfs filesystems can now be converted (different
    block size compression etc) without unpacking to an
    intermediate filesystem or mounting, by piping the output of
    Unsquashfs to Mksquashfs.
  * Pseudo files are now supported by Sqfstar.
  * "Non-anchored" excludes are now supported by Unsquashfs.</changelog>
  <changelog author="duwe@suse.com" date="1688385600">- For reference: previous updates fixed
  * CVE-2021-40153 (bsc#1189936)
  * CVE-2015-4645, CVE-2015-4646 (bsc#935380)</changelog>
</package>
<package pkgid="133654daae0f325c4ca06c5579e1af92d69338a0ee994b8f4d1999f2ecce239d7d2887daf9524bfe1070f38ac7b6c070ea7398b82b7999b03f5518556e0b8fa2" name="squashfs-debugsource" arch="aarch64">
  <version epoch="0" ver="4.6.1" rel="slfo.1.1_1.2"/>
  <changelog author="p.seiler@linuxmail.org" date="1559736000">-  Add -offset function to skip n bytes at the beginning of the squashfs…
  https://github.com/plougher/squashfs-tools/commit/5a498ad24dcfeac9f3d747e894f22901f3ac10
  (0003-Add-offset-function-to-skip-n-bytes.patch)</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1571659200">- Version 4.4 - 2019-08-29:
  * Reproducible builds, new compressors,
  CVE fixes, security hardening and new options
  for Mksquashfs/Unsquashfs.
- Overall improvements:
  * Mksquashfs now generates reproducible images by default.
  * Mkfs time and file timestamps can also be specified.
  * Support for the Zstandard (ZSTD) compression algorithm.
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
- Mksquashfs improvements and major bug fixes:
  * Pseudo files now support symbolic links.
  * New -mkfs-time option.
  * New -all-time option.
  * New -root-mode option.
  * New -quiet option.
  * New -noId option.
  * New -offset option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, don't allow "/" pseudo filenames.
  * Bug fix, allow quoting of pseudo files, to
  better handle filenames with spaces.
  * Fix compilation with glibc 2.25+.
- Unsquashfs improvements and major bug fixes:
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
  * Unsquashfs has been further hardened against corrupted
  filestems.
  * Unsquashfs is now more strict about error handling.
  * New -ignore-errors option.
  * New -strict-errors option.
  * New -lln[umeric] option.
  * New -lc option.
  * New -llc option.
  * New -mkfs-time option.
  * New -UTC option.
  * New -offset option.
  * New -quiet option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, fatal and non-fatal errors now set the exit
  code to 1.
  * Bug fix, fix time setting for symlinks.
  * Bug fix, try to set sticky-bit when running as a
  user process.
  * Fix compilation with glibc 2.25+.
- build changes:
  * re-created patches to fit squashfs 4.4
  * removed 0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  (new version includes this change)
  * removed 0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch
  (new version includes this change)
  * removed 0003-Add-offset-function-to-skip-n-bytes.patch
  (new version includes this change)
  * removed sysmacros.patch
  (new version includes this change)</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon in order to fix boo#1160294.</changelog>
  <changelog author="bjoernv@arcor.de" date="1598961600">- enabled ZSTD compression support for openSUSE &gt;= 15.1</changelog>
  <changelog author="dmueller@suse.com" date="1639224000">- update to 4.5:
  * Mksquashfs now supports "Actions".
  * New sqfstar command which will create a Squashfs image from a tar archive.
  * Tar style handling of source pathnames in Mksquashfs.
  * Cpio style handling of source pathnames in Mksquashfs.
  * New option to throttle the amount of CPU and I/O.
  * Mksquashfs now allows no source directory to be specified.
  * New Pseudo file "R" definition which allows a Regular file
    o be created with data stored within the Pseudo file.
  * Symbolic links are now followed in extract files
  * Unsquashfs now supports "exclude" files.
  * Max depth traversal option added.
  * Unsquashfs can now output a "Pseudo file" representing the
    input Squashfs filesystem.
  * New -one-file-system option in Mksquashfs.
  * New -no-hardlinks option in Mksquashfs.
  * Exit code in Unsquashfs changed to distinguish between
    non-fatal errors (exit 2), and fatal errors (exit 1).
  * Xattr id count added in Unsquashfs "-stat" output.
  * Unsquashfs "write outside directory" exploit fixed.
  * Error handling in Unsquashfs writer thread fixed.
  * Fix failure to truncate destination if appending aborted.
  * Prevent Mksquashfs reading the destination file.</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 4.5.1 (bsc#1190531, CVE-2021-41072):
  * This release adds Manpages for Mksquashfs(1), Unsquashfs(1),
    Sqfstar(1) and Sqfscat(1).
  * The -help text output from the utilities has been improved
    and extended as well (but the Manpages are now more
    comprehensive).
  * CVE-2021-41072 which is a writing outside of destination
    exploit, has been fixed.
  * The number of hard-links in the filesystem is now also
    displayed by Mksquashfs in the output summary.
  * The number of hard-links written by Unsquashfs is now
    also displayed in the output summary.
  * Unsquashfs will now write to a pre-existing destination
    directory, rather than aborting.
  * Unsquashfs now allows "." to used as the destination, to
    extract to the current directory.
  * The Unsquashfs progress bar now tracks empty files and
    hardlinks, in addition to data blocks.
  * -no-hardlinks option has been implemented for Sqfstar.
  * More sanity checking for "corrupted" filesystems, including
    checks for multiply linked directories and directory loops.
  * Options that may cause filesystems to be unmountable have
    been moved into a new "experts" category in the Mksquashfs
    help text (and Manpage).
  * Maximum cpiostyle filename limited to PATH_MAX.  This
    prevents attempts to overflow the stack, or cause system
    calls to fail with a too long pathname.
  * Don't always use "max open file limit" when calculating
    length of queues, as a very large file limit can cause
    Unsquashfs to abort.  Instead use the smaller of max open
    file limit and cache size.
  * Fix Mksquashfs silently ignoring Pseudo file definitions
    when appending.
  * Don't abort if no XATTR support has been built in, and
    there's XATTRs in the filesystem.  This is a regression
    introduced in 2019 in Version 4.4.
  * Fix duplicate check when the last file block is sparse.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1652011200">- set LZMA_XZ_SUPPORT=1 so you can (un)squash -comp lzma images</changelog>
  <changelog author="duwe@suse.com" date="1665748800">- Do not repeat openSUSE / SLE version tests
- Actually format and package the man pages</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 4.6.1:
  * Race condition which can cause corruption of the "fragment
    table" fixed.  This is a regression introduced in August 2022,
    and it has been seen when tailend packing is used (-tailends option).
  * Fix build failure when the tools are being built without
    extended attribute (XATTRs) support.
  * Fix XATTR error message when an unrecognised prefix is
    found
  * Fix incorrect free of pointer when an unrecognised XATTR
    prefix is found.
  * Major improvements in extended attribute handling,
    pseudo file handling, and miscellaneous new options and
    improvements
  * Extended attribute handling improved in Mksquashfs and
    Sqfstar
  * New Pseudo file xattr definition to add extended
    attributes to files.
  * New xattrs-add Action to add extended attributes to files
  * Extended attribute handling improved in Unsquashfs
  * Other major improvements
  * Unsquashfs can now output Pseudo files to standard out.
  * Mksquashfs can now input Pseudo files from standard in.
  * Squashfs filesystems can now be converted (different
    block size compression etc) without unpacking to an
    intermediate filesystem or mounting, by piping the output of
    Unsquashfs to Mksquashfs.
  * Pseudo files are now supported by Sqfstar.
  * "Non-anchored" excludes are now supported by Unsquashfs.</changelog>
  <changelog author="duwe@suse.com" date="1688385600">- For reference: previous updates fixed
  * CVE-2021-40153 (bsc#1189936)
  * CVE-2015-4645, CVE-2015-4646 (bsc#935380)</changelog>
</package>
<package pkgid="060f5a0fca26484a902910d5ba2b619d99fa231d4a368398ffb5c7b03f8cdf476ca576bb70067ae969b5f8cfad9559a0b7d66768bf575ce5141174d37ad1a8b6" name="ssh-pairing-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.2" rel="slfo.1.1_1.2"/>
  <changelog author="fvogt@suse.com" date="1705579200">- Initial commit</changelog>
  <changelog author="fvogt@suse.com" date="1706270400">- Update to version 0.1+git11:
  * Document ssh-pairing tool
  * Make it clear that the client message is important
  * No bogus output
  * Make shellcheck happy
  * Add ssh-pairing tool
  * Add a usage message
  * Shorten status message sent to the client
  * Print received keys immediately
  * Some README.md improvements
  * Fix indentation
  * Use NI_MAXHOST</changelog>
  <changelog author="fvogt@suse.com" date="1706270401">- Update to version 0.1+git12:
  * Avoid unnecessary strlcpy</changelog>
  <changelog author="fvogt@suse.com" date="1707912000">- Update to version 0.1+git18:
  * Add Security Considerations section to README.md
  * Mention ssh-pairing prefix also in README.md
  * Add ssh-pairing prefix to the client success message
  * Clarify comment
  * Show ssh-pairing-server stderr on failure
  * Fail if kbd-interactive does not complete</changelog>
  <changelog author="fvogt@suse.com" date="1712923200">- Update to version 0.2:
  * Ask for key import individually
  * Use SSH_STRING_FREE_CHAR instead of plain free
- Use mode="manual" in _service</changelog>
</package>
<package pkgid="ffee62385958bf497f76cd8b1699c3280c1f4730816de470b9825804de07cf5552b0f7198c2063863805c7c2a676fd8dba031526221fb2cb019cad01d65c95db" name="ssh-pairing-debugsource" arch="aarch64">
  <version epoch="0" ver="0.2" rel="slfo.1.1_1.2"/>
  <changelog author="fvogt@suse.com" date="1705579200">- Initial commit</changelog>
  <changelog author="fvogt@suse.com" date="1706270400">- Update to version 0.1+git11:
  * Document ssh-pairing tool
  * Make it clear that the client message is important
  * No bogus output
  * Make shellcheck happy
  * Add ssh-pairing tool
  * Add a usage message
  * Shorten status message sent to the client
  * Print received keys immediately
  * Some README.md improvements
  * Fix indentation
  * Use NI_MAXHOST</changelog>
  <changelog author="fvogt@suse.com" date="1706270401">- Update to version 0.1+git12:
  * Avoid unnecessary strlcpy</changelog>
  <changelog author="fvogt@suse.com" date="1707912000">- Update to version 0.1+git18:
  * Add Security Considerations section to README.md
  * Mention ssh-pairing prefix also in README.md
  * Add ssh-pairing prefix to the client success message
  * Clarify comment
  * Show ssh-pairing-server stderr on failure
  * Fail if kbd-interactive does not complete</changelog>
  <changelog author="fvogt@suse.com" date="1712923200">- Update to version 0.2:
  * Ask for key import individually
  * Use SSH_STRING_FREE_CHAR instead of plain free
- Use mode="manual" in _service</changelog>
</package>
<package pkgid="50012d3830b33283dfd3d0fcdaac8f862398ee17f89f9084a58c552634d4fa9976dabc99489f86e5cf4b6d2b5409386fdb24eaa825bb2477c09e38396a5d554d" name="sssd-ad-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.5" rel="slfo.1.1_4.1"/>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="c7d0ee32fa87aead547f56e023d09dcbda0b3f42fffdebf53152a6f66356f1ed5b38493355d07c2b228e41d8e233af8c568af0ef0a0792e20857dca04615fbf3" name="sssd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.5" rel="slfo.1.1_4.1"/>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="58eaab07c7e280781f0dee291eb0d8acdd63074dececbe5b470cb8bee310d6703b63f9adcf9244b331791529dfab133c8b2ab2e744e42e272b7017b64602db6b" name="sssd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.9.5" rel="slfo.1.1_4.1"/>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="adb5b4537ae0ca7b3e24e72b5d0029dfd55e2e8106cb46ed6d7ca842eb4e9bcb85ce2ca0a5b2ae3f133ebab7f141e76a394f23b4849cbf5355e2c78ae244b1d9" name="sssd-krb5-common-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.5" rel="slfo.1.1_4.1"/>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="916998a84060d258931bfabf45ae05a28c060fb10e03149b52490bf9285ab392d822ab878402b63f39c5969d8174a3aeee7656a4c19cf968f0d5c4643060c967" name="sssd-krb5-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.5" rel="slfo.1.1_4.1"/>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="d46d01174245c2344f1d3b6b8f88aa0da674683a9738ee5eb825a0bafa71b4f2bd99f94ab41618e867c4b09cfc4248719e45bf0b6dd4378ce3bb50130719b023" name="sssd-ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.5" rel="slfo.1.1_4.1"/>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="jengelh@inai.de" date="1705060800">- Update to release 2.9.4
  * Fixes a crash when PAM passkey processing incorrectly handles
    non-passkey data.
  * Fixed group membership handling when members are coming from
    different forest domains and using ldap token groups is
    prohibited.
  * Files provider was erroneously taking into consideration
    ``local_auth_policy`` config option, thus breaking smartcard
    authentication of local user in setups that did not explicitly
    specify this option. This is now fixed.</changelog>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 2.9.5
  * Added failover_primary_timout configuration option. This can
    be used to configure how often SSSD tries to reconnect to a
    primary server after a successful connection to a backup
    server. This was previously hardcoded to 31 seconds which is
    kept as the default value.</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts; (bsc#1235789); (bsc#1216739);</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);
- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0005-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="146c4a78ff671bcb5d91b4b35ce6033fbc91befd14eb33e2696bdb101a8c8b96c74c955154b17902b8f2b526ba9ba9b757a851767f608ff9644de792b994bba7" name="strace-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.13" rel="slfo.1.1_1.1"/>
  <changelog author="schwab@suse.de" date="1698753600">- Update to strace 6.6
  * Implemented --kill-on-exit option that instructs the tracer to set
    PTRACE_O_EXITKILL option to all tracee processes and not to detach them
    on cleanup so they will not be left running after the tracer exit.
  * Implemented automatic activation of --kill-on-exit option when
  - -seccomp-bpf is enabled and -p/--attach option is not used.
  * Implemented decoding of map_shadow_stack syscall.
  * Implemented decoding of FSCONFIG_CMD_CREATE_EXCL fsconfig command.
  * Implemented decoding of IFLA_BRPORT_BACKUP_NHID netlink attribute.
  * Implemented decoding of SECCOMP_IOCTL_NOTIF_SET_FLAGS ioctl.
  * Implemented decoding of UFFDIO_CONTINUE, UFFDIO_POISON, and
    UFFDIO_WRITEPROTECT ioctls.
  * Updated lists of ARCH_*, BPF_*, DEVCONF_*, IORING_*, KEXEC_*, MAP_*, NT_*,
    PTRACE_*, QFMT_*, SEGV_*, UFFD_*, V4L2_*, and XDP_* constants.
  * Updated lists of ioctl commands from Linux 6.6.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1706529600">- Update to strace 6.7
  * Implemented -kk/--stack-traces=source option for libdw-based stack tracing.
  * Implemented decoding of futex_wake, futex_wait, and sys_futex_requeue
    syscalls.
  * Updated lists of BPF_*, BTRFS_*, IORING_*, KVM_*, LANDLOCK_*, PR_*,
    and TCP_* constants.
  * Updated lists of ioctl commands from Linux 6.7.
  * Fix strace -r during the first second after booting to show correct relative
    timestamps.
  * Fix strace -f entering deadlock on exit if there are tracee processes
    spawned using vfork semantics.</changelog>
  <changelog author="cathy.hu@suse.com" date="1706788800">- Enable SELinux Context Printing (--secontext).</changelog>
  <changelog author="schwab@suse.de" date="1710936000">- Update to strace 6.8
  * Renamed --stack-traces to --stack-trace for consistency.
    Old option is retained for backwards compatibility.
  * Implemented --stack-trace-frame-limit=N option for configuring the limit
    of the number of printed backtrace frames.
  * Implemented decoding of statmount, listmount, lsm_get_self_attr,
    lsm_set_self_attr, and lsm_list_modules syscalls.
  * Implemented decoding of setsockopt(TCP_AO_ADD_KEY).
  * Updated decoding of landlock_create_ruleset and landlock_add_rule syscalls.
  * Updated decoding of SMC_DIAG_DMBINFO netlink attribute.
  * Updated decoding of UBI_IOCATT ioctl command.
  * Enhanced decoding of mount attributes of fsmount and mount_setattr syscalls.
  * Updated lists of BPF_*, KEXEC_*, KVM_*, PERF_*, SOL_*, STATX_*, UFFD_*,
    and V4L2_* constants.
  * Updated lists of ioctl commands from Linux 6.8.</changelog>
  <changelog author="schwab@suse.de" date="1715774400">- Update to strace 6.9
  * Implemented --always-show-pid option.
  * The --user|-u option has learned to recognize numeric UID:GID pair, allowing
    e.g. statically-built strace to be used without invoking nss plugins.
  * Implemented decoding of IORING_REGISTER_SYNC_CANCEL,
    IORING_REGISTER_FILE_ALLOC_RANGE, IORING_REGISTER_PBUF_STATUS,
    IORING_REGISTER_NAPI, and IORING_UNREGISTER_NAPI opcodes of
    io_uring_register syscall.
  * Implemented decoding of BPF_TOKEN_CREATE bpf syscall command.
  * Updated decoding of io_uring_register and pidfd_send_signal syscalls.
  * Updated lists of BPF_*, CAN_*, IORING_*, KEY_*, LSM_*, MPOL_*, NT_*, RWF_*,
    PIDFD_*, PTP_*, TCP_*, and *_MAGIC constants.
  * Updated lists of ioctl commands from Linux 6.9.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1721563200">- Update to strace 6.10
  * Implemented --decode-fds=eventfd option to retrieve eventfd object details
    associated with eventfd file descriptors.
  * Implemented decoding of NETLINK_GENERIC nlctrl protocol.
  * Implemented decoding of F_DUPFD_QUERY fcntl.
  * Implemented decoding of mseal syscall.
  * Updated decoding of statx and prctl syscalls.
  * Updated decoding of BPF_RAW_TRACEPOINT_OPEN bpf command.
  * Updated lists of BPF_*, IORING_*, KEXEC_*, KEY_*, LANDLOCK_*, PR_*, STATX_*,
    TCP_*, TEE_*, V4L2_*, and *_MAGIC constants.
  * Updated lists of ioctl commands from Linux 6.10.
  * Worked around a bug introduced in Linux 6.5 that affected system call
    tampering on riscv64.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1721822400">- Update License tag (boo#1228216)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1726401600">- Update to strace 6.11
  * Implemented decoding of uretprobe syscall.
  * Implemented decoding of WDIOC_GETSUPPORT and WDIOC_SETOPTIONS ioctl
    commands.
  * Enhanced decoding of unknown ioctl commands in non-abbreviated mode
    by printing the contents of the ioctl argument buffer in hexadecimal format.
  * Updated decoding of listmount, statmount, and statx syscalls.
  * Updated lists of ETHTOOL_*, IORING_*, IPPROTO_*, RWF_*, STATX_*, and V4L2_*
    constants.
  * Updated lists of ioctl commands from Linux 6.11.</changelog>
  <changelog author="schwab@suse.de" date="1731931200">- Update to strace 6.12
  * Implemented decoding of EPIOCGPARAMS and EPIOCSPARAMS ioctl commands.
  * Implemented decoding of NS_GET_MNTNS_ID, NS_GET_PID_FROM_PIDNS,
    NS_GET_TGID_FROM_PIDNS, NS_GET_PID_IN_PIDNS, NS_GET_TGID_IN_PIDNS,
    NS_MNT_GET_INFO, NS_MNT_GET_NEXT, and NS_MNT_GET_PREV ioctl commands.
  * Implemented decoding of FRA_DSCP netlink attribute.
  * Implemented decoding of IORING_REGISTER_CLOCK and
    IORING_REGISTER_CLONE_BUFFERS opcodes of io_uring_register syscall.
  * Updated decoding of struct landlock_ruleset_attr.
  * Updated lists of AUDIT_*, ETHTOOL_*, F_*, IORING_*, LSM_*, MAP_*, MSG_*,
    NT_*, SCHED_*, SCM_*, SO_*, and V4L2_* constants.
  * Updated lists of ioctl commands from Linux 6.12.
  * Fix the syscall name printed by strace when PTRACE_GET_SYSCALL_INFO
    is in use and a syscall is restarted by a just attached tracee using
    restart_syscall mechanism.</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- Update to strace 6.13
  * Implemented decoding of getxattrat, setxattrat, listxattrat,
    and removexattrat syscalls.
  * Updated decoding of struct io_uring_clone_buffers, struct io_uring_napi,
    and struct perf_event_attr.
  * Updated decoding of crypto_user_alg netlink attributes of NETLINK_CRYPTO.
  * Implemented decoding of IFLA_MCTP_PHYS_BINDING netlink attribute.
  * Updated lists of AT_*, BPF_*, FAN_*, IORING_*, MADV_*, NT_*, and SCM_*
    constants.
  * Updated lists of ioctl commands from Linux 6.13.</changelog>
</package>
<package pkgid="a95b01e288a819728b7f562a86667025569541793d5caa1fe9a000e09dcf5fcfebb3461f173c2e2b4480de0d79ab56f11f400e5f35b315f7e71aeb5c86ec7d97" name="strace-debugsource" arch="aarch64">
  <version epoch="0" ver="6.13" rel="slfo.1.1_1.1"/>
  <changelog author="schwab@suse.de" date="1698753600">- Update to strace 6.6
  * Implemented --kill-on-exit option that instructs the tracer to set
    PTRACE_O_EXITKILL option to all tracee processes and not to detach them
    on cleanup so they will not be left running after the tracer exit.
  * Implemented automatic activation of --kill-on-exit option when
  - -seccomp-bpf is enabled and -p/--attach option is not used.
  * Implemented decoding of map_shadow_stack syscall.
  * Implemented decoding of FSCONFIG_CMD_CREATE_EXCL fsconfig command.
  * Implemented decoding of IFLA_BRPORT_BACKUP_NHID netlink attribute.
  * Implemented decoding of SECCOMP_IOCTL_NOTIF_SET_FLAGS ioctl.
  * Implemented decoding of UFFDIO_CONTINUE, UFFDIO_POISON, and
    UFFDIO_WRITEPROTECT ioctls.
  * Updated lists of ARCH_*, BPF_*, DEVCONF_*, IORING_*, KEXEC_*, MAP_*, NT_*,
    PTRACE_*, QFMT_*, SEGV_*, UFFD_*, V4L2_*, and XDP_* constants.
  * Updated lists of ioctl commands from Linux 6.6.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1706529600">- Update to strace 6.7
  * Implemented -kk/--stack-traces=source option for libdw-based stack tracing.
  * Implemented decoding of futex_wake, futex_wait, and sys_futex_requeue
    syscalls.
  * Updated lists of BPF_*, BTRFS_*, IORING_*, KVM_*, LANDLOCK_*, PR_*,
    and TCP_* constants.
  * Updated lists of ioctl commands from Linux 6.7.
  * Fix strace -r during the first second after booting to show correct relative
    timestamps.
  * Fix strace -f entering deadlock on exit if there are tracee processes
    spawned using vfork semantics.</changelog>
  <changelog author="cathy.hu@suse.com" date="1706788800">- Enable SELinux Context Printing (--secontext).</changelog>
  <changelog author="schwab@suse.de" date="1710936000">- Update to strace 6.8
  * Renamed --stack-traces to --stack-trace for consistency.
    Old option is retained for backwards compatibility.
  * Implemented --stack-trace-frame-limit=N option for configuring the limit
    of the number of printed backtrace frames.
  * Implemented decoding of statmount, listmount, lsm_get_self_attr,
    lsm_set_self_attr, and lsm_list_modules syscalls.
  * Implemented decoding of setsockopt(TCP_AO_ADD_KEY).
  * Updated decoding of landlock_create_ruleset and landlock_add_rule syscalls.
  * Updated decoding of SMC_DIAG_DMBINFO netlink attribute.
  * Updated decoding of UBI_IOCATT ioctl command.
  * Enhanced decoding of mount attributes of fsmount and mount_setattr syscalls.
  * Updated lists of BPF_*, KEXEC_*, KVM_*, PERF_*, SOL_*, STATX_*, UFFD_*,
    and V4L2_* constants.
  * Updated lists of ioctl commands from Linux 6.8.</changelog>
  <changelog author="schwab@suse.de" date="1715774400">- Update to strace 6.9
  * Implemented --always-show-pid option.
  * The --user|-u option has learned to recognize numeric UID:GID pair, allowing
    e.g. statically-built strace to be used without invoking nss plugins.
  * Implemented decoding of IORING_REGISTER_SYNC_CANCEL,
    IORING_REGISTER_FILE_ALLOC_RANGE, IORING_REGISTER_PBUF_STATUS,
    IORING_REGISTER_NAPI, and IORING_UNREGISTER_NAPI opcodes of
    io_uring_register syscall.
  * Implemented decoding of BPF_TOKEN_CREATE bpf syscall command.
  * Updated decoding of io_uring_register and pidfd_send_signal syscalls.
  * Updated lists of BPF_*, CAN_*, IORING_*, KEY_*, LSM_*, MPOL_*, NT_*, RWF_*,
    PIDFD_*, PTP_*, TCP_*, and *_MAGIC constants.
  * Updated lists of ioctl commands from Linux 6.9.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1721563200">- Update to strace 6.10
  * Implemented --decode-fds=eventfd option to retrieve eventfd object details
    associated with eventfd file descriptors.
  * Implemented decoding of NETLINK_GENERIC nlctrl protocol.
  * Implemented decoding of F_DUPFD_QUERY fcntl.
  * Implemented decoding of mseal syscall.
  * Updated decoding of statx and prctl syscalls.
  * Updated decoding of BPF_RAW_TRACEPOINT_OPEN bpf command.
  * Updated lists of BPF_*, IORING_*, KEXEC_*, KEY_*, LANDLOCK_*, PR_*, STATX_*,
    TCP_*, TEE_*, V4L2_*, and *_MAGIC constants.
  * Updated lists of ioctl commands from Linux 6.10.
  * Worked around a bug introduced in Linux 6.5 that affected system call
    tampering on riscv64.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1721822400">- Update License tag (boo#1228216)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1726401600">- Update to strace 6.11
  * Implemented decoding of uretprobe syscall.
  * Implemented decoding of WDIOC_GETSUPPORT and WDIOC_SETOPTIONS ioctl
    commands.
  * Enhanced decoding of unknown ioctl commands in non-abbreviated mode
    by printing the contents of the ioctl argument buffer in hexadecimal format.
  * Updated decoding of listmount, statmount, and statx syscalls.
  * Updated lists of ETHTOOL_*, IORING_*, IPPROTO_*, RWF_*, STATX_*, and V4L2_*
    constants.
  * Updated lists of ioctl commands from Linux 6.11.</changelog>
  <changelog author="schwab@suse.de" date="1731931200">- Update to strace 6.12
  * Implemented decoding of EPIOCGPARAMS and EPIOCSPARAMS ioctl commands.
  * Implemented decoding of NS_GET_MNTNS_ID, NS_GET_PID_FROM_PIDNS,
    NS_GET_TGID_FROM_PIDNS, NS_GET_PID_IN_PIDNS, NS_GET_TGID_IN_PIDNS,
    NS_MNT_GET_INFO, NS_MNT_GET_NEXT, and NS_MNT_GET_PREV ioctl commands.
  * Implemented decoding of FRA_DSCP netlink attribute.
  * Implemented decoding of IORING_REGISTER_CLOCK and
    IORING_REGISTER_CLONE_BUFFERS opcodes of io_uring_register syscall.
  * Updated decoding of struct landlock_ruleset_attr.
  * Updated lists of AUDIT_*, ETHTOOL_*, F_*, IORING_*, LSM_*, MAP_*, MSG_*,
    NT_*, SCHED_*, SCM_*, SO_*, and V4L2_* constants.
  * Updated lists of ioctl commands from Linux 6.12.
  * Fix the syscall name printed by strace when PTRACE_GET_SYSCALL_INFO
    is in use and a syscall is restarted by a just attached tracee using
    restart_syscall mechanism.</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- Update to strace 6.13
  * Implemented decoding of getxattrat, setxattrat, listxattrat,
    and removexattrat syscalls.
  * Updated decoding of struct io_uring_clone_buffers, struct io_uring_napi,
    and struct perf_event_attr.
  * Updated decoding of crypto_user_alg netlink attributes of NETLINK_CRYPTO.
  * Implemented decoding of IFLA_MCTP_PHYS_BINDING netlink attribute.
  * Updated lists of AT_*, BPF_*, FAN_*, IORING_*, MADV_*, NT_*, and SCM_*
    constants.
  * Updated lists of ioctl commands from Linux 6.13.</changelog>
</package>
<package pkgid="81ba8105437249a40b7ef7c0d4e0e8b8d99502cdd2bedd7a859c940d59e61e7715e802489bf604ef593f1f65d7c92d409d18c5c83f8b0152ce5914060bfb28a8" name="sudo-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.9.15p5" rel="slfo.1.1_2.1"/>
  <changelog author="info@paolostivanin.com" date="1689163200">- Update to 1.9.14p1:
  * Fixed an invalid free bug in sudo_logsrvd that was introduced
    in version 1.9.14 which could cause sudo_logsrvd to crash.
  * The sudoers plugin no longer tries to send the terminal name
    to the log server when no terminal is present.  This bug was
    introduced in version 1.9.14.
  * Fixed a bug where if the "intercept" or "log_subcmds" sudoers
    option was enabled and a sub-command was run where the first
    entry of the argument vector didn't match the command being run.
    This resulted in commands like "sudo su -" being killed due to
    the mismatch.  Bug #1050.
  * The sudoers plugin now canonicalizes command path names before
    matching (where possible).  This fixes a bug where sudo could
    execute the wrong path if there are multiple symbolic links with
    the same target and the same base name in sudoers that a user is
    allowed to run.  GitHub issue #228.
  * Improved command matching when a chroot is specified in sudoers.
    The sudoers plugin will now change the root directory id needed
    before performing command matching.  Previously, the root directory
    was simply prepended to the path that was being processed.
  * When NETGROUP_BASE is set in the ldap.conf file, sudo will now
    perform its own netgroup lookups of the host name instead of
    using the system innetgr(3) function.  This guarantees that user
    and host netgroup lookups are performed using  the same LDAP
    server (or servers).
  * Fixed a bug introduced in sudo 1.9.13 that resulted in a missing
    " ; " separator between environment variables and the command
    in log entries.
  * The visudo utility now displays a warning when it ignores a file
    in an include dir such as /etc/sudoers.d.
  * When running a command in a pseudo-terminal, sudo will initialize
    the terminal settings even if it is the background process.
    Previously, sudo only initialized the pseudo-terminal when running
    in the foreground.  This fixes an issue where a program that
    checks the window size would read the wrong value when sudo was
    running in the background.
  * Fixed a bug where only the first two digits of the TSID field
    being was logged.  Bug #1046.
  * The "log_pty" sudoers option is now enabled by default.  To
    restore the historic behavior where a command is run in the
    user's terminal, add "Defaults !use_pty" to the sudoers file.
    GitHub issue #258.
  * Sudo's "-b" option now works when the command is run in a
    pseudo-terminal.
  * When disabling core dumps, sudo now only modifies the soft limit
    and leaves the hard limit as-is.  This avoids problems on Linux
    when sudo does not have CAP_SYS_RESOURCE, which may be the case
    when run inside a container.  GitHub issue #42.
  * Sudo configuration file paths have been converted to colon-separated
    lists of paths.  This makes it possible to have configuration
    files on a read-only file system while still allowing for local
    modifications in a different (writable) directory.  The new
  - -enable-adminconf configure option can be used to specify a
    directory that is searched for configuration files in preference
    to the sysconfdir (which is usually /etc).
  * The "intercept_verify" sudoers option is now only applied when
    the "intercept" option is set in sudoers.  Previously, it was
    also applied when "log_subcmds" was enabled.
  * The NETGROUP_QUERY ldap.conf parameter can now be disabled for
    LDAP servers that do not support querying the nisNetgroup object
    by its nisNetgroupTriple attribute, while still allowing sudo to
    query the LDAP server directly to determine netgroup membership.
  * Fixed a long-standing bug where a sudoers rule without an explicit
    runas list allowed the user to run a command as root and any
    group instead of just one of the groups that root is a member
    of.  For example, a rule such as "myuser ALL = ALL" would permit
    "sudo -u root -g othergroup" even if root did not belong to
    "othergroup".
  * Fixed a bug where a sudoers rule with an explicit runas list
    allowed a user to run sudo commands as themselves.  For example,
    a rule such as "myuser ALL = (root) ALL", "myuser" should only
    allow commands to be run as root (optionally using one of root's
    groups).  However, the rule also allowed the user to run
    "sudo -u myuser -g myuser command".
  * Fixed a bug that prevented the user from specifying a group on
    the command line via "sudo -g" if the rule's Runas_Spec contained
    a Runas_Alias.
  * Sudo now requires a C compiler that conforms to ISO C99 or higher
    to build.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1694520000">- Update to 1.9.14p3:
  * Fixed a crash with Python 3.12 when the sudo Python python is unloaded.
    This only affects make check for the Python plugin.
  * Adapted the sudo Python plugin test output to match Python 3.12.
- Update to 1.9.14p2:
  * Fixed a crash on Linux systems introduced in version 1.9.14 when running a
    command with a NULL argv[0] if log_subcmds or intercept is enabled in
    sudoers.
  * Fixed a problem with "stair-stepped" output when piping or redirecting the
    output of a sudo command that takes user input when running a command in
    a pseudo-terminal.
  * Fixed a bug introduced in sudo 1.9.14 that affects matching sudoers rules
    containing a Runas_Spec with an empty Runas user. These rules should only
    match when sudo’s -g option is used but were matching even without the -g
    option. #290.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1694692800">- Install config files into /usr/etc and read from both location:
  /etc and /usr/etc (bsc#1205118)</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Introduce optional wheel and sudo group policies as separate packages
  (bsc#1203978, jsc#PED-260)</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Package/ship empty /etc/sudoers.d directory for admins to
  discover where to put their won config.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Update to 1.9.15p2:
  * Fixed a bug on BSD systems where sudo would not restore the
    terminal settings on exit if the terminal had parity enabled.
    GitHub issue #326.
- Update to 1.9.15p1:
  * Fixed a bug introduced in sudo 1.9.15 that prevented LDAP-based
    sudoers from being able to read the ldap.conf file.
    GitHub issue #325.
- Update to 1.9.15:
  * Fixed an undefined symbol problem on older versions of macOS
    when "intercept" or "log_subcmds" are enabled in sudoers.
    GitHub issue #276.
  * Fixed "make check" failure related to getpwent(3) wrapping
    on NetBSD.
  * Fixed the warning message for "sudo -l command" when the command
    is not permitted.  There was a missing space between "list" and
    the actual command due to changes in sudo 1.9.14.
  * Fixed a bug where output could go to the wrong terminal if
    "use_pty" is enabled (the default) and the standard input, output
    or error is redirected to a different terminal.  Bug #1056.
  * The visudo utility will no longer create an empty file when the
    specified sudoers file does not exist and the user exits the
    editor without making any changes.  GitHub issue #294.
  * The AIX and Solaris sudo packages on www.sudo.ws now support
    "log_subcmds" and "intercept" with both 32-bit and 64-bit
    binaries.  Previously, they only worked when running binaries
    with the same word size as the sudo binary.  GitHub issue #289.
  * The sudoers source is now logged in the JSON event log.  This
    makes it possible to tell which rule resulted in a match.
  * Running "sudo -ll command" now produces verbose output that
    includes matching rule as well as the path to the sudoers file
    the matching rule came from.  For LDAP sudoers, the name of the
    matching sudoRole is printed instead.
  * The embedded copy of zlib has been updated to version 1.3.
  * The sudoers plugin has been modified to make it more resilient
    to ROWHAMMER attacks on authentication and policy matching.
    This addresses CVE-2023-42465.
  * The sudoers plugin now constructs the user time stamp file path
    name using the user-ID instead of the user name.  This avoids a
    potential problem with user names that contain a path separator
    ('/') being interpreted as part of the path name.  A similar
    issue in sudo-rs has been assigned CVE-2023-42456.
  * A path separator ('/') in a user, group or host name is now
    replaced with an underbar character ('_') when expanding escapes
    in @include and @includedir directives as well as the "iolog_file"
    and "iolog_dir" sudoers Default settings.
  * The "intercept_verify" sudoers option is now only applied when
    the "intercept" option is set in sudoers.  Previously, it was
    also applied when "log_subcmds" was enabled.  Sudo 1.9.14
    contained an incorrect fix for this.  Bug #1058.
  * Changes to terminal settings are now performed atomically, where
    possible.  If the command is being run in a pseudo-terminal and
    the user's terminal is already in raw mode, sudo will not change
    the user's terminal settings.  This prevents concurrent sudo
    processes from restoring the terminal settings to the wrong values.
    GitHub issue #312.
  * Reverted a change from sudo 1.9.4 that resulted in PAM session
    modules being called with the environment of the command to be
    run instead of the environment of the invoking user.
    GitHub issue #318.
  * New Indonesian translation from translationproject.org.
  * The sudo_logsrvd server will now raise its open file descriptor
    limit to the maximum allowed value when it starts up.  Each
    connection can require up to nine open file descriptors so the
    default soft limit may be too low.
  * Better log message when rejecting a command if the "intercept"
    option is enabled and the "intercept_allow_setid" option is
    disabled.  Previously, "command not allowed" would be logged and
    the user had no way of knowing what the actual problem was.
  * Sudo will now log the invoking user's environment as "submitenv"
    in the JSON logs.  The command's environment ("runenv") is no
    longer logged for commands rejected by the sudoers file or an
    approval plugin.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702900800">- Update to 1.9.15p4:
  * Fixed a bug introduced in sudo 1.9.15 that could prevent a user’s
    privileges from being listed by sudo -l if the sudoers entry
    in /etc/nsswitch.conf contains [SUCCESS=return]. This did not affect the
    ability to run commands via sudo. Bug #1063.
- Update to 1.9.15p3:
  * Always disable core dumps when sudo sends itself a fatal signal. Fixes a
    problem where sudo could potentially dump core dump when it re-sends the
    fatal signal to itself. This is only an issue if the command   * received
    a signal that would normally result in a core dump but the command did
    not actually dump core.
  * Fixed a bug matching a command with a relative path name when the sudoers
    rule uses shell globbing rules for the path name. Bug #1062.
  * Permit visudo to be run even if the local host name is not set. GitHub
    issue #332.
  * Fixed an editing error introduced in sudo 1.9.15 that could prevent
    sudoreplay from replaying sessions correctly. GitHub issue #334.
  * Fixed a bug introduced in sudo 1.9.15 where sudo -l &gt; /dev/null could hang
    on Linux systems. GitHub issue #335.
  * Fixed a bug introduced in sudo 1.9.15 where Solaris privileges specified
    in sudoers were not applied to the command being run.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702900801">- For existing products (SLE15-SP* and older) keep using /etc and don't
  switch to /usr/etc. So only SLES16/ALP, Tumbleweed and newer products
  will use both /etc and /usr/etc locations.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1704196800">- Update to 1.9.15p5:
  * Fixed evaluation of the lecture, listpw, verifypw, and fdexec sudoers
    Defaults settings when used without an explicit value. Previously, if
    specified without a value they were evaluated as boolean false, even when
    the negation operator ('!') was not present.
  * Fixed a bug introduced in sudo 1.9.14 that prevented LDAP netgroup queries
    using the NETGROUP_BASE setting from being performed.
  * Sudo will now transparently rename a user's lecture file from the older
    name-based path to the newer user-ID-based path. GitHub issue #342.
  * Fixed a bug introduced in sudo 1.9.15 that could cause a memory allocation
    failure if sysconf(_SC_LOGIN_NAME_MAX) fails. Bug #1066.</changelog>
  <changelog author="sflees@suse.de" date="1751025600">- Fix a possible local privilege escalation via the --host option
  [bsc#1245274, CVE-2025-32462]
  * fix-CVE-2025-32462.patch
- Fix a possible local privilege Escalation via chroot option
  [bsc#1245275, CVE-2025-32463]
  * fix-CVE-2025-32463.patch</changelog>
</package>
<package pkgid="bd705c512bf91dd6aa5ac9dbb99fb7f463df854b72168988b679ced52faf4cceae4cf550af9a85c275d75271a8cef66aae6254a1dcd63fdf07bf3ca7a95e189a" name="sudo-debugsource" arch="aarch64">
  <version epoch="0" ver="1.9.15p5" rel="slfo.1.1_2.1"/>
  <changelog author="info@paolostivanin.com" date="1689163200">- Update to 1.9.14p1:
  * Fixed an invalid free bug in sudo_logsrvd that was introduced
    in version 1.9.14 which could cause sudo_logsrvd to crash.
  * The sudoers plugin no longer tries to send the terminal name
    to the log server when no terminal is present.  This bug was
    introduced in version 1.9.14.
  * Fixed a bug where if the "intercept" or "log_subcmds" sudoers
    option was enabled and a sub-command was run where the first
    entry of the argument vector didn't match the command being run.
    This resulted in commands like "sudo su -" being killed due to
    the mismatch.  Bug #1050.
  * The sudoers plugin now canonicalizes command path names before
    matching (where possible).  This fixes a bug where sudo could
    execute the wrong path if there are multiple symbolic links with
    the same target and the same base name in sudoers that a user is
    allowed to run.  GitHub issue #228.
  * Improved command matching when a chroot is specified in sudoers.
    The sudoers plugin will now change the root directory id needed
    before performing command matching.  Previously, the root directory
    was simply prepended to the path that was being processed.
  * When NETGROUP_BASE is set in the ldap.conf file, sudo will now
    perform its own netgroup lookups of the host name instead of
    using the system innetgr(3) function.  This guarantees that user
    and host netgroup lookups are performed using  the same LDAP
    server (or servers).
  * Fixed a bug introduced in sudo 1.9.13 that resulted in a missing
    " ; " separator between environment variables and the command
    in log entries.
  * The visudo utility now displays a warning when it ignores a file
    in an include dir such as /etc/sudoers.d.
  * When running a command in a pseudo-terminal, sudo will initialize
    the terminal settings even if it is the background process.
    Previously, sudo only initialized the pseudo-terminal when running
    in the foreground.  This fixes an issue where a program that
    checks the window size would read the wrong value when sudo was
    running in the background.
  * Fixed a bug where only the first two digits of the TSID field
    being was logged.  Bug #1046.
  * The "log_pty" sudoers option is now enabled by default.  To
    restore the historic behavior where a command is run in the
    user's terminal, add "Defaults !use_pty" to the sudoers file.
    GitHub issue #258.
  * Sudo's "-b" option now works when the command is run in a
    pseudo-terminal.
  * When disabling core dumps, sudo now only modifies the soft limit
    and leaves the hard limit as-is.  This avoids problems on Linux
    when sudo does not have CAP_SYS_RESOURCE, which may be the case
    when run inside a container.  GitHub issue #42.
  * Sudo configuration file paths have been converted to colon-separated
    lists of paths.  This makes it possible to have configuration
    files on a read-only file system while still allowing for local
    modifications in a different (writable) directory.  The new
  - -enable-adminconf configure option can be used to specify a
    directory that is searched for configuration files in preference
    to the sysconfdir (which is usually /etc).
  * The "intercept_verify" sudoers option is now only applied when
    the "intercept" option is set in sudoers.  Previously, it was
    also applied when "log_subcmds" was enabled.
  * The NETGROUP_QUERY ldap.conf parameter can now be disabled for
    LDAP servers that do not support querying the nisNetgroup object
    by its nisNetgroupTriple attribute, while still allowing sudo to
    query the LDAP server directly to determine netgroup membership.
  * Fixed a long-standing bug where a sudoers rule without an explicit
    runas list allowed the user to run a command as root and any
    group instead of just one of the groups that root is a member
    of.  For example, a rule such as "myuser ALL = ALL" would permit
    "sudo -u root -g othergroup" even if root did not belong to
    "othergroup".
  * Fixed a bug where a sudoers rule with an explicit runas list
    allowed a user to run sudo commands as themselves.  For example,
    a rule such as "myuser ALL = (root) ALL", "myuser" should only
    allow commands to be run as root (optionally using one of root's
    groups).  However, the rule also allowed the user to run
    "sudo -u myuser -g myuser command".
  * Fixed a bug that prevented the user from specifying a group on
    the command line via "sudo -g" if the rule's Runas_Spec contained
    a Runas_Alias.
  * Sudo now requires a C compiler that conforms to ISO C99 or higher
    to build.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1694520000">- Update to 1.9.14p3:
  * Fixed a crash with Python 3.12 when the sudo Python python is unloaded.
    This only affects make check for the Python plugin.
  * Adapted the sudo Python plugin test output to match Python 3.12.
- Update to 1.9.14p2:
  * Fixed a crash on Linux systems introduced in version 1.9.14 when running a
    command with a NULL argv[0] if log_subcmds or intercept is enabled in
    sudoers.
  * Fixed a problem with "stair-stepped" output when piping or redirecting the
    output of a sudo command that takes user input when running a command in
    a pseudo-terminal.
  * Fixed a bug introduced in sudo 1.9.14 that affects matching sudoers rules
    containing a Runas_Spec with an empty Runas user. These rules should only
    match when sudo’s -g option is used but were matching even without the -g
    option. #290.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1694692800">- Install config files into /usr/etc and read from both location:
  /etc and /usr/etc (bsc#1205118)</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Introduce optional wheel and sudo group policies as separate packages
  (bsc#1203978, jsc#PED-260)</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Package/ship empty /etc/sudoers.d directory for admins to
  discover where to put their won config.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Update to 1.9.15p2:
  * Fixed a bug on BSD systems where sudo would not restore the
    terminal settings on exit if the terminal had parity enabled.
    GitHub issue #326.
- Update to 1.9.15p1:
  * Fixed a bug introduced in sudo 1.9.15 that prevented LDAP-based
    sudoers from being able to read the ldap.conf file.
    GitHub issue #325.
- Update to 1.9.15:
  * Fixed an undefined symbol problem on older versions of macOS
    when "intercept" or "log_subcmds" are enabled in sudoers.
    GitHub issue #276.
  * Fixed "make check" failure related to getpwent(3) wrapping
    on NetBSD.
  * Fixed the warning message for "sudo -l command" when the command
    is not permitted.  There was a missing space between "list" and
    the actual command due to changes in sudo 1.9.14.
  * Fixed a bug where output could go to the wrong terminal if
    "use_pty" is enabled (the default) and the standard input, output
    or error is redirected to a different terminal.  Bug #1056.
  * The visudo utility will no longer create an empty file when the
    specified sudoers file does not exist and the user exits the
    editor without making any changes.  GitHub issue #294.
  * The AIX and Solaris sudo packages on www.sudo.ws now support
    "log_subcmds" and "intercept" with both 32-bit and 64-bit
    binaries.  Previously, they only worked when running binaries
    with the same word size as the sudo binary.  GitHub issue #289.
  * The sudoers source is now logged in the JSON event log.  This
    makes it possible to tell which rule resulted in a match.
  * Running "sudo -ll command" now produces verbose output that
    includes matching rule as well as the path to the sudoers file
    the matching rule came from.  For LDAP sudoers, the name of the
    matching sudoRole is printed instead.
  * The embedded copy of zlib has been updated to version 1.3.
  * The sudoers plugin has been modified to make it more resilient
    to ROWHAMMER attacks on authentication and policy matching.
    This addresses CVE-2023-42465.
  * The sudoers plugin now constructs the user time stamp file path
    name using the user-ID instead of the user name.  This avoids a
    potential problem with user names that contain a path separator
    ('/') being interpreted as part of the path name.  A similar
    issue in sudo-rs has been assigned CVE-2023-42456.
  * A path separator ('/') in a user, group or host name is now
    replaced with an underbar character ('_') when expanding escapes
    in @include and @includedir directives as well as the "iolog_file"
    and "iolog_dir" sudoers Default settings.
  * The "intercept_verify" sudoers option is now only applied when
    the "intercept" option is set in sudoers.  Previously, it was
    also applied when "log_subcmds" was enabled.  Sudo 1.9.14
    contained an incorrect fix for this.  Bug #1058.
  * Changes to terminal settings are now performed atomically, where
    possible.  If the command is being run in a pseudo-terminal and
    the user's terminal is already in raw mode, sudo will not change
    the user's terminal settings.  This prevents concurrent sudo
    processes from restoring the terminal settings to the wrong values.
    GitHub issue #312.
  * Reverted a change from sudo 1.9.4 that resulted in PAM session
    modules being called with the environment of the command to be
    run instead of the environment of the invoking user.
    GitHub issue #318.
  * New Indonesian translation from translationproject.org.
  * The sudo_logsrvd server will now raise its open file descriptor
    limit to the maximum allowed value when it starts up.  Each
    connection can require up to nine open file descriptors so the
    default soft limit may be too low.
  * Better log message when rejecting a command if the "intercept"
    option is enabled and the "intercept_allow_setid" option is
    disabled.  Previously, "command not allowed" would be logged and
    the user had no way of knowing what the actual problem was.
  * Sudo will now log the invoking user's environment as "submitenv"
    in the JSON logs.  The command's environment ("runenv") is no
    longer logged for commands rejected by the sudoers file or an
    approval plugin.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702900800">- Update to 1.9.15p4:
  * Fixed a bug introduced in sudo 1.9.15 that could prevent a user’s
    privileges from being listed by sudo -l if the sudoers entry
    in /etc/nsswitch.conf contains [SUCCESS=return]. This did not affect the
    ability to run commands via sudo. Bug #1063.
- Update to 1.9.15p3:
  * Always disable core dumps when sudo sends itself a fatal signal. Fixes a
    problem where sudo could potentially dump core dump when it re-sends the
    fatal signal to itself. This is only an issue if the command   * received
    a signal that would normally result in a core dump but the command did
    not actually dump core.
  * Fixed a bug matching a command with a relative path name when the sudoers
    rule uses shell globbing rules for the path name. Bug #1062.
  * Permit visudo to be run even if the local host name is not set. GitHub
    issue #332.
  * Fixed an editing error introduced in sudo 1.9.15 that could prevent
    sudoreplay from replaying sessions correctly. GitHub issue #334.
  * Fixed a bug introduced in sudo 1.9.15 where sudo -l &gt; /dev/null could hang
    on Linux systems. GitHub issue #335.
  * Fixed a bug introduced in sudo 1.9.15 where Solaris privileges specified
    in sudoers were not applied to the command being run.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702900801">- For existing products (SLE15-SP* and older) keep using /etc and don't
  switch to /usr/etc. So only SLES16/ALP, Tumbleweed and newer products
  will use both /etc and /usr/etc locations.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1704196800">- Update to 1.9.15p5:
  * Fixed evaluation of the lecture, listpw, verifypw, and fdexec sudoers
    Defaults settings when used without an explicit value. Previously, if
    specified without a value they were evaluated as boolean false, even when
    the negation operator ('!') was not present.
  * Fixed a bug introduced in sudo 1.9.14 that prevented LDAP netgroup queries
    using the NETGROUP_BASE setting from being performed.
  * Sudo will now transparently rename a user's lecture file from the older
    name-based path to the newer user-ID-based path. GitHub issue #342.
  * Fixed a bug introduced in sudo 1.9.15 that could cause a memory allocation
    failure if sysconf(_SC_LOGIN_NAME_MAX) fails. Bug #1066.</changelog>
  <changelog author="sflees@suse.de" date="1751025600">- Fix a possible local privilege escalation via the --host option
  [bsc#1245274, CVE-2025-32462]
  * fix-CVE-2025-32462.patch
- Fix a possible local privilege Escalation via chroot option
  [bsc#1245275, CVE-2025-32463]
  * fix-CVE-2025-32463.patch</changelog>
</package>
<package pkgid="c1be797aa2e7b357ee44ce5185eaa4a5e16ae7238e332646b2257f0657a7ae4b664127181bdecb6e7983dc2a32f373d2ba563d1bf612276d997ed65ff5d65ea0" name="supermin-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.3.3" rel="slfo.1.1_1.1"/>
  <changelog author="jengelh@inai.de" date="1631188800">- Remove arch exclusion, almost all of them build.</changelog>
  <changelog author="ohering@suse.de" date="1631188801">- arm32 may have a kernel named /boot/zImage</changelog>
  <changelog author="ohering@suse.de" date="1631448000">- Restore ExclusiveArch, continue to follow libguestfs
  The 'almost' below is the reason.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1640088000">- Add initrd_support_ztd-compressed_modules.patch:
  backport of 4306a131c6cd to add support of zstd compressed kernel
  modules.</changelog>
  <changelog author="carnold@suse.com" date="1646654400">- bsc#1187532 - virt-make-fs hangs forever
  detect-aarch64-kernel.patch</changelog>
  <changelog author="carnold@suse.com" date="1650888000">- Update to 5.2.2 bug fix release
  * Open Unix.LargeFile to avoid "lstat: Value too large for
    defined data type"
  * pacman: Skip over detached signatures when unpacking
  * ext2, rpm: Don't redefine Val_none or Some_val.
  * Don't attempt to build man page if perldoc is not available
  * Ignore zfcpdump kernel on s390x
  * Ignore unbootable kernels in /lib/modules
  * Ignore debug kernels
  * maintainer: Add our usual maintainer rules
- Drop
  Avoid-lstat-Value-too-large-for-defined-data-type.patch</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Include sysconfig-netconfig only until SLE15, newer versions
  don't use it anymore [jsc#PED-1734]</changelog>
  <changelog author="schwab@suse.de" date="1672142400">- Enable build on riscv64</changelog>
  <changelog author="carnold@suse.com" date="1704369600">- Update to version 5.3.3 (jsc#PED-6305)
  * initrd: Support ztd-compressed modules
  * pacman: Recognise Artix, an Arch derivative
  * Add a separate variable to store link flags, and use that to
    supply
  * Add appropriate globs for arm based kernels. The file names end
    in -arm64 but the architecture is named aarch64.
  * Add support for OCaml 5.0
  * Add LFS support for fts functions
  * Numerous bug fixes
- Upstream bug fixes and features
  001-Improved-debugging-of-the-supermin-if-newer-calculation.patch
  002-Fix-if-newer-copy-kernel.patch
  003-Fix-kernel-filtering-for-aarch64-architecture.patch
  004-Use-output-complete-exe-instead-of-custom.patch
  005-Only-supply-output-complete-exe-to-final-link.patch
  006-Rename-function-file-kernel.patch
  007-Uncompress-kernel-on-RISC-V.patch
  008-Fix-link-to-renamed-kernel-documentation.patch
  009-New-mailing-list-email-address.patch
- Dropped initrd_support_ztd-compressed_modules.patch</changelog>
</package>
<package pkgid="9fb6bbc42401d5d9d53626da159d9c45996ee710e3af1bdb2f2cec3af96a517fa01915a85ce2782bb64710ee9c632d05ab053a23f27b88d0a90255a8487fd4bf" name="supermin-debugsource" arch="aarch64">
  <version epoch="0" ver="5.3.3" rel="slfo.1.1_1.1"/>
  <changelog author="jengelh@inai.de" date="1631188800">- Remove arch exclusion, almost all of them build.</changelog>
  <changelog author="ohering@suse.de" date="1631188801">- arm32 may have a kernel named /boot/zImage</changelog>
  <changelog author="ohering@suse.de" date="1631448000">- Restore ExclusiveArch, continue to follow libguestfs
  The 'almost' below is the reason.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1640088000">- Add initrd_support_ztd-compressed_modules.patch:
  backport of 4306a131c6cd to add support of zstd compressed kernel
  modules.</changelog>
  <changelog author="carnold@suse.com" date="1646654400">- bsc#1187532 - virt-make-fs hangs forever
  detect-aarch64-kernel.patch</changelog>
  <changelog author="carnold@suse.com" date="1650888000">- Update to 5.2.2 bug fix release
  * Open Unix.LargeFile to avoid "lstat: Value too large for
    defined data type"
  * pacman: Skip over detached signatures when unpacking
  * ext2, rpm: Don't redefine Val_none or Some_val.
  * Don't attempt to build man page if perldoc is not available
  * Ignore zfcpdump kernel on s390x
  * Ignore unbootable kernels in /lib/modules
  * Ignore debug kernels
  * maintainer: Add our usual maintainer rules
- Drop
  Avoid-lstat-Value-too-large-for-defined-data-type.patch</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Include sysconfig-netconfig only until SLE15, newer versions
  don't use it anymore [jsc#PED-1734]</changelog>
  <changelog author="schwab@suse.de" date="1672142400">- Enable build on riscv64</changelog>
  <changelog author="carnold@suse.com" date="1704369600">- Update to version 5.3.3 (jsc#PED-6305)
  * initrd: Support ztd-compressed modules
  * pacman: Recognise Artix, an Arch derivative
  * Add a separate variable to store link flags, and use that to
    supply
  * Add appropriate globs for arm based kernels. The file names end
    in -arm64 but the architecture is named aarch64.
  * Add support for OCaml 5.0
  * Add LFS support for fts functions
  * Numerous bug fixes
- Upstream bug fixes and features
  001-Improved-debugging-of-the-supermin-if-newer-calculation.patch
  002-Fix-if-newer-copy-kernel.patch
  003-Fix-kernel-filtering-for-aarch64-architecture.patch
  004-Use-output-complete-exe-instead-of-custom.patch
  005-Only-supply-output-complete-exe-to-final-link.patch
  006-Rename-function-file-kernel.patch
  007-Uncompress-kernel-on-RISC-V.patch
  008-Fix-link-to-renamed-kernel-documentation.patch
  009-New-mailing-list-email-address.patch
- Dropped initrd_support_ztd-compressed_modules.patch</changelog>
</package>
<package pkgid="4c52b90f3fd87d1ef047180c4c9c5ffc638285f79ef892ec5221a3bb615bd819ccc1c9d4d2ddccb266d27beddb6ccb47a9bd6c8afafbc46b0837160a313a4992" name="swtpm-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.9.0" rel="slfo.1.1_2.5"/>
  <changelog author="meissner@suse.com" date="1651233600">- Updated to version 0.7.3:
  - swtpm:
  - Use uint64_t in tlv_data_append() to avoid integer overflows
  - Use uint64_t to avoid integer wrap-around when adding a uint32_t
- removed allow-FORTIFY_SOURCE=3.patch (upstreamed)</changelog>
  <changelog author="aplanas@suse.com" date="1678104000">- Update to version 0.8.0:
  * swtpm:
    + Implement release-lock-outgoing parameter for --migration option
    + Introduce --migration option and 'incoming' parameter
    + Implement terminate parameter for ctrl channel loss
    + Add a chroot option
    + Introduce disable-auto-shutdown flag for --flags option
    + If necessary send TPM2_Shutdown() before TPMLIB_Terminate()
    + Add some more recent syscalls to seccomp profile
    + Disable OpenSSL FIPS mode to avoid libtpms failures
    + Avoid locking directory multiple times
    + Remove support for pre-v0.1 state files without header
    + Use uint64_t in tlv_data_append() to avoid integer overflows
    + Use uint64_t to avoid integer wrap-around when adding a uint32_t
    + Do not chdir(/) when using --daemon
    + Check header size indicator against expected size (CVE-2022-23645 bsc#1196240)
    + Fixes for gcc 12.2.1 -fanalyzer
  * build-sys:
    + Fix configure script to support _FORTIFY_SOURCE=3
    + Define __USE_LINUX_IOCTL_DEFS in header file (Cygwin)
  * swtpm-localca:
    + Re-implement variable resolution for swtpm-localca.conf
    + Test for available issuercert before creating CA
  * swtpm_setup:
    + Configure swtpm to log to stdout/err if needed (glib &gt;=2.74)
  * tests:
    + Use ${WORKDIR} in config files to test env. var replacement
    + Patch IBM TSS2 test suite for OpenSSL 3.x
  * build-sys:
    + Add probing for -fstack-protector</changelog>
  <changelog author="aplanas@suse.com" date="1678104001">- Drop trousers requirement</changelog>
  <changelog author="meissner@suse.com" date="1679400000">- swtpm-fix-build.patch: disable -Wstack-protector, it fails on s390x
  bsc#1209117</changelog>
  <changelog author="meissner@suse.com" date="1683028800">- remove python3 dependency, no longer needed after rewrite (bsc#1211010)</changelog>
  <changelog author="manfred.h@gmx.net" date="1686916800">- Make selinux optional to allow building this package for Leap, too.</changelog>
  <changelog author="meissner@suse.com" date="1694865600">- Update to version 0.8.1:
  - swtpm:
  - Restore logging to stderr on log open failure
  - swtpm_setup:
  - Exit with '0' upon --version rather than '1'.
  - Initialized @argv in get_swtpm_capabilities()
  - swtpm_localca:
  - Add missing NULL option to end of array
  - SELinux:
  - Add rules for user_tpm_t:sockfile to allow unlink
  - Add rules for sock_file on user_tmp_t</changelog>
  <changelog author="william.brown@suse.com" date="1697716800">- Add missing requires for certtool</changelog>
  <changelog author="rrahl0@opensuse.org" date="1722513600">- update to 0.9.0:
  - fixes: boo#1226398
  - swtpm:
  - Use umask() to create/truncated state file rather than fchmod()
  - Use fchmod to set mode bits provided by user
  - Replace mkstemp with g_mkstemp_full (Coverity)
  - fix typo in help message
  - cuse: Fix Coverity complaints regarding locks
  - Fix double free in error path
  - Close fd after main loop
  - Restore logging to stderr on log open failure
  - swtpm_setup:
  - Fail --pcr-banks without --tpm2
  - Fail --decryption or --allow-signing without --tpm2
  - Initialized argv in get_swtpm_capabilities()
  - Flush spk after persisting to create room for another key
  - Refactor duplicate code into swtpm_tpm2_write_cert_nvram
  - Move persisting of certificate into tpm2_persist_certificate
  - Pass key_type to function creating filename for key
  - Add scheme parameter before curveid to createprimary_ecc
  - Rename is_ek to preserve for future extension
  - Mask-out EK and plaform certificate flags and set cert_flags
  - Move common code into new function read_certificate_file()
  - Exit with '0' upon --version rather than '1'
  - Close file descriptors passed to swtpm process on parent side
  - Make stdout unbuffered
  - Use medium duration on TSC_PhysicalPresence to avoid timeouts
  - Add poll() after write() and before read() to detect errors
  - swtpm_localca:
  - Add support for up to 20 bytes serial numbers
  - Introduce --key as more generic alias for --ek
  - Add missing NULL option to end of array
  - Make stdout unbuffered
  - swtpm_cert:
  - Add support for serial numbers up to 20 bytes long
  - swtpm_ioctl:
  - Separate return code from flags
  - Repeatedly call PTM_GET_INFO for long responses
  - selinux:
  - Re-add rule for svirt_tcg_t and user_tmp_t:sock_file (virt-install)
  - New SELinux policy that requires Fedora 40 or later
  - tests:
  - Fixed occurrences of stray '' before '-'
  - Rearrange order of test cases to run some also as 'root'
  - Add tests for command line options and combinations of options
  - Add softhsm_setup to shellcheck'ed files and fix issues
  - Add missing 'exit 1' on unexpected file size on --reconfigure
  - Add test cases for swtpm_cert with max serial number
  - Fix spelling mistakes
  - reformat regexs for easier readability and extension
  - ibmtss2: Add patch to disable x509 test with older libtpms
  - Upgrade to ibmtss2 v2.0.1
  - Fixed several issues detected by shellcheck
  - build-sys:
  - Add support for --disable-tests to disable tests
  - Display GMP_LIBS and GMP_CFLAGS
  - Only display warning if pkg-config for gmp fails
  - Add gmp library and devel package as dependency
  - use PKG_CHECK_MODULES to check libtpms version</changelog>
  <changelog author="cathy.hu@suse.com" date="1726747200">- Fix swtpm custom module (bsc#1229131)
  - Add patch: 1229131-fix-swtpm-selinux-policy-mismatch.patch
  - this can be removed once swtpm upstream sorts out their custom selinux module.
    see: https://github.com/stefanberger/swtpm/issues/885
    there were a couple changes in the selinux-policy libvirt handling
    which causes the logfile in /var/log/swtpm/libvirt/qemu/*.log to be labeled
    virt_log_t instead of var_log_t. this patch allows swtpm_t to open the virt_log_t</changelog>
</package>
<package pkgid="c698af03587162c90b9a5708c96aee9a99a313ccc96a9d396790ed734c2e6247ad0a79f4eaf8ba27a5f063bccb3bf2d11d05da2398e3a8d42a9cf9cfe007dc05" name="swtpm-debugsource" arch="aarch64">
  <version epoch="0" ver="0.9.0" rel="slfo.1.1_2.5"/>
  <changelog author="meissner@suse.com" date="1651233600">- Updated to version 0.7.3:
  - swtpm:
  - Use uint64_t in tlv_data_append() to avoid integer overflows
  - Use uint64_t to avoid integer wrap-around when adding a uint32_t
- removed allow-FORTIFY_SOURCE=3.patch (upstreamed)</changelog>
  <changelog author="aplanas@suse.com" date="1678104000">- Update to version 0.8.0:
  * swtpm:
    + Implement release-lock-outgoing parameter for --migration option
    + Introduce --migration option and 'incoming' parameter
    + Implement terminate parameter for ctrl channel loss
    + Add a chroot option
    + Introduce disable-auto-shutdown flag for --flags option
    + If necessary send TPM2_Shutdown() before TPMLIB_Terminate()
    + Add some more recent syscalls to seccomp profile
    + Disable OpenSSL FIPS mode to avoid libtpms failures
    + Avoid locking directory multiple times
    + Remove support for pre-v0.1 state files without header
    + Use uint64_t in tlv_data_append() to avoid integer overflows
    + Use uint64_t to avoid integer wrap-around when adding a uint32_t
    + Do not chdir(/) when using --daemon
    + Check header size indicator against expected size (CVE-2022-23645 bsc#1196240)
    + Fixes for gcc 12.2.1 -fanalyzer
  * build-sys:
    + Fix configure script to support _FORTIFY_SOURCE=3
    + Define __USE_LINUX_IOCTL_DEFS in header file (Cygwin)
  * swtpm-localca:
    + Re-implement variable resolution for swtpm-localca.conf
    + Test for available issuercert before creating CA
  * swtpm_setup:
    + Configure swtpm to log to stdout/err if needed (glib &gt;=2.74)
  * tests:
    + Use ${WORKDIR} in config files to test env. var replacement
    + Patch IBM TSS2 test suite for OpenSSL 3.x
  * build-sys:
    + Add probing for -fstack-protector</changelog>
  <changelog author="aplanas@suse.com" date="1678104001">- Drop trousers requirement</changelog>
  <changelog author="meissner@suse.com" date="1679400000">- swtpm-fix-build.patch: disable -Wstack-protector, it fails on s390x
  bsc#1209117</changelog>
  <changelog author="meissner@suse.com" date="1683028800">- remove python3 dependency, no longer needed after rewrite (bsc#1211010)</changelog>
  <changelog author="manfred.h@gmx.net" date="1686916800">- Make selinux optional to allow building this package for Leap, too.</changelog>
  <changelog author="meissner@suse.com" date="1694865600">- Update to version 0.8.1:
  - swtpm:
  - Restore logging to stderr on log open failure
  - swtpm_setup:
  - Exit with '0' upon --version rather than '1'.
  - Initialized @argv in get_swtpm_capabilities()
  - swtpm_localca:
  - Add missing NULL option to end of array
  - SELinux:
  - Add rules for user_tpm_t:sockfile to allow unlink
  - Add rules for sock_file on user_tmp_t</changelog>
  <changelog author="william.brown@suse.com" date="1697716800">- Add missing requires for certtool</changelog>
  <changelog author="rrahl0@opensuse.org" date="1722513600">- update to 0.9.0:
  - fixes: boo#1226398
  - swtpm:
  - Use umask() to create/truncated state file rather than fchmod()
  - Use fchmod to set mode bits provided by user
  - Replace mkstemp with g_mkstemp_full (Coverity)
  - fix typo in help message
  - cuse: Fix Coverity complaints regarding locks
  - Fix double free in error path
  - Close fd after main loop
  - Restore logging to stderr on log open failure
  - swtpm_setup:
  - Fail --pcr-banks without --tpm2
  - Fail --decryption or --allow-signing without --tpm2
  - Initialized argv in get_swtpm_capabilities()
  - Flush spk after persisting to create room for another key
  - Refactor duplicate code into swtpm_tpm2_write_cert_nvram
  - Move persisting of certificate into tpm2_persist_certificate
  - Pass key_type to function creating filename for key
  - Add scheme parameter before curveid to createprimary_ecc
  - Rename is_ek to preserve for future extension
  - Mask-out EK and plaform certificate flags and set cert_flags
  - Move common code into new function read_certificate_file()
  - Exit with '0' upon --version rather than '1'
  - Close file descriptors passed to swtpm process on parent side
  - Make stdout unbuffered
  - Use medium duration on TSC_PhysicalPresence to avoid timeouts
  - Add poll() after write() and before read() to detect errors
  - swtpm_localca:
  - Add support for up to 20 bytes serial numbers
  - Introduce --key as more generic alias for --ek
  - Add missing NULL option to end of array
  - Make stdout unbuffered
  - swtpm_cert:
  - Add support for serial numbers up to 20 bytes long
  - swtpm_ioctl:
  - Separate return code from flags
  - Repeatedly call PTM_GET_INFO for long responses
  - selinux:
  - Re-add rule for svirt_tcg_t and user_tmp_t:sock_file (virt-install)
  - New SELinux policy that requires Fedora 40 or later
  - tests:
  - Fixed occurrences of stray '' before '-'
  - Rearrange order of test cases to run some also as 'root'
  - Add tests for command line options and combinations of options
  - Add softhsm_setup to shellcheck'ed files and fix issues
  - Add missing 'exit 1' on unexpected file size on --reconfigure
  - Add test cases for swtpm_cert with max serial number
  - Fix spelling mistakes
  - reformat regexs for easier readability and extension
  - ibmtss2: Add patch to disable x509 test with older libtpms
  - Upgrade to ibmtss2 v2.0.1
  - Fixed several issues detected by shellcheck
  - build-sys:
  - Add support for --disable-tests to disable tests
  - Display GMP_LIBS and GMP_CFLAGS
  - Only display warning if pkg-config for gmp fails
  - Add gmp library and devel package as dependency
  - use PKG_CHECK_MODULES to check libtpms version</changelog>
  <changelog author="cathy.hu@suse.com" date="1726747200">- Fix swtpm custom module (bsc#1229131)
  - Add patch: 1229131-fix-swtpm-selinux-policy-mismatch.patch
  - this can be removed once swtpm upstream sorts out their custom selinux module.
    see: https://github.com/stefanberger/swtpm/issues/885
    there were a couple changes in the selinux-policy libvirt handling
    which causes the logfile in /var/log/swtpm/libvirt/qemu/*.log to be labeled
    virt_log_t instead of var_log_t. this patch allows swtpm_t to open the virt_log_t</changelog>
</package>
<package pkgid="2d180eb9c7ff04ecf2a20fa4e57348168b0c92c4e0f995c78cbd83b3653ad0061fbeddec4e26924a959a39040c9263ebfd08913f0e0a02d6bbca4d54893c4004" name="sysstat-debuginfo" arch="aarch64">
  <version epoch="0" ver="12.6.2" rel="slfo.1.1_2.1"/>
  <changelog author="jsegitz@suse.com" date="1637755200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_sysstat.service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 12.4.4:
  * iostat: Always display persistent names with option -j.
  * iostat: Fix how device mapper names are taken into account when
    entered on the command line.
  * mpstat: Don't display offline CPU.
  * mpstat: Fix values displayed when an offline CPU goes back online.
  * mpstat: Fix untrusted loop bound.
  * mpstat: Update non regression tests.
  * Use `grep -E` instead of deprecated `egrep`.
  * Spelling and grammar fixes.
  * Update man pages with correct spelling of "JavaScript".</changelog>
  <changelog author="david.anes@suse.com" date="1647000000">- fix changelog typos.
- update to 12.4.5:
  * sar/sadf: Make sure that datafiles with unknown activities can
    be read by sar and sadf.
  * sar/sadf: Don't reallocate buffers for activities not present
    in file.
  * sar: Make sure that all buffers are copied in copy_structures()
    function.</changelog>
  <changelog author="david.anes@suse.com" date="1653912000">- Rebased patches:
  * sysstat-8.1.6-sa1sa2lock.diff
- Update to 12.6.0:
  * sar: Fix maximum value for A_IRQ activity.
  * sar/sadf: A_NET_SOFT: Add new metric softnet network backlog.
  * sadc: A_NET_SOFT: Use CPU id from /proc/net/softnet_stat.
  * Update DTD and XSD documents (softnet backlog).
  * sar/sadf: Convert 64-bit time value to time_t as needed.
  * sadf: Add basic colorization to sadf's output.
  * sadf: Add sanity checks on values read from file.
  * sadf: PCP: Fix multiple metrics name problems.
  * sa_common.c: Remove unneeded variable assignment.
  * Take into account LDFLAGS passer to configure script.
  * Various janitorial fixes and updated.
  * Update FAQ.
  * Update sar manual page.
  * Update NLS translations.
  * Update non regression tests..</changelog>
  <changelog author="david.anes@suse.com" date="1663243200">- Add support for PCP (Performance Co-Pilot). [bsc#1203065]</changelog>
  <changelog author="david.anes@suse.com" date="1668168000">- Update to version 12.6.1:
  * Fix possible overflow in sa_common.c
    (CVE-2022-39377, GHSL-2022-074, boo#1205224)
  * sa_conv.c: Make size of statistics structures from older sysstat
    versions immutable.
  * Declare sadc dependency on libsyscom.a.
  * Fix gcc v11.2 warnings.
  * Various cosmetic fixes.
    sar: Remove `-I int_list` from man-page and help.
  * Consolidate systemctl commands in README file.
  * Remove whitespace characters at the end of lines.</changelog>
  <changelog author="david.anes@suse.com" date="1681473600">- Update to version 12.6.2:
  * sadf: PCP: Fix pmiID used for two USB metrics.
  * sadc: Add another overflow check.</changelog>
  <changelog author="david.anes@suse.com" date="1684843200">- Security fix: (CVE-2023-33204, bsc#1211507)
  * Fix an overflow which is still possible for some values.
  * Added patch sysstat-CVE-2023-33204.patch</changelog>
  <changelog author="fbui@suse.com" date="1689681600">- Drop the build dependency on systemd. This was not really necessary and it
  decreases the number of build deps from 207 to 189.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Updated sysstat-8.1.6-sa1sa2lock.diff to use flock to create the
  lockfile. Using lockfile would require additional SELinux permissions.
  (bsc#1228246)</changelog>
</package>
<package pkgid="8caadd5fd89e492731731600744ba509c3ed18edbebe2ecce7450d43e85dc8f9744e735afac7b87facccc47ac35ea2bcd2c40f49cd8b285ad539ca2f0171e9d7" name="sysstat-debugsource" arch="aarch64">
  <version epoch="0" ver="12.6.2" rel="slfo.1.1_2.1"/>
  <changelog author="jsegitz@suse.com" date="1637755200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_sysstat.service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 12.4.4:
  * iostat: Always display persistent names with option -j.
  * iostat: Fix how device mapper names are taken into account when
    entered on the command line.
  * mpstat: Don't display offline CPU.
  * mpstat: Fix values displayed when an offline CPU goes back online.
  * mpstat: Fix untrusted loop bound.
  * mpstat: Update non regression tests.
  * Use `grep -E` instead of deprecated `egrep`.
  * Spelling and grammar fixes.
  * Update man pages with correct spelling of "JavaScript".</changelog>
  <changelog author="david.anes@suse.com" date="1647000000">- fix changelog typos.
- update to 12.4.5:
  * sar/sadf: Make sure that datafiles with unknown activities can
    be read by sar and sadf.
  * sar/sadf: Don't reallocate buffers for activities not present
    in file.
  * sar: Make sure that all buffers are copied in copy_structures()
    function.</changelog>
  <changelog author="david.anes@suse.com" date="1653912000">- Rebased patches:
  * sysstat-8.1.6-sa1sa2lock.diff
- Update to 12.6.0:
  * sar: Fix maximum value for A_IRQ activity.
  * sar/sadf: A_NET_SOFT: Add new metric softnet network backlog.
  * sadc: A_NET_SOFT: Use CPU id from /proc/net/softnet_stat.
  * Update DTD and XSD documents (softnet backlog).
  * sar/sadf: Convert 64-bit time value to time_t as needed.
  * sadf: Add basic colorization to sadf's output.
  * sadf: Add sanity checks on values read from file.
  * sadf: PCP: Fix multiple metrics name problems.
  * sa_common.c: Remove unneeded variable assignment.
  * Take into account LDFLAGS passer to configure script.
  * Various janitorial fixes and updated.
  * Update FAQ.
  * Update sar manual page.
  * Update NLS translations.
  * Update non regression tests..</changelog>
  <changelog author="david.anes@suse.com" date="1663243200">- Add support for PCP (Performance Co-Pilot). [bsc#1203065]</changelog>
  <changelog author="david.anes@suse.com" date="1668168000">- Update to version 12.6.1:
  * Fix possible overflow in sa_common.c
    (CVE-2022-39377, GHSL-2022-074, boo#1205224)
  * sa_conv.c: Make size of statistics structures from older sysstat
    versions immutable.
  * Declare sadc dependency on libsyscom.a.
  * Fix gcc v11.2 warnings.
  * Various cosmetic fixes.
    sar: Remove `-I int_list` from man-page and help.
  * Consolidate systemctl commands in README file.
  * Remove whitespace characters at the end of lines.</changelog>
  <changelog author="david.anes@suse.com" date="1681473600">- Update to version 12.6.2:
  * sadf: PCP: Fix pmiID used for two USB metrics.
  * sadc: Add another overflow check.</changelog>
  <changelog author="david.anes@suse.com" date="1684843200">- Security fix: (CVE-2023-33204, bsc#1211507)
  * Fix an overflow which is still possible for some values.
  * Added patch sysstat-CVE-2023-33204.patch</changelog>
  <changelog author="fbui@suse.com" date="1689681600">- Drop the build dependency on systemd. This was not really necessary and it
  decreases the number of build deps from 207 to 189.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Updated sysstat-8.1.6-sa1sa2lock.diff to use flock to create the
  lockfile. Using lockfile would require additional SELinux permissions.
  (bsc#1228246)</changelog>
</package>
<package pkgid="eba0e1ef3ae880678a9f202a898a65b9dd823c694a0df29e61114cf91ce824c426031cf8cfb9b2825ee084883e7bedf8eb49d0a30df8af2092c605365de98602" name="systemd-container-debuginfo" arch="aarch64">
  <version epoch="0" ver="254.27" rel="slfo.1.1_4.1"/>
  <changelog author="fbui@suse.com" date="1753963200">- Remove the script used to help migrating the language and locale settings
  located in /etc/sysconfig/language on old systems to the systemd default
  locations (bsc#1247074)
  The script was introduced more than 7 years ago and all systems running TW
  should have been migrated since then. Moreover the installer supports the
  systemd default locations since approximately SLE15.</changelog>
  <changelog author="fbui@suse.com" date="1758110400">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196800">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- systemd-update-helper: backport commit 2d0af8bc354f4a1429ce
  Since user@.service has `Type=notify-reload` (making the reloading process
  synchronous) and reloading implies reexecuting with `ReloadSignal=RTMIN+25`,
  reexecuting user managers synchronously can be achieved with `systemctl reload
  user@*.service" now.</changelog>
  <changelog author="fbui@suse.com" date="1765800001">- Sync systemd-update-helper with the version shipped in Base:System
  This includes the following changes:
  - systemd-update-helper: do not stop or disable services when they are migrated
    to other packages. This can occur during package renaming or splitting.
  - systemd-update-helper: Fix invalid use of "break" in case statement
  - systemd-update-helper: fix regression introduced when support for package
    renaming/splitting was added (bsc#1245551)</changelog>
  <changelog author="fbui@suse.com" date="1765800002">- Import commit 9ecd16228492f44212e2771bec11ec78245b4094
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Import commit 8bbac1d508acb8aa4e7262f47c7f4076b8350f72
  8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305601">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit aef6e11921f8c46a2b7ee8cfab024c9c641d74d8
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit a943e3ce2f655b8509038e31f03f5ded18f24683
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="a7604f303f7c4c66a85a3566cd080dbe5e9c322f8175e102a265d36306034cb78f152aa33bc8c30e9f4740f9fd4dba8aa487f802c0180b569f6cbb717e820749" name="systemd-coredump-debuginfo" arch="aarch64">
  <version epoch="0" ver="254.27" rel="slfo.1.1_4.1"/>
  <changelog author="fbui@suse.com" date="1753963200">- Remove the script used to help migrating the language and locale settings
  located in /etc/sysconfig/language on old systems to the systemd default
  locations (bsc#1247074)
  The script was introduced more than 7 years ago and all systems running TW
  should have been migrated since then. Moreover the installer supports the
  systemd default locations since approximately SLE15.</changelog>
  <changelog author="fbui@suse.com" date="1758110400">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196800">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- systemd-update-helper: backport commit 2d0af8bc354f4a1429ce
  Since user@.service has `Type=notify-reload` (making the reloading process
  synchronous) and reloading implies reexecuting with `ReloadSignal=RTMIN+25`,
  reexecuting user managers synchronously can be achieved with `systemctl reload
  user@*.service" now.</changelog>
  <changelog author="fbui@suse.com" date="1765800001">- Sync systemd-update-helper with the version shipped in Base:System
  This includes the following changes:
  - systemd-update-helper: do not stop or disable services when they are migrated
    to other packages. This can occur during package renaming or splitting.
  - systemd-update-helper: Fix invalid use of "break" in case statement
  - systemd-update-helper: fix regression introduced when support for package
    renaming/splitting was added (bsc#1245551)</changelog>
  <changelog author="fbui@suse.com" date="1765800002">- Import commit 9ecd16228492f44212e2771bec11ec78245b4094
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Import commit 8bbac1d508acb8aa4e7262f47c7f4076b8350f72
  8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305601">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit aef6e11921f8c46a2b7ee8cfab024c9c641d74d8
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit a943e3ce2f655b8509038e31f03f5ded18f24683
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="e63e105bed5b9f37eec17c0f4608d684d2c88f55e2d47e7978a0f73c03150fea9a6f4ce72efda5eef2f80cbb63920d4570fa7cbe54729a82adbfabdb01a817de" name="systemd-debuginfo" arch="aarch64">
  <version epoch="0" ver="254.27" rel="slfo.1.1_4.1"/>
  <changelog author="fbui@suse.com" date="1753963200">- Remove the script used to help migrating the language and locale settings
  located in /etc/sysconfig/language on old systems to the systemd default
  locations (bsc#1247074)
  The script was introduced more than 7 years ago and all systems running TW
  should have been migrated since then. Moreover the installer supports the
  systemd default locations since approximately SLE15.</changelog>
  <changelog author="fbui@suse.com" date="1758110400">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196800">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- systemd-update-helper: backport commit 2d0af8bc354f4a1429ce
  Since user@.service has `Type=notify-reload` (making the reloading process
  synchronous) and reloading implies reexecuting with `ReloadSignal=RTMIN+25`,
  reexecuting user managers synchronously can be achieved with `systemctl reload
  user@*.service" now.</changelog>
  <changelog author="fbui@suse.com" date="1765800001">- Sync systemd-update-helper with the version shipped in Base:System
  This includes the following changes:
  - systemd-update-helper: do not stop or disable services when they are migrated
    to other packages. This can occur during package renaming or splitting.
  - systemd-update-helper: Fix invalid use of "break" in case statement
  - systemd-update-helper: fix regression introduced when support for package
    renaming/splitting was added (bsc#1245551)</changelog>
  <changelog author="fbui@suse.com" date="1765800002">- Import commit 9ecd16228492f44212e2771bec11ec78245b4094
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Import commit 8bbac1d508acb8aa4e7262f47c7f4076b8350f72
  8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305601">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit aef6e11921f8c46a2b7ee8cfab024c9c641d74d8
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit a943e3ce2f655b8509038e31f03f5ded18f24683
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="80a45920c9d94ff4ac3b8421e1990b53f08ad5022bf45dd7bb0f870be15e4403aef80e4d1a104fd4a315881686a13c50d19f70877842f2702b351b335487e324" name="systemd-debugsource" arch="aarch64">
  <version epoch="0" ver="254.27" rel="slfo.1.1_4.1"/>
  <changelog author="fbui@suse.com" date="1753963200">- Remove the script used to help migrating the language and locale settings
  located in /etc/sysconfig/language on old systems to the systemd default
  locations (bsc#1247074)
  The script was introduced more than 7 years ago and all systems running TW
  should have been migrated since then. Moreover the installer supports the
  systemd default locations since approximately SLE15.</changelog>
  <changelog author="fbui@suse.com" date="1758110400">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196800">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- systemd-update-helper: backport commit 2d0af8bc354f4a1429ce
  Since user@.service has `Type=notify-reload` (making the reloading process
  synchronous) and reloading implies reexecuting with `ReloadSignal=RTMIN+25`,
  reexecuting user managers synchronously can be achieved with `systemctl reload
  user@*.service" now.</changelog>
  <changelog author="fbui@suse.com" date="1765800001">- Sync systemd-update-helper with the version shipped in Base:System
  This includes the following changes:
  - systemd-update-helper: do not stop or disable services when they are migrated
    to other packages. This can occur during package renaming or splitting.
  - systemd-update-helper: Fix invalid use of "break" in case statement
  - systemd-update-helper: fix regression introduced when support for package
    renaming/splitting was added (bsc#1245551)</changelog>
  <changelog author="fbui@suse.com" date="1765800002">- Import commit 9ecd16228492f44212e2771bec11ec78245b4094
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Import commit 8bbac1d508acb8aa4e7262f47c7f4076b8350f72
  8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305601">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit aef6e11921f8c46a2b7ee8cfab024c9c641d74d8
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit a943e3ce2f655b8509038e31f03f5ded18f24683
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="82d6f043e65eaeaaf5ab31b8366399cb58d8d74b0bfef63292fccf87f2a5f06c2ca0583a3ff42a72184b279911a1fa666a9f5c1eebd72d7fb47b16d342fbee3a" name="systemd-experimental-debuginfo" arch="aarch64">
  <version epoch="0" ver="254.27" rel="slfo.1.1_4.1"/>
  <changelog author="fbui@suse.com" date="1753963200">- Remove the script used to help migrating the language and locale settings
  located in /etc/sysconfig/language on old systems to the systemd default
  locations (bsc#1247074)
  The script was introduced more than 7 years ago and all systems running TW
  should have been migrated since then. Moreover the installer supports the
  systemd default locations since approximately SLE15.</changelog>
  <changelog author="fbui@suse.com" date="1758110400">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196800">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- systemd-update-helper: backport commit 2d0af8bc354f4a1429ce
  Since user@.service has `Type=notify-reload` (making the reloading process
  synchronous) and reloading implies reexecuting with `ReloadSignal=RTMIN+25`,
  reexecuting user managers synchronously can be achieved with `systemctl reload
  user@*.service" now.</changelog>
  <changelog author="fbui@suse.com" date="1765800001">- Sync systemd-update-helper with the version shipped in Base:System
  This includes the following changes:
  - systemd-update-helper: do not stop or disable services when they are migrated
    to other packages. This can occur during package renaming or splitting.
  - systemd-update-helper: Fix invalid use of "break" in case statement
  - systemd-update-helper: fix regression introduced when support for package
    renaming/splitting was added (bsc#1245551)</changelog>
  <changelog author="fbui@suse.com" date="1765800002">- Import commit 9ecd16228492f44212e2771bec11ec78245b4094
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Import commit 8bbac1d508acb8aa4e7262f47c7f4076b8350f72
  8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305601">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit aef6e11921f8c46a2b7ee8cfab024c9c641d74d8
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit a943e3ce2f655b8509038e31f03f5ded18f24683
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="b586241edf51ae46fabc430b61cc7ce98894ad65bff23b80d454494b874ae48b4baa825aade0d267ba530f3a8766fea4555396f87c8d9121fc82178ce75e5d0c" name="systemd-journal-remote-debuginfo" arch="aarch64">
  <version epoch="0" ver="254.27" rel="slfo.1.1_4.1"/>
  <changelog author="fbui@suse.com" date="1753963200">- Remove the script used to help migrating the language and locale settings
  located in /etc/sysconfig/language on old systems to the systemd default
  locations (bsc#1247074)
  The script was introduced more than 7 years ago and all systems running TW
  should have been migrated since then. Moreover the installer supports the
  systemd default locations since approximately SLE15.</changelog>
  <changelog author="fbui@suse.com" date="1758110400">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196800">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- systemd-update-helper: backport commit 2d0af8bc354f4a1429ce
  Since user@.service has `Type=notify-reload` (making the reloading process
  synchronous) and reloading implies reexecuting with `ReloadSignal=RTMIN+25`,
  reexecuting user managers synchronously can be achieved with `systemctl reload
  user@*.service" now.</changelog>
  <changelog author="fbui@suse.com" date="1765800001">- Sync systemd-update-helper with the version shipped in Base:System
  This includes the following changes:
  - systemd-update-helper: do not stop or disable services when they are migrated
    to other packages. This can occur during package renaming or splitting.
  - systemd-update-helper: Fix invalid use of "break" in case statement
  - systemd-update-helper: fix regression introduced when support for package
    renaming/splitting was added (bsc#1245551)</changelog>
  <changelog author="fbui@suse.com" date="1765800002">- Import commit 9ecd16228492f44212e2771bec11ec78245b4094
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Import commit 8bbac1d508acb8aa4e7262f47c7f4076b8350f72
  8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305601">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit aef6e11921f8c46a2b7ee8cfab024c9c641d74d8
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit a943e3ce2f655b8509038e31f03f5ded18f24683
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="aa743cd4c311b09f1df329b9182dd393adc7095c2192936bbb8b7a53c6ca855dc860227bfc5a125d7305ef7fccafa9f692d9aaf304b8c1d606fa65f8b4df4326" name="systemd-portable-debuginfo" arch="aarch64">
  <version epoch="0" ver="254.27" rel="slfo.1.1_4.1"/>
  <changelog author="fbui@suse.com" date="1753963200">- Remove the script used to help migrating the language and locale settings
  located in /etc/sysconfig/language on old systems to the systemd default
  locations (bsc#1247074)
  The script was introduced more than 7 years ago and all systems running TW
  should have been migrated since then. Moreover the installer supports the
  systemd default locations since approximately SLE15.</changelog>
  <changelog author="fbui@suse.com" date="1758110400">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196800">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- systemd-update-helper: backport commit 2d0af8bc354f4a1429ce
  Since user@.service has `Type=notify-reload` (making the reloading process
  synchronous) and reloading implies reexecuting with `ReloadSignal=RTMIN+25`,
  reexecuting user managers synchronously can be achieved with `systemctl reload
  user@*.service" now.</changelog>
  <changelog author="fbui@suse.com" date="1765800001">- Sync systemd-update-helper with the version shipped in Base:System
  This includes the following changes:
  - systemd-update-helper: do not stop or disable services when they are migrated
    to other packages. This can occur during package renaming or splitting.
  - systemd-update-helper: Fix invalid use of "break" in case statement
  - systemd-update-helper: fix regression introduced when support for package
    renaming/splitting was added (bsc#1245551)</changelog>
  <changelog author="fbui@suse.com" date="1765800002">- Import commit 9ecd16228492f44212e2771bec11ec78245b4094
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Import commit 8bbac1d508acb8aa4e7262f47c7f4076b8350f72
  8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305601">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit aef6e11921f8c46a2b7ee8cfab024c9c641d74d8
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit a943e3ce2f655b8509038e31f03f5ded18f24683
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="687dc28d8f0bd19ae2c9f5be023dbcf21e67cd2eedb96985ffcdcaed35d7744b60a3c4fb4cce942d70acdf45c30724fa1f8a916c76e900a4b569289555017099" name="sysvinit-debugsource" arch="aarch64">
  <version epoch="0" ver="3.00" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1598356800">- Update to sysvinit 2.97:
  * Check $(ROOT) filesystem for libcrypt instead of a hardcoded
    path to /usr.
  * Code clean-up and making sure we avoid freeing unused memory.
  * Added shell script which converts systemd unit files into
    init.d style scripts.
  * Allow init to load configuration data from files stored in
    /etc/inittab.d/
  * Allow shutdown time to be specified in the format +hh:mm. This
    is in addition to the existing formats such as hh:mm, +m, and
    "now".
  * Fixed typos in manual pages.
- Update startpar to 0.65:
  + Make sure startpar testsuite can find insserv executable in
    /usr/sbin or /sbin.
  + Added PREFIX variable to Makefile and testsuite to make
    location of startpar and insserv more flexible.
- Rebase sysvinit-2.90.dif.
- Drop SCVER defines: not used in any place.
- Drop startpar-sysmacros.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Drop /bin/pidof and /sbin/pidof, including corresponding man
  page: let's switch to pidof as provided by procps-ng.</changelog>
  <changelog author="werner@suse.de" date="1605614400">- Update to sysvinit 2.98:
  * Fixed time parsing in shutdown when there is a + in front of a 0 time offset.
    Commands with a postiive time offset (+1) would work but +0 fails.
    This has been corrected by Arkadiusz Miskiewicz.</changelog>
  <changelog author="lnussel@suse.de" date="1606305600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="werner@suse.de" date="1613995200">- Update to sysvinit 2.99:
  * Mostly typo and just better documentation and easier to read
    code comments</changelog>
  <changelog author="werner@suse.de" date="1617192000">- (re)add also support for SLE-15-SP3</changelog>
  <changelog author="werner@suse.de" date="1632225600">- Update to sysvinit 3.00:
  * Better device detection of bootlogd</changelog>
  <changelog author="meissner@suse.com" date="1651924800">- switch to https source urls</changelog>
  <changelog author="lnussel@suse.com" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- split package from powerd. powerd patches that were never
  part of sysvinit but need to be mentioned to pass the bot checks:
  * powerd-2.0.2-getaddrinfo.patch
  * powerd-2.0.2.dif</changelog>
</package>
<package pkgid="6d238be0825a34ba744073e0dfec47caf2feb4d22b871c94098fc8b41d0a51869d4ef4039f22ef17d1acb48123e3397a00004c75520f19b62613df69ddb509a5" name="sysvinit-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.00" rel="slfo.1.1_1.2"/>
  <changelog author="dimstar@opensuse.org" date="1598356800">- Update to sysvinit 2.97:
  * Check $(ROOT) filesystem for libcrypt instead of a hardcoded
    path to /usr.
  * Code clean-up and making sure we avoid freeing unused memory.
  * Added shell script which converts systemd unit files into
    init.d style scripts.
  * Allow init to load configuration data from files stored in
    /etc/inittab.d/
  * Allow shutdown time to be specified in the format +hh:mm. This
    is in addition to the existing formats such as hh:mm, +m, and
    "now".
  * Fixed typos in manual pages.
- Update startpar to 0.65:
  + Make sure startpar testsuite can find insserv executable in
    /usr/sbin or /sbin.
  + Added PREFIX variable to Makefile and testsuite to make
    location of startpar and insserv more flexible.
- Rebase sysvinit-2.90.dif.
- Drop SCVER defines: not used in any place.
- Drop startpar-sysmacros.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Drop /bin/pidof and /sbin/pidof, including corresponding man
  page: let's switch to pidof as provided by procps-ng.</changelog>
  <changelog author="werner@suse.de" date="1605614400">- Update to sysvinit 2.98:
  * Fixed time parsing in shutdown when there is a + in front of a 0 time offset.
    Commands with a postiive time offset (+1) would work but +0 fails.
    This has been corrected by Arkadiusz Miskiewicz.</changelog>
  <changelog author="lnussel@suse.de" date="1606305600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="werner@suse.de" date="1613995200">- Update to sysvinit 2.99:
  * Mostly typo and just better documentation and easier to read
    code comments</changelog>
  <changelog author="werner@suse.de" date="1617192000">- (re)add also support for SLE-15-SP3</changelog>
  <changelog author="werner@suse.de" date="1632225600">- Update to sysvinit 3.00:
  * Better device detection of bootlogd</changelog>
  <changelog author="meissner@suse.com" date="1651924800">- switch to https source urls</changelog>
  <changelog author="lnussel@suse.com" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- split package from powerd. powerd patches that were never
  part of sysvinit but need to be mentioned to pass the bot checks:
  * powerd-2.0.2-getaddrinfo.patch
  * powerd-2.0.2.dif</changelog>
</package>
<package pkgid="2fa6b342eeaa8d1c2fb0fd697cdeb4116392f2e3726b2c789799475f69db54df97649b0ca9c9d1fefc6b1462e000aaf6822002a24e773ff2786ba5255156dfc3" name="talloc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.2" rel="slfo.1.1_1.2"/>
  <changelog author="nopower@suse.com" date="1583496000">- Upgrade to 2.3.1
  + Upgrade waf to 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/talloc: clang: Fix 'Value stored during its initialization
    is never read'.
  + Spelling fixes s/recieved/received/
  + talloc: ASAN fix for test_magic_protection.
  +  talloc: ASAN fix for test_rusty
  +  talloc: ASAN fix for test_pool_nest
  +  talloc: ASAN fix for test_talloc_free_in_destructor
  +  talloc: ASAN fix for test_realloc_on_destructor_parent</changelog>
  <changelog author="dimstar@opensuse.org" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="scabrero@suse.de" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="nopower@suse.com" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="scabrero@suse.de" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="asn@cryptomilk.org" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dimstar@opensuse.org" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="nopower@suse.com" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
</package>
<package pkgid="6efaf66b651e95391663d2e2376c260b55c152df4cf3b899504c72f6e5d68d162f8e96bf74dbf4bed7b674a0b69d79e0841fcc5d2899fc3c825df1f08e5e491a" name="tar-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.35" rel="slfo.1.1_2.1"/>
  <changelog author="danilo.spinella@suse.com" date="1655726400">- Fix race condition while creating intermediate subdirectories,
  bsc#1200657
  * bsc1200657.patch</changelog>
  <changelog author="sflees@suse.de" date="1660737600">- bsc1200657.patch was previously incomplete leading to deadlocks
  * bsc#1202436
  * bsc1200657.patch updated</changelog>
  <changelog author="dmueller@suse.com" date="1660996800">- drop tar-recursive--files-from.patch (causes bsc#918487)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666872000">- Fix unexpected inconsistency when making directory, bsc#1203600
  * tar-avoid-overflow-in-symlinks-tests.patch
  * tar-fix-extract-unlink.patch
- Update race condition fix, bsc#1200657
  * tar-fix-race-condition.patch
- Refresh bsc1200657.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676376000">- Fix CVE-2022-48303, tar has a one-byte out-of-bounds read that
  results in use of uninitialized memory for a conditional jump
  (CVE-2022-48303, bsc#1207753)
  * fix-CVE-2022-48303.patch
- Fix hang when unpacking test tarball, bsc#1202436
  * bsc1202436.patch
  * bsc1202436-1.patch
  * bsc1202436-2.patch
  * go-testsuite-test-hang.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1689854400">- Update tests-skip-time01-on-32bit-time_t.patch to not run test
  on armv6 either</changelog>
  <changelog author="schwab@suse.de" date="1690286400">- Run testsuite also on qemu build</changelog>
  <changelog author="jsmithfpv@gmail.com" date="1701864000">- GNU tar 1.34:
  * Fail when building GNU tar if the platform supports 64-bit
    time_t but the build only uses 32-bit time_t.
  * Leave the devmajor and devminor fields empty (rather than
    zero) for non-special files, as this is more compatible with
    traditional tar.
  Fixes:
  * Fix interaction of --update with --wildcards.
  * When extracting archives into an empty directory, do not create
    hard links to files outside that directory.
  * Handle partial reads from regular files.
  * Warn file changed as we read it less often. Formerly, tar
    warned if the file's size or ctime changed. However, this
    generated a false positive if tar read a file while another
    process hard-linked to it, changing its ctime. Now, tar warns
    if the file's size, mtime, user ID, group ID, or mode changes.
    Although neither heuristic is perfect, the new one should work
    better in practice.
  * Fix --ignore-failed-read to ignore file-changed read errors
    as far as exit status is concerned. You can now suppress
    file-changed issues entirely with --ignore-failed-read
  - -warning=no-file-changed.
  * Fix --remove-files to not remove a file that changed while we
    read it.
  * Fix --atime-preserve=replace to not fail if there was no need
    to replace, either because we did not read the file, or the
    atime did not change.
  * Fix race when creating a parent directory while another process
    is also doing so.
  * Fix handling of prefix keywords not followed by "." in pax
    headers.
  * Fix handling of out-of-range sparse entries in pax headers.
  * Fix handling of --transform='s/s/@/2'.
  * Fix treatment of options ending in slash in files-from list.
  * Fix crash on tar --checkpoint-action exec=\".
  * Fix low-memory crash when reading incremental dumps.
  * Fix --exclude-vcs-ignores memory allocation misuse.
- Added patch:
  * add_forgotten-tests.patch: added 2 tests that upstream forgot in the release.
- Update patch:
  * tar-backup-spec-fix-paths.patch: upstream fixed 2/3rd of paths
  * tar-fix-extract-unlink.patch
    some of this is overwritten by bsc1202436-1 and some was fixed
    upstream
  * add_readme-tests.patch as Makefile.in no longer exists
- Removed:
  * tar-fix-race-condition.patch
  * tar-avoid-overflow-in-symlinks-tests.patch
  * bsc1200657.patch
  * bsc1202436-2.patch
  * bsc1202436-1.patch
- Fix CVE-2023-39804, Incorrectly handled extension attributes in PAX
  archives can lead to a crash, bsc#1217969</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1772625600">- Add tar-fix-deletion-from-archive.patch
  * Fixes tar creating invalid tarballs when used with --delete (bsc#1246607)
  * Add makeinfo build requirement, needed after the addition of the patch</changelog>
</package>
<package pkgid="43e7ba4915fef56fdb3b542032b03363f35f406f7167415bdb52bcbda49edb1602b41fd8b2cf3bc6565de01052a49bea8f30597712f667ed9a33b16758f2cabc" name="tar-debugsource" arch="aarch64">
  <version epoch="0" ver="1.35" rel="slfo.1.1_2.1"/>
  <changelog author="danilo.spinella@suse.com" date="1655726400">- Fix race condition while creating intermediate subdirectories,
  bsc#1200657
  * bsc1200657.patch</changelog>
  <changelog author="sflees@suse.de" date="1660737600">- bsc1200657.patch was previously incomplete leading to deadlocks
  * bsc#1202436
  * bsc1200657.patch updated</changelog>
  <changelog author="dmueller@suse.com" date="1660996800">- drop tar-recursive--files-from.patch (causes bsc#918487)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666872000">- Fix unexpected inconsistency when making directory, bsc#1203600
  * tar-avoid-overflow-in-symlinks-tests.patch
  * tar-fix-extract-unlink.patch
- Update race condition fix, bsc#1200657
  * tar-fix-race-condition.patch
- Refresh bsc1200657.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676376000">- Fix CVE-2022-48303, tar has a one-byte out-of-bounds read that
  results in use of uninitialized memory for a conditional jump
  (CVE-2022-48303, bsc#1207753)
  * fix-CVE-2022-48303.patch
- Fix hang when unpacking test tarball, bsc#1202436
  * bsc1202436.patch
  * bsc1202436-1.patch
  * bsc1202436-2.patch
  * go-testsuite-test-hang.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1689854400">- Update tests-skip-time01-on-32bit-time_t.patch to not run test
  on armv6 either</changelog>
  <changelog author="schwab@suse.de" date="1690286400">- Run testsuite also on qemu build</changelog>
  <changelog author="jsmithfpv@gmail.com" date="1701864000">- GNU tar 1.34:
  * Fail when building GNU tar if the platform supports 64-bit
    time_t but the build only uses 32-bit time_t.
  * Leave the devmajor and devminor fields empty (rather than
    zero) for non-special files, as this is more compatible with
    traditional tar.
  Fixes:
  * Fix interaction of --update with --wildcards.
  * When extracting archives into an empty directory, do not create
    hard links to files outside that directory.
  * Handle partial reads from regular files.
  * Warn file changed as we read it less often. Formerly, tar
    warned if the file's size or ctime changed. However, this
    generated a false positive if tar read a file while another
    process hard-linked to it, changing its ctime. Now, tar warns
    if the file's size, mtime, user ID, group ID, or mode changes.
    Although neither heuristic is perfect, the new one should work
    better in practice.
  * Fix --ignore-failed-read to ignore file-changed read errors
    as far as exit status is concerned. You can now suppress
    file-changed issues entirely with --ignore-failed-read
  - -warning=no-file-changed.
  * Fix --remove-files to not remove a file that changed while we
    read it.
  * Fix --atime-preserve=replace to not fail if there was no need
    to replace, either because we did not read the file, or the
    atime did not change.
  * Fix race when creating a parent directory while another process
    is also doing so.
  * Fix handling of prefix keywords not followed by "." in pax
    headers.
  * Fix handling of out-of-range sparse entries in pax headers.
  * Fix handling of --transform='s/s/@/2'.
  * Fix treatment of options ending in slash in files-from list.
  * Fix crash on tar --checkpoint-action exec=\".
  * Fix low-memory crash when reading incremental dumps.
  * Fix --exclude-vcs-ignores memory allocation misuse.
- Added patch:
  * add_forgotten-tests.patch: added 2 tests that upstream forgot in the release.
- Update patch:
  * tar-backup-spec-fix-paths.patch: upstream fixed 2/3rd of paths
  * tar-fix-extract-unlink.patch
    some of this is overwritten by bsc1202436-1 and some was fixed
    upstream
  * add_readme-tests.patch as Makefile.in no longer exists
- Removed:
  * tar-fix-race-condition.patch
  * tar-avoid-overflow-in-symlinks-tests.patch
  * bsc1200657.patch
  * bsc1202436-2.patch
  * bsc1202436-1.patch
- Fix CVE-2023-39804, Incorrectly handled extension attributes in PAX
  archives can lead to a crash, bsc#1217969</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1772625600">- Add tar-fix-deletion-from-archive.patch
  * Fixes tar creating invalid tarballs when used with --delete (bsc#1246607)
  * Add makeinfo build requirement, needed after the addition of the patch</changelog>
</package>
<package pkgid="9df8047d0d3043b68a69224fdf2d5d49f9179cc1d3f48891b7cb557f32cc39bca7a99fc0e0d7e23d955493f6dbcde8be330f1ba2d2b44b0759fc7211de5eef62" name="tcpd-debugsource" arch="aarch64">
  <version epoch="0" ver="7.6" rel="slfo.1.1_1.3"/>
  <changelog author="tchvatal@suse.com" date="1417176000">- Cleanup with spec-cleaner
- Remove obsolete sections of provides from 2k6
- Remove static library</changelog>
  <changelog author="okir@suse.com" date="1437393600">- Fix breakage of IPv6 address handling [bsc#914527, bsc#899185]
  Added patches:
  tcp_wrappers_7.6-ipv6-sockaddr-storage.patch
  tcp_wrappers_7.6-ipv6-subnet.diff
  tcp_wrappers_7.6-ipv6-host-match.patch
  tcp_wrappers_7.6-ipv6-mapped-v4.patch
- Re-added static library</changelog>
  <changelog author="kukuk@suse.de" date="1459944000">- tcp_wrappers_7.6.diff: don't use public headers for own
  functions, make own yp_get_default_domain static.</changelog>
  <changelog author="meissner@suse.com" date="1496491200">- tcp_wrappers_7.6-optflags.diff: enable PIE for all binaries
  directly.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="mliska@suse.cz" date="1569326400">- Add tcp_wrappers_7.6-ipv6.fix.fix3.diff in order to fix
  boo#1149708.</changelog>
  <changelog author="kukuk@suse.com" date="1597406400">- tcp_wrappers_7.6-shared-lib.diff: Linux has STRERROR not SYS_ERRLIST
  [bsc#1175272]</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- Makefile is not parallel-safe</changelog>
  <changelog author="lnussel@suse.de" date="1662379200">- use _libdir (boo#1191098)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665489600">- Add hosts.allow and hosts.deny config files from the netcfg package,
  as they are tcpd specific, bsc#1099755</changelog>
</package>
<package pkgid="a417f087cd433151f3ceea14b10d56c0f9e409fb14dbbfb631eb3167bf12282689fbf1288c20311c7e4d009e2e48b55b4cd39cc24abd68df7c8b77374d000f6a" name="tdb-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.10" rel="slfo.1.1_1.2"/>
  <changelog author="dmulder@suse.com" date="1548244800">- Update to 1.3.17</changelog>
  <changelog author="dmulder@suse.com" date="1551787200">- Update to 1.3.18
  + Fix build problems with older python versions.
  + C99 build fixes.
  + Fix standalone build of tdb.</changelog>
  <changelog author="jmcdonough@suse.com" date="1570104000">- Update to version 1.4.2
  + Build fixes
  + Improve the performance by inlining the tdb_oob() checks
  + Do not propogate any errors from tdb_repack() to
    tdb_transaction_commit();  (bso#13952)
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + New minor version to allow Samba 4.10 to release a tdb if
    required from that branch</changelog>
  <changelog author="nopower@suse.com" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="jcnengel@gmail.com" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="dmueller@suse.com" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="scabrero@suse.de" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="nopower@suse.com" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
</package>
<package pkgid="71230a5750ca615cf4d36344ef60163b7ae4a35f66dd0494ff8a37e805c7ac5a91b60308291fb34b986e304261b15a274f1340a6bede143fcf466150704832d8" name="tevent-debugsource" arch="aarch64">
  <version epoch="0" ver="0.16.1" rel="slfo.1.1_1.2"/>
  <changelog author="mcepl@suse.com" date="1574769600">- Update to 0.10.1 ... make build with Python 3.8 working again
  (new waf).</changelog>
  <changelog author="nopower@suse.com" date="1583582400">- Update to version 0.10.2
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="dmulder@suse.com" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="nopower@suse.com" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="scabrero@suse.de" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="dimstar@opensuse.org" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="nopower@suse.com" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="jgwang@suse.com" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="scabrero@suse.de" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
</package>
<package pkgid="31566c6341e5c5fc34edbcc20364ed77f74e5b894d8e8f358c208382a96a90df71af9c1abcd75d25420695dfc18924d9b0a26d02b5c15b0cd792e92c5babd9ed" name="texinfo-debugsource" arch="aarch64">
  <version epoch="0" ver="7.0.3" rel="slfo.1.1_1.3"/>
  <changelog author="rpm@fthiessen.de" date="1650888000">- Update to version 6.8
  * new command @displaymath for formatting of mathematical notation
  * new command @example takes an argument to specify the language
  * Deprecate commands: @centerchap, @definfoenclose, @refill, @inforef
  * new paper size @bsixpaper
  * texi2any
  * should be faster as Perl XS parser is enabled by default
  * SHOW_MENU customization variable replaced by FORMAT_MENU.
  * only check menu structure if CHECK_NORMAL_MENU_STRUCTURE
    variable is set
  * MathJax support for display of math.
  * JavaScript License Web Labels support
  * Use sectional tables of contents instead of menus by defaut
  * Use section names in links by default
  * CONTENTS_OUTPUT_LOCATION sets location of table of contents
  * Document sections wrapped in &lt;div&gt; elements
  * New variable USE_NODE_DIRECTIONS to use node or section structure
    for node directions
  * copiable anchor links for definitions
  * Don't add an extra period before file extension given as
    an argument to @image if image file is not found
  * info: Support compressed dir files
  * texi2dvi: Stop on first error in input file
  * texinfo.tex:
  * put logical page numbers into PDF's ('page labels')
  * put chapter numbers in the PDF outline
  * new Finnish translation
- Rebased texinfo-zlib.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1650974400">- Add 13a8894fe2.patch
  * Fixing @headings: Add missing option value 'single'.
    Resolved regression where gpm could not be build.</changelog>
  <changelog author="werner@suse.de" date="1658923200">- Check for filetrigger lua scriplets if rpm.execute() as function
  call is given and used this</changelog>
  <changelog author="werner@suse.de" date="1659096000">- Do lua scripting only once for execute() function</changelog>
  <changelog author="werner@suse.de" date="1659528000">- In case of an update of package info: do never remove existing
  info page from dir file (boo#1201852)</changelog>
  <changelog author="werner@suse.de" date="1668513600">- Update to version 7.0 (7 November 2022)
  * texi2any
  * LaTeX added as an output format, selected with --latex
  * EPUB 3 added as an output format, selected with --epub3
  * reform throughout the code in general
  * thorough review of character encoding issues
  * new customization variables involved with character encoding:
    INPUT_FILE_NAME_ENCODING, OUTPUT_FILE_NAME_ENCODING,
    DOC_ENCODING_FOR_INPUT_FILE_NAME, DOC_ENCODING_FOR_OUTPUT_FILE_NAME,
    MESSAGE_ENCODING and COMMAND_LINE_ENCODING
  * warn if full-text commands (@ref, @footnote, @anchor) appear in @w
  * new variable NO_TOP_NODE_OUTPUT
  * IGNORE_BEFORE_SETFILENAME variable removed.  former effect
    is now always on.
  * HTML output:
  * use manual_name_html as output directory for split HTML instead of
    manual_name or manual_name.html
  * default DOCTYPE declaration changed to plain HTML5 style rather than
    HTML4 DTD reference
  * output only the CSS rules that are needed in an output file
    . remove CSS_LINES variable and add SHOW_BUILTIN_CSS_RULES
  * (custom CSS can still be output using EXTRA_HEAD)
  * use &lt;code&gt; tag for the output of @t and @verb instead of &lt;tt&gt;
  * use &lt;abbr&gt; for @acronym instead of &lt;acronym&gt;
  * link to table of contents from short table of contents only if a
    table of contents is actually output
  * prefix classes from @example arguments with `user-'
  * percent encode URL in @url/@uref, @email, @image and external
    manual file
  * new USE_XML_SYNTAX, HTML_ROOT_ELEMENT_ATTRIBUTES and
    NO_CUSTOM_HTML_ATTRIBUTE variables can be used to output
    valid XHTML
  * systematic addition of classes attribute in HTML elements based on the
    Texinfo @-command names.  renaming of class attributes to avoid
    confusion with @-commands formatting and describe the role in the
    document rather than the formatting style.
  * COPIABLE_ANCHORS renamed to COPIABLE_LINKS
  * do not add a title by default; SHOW_TITLE or NO_TOP_NODE_OUTPUT has
    to be set
  * USE_TITLEPAGE_FOR_TITLE is now true by default
  * L2H variable removed, replaced by HTML_MATH set to `l2h'
  * rename OVERVIEW_LINK_TO_TOC to SHORT_TOC_LINK_TO_TOC
  * rename BEFORE_OVERVIEW to BEFORE_SHORT_TOC_LINE
  * rename AFTER_OVERVIEW to AFTER_SHORT_TOC_LINES
  * remove PRE_ABOUT, AFTER_ABOUT, and add PROGRAM_NAME_IN_ABOUT
  * remove KEEP_TOP_EXTERNAL_REF
  * new variables IGNORE_REF_TO_TOP_NODE_UP, CONVERT_TO_LATEX_IN_MATH,
    HTMLXREF_MODE and HTMLXREF_FILE
  * DocBook output:
  * do not output Top node or text before the first @node or sectioning
    @-command.  NO_TOP_NODE_OUTPUT can be set to false to output Top node
    for now.
  * replace @definfocenlose defined @-commands by the argument as-is
    to be more consistent with printed output
  * HTML/DocBook output:
  * USE_NUMERIC_ENTITY changed to mean to use numeric entities instead
    of named entities.  former effect is now always on.
  * ENABLE_ENCODING_USE_ENTITY variable removed.  former effect is now
    always off.
  * Info output
  * quote problematic node names (with :, comma...) by default
  * new customization variable ASCII_PUNCTUATION to use plain ASCII
    characters for quotation marks and a few other symbols
  * texinfo.tex
  * `@microtype on' uses microtypography in formatting for pdfTeX and LuaTeX
  * do not ignore @part page immediately following Top node
  * do `@set txicodevaristt' to get slanted typewriter for @var in code,
    `@clear txicodevaristt' to use slanted, variable-width roman font for
    @var everywhere.  flag is @set by default, but we may turn this off
    in the future.
  * new file doc/texinfo-zh.tex for Texinfo documents in Chinese.
    new support file doc/txi-zh.tex for Chinese.  doc/short-sample-zh.texi is
    a sample document.
  * info
  * better support for index entries containing parentheses
  * better support for getting bold text etc. when displaying manpages
  * bug fixed where the first index entry in a file could be ignored
  * M-C-f closes as well as opens footnotes window
  * do not crash if run in Brazilian Portuguese locale
  * Language
  * @deftype* commands use typewriter font in argument list
  * new commands @latex, @iflatex, @ifnotlatex for new LaTeX output format
  * do `@set txidefnamenospace' to omit space after a definition name
  * Other
  * build fixed for glibc 2.34
- Delete patch 13a8894fe2.patch as now part of upstream tar ball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670155200">- texinfo 7.0.1:
  * texi2any: avoid multiple crashes on empty @image argument and
    other conditions
  * avoid hang on @ref command inside section command
  * info: fix recoding of UTF-8 files to ASCII when run in C
    locale
  * js: index search fixed for new HTML output</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1675512000">- texinfo 7.0.2:
  * texi2any: do not distribute architecture-dependent files
  * info: further fix of recoding of UTF-8 files to ASCII
  * install-info: build fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679832000">- texinfo 7.0.3:
  * texi2any: fix performance regression when Perl binary
    extension (XS) modules are not being used (e.g. with
    TEXINFO_XS=omit)
  * info: further fix of recoding of UTF-8 files to ASCII to avoid
    text disappearing from nodes
  * info: avoid possible freeze at start of a file with
    `-v nodeline=pointers'</changelog>
</package>
<package pkgid="859f968ca232a28b15d84592dc2f70f211470dc992cec73c9ec7d4d826af2c1ac9ca5fb58cc2398362eafdac2d3f40d9946b4c0401d58e5ad38660b7a7f83da4" name="tftp-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.2" rel="slfo.1.1_1.2"/>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1562846400">- Remove SuSEfirewall2 service, since SuSEfirewall2 has been
  replaced by firewalld (which already provides a tftp service).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571054400">- Add tftp.socket requirement to the service unit section [bsc#1153625]</changelog>
  <changelog author="tchvatal@suse.com" date="1578484800">- Pass fcommon to cflags wrt bsc#1160297</changelog>
  <changelog author="olaf@aepfle.de" date="1598961600">- Remove bogus comment about directory assumptions
  in.tftpd assumes nothing, exactly one directory must be specified
  when option -s is used
- Reorder command line options
  Optional admin options come before the final directory option</changelog>
  <changelog author="jengelh@inai.de" date="1602590400">- Do not suppress errors from useradd.
- Replace some old specfile constructs. To that end, patches were
  refreshed: tftp-hpa-0.43_include_sys_params.patch,
  tftp-hpa-0.46_colon_check.patch, tftp-hpa-0.48-macros-crash.patch,
  tftp-hpa-0.48-macros-v6mapped.patch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625227200">- Use systemd-sysusers external package</changelog>
  <changelog author="dmueller@suse.com" date="1627473600">- correct source url to new location</changelog>
  <changelog author="jsegitz@suse.com" date="1637755200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * tftp.service</changelog>
  <changelog author="meissner@suse.com" date="1670414400">- source url -&gt; https</changelog>
</package>
<package pkgid="269f6eb6d1d7ba6dd29ee0cb1eab35f80b7592ebc5194794ae08d90a801bf0ff8666cb02c515938df3a7768c12500ac8d631c5bfadedc717a24c917c35a48a50" name="tftp-debugsource" arch="aarch64">
  <version epoch="0" ver="5.2" rel="slfo.1.1_1.2"/>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1562846400">- Remove SuSEfirewall2 service, since SuSEfirewall2 has been
  replaced by firewalld (which already provides a tftp service).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571054400">- Add tftp.socket requirement to the service unit section [bsc#1153625]</changelog>
  <changelog author="tchvatal@suse.com" date="1578484800">- Pass fcommon to cflags wrt bsc#1160297</changelog>
  <changelog author="olaf@aepfle.de" date="1598961600">- Remove bogus comment about directory assumptions
  in.tftpd assumes nothing, exactly one directory must be specified
  when option -s is used
- Reorder command line options
  Optional admin options come before the final directory option</changelog>
  <changelog author="jengelh@inai.de" date="1602590400">- Do not suppress errors from useradd.
- Replace some old specfile constructs. To that end, patches were
  refreshed: tftp-hpa-0.43_include_sys_params.patch,
  tftp-hpa-0.46_colon_check.patch, tftp-hpa-0.48-macros-crash.patch,
  tftp-hpa-0.48-macros-v6mapped.patch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625227200">- Use systemd-sysusers external package</changelog>
  <changelog author="dmueller@suse.com" date="1627473600">- correct source url to new location</changelog>
  <changelog author="jsegitz@suse.com" date="1637755200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * tftp.service</changelog>
  <changelog author="meissner@suse.com" date="1670414400">- source url -&gt; https</changelog>
</package>
<package pkgid="c3c3722b336b071a1f2ce4dadb985e138ac798699fefe782a49528deb9eb98b2c87d4932554861f9de7ff2088a06a16e96ccca91b360b38737350ecc925a6b23" name="thin-provisioning-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.9.0" rel="slfo.1.1_1.4"/>
  <changelog author="mpluskal@suse.com" date="1508241600">- Update to version 0.7.4:
  * No changes provided for this release</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.7.5:
  * Fix a bug that stopped cache_restore working with metadata
    version 2.</changelog>
  <changelog author="mpluskal@suse.com" date="1521028800">- Modernise spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1527768000">- Update to version 0.7.6:
  * Mostly internal changes</changelog>
  <changelog author="adam.majer@suse.de" date="1534507200">- boost_168.patch: fix build with Boost 1.68. This version of Boost
  removes compatibility SHA1 header from Uuid library. (bsc#1105088)</changelog>
  <changelog author="mpluskal@suse.com" date="1559131200">- Update to version 0.8.3:
  * Mostly internal changes</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1565006400">- Fix name clash with raise() from signal.h, add
  ft-lib_bcache-rename-raise-raise_.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 0.8.5
  * Mostly internal changes</changelog>
  <changelog author="mpluskal@suse.com" date="1597924800">- Update to version 0.9.0:
  * New support tools: thin_metadata_{pack,unpack}.
  * thin_check can now check metadata snapshots.
  * some metadata space map bug fixes.
  * thin_check --auto-repair
  * Stop thin_dump --repair/thin_repair ignoring under populated nodes.
- Drop no longer needed patches:
  * boost_168.patch
  * ft-lib_bcache-rename-raise-raise_.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link as position-independent executable (bsc#1184124).</changelog>
</package>
<package pkgid="107ea849429f4eab306fc4340f5d40b5fb756e801719fdb1df18dbb6527a229c6d6ad85761277a794a417dcea0b7914a16dcb7069b2202465ae253d83536466b" name="thin-provisioning-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="0.9.0" rel="slfo.1.1_1.4"/>
  <changelog author="mpluskal@suse.com" date="1508241600">- Update to version 0.7.4:
  * No changes provided for this release</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.7.5:
  * Fix a bug that stopped cache_restore working with metadata
    version 2.</changelog>
  <changelog author="mpluskal@suse.com" date="1521028800">- Modernise spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1527768000">- Update to version 0.7.6:
  * Mostly internal changes</changelog>
  <changelog author="adam.majer@suse.de" date="1534507200">- boost_168.patch: fix build with Boost 1.68. This version of Boost
  removes compatibility SHA1 header from Uuid library. (bsc#1105088)</changelog>
  <changelog author="mpluskal@suse.com" date="1559131200">- Update to version 0.8.3:
  * Mostly internal changes</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1565006400">- Fix name clash with raise() from signal.h, add
  ft-lib_bcache-rename-raise-raise_.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 0.8.5
  * Mostly internal changes</changelog>
  <changelog author="mpluskal@suse.com" date="1597924800">- Update to version 0.9.0:
  * New support tools: thin_metadata_{pack,unpack}.
  * thin_check can now check metadata snapshots.
  * some metadata space map bug fixes.
  * thin_check --auto-repair
  * Stop thin_dump --repair/thin_repair ignoring under populated nodes.
- Drop no longer needed patches:
  * boost_168.patch
  * ft-lib_bcache-rename-raise-raise_.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link as position-independent executable (bsc#1184124).</changelog>
</package>
<package pkgid="b5eb12a86063e42a45f4a4832ee40d20b003f7cb091da807285ac762c83c8bfd7dc590b088b42b1afd60199b7119e0603086d814ff830434de536146d340d222" name="tiff-debugsource" arch="aarch64">
  <version epoch="0" ver="4.7.1" rel="slfo.1.1_1.1"/>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1758196800">- Update to 4.7.1:
  Software configuration changes:
  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is &lt; 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)
  Library changes:
  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.
  Bug fixes:
  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
  * Do not error out on a tag whose tag count value is zero, just issue a warning.
    Fix parsing a private tag 0x80a6 (fixes issue #647)
  * TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24
    Fixes https://github.com/OSGeo/gdal/issues/10875)
  * tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
  * Fix writing a Predictor=3 file with non-native endianness
  * _TIFFVSetField(): fix potential use of unallocated memory (out-of-bounds
  * read / nullptr dereference) in case of out-of-memory situation when dealing with
    custom tags (fixes issue #663)
  * tif_fax3.c: Error out for CCITT fax encoding if SamplesPerPixel is not equal 1 and
    PlanarConfiguration = Contiguous (fixes issue #26)
  * tif_fax3.c: error out after a number of times end-of-line or unexpected bad code
    words have been reached. (fixes issue #670)
  * Fix memory leak in TIFFSetupStrips() (fixes issue #665)
  * tif_zip.c: Provide zlib allocation functions. Otherwise for zlib built with
  - DZ_SOLO inflating will fail.
  * Fix memory leak in _TIFFSetDefaultCompressionState. (fixes issue #676)
  * tif_predict.c: Don’t overwrite input buffer of TIFFWriteScanline() if "prediction"
    is enabled. Use extra working buffer in PredictorEncodeRow(). (fixes issue #5)
  * tif_getimage.c: update some integer overflow checks (fixes issue #79)
  * tif_getimage.c: Fix buffer underflow crash for less raster rows at
    TIFFReadRGBAImageOriented() (fixes issue #704, bsc#1250413, CVE-2025-9900)
  * TIFFReadRGBAImage(): several fixes to avoid buffer overflows.
  * Correct passing arguments to TIFFCvtIEEEFloatToNative() and TIFFCvtIEEEDoubleToNative()
    if HAVE_IEEEFP is not defined. (fixes issue #699)
  * LZWDecode(): avoid nullptr dereference when trying to read again after EOI marker
    has been found with remaining output bytes (fixes issue #698)
  * TIFFSetSubDirectory(): check _TIFFCheckDirNumberAndOffset() return.
  * TIFFUnlinkDirectory() and TIFFWriteDirectorySec(): clear tif_rawcp when clearing
    tif_rawdata (fixes issue #711)
  * JPEGEncodeRaw(): error out if a previous scanline failed to be written, to avoid
    out-of-bounds access (fixes issue #714)
  * tif_jpeg: Fix bug in JPEGDecodeRaw() if JPEG_LIB_MK1_OR_12BIT is defined for 8/12bit
    dual mode, introduced in libjpeg-turbo 2.2, which was actually released as 3.0.
    Fixes issue #717
  * add assert for TIFFReadCustomDirectory infoarray check.
  * ppm2tiff: Fix bug in pack_words trailing bytes, where last two bytes of each line
    were written wrongly. (fixes issue #467)
  * fax2ps: fix regression of commit 28c38d648b64a66c3218778c4745225fe3e3a06d where
    TIFFTAG_FAXFILLFUNC is being used rather than an output buffer (fixes issue #649)
  * tiff2pdf: Check TIFFTAG_TILELENGTH and TIFFTAGTILEWIDTH (fixes issue #650)
  * tiff2pdf: check h_samp and v_samp for range 1 to 4 to avoid division by zero.
    Fixes issue #654
  * tiff2pdf: avoid null pointer dereference. (fixes issue #741)
  * Improve non-secure integer overflow check (comparison of division result with
    multiplicant) at compiler optimisation in tiffcp, rgb2ycbcr and tiff2rgba.
    Fixes issue #546
  * tiff2rgba: fix some "a partial expression can generate an overflow before it is
    assigned to a broader type" warnings. (fixes issue #682)
  * tiffdither/tiffmedian: Don't skip the first line of the input image. (fixes issue #703)
  * tiffdither: avoid out-of-bounds read identified in issue #733
  * tiffmedian: error out if TIFFReadScanline() fails (fixes issue #707)
  * tiffmedian: close input file. (fixes issue #735)
  * thumbail: avoid potential out of bounds access (fixes issue #715)
  * tiffcrop: close open TIFF files and release allocated buffers before exiting in case
    of error to avoid memory leaks. (fixes issue #716)
  * tiffcrop: fix double-free and memory leak exposed by issue #721
  * tiffcrop: avoid buffer overflow. (fixes issue #740)
  * tiffcrop: avoid nullptr dereference. (fixes issue #734)
  * tiffdump: Fix coverity scan issue CID 1373365: Passing tainted expression *datamem
    to PrintData, which uses it as a divisor or modulus.
  * tiff2ps: check return of TIFFGetFiled() for TIFFTAG_STRIPBYTECOUNTS and
    TIFFTAG_TILEBYTECOUNTS to avoid NULL pointer dereference. (fixes issue #718)
  * tiffcmp: fix memory leak when second file cannot be opened. (fixes issue #718 and issue #729)
  * tiffcp: fix setting compression level for lossless codecs. (fixes issue #730)
  * raw2tiff: close input file before exit (fixes issue #742)
  Tools changes:
  * tiffinfo: add a -W switch to warn about unknown tags.
  * tiffdither: process all pages in input TIFF file.
  Documentation:
  * TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation
    from 5 (LeftTop) to 8 (LeftBottom) in the raster.
  * TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
  * Update "Defining New TIFF Tags" description. (fixes issue #642)
  * Fix return type of TIFFReadEncodedTile()
  * Update the documentation to reflect deprecated typedefs.
  * TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image
    data and not for IFD data.
  * Update documentation on re-entrancy and thread safety.
  * Remove dead links to no more existing Awaresystems web-site.
  * Updating BigTIFF specification and some miscelaneous editions.
  * Replace some last links and remove last todos.
  * Added hints for correct allocation of TIFFYCbCrtoRGB structure and its
    associated buffers. (fixes issue #681)
  * Added chapter to "Using the TIFF Library" with links to handling multi-page TIFF
    and custom directories. (fixes issue #43)
  * update TIFFOpen.rst with the return values of mapproc and unmapproc. (fixes issue #12)
- Drop upstreamed patches:
  * tiff-4.7.0-test_directory.patch
  * tiff-CVE-2025-8176.patch
  * tiff-CVE-2025-8177.patch
  * tiff-4.7.0-bsc1243503.patch
  * tiff-CVE-2025-8534.patch
  * tiff-CVE-2025-9165.patch
  * tiff-CVE-2024-13978.patch
  * tiff-CVE-2025-8961.patch</changelog>
</package>
<package pkgid="d70af4842d1fe5d029f7650404f46882147b5d703dc8de910337b0e0900f431384ade7a658f60c97ca1c3ceb1faba4a40276991011325d6604fd09b6743a23c5" name="timezone-debuginfo" arch="aarch64">
  <version epoch="0" ver="2023c" rel="slfo.1.1_1.3"/>
  <changelog author="andreas.stieger@gmx.de" date="1660651200">- timezone update 2022c:
  * Work around awk bug
  * Improve tzselect on intercontinental Zones</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1664107200">- timezone update 2022d:
  * Palestine transitions are now Saturdays at 02:00
  * Simplify three Ukraine zones into one</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665489600">- timezone update 2022e:
  * Jordan and Syria switch from +02/+03 with DST to year-round +03</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1667044800">- timezone update 2022f:
  * Mexico will no longer observe DST except near the US border
  * Chihuahua moves to year-round -06 on 2022-10-30
  * Fiji no longer observes DST
  * Move links to 'backward'
  * In vanguard form, GMT is now a Zone and Etc/GMT a link
  * zic now supports links to links, and vanguard form uses this
  * Simplify four Ontario zones
  * Fix a Y2438 bug when reading TZif data
  * Enable 64-bit time_t on 32-bit glibc platforms
  * Omit large-file support when no longer needed
  * In C code, use some C23 features if available
  * Remove no-longer-needed workaround for Qt bug 53071</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1669809600">- timezone update 2022g:
  * In the Mexican state of Chihuahua, the border strip near the US
    will change to agree with nearby US locations on 2022-11-30.
    The strip's western part, represented by Ciudad Juárez, switches
    from -06 all year to -07/-06 with US DST rules, like El Paso, TX.
    The eastern part, represented by Ojinaga, will observe US DST next
    year, like Presidio, TX.
    A new Zone America/Ciudad_Juarez splits from America/Ojinaga.
  * Much of Greenland, represented by America/Nuuk, stops observing
    winter time after March 2023, so its daylight saving time becomes
    standard time.
  * Changes for pre-1996 northern Canada
  * Update to past DST transition in Colombia (1993), Singapore
    (1981)
  * timegm is now supported by default</changelog>
  <changelog author="badshah400@gmail.com" date="1674561600">- Install leapseconds data to %{_datadir}/zoneinfo/; this is now
  required by some scientific applications.</changelog>
  <changelog author="mliska@suse.cz" date="1678190400">- Add gcc13-fix.patch upsteam patch for GCC 13 compiler.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679572800">- timezone update 2023a:
  * Egypt now uses DST again, from April through October.
  * This year Morocco springs forward April 23, not April 30.
  * Palestine delays the start of DST this year.
  * Much of Greenland still uses DST from 2024 on.
  * America/Yellowknife now links to America/Edmonton.
  * tzselect can now use current time to help infer timezone.
  * The code now defaults to C99 or later.
- Refresh tzdata-china.diff
- Remove upstreamed patch gcc13-fix.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679659200">- timezone update 2023b:
  * In 2023 Lebanon springs forward April 20/21 not March 25/26</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680091200">- timezone update 2023c:
  * Reverts changes for 2023 Lebanon DST change to 2023a data</changelog>
</package>
<package pkgid="1f123ce904641e76eac2bb501077178f654f804eee2cb81bb18f01225d989f557623a7d27bbe39422de0cb94304452e12a27f8431598f4ebffa0a1c1cabb0c0a" name="timezone-debugsource" arch="aarch64">
  <version epoch="0" ver="2023c" rel="slfo.1.1_1.3"/>
  <changelog author="andreas.stieger@gmx.de" date="1660651200">- timezone update 2022c:
  * Work around awk bug
  * Improve tzselect on intercontinental Zones</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1664107200">- timezone update 2022d:
  * Palestine transitions are now Saturdays at 02:00
  * Simplify three Ukraine zones into one</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665489600">- timezone update 2022e:
  * Jordan and Syria switch from +02/+03 with DST to year-round +03</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1667044800">- timezone update 2022f:
  * Mexico will no longer observe DST except near the US border
  * Chihuahua moves to year-round -06 on 2022-10-30
  * Fiji no longer observes DST
  * Move links to 'backward'
  * In vanguard form, GMT is now a Zone and Etc/GMT a link
  * zic now supports links to links, and vanguard form uses this
  * Simplify four Ontario zones
  * Fix a Y2438 bug when reading TZif data
  * Enable 64-bit time_t on 32-bit glibc platforms
  * Omit large-file support when no longer needed
  * In C code, use some C23 features if available
  * Remove no-longer-needed workaround for Qt bug 53071</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1669809600">- timezone update 2022g:
  * In the Mexican state of Chihuahua, the border strip near the US
    will change to agree with nearby US locations on 2022-11-30.
    The strip's western part, represented by Ciudad Juárez, switches
    from -06 all year to -07/-06 with US DST rules, like El Paso, TX.
    The eastern part, represented by Ojinaga, will observe US DST next
    year, like Presidio, TX.
    A new Zone America/Ciudad_Juarez splits from America/Ojinaga.
  * Much of Greenland, represented by America/Nuuk, stops observing
    winter time after March 2023, so its daylight saving time becomes
    standard time.
  * Changes for pre-1996 northern Canada
  * Update to past DST transition in Colombia (1993), Singapore
    (1981)
  * timegm is now supported by default</changelog>
  <changelog author="badshah400@gmail.com" date="1674561600">- Install leapseconds data to %{_datadir}/zoneinfo/; this is now
  required by some scientific applications.</changelog>
  <changelog author="mliska@suse.cz" date="1678190400">- Add gcc13-fix.patch upsteam patch for GCC 13 compiler.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679572800">- timezone update 2023a:
  * Egypt now uses DST again, from April through October.
  * This year Morocco springs forward April 23, not April 30.
  * Palestine delays the start of DST this year.
  * Much of Greenland still uses DST from 2024 on.
  * America/Yellowknife now links to America/Edmonton.
  * tzselect can now use current time to help infer timezone.
  * The code now defaults to C99 or later.
- Refresh tzdata-china.diff
- Remove upstreamed patch gcc13-fix.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679659200">- timezone update 2023b:
  * In 2023 Lebanon springs forward April 20/21 not March 25/26</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680091200">- timezone update 2023c:
  * Reverts changes for 2023 Lebanon DST change to 2023a data</changelog>
</package>
<package pkgid="8b6c4ffb4cc5682ccc15fe269c9f603fae810c1790a20002fbfbd5cb89eb7cb6c2bb7a48764662b087df86991ff1f2c8acc93608e62ed450f480f50d1f212a61" name="tpm-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9.2" rel="slfo.1.1_1.2"/>
  <changelog author="meissner@suse.com" date="1339502400">- Updated to 1.3.8
  - bugfixes
  - pcr/nvram sealing options</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412251200">- Remove a number of unused build requires, probably copy/paste
  error, never used.</changelog>
  <changelog author="mpluskal@suse.com" date="1427976000">- Cleanup spec file with spec-cleaner
- Remove tpm-tools-rpmlintrc
- Use automake and autoconf as recomended by upstream
- Split library, devel adn pkcs11 package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434715200">- Do not use -Werror.</changelog>
  <changelog author="mailaender@opensuse.org" date="1483272000">- Update to version 1.3.9</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- updated to 1.3.9.1 (FATE#321450)
  - bugfixes after openssl 1.1 porting</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1510228800">- 0001-Fix-build-against-OpenSSL-1.1.0.patch: fix openssl 1.1.0 build in the
  P11 code. Upstream has not reacted to a pull request to fix this for some
  months now. This is my own patch (that doesn't violate C89 declaration rules
  and is backward compatible to openssl. 1.0.x)).
  For comparison see: https://sourceforge.net/p/trousers/tpm-tools/merge-requests/2/</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1614772800">- upgrade to minor version 1.3.9.2:
  - upstream now provide openssl 1.1 compatibility on their own
- dropped 0001-Fix-build-against-OpenSSL-1.1.0.patch since the tarbal is now
  compatible.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1633435200">- fix undefined and binary data being output in the tpm_version command
  (bsc#1114793)
  - add 0001-tpm_version-avoid-outputting-NULL-bytes-from-tpmVend.patch
  - add 0001-tpm_version-avoid-outputting-undefined-data-on-stder.patch</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- changed source url to https</changelog>
</package>
<package pkgid="a93916fbfc6707dd1570418bdb1ab687e2bea97dd5c5b2e626f1c5b08a8867c70eeb4d03939e0087b37d84b4f88ee2885798e70d4f72ef43de62ec3254265d2f" name="tpm-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.9.2" rel="slfo.1.1_1.2"/>
  <changelog author="meissner@suse.com" date="1339502400">- Updated to 1.3.8
  - bugfixes
  - pcr/nvram sealing options</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412251200">- Remove a number of unused build requires, probably copy/paste
  error, never used.</changelog>
  <changelog author="mpluskal@suse.com" date="1427976000">- Cleanup spec file with spec-cleaner
- Remove tpm-tools-rpmlintrc
- Use automake and autoconf as recomended by upstream
- Split library, devel adn pkcs11 package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434715200">- Do not use -Werror.</changelog>
  <changelog author="mailaender@opensuse.org" date="1483272000">- Update to version 1.3.9</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- updated to 1.3.9.1 (FATE#321450)
  - bugfixes after openssl 1.1 porting</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1510228800">- 0001-Fix-build-against-OpenSSL-1.1.0.patch: fix openssl 1.1.0 build in the
  P11 code. Upstream has not reacted to a pull request to fix this for some
  months now. This is my own patch (that doesn't violate C89 declaration rules
  and is backward compatible to openssl. 1.0.x)).
  For comparison see: https://sourceforge.net/p/trousers/tpm-tools/merge-requests/2/</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1614772800">- upgrade to minor version 1.3.9.2:
  - upstream now provide openssl 1.1 compatibility on their own
- dropped 0001-Fix-build-against-OpenSSL-1.1.0.patch since the tarbal is now
  compatible.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1633435200">- fix undefined and binary data being output in the tpm_version command
  (bsc#1114793)
  - add 0001-tpm_version-avoid-outputting-NULL-bytes-from-tpmVend.patch
  - add 0001-tpm_version-avoid-outputting-undefined-data-on-stder.patch</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- changed source url to https</changelog>
</package>
<package pkgid="6b764112ab54b9b675496bc7fd74ca8cc6a7eb3e5c3fae1fe92be372c2a022bcb71331cae28eff4230557b8e04e12bbfc2287f820b513ae79eb8f4da8bd3e224" name="tpm2-0-tss-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1.0" rel="slfo.1.1_1.3"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Update to 3.2.0
  + Fixed
  * FAPI: fix curl_url_set call
  * FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
  * Fix buffer upcast leading to misalignment
  * Fix check whether SM3 is available
  * Update git.mk to support R/O src-dir
  * Fixed file descriptor leak when tcti initialization failed.
  * 32 Bit builds of the integration tests.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * Enable creation of tss group and user on systems with busybox
    for fapi.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * A leak in fapi crypto with ossl3 was fixed.
  * Add initial camelia support to FAPI
  * Fix tests of fapi PCR
  * Fix tests of ACT functionality if not supported by pTPM
  * Fix compiler (unused) warning when building without debug
    logging
  * Fix leaks in error cases of integration tests
  * Fix memory leak after ifapi_init_primary_finish failed
  * Fix double-close of stream in FAPI
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Make scripts compatible with non-posix shells where test does
    not know -a and -o.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs
  * Added support for SM2, SM3 and SM4.
  * Added support for OpenSSL 3.0.0.
  * Added authPolicy field to the TPMU_CAPABILITIES union.
  * Added actData field to the TPMU_CAPABILITIES union.
  * Added TPM2_CAP_AUTH_POLICIES
  * Added TPM2_CAP_ACT constants.
  * Added updates to the marshalling and unmarshalling of the
    TPMU_CAPABILITIES union.
  * Added updated to the FAPI serializations and deserializations of
    the TPMU_CAPABILITIES union and associated types.
  * Add CODE_OF_CONDUCT
  * tcti-mssim and tcti-swtpm gained support for UDX communication
  * Missing constant for TPM2_RH_PW
  + Removed
  * Removed support for OpenSSL &lt; 1.1.0.
  * Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
    as deprecated.
  * Those were errorous typedefs that are not use and not useful. So
    we will remove this with 3.3
  * Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
- Update to 3.1.1
  + Fixed
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated
    with Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the
    storage hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy
    secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is
    empty.
  + Added
  * Add additional IFX root CAs</changelog>
  <changelog author="aplanas@suse.com" date="1657540800">- Revert "Add version the configuration file tpm2-tss-fapi.conf"
  This generate whitelist problems in rpmlint.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.
  This patch is not yet part of any upstream git tag.</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was
  already merged upstream
- Update to 4.0.1
  + Fixed:
  * A buffer overflow in tss2-rc as CVE-2023-22745.
- Update to 4.0.0
  + Fixed:
  * tcti-ldr: Use heap instead of stack when tcti initialize
  * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with
    ESYS_TR_NONE.
  * Conditionally check user/group manipulation commands.
  * Store VERSION into the release tarball.
  * When using DESTDIR for make einstall, do not invoke
    systemd-sysusers and systemd-tmpfiles.
  * esys_iutil: fix possible NPD.
  * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea
    handle and not as parameter one, this affected the contents of
    cpHash.
  * esys: fix allow usage of HMAC sessions for
    Esys_TR_FromTPMPublic.
  * fapi: fix usage of policy_nv with a TPM nv index.
  * linking tcti for libtpms against tss2-tctildr. It should be
    linked against tss2-mu.
  * build: Remove erroneous trailing comma in linker option. Bug
    [#2391].
  * fapi: fix encoding of complex tpm2bs in authorize nv,
    duplication select and policy template policies. Now the complex
    and TPMT or TPMS representations can be used. Bug #2383
  * The error message for unsupported FAPI curves was in hex without
    a leading 0x, make it integer output to clarify.
  * Documentation that had various scalar out pointers as "callee
    allocated".
  * test: build with opaque FILE structure like in musl libc.
  * Transient endorsement keys were not recreated according to the
    EK credential profile.
  * Evict control for a persistent EK failed during provisioning if
    an auth value for the storage hierarchy was set.
  * The authorization of the storage hierarchy is now added. Fixes
    FAPI: Provisioning error if an auth value is needed for the
    storage hierarchy #2438.
  * Usage of a second profile in a path was not possible because the
    default profile was always used.
  * The setting of an empty auth value for Fapi_Provision was fixed.
  * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the
    field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS
    2.0 JSON Data Types and Policy Language Specification". Rename
    to hashAlg but preserve support for reading keyPEMhashAlg for
    backwards compatibility.
  * fapi: PolicySecret did not work with keys as secret object.
  * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg
    ESAPI functions.
  * tests: esys-pcr-auth-value.int moved to destructive tests.
  * FAPI: Fix double free if keystore is corrupted.
  * Marshaling of TPMU_CAPABILITIES data, only field
    intelPttProperty was broken before.a
  * Spec deviation in Fapi_GetDescription caused description to be
    NULL when it should be empty string. This is API breaking but
    considered a bug since it deviated from the FAPI spec.
  * FAPI: undefined reference to curl_url_strerror when using curl
    less than 7.80.0.
  * FAPI: Fixed support for EK templates in NV inidices per the
    spec, see #2518 for details.
  * FAPI: fix NPD in ifapi_curl logging.
  * FAPI: Improve documentation fapi-profile
  * FAPI: Fix CURL HTTP handling.
  * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in
    keystore.
  + Added:
  * TPM version 1.59 support.
  * ci: ubuntu-22.04 added.
  * mbedTLS 3.0 is supported by ESAPI.
  * Add CreationHash to JSON output for usage between applications
    not using the FAPI keystore, like command line tools.
  * Reduced code size for SAPI.
  * Support for Runtime Switchable ESAPI Crypto Backend via
    Esys_SetCryptoCallbacks.
  * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4
    Rev. 3, 2021 for the low and high address range of EK templates.
  * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into
    the various bit fields.
  * FAPI support for P_ECC384 profile.
  * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human
    readable error from a TSS2_RC_INFO returned by
    Tss2_RC_DecodeInfo
  * tcti: Generic SPI driver, implementors only need to connect to
    acquire/release, transmit/receive, and sleep/timeout functions.
  * FAPI: Add event logging for Firmware and IMA Events. See #2170
    for details.
  * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being
    reflected across profiles.
  * FAPI: Allow keyedhash keys in PolicySigned.
  * ESAPI: Support sha512 for mbedtls crypto backend.
  * TPM2B_MAX_CAP_BUFFER and mu routines
  * vendor field to TPMU_CAPABILTIIES
  * FAPI: support for PolicyTemplate
  + Changed
  * libmu soname from 0:0:0 to 0:1:0.
  * tss2-sys soname from 1:0:0 to 1:1:0
  * tss2-esys: from 0:0:0 to 0:1:0
  * FAPI ignores vendor properties on Fapi_GetInfo
  * FAPI Event Logging JSON format, See #2170 for details.
  + Removed
  * Dead struct TPMS_ALGORITHM_DESCRIPTION
  * Dead field intelPttProperty from TPMU_CAPABILITIES
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
  * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal</changelog>
  <changelog author="william.brown@suse.com" date="1690200000">- Require openssl-3 over openssl-1 to assist migration of applications
  to newer openssl-3.</changelog>
  <changelog author="lnussel@suse.com" date="1701086400">- libtss2-fapi1 requires system-user-tss for tmpfile creation</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702728000">- Move tmpfiles config to different package:
  * tmpfiles_create was being called with bad input (version ?)
  * it avoids breaking SLPP for libtss2-fapi1 (hence the prior
    warning in spec)
- tss sysusers requires should be pre not post</changelog>
  <changelog author="gmbr3@opensuse.org" date="1705147200">- Fix tmpfiles %ghost file names</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 4.1:
  + Security
  - Fixed CVE-2024-29040 (bsc#1223690)
  + Fixed
  - fapi: Fix length check on FAPI auth callbacks
  - mu: Correct error message for errors
  - tss2-rc: fix unknown laer handler dropping bits.
  - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
  - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
  - build: fix build fail after make clean.
  - mu: Fix unneeded size check in TPM2B unmarshaling.
  - fapi: Fix missing parameter encryption.
  - build: Fix failed build with --disable-vendor.
  - fapi: Fix flush of persistent handles.
  - fapi: Fix test provisioning with template with self generated certificate disabled.
  - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
  - fapi: Revert pcr extension for EV_NO_ACTION events.
  - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
  - fapi: Fix segfault caused by wrong allocation of pcr policy.
  - esys: Fix leak in Esys_EvictControl for persistent handles.
  - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
  - esys: Add reference counting for Esys_TR_FromTPMPublic.
  - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
  - fapi: fix usage of self signed certificates in TPM.
  - fapi: Usage of self signed certificates.
  - fapi: A segfault after the error handling of non existing keys.
  - fapi: Fix several leaks.
  - fapi: Fix error handling for policy execution.
  - fapi: Fix usage of persistent handles (should not be flushed)
  - fapi: Fix test provisioning with template (skip test without self generated certificate).
  - fapi: Fix pcr extension for EV_NO_ACTION
  - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
  - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
  - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
  - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
  - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
  - fapi: Fix possible null pointer dereferencing in Fapi_List.
  - sys: Fix size check in Tss2_Sys_GetCapability.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  - esys: fix unchecked return value in esys crypto.
  - fapi: Fix wrong usage of local variable in provisioning.
  - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
  - fapi: Fix possible out of bound array access in IMA parser.
  - tcti device: Fix possible unmarshalling from uninitialized variable.
  - fapi: Fix error checking authorization of signing key.
  - fapi: Fix cleanup of policy sessions.
  - fapi: Eventlog H-CRTM events and different localities.
  - fapi: Fix missing synchronization of quote and eventlog.
  - faii: Fix invalid free in Fapi_Quote with empty eventlog.
  + Added
  - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
  - mbedtls: add sha512 hmac.
  - fapi: Enable usage of external keys for Fapi_Encrypt.
  - fapi: Support download of AMD certificates.
  - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
  - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
  - rc: New TPM return codes added.
  - fapi: Further Nuvoton certificates added.
  - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
  - tcti: Add '/dev/tcm0' to default conf
  - fapi: New Nuvoton certificates added.
  - esys: Fix leak in Esys_TR_FromTPMPublic.
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).
- tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.
- add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM
  connected directly via SPI.
- add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a
  TPM connected directly via I2C.</changelog>
</package>
<package pkgid="1cead17066cb6ae2d60d915685dc7c8595ffcf52f44760043f5c8fac54f92253490eed18229d9c46190ef5666d0950ae0ce2e259e2a1da22f2fe948f1c661e64" name="tpm2-tss-engine-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="slfo.1.1_1.2"/>
  <changelog author="jsikes@suse.de" date="1551614400">- Update to version 0+git20190222.cef2c43:
  * build: install existing man pages even if pandoc is not available
  * Updated organizational files in preparation for release
  * Add configure switch for unit and integration tests
  * Silence clang warning on field initializers
  * Fix parallel connections to TPM.
  * Fix segfault on non-null auth'd persistent keys.
  * Update tests to also run on physical TPMs
  * build: install aclocal files
  * build: update for ax_code_coverage.m4 version 2019.01.06
  * ECDSA truncation and s_server test</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576843200">- move *.so files into the main package, not -devel. libtpm2tss.so is actually
  the engine library itself, not a symlink. It's needed to actually use the
  package. tpm2tss.so is probably a (backwards) compatiblity symlink. Both are
  not intended for linking and therefore not suitable for the -devel package.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1578398400">- Update to stable upstream version v1.0.1:
  * Release v1.0.1
  * test: use tpm2-tools 3.X
  * Tests: Fix for latest tools
  * Tests: Use long parameters for tpm2-tools
  * test: migrate tpm2_create option from -A to -b
  * build: link against tss2-mu
  * Release v1.0.0
  * Release v1.0.0-rc3
  * Docu: Update Install.md
  * Updates for 1.0.0-rc2
  * TESTS: Add test for client auth
  * Bump required version of tpm2-tss to &gt;=2.2.2
  * Build: Bump required tpm2-tss to 2.2
  * Update for v1.0.0-rc1
  * Dead code removal
- This fixes the build against tpm2-0-tss version &gt;= 2.3 (bsc#1160123)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1578657600">- switch the _service approach from using tar_scm to using download_files. We
  need to use the actual release tarball which contains the generated man
  pages. The reason is that on SLE we can't generate the man pages using
  pandoc, since pandoc is not available on SLE.
- for the same reason make the pandoc BuildRequires conditional for openSUSE
  vs. SLE.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1578657601">- remove the _service file as requested in declined OBS sr#762653.
  download_files seems to work also without the _service file.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1587643200">- remove conditional pandoc BuildRequires for openSUSE. Nothing much is gained
  from rebuilding the man pages. This shall help synchronizing SLE and
  openSUSE package builds. (jsc#SLE-12137).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1614772800">- Update to upstream version 1.1.0:
  * Added:
  - Configure option for ptpm tests
  - Configure script AX_CHECK_ENABLE_DEBUG
  - Option for setting tcti on executable
  - TCTI-env variable used by default
  - Support for parent key passwords
  - openssl.cnf sample file
  * Changed:
  - Fix several build system, autotools and testing related issues
    Now adhere to CFLAGS conventions
  - Include pkg-config dependecy on libtss2-mu in order to work with tpm2-tss 2.3
  - Enables parallel testing of integration tests:
    Make integration tests use TPM simulator; instead of first TPM it finds
    Use of different port numbers for TCP based tests
  - Fix EC param info (using named curve format)
  - Use tpm2-tools 4.X stable branch for integration tests
  - Use libtss2-tctildr.so instead of custom code for tcti setup
  - Fix manpages for -P/--parent option and correct engine name
  - Fix TCTI env variable handling
  - Set parent handle to OWNER</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1614772801">- pass --disable-defaultflags to avoid breakage of our gcc-PIE profile (-&gt;
  resulted in non-position-independent executable) (bsc#1183895).</changelog>
  <changelog author="pmonreal@suse.com" date="1675684800">- Update to upstream version 1.2.0:
  * Fixed:
  - Updated minimal version of tpm2-tss to 2.4.x
  - Fix encoding of emptyauth
  - Fix some memory leaks
  - Parent handle issues with signed representation by switching
    parent handle to BIGNUM.
  - Fixed RSA_NO_PADDING modes with OpenSSL 1.1.1
  - Fixed autogen (bootstrap) call from release package by
    embedding VERSION file.
  * Added:
  - Use of restricted keys for signing
  - StirRandom
  - Run tests using swtpm
  - The ability to import key blobs from things like the
    tpm2-tools project.
  - Compatibility with openssl &gt;=1.1.x
  - Support for ECDH
  - QNX support.
  - Only set -Werror for non-release builds.
  - Additional checks on TPM responses
  - CODE_OF_CONDUCT
  - SECURITY reporting instructions</changelog>
  <changelog author="fcrozat@suse.com" date="1685620800">- Fix download url and add gpg signature for tarball.</changelog>
</package>
<package pkgid="ce9695ad962667c264ee615ad5536c2f8d40a510321401a39490e095e67729f5b04b0305577fd0087416bcda3af8dd743cc59daedadf68c82c0a9ae4de368007" name="tpm2-tss-engine-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="slfo.1.1_1.2"/>
  <changelog author="jsikes@suse.de" date="1551614400">- Update to version 0+git20190222.cef2c43:
  * build: install existing man pages even if pandoc is not available
  * Updated organizational files in preparation for release
  * Add configure switch for unit and integration tests
  * Silence clang warning on field initializers
  * Fix parallel connections to TPM.
  * Fix segfault on non-null auth'd persistent keys.
  * Update tests to also run on physical TPMs
  * build: install aclocal files
  * build: update for ax_code_coverage.m4 version 2019.01.06
  * ECDSA truncation and s_server test</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576843200">- move *.so files into the main package, not -devel. libtpm2tss.so is actually
  the engine library itself, not a symlink. It's needed to actually use the
  package. tpm2tss.so is probably a (backwards) compatiblity symlink. Both are
  not intended for linking and therefore not suitable for the -devel package.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1578398400">- Update to stable upstream version v1.0.1:
  * Release v1.0.1
  * test: use tpm2-tools 3.X
  * Tests: Fix for latest tools
  * Tests: Use long parameters for tpm2-tools
  * test: migrate tpm2_create option from -A to -b
  * build: link against tss2-mu
  * Release v1.0.0
  * Release v1.0.0-rc3
  * Docu: Update Install.md
  * Updates for 1.0.0-rc2
  * TESTS: Add test for client auth
  * Bump required version of tpm2-tss to &gt;=2.2.2
  * Build: Bump required tpm2-tss to 2.2
  * Update for v1.0.0-rc1
  * Dead code removal
- This fixes the build against tpm2-0-tss version &gt;= 2.3 (bsc#1160123)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1578657600">- switch the _service approach from using tar_scm to using download_files. We
  need to use the actual release tarball which contains the generated man
  pages. The reason is that on SLE we can't generate the man pages using
  pandoc, since pandoc is not available on SLE.
- for the same reason make the pandoc BuildRequires conditional for openSUSE
  vs. SLE.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1578657601">- remove the _service file as requested in declined OBS sr#762653.
  download_files seems to work also without the _service file.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1587643200">- remove conditional pandoc BuildRequires for openSUSE. Nothing much is gained
  from rebuilding the man pages. This shall help synchronizing SLE and
  openSUSE package builds. (jsc#SLE-12137).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1614772800">- Update to upstream version 1.1.0:
  * Added:
  - Configure option for ptpm tests
  - Configure script AX_CHECK_ENABLE_DEBUG
  - Option for setting tcti on executable
  - TCTI-env variable used by default
  - Support for parent key passwords
  - openssl.cnf sample file
  * Changed:
  - Fix several build system, autotools and testing related issues
    Now adhere to CFLAGS conventions
  - Include pkg-config dependecy on libtss2-mu in order to work with tpm2-tss 2.3
  - Enables parallel testing of integration tests:
    Make integration tests use TPM simulator; instead of first TPM it finds
    Use of different port numbers for TCP based tests
  - Fix EC param info (using named curve format)
  - Use tpm2-tools 4.X stable branch for integration tests
  - Use libtss2-tctildr.so instead of custom code for tcti setup
  - Fix manpages for -P/--parent option and correct engine name
  - Fix TCTI env variable handling
  - Set parent handle to OWNER</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1614772801">- pass --disable-defaultflags to avoid breakage of our gcc-PIE profile (-&gt;
  resulted in non-position-independent executable) (bsc#1183895).</changelog>
  <changelog author="pmonreal@suse.com" date="1675684800">- Update to upstream version 1.2.0:
  * Fixed:
  - Updated minimal version of tpm2-tss to 2.4.x
  - Fix encoding of emptyauth
  - Fix some memory leaks
  - Parent handle issues with signed representation by switching
    parent handle to BIGNUM.
  - Fixed RSA_NO_PADDING modes with OpenSSL 1.1.1
  - Fixed autogen (bootstrap) call from release package by
    embedding VERSION file.
  * Added:
  - Use of restricted keys for signing
  - StirRandom
  - Run tests using swtpm
  - The ability to import key blobs from things like the
    tpm2-tools project.
  - Compatibility with openssl &gt;=1.1.x
  - Support for ECDH
  - QNX support.
  - Only set -Werror for non-release builds.
  - Additional checks on TPM responses
  - CODE_OF_CONDUCT
  - SECURITY reporting instructions</changelog>
  <changelog author="fcrozat@suse.com" date="1685620800">- Fix download url and add gpg signature for tarball.</changelog>
</package>
<package pkgid="352694fe624dbefa7572ce02bba1db1758ede7b6b7c2991c85ab3a128f083e83b6e45afc80760fd8987b33fa268c7c0f3aba777e552694636908324d9e500a6e" name="tpm2.0-abrmd-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="slfo.1.1_2.1"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 2.4.0
  + remover syslog deprecation warning (bsc#1185154)
  + cover update to 2.3.3 (jsc#SLE-17366)
  + contains reload fix (bsc#1166936)
  + fix tcti loading using short / long names (bsc#1159176)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1649073600">- dbus-access.patch: restrict D-Bus access to tpm2-abrmd to members of the tss
  group (bsc#1197532). This prevents arbitrary users from meddling with TPM
  state and thus potential denial-of-service vectors.</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Version 2.4.1
  + Added
    Contributor Covenant Code of Conduct.
  + Fixed
  * superflous warning messages about tcti status.
    WARNING **: 11:00:56.205: tcti_conf before: "(null)"
    WARNING **: 11:00:56.205: tcti_conf after: "mssim"
  * GCC 11 build error: error: argument 2 of __atomic_load’ discards
    'volatile' qualifier
  * Initialize gerror pointer variable to NULL to fix use of
    unitialized memory and segfault.
  * Updated missing defaults in manpage.
  * Port CI to composite actions in tpm2-software/ci.
  + Removed
    Dependency on 'which' utility in configure.ac.
    ubuntu-16.04 from CI.</changelog>
  <changelog author="aplanas@suse.com" date="1670500800">- Version 3.0.0
  + Fixed
  * A bug in special command processing in TPM2_GetCapability when
    an audit session is in use cuased tpm2-abrmd to abort.
  + Added
  * New SELinux interfaces for communication with keylime
  + Changed
  * DBUS permissions in tpm2-abrmd.conf to match the in-kernel RM,
    ie /dev/tpmrm0, permissions. Now users MUST be in the tss group
    to send to tpm2-abrmd over DBUS.
- Drop dbus-access.patch (merged in PR#805)</changelog>
  <changelog author="aplanas@suse.com" date="1684843200">- Cover ALP via the %{suse_version} macro</changelog>
  <changelog author="jsegitz@suse.com" date="1722513600">- Update harden_tpm2-abrmd.service.patch to contain necessary SELinux
  changes (bsc#1209831)</changelog>
  <changelog author="cathy.hu@suse.com" date="1723550400">- Fix SELinux sbin/bin merge (bsc#1229047)
  1229047-fix-bin-sbin-selinux.patch
  Can be dropped once https://github.com/tpm2-software/tpm2-abrmd/pull/846
  is merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1742990400">- also enable SELinux features for SLE-16 (bsc#1240070). On SLE-16 abrmd does
  not work, because the SELinux configuration is missing and thus its
  operations are denied. Include SLE-16 to fix this.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1752840000">- sync with Factory package to fix SELinux issues in SLE Micro 6.1 (bsc#1246460)</changelog>
</package>
<package pkgid="91518c9a02f8225b255b8ee7870ab2895bf7038a856db8d868e493614d8e19be4d77e3df7d0f76dce23ab7cabac044494e9018d6316790d15aa45f8b36ac82fa" name="tpm2.0-abrmd-debugsource" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="slfo.1.1_2.1"/>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 2.4.0
  + remover syslog deprecation warning (bsc#1185154)
  + cover update to 2.3.3 (jsc#SLE-17366)
  + contains reload fix (bsc#1166936)
  + fix tcti loading using short / long names (bsc#1159176)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1649073600">- dbus-access.patch: restrict D-Bus access to tpm2-abrmd to members of the tss
  group (bsc#1197532). This prevents arbitrary users from meddling with TPM
  state and thus potential denial-of-service vectors.</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Version 2.4.1
  + Added
    Contributor Covenant Code of Conduct.
  + Fixed
  * superflous warning messages about tcti status.
    WARNING **: 11:00:56.205: tcti_conf before: "(null)"
    WARNING **: 11:00:56.205: tcti_conf after: "mssim"
  * GCC 11 build error: error: argument 2 of __atomic_load’ discards
    'volatile' qualifier
  * Initialize gerror pointer variable to NULL to fix use of
    unitialized memory and segfault.
  * Updated missing defaults in manpage.
  * Port CI to composite actions in tpm2-software/ci.
  + Removed
    Dependency on 'which' utility in configure.ac.
    ubuntu-16.04 from CI.</changelog>
  <changelog author="aplanas@suse.com" date="1670500800">- Version 3.0.0
  + Fixed
  * A bug in special command processing in TPM2_GetCapability when
    an audit session is in use cuased tpm2-abrmd to abort.
  + Added
  * New SELinux interfaces for communication with keylime
  + Changed
  * DBUS permissions in tpm2-abrmd.conf to match the in-kernel RM,
    ie /dev/tpmrm0, permissions. Now users MUST be in the tss group
    to send to tpm2-abrmd over DBUS.
- Drop dbus-access.patch (merged in PR#805)</changelog>
  <changelog author="aplanas@suse.com" date="1684843200">- Cover ALP via the %{suse_version} macro</changelog>
  <changelog author="jsegitz@suse.com" date="1722513600">- Update harden_tpm2-abrmd.service.patch to contain necessary SELinux
  changes (bsc#1209831)</changelog>
  <changelog author="cathy.hu@suse.com" date="1723550400">- Fix SELinux sbin/bin merge (bsc#1229047)
  1229047-fix-bin-sbin-selinux.patch
  Can be dropped once https://github.com/tpm2-software/tpm2-abrmd/pull/846
  is merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1742990400">- also enable SELinux features for SLE-16 (bsc#1240070). On SLE-16 abrmd does
  not work, because the SELinux configuration is missing and thus its
  operations are denied. Include SLE-16 to fix this.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1752840000">- sync with Factory package to fix SELinux issues in SLE Micro 6.1 (bsc#1246460)</changelog>
</package>
<package pkgid="303cf7770edf04ccf93c5e7db8f0eaef9bc11d87b0fcf5fa7b17361d20b6bf428bc8ab26a2c401f55bed54c4cbc316897de14ef570b6049b1e853b596a200b78" name="tpm2.0-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.7" rel="slfo.1.1_1.3"/>
  <changelog author="aplanas@suse.com" date="1657195200">- Disable LTO for 5.2, to fix tpm2_makecredential with "-T none"
  (bsc#1201291)</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Add missing dependencies for testing.
- Add patch to properly skip getekcertificate if curl is missing
  0001-tests-getekcertificate.sh-Skip-the-test-if-curl-is-n.patch</changelog>
  <changelog author="aplanas@suse.com" date="1657713600">- Add patch to fix leakage of TPM simulator process
  add_missing_shut_down_call_on_cleanup.patch
- Add patch to fix fapi-quote-verify[_ecc].sh test
  fix_check_of_qualifying_data.patch
- Enable test execution by default</changelog>
  <changelog author="aplanas@suse.com" date="1657800000">- Disable tests in some architectures (ppc, ppc64, s390x)</changelog>
  <changelog author="aplanas@suse.com" date="1670500800">- Update to version 5.4
  + Added:
  * tpm2_policyrestart: Added option --cphash to output the cpHash
    for the command PM2_CC_PolicyRestart.
  * tpm2_policynvwritten: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyNvWritten.
  * tpm2_policylocality: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyLocality.
  * tpm2_policycountertimer: Added option --cphash to output the
    cpHash for the command TPM2_CC_PolicyCounterTimer.
  * tpm2_policycommandcode: Added option --cphash to output the
    cpHash for the command TPM2_CC_PolicyCommandCode.
  * tpm2_policypassword: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyPassword.
  * tpm2_policyauthvalue: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyAuthValue.
  * tpm2_policyauthorize: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyAuthorize.
  * tpm2_print: Support printing serialized ESYS_TR's
  * tpm2_create: Add a clarifying message to usage of -c when
    TPM2_CreateLoaded is not supported.
  * tpm2_getcap: Add support for vendor agnostic
    capabilites. Requires tpm2-tss version 4.0 and higher to enable.
  * Add a script, check_endorsement_cert.sh, to validate the
    endorsement certificate chain. It takes two inputs - A
    TPM2B_PUBLIC format EKpublic and a PEM format EKcertificate
    specified in that order as arguments.
- Update to version 5.3
  +  Features:
  * lib/tpm2_tool.c: add --help=no-man for tpm2 option. Prior to
    this change the tool parsed no-man as an unrecognized option and
    errored out. Now it lists all the available tool options.
  * tpm2_encodeobject: New tool to encode TPM2 object. It takes
    public and private portions of an object and encode them in a
    combined PEM form called tssprivkey used by tpm2-tss-engine and
    other applications.
  * Support alternative ECC curves for which default EK templates
    exist (NIST_P256, NIST_P384, NIST_P521, and SM2_P256).
  * tools/misc/tpm2_checkquote: add sm2 verification of signature.
  * crypto: support the TPM2_ECC_SM2_P256 curveID.
  * fapi: add new command to enable the use of fapi objects for tpm2
    tools. The new command tss2_gettpm2object was added. With this
    command context files which can be used for tpm2 tool commands
    can be created.
  * Support for sign and verify with sm2 algorithms.
  * tools/tpm2_startauthsession: add sym-algorithm argument for
    supported symmetric algorithm.
  * Attestation (certify, command audit, sessionaudit and quote):
    add scheme argument for supported signature schemes. This also
    enable support for SM signing.
  * tpm2_flushcontext: support all options at a time. Support the
  - t/-l/-s options all at once so folks don't have to call it
    multiple times.
  * tools/tpm2_nvread: add human readable output for NV content
    Enable parsing and YAML-style output for the different NV index
    types.
  * New event types in tpm2_eventlog:
    EV_EFI_PLATFORM_FIRMWARE_BLOB2, EV_EFI_HANDOFF_TABLES2,
    EV_EFI_VARIABLE_BOOT2
  * VERSION: add version file - Generate the version file with
    bootstrap and include in the DIST tarball so endusers can call
    autoreconf on a dist tarball which doesn't have git. This
    alleviates git describe errors on release tarballs in the
    autoreconf case.
  * import: support restricted parents - Support a restricted parent
    with an aes128cfb symmetric parameter.
  * tpm2_load - Added capability to load pem files in
    TSS2-Private-Key format for interoperability with
    tpm2-tss-engine, tpm2-openssl provider tpm2-pkcs11, and
    tpm2-pytss.
  * tpm2_print - Added capability to parse out and print the public
    portion of a TSS Private Key in the PEM format with the arg
    option TSSPRIVKEY_OBJ.
  * tpm2_loadexternal: Added support to tpm2_loadexternal for
    parsing and loading the public portion of a TSS2 Privkey PEM
    file. The path to the PEM file must be specified using the -r
    option while skipping the -G option for key type.
  * Support added for calculating cpHash, rpHash, sessions for
    parameter encryption and auditing in: tpm2_nvwrite,
    tpm2_nvcertify, tpm2_nvincrement, tpm2_nvwritelock,
    tpm2_nvreadlock, tpm2_nvundefine and tpm2_nvreadpublic.
  * Support added for calculating cpHash in: tpm2_clear,
    tpm2_dictionarylockout, tpm2_clearcontrol, tpm2_sign,
    tpm2_setprimarypolicy, tpm2_setclock, tpm2_rsadecrypt,
    tpm2_duplicate, tpm2_clockrateadjust, tpm2_createprimary,
    tpm2_quote, tpm2_policysecret, tpm2_policynv,
    tpm2_policyauthorizenv, tpm2_import, tpm2_hmac,
    tpm2_hierarchycontrol, tpm2_load, tpm2_gettime,
    tpm2_evictcontrol, tpm2_encryptdecrypt, tpm2_getpolicydigest,
    tpm2_loadexternal, tpm2_commit, tpm2_ecdhkeygen, tpm2_ecdhzgen,
    tpm2_ecephemeral, tpm2_geteccparameters, tpm2_flushcontext,
    tpm2_pcrallocate, tpm2_pcrevent, tpm2_pcrreset, tpm2_pcrread.
  * Support for using tcti=none for cpHash calculations to avoid
    invoking checks for active TPM in: tpm2_nvreadpublic,
    tpm2_nvundefine, tpm2_nvreadlock, tpm2_nvwritelock,
    tpm2_nvincrement, tpm2_nvcertify, tpm2_nvdefine, tpm2_nvwrite.
  + Known issue:
  * FAPI tools will not work on 32bit user-static qemu on 64bit host
    because readdir returns NULL. Follow the issue on
    https://gitlab.com/qemu-project/qemu/-/issues/263
  + Bug fixes:
  * tools/tpm2_pcrreset.c: fix build errors in 32bit systems.
  * Fix tssprivkey formatted PEM generation and load errors on 32
    bit systems.
  * CI: Add testing of 32bit systems with multiarch/qemu-user-static
    containers.
  * tools/tpm2_evictcontrol: fix for calls to Esys_TR_Close on bad
    handles.
  * tools/tpm2_nvextend: fix for ESYS_TR handle not being used in
    calculating the object name.
  * tools/tpm2_nvwrite, tools/tpm2_nvread: Policy authorization must
    be re-instantiated on each iteration of the read/ write when
    size exceeds the allowed operating size
    (TPM2_PT_NV_BUFFER_MAX). However, information on the compounded
    policies cannot be retrieved from the only policy digest read
    from the session and hence the session cannot be
    re-instantiated. To avoid this scenario only a single iteration
    is allowed when policy authorization is in use.
  * Fix argument parsing in tpm2_policylocality to fix an issue
    causing almost always to generate PolicyLocality(0). There was a
    logical inversion that caused almost any argument (including
    invalid ones) to be interpreted as zero, except “zero" would be
    interpreted as one.
  * test/fapi/fapi-quote-verify.sh Fix check of qualifying
    data. Because of a bug in Fapi_VerifyQuote the qualifying data
    was not checked correctly. Errors that were not recognized
    before occur now. The order of the tests was cleaned up and for
    every quote and verify quote now the correct combination of the
    qualifying data and quote info containing the nonce is used.
  * tpm2_nvdefine: set TPMA_NV_PLATFORMCREATE when authenticating
    with the platform hierarchy.
  * tools/tpm2_getekcertificate: fixed the url link to
    ekop.intel.com. There were two places where the fix was needed:
    o In the tool source code where a forward slash was always
    appended irrespective of it already being part of the link
    specified by the user and
    o In the integration test where curl tests the link to the
    ekop.intel.com backend. It now requires the full link to
    include the base64 encoded ek pub hash.
  * tools/tpm2_tool.c: Fix an issue where LOG_WARN is always
    displayed Despite setting the 'quiet' flag with -Q.
  * fapi: fix usage of parameter pcrLog for tss2_quote. pcrLog is an
    optional parameter. If pcrLog is not used as parameter currently
    the pcr log is still calculated in Fapi_Quote. To avoid this
    calculation a NULL pointer will be passed to Fapi_Quote if the
    parameter pcrLog is not passed. So tss2_quote can be executed
    for a user which has no access rights to the files with the
    system measurements.
  * import: fix bug on using scheme wherein if scheme is specified
    in the template, the openssl load functions clobber the scheme
    value and set it to TPM2_ALG_NULL.
  * tools/tpm2_sign and tpm2_verifysignature: fix sm2 sign and
    verifysignature bugs : (1.) sm2 sign could not get output
    signature. (2.) sm2 verify tss format signature failed.
  * lib/tpm2.c: added workaround for a system api bug where in the
    flush handle is erroneously placed in the handle area instead of
    the parameter area.
  * nvreadpublic: drop ntoh on attributes The attributes get
    marshalled to correct endianess by libmu and don’t need to be
    changed again.
  * Removing unused '-i' option from tpm2_print
  * tpm2_policyor: fix unallocated policy list The TPML_DIGEST
    policy list was calloc'd for some reason, however it could just
    be statically allocated in the context. The side effect is that
    when no options or arguments were given a NPD occured when
    checking the count of the policy list.
  * tools/tpm2_certify: fix man page for short options and add tests
    The short options for the signing-key-auth and
    certified-key-auth were swapped. The case fix in the man page
    makes it less intuitive but have to go through with the change
    so that we don't break any existing scripts. This change does
    not affect the long options. Tests have been added to ensure the
    functionality.
  + CI:
  * ci: add ubuntu-22.04. This also requires the min tpm2-tss
    version to be at 3.2.0 to support the openSSL major version 3.
  * cirrus.yml: update freebsd version to 13.1
  * .ci/download-deps.sh: update tpm2-abrmd dependency version to
    2.4.1
- Drop 0001-tests-getekcertificate.sh-Skip-the-test-if-curl-is-n.patch
  (merged)
- Drop add_missing_shut_down_call_on_cleanup.patch (merged)
- Drop fix_check_of_qualifying_data.patch (merged)
- Add echo_tcti_call_python3_binary.patch (upstreamed)</changelog>
  <changelog author="aplanas@suse.com" date="1672833600">- Re-disable tests in PPC, PPC64 and S390X and reference issues about
  endianness unsafe API</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Update to version 5.5
  + Added:
  * tpm2_createek: SM2 EK Support
  * misc: SM2 support to internal OSSL format key routines. Fixes
  - -format flags for conversions.
  + Fixed:
  * echo_tcti.py: set to use python3 named executable in shebang.
- Drop already merged patches
  + fix_bogus_warning.patch
  + echo_tcti_call_python3_binary.patch</changelog>
  <changelog author="aplanas@suse.com" date="1684324800">- Disable tests.  Some tests randomly fails, maybe dependening on the
  OBS worker assigned during the build (not confirmed)</changelog>
  <changelog author="aplanas@suse.com" date="1703160000">- Update to version 5.6
  + tpm2_eventlog:
  * add H-CRTM event support
  * add support of efivar versions less than 38
  * Add support to check for efivar/efivar.h manually
  * Minor formatting fixes
  * tpm2_eventlog: add support for replay with different
    StartupLocality
  * Fix pcr extension for EV_NO_ACTION
  * Extend test of yaml string representation
  * Use helper for printing a string dump
  * Fix upper bound on unique data size
  * Fix YAML string formatting
  + tpm2_policy:
  * Add support for parsing forward seal TPM values
  * Use forward seal values in creating policies
  * Move dgst_size in evaluate_populate_pcr_digests()
  * Allow more than 8 PCRs for sealing
  * Move dgst_size in evaluate_populate_pcr_digests
  * Allow more than 8 PCRs for sealing
  * Make __wrap_Esys_PCR_Read() more dynamic to enable testing more
    PCRs
  + tpm2_encryptdecrypt: Fix pkcs7 padding stripping
  + tpm2_duplicate:
  * Support -a option for attributes
  * Add --key-algorithm option
  + tpm2_encodeobject: Use the correct -O option instead of -C
  + tpm2_unseal: Add qualifier static to enhance the privacy of unseal
    function
  + tpm2_sign:
  * Remove -m option which was added mistakenly
  * Revert sm2 sign and verifysignature
  + tpm2_createek:
  * Correct man page example
  * Fix usage of nonce
  * Fix integrating nonce
  + tpm2_clear: add more details about the action
  + tpm2_startauthsession: allow the file attribute for policy
    authorization.
  + tpm2_getekcertificate: Add AMD EK support
  + tpm2_ecdhzgen: Add public-key parameter
  + tpm2_nvreadpublic: Prevent free of unallocated pointers on failure
  + Bug-fixes:
  * The readthedocs build failed with module 'jinja2' has no
    attribute 'contextfilter' a requirement file was added to fix
    this problem
  * An error caused by the flags -flto -_FORTIFY_SOURCE=3 in kdfa
    implementation. This error can be avoided by switching off the
    optimization with pragma
  * Changed wrong function name of "Esys_Load" to "Esys_Load"
  * Function names beginning with Esys_ are wrongly written as Eys_
  * Reading and writing a serialized persistent ESYS_TR handles
  * cirrus-ci update image-family to freebsd-13-2 from 13-1
  + misc:
  * Change the default Python version to Python3 in the helper's
    code
  * Skip test which uses the sign operator for comparison in
    abrmd_policynv.sh
  * tools/tr_encode: Add a tool that can encode serialized ESYS_TR
    for persistent handles from the TPM2B_PUBLIC and the raw
    persistent TPM2_HANDLE
  * Add safe directory in config</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 5.7:
  + Security
  - Fixed CVE-2024-29038 (bsc#1223687)
  - Fixed CVE-2024-29039 (bsc#1223689)
  + Fixed
  - Fix eventlog test
  - Fix issues with reading NV indexes
  - Fix context save error on tpm2_create
  - tpm2_sessionconfig: fix handling of --disable-continue session so that the subsequent command will not fail
  - when attempting to context save a flushed session.
  - detection of functions within libcrypto when CRYPTO_LIBS is set and system has install libcrypto.
  - tpm2_send: fix EOF detection on input stream.
  - tpm2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.
  - tpm2_nvread: fix input handling no nv index.
  - Auth file: Ensure 0-termination when reading auths from a file.
  - configure.ac: fix bashisms. configure scripts need to be runnable with a POSIX-compliant /bin/sh.
  - cirrus.yml fix tss compilation with libtpms for FreeBSD.
  - tpm2_tool.c Fix missing include for basename to enable compilation on netbsd.
  - options: fix TCTI handling to avoid failures for commands that should work with no options.
  - tpm2_getekcertificate.c Fix leak. ek_uri was not freed if get_ek_server_address failed.
  + Added
  - Add the possibility for autoflush (environment variable "TPM2TOOLS_AUTOFLUSH", or -R option)
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).m2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.
  - tpm2_nvread: fix input handling no nv index.
- tpm2-tools.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.</changelog>
</package>
<package pkgid="4a8f81df0b14d502a7c51c16769f2a14c06ccd230f10f13a48315a57b1f99555f4de0c676d5f30318e878ff68d899ee5146b2564bdd295a3ab3808dbccbb3eb5" name="tpm2.0-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="5.7" rel="slfo.1.1_1.3"/>
  <changelog author="aplanas@suse.com" date="1657195200">- Disable LTO for 5.2, to fix tpm2_makecredential with "-T none"
  (bsc#1201291)</changelog>
  <changelog author="aplanas@suse.com" date="1657281600">- Add missing dependencies for testing.
- Add patch to properly skip getekcertificate if curl is missing
  0001-tests-getekcertificate.sh-Skip-the-test-if-curl-is-n.patch</changelog>
  <changelog author="aplanas@suse.com" date="1657713600">- Add patch to fix leakage of TPM simulator process
  add_missing_shut_down_call_on_cleanup.patch
- Add patch to fix fapi-quote-verify[_ecc].sh test
  fix_check_of_qualifying_data.patch
- Enable test execution by default</changelog>
  <changelog author="aplanas@suse.com" date="1657800000">- Disable tests in some architectures (ppc, ppc64, s390x)</changelog>
  <changelog author="aplanas@suse.com" date="1670500800">- Update to version 5.4
  + Added:
  * tpm2_policyrestart: Added option --cphash to output the cpHash
    for the command PM2_CC_PolicyRestart.
  * tpm2_policynvwritten: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyNvWritten.
  * tpm2_policylocality: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyLocality.
  * tpm2_policycountertimer: Added option --cphash to output the
    cpHash for the command TPM2_CC_PolicyCounterTimer.
  * tpm2_policycommandcode: Added option --cphash to output the
    cpHash for the command TPM2_CC_PolicyCommandCode.
  * tpm2_policypassword: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyPassword.
  * tpm2_policyauthvalue: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyAuthValue.
  * tpm2_policyauthorize: Added option --cphash to output the cpHash
    for the command TPM2_CC_PolicyAuthorize.
  * tpm2_print: Support printing serialized ESYS_TR's
  * tpm2_create: Add a clarifying message to usage of -c when
    TPM2_CreateLoaded is not supported.
  * tpm2_getcap: Add support for vendor agnostic
    capabilites. Requires tpm2-tss version 4.0 and higher to enable.
  * Add a script, check_endorsement_cert.sh, to validate the
    endorsement certificate chain. It takes two inputs - A
    TPM2B_PUBLIC format EKpublic and a PEM format EKcertificate
    specified in that order as arguments.
- Update to version 5.3
  +  Features:
  * lib/tpm2_tool.c: add --help=no-man for tpm2 option. Prior to
    this change the tool parsed no-man as an unrecognized option and
    errored out. Now it lists all the available tool options.
  * tpm2_encodeobject: New tool to encode TPM2 object. It takes
    public and private portions of an object and encode them in a
    combined PEM form called tssprivkey used by tpm2-tss-engine and
    other applications.
  * Support alternative ECC curves for which default EK templates
    exist (NIST_P256, NIST_P384, NIST_P521, and SM2_P256).
  * tools/misc/tpm2_checkquote: add sm2 verification of signature.
  * crypto: support the TPM2_ECC_SM2_P256 curveID.
  * fapi: add new command to enable the use of fapi objects for tpm2
    tools. The new command tss2_gettpm2object was added. With this
    command context files which can be used for tpm2 tool commands
    can be created.
  * Support for sign and verify with sm2 algorithms.
  * tools/tpm2_startauthsession: add sym-algorithm argument for
    supported symmetric algorithm.
  * Attestation (certify, command audit, sessionaudit and quote):
    add scheme argument for supported signature schemes. This also
    enable support for SM signing.
  * tpm2_flushcontext: support all options at a time. Support the
  - t/-l/-s options all at once so folks don't have to call it
    multiple times.
  * tools/tpm2_nvread: add human readable output for NV content
    Enable parsing and YAML-style output for the different NV index
    types.
  * New event types in tpm2_eventlog:
    EV_EFI_PLATFORM_FIRMWARE_BLOB2, EV_EFI_HANDOFF_TABLES2,
    EV_EFI_VARIABLE_BOOT2
  * VERSION: add version file - Generate the version file with
    bootstrap and include in the DIST tarball so endusers can call
    autoreconf on a dist tarball which doesn't have git. This
    alleviates git describe errors on release tarballs in the
    autoreconf case.
  * import: support restricted parents - Support a restricted parent
    with an aes128cfb symmetric parameter.
  * tpm2_load - Added capability to load pem files in
    TSS2-Private-Key format for interoperability with
    tpm2-tss-engine, tpm2-openssl provider tpm2-pkcs11, and
    tpm2-pytss.
  * tpm2_print - Added capability to parse out and print the public
    portion of a TSS Private Key in the PEM format with the arg
    option TSSPRIVKEY_OBJ.
  * tpm2_loadexternal: Added support to tpm2_loadexternal for
    parsing and loading the public portion of a TSS2 Privkey PEM
    file. The path to the PEM file must be specified using the -r
    option while skipping the -G option for key type.
  * Support added for calculating cpHash, rpHash, sessions for
    parameter encryption and auditing in: tpm2_nvwrite,
    tpm2_nvcertify, tpm2_nvincrement, tpm2_nvwritelock,
    tpm2_nvreadlock, tpm2_nvundefine and tpm2_nvreadpublic.
  * Support added for calculating cpHash in: tpm2_clear,
    tpm2_dictionarylockout, tpm2_clearcontrol, tpm2_sign,
    tpm2_setprimarypolicy, tpm2_setclock, tpm2_rsadecrypt,
    tpm2_duplicate, tpm2_clockrateadjust, tpm2_createprimary,
    tpm2_quote, tpm2_policysecret, tpm2_policynv,
    tpm2_policyauthorizenv, tpm2_import, tpm2_hmac,
    tpm2_hierarchycontrol, tpm2_load, tpm2_gettime,
    tpm2_evictcontrol, tpm2_encryptdecrypt, tpm2_getpolicydigest,
    tpm2_loadexternal, tpm2_commit, tpm2_ecdhkeygen, tpm2_ecdhzgen,
    tpm2_ecephemeral, tpm2_geteccparameters, tpm2_flushcontext,
    tpm2_pcrallocate, tpm2_pcrevent, tpm2_pcrreset, tpm2_pcrread.
  * Support for using tcti=none for cpHash calculations to avoid
    invoking checks for active TPM in: tpm2_nvreadpublic,
    tpm2_nvundefine, tpm2_nvreadlock, tpm2_nvwritelock,
    tpm2_nvincrement, tpm2_nvcertify, tpm2_nvdefine, tpm2_nvwrite.
  + Known issue:
  * FAPI tools will not work on 32bit user-static qemu on 64bit host
    because readdir returns NULL. Follow the issue on
    https://gitlab.com/qemu-project/qemu/-/issues/263
  + Bug fixes:
  * tools/tpm2_pcrreset.c: fix build errors in 32bit systems.
  * Fix tssprivkey formatted PEM generation and load errors on 32
    bit systems.
  * CI: Add testing of 32bit systems with multiarch/qemu-user-static
    containers.
  * tools/tpm2_evictcontrol: fix for calls to Esys_TR_Close on bad
    handles.
  * tools/tpm2_nvextend: fix for ESYS_TR handle not being used in
    calculating the object name.
  * tools/tpm2_nvwrite, tools/tpm2_nvread: Policy authorization must
    be re-instantiated on each iteration of the read/ write when
    size exceeds the allowed operating size
    (TPM2_PT_NV_BUFFER_MAX). However, information on the compounded
    policies cannot be retrieved from the only policy digest read
    from the session and hence the session cannot be
    re-instantiated. To avoid this scenario only a single iteration
    is allowed when policy authorization is in use.
  * Fix argument parsing in tpm2_policylocality to fix an issue
    causing almost always to generate PolicyLocality(0). There was a
    logical inversion that caused almost any argument (including
    invalid ones) to be interpreted as zero, except “zero" would be
    interpreted as one.
  * test/fapi/fapi-quote-verify.sh Fix check of qualifying
    data. Because of a bug in Fapi_VerifyQuote the qualifying data
    was not checked correctly. Errors that were not recognized
    before occur now. The order of the tests was cleaned up and for
    every quote and verify quote now the correct combination of the
    qualifying data and quote info containing the nonce is used.
  * tpm2_nvdefine: set TPMA_NV_PLATFORMCREATE when authenticating
    with the platform hierarchy.
  * tools/tpm2_getekcertificate: fixed the url link to
    ekop.intel.com. There were two places where the fix was needed:
    o In the tool source code where a forward slash was always
    appended irrespective of it already being part of the link
    specified by the user and
    o In the integration test where curl tests the link to the
    ekop.intel.com backend. It now requires the full link to
    include the base64 encoded ek pub hash.
  * tools/tpm2_tool.c: Fix an issue where LOG_WARN is always
    displayed Despite setting the 'quiet' flag with -Q.
  * fapi: fix usage of parameter pcrLog for tss2_quote. pcrLog is an
    optional parameter. If pcrLog is not used as parameter currently
    the pcr log is still calculated in Fapi_Quote. To avoid this
    calculation a NULL pointer will be passed to Fapi_Quote if the
    parameter pcrLog is not passed. So tss2_quote can be executed
    for a user which has no access rights to the files with the
    system measurements.
  * import: fix bug on using scheme wherein if scheme is specified
    in the template, the openssl load functions clobber the scheme
    value and set it to TPM2_ALG_NULL.
  * tools/tpm2_sign and tpm2_verifysignature: fix sm2 sign and
    verifysignature bugs : (1.) sm2 sign could not get output
    signature. (2.) sm2 verify tss format signature failed.
  * lib/tpm2.c: added workaround for a system api bug where in the
    flush handle is erroneously placed in the handle area instead of
    the parameter area.
  * nvreadpublic: drop ntoh on attributes The attributes get
    marshalled to correct endianess by libmu and don’t need to be
    changed again.
  * Removing unused '-i' option from tpm2_print
  * tpm2_policyor: fix unallocated policy list The TPML_DIGEST
    policy list was calloc'd for some reason, however it could just
    be statically allocated in the context. The side effect is that
    when no options or arguments were given a NPD occured when
    checking the count of the policy list.
  * tools/tpm2_certify: fix man page for short options and add tests
    The short options for the signing-key-auth and
    certified-key-auth were swapped. The case fix in the man page
    makes it less intuitive but have to go through with the change
    so that we don't break any existing scripts. This change does
    not affect the long options. Tests have been added to ensure the
    functionality.
  + CI:
  * ci: add ubuntu-22.04. This also requires the min tpm2-tss
    version to be at 3.2.0 to support the openSSL major version 3.
  * cirrus.yml: update freebsd version to 13.1
  * .ci/download-deps.sh: update tpm2-abrmd dependency version to
    2.4.1
- Drop 0001-tests-getekcertificate.sh-Skip-the-test-if-curl-is-n.patch
  (merged)
- Drop add_missing_shut_down_call_on_cleanup.patch (merged)
- Drop fix_check_of_qualifying_data.patch (merged)
- Add echo_tcti_call_python3_binary.patch (upstreamed)</changelog>
  <changelog author="aplanas@suse.com" date="1672833600">- Re-disable tests in PPC, PPC64 and S390X and reference issues about
  endianness unsafe API</changelog>
  <changelog author="aplanas@suse.com" date="1676548800">- Update to version 5.5
  + Added:
  * tpm2_createek: SM2 EK Support
  * misc: SM2 support to internal OSSL format key routines. Fixes
  - -format flags for conversions.
  + Fixed:
  * echo_tcti.py: set to use python3 named executable in shebang.
- Drop already merged patches
  + fix_bogus_warning.patch
  + echo_tcti_call_python3_binary.patch</changelog>
  <changelog author="aplanas@suse.com" date="1684324800">- Disable tests.  Some tests randomly fails, maybe dependening on the
  OBS worker assigned during the build (not confirmed)</changelog>
  <changelog author="aplanas@suse.com" date="1703160000">- Update to version 5.6
  + tpm2_eventlog:
  * add H-CRTM event support
  * add support of efivar versions less than 38
  * Add support to check for efivar/efivar.h manually
  * Minor formatting fixes
  * tpm2_eventlog: add support for replay with different
    StartupLocality
  * Fix pcr extension for EV_NO_ACTION
  * Extend test of yaml string representation
  * Use helper for printing a string dump
  * Fix upper bound on unique data size
  * Fix YAML string formatting
  + tpm2_policy:
  * Add support for parsing forward seal TPM values
  * Use forward seal values in creating policies
  * Move dgst_size in evaluate_populate_pcr_digests()
  * Allow more than 8 PCRs for sealing
  * Move dgst_size in evaluate_populate_pcr_digests
  * Allow more than 8 PCRs for sealing
  * Make __wrap_Esys_PCR_Read() more dynamic to enable testing more
    PCRs
  + tpm2_encryptdecrypt: Fix pkcs7 padding stripping
  + tpm2_duplicate:
  * Support -a option for attributes
  * Add --key-algorithm option
  + tpm2_encodeobject: Use the correct -O option instead of -C
  + tpm2_unseal: Add qualifier static to enhance the privacy of unseal
    function
  + tpm2_sign:
  * Remove -m option which was added mistakenly
  * Revert sm2 sign and verifysignature
  + tpm2_createek:
  * Correct man page example
  * Fix usage of nonce
  * Fix integrating nonce
  + tpm2_clear: add more details about the action
  + tpm2_startauthsession: allow the file attribute for policy
    authorization.
  + tpm2_getekcertificate: Add AMD EK support
  + tpm2_ecdhzgen: Add public-key parameter
  + tpm2_nvreadpublic: Prevent free of unallocated pointers on failure
  + Bug-fixes:
  * The readthedocs build failed with module 'jinja2' has no
    attribute 'contextfilter' a requirement file was added to fix
    this problem
  * An error caused by the flags -flto -_FORTIFY_SOURCE=3 in kdfa
    implementation. This error can be avoided by switching off the
    optimization with pragma
  * Changed wrong function name of "Esys_Load" to "Esys_Load"
  * Function names beginning with Esys_ are wrongly written as Eys_
  * Reading and writing a serialized persistent ESYS_TR handles
  * cirrus-ci update image-family to freebsd-13-2 from 13-1
  + misc:
  * Change the default Python version to Python3 in the helper's
    code
  * Skip test which uses the sign operator for comparison in
    abrmd_policynv.sh
  * tools/tr_encode: Add a tool that can encode serialized ESYS_TR
    for persistent handles from the TPM2B_PUBLIC and the raw
    persistent TPM2_HANDLE
  * Add safe directory in config</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">Update to version 5.7:
  + Security
  - Fixed CVE-2024-29038 (bsc#1223687)
  - Fixed CVE-2024-29039 (bsc#1223689)
  + Fixed
  - Fix eventlog test
  - Fix issues with reading NV indexes
  - Fix context save error on tpm2_create
  - tpm2_sessionconfig: fix handling of --disable-continue session so that the subsequent command will not fail
  - when attempting to context save a flushed session.
  - detection of functions within libcrypto when CRYPTO_LIBS is set and system has install libcrypto.
  - tpm2_send: fix EOF detection on input stream.
  - tpm2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.
  - tpm2_nvread: fix input handling no nv index.
  - Auth file: Ensure 0-termination when reading auths from a file.
  - configure.ac: fix bashisms. configure scripts need to be runnable with a POSIX-compliant /bin/sh.
  - cirrus.yml fix tss compilation with libtpms for FreeBSD.
  - tpm2_tool.c Fix missing include for basename to enable compilation on netbsd.
  - options: fix TCTI handling to avoid failures for commands that should work with no options.
  - tpm2_getekcertificate.c Fix leak. ek_uri was not freed if get_ek_server_address failed.
  + Added
  - Add the possibility for autoflush (environment variable "TPM2TOOLS_AUTOFLUSH", or -R option)
  + Removed
  - Testing on Ubuntu 18.04 as it's near EOL (May 2023).m2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.
  - tpm2_nvread: fix input handling no nv index.
- tpm2-tools.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented
  in upstream repo, which was used for signing this new release tarball.</changelog>
</package>
<package pkgid="6feb3ebee577f9d7b0c7d2982963089c32dbe5135893fa4223cf5e3cfaf8c4fd511d79b50696e2a83322e8d2616f8ae26fdde3c374f9aa050700368aa720b7d7" name="traceroute-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.3" rel="slfo.1.1_1.2"/>
  <changelog author="crrodriguez@opensuse.org" date="1362657600">- The previous incarnation of traceroute had a traceroute6
  binary, provide a compatibility symlink for it.
- Build with full RELRO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1409486400">- version 2.0.20
  * Describe all complementary long options in the man page
  * Use correct service name for AS lookups
  * Avoid some rare case null dereference
  * Improve expiration check for simultaneous probes
- traceroute-secure_getenv.patch use secure_getenv
- traceroute-autotools.patch refresh</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048000">- Version 2.0.21
  * fix -F --mtu with current kernel versions
- traceroute-autotools.patch refresh and add -fvisibility=hidden
  to CFLAGS.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048001">- traceroute-autotools.patch: switch to non-recursive automake
  without libtool.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1546948800">- Update to version 2.1.0
  * Implement -w MAX_SECS,HERE,NEAR option
  * Provide tcptraceroute
  * Improve the main loop for better interactivity.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1547553600">- fix undefined reference to "ceil", some compiler versions do
  not optimize-out or inline ceil, but anyways libm is required.</changelog>
  <changelog author="jengelh@inai.de" date="1548158400">- Trim time-sensitive wording from description.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672228800">- update to version 2.1.1:
  * Interpret ipv4-mapped ipv6 addresses (::ffff:A.B.C.D) as true
    ipv4
  * Return back more robust poll(2) loop handling</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676376000">- update to version 2.1.2:
  * Fix unprivileged ICMP tracerouting with Linux kernel &gt;= 6.1</changelog>
  <changelog author="dmueller@suse.com" date="1699617600">- update to 2.1.3:
  * Fix command line parsing in wrappers. (CVE-2023-46316 bsc#1216591)</changelog>
</package>
<package pkgid="d3f7a6c43897ed540d13d2de1273edf4e4854fe0f550c0cbbffff4da8cf091e88ebfcf2342330684e015811c7fa7c4b572d78f4d282f78fc4b8a148316d156ae" name="traceroute-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1.3" rel="slfo.1.1_1.2"/>
  <changelog author="crrodriguez@opensuse.org" date="1362657600">- The previous incarnation of traceroute had a traceroute6
  binary, provide a compatibility symlink for it.
- Build with full RELRO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1409486400">- version 2.0.20
  * Describe all complementary long options in the man page
  * Use correct service name for AS lookups
  * Avoid some rare case null dereference
  * Improve expiration check for simultaneous probes
- traceroute-secure_getenv.patch use secure_getenv
- traceroute-autotools.patch refresh</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048000">- Version 2.0.21
  * fix -F --mtu with current kernel versions
- traceroute-autotools.patch refresh and add -fvisibility=hidden
  to CFLAGS.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048001">- traceroute-autotools.patch: switch to non-recursive automake
  without libtool.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1546948800">- Update to version 2.1.0
  * Implement -w MAX_SECS,HERE,NEAR option
  * Provide tcptraceroute
  * Improve the main loop for better interactivity.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1547553600">- fix undefined reference to "ceil", some compiler versions do
  not optimize-out or inline ceil, but anyways libm is required.</changelog>
  <changelog author="jengelh@inai.de" date="1548158400">- Trim time-sensitive wording from description.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672228800">- update to version 2.1.1:
  * Interpret ipv4-mapped ipv6 addresses (::ffff:A.B.C.D) as true
    ipv4
  * Return back more robust poll(2) loop handling</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676376000">- update to version 2.1.2:
  * Fix unprivileged ICMP tracerouting with Linux kernel &gt;= 6.1</changelog>
  <changelog author="dmueller@suse.com" date="1699617600">- update to 2.1.3:
  * Fix command line parsing in wrappers. (CVE-2023-46316 bsc#1216591)</changelog>
</package>
<package pkgid="9e0a83e2f486a57f7f1fb00329e4232b23948ec2c99b21edfbf9a5436ebb5dc64256f98e9b9a30d9d3ca2d24a6abb5acbe8b48c5c5f4b08e5bae45be25dd29b5" name="transactional-update-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="slfo.1.1_1.2"/>
  <changelog author="iforster@suse.com" date="1713441600">- Version 4.6.6
  - soft-reboot: Fix inverted logic of soft-reboot detection
  - soft-reboot: Don't use D-Bus for snapper call - it may be
    shutting down already
  - soft-reboot: Remove unused variable
  - doc: Document configuration file snippets for tukit.conf
- Remove script to disable soft-reboot support - this is the
  default for now anyway</changelog>
  <changelog author="iforster@suse.com" date="1714478400">- Version 4.6.7
  - Add support for snapper 0.11.0; also significantly decreases
    cleanup time [boo#1223504]</changelog>
  <changelog author="iforster@suse.com" date="1715083200">- Version 4.6.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]
  - soft-reboot: Log requested reboot type
  - soft-reboot: Don't force hard reboot on version change only</changelog>
  <changelog author="iforster@suse.com" date="1718366400">- Enable soft-reboot by default again as announced in
  https://microos.opensuse.org/blog/2024-06-13-soft-reboot/</changelog>
  <changelog author="iforster@suse.com" date="1720094400">- Version 4.7.0
  - Add plugin mechanism
    It's now possible to hook into API functions with custom
    plugins; see doc/tukit-plugins.md for details.
    [gh#openSUSE/transactional-update#122]
  - Fix missing libdir replacement for status command</changelog>
  <changelog author="iforster@suse.com" date="1721131200">- It seems it's taking a longer time until the tests will be
  adopted to the new reboot behavior. Disable soft-reboot for now
  to unblock the regular transactional-update update.</changelog>
  <changelog author="iforster@suse.com" date="1724673600">- Version 4.8.0
  - Add sd-boot (systemd-boot) support for most commands
  - Add support for specifying migration arguments
    [gh#openSUSE/transactional-update#127] [jsc#PED-10375]
    [jsc#PED-9786]
  - Support kdump setup on platforms without kdump high/low
    settings (e.g. S/390 or PPC64le [bsc#1229138]
  - Preserve current working directory if possible when entering
    transactional-update environment [bsc#1227452]; also adds the
    current path to the Bash prompt
  - Fix plugin system to support special characters in commands</changelog>
  <changelog author="iforster@suse.com" date="1725019200">- Version 4.8.1
  - tukit: fix --drop-if-no-change after apply [bsc#1229900]</changelog>
  <changelog author="iforster@suse.com" date="1726488000">- Version 4.8.2
  - Allow specifying only low value with setup-kdump [bsc#1230537]</changelog>
  <changelog author="iforster@suse.com" date="1727179200">- Version 4.8.3
  - Check return value of register command [bsc#1230901]</changelog>
</package>
<package pkgid="0e35fc96358dbc568e863eeeed3f96ef54c0fdc1c8a2cc3b29566a1b8ebb8eb4f29a8bc5564f7f610db8197de86c32edb23d8dcc38a6320740967a278f7c237e" name="transactional-update-debugsource" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="slfo.1.1_1.2"/>
  <changelog author="iforster@suse.com" date="1713441600">- Version 4.6.6
  - soft-reboot: Fix inverted logic of soft-reboot detection
  - soft-reboot: Don't use D-Bus for snapper call - it may be
    shutting down already
  - soft-reboot: Remove unused variable
  - doc: Document configuration file snippets for tukit.conf
- Remove script to disable soft-reboot support - this is the
  default for now anyway</changelog>
  <changelog author="iforster@suse.com" date="1714478400">- Version 4.6.7
  - Add support for snapper 0.11.0; also significantly decreases
    cleanup time [boo#1223504]</changelog>
  <changelog author="iforster@suse.com" date="1715083200">- Version 4.6.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]
  - soft-reboot: Log requested reboot type
  - soft-reboot: Don't force hard reboot on version change only</changelog>
  <changelog author="iforster@suse.com" date="1718366400">- Enable soft-reboot by default again as announced in
  https://microos.opensuse.org/blog/2024-06-13-soft-reboot/</changelog>
  <changelog author="iforster@suse.com" date="1720094400">- Version 4.7.0
  - Add plugin mechanism
    It's now possible to hook into API functions with custom
    plugins; see doc/tukit-plugins.md for details.
    [gh#openSUSE/transactional-update#122]
  - Fix missing libdir replacement for status command</changelog>
  <changelog author="iforster@suse.com" date="1721131200">- It seems it's taking a longer time until the tests will be
  adopted to the new reboot behavior. Disable soft-reboot for now
  to unblock the regular transactional-update update.</changelog>
  <changelog author="iforster@suse.com" date="1724673600">- Version 4.8.0
  - Add sd-boot (systemd-boot) support for most commands
  - Add support for specifying migration arguments
    [gh#openSUSE/transactional-update#127] [jsc#PED-10375]
    [jsc#PED-9786]
  - Support kdump setup on platforms without kdump high/low
    settings (e.g. S/390 or PPC64le [bsc#1229138]
  - Preserve current working directory if possible when entering
    transactional-update environment [bsc#1227452]; also adds the
    current path to the Bash prompt
  - Fix plugin system to support special characters in commands</changelog>
  <changelog author="iforster@suse.com" date="1725019200">- Version 4.8.1
  - tukit: fix --drop-if-no-change after apply [bsc#1229900]</changelog>
  <changelog author="iforster@suse.com" date="1726488000">- Version 4.8.2
  - Allow specifying only low value with setup-kdump [bsc#1230537]</changelog>
  <changelog author="iforster@suse.com" date="1727179200">- Version 4.8.3
  - Check return value of register command [bsc#1230901]</changelog>
</package>
<package pkgid="5f45602149d2f1da5905dd053ddcede274b031ed1d6eaa712e33481d3103932966aa90df72f609dc290165c85d1d08a7882b224b965c641ff68546be4b094edc" name="trousers-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.3.15" rel="slfo.1.1_1.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1589371200">- add correct Requires(pre) and change %pretrans and %posttrans into %pre and
  %post. %pretrans can't have any dependencies and therefore can only be
  %implemented in lua. This currently leads to build errors "/bin/sh: no such
  file or directory".</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1589976000">- fix a potential tss user to root privilege escalation when running tcsd
  (bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent
  badly designed privilege drop and initialization code to run.
- add bsc1164472.patch: additionally harden operation of tcsd when running as
  root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group.
  require /etc/tcsd.conf to be owned by root:tss mode 0640.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1589976001">- get rid of %pre/%post logic that fixes the old packaging bug. Turns out
  %pretrans and %posttrans had their purpose before, because the logic needed
  to run before old files owned by the package got deleted. But I'm not
  reimplementing this strange logic in Lua ... users that didn't get the fix
  yet will have to live with it.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1591099200">- add gcc-10.patch: fixes the build on gcc 10 by removing unused global
  variables. This patch was posted on the TrouSerS mailing list [1].
  [1]: https://sourceforge.net/p/trousers/mailman/message/36951419/</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1595851200">- In a previous commit the Requires line for the tss user got accidentally
  dropped. This change reintroduces it.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1604577600">- update to new upstream version 0.3.15:
  - Corrected mutliple security issues that existed if the tcsd is started by
    root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331
  - Replaced use of _no_optimize with asm memory barrier
  - Fixed multiple potential instances of use after free memory handling
  - Removed unused global variables which caused build issue on some distros
- drop gcc-10.patch: now contained in upstream tarball
- drop bsc1164472.patch: now contained in upstream tarball
- adjusted %setup macro invocation which seemed to be wrong</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1633435200">- move libraries to /usr/lib (bsc#1191102)</changelog>
  <changelog author="jsegitz@suse.com" date="1637841600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * tcsd.service</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- changed urls to https (except main URL which has no https)</changelog>
  <changelog author="dimstar@opensuse.org" date="1661169600">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
</package>
<package pkgid="07b8b816f630cba15d61bc310b5d98fb9c858168174dbdaca46e33b8b8afdcd75c6a8eab28f6bbf8e1e8b6f5300d7372eda4a49c96fc0c291e52883983063482" name="trousers-debugsource" arch="aarch64">
  <version epoch="0" ver="0.3.15" rel="slfo.1.1_1.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1589371200">- add correct Requires(pre) and change %pretrans and %posttrans into %pre and
  %post. %pretrans can't have any dependencies and therefore can only be
  %implemented in lua. This currently leads to build errors "/bin/sh: no such
  file or directory".</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1589976000">- fix a potential tss user to root privilege escalation when running tcsd
  (bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent
  badly designed privilege drop and initialization code to run.
- add bsc1164472.patch: additionally harden operation of tcsd when running as
  root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group.
  require /etc/tcsd.conf to be owned by root:tss mode 0640.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1589976001">- get rid of %pre/%post logic that fixes the old packaging bug. Turns out
  %pretrans and %posttrans had their purpose before, because the logic needed
  to run before old files owned by the package got deleted. But I'm not
  reimplementing this strange logic in Lua ... users that didn't get the fix
  yet will have to live with it.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1591099200">- add gcc-10.patch: fixes the build on gcc 10 by removing unused global
  variables. This patch was posted on the TrouSerS mailing list [1].
  [1]: https://sourceforge.net/p/trousers/mailman/message/36951419/</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1595851200">- In a previous commit the Requires line for the tss user got accidentally
  dropped. This change reintroduces it.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1604577600">- update to new upstream version 0.3.15:
  - Corrected mutliple security issues that existed if the tcsd is started by
    root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331
  - Replaced use of _no_optimize with asm memory barrier
  - Fixed multiple potential instances of use after free memory handling
  - Removed unused global variables which caused build issue on some distros
- drop gcc-10.patch: now contained in upstream tarball
- drop bsc1164472.patch: now contained in upstream tarball
- adjusted %setup macro invocation which seemed to be wrong</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1633435200">- move libraries to /usr/lib (bsc#1191102)</changelog>
  <changelog author="jsegitz@suse.com" date="1637841600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * tcsd.service</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- changed urls to https (except main URL which has no https)</changelog>
  <changelog author="dimstar@opensuse.org" date="1661169600">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
</package>
<package pkgid="21417c576c8d09e737454882d734ee31ed553c4dada8c1020717c927f1ea3af574106f5b50bcaa1148ed65b53e1324ffe58dbfd7f2dde29b5e8e60c7ae970583" name="tukit-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="slfo.1.1_1.2"/>
  <changelog author="iforster@suse.com" date="1713441600">- Version 4.6.6
  - soft-reboot: Fix inverted logic of soft-reboot detection
  - soft-reboot: Don't use D-Bus for snapper call - it may be
    shutting down already
  - soft-reboot: Remove unused variable
  - doc: Document configuration file snippets for tukit.conf
- Remove script to disable soft-reboot support - this is the
  default for now anyway</changelog>
  <changelog author="iforster@suse.com" date="1714478400">- Version 4.6.7
  - Add support for snapper 0.11.0; also significantly decreases
    cleanup time [boo#1223504]</changelog>
  <changelog author="iforster@suse.com" date="1715083200">- Version 4.6.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]
  - soft-reboot: Log requested reboot type
  - soft-reboot: Don't force hard reboot on version change only</changelog>
  <changelog author="iforster@suse.com" date="1718366400">- Enable soft-reboot by default again as announced in
  https://microos.opensuse.org/blog/2024-06-13-soft-reboot/</changelog>
  <changelog author="iforster@suse.com" date="1720094400">- Version 4.7.0
  - Add plugin mechanism
    It's now possible to hook into API functions with custom
    plugins; see doc/tukit-plugins.md for details.
    [gh#openSUSE/transactional-update#122]
  - Fix missing libdir replacement for status command</changelog>
  <changelog author="iforster@suse.com" date="1721131200">- It seems it's taking a longer time until the tests will be
  adopted to the new reboot behavior. Disable soft-reboot for now
  to unblock the regular transactional-update update.</changelog>
  <changelog author="iforster@suse.com" date="1724673600">- Version 4.8.0
  - Add sd-boot (systemd-boot) support for most commands
  - Add support for specifying migration arguments
    [gh#openSUSE/transactional-update#127] [jsc#PED-10375]
    [jsc#PED-9786]
  - Support kdump setup on platforms without kdump high/low
    settings (e.g. S/390 or PPC64le [bsc#1229138]
  - Preserve current working directory if possible when entering
    transactional-update environment [bsc#1227452]; also adds the
    current path to the Bash prompt
  - Fix plugin system to support special characters in commands</changelog>
  <changelog author="iforster@suse.com" date="1725019200">- Version 4.8.1
  - tukit: fix --drop-if-no-change after apply [bsc#1229900]</changelog>
  <changelog author="iforster@suse.com" date="1726488000">- Version 4.8.2
  - Allow specifying only low value with setup-kdump [bsc#1230537]</changelog>
  <changelog author="iforster@suse.com" date="1727179200">- Version 4.8.3
  - Check return value of register command [bsc#1230901]</changelog>
</package>
<package pkgid="57c6910bb39d7668be17030b5b75f730527db5e97fb097c99e937e60b91f16678b0a2d487dcfaa8960c1bf7015aeeb5c7e97147b6d6d5bcc94c0b8d1acaea53e" name="tukitd-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="slfo.1.1_1.2"/>
  <changelog author="iforster@suse.com" date="1713441600">- Version 4.6.6
  - soft-reboot: Fix inverted logic of soft-reboot detection
  - soft-reboot: Don't use D-Bus for snapper call - it may be
    shutting down already
  - soft-reboot: Remove unused variable
  - doc: Document configuration file snippets for tukit.conf
- Remove script to disable soft-reboot support - this is the
  default for now anyway</changelog>
  <changelog author="iforster@suse.com" date="1714478400">- Version 4.6.7
  - Add support for snapper 0.11.0; also significantly decreases
    cleanup time [boo#1223504]</changelog>
  <changelog author="iforster@suse.com" date="1715083200">- Version 4.6.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]
  - soft-reboot: Log requested reboot type
  - soft-reboot: Don't force hard reboot on version change only</changelog>
  <changelog author="iforster@suse.com" date="1718366400">- Enable soft-reboot by default again as announced in
  https://microos.opensuse.org/blog/2024-06-13-soft-reboot/</changelog>
  <changelog author="iforster@suse.com" date="1720094400">- Version 4.7.0
  - Add plugin mechanism
    It's now possible to hook into API functions with custom
    plugins; see doc/tukit-plugins.md for details.
    [gh#openSUSE/transactional-update#122]
  - Fix missing libdir replacement for status command</changelog>
  <changelog author="iforster@suse.com" date="1721131200">- It seems it's taking a longer time until the tests will be
  adopted to the new reboot behavior. Disable soft-reboot for now
  to unblock the regular transactional-update update.</changelog>
  <changelog author="iforster@suse.com" date="1724673600">- Version 4.8.0
  - Add sd-boot (systemd-boot) support for most commands
  - Add support for specifying migration arguments
    [gh#openSUSE/transactional-update#127] [jsc#PED-10375]
    [jsc#PED-9786]
  - Support kdump setup on platforms without kdump high/low
    settings (e.g. S/390 or PPC64le [bsc#1229138]
  - Preserve current working directory if possible when entering
    transactional-update environment [bsc#1227452]; also adds the
    current path to the Bash prompt
  - Fix plugin system to support special characters in commands</changelog>
  <changelog author="iforster@suse.com" date="1725019200">- Version 4.8.1
  - tukit: fix --drop-if-no-change after apply [bsc#1229900]</changelog>
  <changelog author="iforster@suse.com" date="1726488000">- Version 4.8.2
  - Allow specifying only low value with setup-kdump [bsc#1230537]</changelog>
  <changelog author="iforster@suse.com" date="1727179200">- Version 4.8.3
  - Check return value of register command [bsc#1230901]</changelog>
</package>
<package pkgid="25d59c460b1f12fed56aada4ad8fb6854feaa8e3c12031608d7e353f664f668e93b5e7cac345df6d0448de6047141d899825d1e47c7e0e7d82b0f9d661b152f3" name="udev-debuginfo" arch="aarch64">
  <version epoch="0" ver="254.27" rel="slfo.1.1_4.1"/>
  <changelog author="fbui@suse.com" date="1753963200">- Remove the script used to help migrating the language and locale settings
  located in /etc/sysconfig/language on old systems to the systemd default
  locations (bsc#1247074)
  The script was introduced more than 7 years ago and all systems running TW
  should have been migrated since then. Moreover the installer supports the
  systemd default locations since approximately SLE15.</changelog>
  <changelog author="fbui@suse.com" date="1758110400">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196800">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- systemd-update-helper: backport commit 2d0af8bc354f4a1429ce
  Since user@.service has `Type=notify-reload` (making the reloading process
  synchronous) and reloading implies reexecuting with `ReloadSignal=RTMIN+25`,
  reexecuting user managers synchronously can be achieved with `systemctl reload
  user@*.service" now.</changelog>
  <changelog author="fbui@suse.com" date="1765800001">- Sync systemd-update-helper with the version shipped in Base:System
  This includes the following changes:
  - systemd-update-helper: do not stop or disable services when they are migrated
    to other packages. This can occur during package renaming or splitting.
  - systemd-update-helper: Fix invalid use of "break" in case statement
  - systemd-update-helper: fix regression introduced when support for package
    renaming/splitting was added (bsc#1245551)</changelog>
  <changelog author="fbui@suse.com" date="1765800002">- Import commit 9ecd16228492f44212e2771bec11ec78245b4094
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Import commit 8bbac1d508acb8aa4e7262f47c7f4076b8350f72
  8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305601">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit aef6e11921f8c46a2b7ee8cfab024c9c641d74d8
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit a943e3ce2f655b8509038e31f03f5ded18f24683
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="8a12e577f2be966b16df3618cc438e9697792f0708b62393ba0c33aede4736b46bb1e1c25e989294e50e3fa4ce845de1fee1541c7e5e2ca5ee4c9591b81be466" name="udisks2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.9.4" rel="slfo.1.1_2.1"/>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in
    HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with
    symlinks
  * mount options: Allow 'nosymfollow' mount option for
    unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup
    lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for
    mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent()
    out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- Drop udisks2-Fix-memory-leaks.patch, and
  udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637150400">- Update to version 2.9.4:
  + Many fixes, improvements, and additions to the code.
  + Mount options:
  - Always use errors=remount-ro for ext filesystems;
  - Add ntfs3 kernel driver options.
  + Build: Remove warnings unknown to clang.
  + Tests: Adapt to clang differences when causing a segfault.
- Changes from version 2.9.3:
  + Many fixes, improvements, and additions to the code and test.
- Add "%tmpfiles_create %{_tmpfilesdir}/udisks2.conf" call in %post
  section to make sure /run/media will be created right after the
  instalation of udisks2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging libudisks_vdo standalone module, it is deprecated.
  Do this via passing explicit disable-vdo to configure and
  dropping libblockdev-vdo-devel BuildRequires. Add a
  libudisks2_0_vdo Obsoletes to ease updates.
- No longer remove upstream config files, we want to be able to
  load modules on demand. Note that we move an example file to docs
  to keep sysconfdir clean of non-conf files.
- Add a default_luks_encryption define, and set it to luks2, sed
  this macro into source, future versions of udisks will not need
  this, as upstream moves to luks2 by default.
- Ghost a dir/file created by us.
- Split out API docs into separate docs sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Drop gtk-doc BuildRequires, and pass disable-gtk-doc to
  configure, the included gtk-docs are fine, we do not need to
  build them ourselves.</changelog>
  <changelog author="jsegitz@suse.com" date="1653048000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_udisks2-zram-setup@.service.patch
  * harden_udisks2.service.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1668600000">- fix crash during shutdown (bsc#1205371)
  * add:
    0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669118400">- avoid wakening spun-down disks on unrelated events (bsc#1120608)
  * add:
    0001-udisksata-Move-the-low-level-PM-state-call.patch
    0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch
    0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1755864000">- (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds
  read in udisks daemon (bsc#1248502)
  + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch</changelog>
</package>
<package pkgid="c8fca5b23a60505d3510060dcde103f163fb080cc9a337b66cbfb13943fd7ea2b15da353bf78624cd09f774c889f441842905ba96085e2a0eb606260062d1f3d" name="udisks2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.9.4" rel="slfo.1.1_2.1"/>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in
    HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with
    symlinks
  * mount options: Allow 'nosymfollow' mount option for
    unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup
    lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for
    mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent()
    out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- Drop udisks2-Fix-memory-leaks.patch, and
  udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637150400">- Update to version 2.9.4:
  + Many fixes, improvements, and additions to the code.
  + Mount options:
  - Always use errors=remount-ro for ext filesystems;
  - Add ntfs3 kernel driver options.
  + Build: Remove warnings unknown to clang.
  + Tests: Adapt to clang differences when causing a segfault.
- Changes from version 2.9.3:
  + Many fixes, improvements, and additions to the code and test.
- Add "%tmpfiles_create %{_tmpfilesdir}/udisks2.conf" call in %post
  section to make sure /run/media will be created right after the
  instalation of udisks2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643284800">- Stop packaging libudisks_vdo standalone module, it is deprecated.
  Do this via passing explicit disable-vdo to configure and
  dropping libblockdev-vdo-devel BuildRequires. Add a
  libudisks2_0_vdo Obsoletes to ease updates.
- No longer remove upstream config files, we want to be able to
  load modules on demand. Note that we move an example file to docs
  to keep sysconfdir clean of non-conf files.
- Add a default_luks_encryption define, and set it to luks2, sed
  this macro into source, future versions of udisks will not need
  this, as upstream moves to luks2 by default.
- Ghost a dir/file created by us.
- Split out API docs into separate docs sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Drop gtk-doc BuildRequires, and pass disable-gtk-doc to
  configure, the included gtk-docs are fine, we do not need to
  build them ourselves.</changelog>
  <changelog author="jsegitz@suse.com" date="1653048000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_udisks2-zram-setup@.service.patch
  * harden_udisks2.service.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1668600000">- fix crash during shutdown (bsc#1205371)
  * add:
    0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669118400">- avoid wakening spun-down disks on unrelated events (bsc#1120608)
  * add:
    0001-udisksata-Move-the-low-level-PM-state-call.patch
    0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch
    0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1755864000">- (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds
  read in udisks daemon (bsc#1248502)
  + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch</changelog>
</package>
<package pkgid="2f6e9913ad10922e79734982874ca5021ceee24d1b903fc64ef9a663cb104c1c73a37c890b80ef6e9f7db7b7a85cbde5576f77e69a109617c66aa35392f737a8" name="unbound-anchor-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="slfo.1.1_3.1"/>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 1.19.0:
  * Features:
  - Fix #850: [FR] Ability to use specific database in Redis, with
    new redis-logical-db configuration option.
  - Merge #944: Disable EDNS DO. Disable the EDNS DO flag in upstream
    requests. This can be helpful for devices that cannot handle
    DNSSEC information. But it should not be enabled otherwise, because
    that would stop DNSSEC validation. The DNSSEC validation would not
    work for Unbound itself, and also not for downstream users. Default
    is no. The option is disable-edns-do: no
  - Expose the script filename in the Python module environment 'mod_env'
    instead of the config_file structure which includes the linked list
    of scripts in a multi Python module setup; fixes #79.
  - Expose the configured listening and outgoing interfaces, if any, as
    a list of strings in the Python 'config_file' class instead of the
    current Swig object proxy; fixes #79.
  - Mailing list patches from Daniel Gröber for DNS64 fallback to plain
    AAAA when no A record exists for synthesis, and minor DNS64 code
    refactoring for better readability.
  - Merge #951: Cachedb no store. The cachedb-no-store: yes option is
    used to stop cachedb from writing messages to the backend storage.
    It reads messages when data is available from the backend.
    The default is no.
  * Bug Fixes:
  - Fix for version generation race condition that ignored changes.
  - Fix #942: 1.18.0 libunbound DNS regression when built without OpenSSL.
  - Fix for WKS call to getservbyname that creates allocation on exit in
    unit test by testing numbers first and testing from the services list later.
  - Fix autoconf 2.69 warnings in configure.
  - Fix #927: unbound 1.18.0 make test error. Fix make test without SHA1.
  - Merge #931: Prevent warnings from -Wmissing-prototypes.
  - Fix to scrub resource records of type A and AAAA that have an
    inappropriate size. They are removed from responses.
  - Fix to move msgparse_rrset_remove_rr code to util/msgparse.c.
  - Fix to add EDE text when RRs have been removed due to length.
  - Fix to set ede match in unit test for rr length removal.
  - Fix to print EDE text in readable form in output logs.
  - Fix send of udp retries when ENOBUFS is returned. It stops looping
    and also waits for the condition to go away. Reported by Florian Obser.
  - Fix authority zone answers for obscured DNAMEs and delegations.
  - Merge #936: Check for c99 with autoconf versions prior to 2.70.
  - Fix to remove two c99 notations.
  - Fix rpz tcp-only action with rpz triggers nsdname and nsip.
  - Fix misplaced comment.
  - Merge #881: Generalise the proxy protocol code.
  - Fix #946: Forwarder returns servfail on upstream response noerror no data.
  - Fix edns subnet so that queries with a source prefix of zero cause the
    recursor send no edns subnet option to the upstream.
  - Fix that printout of EDNS options shows the EDNS cookie option by name.
  - Fix infinite loop when reading multiple lines of input on a broken remote
    control socket. Addesses #947 and #948.
  - Fix #949: "could not create control compt".
  - Fix that cachedb does not warn when serve-expired is disabled about use
    of serve-expired-reply-ttl and serve-expired-client-timeout.
  - Fix for #949: Fix pythonmod/ubmodule-tst.py for Python 3.x.
  - Better fix for infinite loop when reading multiple lines of input on a
    broken remote control socket, by treating a zero byte line the same as
    transmission end. Addesses #947 and #948.
  - For multi Python module setups, clean previously parsed module functions
    in __main__'s dictionary, if any, so that only current module functions
    are registered.
  - Fix #954: Inconsistent RPZ handling for A record returned along with CNAME.
  - Fixes for the DNS64 patches.
  - Update the dns64_lookup.rpl test for the DNS64 fallback patch.
  - Merge #955 from buevsan: fix ipset wrong behavior.
  - Update testdata/ipset.tdir test for ipset fix.
  - Fix to print detailed errors when an SSL IO routine fails via SSL_get_error.
  - Clearer configure text for missing protobuf-c development libraries.
  - autoconf.
  - Merge #930 from Stuart Henderson: add void to log_ident_revert_to_default
    declaration.
  - Fix #941: dnscrypt doesn't work after upgrade to 1.18 with suggestion by
    dukeartem to also fix the udp_ancil with dnscrypt.
  - Fix SSL compile failure for definition in log_crypto_err_io_code_arg.
  - Fix SSL compile failure for other missing definitions in log_crypto_err_io_code_arg.
  - Fix compilation without openssl, remove unused function warning.
  - Mention flex and bison in README.md when building from repository source.</changelog>
  <changelog author="onlyjak0b@mailbox.org" date="1706011200">- Use prefixes instead of sudo in unbound.service (boo#1215628)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1707220800">- as we use --disable-explicit-port-randomisation, also disable
  outgoing-port-permit and outgoing-port-avoid in config file to
  suppress the related unbound-checkconf warnings on every start</changelog>
  <changelog author="pmonreal@suse.com" date="1709121600">- Update to 1.19.1:
  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
  - Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1709899200">- Update to 1.19.2:
  * Bug Fixes:
  - Fix CVE-2024-1931, Denial of service when trimming EDE text
    on positive replies.
    [bsc#1221164]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1710936000">- Update to 1.19.3:
  * Features:
  - Merge PR #973: Use the origin (DNAME) TTL for synthesized
    CNAMEs as per RFC 6672.
  * Bug Fixes
  - Fix unit test parse of origin syntax.
  - Use 127.0.0.1 explicitly in tests to avoid delays and errors
    on newer systems.
  - Fix #964: config.h.in~ backup file in release tar balls.
  - Merge #968: Replace the obsolescent fgrep with grep -F in
    tests.
  - Merge #971: fix 'WARNING: Message has 41 extra bytes at end'.
  - Fix #969: [FR] distinguish Do53, DoT and DoH in the logs.
  - Fix dnstap that assertion failed on logging other than UDP
    and TCP traffic. It lists it as TCP traffic.
  - Fix to sync the tests script file common.sh.
  - iana portlist update.
  - Updated IPv4 and IPv6 address for b.root-servers.net in root
    hints.
  - Update test script file common.sh.
  - Fix tests to use new common.sh functions, wait_logfile and
    kill_from_pidfile.
  - Fix #974: doc: default number of outgoing ports without
    libevent.
  - Merge #975: Fixed some syntax errors in rpl files.
  - Fix root_zonemd unit test, it checks that the root ZONEMD
    verifies, now that the root has a valid ZONEMD.
  - Update example.conf with cookie options.
  - Merge #980: DoH: reject non-h2 early. To fix #979: Improve
    errors for non-HTTP/2 DoH clients.
  - Merge #985: Add DoH and DoT to dnstap message.
  - Fix #983: Sha1 runtime insecure change was incomplete.
  - Remove unneeded newlines and improve indentation in remote
    control code.
  - Merge #987: skip edns frag retry if advertised udp payload
    size is not smaller.
  - Fix unit test for #987 change in udp1xxx retry packet send.
  - Merge #988: Fix NLnetLabs#981: dump_cache truncates large
    records.
  - Fix to link with -lcrypt32 for OpenSSL 3.2.0 on Windows.
  - Fix to link with libssp for libcrypto and getaddrinfo check
    for only header. Also update crosscompile to remove ssp for
    32bit.
  - Merge #993: Update b.root-servers.net also in example config
    file.
  - Update workflow for ports to use newer openssl on windows
    compile.
  - Fix warning for windres on resource files due to
    redefinition.
  - Fix for #997: Print details for SSL certificate failure.
  - Update error printout for duplicate trust anchors to include
    the trust anchor name (relates to #920).
  - Update message TTL when using cached RRSETs. It could result
    in non-expired messages with expired RRSETs (non-usable
    messages by Unbound).
  - Merge #999: Search for protobuf-c with pkg-config.
  - Fix #1006: Can't find protobuf-c package since #999.
  - Fix documentation for access-control in the unbound.conf man
    page.
  - Merge #1010: Mention REFUSED has the TC bit set with
    unmatched allow_cookie acl in the manpage. It also fixes the
    code to match the documentation about clients with a valid
    cookie that bypass the ratelimit regardless of the
    allow_cookie acl.
  - Document the suspend argument for process_ds_response().
  - Move github workflows to use checkoutv4.
  - Fix edns subnet replies for scope zero answers to not get
    stored in the global cache, and in cachedb, when the upstream
    replies without an EDNS record.
  - Fix for #1022: Fix ede prohibited in access control refused
    answers.
  - Fix unbound-control-setup.cmd to use 3072 bits so that
    certificates are long enough for newer OpenSSL versions.
  - Fix TTL of synthesized CNAME when a DNAME is used from cache.
  - Fix unbound-control-setup.cmd to have CA v3 basicConstraints,
    like unbound-control-setup.sh has.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1715169600">- Update to 1.20.0:
  Features:
  * The config for discard-timeout, wait-limit, wait-limit-cookie,
    wait-limit-netblock and wait-limit-cookie-netblock was added,
    for the fix to the DNSBomb issue.
  * Merge GH#1027: Introduce 'cache-min-negative-ttl' option.
  * Merge GH#1043 from xiaoxiaoafeifei: Add loongarch support;
    updates config.guess(2024-01-01) and config.sub(2024-01-01),
    verified with upstream.
  * Implement cachedb-check-when-serve-expired: yes option, default
    is enabled. When serve expired is enabled with cachedb, it
    first checks cachedb before serving the expired response.
  * Fix GH#876: [FR] can unbound-checkconf be silenced when
    configuration is valid?
  Bug Fixes:
  * Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to
    Xiang Li from the Network and Information Security Lab of
    Tsinghua University for reporting it.
  * Update doc/unbound.doxygen with 'doxygen -u'. Fixes option
    deprecation warnings and updates with newer defaults.
  * Remove unused portion from iter_dname_ttl unit test.
  * Fix validator classification of qtype DNAME for positive and
    redirection answers, and fix validator signature routine for
    dealing with the synthesized CNAME for a DNAME without
    previously encountering it and also for when the qtype is
    DNAME.
  * Fix qname minimisation for reply with a DNAME for qtype CNAME
    that answers it.
  * Fix doc test so it ignores but outputs unsupported doxygen
    options.
  * Fix GH#1021 Inconsistent Behavior with Changing
    rpz-cname-override and doing a unbound-control reload.
  * Merge GH#1028: Clearer documentation for tcp-idle-timeout and
    edns-tcp-keepalive-timeout.
  * Fix GH#1029: rpz trigger clientip and action rpz-passthru not
    working as expected.
  * Fix rpz that the rpz override is taken in case of clientip
    triggers. Fix that the clientip passthru action is logged. Fix
    that the clientip localdata action is logged. Fix rpz override
    action cname for the clientip trigger.
  * Fix to unify codepath for local alias for rpz cname action
    override.
  * Fix rpz for cname override action after nsdname and nsip
    triggers.
  * Fix that addrinfo is not kept around but copied and freed, so
    that log-destaddr uses a copy of the information, much like NSD
    does.
  * Merge GH#1030: Persist the openssl and expat directories for
    repeated Windows builds.
  * Fix that rpz CNAME content is limited to the max number of
    cnames.
  * Fix rpz, it follows iterator CNAMEs for nsip and nsdname and
    sets the reply query_info values, that is better for debug
    logging.
  * Fix rpz that copies the cname override completely to the temp
    region, so there are no references to the rpz region.
  * Add rpz unit test for nsip action override.
  * Fix rpz for qtype CNAME after nameserver trigger.
  * Fix rpz so that rpz CNAME can apply after rpz CNAME. And fix
    that clientip and nsip can give a CNAME.
  * Fix localdata and rpz localdata to match CNAME only if no
    direct type match is available.
  * Merge GH#831 from Pierre4012: Improve Windows NSIS installer
    script (setup.nsi).
  * For GH#831: Format text, use exclamation icon and explicit label
    names.
  * Fix name of unit test for subnet cache response.
  * Fix GH#1032: The size of subnet_msg_cache calculation mistake
    cause memory usage increased beyond expectations.
  * Fix for GH#1032, add safeguard to make table space positive.
  * Fix comment in lruhash space function.
  * Fix to add unit test for lruhash space that exercises the
    routines.
  * Fix that when the server truncates the pidfile, it does not
    follow symbolic links.
  * Fix that the server does not chown the pidfile.
  * Fix GH#1034: DoT forward-zone via unbound-control.
  * Fix for crypto related failures to have a better error string.
  * Fix GH#1035: Potential Bug while parsing port from the
    "stub-host" string; also affected forward-zones and
    remote-control host directives.
  * Fix GH#369: dnstap showing extra responses; for client responses
    right from the cache when replying with expired data or
    prefetching.
  * Fix GH#1040: fix heap-buffer-overflow issue in function
    cfg_mark_ports of file util/config_file.c.
  * For GH#1040: adjust error text and disallow negative ports in
    other parts of cfg_mark_ports.
  * Fix comment syntax for view function views_find_view.
  * Fix GH#595: unbound-anchor cannot deal with full disk; it will
    now first write out to a temp file before replacing the
    original one, like Unbound already does for
    auto-trust-anchor-file.
  * Fixup compile without cachedb.
  * Add test for cachedb serve expired.
  * Extended test for cachedb serve expired.
  * Fix makefile dependencies for fake_event.c.
  * Fix cachedb for serve-expired with serve-expired-reply-ttl.
  * Fix to not reply serve expired unless enabled for cachedb.
  * Fix cachedb for serve-expired with
    serve-expired-client-timeout.
  * Fixup unit test for cachedb server expired client timeout with
    a check if response if from upstream or from cachedb.
  * Fixup cachedb to not refetch when serve-expired-client-timeout
    is used.
  * Merge GH#1049 from Petr Menšík: Py_NoSiteFlag is not needed since
    Python 3.8
  * Fix GH#1048: Update ax_pkg_swig.m4 and ax_pthread.m4.
  * Fix configure, autoconf for GH#1048.
  * Add checklock feature verbose_locking to trace locks and
    unlocks.
  * Fix edns subnet to sort rrset references when storing messages
    in the cache. This fixes a race condition in the rrset locks.
  * Merge GH#1053: Remove child delegations from cache when
    grandchild delegations are returned from parent.
  * Fix ci workflow for macos for moved install locations.
  * Fix configure flto check error, by finding grep for it.
  * Merge GH#1041: Stub and Forward unshare. This has one structure
    for them and fixes GH#1038: fatal error: Could not initialize
    thread / error: reading root hints.
  * Fix to disable fragmentation on systems with IP_DONTFRAG, with
    a nonzero value for the socket option argument.
  * Fix doc unit test for out of directory build.
  * Fix cachedb with serve-expired-client-timeout disabled. The
    edns subnet module deletes global cache and cachedb cache when
    it stores a result, and serve-expired is enabled, so that the
    global reply, that is older than the ecs reply, does not return
    after the ecs reply expires.
  * Add unit tests for cachedb and subnet cache expired data.
  * Man page entry for unbound-checkconf -q.
  * Cleanup unnecessary strdup calls for EDE strings.
  * Fix doxygen comment for errinf_to_str_bogus.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1723723200">- Update to 1.21.0:
  Security Fixes:
  * Merge #1073: fix null pointer dereference issue in function
    ub_ctx_set_fwd.
    [CVE-2024-43167, bsc#1229068]
  Features:
  * Fix #1071: [FR] Clear both in-memory and cachedb module cache
    with `unbound-control flush*` commands.
  * Fix #144: Port ipset to BSD pf tables.
  * Add dnstap-sample-rate that logs only 1/N messages, for high
    volume server environments. Thanks Dan Luther.
  * Add root key 38696 from 2024 for DNSSEC validation. It is added
    to the default root keys in unbound-anchor. The content can be
    inspected with `unbound-anchor -l`.
  * Merge #1090: Cookie secret file. Adds `cookie-secret-file:
    "unbound_cookiesecrets.txt"` option to store cookie secrets for
    EDNS COOKIE secret rollover. The remote control
    add_cookie_secret, activate_cookie_secret and
    drop_cookie_secret commands can be used for rollover, the
    command print_cookie_secrets shows the values in use.
  Bug Fixes:
  * Fix CAMP issues with global quota. Thanks to Huayi
    Duan, Marco Bearzi, Jodok Vieli, and Cagin Tanir from NetSec
    group, ETH Zurich.
  * Fix CacheFlush issues with limit on NS RRs. Thanks to Yehuda
    Afek, Anat Bremler-Barr, Shoham Danino and Yuval Shavitt
    (Tel-Aviv University and Reichman University).
  * Merge #1062: Fix potential overflow bug while parsing port in
    function cfg_mark_ports.
  * Fix for #1062: declaration before statement, avoid print of
    null, and redundant check for array size.
  * Fix to squelch udp connect errors in the log at low verbosity
    about invalid argument for IPv6 link local addresses.
  * Fix when the mesh jostle is exceeded that nameserver targets
    are marked as resolved, so that the lookup is not stuck on the
    requestlist.
  * Add missing common functions to tdir tests.
  * Merge #1070: Fix rtt assignement for low values of
    infra-cache-max-rtt.
  * Merge #1069: Fix unbound-control stdin commands for
    multi-process Unbounds.
  * Fix unbound-control commands that read stdin in multi-process
    operation (local_zones_remove, local_zones, local_datas_remove,
    local_datas, view_local_datas_remove, view_local_datas). They
    will be properly distributed to all processes. dump_cache and
    load_cache are no longer supported in multi-process operation.
  * Remove testdata/remote-threaded.tdir.
    testdata/09-unbound-control.tdir now checks both single and
    multi process/thread operation.
  * Fix to print a parse error when config is read with no name for
    a forward-zone, stub-zone or view.
  * Fix for parse end of forward-zone, stub-zone and view.
  * Fix for #1064: Fix that cachedb expired messages are considered
    insecure, and thus can be served to clients when dnssec is
    enabled.
  * Fix #1059: Intermittent DNS blocking failure with local-zone
    and always_nxdomain. Addition of local_zones dynamically via
    unbound-control was not finding the zone's parent correctly.
  * Fix #1064: Unbound 1.20 Cachedb broken?
  * Fix unused variable warning on compilation with no thread
    support.
  * unbound-control-setup: check openssl availability before doing
    anything, patch from Michael Tokarev.
  * Update patch to remove 'command' shell builtin and update error
    text.
  * Fix to enable that SERVFAIL is cached, for a short period, for
    more cases. In the cases where limits are exceeded.
  * Fix spelling of tcp-idle-timeout docs, from Michael Tokarev.
  * Merge #1078: Only check old pid if no username.
  * Fix #1079: tags from tagged rpz zones are no longer honored
    after upgrade from 1.19.3 to 1.20.0.
  * Fix for #1079: fix RPZ taglist in iterator callback that no
    client info is like no taglist intersection.
  * Fix to squelch connection reset by peer errors from log. And
    fix that the tcp read errors are labeled as initial for the
    first calls.
  * Merge #1080: AddressSanitizer detection in tdir tests and
    memory leak fixes.
  * Fix memory leak when reload_keep_cache is used and num-threads
    changes.
  * Fix memory leak on exit for unbound-dnstap-socket; creates
    false negatives during testing.
  * Fix memory leak in setup of dsa sig.
  * Fix typos for 'the the' in text.
  * Fix validation for repeated use of a DNAME record.
  * Add unit test for validation of repeated use of a DNAME record.
  * Fix #1091: Build fails with OpenSSL &gt;= 3.0 built with
    OPENSSL_NO_DEPRECATED.
  * Fix #1092: Ubuntu 22.04 Jammy fails to compile unbound 1.20.0;
    by adding helpful text for the Python interpreter version and
    allowing the default pkg-config unavailability error message to
    be shown.
  * Fix pkg-config availability check in dnstap/dnstap.m4 and
    systemd.m4.
  * Explicitly set the RD bit for the mesh query flags when
    prefetching. These queries have no waiting client but they need
    to be treated as recursive.
  * Fix ip-ratelimit-cookie setting, it was not applied.
  * Fix to remove unused include from the readzone test program.
  * Fix unused variable warning in do_cache_remove.
  * Fix compile warning in worker pthread id printout.
  * Add unit test skip files and bison and flex output to
    gitignore.
  * Fix to use modstack_init in zonemd unit test.
  * Fix to remove unneeded linebreak in fptr_wlist.c.
  * Fix compile warnings in fptr_wlist.c.
  * Fix for repeated use of a DNAME record: first overallocate and
    then move the exact size of the init value to avoid false
    positive heap overflow reads from address sanitizers.
  * Fix to print details about the failure to lookup a DNSKEY
    record when validation fails due to the missing DNSKEY. Also
    for key prime and DS lookups.
  * Fix for neater printout for error for missing DS response.
  * Fix neater printout.
  * Fix #1099: Unbound core dump on SIGSEGV.
  * Fix for #1099: Fix to check for deleted RRset when the contents
    is updated and fetched after it is stored, and also check for a
    changed RRset.
  * Don't check for message TTL changes if the RRsets remain the
    same.
  * Fix that validation reason failure that uses string print uses
    separate buffer that is passed, from the scratch validation
    buffer.
  * Fixup algo_needs_reason string buffer length.
  * Fix shadowed error string variable in validator dnskey
    handling.
  * Update list of known EDE codes.
  * For #773: In contrib/unbound.service.in set unbound to start
    after network-online.target. Also for
    contrib/unbound_portable.service.in.
  * Fix #1103: unbound 1.20.0 segmentation fault with nghttp2.
  * For #1103: fix to also drop mesh state reference when a h2
    reply is dropped.
  * Add RPZ tag tests in acl_interface.tdir.
  * For #1102: clearer text for using interface-* options for the
    loopback interface.
  * For #1103: fix to also drop mesh state reference when the
    discard limit is reached, when there is an error making a new
    recursion state and when the connection is dropped with
    is_drop.
  * For #1103: Fix to drop mesh state reference for the http2
    stream associated with the reply, not the currently active
    stream. And it does not remove it twice on a mesh_send_reply
    call. The reply h2_stream is NULL when not in use, for more
    initialisation.
  * Fix dnstap wakeup, a running wakeup timer is left to expire and
    not increased, a timer is started when the dtio thread is
    sleeping, the timer set disabled when the dtio thread goes to
    sleep, and after sleep the thread checks to see if there are
    messages to log immediately.
  * Merge #1110: Make fallthrough explicit for libworker.c.
  * For #1110: Test for fallthrough attribute in configure and add
    fallthrough attribute annotations.
  * Fix compile when the compiler does not support the noreturn
    attribute.
  * Fix to have empty definition when not supported for weak
    attribute.
  * Fix uninitialized variable warning in create_tcp_accept_sock.
  * Fix link of dnstap without openssl.
  * Fix link of unbound-dnstap-socket without openssl.
  * Fix #1106: ratelimit-below-domain logs the wrong FROM address.
  * Cleanup ede.tdir test.
  * For #935 and #1104, clarify RPZ order and semantics.
  * Fix to document parameters of auth_zone_verify_zonemd_with_key.
  * Fix for #1114: Fix that cache fill for forward-host names is
    performed, so that with nonzero target-fetch-policy it fetches
    forwarder addresses and uses them from cache. Also updated that
    delegation point cache fill routines use CDflag for AAAA
    message lookups, so that its negative lookup stops a recursion
    since the cache uses the bit for disambiguation for dns64 but
    the recursion uses CDflag for the AAAA target lookups, so the
    check correctly stops a useless recursion by its cache lookup.
  * Fix dnstap test program, cleans up to have clean memory on
    exit, for tap_data_free, does not delete NULL items. Also it
    does not try to free the tail, specifically in the free of the
    list since that picked up the next item in the list for its
    loop causing invalid free. Added internal unit test to
    unbound-dnstap-socket for that.
  * Fix that the worker mem report with alloc stats does not
    attempt to print memory use of forwards and hints if they have
    been deleted already.
  * Fix that alloc stats has strdup checks, it stops debuggers from
    complaining about mismatch at free time.
  * Fix testbound for alloc stats strdup in util/alloc.c.
  * Fix that alloc stats for forwards and hints are printed, and
    when alloc stats is enabled, the unit test for unbound control
    waits for reloads to complete.
  * Fix that for windows the module startup is called and sets up
    the module-config.
  * Fix spelling for the cache-min-negative-ttl entry in the
    example.conf.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744113600">- Update to 1.22.0:
  Security Fixes:
  * Fix CVE-2024-8508, unbounded name compression could lead to
    denial of service.
    [CVE-2024-8508, bsc#1231284]
  Features:
  * Add iter-scrub-ns, iter-scrub-cname and max-global-quota
    configuration options.
  * Merge patch to fix for glue that is outside of zone, with
    `harden-unverified-glue`, from Karthik Umashankar (Microsoft).
    Enabling this option protects the Unbound resolver against bad
    glue, that is unverified out of zone glue, by resolving them.
    It uses the records as last resort if there is no other working
    glue.
  * Add redis-command-timeout: 20 and redis-connect-timeout: 200,
    that can set the timeout separately for commands and the
    connection set up to the redis server. If they are not
    specified, the redis-timeout value is used.
  * Log timestamps in ISO8601 format with timezone. This adds the
    option `log-time-iso: yes` that logs in ISO8601 format.
  * DNS over QUIC. This adds `quic-port: 853` and `quic-size: 8m`
    that enable dnsoverquic, and the counters `num.query.quic` and
    `mem.quic` in the statistics output. The feature needs to be
    enabled by compiling with libngtcp2, with
    `--with-libngtcp2=path` and libngtcp2 needs openssl+quic, pass
    that with `--with-ssl=path` to compile unbound as well.
  Bug Fixes:
  * unbound-control-setup hangs while testing for openssl presence
    starting from version 1.21.0.
  * Fix error: "memory exhausted" when defining more than 9994
    local-zones.
  * Fix documentation for cache_fill_missing function.
  * Fix Loads of logs: "validation failure: key for validation
    &lt;domain&gt;. is marked as invalid because of a previous" for
    non-DNSSEC signed zone.
  * Fix that when rpz is applied the message does not get picked up
    by the validator. That stops validation failures for the
    message.
  * Fix that stub-zone and forward-zone clauses do not exhaust
    memory for long content.
  * Fix to print port number in logs for auth zone transfer
    activities.
  * b.root renumbering.
  * Add new IANA trust anchor.
  * Fix config file read for dnstap-sample-rate.
  * Fix alloc-size and calloc-transposed-args compiler warnings.
  * Fix to limit NSEC and NSEC3 TTL when aggressive nsec is enabled
    (RFC9077).
  * Fix dns64 with prefetch that the prefetch is stored in cache.
  * Attempt to further fix doh_downstream_buffer_size.tdir
    flakiness.
  * More clear text for prefetch and minimal-responses in the
    unbound.conf man page.
  * Fix cache update when serve expired is used. Expired records
    are favored over resolution and validation failures when
    serve-expired is used.
  * Fix negative cache NSEC3 parameter compares for zero length
    NSEC3 salt.
  * Fix unbound-control-setup hangs sometimes depending on the
    openssl version.
  * Fix Cannot override tcp-upstream and tls-upstream with
    forward-tcp-upstream and forward-tls-upstream.
  * Fix to limit NSEC TTL for messages from cachedb. Fix to limit
    the prefetch ttl for messages after a CNAME with short TTL.
  * Fix to disable detection of quic configured ports when quic is
    not compiled in.
  * Fix harden-unverified-glue for AAAA cache_fill_missing lookups.
  * Fix contrib/aaaa-filter-iterator.patch for change in call
    signature for cache_fill_missing.
  * Fix to display warning if quic-port is set but dnsoverquic is
    not enabled when compiled.
  * Fix dnsoverquic to extend the number of streams when one is
    closed.
  * Fix for dnstap with dnscrypt and dnstap without dnsoverquic.
  * Fix for dnsoverquic and dnstap to use the correct dnstap
    environment.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1763035200">- Fix CVE-2025-11411 (possible domain hijacking attack).
  Since this minimal patch interferes with most of the unit tests,
  the '%check' section has been removed from the spec file.
  [CVE-2025-11411, bsc#1252525, unbound-1.22-CVE-2025-11411.patch]</changelog>
</package>
<package pkgid="9f71f06ca75dc936441a7ec366fac3887a247b211a483bad053fffa48054a2e8eab75d29ea351a5c35c682180a3bb8559cf8a720fd9e8c9d77423d0e830146d9" name="unbound-debugsource" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="slfo.1.1_3.1"/>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 1.19.0:
  * Features:
  - Fix #850: [FR] Ability to use specific database in Redis, with
    new redis-logical-db configuration option.
  - Merge #944: Disable EDNS DO. Disable the EDNS DO flag in upstream
    requests. This can be helpful for devices that cannot handle
    DNSSEC information. But it should not be enabled otherwise, because
    that would stop DNSSEC validation. The DNSSEC validation would not
    work for Unbound itself, and also not for downstream users. Default
    is no. The option is disable-edns-do: no
  - Expose the script filename in the Python module environment 'mod_env'
    instead of the config_file structure which includes the linked list
    of scripts in a multi Python module setup; fixes #79.
  - Expose the configured listening and outgoing interfaces, if any, as
    a list of strings in the Python 'config_file' class instead of the
    current Swig object proxy; fixes #79.
  - Mailing list patches from Daniel Gröber for DNS64 fallback to plain
    AAAA when no A record exists for synthesis, and minor DNS64 code
    refactoring for better readability.
  - Merge #951: Cachedb no store. The cachedb-no-store: yes option is
    used to stop cachedb from writing messages to the backend storage.
    It reads messages when data is available from the backend.
    The default is no.
  * Bug Fixes:
  - Fix for version generation race condition that ignored changes.
  - Fix #942: 1.18.0 libunbound DNS regression when built without OpenSSL.
  - Fix for WKS call to getservbyname that creates allocation on exit in
    unit test by testing numbers first and testing from the services list later.
  - Fix autoconf 2.69 warnings in configure.
  - Fix #927: unbound 1.18.0 make test error. Fix make test without SHA1.
  - Merge #931: Prevent warnings from -Wmissing-prototypes.
  - Fix to scrub resource records of type A and AAAA that have an
    inappropriate size. They are removed from responses.
  - Fix to move msgparse_rrset_remove_rr code to util/msgparse.c.
  - Fix to add EDE text when RRs have been removed due to length.
  - Fix to set ede match in unit test for rr length removal.
  - Fix to print EDE text in readable form in output logs.
  - Fix send of udp retries when ENOBUFS is returned. It stops looping
    and also waits for the condition to go away. Reported by Florian Obser.
  - Fix authority zone answers for obscured DNAMEs and delegations.
  - Merge #936: Check for c99 with autoconf versions prior to 2.70.
  - Fix to remove two c99 notations.
  - Fix rpz tcp-only action with rpz triggers nsdname and nsip.
  - Fix misplaced comment.
  - Merge #881: Generalise the proxy protocol code.
  - Fix #946: Forwarder returns servfail on upstream response noerror no data.
  - Fix edns subnet so that queries with a source prefix of zero cause the
    recursor send no edns subnet option to the upstream.
  - Fix that printout of EDNS options shows the EDNS cookie option by name.
  - Fix infinite loop when reading multiple lines of input on a broken remote
    control socket. Addesses #947 and #948.
  - Fix #949: "could not create control compt".
  - Fix that cachedb does not warn when serve-expired is disabled about use
    of serve-expired-reply-ttl and serve-expired-client-timeout.
  - Fix for #949: Fix pythonmod/ubmodule-tst.py for Python 3.x.
  - Better fix for infinite loop when reading multiple lines of input on a
    broken remote control socket, by treating a zero byte line the same as
    transmission end. Addesses #947 and #948.
  - For multi Python module setups, clean previously parsed module functions
    in __main__'s dictionary, if any, so that only current module functions
    are registered.
  - Fix #954: Inconsistent RPZ handling for A record returned along with CNAME.
  - Fixes for the DNS64 patches.
  - Update the dns64_lookup.rpl test for the DNS64 fallback patch.
  - Merge #955 from buevsan: fix ipset wrong behavior.
  - Update testdata/ipset.tdir test for ipset fix.
  - Fix to print detailed errors when an SSL IO routine fails via SSL_get_error.
  - Clearer configure text for missing protobuf-c development libraries.
  - autoconf.
  - Merge #930 from Stuart Henderson: add void to log_ident_revert_to_default
    declaration.
  - Fix #941: dnscrypt doesn't work after upgrade to 1.18 with suggestion by
    dukeartem to also fix the udp_ancil with dnscrypt.
  - Fix SSL compile failure for definition in log_crypto_err_io_code_arg.
  - Fix SSL compile failure for other missing definitions in log_crypto_err_io_code_arg.
  - Fix compilation without openssl, remove unused function warning.
  - Mention flex and bison in README.md when building from repository source.</changelog>
  <changelog author="onlyjak0b@mailbox.org" date="1706011200">- Use prefixes instead of sudo in unbound.service (boo#1215628)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1707220800">- as we use --disable-explicit-port-randomisation, also disable
  outgoing-port-permit and outgoing-port-avoid in config file to
  suppress the related unbound-checkconf warnings on every start</changelog>
  <changelog author="pmonreal@suse.com" date="1709121600">- Update to 1.19.1:
  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
  - Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1709899200">- Update to 1.19.2:
  * Bug Fixes:
  - Fix CVE-2024-1931, Denial of service when trimming EDE text
    on positive replies.
    [bsc#1221164]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1710936000">- Update to 1.19.3:
  * Features:
  - Merge PR #973: Use the origin (DNAME) TTL for synthesized
    CNAMEs as per RFC 6672.
  * Bug Fixes
  - Fix unit test parse of origin syntax.
  - Use 127.0.0.1 explicitly in tests to avoid delays and errors
    on newer systems.
  - Fix #964: config.h.in~ backup file in release tar balls.
  - Merge #968: Replace the obsolescent fgrep with grep -F in
    tests.
  - Merge #971: fix 'WARNING: Message has 41 extra bytes at end'.
  - Fix #969: [FR] distinguish Do53, DoT and DoH in the logs.
  - Fix dnstap that assertion failed on logging other than UDP
    and TCP traffic. It lists it as TCP traffic.
  - Fix to sync the tests script file common.sh.
  - iana portlist update.
  - Updated IPv4 and IPv6 address for b.root-servers.net in root
    hints.
  - Update test script file common.sh.
  - Fix tests to use new common.sh functions, wait_logfile and
    kill_from_pidfile.
  - Fix #974: doc: default number of outgoing ports without
    libevent.
  - Merge #975: Fixed some syntax errors in rpl files.
  - Fix root_zonemd unit test, it checks that the root ZONEMD
    verifies, now that the root has a valid ZONEMD.
  - Update example.conf with cookie options.
  - Merge #980: DoH: reject non-h2 early. To fix #979: Improve
    errors for non-HTTP/2 DoH clients.
  - Merge #985: Add DoH and DoT to dnstap message.
  - Fix #983: Sha1 runtime insecure change was incomplete.
  - Remove unneeded newlines and improve indentation in remote
    control code.
  - Merge #987: skip edns frag retry if advertised udp payload
    size is not smaller.
  - Fix unit test for #987 change in udp1xxx retry packet send.
  - Merge #988: Fix NLnetLabs#981: dump_cache truncates large
    records.
  - Fix to link with -lcrypt32 for OpenSSL 3.2.0 on Windows.
  - Fix to link with libssp for libcrypto and getaddrinfo check
    for only header. Also update crosscompile to remove ssp for
    32bit.
  - Merge #993: Update b.root-servers.net also in example config
    file.
  - Update workflow for ports to use newer openssl on windows
    compile.
  - Fix warning for windres on resource files due to
    redefinition.
  - Fix for #997: Print details for SSL certificate failure.
  - Update error printout for duplicate trust anchors to include
    the trust anchor name (relates to #920).
  - Update message TTL when using cached RRSETs. It could result
    in non-expired messages with expired RRSETs (non-usable
    messages by Unbound).
  - Merge #999: Search for protobuf-c with pkg-config.
  - Fix #1006: Can't find protobuf-c package since #999.
  - Fix documentation for access-control in the unbound.conf man
    page.
  - Merge #1010: Mention REFUSED has the TC bit set with
    unmatched allow_cookie acl in the manpage. It also fixes the
    code to match the documentation about clients with a valid
    cookie that bypass the ratelimit regardless of the
    allow_cookie acl.
  - Document the suspend argument for process_ds_response().
  - Move github workflows to use checkoutv4.
  - Fix edns subnet replies for scope zero answers to not get
    stored in the global cache, and in cachedb, when the upstream
    replies without an EDNS record.
  - Fix for #1022: Fix ede prohibited in access control refused
    answers.
  - Fix unbound-control-setup.cmd to use 3072 bits so that
    certificates are long enough for newer OpenSSL versions.
  - Fix TTL of synthesized CNAME when a DNAME is used from cache.
  - Fix unbound-control-setup.cmd to have CA v3 basicConstraints,
    like unbound-control-setup.sh has.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1715169600">- Update to 1.20.0:
  Features:
  * The config for discard-timeout, wait-limit, wait-limit-cookie,
    wait-limit-netblock and wait-limit-cookie-netblock was added,
    for the fix to the DNSBomb issue.
  * Merge GH#1027: Introduce 'cache-min-negative-ttl' option.
  * Merge GH#1043 from xiaoxiaoafeifei: Add loongarch support;
    updates config.guess(2024-01-01) and config.sub(2024-01-01),
    verified with upstream.
  * Implement cachedb-check-when-serve-expired: yes option, default
    is enabled. When serve expired is enabled with cachedb, it
    first checks cachedb before serving the expired response.
  * Fix GH#876: [FR] can unbound-checkconf be silenced when
    configuration is valid?
  Bug Fixes:
  * Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to
    Xiang Li from the Network and Information Security Lab of
    Tsinghua University for reporting it.
  * Update doc/unbound.doxygen with 'doxygen -u'. Fixes option
    deprecation warnings and updates with newer defaults.
  * Remove unused portion from iter_dname_ttl unit test.
  * Fix validator classification of qtype DNAME for positive and
    redirection answers, and fix validator signature routine for
    dealing with the synthesized CNAME for a DNAME without
    previously encountering it and also for when the qtype is
    DNAME.
  * Fix qname minimisation for reply with a DNAME for qtype CNAME
    that answers it.
  * Fix doc test so it ignores but outputs unsupported doxygen
    options.
  * Fix GH#1021 Inconsistent Behavior with Changing
    rpz-cname-override and doing a unbound-control reload.
  * Merge GH#1028: Clearer documentation for tcp-idle-timeout and
    edns-tcp-keepalive-timeout.
  * Fix GH#1029: rpz trigger clientip and action rpz-passthru not
    working as expected.
  * Fix rpz that the rpz override is taken in case of clientip
    triggers. Fix that the clientip passthru action is logged. Fix
    that the clientip localdata action is logged. Fix rpz override
    action cname for the clientip trigger.
  * Fix to unify codepath for local alias for rpz cname action
    override.
  * Fix rpz for cname override action after nsdname and nsip
    triggers.
  * Fix that addrinfo is not kept around but copied and freed, so
    that log-destaddr uses a copy of the information, much like NSD
    does.
  * Merge GH#1030: Persist the openssl and expat directories for
    repeated Windows builds.
  * Fix that rpz CNAME content is limited to the max number of
    cnames.
  * Fix rpz, it follows iterator CNAMEs for nsip and nsdname and
    sets the reply query_info values, that is better for debug
    logging.
  * Fix rpz that copies the cname override completely to the temp
    region, so there are no references to the rpz region.
  * Add rpz unit test for nsip action override.
  * Fix rpz for qtype CNAME after nameserver trigger.
  * Fix rpz so that rpz CNAME can apply after rpz CNAME. And fix
    that clientip and nsip can give a CNAME.
  * Fix localdata and rpz localdata to match CNAME only if no
    direct type match is available.
  * Merge GH#831 from Pierre4012: Improve Windows NSIS installer
    script (setup.nsi).
  * For GH#831: Format text, use exclamation icon and explicit label
    names.
  * Fix name of unit test for subnet cache response.
  * Fix GH#1032: The size of subnet_msg_cache calculation mistake
    cause memory usage increased beyond expectations.
  * Fix for GH#1032, add safeguard to make table space positive.
  * Fix comment in lruhash space function.
  * Fix to add unit test for lruhash space that exercises the
    routines.
  * Fix that when the server truncates the pidfile, it does not
    follow symbolic links.
  * Fix that the server does not chown the pidfile.
  * Fix GH#1034: DoT forward-zone via unbound-control.
  * Fix for crypto related failures to have a better error string.
  * Fix GH#1035: Potential Bug while parsing port from the
    "stub-host" string; also affected forward-zones and
    remote-control host directives.
  * Fix GH#369: dnstap showing extra responses; for client responses
    right from the cache when replying with expired data or
    prefetching.
  * Fix GH#1040: fix heap-buffer-overflow issue in function
    cfg_mark_ports of file util/config_file.c.
  * For GH#1040: adjust error text and disallow negative ports in
    other parts of cfg_mark_ports.
  * Fix comment syntax for view function views_find_view.
  * Fix GH#595: unbound-anchor cannot deal with full disk; it will
    now first write out to a temp file before replacing the
    original one, like Unbound already does for
    auto-trust-anchor-file.
  * Fixup compile without cachedb.
  * Add test for cachedb serve expired.
  * Extended test for cachedb serve expired.
  * Fix makefile dependencies for fake_event.c.
  * Fix cachedb for serve-expired with serve-expired-reply-ttl.
  * Fix to not reply serve expired unless enabled for cachedb.
  * Fix cachedb for serve-expired with
    serve-expired-client-timeout.
  * Fixup unit test for cachedb server expired client timeout with
    a check if response if from upstream or from cachedb.
  * Fixup cachedb to not refetch when serve-expired-client-timeout
    is used.
  * Merge GH#1049 from Petr Menšík: Py_NoSiteFlag is not needed since
    Python 3.8
  * Fix GH#1048: Update ax_pkg_swig.m4 and ax_pthread.m4.
  * Fix configure, autoconf for GH#1048.
  * Add checklock feature verbose_locking to trace locks and
    unlocks.
  * Fix edns subnet to sort rrset references when storing messages
    in the cache. This fixes a race condition in the rrset locks.
  * Merge GH#1053: Remove child delegations from cache when
    grandchild delegations are returned from parent.
  * Fix ci workflow for macos for moved install locations.
  * Fix configure flto check error, by finding grep for it.
  * Merge GH#1041: Stub and Forward unshare. This has one structure
    for them and fixes GH#1038: fatal error: Could not initialize
    thread / error: reading root hints.
  * Fix to disable fragmentation on systems with IP_DONTFRAG, with
    a nonzero value for the socket option argument.
  * Fix doc unit test for out of directory build.
  * Fix cachedb with serve-expired-client-timeout disabled. The
    edns subnet module deletes global cache and cachedb cache when
    it stores a result, and serve-expired is enabled, so that the
    global reply, that is older than the ecs reply, does not return
    after the ecs reply expires.
  * Add unit tests for cachedb and subnet cache expired data.
  * Man page entry for unbound-checkconf -q.
  * Cleanup unnecessary strdup calls for EDE strings.
  * Fix doxygen comment for errinf_to_str_bogus.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1723723200">- Update to 1.21.0:
  Security Fixes:
  * Merge #1073: fix null pointer dereference issue in function
    ub_ctx_set_fwd.
    [CVE-2024-43167, bsc#1229068]
  Features:
  * Fix #1071: [FR] Clear both in-memory and cachedb module cache
    with `unbound-control flush*` commands.
  * Fix #144: Port ipset to BSD pf tables.
  * Add dnstap-sample-rate that logs only 1/N messages, for high
    volume server environments. Thanks Dan Luther.
  * Add root key 38696 from 2024 for DNSSEC validation. It is added
    to the default root keys in unbound-anchor. The content can be
    inspected with `unbound-anchor -l`.
  * Merge #1090: Cookie secret file. Adds `cookie-secret-file:
    "unbound_cookiesecrets.txt"` option to store cookie secrets for
    EDNS COOKIE secret rollover. The remote control
    add_cookie_secret, activate_cookie_secret and
    drop_cookie_secret commands can be used for rollover, the
    command print_cookie_secrets shows the values in use.
  Bug Fixes:
  * Fix CAMP issues with global quota. Thanks to Huayi
    Duan, Marco Bearzi, Jodok Vieli, and Cagin Tanir from NetSec
    group, ETH Zurich.
  * Fix CacheFlush issues with limit on NS RRs. Thanks to Yehuda
    Afek, Anat Bremler-Barr, Shoham Danino and Yuval Shavitt
    (Tel-Aviv University and Reichman University).
  * Merge #1062: Fix potential overflow bug while parsing port in
    function cfg_mark_ports.
  * Fix for #1062: declaration before statement, avoid print of
    null, and redundant check for array size.
  * Fix to squelch udp connect errors in the log at low verbosity
    about invalid argument for IPv6 link local addresses.
  * Fix when the mesh jostle is exceeded that nameserver targets
    are marked as resolved, so that the lookup is not stuck on the
    requestlist.
  * Add missing common functions to tdir tests.
  * Merge #1070: Fix rtt assignement for low values of
    infra-cache-max-rtt.
  * Merge #1069: Fix unbound-control stdin commands for
    multi-process Unbounds.
  * Fix unbound-control commands that read stdin in multi-process
    operation (local_zones_remove, local_zones, local_datas_remove,
    local_datas, view_local_datas_remove, view_local_datas). They
    will be properly distributed to all processes. dump_cache and
    load_cache are no longer supported in multi-process operation.
  * Remove testdata/remote-threaded.tdir.
    testdata/09-unbound-control.tdir now checks both single and
    multi process/thread operation.
  * Fix to print a parse error when config is read with no name for
    a forward-zone, stub-zone or view.
  * Fix for parse end of forward-zone, stub-zone and view.
  * Fix for #1064: Fix that cachedb expired messages are considered
    insecure, and thus can be served to clients when dnssec is
    enabled.
  * Fix #1059: Intermittent DNS blocking failure with local-zone
    and always_nxdomain. Addition of local_zones dynamically via
    unbound-control was not finding the zone's parent correctly.
  * Fix #1064: Unbound 1.20 Cachedb broken?
  * Fix unused variable warning on compilation with no thread
    support.
  * unbound-control-setup: check openssl availability before doing
    anything, patch from Michael Tokarev.
  * Update patch to remove 'command' shell builtin and update error
    text.
  * Fix to enable that SERVFAIL is cached, for a short period, for
    more cases. In the cases where limits are exceeded.
  * Fix spelling of tcp-idle-timeout docs, from Michael Tokarev.
  * Merge #1078: Only check old pid if no username.
  * Fix #1079: tags from tagged rpz zones are no longer honored
    after upgrade from 1.19.3 to 1.20.0.
  * Fix for #1079: fix RPZ taglist in iterator callback that no
    client info is like no taglist intersection.
  * Fix to squelch connection reset by peer errors from log. And
    fix that the tcp read errors are labeled as initial for the
    first calls.
  * Merge #1080: AddressSanitizer detection in tdir tests and
    memory leak fixes.
  * Fix memory leak when reload_keep_cache is used and num-threads
    changes.
  * Fix memory leak on exit for unbound-dnstap-socket; creates
    false negatives during testing.
  * Fix memory leak in setup of dsa sig.
  * Fix typos for 'the the' in text.
  * Fix validation for repeated use of a DNAME record.
  * Add unit test for validation of repeated use of a DNAME record.
  * Fix #1091: Build fails with OpenSSL &gt;= 3.0 built with
    OPENSSL_NO_DEPRECATED.
  * Fix #1092: Ubuntu 22.04 Jammy fails to compile unbound 1.20.0;
    by adding helpful text for the Python interpreter version and
    allowing the default pkg-config unavailability error message to
    be shown.
  * Fix pkg-config availability check in dnstap/dnstap.m4 and
    systemd.m4.
  * Explicitly set the RD bit for the mesh query flags when
    prefetching. These queries have no waiting client but they need
    to be treated as recursive.
  * Fix ip-ratelimit-cookie setting, it was not applied.
  * Fix to remove unused include from the readzone test program.
  * Fix unused variable warning in do_cache_remove.
  * Fix compile warning in worker pthread id printout.
  * Add unit test skip files and bison and flex output to
    gitignore.
  * Fix to use modstack_init in zonemd unit test.
  * Fix to remove unneeded linebreak in fptr_wlist.c.
  * Fix compile warnings in fptr_wlist.c.
  * Fix for repeated use of a DNAME record: first overallocate and
    then move the exact size of the init value to avoid false
    positive heap overflow reads from address sanitizers.
  * Fix to print details about the failure to lookup a DNSKEY
    record when validation fails due to the missing DNSKEY. Also
    for key prime and DS lookups.
  * Fix for neater printout for error for missing DS response.
  * Fix neater printout.
  * Fix #1099: Unbound core dump on SIGSEGV.
  * Fix for #1099: Fix to check for deleted RRset when the contents
    is updated and fetched after it is stored, and also check for a
    changed RRset.
  * Don't check for message TTL changes if the RRsets remain the
    same.
  * Fix that validation reason failure that uses string print uses
    separate buffer that is passed, from the scratch validation
    buffer.
  * Fixup algo_needs_reason string buffer length.
  * Fix shadowed error string variable in validator dnskey
    handling.
  * Update list of known EDE codes.
  * For #773: In contrib/unbound.service.in set unbound to start
    after network-online.target. Also for
    contrib/unbound_portable.service.in.
  * Fix #1103: unbound 1.20.0 segmentation fault with nghttp2.
  * For #1103: fix to also drop mesh state reference when a h2
    reply is dropped.
  * Add RPZ tag tests in acl_interface.tdir.
  * For #1102: clearer text for using interface-* options for the
    loopback interface.
  * For #1103: fix to also drop mesh state reference when the
    discard limit is reached, when there is an error making a new
    recursion state and when the connection is dropped with
    is_drop.
  * For #1103: Fix to drop mesh state reference for the http2
    stream associated with the reply, not the currently active
    stream. And it does not remove it twice on a mesh_send_reply
    call. The reply h2_stream is NULL when not in use, for more
    initialisation.
  * Fix dnstap wakeup, a running wakeup timer is left to expire and
    not increased, a timer is started when the dtio thread is
    sleeping, the timer set disabled when the dtio thread goes to
    sleep, and after sleep the thread checks to see if there are
    messages to log immediately.
  * Merge #1110: Make fallthrough explicit for libworker.c.
  * For #1110: Test for fallthrough attribute in configure and add
    fallthrough attribute annotations.
  * Fix compile when the compiler does not support the noreturn
    attribute.
  * Fix to have empty definition when not supported for weak
    attribute.
  * Fix uninitialized variable warning in create_tcp_accept_sock.
  * Fix link of dnstap without openssl.
  * Fix link of unbound-dnstap-socket without openssl.
  * Fix #1106: ratelimit-below-domain logs the wrong FROM address.
  * Cleanup ede.tdir test.
  * For #935 and #1104, clarify RPZ order and semantics.
  * Fix to document parameters of auth_zone_verify_zonemd_with_key.
  * Fix for #1114: Fix that cache fill for forward-host names is
    performed, so that with nonzero target-fetch-policy it fetches
    forwarder addresses and uses them from cache. Also updated that
    delegation point cache fill routines use CDflag for AAAA
    message lookups, so that its negative lookup stops a recursion
    since the cache uses the bit for disambiguation for dns64 but
    the recursion uses CDflag for the AAAA target lookups, so the
    check correctly stops a useless recursion by its cache lookup.
  * Fix dnstap test program, cleans up to have clean memory on
    exit, for tap_data_free, does not delete NULL items. Also it
    does not try to free the tail, specifically in the free of the
    list since that picked up the next item in the list for its
    loop causing invalid free. Added internal unit test to
    unbound-dnstap-socket for that.
  * Fix that the worker mem report with alloc stats does not
    attempt to print memory use of forwards and hints if they have
    been deleted already.
  * Fix that alloc stats has strdup checks, it stops debuggers from
    complaining about mismatch at free time.
  * Fix testbound for alloc stats strdup in util/alloc.c.
  * Fix that alloc stats for forwards and hints are printed, and
    when alloc stats is enabled, the unit test for unbound control
    waits for reloads to complete.
  * Fix that for windows the module startup is called and sets up
    the module-config.
  * Fix spelling for the cache-min-negative-ttl entry in the
    example.conf.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744113600">- Update to 1.22.0:
  Security Fixes:
  * Fix CVE-2024-8508, unbounded name compression could lead to
    denial of service.
    [CVE-2024-8508, bsc#1231284]
  Features:
  * Add iter-scrub-ns, iter-scrub-cname and max-global-quota
    configuration options.
  * Merge patch to fix for glue that is outside of zone, with
    `harden-unverified-glue`, from Karthik Umashankar (Microsoft).
    Enabling this option protects the Unbound resolver against bad
    glue, that is unverified out of zone glue, by resolving them.
    It uses the records as last resort if there is no other working
    glue.
  * Add redis-command-timeout: 20 and redis-connect-timeout: 200,
    that can set the timeout separately for commands and the
    connection set up to the redis server. If they are not
    specified, the redis-timeout value is used.
  * Log timestamps in ISO8601 format with timezone. This adds the
    option `log-time-iso: yes` that logs in ISO8601 format.
  * DNS over QUIC. This adds `quic-port: 853` and `quic-size: 8m`
    that enable dnsoverquic, and the counters `num.query.quic` and
    `mem.quic` in the statistics output. The feature needs to be
    enabled by compiling with libngtcp2, with
    `--with-libngtcp2=path` and libngtcp2 needs openssl+quic, pass
    that with `--with-ssl=path` to compile unbound as well.
  Bug Fixes:
  * unbound-control-setup hangs while testing for openssl presence
    starting from version 1.21.0.
  * Fix error: "memory exhausted" when defining more than 9994
    local-zones.
  * Fix documentation for cache_fill_missing function.
  * Fix Loads of logs: "validation failure: key for validation
    &lt;domain&gt;. is marked as invalid because of a previous" for
    non-DNSSEC signed zone.
  * Fix that when rpz is applied the message does not get picked up
    by the validator. That stops validation failures for the
    message.
  * Fix that stub-zone and forward-zone clauses do not exhaust
    memory for long content.
  * Fix to print port number in logs for auth zone transfer
    activities.
  * b.root renumbering.
  * Add new IANA trust anchor.
  * Fix config file read for dnstap-sample-rate.
  * Fix alloc-size and calloc-transposed-args compiler warnings.
  * Fix to limit NSEC and NSEC3 TTL when aggressive nsec is enabled
    (RFC9077).
  * Fix dns64 with prefetch that the prefetch is stored in cache.
  * Attempt to further fix doh_downstream_buffer_size.tdir
    flakiness.
  * More clear text for prefetch and minimal-responses in the
    unbound.conf man page.
  * Fix cache update when serve expired is used. Expired records
    are favored over resolution and validation failures when
    serve-expired is used.
  * Fix negative cache NSEC3 parameter compares for zero length
    NSEC3 salt.
  * Fix unbound-control-setup hangs sometimes depending on the
    openssl version.
  * Fix Cannot override tcp-upstream and tls-upstream with
    forward-tcp-upstream and forward-tls-upstream.
  * Fix to limit NSEC TTL for messages from cachedb. Fix to limit
    the prefetch ttl for messages after a CNAME with short TTL.
  * Fix to disable detection of quic configured ports when quic is
    not compiled in.
  * Fix harden-unverified-glue for AAAA cache_fill_missing lookups.
  * Fix contrib/aaaa-filter-iterator.patch for change in call
    signature for cache_fill_missing.
  * Fix to display warning if quic-port is set but dnsoverquic is
    not enabled when compiled.
  * Fix dnsoverquic to extend the number of streams when one is
    closed.
  * Fix for dnstap with dnscrypt and dnstap without dnsoverquic.
  * Fix for dnsoverquic and dnstap to use the correct dnstap
    environment.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1763035200">- Fix CVE-2025-11411 (possible domain hijacking attack).
  Since this minimal patch interferes with most of the unit tests,
  the '%check' section has been removed from the spec file.
  [CVE-2025-11411, bsc#1252525, unbound-1.22-CVE-2025-11411.patch]</changelog>
</package>
<package pkgid="4581d7b2c1d7940ad13296bb2bb4bcbf713ee32d08eb26824e1bc863e62337d5da412c4047568e3e6f03958628b1cc00dbf663a07a584ddbd4f4bd21071b3fe9" name="update-alternatives-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="slfo.1.1_3.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="coolo@suse.com" date="1552478400">- my attempt to rewrite %post in lua (bsc#1129036)</changelog>
  <changelog author="schwab@suse.de" date="1554206400">- Remove useless uses of rpm.expand
- Fix use of file:close</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- don't remove slave links that turned into master. Happens on usrmerge
  (boo#1180939, update-alternatives-slavetomaster.patch)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1619697600">- Refresh patches for new version
  * update-alternatives-suse.patch
- Set minimum version for po4a to 0.59 in BuildRequires
- Update file list in %files section
- Version update to 1.20.9 (boo#1181867)
  [ Guillem Jover ]
  * Test suite:
  - Pass --ignore-builtin-builddeps to dpkg-buildpackage.
- from version 1.20.8
  [ Guillem Jover ]
  * start-stop-daemon: Open the --output file in append mode.
  * dpkg: Fix --auto-deconfigure for essential and protected during
    installation. Reported by Julian Andres Klode &lt;jak@debian.org&gt;.
    See #983014.
  * dpkg-realpath: Fix resolution for absolute symlinks on «/».
    Closes: #983855
  * dpkg-realpath: Fix symlink loop tracker.
  * Perl modules:
  - Test::Dpkg: Fix test data path fetching on CPAN.
  - Dpkg::Exit: Preserve exit code in END block.
  * Build system:
  - Group Test::Dpkg changelog entries into “Perl modules” section.
  * Packaging:
  - Run autopkgtest test suites in verbose mode.
  * Test suite:
  - Set PERL in the perl test suite.
  - Use gunzip instead of zcat and assume it might not be present.
  - Mock dpkg and gcc for architecture detection code.
  - Initialize DEB_BUILD_ARCH and DEB_HOST_ARCH to avoid computing them.
  - Update suppressions for cppcheck 2.4.
  [ Update man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #981884
  * German (Helge Kreutzmann).
  * Portuguese (Américo Monteiro). Closes: #980018
  [ Update programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #981882
  [ Update scripts translations ]
  * German (Helge Kreutzmann). Closes: #983865
- from version 1.20.7
  [ Guillem Jover ]
  * libdpkg: Do not consider the database locked with a missing lock file.
    Reported by David Kalnischkies &lt;donkult@debian.org&gt;.
  * Documentation:
  - man: Clarify and expand information on dpkg-realpath(1) man page.
    Closes: #979564
  * Packaging:
  - Update copyright notices in debian/copyright.
  - Bump Standards-Version to 4.5.1 (no changes required).
  * Test suite:
  - On as-root mode do not use sudo if already running as root.
  - Print WARN instead of FAIL for maintscript fd leaks.
  [ Update man pages translations ]
  * German (Helge Kreutzmann).
  [ Update programs translations ]
  * German (Sven Joachim).
- from version 1.20.6
  [ Guillem Jover ]
  * libdpkg: Fix undefined behavior in varbuf functions.
    Reported by KOLANICH &lt;kolan_n@mail.ru&gt;.
  * libdpkg: Fix memory leaks in tar_extractor().
  * libdpkg: Fix memory leak in trigger deferred processing.
    Reported by KOLANICH &lt;kolan_n@mail.ru&gt;.
  * libdpkg: Fix memory leak in filesystem treewalk node free function.
  * libdpkg: Fix memory leak in filesystem treewalk iterator.
  * libdpkg: Fix single-instance memory leak with fsys dir.
  * libdpkg: Fix short-lived memory leaks.
  * libdpkg: Reset error context errmsg after free().
  * dpkg: Fix memory leak for cidir.
    Reported by KOLANICH &lt;kolan_n@mail.ru&gt;.
  * dpkg: Fix short-lived memory leak in --force-help output.
    Based on a patch by KOLANICH &lt;kolan_n@mail.ru&gt;.
  * dpkg-deb: Fix single-instance memory leak on missing conffiles control
    file.
  * dpkg-divert: Fix short-lived memory leaks.
  * dpkg-realpath: Add new -z, --zero option.
    Requested by Johannes Schauer &lt;josch@debian.org&gt;.
  * dpkg-deb: Make decompression error message more descriptive.
    Closes: #968442
  * dpkg-architecture: Add a --print-format option.
    Prompted by #968963.
  * dpkg-buildpackage: Warn on known R³ values in uppercase.
    Reported by Niels Thykier &lt;niels@thykier.net&gt;.
  * dpkg-buildpackage: Error out on R³ "yes" value.
    Requested by Niels Thykier &lt;niels@thykier.net&gt;.
  * dpkg-buildpackage: Clarify R³ keyword diagnostic messages.
  * dpkg-deb, dpkg-split: Fix time handling to support 64-bit time.
  * libdpkg: Check that the ar archive time is within bounds.
  * libdpkg: Ignore not-installed packages for source related virtual fields.
    Closes: #972580
  * libdpkg: Make source version parsing more robust on missing data.
    See #972580.
  * libdpkg: Do not forget not-installed packages that are set on hold.
    Reported by David Kalnischkies &lt;donkult@debian.org&gt;.
  * update-alternatives: Fix memory leaks for alternative database context on
    load errors.
  * update-alternatives: Fix short-lived memory leaks for alternative structs.
  * update-alternatives: Fix memory leaks with new_choice.
  * update-alternatives: Fix short-lived memory leaks for log_file and admdir.
  * dpkg-buildflags: Add support for DFLAGS. Closes: #975896
  * dpkg-parsechanaglog: Document --file in --help output.
  * libdpkg: Fix allocation size wrap around when growing a varbuf.
  * dpkg-query: Do not print database loading progress. Closes: #977240
  * Rename taint tag to merged-usr-via-aliased-dirs.
  * dpkg-buildflags: Enable reproducible=fixfilepath by default.
    Thanks to Vagrant Cascadian &lt;vagrant@reproducible-builds.org&gt;.
    See https://lists.debian.org/debian-devel/2020/10/msg00222.html.
    Closes: #974087
  * start-stop-daemon: Move umask setup before any file has been created.
  * start-stop-daemon: Add a new --output option to redirect stderr and stdout.
  * dpkg-maintscript-helper: Do not pass DPKG_ROOT prefixed pathmames to
    dpkg-realpath.
  * dpkg: When removing old files check the pathname with diversion and
    instdir.
  * dpkg-realpath: Make 'link includes root prefix' error more verbose.
  * libdpkg: Make sure we do not walk on rootless trees.
  * dpkg: Fix incorrect logic around printing dependency warnings.
    Thanks to Jessica Clarke &lt;jrtc27@debian.org&gt;.
    Reported by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  * Support remove-on-upgrade conffile flag via DEBIAN/conffiles.
    Based on a patch by Niels Thykier &lt;niels@thykier.net&gt;. Closes: #822462
  * dpkg-fsys-usrunmess: New program.
  * Perl modules:
  - Dpkg::Index: Add new item_opts option.
  - Dpkg::Exit: Fix exit handler on program termination. Closes: #966083
  - Dpkg::Changelog::Entry::Debian: Fix format string.
    Prompted by #967911.
  - Dpkg::Changelog::Parse: Add new verbose option.
    Prompted by #967911.
  - Dpkg::Changelog::Parse: Document 'label' option.
  - Dpkg::Source::Package::V1: Print a message when verifying tarball
    signatures.
  - Dpkg::Path: Fix pathname traversal check for symlinks. Closes: #971203
  - Dpkg::Source::Package: Honor no_check for directory traversal checks.
    See #971203.
  - Dpkg::Source::Package: Call syserr() instead of syserror().
    Reported by Drew Parsons &lt;dparsons@debian.org&gt;.
    See #849752. Closes: #976249
  - Dpkg::Path: Check first whether the files are the same by comparing
    string-wise. Closes: #849752
  - Dpkg::OpenPGP: Refactor gpg armor code into its own function.
  * Documentation:
  - man: Fix typo in --print-unset option reference.
    Reported by Ferenc Wágner &lt;wferi@debian.org&gt;. Closes: #966110
  - man: Clarify that dpkg-architecture uses some of its own variables.
    Closes: #966111
  - man: Fix casing and namespacing in VARIABLES definitions.
  - man: Fix typo in dpkg-source(1).
    Thanks to Paul Wise &lt;pabs@debian.org&gt;.
  - man: Add a reference to deb-symbols(5) in deb-src-symbols(5) DESCRIPTION.
    Prompted by #970083.
  - man: Specify that symbol, version and id are separated by a single
    whitespace. Closes: #970083
  - man: Clarify day-of-month format in deb-changelog(5).
    Reported by Axel Beckert &lt;abe@debian.org&gt;.
    See #971977.
  - man: Update update-alternatives maintainer script usage information.
    Prompted by Niels Thykier &lt;niels@thykier.net&gt;.
  - man: Switch to use L&lt;&gt; markup for URLs instead of B&lt;&gt;.
  - doc, man: Clarify that R³ values are case sensitive.
    Prompted by Niels Thykier &lt;niels@thykier.net&gt;.
  - man: Add references to deb822(5) to file formats based on it.
    Prompted by Niels Thykier &lt;niels@thykier.net&gt;.
  - man: Clarify config-files state in dpkg(1).
    Prompted by Stuart Prescott &lt;stuart@debian.org&gt;.
  - man: Fix typos.
  - man: Hyphenate multiple words in deb-override(5) format description.
  - man: Uppercase acronyms and logic operators.
  - man: Empty or whitespace-only lines in deb-conffiles(5) are not accepted.
  * Code internals:
  - libcompat, dpkg: Stop using deprecated security_context_t data type.
  - update-alternatives: Refactor alternative database context freeing into a
    new function.
  - libdpkg: Do not define the clamp macro when compiling C++ code.
    Reported by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  - libdpkg: Replace FSF address by pointing to the gnu.org URL.
  - libdpkg: Initialize pkgbin's newhash to NULL.
    Prompted by Steinar H. Gunderson &lt;sesse@debian.org&gt;.
  - libdpkg: Use memset() instead of open-coding struct blanking.
    Prompted by Steinar H. Gunderson &lt;sesse@debian.org&gt;.
  - Do not call fsys_hash_init() before command actions.
    Prompted by Steinar H. Gunderson &lt;sesse@debian.org&gt;.
  - libdpkg: Fix m_pipe() function definition prototype to match declaration.
  - libdpkg: Refactor new str_rtrim_spaces().
    Based on a patch by Niels Thykier &lt;niels@thykier.net&gt;.
  - dpkg: Call fsys_hash_find_node() outside tar_fsys_namenode_queue_push().
  - Use a conffilename variable to track the actual conffile name in the
    buffer.
    Thanks to Niels Thykier &lt;niels@thykier.net&gt;.
  * Build system:
  - Add new gen-changelog tool.
  - Pre-process the curses header before parsing it. Closes: #970545
  - Fix variable substitution in man pages.
    Reported by Niels Thykier &lt;niels@thykier.net&gt;. Closes: #978983
  - Add a README.cpan to be installed as README in the CPAN distribution.
  - Do not try to use &lt;sys/sysctl.h&gt; on GNU/Linux.
  - Fix «make distcheck» for man pages.
  - Update GitLab CI configuration to use built-in functional test suite.
  - Make it possible to override PKGDATADIR on built scripts too.
  - Disable umask to 0 for Docker executor in GitLab CI.
  - Disable functional test suite debug mode on GitLab CI.
  - Sort po4a entries in po4a.cfg.
  * Packaging:
  - Do not fail the bug-script if readlink fails. Closes: #968397
  - Improve cron file robustness on missing or empty backup files.
    Closes: #969472
  - Use AUTOPKGTEST_TMP instead of writing into the source tree.
  - Hook the functional test suite into autopkgtest.
  - Remove trailing comma from lintian profile file.
  - Do not hardcode libdpkg-perl dependency on perl:any.
    Thanks to Sven Joachim &lt;svenjoac@gmx.de&gt;.
  * Test suite:
  - Fix short lived memory leaks in unit tests.
  - Print the ehandle unit test error output on verbose mode.
  - Improve dpkg-divert test to output stdout and stderr.
  - Use intermediate variable for directory traversal item iteration.
  - Refactor root handling in Dpkg::Path unit tests.
  - Refactor test verbose check into an inline function.
  - Make it possible to include test.h from benchmarks.
  - Disable hash reports in benchmark tests unless verbose.
  - Add support for basic test try/catch/finally keywords.
  - Merge the dpkg-tests.git repository into tests/.
  - Update merged functional test suite assumptions.
  - Remove redundant test cases from the functional test suite.
  - Remove source package building support from functional test suite.
  - When using DPKG_BUILDTREE add scripts/ to DPKG_PATH.
  [ Add man pages translations ]
  * Portuguese (Américo Monteiro). Closes: #964751
  [ Update dselect translations ]
  * Dutch (Frans Spiesschaert). Closes: #968294
  * French (Didier Vidal). Closes: #964749
  [ Update man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #968743
  * German (Helge Kreutzmann).
  [ Update programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #968744
  * German (Sven Joachim).
  [ Update scripts translations ]
  * German (Helge Kreutzmann).
- from version 1.20.5
  [ Guillem Jover ]
  * Revert change to prefix the specs file spec string self_spec with +
    instead of *. The prefix is supposed to go in the text itself
    instead of the spec name, which already had it. This change only
    apparently fixed the issue at hand because gcc started parsing it as
    the «[SUFFIX]:» case, completely disabling the PIE handling.
    Thanks to Thorsten Glaser &lt;tg@mirbsd.de&gt;.
  * Perl modules:
  - Dpkg::Source::Package::V1: Explicitly initialize constructor options to
    their implicit values, otherwise other code end up assuming different
    defaults. This is required here too as this class does not call the
    initialization from its parent.
  * Build system:
  - Detect the GNU program variants for make, patch and tar in the CPAN
    distribution to replace in the Dpkg module.
  - Set DEB_BUILD_ARCH to a dummy “amd64” in the CPAN distribution tests
    to not require a dpkg(1) in the system.
  * Test suite:
  - Only print the Dpkg::Path::check_directory_traversal() error on failure.
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
- from version 1.20.4
  [ Guillem Jover ]
  * Improve PIE flags support:
  - Prefix the specs file spec string self_spec with + instead of *.
    This way we do not override any previous setting, otherwise when
    passing the -specs options twice (f.ex. to compile and link), only the
    last one will take effect, which can break the build. Closes: #870383
  * Perl modules:
  - Dpkg::Source::Package: Explicitly initialize constructor options to
    their implicit values, otherwise other code end up assuming different
    defaults. Closes: #964017
  - Dpkg::OpenPGP: Use a temporary directory for the GnuPG homedir in
    verify_signature(), to make sure we do not write to the user home
    directory, except for the trustkeys.db file if present.
  - Dpkg::Path: Refactor new check_directory_traversal() function out of
    Dpkg::Source::Package-&gt;extract().
  - Dpkg::Path: Do not do partial matches for directory traversal checks,
    expect a trailing slash after the base directory name.
  - Dpkg::Path: Catch uncanonicanizable pathnames with a proper error.
    Closes: #964111
  - Dpkg::Path: Do not consider missing symlink targets a directory
    traversal attempt. Closes: #964234
  - Dpkg::Path: Allow /dev/null for directory traversals.
    Reported by Holger Levsen &lt;holger@layer-acht.org&gt;.
  * Build system:
  - Add Module::Signature as configure recommends for CPAN.
  * Test suite:
  - Use File::Path::make_path() instead of chained mkdir() in Dpkg_Path.t.
  - Add unit tests for Dpkg::Path::check_directory_traversal().
  [ Updated programs translations ]
  * German (Sven Joachim).
- from version 1.20.3
  [ Guillem Jover ]
  * Perl modules:
  - Dpkg::OpenPGP: Pass --no-options to gpg in verify_signature().
    Reported by Bertrand Marc &lt;bmarc@debian.org&gt;. Closes: #963839
  - Dpkg::Build::Info: Clarify by giving context to the
    get_build_env_whitelist() deprecation warning. Closes: #963844
    Reported by Sven Joachim &lt;svenjoac@gmx.de&gt;.
  - Dpkg::Source::Package: Fix check_original_tarball_signature() to make
    import_key() honor require_valid_signature, which should default to
    false. Reported by Mattia Rizzolo &lt;mattia@debian.org&gt;.
  - Dpkg::OpenPGP: Use a temporary directory for the GnuPG homedir in
    import_key(), to make sure we do not write to the user home directory,
    which might be read-only or non-existent. Closes: #963944
    Reported by Mattia Rizzolo &lt;mattia@debian.org&gt;.
  * Code internals:
  - libdpkg: Print a notice if we cannot write to the log file.
  * Build system:
  - Improve error diagnosis for configure version fetching script.
    Prompted by Norbert Preining &lt;norbert@preining.info&gt;.
  [ Updated programs translations ]
  * German (Sven Joachim).
- from version 1.20.2
  * dpkg: Do not include the architecture with --robot --version.
  * update-alternatives: Create alternatives directory (/etc/alternatives)
    if it is missing, to help with installation bootstrapping.
    Reported by Johannes Schauer &lt;josch@debian.org&gt;.
  * update-alternatives: Create the log directory if it is missing.
  * Perl modules:
  - Dpkg::Source::Package: Turn the missing expected tarball signature
    error into a warning for now, as it is causing unintended fallout,
    and does not play nice (yet) with tarballs repackaged by uscan(1).
    Closes: #963821
  * Code internals:
  - update-alternatives: Move log_msg() after make_path() so that we can use
    the latter.
  - update-alternatives: Add new xstrndup() and xdirname() functions.
  * Build system:
  - Set SHELL in the test environment.
  - Do not fail if po4a is not found, and search for it just once.
  - Fix name and section generation for translated man pages. This caused
    pod2man to get an empty --name argument and not output anything,
    resulting in generating empty man pages. Closes: #963794
  * Packaging:
  - Sort debian/dpkg-dev.manpages.
  - Install deb-src-symbols(5) in dpkg-dev package.
- from version 1.20.1
  [ Guillem Jover ]
  * Fix dpkg logging regression introduced in 1.20.0:
  - libdpkg: Use varbuf member .used instead of .size in log_message(),
    to avoid printing garbage.
  - libdpkg: Open the log file as write-only instead of read-only.
    Thanks to Roderich Schupp &lt;roderich.schupp@gmail.com&gt;. Closes: #953684
  * Unify and cleanup Makefile fragment files comments, including information
    about version of introduction.
  * Add new buildopts.mk Makefile fragment to support parsing DEB_BUILD_OPTIONS
    options with arguments, such as “parallel” as DEB_BUILD_OPTION_PARALLEL.
  * dpkg-genchanges: Handle empty Date fields from parsed debian/changelog.
    Based on a patch by Baptiste BEAUPLAT &lt;lyknode@cilg.org&gt;. Closes: #956321
  * dpkg-source: Check that debian/tests/control has the required fields.
    Prompted by Felix Lechner &lt;felix.lechner@lease-up.com&gt;.
  * dpkg-deb, dpkg: Do not accept relative pathnames in DEBIAN/conffiles.
    Reported by Niels Thykier &lt;niels@thykier.net&gt;.
  * dpkg-split: Fix off-by-one check in ar header padding, that was making
    parsing error out on valid archives. Regression introduced in dpkg 1.18.8.
  * libdpkg: Fix error message for ending version character in dependency
    parser:
  - Move the version unterminated case before the catchall.
  - Print the actual wrong character and print what is expected.
  * libdpkg: Do not use econtext-&gt;errmsg on out of context abort, as it might
    be uninitialized.
  * update-alternatives: Set the umask to 022 on program start.
    Reported by Paul Wise &lt;pabs@debian.org&gt;.
  * dpkg-parsechangelog: Fix --show-field for multiline fields. We were not
    stripping trailing whitespace, and were not prefixing empty lines with
    a ‘.’, like when printing with the field names.
    Reported by Paul Wise &lt;pabs@debian.org&gt;.
  * dpkg: Add a new --robot option to be used with --version.
  * dpkg, dpkg-query: Document missing options in --help output.
  * Unify ellipsis formatting in programs --help output.
  * Add Protected field support.
  * dpkg-realpath: New program, to be used by dpkg-maintscript-helper, and
    any maintainer script that needs a realpath that can handle pathnames
    relative to the dpkg root directory.
  * dpkg-realpath: Add support for DPKG_ROOT.
    Thanks to Helmut Grohne &lt;helmut@subdivi.de&gt;.
  * dpkg-realpath: Add support for --root and --instdir options.
  * dpkg-maintscript-helper: Add support for DPKG_ROOT:
  - Add DPKG_ROOT support for conffiles.
    Thanks to David Kalnischkies &lt;david@kalnischkies.de&gt;.
  - Add DPKG_ROOT support for symlink to and from directory switches.
    Based on a patch by Bastien ROUCARIÈS &lt;roucaries.bastien@gmail.com&gt;.
    Closes: #832176
  * update-alternatives: Add DPKG_ROOT support, and new --root and --instdir
    options. Closes: #871808
  * Portability:
  - libdpkg: When using uselocale(), include &lt;xlocale.h&gt; for locale_t if
    the header is available. Needed on BSDs.
    Reported by Sirio Balmelli &lt;sirio@b-ad.ch&gt;.
  * Perl modules:
  - Dpkg: Add a LICENSE section to the POD.
  - Dpkg::Source::Package: Add new get_upstream_signing_key() method.
  - Dpkg::Source::Package: Check missing expected tarball signatures.
  - Dpkg::Source::Package::V1: Check version format matching source format.
  - Dpkg::Vendor::Debian: Add debian-nonupload.gpg keyring.
    Thanks to Taowa Munene-Tardif &lt;taowa@debian.org&gt;. Closes: #956055
  - Dpkg::Vendor::Debian: Detect merged-usr-via-symlinks also with absolute
    pathnames. Reported by Adam Borowski &lt;kilobyte@angband.pl&gt;.
  - Dpkg::Build::Info: Avoid whitelist in function name.
  - Dpkg::Shlibs::SymbolFile: Avoid blacklist and whitelist terms.
  * Documentation:
  - man: Fix misused two-fonts macros.
    Thanks to Bjarni Ingi Gislason &lt;bjarniig@rhi.hi.is&gt;. Closes: #955028
  - man: Trim trailing whitespace from output.
    Thanks to Bjarni Ingi Gislason &lt;bjarniig@rhi.hi.is&gt;. Closes: #955030
  - man: Mention that dpkg(1) does not provide all back-end interfaces.
    Prompted by Elana Hashman &lt;ehashman@debian.org&gt;.
  - man: Clarify and fix file formats SYNOPSIS.
  - man: Clarify that deb-control(5) is a subset of deb-src-control(5).
    Closes: #958229
  - man: Unify warning and note admonitions formatting.
  - man: Remove useless commented out macros.
  - man: Fix unbalanced quotes in macro arguments.
  - man: Specify the indentation level for all following .IP macros, not
    just the first one.
  - man: Use .TP macros instead of hand-crafted formatting.
  - man: Fix font markup for some variable and literal strings.
  - dpkg-maintscript-helper: Add -?, --help and --version to --help output.
  - man: Fix apt and aptitude references.
    Reported by Helge Kreutzmann &lt;debian@helgefjell.de&gt;.
  - man: Mark commands (eval) in bold and quote library names (libgcc).
    Reported by Helge Kreutzmann &lt;debian@helgefjell.de&gt;.
  - man: Use UTF-8 quotes instead of ancient groff register variables.
  - man: Use literal double quotes instead of groff escape sequences.
  - man: Clarify that we resolve bug reports not bug report numbers.
    Reported by Helge Kreutzmann &lt;debian@helgefjell.de&gt;.
  - man: Clarify POSIX shell eval command usage in dpkg-architecture(1).
  - man: Use item lists instead of verbatim or hand-crafted formatting.
  - man: Do not use verbatim formatting for text that is not an example.
  - man: Markup examples explicitly with .EX/.EE.
  - man: Fix indentation for a note admonition in dpkg-scansources(1).
  - man: Document that a 3.0 (quilt) patch cannot create or modify symlinks.
    Thanks to Johannes Schauer &lt;josch@debian.org&gt;.
  - man: Reword text to reduce length in verbatim code block.
  - man: Add semicolons before verbatim code blocks.
  - man: Update dselect methods provided. Several got removed in 1.20.0.
  - man: The Installed-Size field does not get its value from du(1) since
    1.18.0.
  - man: Fix dpkg-gencontrol -P description to not refer to dpkg-source.
    Reported by Jakub Wilk &lt;jwilk@jwilk.net&gt;.
  - man: Place description of override value column on its own paragraph.
  - man: Surround markup within verbatim blocks with .nf/.fi.
  - man: Balance font markup.
  - man: Do not nest font markup.
  - man: Use .ig/.. macros to disable text instead of commenting it out.
  - man: Do not mark end of sentence period with bold.
  - man: Add a missing comma after man page reference in SEE ALSO section.
  - man: Convert man pages from roff to POD.
  - man: Clarify the dpkg --no-act admonition.
  - man: Avoid whitelist term in dpkg-source man page.
  * Code internals:
  - Use $() in shell or qx() in perl instead of ``.
  - dpkg-split: Switch part number variables from unsigned int to int.
  - scripts: Refactor shell error handling into a shell library
  - Reformat shell code to follow the coding style.
  - update-alternatives: Parametrize option names in output strings.
  - update-alternatives: Move logging function close to output functions.
  - update-alternatives: Move argument parsing functions close to main().
  - update-alternatives: Add general purpose non-failing functions for
    administrative directory access.
  - update-alternatives: Add filesystem abstraction functions.
  * Build system:
  - Handle .git being a plain file when getting the dpkg tree version.
  - Add debian/changelog as a Changes file to the CPAN distribution.
  - Set DPKG_SERIES to 1.20.x when running the functional test suite.
  - When using po4a require at least po4a 0.59. Change the po4a --porefs
    argument from no longer supported “noline,wrap” to “file”, as wrapping
    is the default since po4a 0.58. We require po4a 0.59 as 0.58 had a
    regression in its --srcdir support.
  - Switch to set the po4a addendum in the po4a_paths section instead of
    repeating it for each man page.
  - Use po4a conditional addendum support, and remove empty addenda.
  - Use po4a mode=eof support in addenda.
  - Do not use make prerequisites on suffix rule definitions.
    Closes: #961850
  - Add man page number suffixes to the automake SUFFIXES variable.
  - Update false positive suppressions for cppcheck 2.1.
  - Install specifications and API contracts in docdir.
  - Add support for switching man pages from roff to POD format.
  - Fix shell files substitution for version variable.
  * Packaging:
  - Switch to debhelper compatibility level 13.
  - Remove debian/tmp prefix from manpages debhelper fragment files.
  - Handle missing localized man pages gracefully.
  - Install AUTHORS, THANKS, usertags, README.api and
    README.feature-removal-schedule only in dpkg.deb.
  - Rename debian/usertags to debian/README.bug-usertags.
  - Install specifications to /usr/share/doc/dpkg/ in the dpkg-dev package.
  - Detect merged-usr-via-symlinks also with absolute pathnames in
    bug-script. Reported by Adam Borowski &lt;kilobyte@angband.pl&gt;.
  * Test suite:
  - Rename deb-content test cases to make them more descriptive.
  - Skip autogenerated files from codespell.
  [ Updated programs translations ]
  * German (Sven Joachim).
  * Simplified Chinese (Boyuan Yang). Closes: #958437
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * German (Helge Kreutzmann).
- from version 1.20.0
  [ Guillem Jover ]
  * libdpkg: Do not generate a backup file for the available database.
    Closes: #343578
  * perl: Switch Getopt::Long from bundling to bundling_values. This means
    the few scripts using Getopt::Long will stop accepting options in the
    form «-ab» for «-a -b», which is not future-proof, as it does not allow
    these options to get new arguments without making them ambiguous.
  * dpkg-buildpackage: Remove transient backwards R³ compatibility code.
  * buildtools.mk: Add support for nostrip in DEB_BUILD_OPTIONS when setting
    the STRIP variable.
  * dpkg-genbuildinfo: Do not include irrelevant packages in the Binary field.
  * dpkg: Do not clear selections for unknown packages. Closes: #927752
  * dpkg-shlibdeps: Add support for new Build-Depends-Packages, to be able
    to specify multiple packages. Closes: #926669
    Based on a patch by Frank Schaefer &lt;kelledin@gmail.com&gt;.
  * perl: Remove support for versioned GnuPG 2 program and packages.
  * libdpkg: Clarify lock contender error message. Print the PID of the lock
    contender, and add a warning explaining that removing the lock file is
    never the correct solution.
  * dpkg-genchanges, dpkg-mergechangelogs: Remove support for ~vola
    versioning, as volatile.debian.org was decommissioned some time ago.
  * dpkg-genchanges, dpkg-mergechangelogs: Match ~deb also as a backport
    marker in versions. Closes: #934980
  * libdpkg, dpkg: Use new versiondescribe_c() for non-localizable call sites,
    such as when writing to a log, which should not be localized.
    Reported by Julien Cristau &lt;jcristau@debian.org&gt;.
  * dpkg-query: Try to use the package synopsis from the available file if
    not installed. Closes: #43573
  * dpkg-gencontrol: Take into account hardlinks when computing the
    Installed-Size substvar. Closes: #923475
    Patch co-authored with Sven Joachim &lt;svenjoac@gmx.de&gt;.
  * dpkg: Fix and clarify behavior for packages marked to be on “hold”. These
    need to be processed for configuration and triggers. Closes: #926472
  * dpkg: Use DPKG_ADMINDIR to set the admindir. Closes: #900071
  * dpkg-source: Remove backwards compatibility code for legacy build-profiles.
  * perl: Give more context on field parsing errors. Closes: #637060
  * dpkg-buildpackage: Add option to sanitize environment. Closes: #843776
  * update-alternatives: Cope with a missing administrative directory.
  * update-alternatives: Create the administrative directory on demand.
  * dpkg-split: Cope with a missing parts/ database directory.
  * dpkg-split: Create the parts/ database directory on demand.
  * libdpkg: Consider msdbrw_needsuperuser equivalent to msdbrw_write, so
    the same checks are performed on normal non --force-not-root operation.
  * libdpkg: Add support for bootstrapping the installation of dpkg:
    Closes: #914515
  - Create the logfile with correct permissions, and remove the code
    setting up the logfile from the dpkg postinst.
  - Allow missing status and available databases, so that they get created
    on write, and remove the code setting them up from the dpkg postinst.
    Closes: #647911
  - Do not change the ownership of the triggers database directory. Either
    we are running as root:root which means the ownership should be correct
    already, or we are not which means we cannot change it anyway.
  - Create the dpkg database directory on demand.
  - Create the updates/ database directory on demand.
  - Create the info/ database directory on demand.
  * dpkg-architecture: Fix handling of exec failing in --command.
    Reported by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  * dpkg-buildpackage: Do not accept equal signs as part of the hook names.
    Reported by Daniel Shahaf &lt;danielsh@apache.org&gt;. Closes: #948291
  * dselect: Mark a string for translation.
  * dselect: Cleanup access methods:
  - Remove harddisk methods, as they were non-functional due to fdisk
    interface changes, and do not make sense anymore as we can expect users
    to mount any such filesystem on their own, to then use a filesystem
    method instead. Prompted by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  - Remove cdrom method superseded by the multi_cd method.
  - Remove nfs methods, as there is nothing special about NFS, and mounting
    these should just be left to the local admin, who can mount any other
    remote filesystem too.
  - Remove multi_mount method, as the multi_cd method can take care of
    mounting the necessary images or devices.
  - Replace changelog with correct copyright in file header.
  * dpkg, dselect: Stop using first-person singular in output messages.
  * libdpkg: Fix memory leak in parsedb context close.
  * buildtools.mk: Add QMAKE variable. Closes: #920878
  * po: Fix translation of --compare-versions. Closes: #951614
    Thanks to Boyuan Yang &lt;byang@debian.org&gt;.
  * Perl modules:
  - Dpkg::Source::Package: Verify original tarball signatures at build time.
  - Dpkg::BuildFlags: Add new unset() method.
    Requested by Daniel Schepler &lt;dschepler@gmail.com&gt;.
  - Dpkg::Source::Package::V2: Emit a special patch header on
    single-debian-patch. Closes: #933152
  - Dpkg::Vendor::Debian: Only scan /usr/local/ directories that exist.
    Closes: #932967
  - Dpkg::Vendor::Debian: Do not set -Werror=implicit-function-declaration
    for C++. Closes: #939969
  - Dpkg::Deps: Check for valid virtual package version relations. Do not
    allow non-equal version relations in virtual provides. Closes: #930317
  - Dpkg: Remove internal lowercase variables $version, $progname,
    $admindir, $dpkglibdir and $pkgdatadir.
  - Dpkg::Changelog: Remove obsolete methods dpkg() and rfc822().
  - Dpkg::Changelog::Entry::Debian: Remove obsolete methods check_header()
    and check_trailer(). Hide variables $regex_header and $regex_trailer.
  - Dpkg::Changelog::Parse: Remove warnings of obsolete options forceplugin
    and libdir. Remove obsolete functions changelog_parse_debian() and
    changelog_parse_plugin().
  - Dpkg::Compression: Hide internal lowercase variables
    $default_compression, $default_compression_level and
    $compression_re_file_ext.
  - Dpkg::Deps::KnownFacts: Remove obsolete check_package() method.
  - Dpkg::Exit: Hide internal lowercase @handlers variable.
  - Dpkg::Gettext: Remove obsolete _g() function.
  - Dpkg::Source::Package: Hide internal lowercase variable
    @tar_ignore_default_pattern. Remove internal lowercase variable alias
    $diff_ignore_default_regexp.
  - Dpkg::Substvars: Remove obsolete no_warn() method.
  - Dpkg::Index: Change default value for unique_tuple_key to 1.
  - Dpkg::Version: Remove deprecation warning from semantic change in
    bool overload.
  - Dpkg::Checksums: Remove obsolete 'program' property warning.
  - Dpkg::Conf: Remove obsolete methods and obsolete croak for method option.
  - Dpkg::Vendor: Remove obsolete 'keyrings' hook.
  - Dpkg::Exit: Unregister all signal handlers once we have executed them.
    Closes: #932841
  - Dpkg::Exit: Register exit handlers also for __DIE__.
  - Dpkg::Source::Package::V3::Native: Do not say v1.0 for 3.0 formats.
  - Dpkg::Dist::Files: On filename parse error say file instead of package.
  - Dpkg::Substvars: Add new vendor:Name and vendor:Id substvars.
  - Dpkg::Source::Package: Detect directory traversals under debian
    directory. Reported by Felix Lechner &lt;felix.lechner@lease-up.com&gt;.
  * Documentation:
  - man: Fix uncommon wording constructs.
  - man: Use a minus sign for a literal string.
  - man: Clarify that the pager is called via «$SHELL -c».
  - dpkg-shlibdeps: Document split_soname() function.
    Prompted by Christopher Crim &lt;christopher.crim@quoininc.com&gt;.
  - Dpkg::Changelog: Document methods provided by subclasses.
    Reported by Felix Lechner &lt;felix.lechner@lease-up.com&gt;.
  - man: Globally adjust left and disable hyphenation.
  - man: Split dselect(1) --color from --colour option items.
  - man: Describe the SONAME formats supported in deb-shlibs(5).
  - man: Move template symbol documentation into new deb-src-symbols(5).
  - Dpkg::Changelog::Parse: Remove $ sigil from option names in POD.
  - Dpkg: Say class instead of object when appropriate.
  - Dpkg::Changelog: Clarify that these classes inherit from some other
    base class, which will contain the missing documentation.
    Prompted by intrigeri &lt;intrigeri@debian.org&gt;.
  - man: Clarify deb-changelog(5) format. Closes: #946780
  - man: Clarify debian/source/include-binaries format in dpkg-source(1).
    Prompted by Felix Lechner &lt;felix.lechner@lease-up.com&gt;.
  - man, doc: Clarify that the postinst "triggered" argument gets the
    trigger-name(s) as a space-separated list in the second argument.
    Prompted by Michael Biebl &lt;biebl@debian.org&gt;.
  - dselect: Update the multicd README file.
  - doc, man: Mark T and I package instances to avoid misreadings.
  * Code internals:
  - Dpkg::Source::Package: Refactor original tarball handling.
  - perl: Use File::Copy instead of spawning mv/cp commands.
  - Dpkg::OpenPGP: Refactor signature verification into a new function.
  - Dpkg::OpenPGP: Make it possible to verify detached signatures.
  - Dpkg::OpenPGP: Add support for importing an OpenPGP key into a keyring.
  - Dpkg::BuildFlags: Remove unused hash keys.
  - libdpkg: Use the variable instead of a type as sizeof() argument.
  - libdpkg: Use the totalwritten variable for a consistency check.
  - dselect: Reduce scope of variable, to avoid it being unused in a branch.
  - dpkg-deb: Fold two adjacent if conditionals into a single one.
  - dpkg: Initialize flagdeppossi in check_conflict().
  - libdpkg: Add new C locale switch over support.
  - libdpkg: Add new versiondescribe_c() to force a C locale.
  - dselect: Make baselist::draw_column_*() col arguments const.
  - libdpkg: Use p instead of name in dpkg_arch_name_is_illegal().
  - dpkg: Remove redundant condition for sourcefile in updateavailable().
  - dpkg, update-alternatives: Make variables static.
  - libdpkg: Add missing symbols to the version map.
  - libdpkg: Fix fiemap memory layout usage that confuses gcc 10 to emit a
    warning.
  - libdpkg: Only use varbuf_printf() in pkg_format_show() when necessary.
    This should speed up «dpkg-query --show» formatting.
  - libdpkg: Fix package format string to be a string literal.
    This suppresses a gcc warning.
  - dpkg: Fix short lived memory leak in --force-help handling.
  - dpkg-split: Fix short lived file descriptor leak in --auto.
  - start-stop-daemon: Explicitly ignore unimportant function return values.
  - start-stop-daemon: Fix memory leak on multiple --chuid arguments.
  - start-stop-daemon: Close the notification socket in the child.
  - libdpkg: Fix memory leaks in zlib and bz2 decompression functions.
  - libdpkg: Add new dir_make_path() and dir_make_path_parent() functions.
  - libdpkg: Add new atomic file flag to create the base path when missing.
  - libdpkg: Fix modstatdb_rw enum comments.
  - libdpkg, dpkg-query: Optimize db-fsys:Files virtual variable loading.
    We load either the entire db-fsys for all packages, possibly optimized
    per platform (such as by using fiemap), or the specific ones for the
    requested packages. This also fixes a problematic cast removing the
    constness of a variable.
  - Dpkg::Dist::Files: Document the two filename pattern formats.
  - update-alternatives: Remove redundant condition in argument parser.
  - update-alternatives: Move error context setup before calling setjmp(),
    so that cppcheck stops being confused.
  - test: Reformat 200_Dpkg_Shlibs.cpp for coding style conformance.
  - dpkg: Make it possible for the compiler to check printf() format
    string arguments on dependency printer.
  - dselect: Reorder branches in packagelist::deselect_one_of so that they
    are not duplicated.
  - dselect: Use nullptr instead of NULL.
  - dselect: Use static_cast&lt;&gt; instead of old-style type qualifier cast.
  - dselect: Do not use unnecessary old-style casts.
  - dselect: Fix variable types to avoid needing old-style casts.
  - libcompat: Disarm libselinux setexecfilecon() declaration for
    libcompat-test.
  - libdpkg: Define new VARBUF_OBJECT macro.
  - libdpkg: Add new ATOMIC_FILE_NORMAL enum value to avoid a cast in C++.
  - libdpkg: Use a new DPKG_NULL macro that works in C and C++.
  - libdpkg: Use a new DPKG_STATIC_CAST macro that works in C and C++.
  - libdpkg: Move printing of errno into dpkg_error_set().
  - libdpkg: Use a varbuf to store the problem messages per parsedb context.
  - libdpkg: Fix Doxygen comments.
  * Build system:
  - Bump minimal Perl version to 5.24.1.
  - Add a serial versioning to the m4 files.
  - Install m4 files into system aclocal directory.
  - Bump minimal gettext version to 0.19.8, to get the m4 files that can
    cross-build for musl-based systems.
  - Enable more compiler warnings.
  - Update Doxygen configuration from version 1.8.16.
  * Packaging:
  - Remove obsolete Breaks satisfied since oldstable.
  - Replace custom rule for 'configure' with call to dh_autoreconf.
    Thanks to Dan Streetman &lt;ddstreet@canonical.com&gt;. Closes: #939516
  - dselect: Remove methods state files on purge.
    Spotted by Sven Joachim &lt;svenjoac@gmx.de&gt;.
  - Switch to debhelper compatibility level 12.
  - Switch from debian/compat to debhelper-commpat in Build-Depends.
  - Bump Standards-Version to 4.5.0 (no changes required).
  * Test suite:
  - Remove perlcritic Documentation::RequirePodLinksIncludeText suppression.
  - Clarify cppcheck va_list_usedBeforeStarted suppression.
  - Skip build directories from codespell check.
  - Update stopwords for codespell 1.16.0.
  - Suppress new bogus cppcheck 1.90 false positives.
  - libdpkg: Remove redundant assignment in t-ehandle unit test.
  - Skip backup files from codespell check.
  - Ignore python-3.8 runtime warnings in codespell.
  [ Updated programs translations ]
  * German (Sven Joachim).
  * Portuguese (Miguel Figueiredo). Closes: #935695
  * Simplified Chinese (Mo Zhou). Closes: #942195, #945776
  [ Updated dselect translations ]
  * German (Sven Joachim).
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * German (Helge Kreutzmann). Closes: #931135
- from version 1.19.7
  [ Guillem Jover ]
  * dpkg: Fix off-by-one error in dpkg --abort-error. Closes: #924886
    Thanks to Tom Goulet &lt;tomg@sentex.ca&gt;.
  * dpkg: Set the force defaults before loading the config file, otherwise we
    incorrectly override them. Regression introduced in dpkg 1.19.5.
    Closes: #928671
  * dpkg: Split the trigger dependtry into two, the second of which will be
    the one checking trigger cycles when deferring trigger processing due to
    unsatisfiable dependencies. Closes: #928429
  * dpkg-deb: Validate ar member magic before normalizing any of its fields.
  * dpkg-deb: Honor --nocheck when building packages with newlines in
    filenames. Regression introduced in dpkg 1.18.1. Closes: #929727
  * Documentation:
  - rootless-builds.txt: Expand what the builder means. Mention the
    dpkg-deb option to use to set the owner and group to root. And reword
    the prototyping section to be less confusing with what is currently
    implemented. Closes: #929019
  - README: Clarify when autopoint is needed. Closes: #929601
  - Fix typos in docs and output strings. Warned by codespell.
  [ Updated programs translations ]
  * Catalan (Guillem Jover).
  [ Updated dselect translations ]
  * Catalan (Guillem Jover).
  [ Updated scripts translations ]
  * Catalan (Guillem Jover).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #926665
  * French (Jean-Pierre Giraud). Closes: #929664
- from version 1.19.6
  [ Guillem Jover ]
  * libdpkg: Add a new TAR_FORMAT_UNKNOWN enum value.
  * libdpkg: Set tar_entry to zero on tar_entry_destroy(), to avoid double
    free()s and the subsequent crashes.
  * libdpkg: Handle non end-of-tape errors from tar_header_decode().
  * libdpkg: Use ERANGE instead of EINVAL for tar_atol8() out-of-range error.
  * dpkg-gencontrol: Check presence of package build dir before traversing it.
  * Perl modules:
  - Dpkg::Source::Package::V1: Change default build option style to -sa.
    Using -sA by default means the user might lose data on overwrite if
    there is already a directory with the same name laying around.
    Closes: #910737
  - Dpkg::Source::Package: Handle Format field being undefined. On source
    format 1.0, the default is for the debian/source/format file not being
    present, which means we'll start with an empty Format field name.
    Regression introduced in dpkg 1.19.3.
  * Packaging:
  - Update usertags.
  - Install a lintian profile for dpkg based on the debian profile, so that
    we can suppress Debian-specific tags, such as the controversial one on
    vendor-specific patch series files.
  - Add Breaks on lsb-base due to start-stop-daemon exposing breakage in
    the killproc function from /lib/lsb/init-functions. Closes: #923861
  * Test suite:
  - Stop requiring (pseudo-)root in the functional test suite.
  - Export and move TESTDATA definition close to the PATH definition.
  - Quote the 'yes' command to make a comment clearer.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #924776
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #924777
  * German (Helge Kreutzmann).
- from version 1.19.5
  [ Guillem Jover ]
  * start-stop-daemon: Make sure that we get a meaningful errno on
    parse_unsigned(), so that the error messages always make sense.
  * start-stop-daemon: Add new fatalv() and fatale() functions and use the
    latter for system errors, so that we are explicit on whether we want to
    use errno for error reporting or not.
  * start-stop-daemon: Always refuse to parse a world-writable pidfile,
    except when that is /dev/null.
  * dpkg: Print the current set of enabled force options on --force-help.
  * dpkg: Parse and set new DPKG_FORCE environment variable for subprocesses.
    Closes: #666147
  * dpkg-statoverride: Add support for --force-* options.
  * dpkg-statoverride: Switch from --force option to new --force-&lt;thing&gt;
    options. Deprecate --force option which will be considered an alias for
  - -force-all for now.
  * dpkg, dpkg-statoverride: Add new option --refuse-security-mac to control
    SELinux. See #811037.
  * dpkg: Clarify error on unknown system user/group in statoverride database.
    Closes: #920880
  * dpkg-buildpackage: Clarify the warning/error on short OpenPGP key IDs.
    Closes: #922039
  * dpkg-maintscript-helper: Restrict find for dir-to-symlink move to
  - maxdepth 1. Thanks to Ralf Treinen &lt;treinen@free.fr&gt;. Closes: #922799
  * dpkg-genbuildinfo: Add support for a new Build-Tainted-By field in
    .buildinfo files. Suggested by Alexander E. Patrakov &lt;patrakov@gmail.com&gt;.
  * libdpkg: Clarify field names in error and warning messages.
  * libdpkg: Optimize error handling. Move the error reporting outside the
    involved functions so that we do not need to call gettext if there is no
    error, which has a significant performance cost.
  * libdpkg: Merge nicknames table into fieldinfos, to stop penalizing the
    lookup of non-obsolete fieldnames.
  * libdpkg: Print a more accurate warning for Revision nicknames.
  * libdpkg: Increase the pkg-hash bins size to 65521, to improve hash table
    performance at the cost of a bit more memory usage.
  * libdpkg: Blank packages that are not-installed with unknown selection.
    Closes: #922410
  * libdpkg, dpkg: Print the dpkg database directory on access errors.
    Closes: #883700
  * Perl modules:
  - Dpkg::Vendor::Debian: Add support for merged-usr-via-symlinks tainted
    tag. Suggested by Alexander E. Patrakov &lt;patrakov@gmail.com&gt;.
  - Dpkg::Vendor::Debian: Add support for usr-local-has-* tainted tags.
  - Dpkg::Source::Package: Add a missing use Dpkg::Source::Format.
    Diagnosed by Ian Jackson &lt;ijackson@chiark.greenend.org.uk&gt;.
    Closes: #921031
  * Documentation:
  - start-stop-daemon(1): Document behavior of --pidfile security checks.
    Closes: #921557
  - dpkg(1): Document the unknown selection state. Closes: #922407
  * Code internals:
  - dpkg: Move SELinux fallback label to the SELinux specific code path.
  - dpkg: Simplify maintscript_set_exec_context().
  - dpkg: Move force options support into its own file.
  - dpkg: Do not hardcode the program name in the --force-help output.
  - dpkg: Switch force options from individual variables to bit fields.
  - dpkg: Switch from a char to an enum to track the force options types.
  - dpkg: Switch to set the default force option from the forceinfos array.
  - libdpkg: New benchmark programs and infrastructure.
  - libdpkg: Add new dpkg_error_move() function.
  - libdpkg: Add new dpkg_has_error() function.
  - libdpkg: Move status names from parse errors to arguments.
  - libdpkg: Use va_arg copy instead of the original on a vasprintf() call.
  - libdpkg: Include &lt;string.h&gt; in pager.c.
    Reported by Y &lt;sevener@cock.li&gt;. Closes: #922212
  - libdpkg: Use pkg_set_want() instead of a direct assignment.
  * Build system:
  - Check whether this dist is a release, based only on the version format.
    This will avoid having to do a two staged release to get a proper perl
    distribution tarball.
  * Packaging:
  - autopkgtest: Add file to Depends fields.
  - autopkgtest: Clarify behavior on root/non-root requirement.
  - Bump Standards-Version to 4.3.0 (no changes required).
  - Remove now unused assert usertag description.
  - Remove trailing whitespace from changelog.
  - Remove Origin and Bugs fields from control file.
  - Include a bug-script to report on tainted merged-usr-via-symlinks.
  * Test suite:
  - libdpkg: Fix unit test for file_slurp(). Closes: #920974
    Diagnosed by Frank Schaefer &lt;kelledin@gmail.com&gt;.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #921942
  * German (Sven Joachim).
  * Simplified Chinese (Zhou Mo). Closes: #920972
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #921943
  * French (Jean-Pierre Giraud). Closes: #920905
  * German (Helge Kreutzmann).
- from version 1.19.4
  * start-stop-daemon: Do not sanity check the pidfile when it is specified as
    /dev/null, as that implies the caller wants to start the program no matter
    what. Closes: #920242
  * Portability:
  - start-stop-daemon: Only use SO_PASSCRED if defined. Fixes build failure
    at least on GNU/Hurd.
  * Packaging:
  - autopkgtest: Pass --disable-nls and --disable-dselect to configure.
  - autopkgtest: Change Depends to «build-essential, autoconf, pkg-config».
- from version 1.19.3
  [ Guillem Jover ]
  * dpkg-source: Stop filtering @builddeps@ from Testsuite-Triggers field.
    Closes: #910734
  * dpkg-genchanges: Only reference binary packages being uploaded, which
    means that for a source-only upload, the Binary and Description fields
    should be empty. Closes: #818618
  * dpkg-scanpackages: Do not compute unnecessary checksums when using the
  - -hash argument. Based on a patch by Chris Lamb &lt;lamby@debian.org&gt;.
    Closes: #916456
  * dpkg-scanpackages: Emit a warning with the list of repeat packages.
    Prompted by Johannes Schauer &lt;josch@debian.org&gt;.
  * start-stop-daemon: Check whether standalone --pidfile use is secure.
    Prompted by Michael Orlitzky &lt;michael@orlitzky.com&gt;.
  * start-stop-daemon: Print complete verbose lines, instead of partial lines
    with no newlines and a final print with a newline.
  * start-stop-daemon: Add new --notify-await and --notify-timeout options,
    which implement the systemd readiness protocol for services.
    Closes: #910707
  * update-alternatives: Add new --debug option.
  * update-alternatives: Fix removal of obsolete slaves from the linked list.
    Reported by Andreas Beckmann &lt;anbe@debian.org&gt;. Closes: #916799
  * vendor.mk: Fix dpkg_vendor_derives_from macro documentation.
    Thanks to Colin Watson &lt;cjwatson@debian.org&gt;. Closes: #913816
  * vendor.mk: Add support for an improved dpkg_vendor_derives_from macro.
    Version the macros so that both can be used, and default the unversioned
    one to the version 0 macro.
  * dpkg: Mark the package we are giving up on a trigger cycle as "istobe"
    normal, so that the dependency checks know they cannot expect this package
    to be processed anymore. Otherwise we ended up never detecting that we
    were not making progress, as we expected to process this package at a later
    point, when that would never happen anymore. This then was causing asserts
    in the process queue loop. Closes: #901127, #910819
  * dpkg: Reset progress_bytrigproc once we have injected it into the current
    package process queue iteration, so that we do not keep trying to process
    it, which might end up generating artificial trigger cycles, if
    dependencies are not satisfied yet.
  * dpkg: Convert one trigger processing required type into the new try-queued
    one, so that we stop skipping unsatisfiable dependency checks.
  * dpkg: Move trigproc cycle reset inside try-deferred conditional. We should
    only reset the cycle detection in case we are not bailing out from the
    processing with an error, otherwise we could come back to this package and
    detect an artificial trigger cycle.
  * dpkg: Introduce a new dependency try level for trigger processing. This
    completely defers trigger processing until after the dependency cycle
    breaking level, so to avoid generating artificial trigger cycles, when we
    end up trying to process triggers with yet unsatisifiable dependencies.
    Closes: #810724, #854478, #911620
  * dpkg: Fix --help output, to clarify which arguments are optional.
  * libdpkg: Add proper tar error handling. This makes the tar extractor
    track and report back parse errors, so that we can give more descriptive
    messages.
  * libdpkg: Detect unsupported tar entry types to give better error messages.
  * libdpkg: Add new db-fsys:Files and db-fsys:Last-Modified virtual fields.
  * Perl modules:
  - Dpkg::Changelog::Debian: Preserve modelines at EOF. Closes: #916056
    Thanks to Chris Lamb &lt;lamby@debian.org&gt; for initial test cases.
  - Dpkg::File: Make file_slurp() also accept pathnames in addition to
    filehandles.
  - Dpkg::Vendor::Ubuntu: Fix buildflags override after default setting move.
    Based on a patch by Iain Lane &lt;laney@ubuntu.com&gt; and
    Adam Conrad &lt;adconrad@ubuntu.com&gt;. Closes: #915881
  - Dpkg::Shlibs::Objdump: Remove unused Dpkg::IPC import.
  - Dpkg::Shlibs::Objdump: Only select objdump program when going to use it.
  - Dpkg::Source::Package: Do not reinitialize fields member in constructor.
  - Dpkg::Source::Patch: Do not recommend --include-removal when not
    supported. Closes: #913012
  - Dpkg::Source::Package::V3::Bzr: Fix format name in output message.
  - Dpkg::Source::Package: Add a new format option to the new constructor.
    Prompted by James McCoy &lt;jamesan@debian.org&gt;.
  - Dpkg::Source::Package: Improve debian/source/format parsing and
    validation.
  - Dpkg::Source::Format: New public module.
    Prompted by Mattia Rizzolo &lt;mattia@debian.org&gt;.
  * Documentation:
  - dpkg(1): Clarify --remove action. Closes: #914478
  - dpkg-query(1): Clarify --list option behavior when no arguments are
    specified. Closes: #917098
  - deb-control(5): Clarify by adding a reference to deb-src-control(5) and
    removing an invalid comment in the example.
    Prompted by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  - dpkg(1): Clarify databases used by --yet-to-unpack and --predep-package.
    Prompted by Johannes Schauer &lt;josch@debian.org&gt;.
  - Clarify character classes for various formats in man pages, by
    explicitly listing the character ranges within parenthesis.
    Prompted by Ian Jackson &lt;ijackson@chiark.greenend.org.uk&gt;.
  - dpkg-query(1): Document the version introducing the -f option.
  - dpkg-architecture(1): Add reference to the TERMS section in the
    VARIABLES section. Prompted by Axel Beckert &lt;abe@debian.org&gt;.
  - Fix POD for Dpkg::Interface::Storable derived method implementations.
  - Dpkg::Deps::Simple(3): Fix POD signature for new constructor.
  * Code internals:
  - dpkg-maintscript-helper: Use an explicit escape instead of a literal
    backslash.
  - Quote shell variables. Reported by Johannes Schauer &lt;josch@debian.org&gt;.
  - Switch perl code to use the new Dpkg::Source::Format module.
  - dpkg-source: Move source format selection earlier in the build.
  - dpkg-source: Use new format argument for Dpkg::Source::Package-&gt;new().
  - dpkg-shlibdeps: Remove unused variable.
  - dpkg-scanpackages: Unroll a single iteration loop.
  - start-stop-daemon: Compare foundany against 0 instead of treating it
    like a boolean.
  - start-stop-daemon: Switch code to use new info() and debug() functions.
  - update-alternatives: Use enums for actions instead of strings.
  - update-alternatives: Switch verbose selection into an enum.
  - dpkg: Negate tortoise_not_in_hare() function name and return value.
  - dpkg: Initialize trigcyclenode's next member once.
  - dpkg: Use common pattern of assigning as an iterator.
  - dpkg: Factor trigproc_new_cyclenode() out from check_trigger_cycle().
  - dpkg: Switch dependtry from an int to an enum.
  - dpkg: Move dependtry description from deferred_configure() to its
    declaration.
  - dpkg: Split trigger processing types into required, try-queued and
    try-deferred.
  - dpkg-query: Rename variable to avoid shadowing a local function.
  - When allocating use the variable instead of the type in sizeof().
  - dselect: Rename variable r to pkgbin.
  - libdpkg, dpkg: Rename r variables to fnn.
  - libdpkg: Rename ret variable to next.
  - libdpkg: Cleanup fsys module symbol names.
  - libdpkg: Rename pkg_db symbols to pkg_hash.
  - libdpkg: Add new warning printer setter function.
    Prompted by Julian Andres Klode &lt;jak@debian.org&gt;.
  - libdpkg: Add new DPKG_ERROR_OBJECT macro.
  * Build system:
  - get-version: Use a format string with printf.
  - run-script: Use $() instead of deprecated ``.
  - run-script: Remove unused PERL_PROFILE variable, PERL5OPT can be used
    instead, and does not require leaving an unquoted variable around.
  - run-script: Add «set -e».
  - Build.PL: Set environment variables only for CPAN tests.
  - Build.PL: Set locale for CPAN tests to C. Fixes CPAN#127314.
  - configure: Split AM_INIT_AUTOMAKE arguments into different lines.
  * Packaging:
  - Bump Standards-Version to 4.2.1 (no changes needed).
  - Switch to debhelper compatibility level 11.
  - Create the log file in postinst only if it does not exist.
    Prompted by Johannes Schauer &lt;josch@debian.org&gt;.
  - Add superficial autopkgtest functional tests.
  * Test suite:
  - Add new shellcheck author test.
  - Add descriptions for the shellcheck exclude codes.
  - Update cppcheck suppressions.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #912023
  * German (Sven Joachim).
  * Italian (Milo Casagrande). Closes: #915610
  * Portuguese (Miguel Figueiredo). Closes: #917813
  * Simplified Chinese (Zhou Mo). Closes: #919040
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #912024
  * German (Helge Kreutzmann).
- from version 1.19.2
  [ Guillem Jover ]
  * dpkg: Fix --force-not-root for chown() and chmod() based syscalls, and
    give a more meaningful error message on chroot(). Closes: #614126
  * dpkg-divert, dpkg-statoverride: Add new --instdir and --root options,
    and make the commands honor the DPKG_ROOT environment variable.
    Closes: #487108
  * libdpkg: Call the pager with «$SHELL -c» to respect POSIX. Closes: #910009
  * libdpkg: Do not spawn a pager if we are going to call «cat».
  * libdpkg: Honor DPKG_PAGER when spawning a pager.
    Suggested by Craig Sanders &lt;cas@taz.net.au&gt;.
  * libdpkg: Set LESS to “-FRSXMQ” if not already set, when spawning a pager.
  * libdpkg: Ignore SIGPIPE when setting up a pager, and then ignore EPIPE
    errors when writing to stdout, otherwise if we quit the pager early, the
    program will exit with an error code.
  * libdpkg: Set stdout to be fully buffered when using a pager.
  * dpkg, dpkg-query: Add new --no-pager option. For dpkg this is also a
    configuration option. Closes: #909754
  * Perl modules:
  - Dpkg::OpenPGP: Ignore Version field in enarmored output.
    Fixes CPAN#127217.
  - Dpkg::OpenPGP: Do not read the gpg user configuration file.
  - Dpkg::Source::Functions: Reimplement is_binary() w/o using diff(1).
  - Dpkg::Source::Package::V2: Split the BinaryFiles module into its own
    file, and give it a more generic name (Dpkg::Source::BinaryFiles).
  - Dpkg::Source::Package::V2: Move binary file detection to BinaryFiles
    module.
  * Documentation:
  - dpkg-buildpackage(1): Clarify --build=source explanation.
  - dsc(5): Clarify what “flattened” means in Testsuite-Triggers.
    Prompted by Mattia Rizzolo &lt;mattia@debian.org&gt;.
  - dsc(5): Add a reference to where the source formats are described.
    Prompted by Manuel A. Fernandez Montecelo &lt;mafm@debian.org&gt;.
  - dpkg-source(1): Improve documentation on vendor-specific series files.
  - deb-control(5): Document Build-Ids field.
    Prompted by Stuart Prescott &lt;stuart@debian.org&gt;.
  - dpkg(1): Clarify which fields are affected by dependency options.
    Prompted by James Clarke &lt;jrtc27@debian.org&gt;.
  - dpkg-query(1): Document the PAGER environment variable usage.
  - Dpkg(1): Add POD documentation about the module hierarchy and API.
  * Code internals:
  - dpkg-split: Use nfstrnsave() instead of nfmalloc() + memcpy().
  - libdpkg: Add new fsys-dir module.
  - libdpkg: Pass the file contents to the pager instead of the filename.
  - libdpkg: Add a pager kill switch, so that it can be forcefully disabled.
  * Build system:
  - Distribute a LICENSE file on CPAN.
  - Do not make the Build.PL script executable.
  - Generalize PACKAGE_CPAN_SIGN by setting PACKAGE_DIST_IS_RELEASE instead.
  - Add a release_status key to the CPAN metadata.
  - Fix typo in CPAN recommends key.
  - Improve test and author CPAN dependencies.
  * Packaging:
  - Break libapt-pkg5.0 instead of apt. Closes: #909959
    Analysis by Sven Joachim &lt;svenjoac@gmx.de&gt;.
  * Test suite:
  - Skip version checks involving «dpkg --compare-versions» if not available.
    This is relevant on CPAN or on non-dpkg-based systems.
  [ Updated programs translations ]
  * Polish (Łukasz Dulny).
  [ Updated man pages translations ]
  * German (Helge Kreutzmann).
- from version 1.19.1
  [ Guillem Jover ]
  * Fix logic in dpkg-buildpackage to decide whether to run build targets,
    which broke tons of packages that are violating Debian policy MUSTs.
    Thanks to James Clarke &lt;jrtc27@debian.org&gt;. Closes: #878899
  * Do not try to recompute hashes for the .dsc file when signing binary-only
    builds in dpkg-buildpackage. Reported by Ximin Luo &lt;infinity0@debian.org&gt;.
  * Pass the correct source stanza to the dpkg-buildpackage code parsing the
    Rules-Requires-Root field. This meant the field was being ignored.
  * Run dpkg-source directly from the current working directory in
    dpkg-buildpackage, instead of changing directory back and forth.
  * Setup and check rootcommand in dpkg-buildpackage only if it is going to
    be needed. Reported by Niels Thykier &lt;niels@thykier.net&gt;.
  * Add color support to dpkg-maintscript-helper (a shell script).
  * Fix warning by including &lt;sys/sysmacros.h&gt; for makedev() in libdpkg.
  * Fix directory traversal with dpkg-deb --raw-extract, by guaranteeing
    that the DEBIAN pathname does not exist. Closes: #879982
    Reported by Jakub Wilk &lt;jwilk@jwilk.net&gt;.
  * Add new AS, STRIP, OBJCOPY, OBJDUMP, NM, AR and RANLIB buildtools
    variables to buildtools.mk. Prompted by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  * Restore rejecting negated architectures in Architecture field in
    dpkg-gencontrol and dpkg-genchanges. Regression introduced in dpkg 1.18.5.
  * Fix dpkg-gensymbols to print "error" instead of "warning" when these
    are fatal. Closes: #881488
  * Rename DPKG_GAIN_ROOT_CMD to DEB_GAIN_ROOT_CMD in the R³ support, as
    the variable is expected to be set by any builder, not just dpkg. And
    introduce ephemeral backwards compatibility even though there are no
    known users.
  * Do not set DEB_GAIN_ROOT_CMD in dpkg-buildpackage when the R³ value is
    &lt;implementations-keywords&gt;, following the specification.
  * Specify that DEB_GAIN_ROOT_CMD in R³ should preserve the environment.
    Proposed by Josh Triplett &lt;josh@joshtriplett.org&gt;.
  * Specify new DEB_RULES_REQUIRES_ROOT variable for R³ support.
  * Add new --rules-requires-root option to dpkg-buildpackage.
  * Declare R³ specification as "recommendation, stable" with version 1.0.
  * Export architecture variables by default from architecture.mk, as
    documented in dpkg-architecture(1). Closes: #888964
    Thanks to Jack Bates &lt;wdz7eo@nottheoilrig.com&gt;
  * Increment the line number on dpkg --set-selections on unknown packages.
    Reported by Heinz Repp &lt;heinz.repp@arcor.de&gt;. Closes: #888983
  * Switch a DEBIAN/conffile parsing assert() in dpkg due to empty lines
    into an ohshit(), because this is really a run-time error.
  * Fix assert() in dselect to expect the method lock file descriptor to be
    initialized, instead of non-zero.
  * Switch a fatal() call in start-stop-daemon into the new BUG() macro,
    because it is really an internal error.
  * Switch all assert() calls (except in update-alternatives) into internerr()
    or BUG() calls, to get way better reporting with variable contents and
    descriptions, and to make them always present independent of NDEBUG.
  * Add a new --no-rename option to dpkg-divert. This is the current default
    behavior, but it will make it possible to do a default switch in 1.20.x.
  * Warn when using dpkg-divert --add or --remove w/o --rename or --no-rename.
  * Warn when using dpkg-divert --rename on a file from an Essential package.
  * Use a single “struct filenamenode” definition for the entire code base.
    Closes: #746766
  * Add support for frontend locking. This makes it possible for frontends
    using this new protocol, to safely lock the dpkg database w/o risk of
    race conditions with other dpkg instances or frontends supporting the
    same protocol. Thanks to Julian Andres Klode &lt;jak@debian.org&gt;.
    Closes: #850417, #851984
  * Do not emit perl warnings in dpkg-source --help on source formats w/o
    options.
  * Make dpkg-buildpackage validate OpenPGP signing key IDs length. Error out
    for short key IDs and warn for long key IDs.
  * On the dpkg conffile prompt, print the set of environment variables setup
    for the conffile shell, for easier discoverability.
  * Fix dpkg-buildpackage option --rules-file parsing. It was trying to parse
    it as --rules-target, which due to the ordering was a no-op.
  * Only check for fallback build targets presence on binary builds in
    dpkg-buildpackage.
  * Only check required build dependencies for known targets specified with
    dpkg-buildpackage --rules-target option.
    Reported by Johannes Schauer &lt;josch@debian.org&gt;.
  * Track package status dirtiness in dpkg to only log and report in status-fd
    when it has changed, removing duplication in output. Closes: #365921
  * Use Synopsis instead of Summary for the short Description, to unify the
    nomenclature and to make it more descriptive. Add a new binary:Synopsis
    virtual field to dpkg-query show format.
  * Add new dpkg-buildpackage --no-post-clean option, to be able to explicitly
    select the current default behavior.
  * Dump database package records in alphabetical order. This will give
    reproducible status and available database files, and make it possible
    to output other deb822 formatted data in a deterministic way.
  * Require both standard input and output to be connected to a terminal to
    use a pager.
  * Run dpkg-query --list output through a pager if we are on a terminal,
    instead of truncating it, to avoid data loss. Closes: #898603
  * Fix use after free in dpkg maintainer script handling. Regression
    introduced in dpkg 1.19.0.
  * Flush output for dpkg-query --status, --print-avail and --listfiles at
    the end, instead of after each stanza.
  * Add support for dumping all dpkg-query --status and --print-avail records
    from the database when no arguments are specified. Closes: #616342
  * Add new dpkg-gensymbols -l option to avoid having to abuse LD_LIBRARY_PATH
    for cross-build paths.
  * Check that DPKG_MAINTSCRIPT_PACKAGE is defined in dpkg-maintscript-helper.
    Closes: #907772
  * Switch dpkg-gencontrol and dpkg-genchanges to track automatically
    generated artifacts by using the Auto-Built-Package field from the binary
    package instead of hardcoding package name patterns (such as «-dbgsym$»).
  * Add new --reverse option to dpkg-parsechangelog, to list the changelog
    entries in reverse order.
  * Architecture support:
  - Add support for riscv64 CPU. Closes: #822914
    Thanks to Manuel A. Fernandez Montecelo &lt;mafm@debian.org&gt;
  - Document the purpose and columns in the tupletable file.
  * Portability:
  - Add libcompat md5 module to the libcompat-test library, so that we
    always make sure it builds, even when we use an external implementation.
  - Convert libcompat md5 module to use C99 int types, instead of mapping
    them from the BSD types at configure time.
  - Use MD5_CTX instead of struct MD5Context, as the prevalent more portable
    type on system's &lt;md5.h&gt; headers.
  - Check for ldconfig command in dpkg only on platforms that do have it.
  - Fix file descriptor leak in start-stop-daemon on AIX.
  - libcompat: Add new strchrnul() implementation.
  * Perl modules:
  - Dpkg::Source::Package::V1: Check that $tarname is defined before use.
    Thanks to Christoph Biedl &lt;debian.axhn@manchmal.in-ulm.de&gt;.
    Closes: #879124
  - Dpkg::Vendor::Debian: Use proper %use_feature key. This was causing perl
    errors on paths not accepted for fixdebugpath.
    Reported by Mattia Rizzolo &lt;mattia@debian.org&gt;, on IRC. Closes: #881051
  - Dpkg::Changelog: Print versions for incorrect changelog range warnings.
    Thanks to Paul Wise &lt;pabs@debian.org&gt;.
  - Dpkg::Shlibs::SymbolFile: Check that $state-&gt;{seen} exists instead of
    $state being just defined. Fixes regression in dpkg-gensymbols symbols
    output. Thanks to Dmitry Shachnev &lt;mitya57@debian.org&gt;. Closes: #880166
  - Dpkg::Arch: Add new positive options argument to arch validators.
  - Dpkg::Vendor::Debian: Mark hurd-i386 as having gcc builtin PIE.
    Requested by Samuel Thibault &lt;sthibault@debian.org&gt;.
  - Dpkg::Source::Package::V2: Print one building line per existing tarball.
  - Dpkg::Source::Package: Print building lines for upstream tarball
    signatures. Closes: #888787
  - Dpkg::Deps: Turn virtualpkg tracking from an arrayyref into a hashref.
  - Dpkg::Vendor::Debian: Mark riscv64 as having gcc builtin PIE.
  - Dpkg::Shlibs::Objdump: Fix ELF program detection, for PIE binaries and
    executable libraries.
  - Dpkg::Version: Fix bool overload behavior back to be an is_valid()
    alias. Emit a specific perl warning until 1.20.x so that users can check
    whether the semantic change has any impact on the code, which can then
    be quiesced. Closes: #895004
  - Dpkg::Changelog::Parse: When detecting the changelog format, read the
    last 4KiB of the file instead of using «tail -n40», which should be
    both faster and more portable, as the default tail(1) is not POSIX
    compliant on all systems (c.f. Solaris).
  - Dpkg::Build::Types: Add new set_build_type_from_targets() function.
  - Dpkg::Shlibs::SymbolFile: Always assign a proper Dpkg::Version to the
    deprecated variable, otherwise the scalar value 0 can get confused
    on scalar context to denote it is *not* deprecated instead of being
    version 0.
  - Dpkg::Shlibs: Disable bool overload Dpkg::Version warnings.
  - Dpkg::Vendor::Debian: Inline _parse_feature_area() into
    _add_build_flags(), for a small speed up and line count reduction.
  - Dpkg::BuildFlags: Move default flags setting into the Dpkg::Vendor
    modules.
  - Dpkg::Gettext: Fix fallback textdomain() to honor its expected interface.
  - Dpkg::Deps: Split subpackages into their own separate modules.
  - Dpkg::Source: Do not change patch permissions if not necessary.
    Closes: #898010
  - Dpkg::Substvars: Reword used/unused warnings to clarify their meaning.
    Closes: #904258
  - Dpkg::Shlibs: Warn when using LD_LIBRARY_PATH with a private library
    directory which is a descendent of the current working directory.
  - Dpkg::Source::Package::V3::Quilt: Print series file used when applying
    patches.
  - Dpkg::OpenPGP: Return the destination path on successful ASCII armor
    conversion.
  - Dpkg::Control::Fields: Do not use &amp; sigil for function calls.
  - Dpkg::Shlibs: Ignore nonexistent directories present in LD_LIBRARY_PATH.
  - Dpkg::Deps::KnownFacts: Satisfy :native with arch:all packages too.
    These are treated as native packages everywhere else in the multi-arch
    design, this was the only exception, which has become a source of
    packaging problems as of late. This was apparently an oversight in
    the original implementation. Closes: #854438
  - Dpkg::Vendor::Debian: Add fixfilepath support to reproducible feature.
  - Dpkg::Dist::Files: Add support for file attributes.
  * Documentation:
  - Update gettext minimal version in README.
  - Add a missing dot on the dpkg-buildflags(1) «lfs» feature paragraph.
    Spotted by Helge Kreutzmann &lt;debian@helgefjell.de&gt;.
  - Document DPKG_COLORS environment variable for all programs using it.
  - Document DPKG_NLS environment variable for all programs using it.
  - Document the Testsuite and Testsuite-Triggers fields in
    deb-src-control(5). Prompted by Mattia Rizzolo &lt;mattia@debian.org&gt;.
  - Update git URLs for move away from alioth.debian.org.
  - Fix set_build_type_from_options() description in Dpkg::Build::Types.
  - Clarify PIE build flag feature semantics. Closes: #900088
  - Clarify dpkg-buildpackage pre and post-clean options and their default
    state.
  - Add --build option equivalents for dpkg-buildpackage short build type
    options in --help output.
  - Fold dpkg-buildpackage --[no-]check-builddeps in --help into both -D
    and -d option descriptions.
  - Mark profiles as a replaceable item in dpkg-buildpackage --help output.
  - Update test suite requirements in README.
  - Document textdomain() and ngettext() replacement functions in
    Dpkg::Gettext POD.
  - Clarify arch-qualified dependency simplification in Dpkg::Deps POD.
  - Improve Dpkg::Deps modules and methods documentation.
  - Fix typo in deb-changes(5). Closes: #902616
  - Clarify awaiting state for interest and activate directives.
    Closes: #904060
  - Fix man page markup. Closes: #900033, #900035, #900040
    Thanks to Bjarni Ingi Gislason &lt;bjarniig@rhi.hi.is&gt;.
  - Fix Doxygen comment for libdpkg dpkg_arch_find() function.
  - Document the dangers of using start-stop-daemon(8) only with --pidfile
    as matching option with the pid file owned by a non-privileged user.
  * Code internals:
  - Do not use stringy eval to define different sub implementations,
    just assign an anonymous sub to the typeglob.
  - Use memccpy() instead of strncpy() to quiesce a gcc-8 warning.
  - Change pkgbin_name_needs_arch() to never arch-qualify packages that
    have an empty or no architecture, which was already handled as part
    of varbuf_add_archqual().
  - libdpkg: Factor out cached arch-qualified package name generation into
    new pkgbin_name_archqual() function.
  - libdpkg: Add new pkg_name() and pkgbin_name() const variants.
  - libdpkg, dselect: Use new pkg_name_const() and pkgbin_name_const().
  - libdpkg: Rename struct pkginfo files member to archives.
  - dpkg: Call ensure_package_clientdata() defensively.
  - dpkg: For read-only state functions, check that clientdata is allocated
    before using it.
  - libdpkg: Move files list information from dpkg clientdata to pkginfo.
  - dpkg: Move ensure_package_clientdata() into its own file.
  - libdpkg: Move db-fsys code from src to lib/dpkg.
  - libdpkg: Rename pkg-db module to pkg-hash.
  - libdpkg: Simplify pkg_files_blank() by using a pointer to pointer to
    track the previous entry.
  - libdpkg: Factor out package files handling into its own module.
  - libdpkg: Switch to a new tiny struct to track file on-disk identity.
    This should reduce the run-time memory used.
  - libdpkg: Reset nfiles in files_db_reset().
  - libdpkg: Split push_cleanup() into push_cleanup_fallback().
  - Switch from strchr() + strlen() to strchrnul().
  - libdpkg: Change dpkg_error to track errno values.
  - libdpkg: Add new varbuf_new() and varbuf_free() functions.
  - libdpkg: Add new file_slurp() function.
  - libdpkg: Switch db-fsys to use the new file_slurp() function.
  - libdpkg: Add new pkg_infodb_reset_dir().
  - libdpkg: Add new m_dup() function.
  - libdpkg: Factor out package stanza printing into its own function.
  - libdpkg: Split pager specific code into its own module.
  - libdpkg: Add pager spawning and reaping support.
  - Use new pager spawning support instead of open-coding it, or piping it
    via a shell invocation, which required metacharacter escaping.
  - dpkg-query: Split enqperpackage() into each different action.
  * Build system:
  - Set distribution tarball format to ustar, instead of default v7 format.
  - Mark PO4A and POD2MAN as precious variables.
  - Automatically replace -Wno- with -W when testing compiler flags,
    instead of passing the positive form manually.
  - Enable clang -Wdocumentation warning if available.
  - Enable gcc-7 -Wregister warning if available.
  - Add CPAN distribution machinery for the perl modules. Closes: #821177
  - Add an autogen script to help people bootstrap the project.
  - Distribute the man.stamp from VPATH.
  - Preserve timestamps when distributing man pages.
  - Add a GitLab CI configuration file.
  - Disable C optimization levels when configuring for code coverage.
  * Packaging:
  - Install update-alternatives policykit-1 file.
  - Add Breaks to libdpkg-perl against pkg-kde-tools (&lt;&lt; 0.15.28~), as
    that package is using private modules with no API guarantees, that
    obviously broke due to recent changes in 1.19.0. Closes: #878919
  - Add Breaks on debhelper &lt;&lt; 10.10.1~ to dpkg-dev, so that debhelper users
    wanting to use R³ support do not need a versioned dependency on dpkg-dev.
  - Add Breaks dgit &lt;&lt; 3.13~ to libdpkg-perl, as older dgit versions assumed
    that Dpkg::Compression::Process was available, via implicit import
    from Dpkg::Source::Package.
    Reported by Ian Jackson &lt;ijackson@chiark.greenend.org.uk&gt;.
  - Bump Standards-Version to 4.1.1 (no changes needed).
  - Add bzip2 and xz-utils to Build-Depends, required by the functional test
    suite, but shadowed by dpkg-dev from the build system pulling those in.
  - Add versioned libncurses-dev as the first Build-Depends alternative.
    Thanks to Sven Joachim &lt;svenjoac@gmx.de&gt;.
  - Do not pass VERBOSE to test suite, as we are not using any automake
    test driver, so it does not get honored.
  - Rename maintainer-build DEB_BUILD_OPTIONS to new standardized terse.
  - Enable verbose test suite only in non-terse builds.
  - Add a Suggests on sensible-utils to libdpkg-perl.
  - Switch libdpkg-perl again to depend on perl:any, now that debootstrap
    in stable (stretch) supports arch-qualified dependencies.
  - Update libdpkg-perl public module list in package description.
  - Add Breaks on apt (&lt;&lt; 1.7~b) for --status-fd duplicate removals.
  * Test suite:
  - Skip Dpkg::OpenPGP test if gpg is not present.
  - Check POD in all perl scripts.
  - Consider *.PL also to be perl files.
  - Infer automatically the unit test data directory.
  - Infer automatically the unit test temp directory.
  - Add new po author test case (use i18nspector if available).
  - Add new test cases to clarify arch-qualified dependency simplification.
  - Add several TODO tests cases for dependency simplification.
  - Add new cppcheck author test.
  - Add support for new test_get_srcdir() test_get_builddir().
  - Add new unit tests for namevalue, fsys-hash and pkg-hash libdpkg modules.
  - Improve coverage of perl unit tests.
  - Delete fixup lines from i18nspector output instead of emptying them.
  - Add new codespell author test.
  - Add new test that the public libdpkg headers can be compiled with C++.
  [ Josh Triplett ]
  * Perl: Replace all calls to Cwd::cwd with Cwd::getcwd; the former calls
    /bin/pwd, while the latter uses the getcwd() syscall directly.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #881401
  * German (Sven Joachim).
  * Italian (Milo Casagrande). Closes: #883085
  * Polish (Łukasz Dulny).
  * Simplified Chinese (Zhou Mo, Boyuan Yang). Closes: #900547, #890806
  * Spanish (Javier Fernández-Sanguino).
  * Traditional Chinese (Buo-ren Lin). Closes: #905887
  * Turkish (Mert Dirik). Closes: #886252
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #881403
  * German (Helge Kreutzmann).
  * Simplified Chinese (Zhou Mo).</changelog>
  <changelog author="dcermak@suse.com" date="1641211200">- rebase patches:
  * update-alternatives.changes
  * update-alternatives.spec
  * update-alternatives-suse.patch
- New upstream release 1.21.1
  dpkg (1.21.1) unstable; urgency=medium
  [ Guillem Jover ]
  * dpkg-buildpackage: Remove duplicate command print for dpkg-genchanges.
  * dpkg-buildpackage: Fix build description due to improper multiline match.
  * dpkg-realpath: Remove spurious heading space from --help output.
  * update-alternatives: When initializing admindir from DPKG_ADMINDIR append
    "/alternatives". Closes: #1001198
  * Code internals:
  - Remove &lt;ar.h&gt; inclusions.
  * Packaging:
  - Install deb-md5sums(5) into dpkg-dev package.
  dpkg (1.21.0) unstable; urgency=medium
  [ Guillem Jover ]
  * dpkg-genchanges: Include orig tarball on source package renames.
    Closes: #980066
  * scripts: Consider SHA-1 and RIPEMD-160 weak algorithms in OpenPGP
    signatures.
  * dpkg: During unpack print a removal message due to Conflicts.
    Closes: #985401
  * scripts: Add zsh completions for dpkg-parsechangelog.
    Thanks to Daniel Shahaf &lt;danielsh@apache.org&gt;. Closes: #986103
  * dpkg-buildpackage: When printing build type match the extension exactly.
    Closes: #989824
  * dpkg-maintscript-helper: Use xargs -I argument instead of deprecated -i.
  * dpkg-maintscript-helper: Quote variable inside ${} to avoid pattern match.
  * libdpkg: Fix dpkg_fsys_get_path() to always strip leading / and ./.
  * libdpkg: Set the default database directory relative to the system root.
  * dpkg-divert, dpkg-statoverride: Set admindir after instdir.
  * update-alternatives: Fix admindir setting.
    Prompted by Johannes Schauer Marin Rodrigues &lt;josch@debian.org&gt;.
  * dselect: Honor DPKG_ADMINDIR environment variable.
  * dpkg-query, dpkg-trigger, dselect: Add support for setting the root
    directory.
  * dpkg-fsys-usrunmess: Move forced reconfiguration to the last step.
    See #991190.
  * dpkg-fsys-usrunmess: Install a local policy-rc.d to ignore service
    restarts. Closes: #991190
  * dpkg-fsys-usrunmess: Do not fail when removing lingering directories.
  * dpkg-fsys-usrunmess: Generate a regression prevention package.
  * dpkg-fsys-usrunmess: Fix typo in debug message.
  * dpkg: Distinguish deconfiguration message for installation and multi-arch
    syncs.
  * dpkg-buildpackage: Add new --changes-file option.
    Prompted by Niels Thykier &lt;niels@thykier.net&gt;.
  * dpkg-buildpackage: Add new --buildinfo-file option.
  * dpkg: Rework --assert-&lt;feature&gt; logic to be more robust.
    Prompted by Helmut Grohne &lt;helmut@subdivi.de&gt;.
    Prompted by David Kalnischkies &lt;donkult@debian.org&gt;.
  * dpkg: Improve --assert-&lt;feature&gt; descriptions.
  * dpkg: Add a new --assert-help option.
  * scripts/mk: Pass DEB_BUILD_PATH to dpkg-buildflags. See #985553.
  * dpkg-db-backup: New program factored out from Debian-specific daily cron.
  * dpkg-db-backup: Accept an option to override the number of rotation cycles.
  * dpkg-db-backup: Honor the admindir set at configure time.
  * update-alternatives: Fix --auto and --set-selections output progress.
  * update-alternatives: Print defaults for configuration and database
    pathnames.
  * scripts: Replace shebang in dpkg-error shell library with shellcheck
    directive.
  * dpkg-buildpackage: Add support for terse DEB_BUILD_OPTIONS.
  * dpkg-mergechangelogs: Add new --merge-unreleased option. Closes: #582921
  * dpkg: Restore fallback to "new-prerm failed-upgrade" for downgrades.
    Analysis by Ian Jackson &lt;ijackson@chiark.greenend.org.uk&gt;. Closes: #996959
  * dselect: Use safe temporary file creation in methods setup.
  * dselect: Remove bashism from update script in multicd method.
  * dpkg: Fix --verify to handle missing or inaccessible pathnames.
    Closes: #963087
  * dpkg: Add partial --verify support for mode checks.
  * Use «digest» instead of «hash» in output messages.
    Reported by Sven Joachim &lt;svenjoac@gmx.de&gt;.
  * dselect: use `grep -E` instead of `egrep`.
    Thanks to Ville Skyttä &lt;ville.skytta@iki.fi&gt;. Closes: #999600
  * libdpkg: Fix memory leak on End Of Tape condition in tar parser.
  * dpkg: Fix short lived memory leak with --recursive.
  * dpkg: Fix conffile removal-on-upgrade handling. Closes: #995387
  * dpkg-deb: Fix conffile name length tracking on remove-on-upgrade parsing.
    Reported by uau on IRC.
  * Architecture support:
  - Clarify that the regex columns need to be ordered to match first.
  - Add support for ARCv2 CPU. Closes: #980963
    Based on a patch by Alexey Brodkin &lt;Alexey.Brodkin@synopsys.com&gt;.
  * Portability:
  - start-stop-daemon: Define SOCK_NONBLOCK to 0 if not defined.
  - libdpkg: Add support for AIX to dpkg_get_progname().
  * Perl modules:
  - Dpkg::Source::Quilt: Add hint to check missing files on patch apply
    failures.
    Reported by Joseph Nahmias &lt;jello@debian.org&gt;.
  - Dpkg::Changelog::Parse: Require format plugins to inherit from
    Dpkg::Changelog.
  - Dpkg::OpenPGP: Refactor openpgp implementation execution into a new
    function.
  - Dpkg::Vendor::Debian: Refactor compiler flag names into an array.
  - Dpkg::Vendor::Debian: Add new lto feature in new optimize area.
    Closes: #940571
  - Test::Dpkg: Print actual error messages in test_neutralize_checksums().
  - Dpkg::Deps: Use current_sub feature for __SUB__.
  - Dpkg::BuildFlags: Add support for ASFLAGS.
    See https://salsa.debian.org/debian/debhelper/-/merge_requests/50.
  - Dpkg::Compression: Use gzip --rsyncable unconditionally.
  - Dpkg::Changelog::Entry::Debian: Fix full month misuse warning.
  - Dpkg::Shlibs::Symbol: Emit a warning on fully qualified symver patterns.
    Closes: #993991
  - Dpkg::Control::HashCore: Add new keep_duplicate option.
  - Dpkg::Control::FieldsCore: Add new field_parse_binary_source().
    Closes: #980527
  - Dpkg::Control::FieldsCore: Fix types allowed for
    field_parse_binary_source().
    Reported by Johannes Schauer Marin Rodrigues &lt;josch@debian.org&gt;.
  - Dpkg::Shlibs::Objdump: Fix apply_relocations to work with versioned
    symbols. Closes: #1000421
  - Dpkg::Vendor::Ubuntu: Update Maintainer field logic to include
    “canonical”. Based on a patch by
    William 'jawn-smith' Wilson &lt;william.wilson@canonical.com&gt;.
    Closes: #1000557
  - Dpkg::Source::Package::V2: Add hint about version matching source tree.
    Based on a patch by Samuel Henrique &lt;samueloph@debian.org&gt;.
    Closes: #996044
  * Documentation:
  - man: Itemize dpkg-gensymbols -c levels.
  - man: Add man page for deb-md5sums(5).
    Reported by Maxim Cournoyer (on IRC).
  - man: Switch the Architecture field in deb-control(5) to required.
    Reported by Maxim Cournoyer (on IRC).
  - man: Make clear that dpkg-query arguments accept multiple values.
    Prompted by Rémi Rampin &lt;remirampin@gmail.com&gt;. See #913781.
  - man: Document dpkg-query --search and --listfiles output formats.
  - doc: Fix incorrect use of ‘an’ article.
  - doc: Update coding style to document POD instead of troff.
  - doc: Update THANKS file.
  - doc: Annotate current maintainer start year.
  - doc: Sort maintenance information chronologically.
  - man: Add versions since features where introduced.
  - man: Further clarify when re-inclusions of excluded pathnames happen.
    Closes: #871420
  - doc: Update Doxygen configuration from version 1.9.1.
  - doc: Improve description of dpkg suite.
    Prompted by Fabrice Bauzac-Stehly &lt;noon@mykolab.com&gt;.
  - man: Add a reference to where the Installed-Size algorithm is described.
  - man: Improve dpkg --verify-format rpm format documentation.
  - man: Document in deb-substvars(5) what ${} is good for.
    Prompted by Paul Wise &lt;pabs@debian.org&gt;.
  - man: Document in dpkg-architecture(1) target being useful for emulators
    too. Prompted by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  - man: Document in dpkg-query(1) full --search and --listfiles output
    format. Prompted by Johannes Schauer Marin Rodrigues &lt;josch@debian.org&gt;.
  * Code internals:
  - Remove irrelevant or obsolete FIXME markers.
  - Turn FIXME markers denoting pending actions into TODO markers.
  - Turn FIXME markers giving historic information into simple Notes.
  - update-alternatives: Turn FIXME for explicit behavior choice into an XXX.
  - Use localtime_r() instead of localtime().
  - libdpkg: Remove MDEBUG support from m_malloc() implementation.
  - libdpkg: Mark dpkg_arch_unmark() arch_remove argument as const.
  - libdpkg: Mark treewalk_open() func argument as const.
  - dpkg: Mark ignore_depends() pkg argument as const.
  - dpkg: Mark deb_parse_conffiles() pkg argument as const.
  - libcompat: Remove local setexecfilecon() and require libselinux 2.3.
  - libdpkg: Add missing DPKG_{BEGIN,END}_DECLS in header files.
  - dpkg: Move SE Linux function declarations into its own header file.
  - dpkg: Move the command action enum to its own header file.
  - dpkg: Switch from including "main.h" to "force.h".
  - dselect: Rename dme() to display_menu_entry().
  - dpkg: Split function handling deconfiguration due to install and removal.
  - libdpkg: Add new ACTION_MUX macro for continued options.
  - dpkg: Refactor --assert-&lt;feature&gt; handling to be data driven.
  - dpkg-fsys-usrunmess: Do not use interpolated strings for literals.
  - dpkg-db-backup: Add a license header comment.
  * Build system:
  - Fallback to $^X and 'perl' if $Config{perlpath} is unset or empty.
  - Bump minimal Perl version to 5.28.1.
  - Remove redundant localedir and pkgconfdir initializations.
  - Check for libsocket.
  - Do not set have_libmd on the found branch in AC_SEARCH_LIBS.
  - Switch DPKG_FUNC_C99_SNPRINTF from AC_LANG_SOURCE to AC_LANG_PROGRAM.
  - Check whether fsync(3) works on directories.
  - Remove obsolete AC_HEADER_STDC.
  - Detect appropriate sed program at configure time.
  - Rename DPKG_DEB_PROG_TAR to DPKG_PROG_TAR.
  - Parametrize the backups directory with a configure option.
  - Add a check for symlinks in the git repository.
  - Rename shell scripts to .sh.
  - Switch from hardcoded /run to parametrized runstatedir.
  - Use new Dpkg::Control keep_duplicate option in gen-changelog.
  - Use title-case for field in gen-changelog.
  - Execute run-script via CONFIG_SHELL.
    Reported by Larkin Nickle &lt;me@larbob.org&gt;.
  - Quote variables containing pathnames in m4 macros.
  - Add support for commit message fix up machinery in gen-changelog.
  * Packaging:
  - Use absolute pathnames in .install debhelper fragments.
  - Remove unused dh_installcron call for arch-indep targets.
  - Add support for a native systemd timer. Closes: #985444
  - Create auotpkgtest installation directory.
  - Bump Standards-Version to 4.6.0 (no changes needed).
  * Test suite:
  - Pass --ignore-builtin-builddeps to dpkg-buildpackage.
  - Use can_run() instead of find_command().
  - Add descriptions to makefile test runners.
  - Add unit tests for architecture bijective mapping property.
  - Suppress cppcheck constParameter check.
  - Suppress bogus cppcheck for nullPointerRedundantCheck.
  - Mark external sourced shell files for checking.
  - Ignore new shellcheck checks.
  - Remove shipped dpkg database.
  - Add re-inclusion of symlink case to t-filtering. See #871420.
  - Generate symlink during test build time.
  - Remove superfluous long filename.
  - Refactor parse_ctrl() from parse_dsc().
  - Update codespell stopwords.
  [ Helge Kreutzmann ]
  * deb-md5sums.pod: Fix typo.
  [ Add programs translations ]
  * Occitan (Quentin PAGÈS).
  [ Update dselect translations ]
  * German (Sven Joachim).
  [ Update man pages translations ]
  * German (Helge Kreutzmann).
  [ Update programs translations ]
  * German (Sven Joachim).
  * Polish (Marcin Owsiany, Łukasz Dulny).
  [ Update scripts translations ]
  * German (Helge Kreutzmann).</changelog>
  <changelog author="pgajdos@suse.com" date="1653652800">- version update to 1.21.8
  * fix CVE-2022-1664 [bsc#1199944], dpkg -- security update
  * lot of changes, see changelog
- modified patches
  % update-alternatives-suse.patch (refreshed)</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="adam.majer@suse.de" date="1689854400">- openssl.patch: use openssl library for MD5 calculation instead
  of relying on libmd. libmd is not in Ring0
- require Perl 5.28.1 or later</changelog>
  <changelog author="martin.schreiner@suse.com" date="1695038400">- Update to version 1.22.0.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.0
- Refresh openssl.patch so it works on 1.22.0.</changelog>
</package>
<package pkgid="55585da303899f27517c711ce82082063ff29107d29e9c766ee996925e03ae6bf98aef79fb8a8c9490a9fd205fbfc04fef9e1e3f0975262df77d3eb80c4f7719" name="update-alternatives-debugsource" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="slfo.1.1_3.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="coolo@suse.com" date="1552478400">- my attempt to rewrite %post in lua (bsc#1129036)</changelog>
  <changelog author="schwab@suse.de" date="1554206400">- Remove useless uses of rpm.expand
- Fix use of file:close</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- don't remove slave links that turned into master. Happens on usrmerge
  (boo#1180939, update-alternatives-slavetomaster.patch)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1619697600">- Refresh patches for new version
  * update-alternatives-suse.patch
- Set minimum version for po4a to 0.59 in BuildRequires
- Update file list in %files section
- Version update to 1.20.9 (boo#1181867)
  [ Guillem Jover ]
  * Test suite:
  - Pass --ignore-builtin-builddeps to dpkg-buildpackage.
- from version 1.20.8
  [ Guillem Jover ]
  * start-stop-daemon: Open the --output file in append mode.
  * dpkg: Fix --auto-deconfigure for essential and protected during
    installation. Reported by Julian Andres Klode &lt;jak@debian.org&gt;.
    See #983014.
  * dpkg-realpath: Fix resolution for absolute symlinks on «/».
    Closes: #983855
  * dpkg-realpath: Fix symlink loop tracker.
  * Perl modules:
  - Test::Dpkg: Fix test data path fetching on CPAN.
  - Dpkg::Exit: Preserve exit code in END block.
  * Build system:
  - Group Test::Dpkg changelog entries into “Perl modules” section.
  * Packaging:
  - Run autopkgtest test suites in verbose mode.
  * Test suite:
  - Set PERL in the perl test suite.
  - Use gunzip instead of zcat and assume it might not be present.
  - Mock dpkg and gcc for architecture detection code.
  - Initialize DEB_BUILD_ARCH and DEB_HOST_ARCH to avoid computing them.
  - Update suppressions for cppcheck 2.4.
  [ Update man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #981884
  * German (Helge Kreutzmann).
  * Portuguese (Américo Monteiro). Closes: #980018
  [ Update programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #981882
  [ Update scripts translations ]
  * German (Helge Kreutzmann). Closes: #983865
- from version 1.20.7
  [ Guillem Jover ]
  * libdpkg: Do not consider the database locked with a missing lock file.
    Reported by David Kalnischkies &lt;donkult@debian.org&gt;.
  * Documentation:
  - man: Clarify and expand information on dpkg-realpath(1) man page.
    Closes: #979564
  * Packaging:
  - Update copyright notices in debian/copyright.
  - Bump Standards-Version to 4.5.1 (no changes required).
  * Test suite:
  - On as-root mode do not use sudo if already running as root.
  - Print WARN instead of FAIL for maintscript fd leaks.
  [ Update man pages translations ]
  * German (Helge Kreutzmann).
  [ Update programs translations ]
  * German (Sven Joachim).
- from version 1.20.6
  [ Guillem Jover ]
  * libdpkg: Fix undefined behavior in varbuf functions.
    Reported by KOLANICH &lt;kolan_n@mail.ru&gt;.
  * libdpkg: Fix memory leaks in tar_extractor().
  * libdpkg: Fix memory leak in trigger deferred processing.
    Reported by KOLANICH &lt;kolan_n@mail.ru&gt;.
  * libdpkg: Fix memory leak in filesystem treewalk node free function.
  * libdpkg: Fix memory leak in filesystem treewalk iterator.
  * libdpkg: Fix single-instance memory leak with fsys dir.
  * libdpkg: Fix short-lived memory leaks.
  * libdpkg: Reset error context errmsg after free().
  * dpkg: Fix memory leak for cidir.
    Reported by KOLANICH &lt;kolan_n@mail.ru&gt;.
  * dpkg: Fix short-lived memory leak in --force-help output.
    Based on a patch by KOLANICH &lt;kolan_n@mail.ru&gt;.
  * dpkg-deb: Fix single-instance memory leak on missing conffiles control
    file.
  * dpkg-divert: Fix short-lived memory leaks.
  * dpkg-realpath: Add new -z, --zero option.
    Requested by Johannes Schauer &lt;josch@debian.org&gt;.
  * dpkg-deb: Make decompression error message more descriptive.
    Closes: #968442
  * dpkg-architecture: Add a --print-format option.
    Prompted by #968963.
  * dpkg-buildpackage: Warn on known R³ values in uppercase.
    Reported by Niels Thykier &lt;niels@thykier.net&gt;.
  * dpkg-buildpackage: Error out on R³ "yes" value.
    Requested by Niels Thykier &lt;niels@thykier.net&gt;.
  * dpkg-buildpackage: Clarify R³ keyword diagnostic messages.
  * dpkg-deb, dpkg-split: Fix time handling to support 64-bit time.
  * libdpkg: Check that the ar archive time is within bounds.
  * libdpkg: Ignore not-installed packages for source related virtual fields.
    Closes: #972580
  * libdpkg: Make source version parsing more robust on missing data.
    See #972580.
  * libdpkg: Do not forget not-installed packages that are set on hold.
    Reported by David Kalnischkies &lt;donkult@debian.org&gt;.
  * update-alternatives: Fix memory leaks for alternative database context on
    load errors.
  * update-alternatives: Fix short-lived memory leaks for alternative structs.
  * update-alternatives: Fix memory leaks with new_choice.
  * update-alternatives: Fix short-lived memory leaks for log_file and admdir.
  * dpkg-buildflags: Add support for DFLAGS. Closes: #975896
  * dpkg-parsechanaglog: Document --file in --help output.
  * libdpkg: Fix allocation size wrap around when growing a varbuf.
  * dpkg-query: Do not print database loading progress. Closes: #977240
  * Rename taint tag to merged-usr-via-aliased-dirs.
  * dpkg-buildflags: Enable reproducible=fixfilepath by default.
    Thanks to Vagrant Cascadian &lt;vagrant@reproducible-builds.org&gt;.
    See https://lists.debian.org/debian-devel/2020/10/msg00222.html.
    Closes: #974087
  * start-stop-daemon: Move umask setup before any file has been created.
  * start-stop-daemon: Add a new --output option to redirect stderr and stdout.
  * dpkg-maintscript-helper: Do not pass DPKG_ROOT prefixed pathmames to
    dpkg-realpath.
  * dpkg: When removing old files check the pathname with diversion and
    instdir.
  * dpkg-realpath: Make 'link includes root prefix' error more verbose.
  * libdpkg: Make sure we do not walk on rootless trees.
  * dpkg: Fix incorrect logic around printing dependency warnings.
    Thanks to Jessica Clarke &lt;jrtc27@debian.org&gt;.
    Reported by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  * Support remove-on-upgrade conffile flag via DEBIAN/conffiles.
    Based on a patch by Niels Thykier &lt;niels@thykier.net&gt;. Closes: #822462
  * dpkg-fsys-usrunmess: New program.
  * Perl modules:
  - Dpkg::Index: Add new item_opts option.
  - Dpkg::Exit: Fix exit handler on program termination. Closes: #966083
  - Dpkg::Changelog::Entry::Debian: Fix format string.
    Prompted by #967911.
  - Dpkg::Changelog::Parse: Add new verbose option.
    Prompted by #967911.
  - Dpkg::Changelog::Parse: Document 'label' option.
  - Dpkg::Source::Package::V1: Print a message when verifying tarball
    signatures.
  - Dpkg::Path: Fix pathname traversal check for symlinks. Closes: #971203
  - Dpkg::Source::Package: Honor no_check for directory traversal checks.
    See #971203.
  - Dpkg::Source::Package: Call syserr() instead of syserror().
    Reported by Drew Parsons &lt;dparsons@debian.org&gt;.
    See #849752. Closes: #976249
  - Dpkg::Path: Check first whether the files are the same by comparing
    string-wise. Closes: #849752
  - Dpkg::OpenPGP: Refactor gpg armor code into its own function.
  * Documentation:
  - man: Fix typo in --print-unset option reference.
    Reported by Ferenc Wágner &lt;wferi@debian.org&gt;. Closes: #966110
  - man: Clarify that dpkg-architecture uses some of its own variables.
    Closes: #966111
  - man: Fix casing and namespacing in VARIABLES definitions.
  - man: Fix typo in dpkg-source(1).
    Thanks to Paul Wise &lt;pabs@debian.org&gt;.
  - man: Add a reference to deb-symbols(5) in deb-src-symbols(5) DESCRIPTION.
    Prompted by #970083.
  - man: Specify that symbol, version and id are separated by a single
    whitespace. Closes: #970083
  - man: Clarify day-of-month format in deb-changelog(5).
    Reported by Axel Beckert &lt;abe@debian.org&gt;.
    See #971977.
  - man: Update update-alternatives maintainer script usage information.
    Prompted by Niels Thykier &lt;niels@thykier.net&gt;.
  - man: Switch to use L&lt;&gt; markup for URLs instead of B&lt;&gt;.
  - doc, man: Clarify that R³ values are case sensitive.
    Prompted by Niels Thykier &lt;niels@thykier.net&gt;.
  - man: Add references to deb822(5) to file formats based on it.
    Prompted by Niels Thykier &lt;niels@thykier.net&gt;.
  - man: Clarify config-files state in dpkg(1).
    Prompted by Stuart Prescott &lt;stuart@debian.org&gt;.
  - man: Fix typos.
  - man: Hyphenate multiple words in deb-override(5) format description.
  - man: Uppercase acronyms and logic operators.
  - man: Empty or whitespace-only lines in deb-conffiles(5) are not accepted.
  * Code internals:
  - libcompat, dpkg: Stop using deprecated security_context_t data type.
  - update-alternatives: Refactor alternative database context freeing into a
    new function.
  - libdpkg: Do not define the clamp macro when compiling C++ code.
    Reported by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  - libdpkg: Replace FSF address by pointing to the gnu.org URL.
  - libdpkg: Initialize pkgbin's newhash to NULL.
    Prompted by Steinar H. Gunderson &lt;sesse@debian.org&gt;.
  - libdpkg: Use memset() instead of open-coding struct blanking.
    Prompted by Steinar H. Gunderson &lt;sesse@debian.org&gt;.
  - Do not call fsys_hash_init() before command actions.
    Prompted by Steinar H. Gunderson &lt;sesse@debian.org&gt;.
  - libdpkg: Fix m_pipe() function definition prototype to match declaration.
  - libdpkg: Refactor new str_rtrim_spaces().
    Based on a patch by Niels Thykier &lt;niels@thykier.net&gt;.
  - dpkg: Call fsys_hash_find_node() outside tar_fsys_namenode_queue_push().
  - Use a conffilename variable to track the actual conffile name in the
    buffer.
    Thanks to Niels Thykier &lt;niels@thykier.net&gt;.
  * Build system:
  - Add new gen-changelog tool.
  - Pre-process the curses header before parsing it. Closes: #970545
  - Fix variable substitution in man pages.
    Reported by Niels Thykier &lt;niels@thykier.net&gt;. Closes: #978983
  - Add a README.cpan to be installed as README in the CPAN distribution.
  - Do not try to use &lt;sys/sysctl.h&gt; on GNU/Linux.
  - Fix «make distcheck» for man pages.
  - Update GitLab CI configuration to use built-in functional test suite.
  - Make it possible to override PKGDATADIR on built scripts too.
  - Disable umask to 0 for Docker executor in GitLab CI.
  - Disable functional test suite debug mode on GitLab CI.
  - Sort po4a entries in po4a.cfg.
  * Packaging:
  - Do not fail the bug-script if readlink fails. Closes: #968397
  - Improve cron file robustness on missing or empty backup files.
    Closes: #969472
  - Use AUTOPKGTEST_TMP instead of writing into the source tree.
  - Hook the functional test suite into autopkgtest.
  - Remove trailing comma from lintian profile file.
  - Do not hardcode libdpkg-perl dependency on perl:any.
    Thanks to Sven Joachim &lt;svenjoac@gmx.de&gt;.
  * Test suite:
  - Fix short lived memory leaks in unit tests.
  - Print the ehandle unit test error output on verbose mode.
  - Improve dpkg-divert test to output stdout and stderr.
  - Use intermediate variable for directory traversal item iteration.
  - Refactor root handling in Dpkg::Path unit tests.
  - Refactor test verbose check into an inline function.
  - Make it possible to include test.h from benchmarks.
  - Disable hash reports in benchmark tests unless verbose.
  - Add support for basic test try/catch/finally keywords.
  - Merge the dpkg-tests.git repository into tests/.
  - Update merged functional test suite assumptions.
  - Remove redundant test cases from the functional test suite.
  - Remove source package building support from functional test suite.
  - When using DPKG_BUILDTREE add scripts/ to DPKG_PATH.
  [ Add man pages translations ]
  * Portuguese (Américo Monteiro). Closes: #964751
  [ Update dselect translations ]
  * Dutch (Frans Spiesschaert). Closes: #968294
  * French (Didier Vidal). Closes: #964749
  [ Update man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #968743
  * German (Helge Kreutzmann).
  [ Update programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #968744
  * German (Sven Joachim).
  [ Update scripts translations ]
  * German (Helge Kreutzmann).
- from version 1.20.5
  [ Guillem Jover ]
  * Revert change to prefix the specs file spec string self_spec with +
    instead of *. The prefix is supposed to go in the text itself
    instead of the spec name, which already had it. This change only
    apparently fixed the issue at hand because gcc started parsing it as
    the «[SUFFIX]:» case, completely disabling the PIE handling.
    Thanks to Thorsten Glaser &lt;tg@mirbsd.de&gt;.
  * Perl modules:
  - Dpkg::Source::Package::V1: Explicitly initialize constructor options to
    their implicit values, otherwise other code end up assuming different
    defaults. This is required here too as this class does not call the
    initialization from its parent.
  * Build system:
  - Detect the GNU program variants for make, patch and tar in the CPAN
    distribution to replace in the Dpkg module.
  - Set DEB_BUILD_ARCH to a dummy “amd64” in the CPAN distribution tests
    to not require a dpkg(1) in the system.
  * Test suite:
  - Only print the Dpkg::Path::check_directory_traversal() error on failure.
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
- from version 1.20.4
  [ Guillem Jover ]
  * Improve PIE flags support:
  - Prefix the specs file spec string self_spec with + instead of *.
    This way we do not override any previous setting, otherwise when
    passing the -specs options twice (f.ex. to compile and link), only the
    last one will take effect, which can break the build. Closes: #870383
  * Perl modules:
  - Dpkg::Source::Package: Explicitly initialize constructor options to
    their implicit values, otherwise other code end up assuming different
    defaults. Closes: #964017
  - Dpkg::OpenPGP: Use a temporary directory for the GnuPG homedir in
    verify_signature(), to make sure we do not write to the user home
    directory, except for the trustkeys.db file if present.
  - Dpkg::Path: Refactor new check_directory_traversal() function out of
    Dpkg::Source::Package-&gt;extract().
  - Dpkg::Path: Do not do partial matches for directory traversal checks,
    expect a trailing slash after the base directory name.
  - Dpkg::Path: Catch uncanonicanizable pathnames with a proper error.
    Closes: #964111
  - Dpkg::Path: Do not consider missing symlink targets a directory
    traversal attempt. Closes: #964234
  - Dpkg::Path: Allow /dev/null for directory traversals.
    Reported by Holger Levsen &lt;holger@layer-acht.org&gt;.
  * Build system:
  - Add Module::Signature as configure recommends for CPAN.
  * Test suite:
  - Use File::Path::make_path() instead of chained mkdir() in Dpkg_Path.t.
  - Add unit tests for Dpkg::Path::check_directory_traversal().
  [ Updated programs translations ]
  * German (Sven Joachim).
- from version 1.20.3
  [ Guillem Jover ]
  * Perl modules:
  - Dpkg::OpenPGP: Pass --no-options to gpg in verify_signature().
    Reported by Bertrand Marc &lt;bmarc@debian.org&gt;. Closes: #963839
  - Dpkg::Build::Info: Clarify by giving context to the
    get_build_env_whitelist() deprecation warning. Closes: #963844
    Reported by Sven Joachim &lt;svenjoac@gmx.de&gt;.
  - Dpkg::Source::Package: Fix check_original_tarball_signature() to make
    import_key() honor require_valid_signature, which should default to
    false. Reported by Mattia Rizzolo &lt;mattia@debian.org&gt;.
  - Dpkg::OpenPGP: Use a temporary directory for the GnuPG homedir in
    import_key(), to make sure we do not write to the user home directory,
    which might be read-only or non-existent. Closes: #963944
    Reported by Mattia Rizzolo &lt;mattia@debian.org&gt;.
  * Code internals:
  - libdpkg: Print a notice if we cannot write to the log file.
  * Build system:
  - Improve error diagnosis for configure version fetching script.
    Prompted by Norbert Preining &lt;norbert@preining.info&gt;.
  [ Updated programs translations ]
  * German (Sven Joachim).
- from version 1.20.2
  * dpkg: Do not include the architecture with --robot --version.
  * update-alternatives: Create alternatives directory (/etc/alternatives)
    if it is missing, to help with installation bootstrapping.
    Reported by Johannes Schauer &lt;josch@debian.org&gt;.
  * update-alternatives: Create the log directory if it is missing.
  * Perl modules:
  - Dpkg::Source::Package: Turn the missing expected tarball signature
    error into a warning for now, as it is causing unintended fallout,
    and does not play nice (yet) with tarballs repackaged by uscan(1).
    Closes: #963821
  * Code internals:
  - update-alternatives: Move log_msg() after make_path() so that we can use
    the latter.
  - update-alternatives: Add new xstrndup() and xdirname() functions.
  * Build system:
  - Set SHELL in the test environment.
  - Do not fail if po4a is not found, and search for it just once.
  - Fix name and section generation for translated man pages. This caused
    pod2man to get an empty --name argument and not output anything,
    resulting in generating empty man pages. Closes: #963794
  * Packaging:
  - Sort debian/dpkg-dev.manpages.
  - Install deb-src-symbols(5) in dpkg-dev package.
- from version 1.20.1
  [ Guillem Jover ]
  * Fix dpkg logging regression introduced in 1.20.0:
  - libdpkg: Use varbuf member .used instead of .size in log_message(),
    to avoid printing garbage.
  - libdpkg: Open the log file as write-only instead of read-only.
    Thanks to Roderich Schupp &lt;roderich.schupp@gmail.com&gt;. Closes: #953684
  * Unify and cleanup Makefile fragment files comments, including information
    about version of introduction.
  * Add new buildopts.mk Makefile fragment to support parsing DEB_BUILD_OPTIONS
    options with arguments, such as “parallel” as DEB_BUILD_OPTION_PARALLEL.
  * dpkg-genchanges: Handle empty Date fields from parsed debian/changelog.
    Based on a patch by Baptiste BEAUPLAT &lt;lyknode@cilg.org&gt;. Closes: #956321
  * dpkg-source: Check that debian/tests/control has the required fields.
    Prompted by Felix Lechner &lt;felix.lechner@lease-up.com&gt;.
  * dpkg-deb, dpkg: Do not accept relative pathnames in DEBIAN/conffiles.
    Reported by Niels Thykier &lt;niels@thykier.net&gt;.
  * dpkg-split: Fix off-by-one check in ar header padding, that was making
    parsing error out on valid archives. Regression introduced in dpkg 1.18.8.
  * libdpkg: Fix error message for ending version character in dependency
    parser:
  - Move the version unterminated case before the catchall.
  - Print the actual wrong character and print what is expected.
  * libdpkg: Do not use econtext-&gt;errmsg on out of context abort, as it might
    be uninitialized.
  * update-alternatives: Set the umask to 022 on program start.
    Reported by Paul Wise &lt;pabs@debian.org&gt;.
  * dpkg-parsechangelog: Fix --show-field for multiline fields. We were not
    stripping trailing whitespace, and were not prefixing empty lines with
    a ‘.’, like when printing with the field names.
    Reported by Paul Wise &lt;pabs@debian.org&gt;.
  * dpkg: Add a new --robot option to be used with --version.
  * dpkg, dpkg-query: Document missing options in --help output.
  * Unify ellipsis formatting in programs --help output.
  * Add Protected field support.
  * dpkg-realpath: New program, to be used by dpkg-maintscript-helper, and
    any maintainer script that needs a realpath that can handle pathnames
    relative to the dpkg root directory.
  * dpkg-realpath: Add support for DPKG_ROOT.
    Thanks to Helmut Grohne &lt;helmut@subdivi.de&gt;.
  * dpkg-realpath: Add support for --root and --instdir options.
  * dpkg-maintscript-helper: Add support for DPKG_ROOT:
  - Add DPKG_ROOT support for conffiles.
    Thanks to David Kalnischkies &lt;david@kalnischkies.de&gt;.
  - Add DPKG_ROOT support for symlink to and from directory switches.
    Based on a patch by Bastien ROUCARIÈS &lt;roucaries.bastien@gmail.com&gt;.
    Closes: #832176
  * update-alternatives: Add DPKG_ROOT support, and new --root and --instdir
    options. Closes: #871808
  * Portability:
  - libdpkg: When using uselocale(), include &lt;xlocale.h&gt; for locale_t if
    the header is available. Needed on BSDs.
    Reported by Sirio Balmelli &lt;sirio@b-ad.ch&gt;.
  * Perl modules:
  - Dpkg: Add a LICENSE section to the POD.
  - Dpkg::Source::Package: Add new get_upstream_signing_key() method.
  - Dpkg::Source::Package: Check missing expected tarball signatures.
  - Dpkg::Source::Package::V1: Check version format matching source format.
  - Dpkg::Vendor::Debian: Add debian-nonupload.gpg keyring.
    Thanks to Taowa Munene-Tardif &lt;taowa@debian.org&gt;. Closes: #956055
  - Dpkg::Vendor::Debian: Detect merged-usr-via-symlinks also with absolute
    pathnames. Reported by Adam Borowski &lt;kilobyte@angband.pl&gt;.
  - Dpkg::Build::Info: Avoid whitelist in function name.
  - Dpkg::Shlibs::SymbolFile: Avoid blacklist and whitelist terms.
  * Documentation:
  - man: Fix misused two-fonts macros.
    Thanks to Bjarni Ingi Gislason &lt;bjarniig@rhi.hi.is&gt;. Closes: #955028
  - man: Trim trailing whitespace from output.
    Thanks to Bjarni Ingi Gislason &lt;bjarniig@rhi.hi.is&gt;. Closes: #955030
  - man: Mention that dpkg(1) does not provide all back-end interfaces.
    Prompted by Elana Hashman &lt;ehashman@debian.org&gt;.
  - man: Clarify and fix file formats SYNOPSIS.
  - man: Clarify that deb-control(5) is a subset of deb-src-control(5).
    Closes: #958229
  - man: Unify warning and note admonitions formatting.
  - man: Remove useless commented out macros.
  - man: Fix unbalanced quotes in macro arguments.
  - man: Specify the indentation level for all following .IP macros, not
    just the first one.
  - man: Use .TP macros instead of hand-crafted formatting.
  - man: Fix font markup for some variable and literal strings.
  - dpkg-maintscript-helper: Add -?, --help and --version to --help output.
  - man: Fix apt and aptitude references.
    Reported by Helge Kreutzmann &lt;debian@helgefjell.de&gt;.
  - man: Mark commands (eval) in bold and quote library names (libgcc).
    Reported by Helge Kreutzmann &lt;debian@helgefjell.de&gt;.
  - man: Use UTF-8 quotes instead of ancient groff register variables.
  - man: Use literal double quotes instead of groff escape sequences.
  - man: Clarify that we resolve bug reports not bug report numbers.
    Reported by Helge Kreutzmann &lt;debian@helgefjell.de&gt;.
  - man: Clarify POSIX shell eval command usage in dpkg-architecture(1).
  - man: Use item lists instead of verbatim or hand-crafted formatting.
  - man: Do not use verbatim formatting for text that is not an example.
  - man: Markup examples explicitly with .EX/.EE.
  - man: Fix indentation for a note admonition in dpkg-scansources(1).
  - man: Document that a 3.0 (quilt) patch cannot create or modify symlinks.
    Thanks to Johannes Schauer &lt;josch@debian.org&gt;.
  - man: Reword text to reduce length in verbatim code block.
  - man: Add semicolons before verbatim code blocks.
  - man: Update dselect methods provided. Several got removed in 1.20.0.
  - man: The Installed-Size field does not get its value from du(1) since
    1.18.0.
  - man: Fix dpkg-gencontrol -P description to not refer to dpkg-source.
    Reported by Jakub Wilk &lt;jwilk@jwilk.net&gt;.
  - man: Place description of override value column on its own paragraph.
  - man: Surround markup within verbatim blocks with .nf/.fi.
  - man: Balance font markup.
  - man: Do not nest font markup.
  - man: Use .ig/.. macros to disable text instead of commenting it out.
  - man: Do not mark end of sentence period with bold.
  - man: Add a missing comma after man page reference in SEE ALSO section.
  - man: Convert man pages from roff to POD.
  - man: Clarify the dpkg --no-act admonition.
  - man: Avoid whitelist term in dpkg-source man page.
  * Code internals:
  - Use $() in shell or qx() in perl instead of ``.
  - dpkg-split: Switch part number variables from unsigned int to int.
  - scripts: Refactor shell error handling into a shell library
  - Reformat shell code to follow the coding style.
  - update-alternatives: Parametrize option names in output strings.
  - update-alternatives: Move logging function close to output functions.
  - update-alternatives: Move argument parsing functions close to main().
  - update-alternatives: Add general purpose non-failing functions for
    administrative directory access.
  - update-alternatives: Add filesystem abstraction functions.
  * Build system:
  - Handle .git being a plain file when getting the dpkg tree version.
  - Add debian/changelog as a Changes file to the CPAN distribution.
  - Set DPKG_SERIES to 1.20.x when running the functional test suite.
  - When using po4a require at least po4a 0.59. Change the po4a --porefs
    argument from no longer supported “noline,wrap” to “file”, as wrapping
    is the default since po4a 0.58. We require po4a 0.59 as 0.58 had a
    regression in its --srcdir support.
  - Switch to set the po4a addendum in the po4a_paths section instead of
    repeating it for each man page.
  - Use po4a conditional addendum support, and remove empty addenda.
  - Use po4a mode=eof support in addenda.
  - Do not use make prerequisites on suffix rule definitions.
    Closes: #961850
  - Add man page number suffixes to the automake SUFFIXES variable.
  - Update false positive suppressions for cppcheck 2.1.
  - Install specifications and API contracts in docdir.
  - Add support for switching man pages from roff to POD format.
  - Fix shell files substitution for version variable.
  * Packaging:
  - Switch to debhelper compatibility level 13.
  - Remove debian/tmp prefix from manpages debhelper fragment files.
  - Handle missing localized man pages gracefully.
  - Install AUTHORS, THANKS, usertags, README.api and
    README.feature-removal-schedule only in dpkg.deb.
  - Rename debian/usertags to debian/README.bug-usertags.
  - Install specifications to /usr/share/doc/dpkg/ in the dpkg-dev package.
  - Detect merged-usr-via-symlinks also with absolute pathnames in
    bug-script. Reported by Adam Borowski &lt;kilobyte@angband.pl&gt;.
  * Test suite:
  - Rename deb-content test cases to make them more descriptive.
  - Skip autogenerated files from codespell.
  [ Updated programs translations ]
  * German (Sven Joachim).
  * Simplified Chinese (Boyuan Yang). Closes: #958437
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * German (Helge Kreutzmann).
- from version 1.20.0
  [ Guillem Jover ]
  * libdpkg: Do not generate a backup file for the available database.
    Closes: #343578
  * perl: Switch Getopt::Long from bundling to bundling_values. This means
    the few scripts using Getopt::Long will stop accepting options in the
    form «-ab» for «-a -b», which is not future-proof, as it does not allow
    these options to get new arguments without making them ambiguous.
  * dpkg-buildpackage: Remove transient backwards R³ compatibility code.
  * buildtools.mk: Add support for nostrip in DEB_BUILD_OPTIONS when setting
    the STRIP variable.
  * dpkg-genbuildinfo: Do not include irrelevant packages in the Binary field.
  * dpkg: Do not clear selections for unknown packages. Closes: #927752
  * dpkg-shlibdeps: Add support for new Build-Depends-Packages, to be able
    to specify multiple packages. Closes: #926669
    Based on a patch by Frank Schaefer &lt;kelledin@gmail.com&gt;.
  * perl: Remove support for versioned GnuPG 2 program and packages.
  * libdpkg: Clarify lock contender error message. Print the PID of the lock
    contender, and add a warning explaining that removing the lock file is
    never the correct solution.
  * dpkg-genchanges, dpkg-mergechangelogs: Remove support for ~vola
    versioning, as volatile.debian.org was decommissioned some time ago.
  * dpkg-genchanges, dpkg-mergechangelogs: Match ~deb also as a backport
    marker in versions. Closes: #934980
  * libdpkg, dpkg: Use new versiondescribe_c() for non-localizable call sites,
    such as when writing to a log, which should not be localized.
    Reported by Julien Cristau &lt;jcristau@debian.org&gt;.
  * dpkg-query: Try to use the package synopsis from the available file if
    not installed. Closes: #43573
  * dpkg-gencontrol: Take into account hardlinks when computing the
    Installed-Size substvar. Closes: #923475
    Patch co-authored with Sven Joachim &lt;svenjoac@gmx.de&gt;.
  * dpkg: Fix and clarify behavior for packages marked to be on “hold”. These
    need to be processed for configuration and triggers. Closes: #926472
  * dpkg: Use DPKG_ADMINDIR to set the admindir. Closes: #900071
  * dpkg-source: Remove backwards compatibility code for legacy build-profiles.
  * perl: Give more context on field parsing errors. Closes: #637060
  * dpkg-buildpackage: Add option to sanitize environment. Closes: #843776
  * update-alternatives: Cope with a missing administrative directory.
  * update-alternatives: Create the administrative directory on demand.
  * dpkg-split: Cope with a missing parts/ database directory.
  * dpkg-split: Create the parts/ database directory on demand.
  * libdpkg: Consider msdbrw_needsuperuser equivalent to msdbrw_write, so
    the same checks are performed on normal non --force-not-root operation.
  * libdpkg: Add support for bootstrapping the installation of dpkg:
    Closes: #914515
  - Create the logfile with correct permissions, and remove the code
    setting up the logfile from the dpkg postinst.
  - Allow missing status and available databases, so that they get created
    on write, and remove the code setting them up from the dpkg postinst.
    Closes: #647911
  - Do not change the ownership of the triggers database directory. Either
    we are running as root:root which means the ownership should be correct
    already, or we are not which means we cannot change it anyway.
  - Create the dpkg database directory on demand.
  - Create the updates/ database directory on demand.
  - Create the info/ database directory on demand.
  * dpkg-architecture: Fix handling of exec failing in --command.
    Reported by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  * dpkg-buildpackage: Do not accept equal signs as part of the hook names.
    Reported by Daniel Shahaf &lt;danielsh@apache.org&gt;. Closes: #948291
  * dselect: Mark a string for translation.
  * dselect: Cleanup access methods:
  - Remove harddisk methods, as they were non-functional due to fdisk
    interface changes, and do not make sense anymore as we can expect users
    to mount any such filesystem on their own, to then use a filesystem
    method instead. Prompted by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  - Remove cdrom method superseded by the multi_cd method.
  - Remove nfs methods, as there is nothing special about NFS, and mounting
    these should just be left to the local admin, who can mount any other
    remote filesystem too.
  - Remove multi_mount method, as the multi_cd method can take care of
    mounting the necessary images or devices.
  - Replace changelog with correct copyright in file header.
  * dpkg, dselect: Stop using first-person singular in output messages.
  * libdpkg: Fix memory leak in parsedb context close.
  * buildtools.mk: Add QMAKE variable. Closes: #920878
  * po: Fix translation of --compare-versions. Closes: #951614
    Thanks to Boyuan Yang &lt;byang@debian.org&gt;.
  * Perl modules:
  - Dpkg::Source::Package: Verify original tarball signatures at build time.
  - Dpkg::BuildFlags: Add new unset() method.
    Requested by Daniel Schepler &lt;dschepler@gmail.com&gt;.
  - Dpkg::Source::Package::V2: Emit a special patch header on
    single-debian-patch. Closes: #933152
  - Dpkg::Vendor::Debian: Only scan /usr/local/ directories that exist.
    Closes: #932967
  - Dpkg::Vendor::Debian: Do not set -Werror=implicit-function-declaration
    for C++. Closes: #939969
  - Dpkg::Deps: Check for valid virtual package version relations. Do not
    allow non-equal version relations in virtual provides. Closes: #930317
  - Dpkg: Remove internal lowercase variables $version, $progname,
    $admindir, $dpkglibdir and $pkgdatadir.
  - Dpkg::Changelog: Remove obsolete methods dpkg() and rfc822().
  - Dpkg::Changelog::Entry::Debian: Remove obsolete methods check_header()
    and check_trailer(). Hide variables $regex_header and $regex_trailer.
  - Dpkg::Changelog::Parse: Remove warnings of obsolete options forceplugin
    and libdir. Remove obsolete functions changelog_parse_debian() and
    changelog_parse_plugin().
  - Dpkg::Compression: Hide internal lowercase variables
    $default_compression, $default_compression_level and
    $compression_re_file_ext.
  - Dpkg::Deps::KnownFacts: Remove obsolete check_package() method.
  - Dpkg::Exit: Hide internal lowercase @handlers variable.
  - Dpkg::Gettext: Remove obsolete _g() function.
  - Dpkg::Source::Package: Hide internal lowercase variable
    @tar_ignore_default_pattern. Remove internal lowercase variable alias
    $diff_ignore_default_regexp.
  - Dpkg::Substvars: Remove obsolete no_warn() method.
  - Dpkg::Index: Change default value for unique_tuple_key to 1.
  - Dpkg::Version: Remove deprecation warning from semantic change in
    bool overload.
  - Dpkg::Checksums: Remove obsolete 'program' property warning.
  - Dpkg::Conf: Remove obsolete methods and obsolete croak for method option.
  - Dpkg::Vendor: Remove obsolete 'keyrings' hook.
  - Dpkg::Exit: Unregister all signal handlers once we have executed them.
    Closes: #932841
  - Dpkg::Exit: Register exit handlers also for __DIE__.
  - Dpkg::Source::Package::V3::Native: Do not say v1.0 for 3.0 formats.
  - Dpkg::Dist::Files: On filename parse error say file instead of package.
  - Dpkg::Substvars: Add new vendor:Name and vendor:Id substvars.
  - Dpkg::Source::Package: Detect directory traversals under debian
    directory. Reported by Felix Lechner &lt;felix.lechner@lease-up.com&gt;.
  * Documentation:
  - man: Fix uncommon wording constructs.
  - man: Use a minus sign for a literal string.
  - man: Clarify that the pager is called via «$SHELL -c».
  - dpkg-shlibdeps: Document split_soname() function.
    Prompted by Christopher Crim &lt;christopher.crim@quoininc.com&gt;.
  - Dpkg::Changelog: Document methods provided by subclasses.
    Reported by Felix Lechner &lt;felix.lechner@lease-up.com&gt;.
  - man: Globally adjust left and disable hyphenation.
  - man: Split dselect(1) --color from --colour option items.
  - man: Describe the SONAME formats supported in deb-shlibs(5).
  - man: Move template symbol documentation into new deb-src-symbols(5).
  - Dpkg::Changelog::Parse: Remove $ sigil from option names in POD.
  - Dpkg: Say class instead of object when appropriate.
  - Dpkg::Changelog: Clarify that these classes inherit from some other
    base class, which will contain the missing documentation.
    Prompted by intrigeri &lt;intrigeri@debian.org&gt;.
  - man: Clarify deb-changelog(5) format. Closes: #946780
  - man: Clarify debian/source/include-binaries format in dpkg-source(1).
    Prompted by Felix Lechner &lt;felix.lechner@lease-up.com&gt;.
  - man, doc: Clarify that the postinst "triggered" argument gets the
    trigger-name(s) as a space-separated list in the second argument.
    Prompted by Michael Biebl &lt;biebl@debian.org&gt;.
  - dselect: Update the multicd README file.
  - doc, man: Mark T and I package instances to avoid misreadings.
  * Code internals:
  - Dpkg::Source::Package: Refactor original tarball handling.
  - perl: Use File::Copy instead of spawning mv/cp commands.
  - Dpkg::OpenPGP: Refactor signature verification into a new function.
  - Dpkg::OpenPGP: Make it possible to verify detached signatures.
  - Dpkg::OpenPGP: Add support for importing an OpenPGP key into a keyring.
  - Dpkg::BuildFlags: Remove unused hash keys.
  - libdpkg: Use the variable instead of a type as sizeof() argument.
  - libdpkg: Use the totalwritten variable for a consistency check.
  - dselect: Reduce scope of variable, to avoid it being unused in a branch.
  - dpkg-deb: Fold two adjacent if conditionals into a single one.
  - dpkg: Initialize flagdeppossi in check_conflict().
  - libdpkg: Add new C locale switch over support.
  - libdpkg: Add new versiondescribe_c() to force a C locale.
  - dselect: Make baselist::draw_column_*() col arguments const.
  - libdpkg: Use p instead of name in dpkg_arch_name_is_illegal().
  - dpkg: Remove redundant condition for sourcefile in updateavailable().
  - dpkg, update-alternatives: Make variables static.
  - libdpkg: Add missing symbols to the version map.
  - libdpkg: Fix fiemap memory layout usage that confuses gcc 10 to emit a
    warning.
  - libdpkg: Only use varbuf_printf() in pkg_format_show() when necessary.
    This should speed up «dpkg-query --show» formatting.
  - libdpkg: Fix package format string to be a string literal.
    This suppresses a gcc warning.
  - dpkg: Fix short lived memory leak in --force-help handling.
  - dpkg-split: Fix short lived file descriptor leak in --auto.
  - start-stop-daemon: Explicitly ignore unimportant function return values.
  - start-stop-daemon: Fix memory leak on multiple --chuid arguments.
  - start-stop-daemon: Close the notification socket in the child.
  - libdpkg: Fix memory leaks in zlib and bz2 decompression functions.
  - libdpkg: Add new dir_make_path() and dir_make_path_parent() functions.
  - libdpkg: Add new atomic file flag to create the base path when missing.
  - libdpkg: Fix modstatdb_rw enum comments.
  - libdpkg, dpkg-query: Optimize db-fsys:Files virtual variable loading.
    We load either the entire db-fsys for all packages, possibly optimized
    per platform (such as by using fiemap), or the specific ones for the
    requested packages. This also fixes a problematic cast removing the
    constness of a variable.
  - Dpkg::Dist::Files: Document the two filename pattern formats.
  - update-alternatives: Remove redundant condition in argument parser.
  - update-alternatives: Move error context setup before calling setjmp(),
    so that cppcheck stops being confused.
  - test: Reformat 200_Dpkg_Shlibs.cpp for coding style conformance.
  - dpkg: Make it possible for the compiler to check printf() format
    string arguments on dependency printer.
  - dselect: Reorder branches in packagelist::deselect_one_of so that they
    are not duplicated.
  - dselect: Use nullptr instead of NULL.
  - dselect: Use static_cast&lt;&gt; instead of old-style type qualifier cast.
  - dselect: Do not use unnecessary old-style casts.
  - dselect: Fix variable types to avoid needing old-style casts.
  - libcompat: Disarm libselinux setexecfilecon() declaration for
    libcompat-test.
  - libdpkg: Define new VARBUF_OBJECT macro.
  - libdpkg: Add new ATOMIC_FILE_NORMAL enum value to avoid a cast in C++.
  - libdpkg: Use a new DPKG_NULL macro that works in C and C++.
  - libdpkg: Use a new DPKG_STATIC_CAST macro that works in C and C++.
  - libdpkg: Move printing of errno into dpkg_error_set().
  - libdpkg: Use a varbuf to store the problem messages per parsedb context.
  - libdpkg: Fix Doxygen comments.
  * Build system:
  - Bump minimal Perl version to 5.24.1.
  - Add a serial versioning to the m4 files.
  - Install m4 files into system aclocal directory.
  - Bump minimal gettext version to 0.19.8, to get the m4 files that can
    cross-build for musl-based systems.
  - Enable more compiler warnings.
  - Update Doxygen configuration from version 1.8.16.
  * Packaging:
  - Remove obsolete Breaks satisfied since oldstable.
  - Replace custom rule for 'configure' with call to dh_autoreconf.
    Thanks to Dan Streetman &lt;ddstreet@canonical.com&gt;. Closes: #939516
  - dselect: Remove methods state files on purge.
    Spotted by Sven Joachim &lt;svenjoac@gmx.de&gt;.
  - Switch to debhelper compatibility level 12.
  - Switch from debian/compat to debhelper-commpat in Build-Depends.
  - Bump Standards-Version to 4.5.0 (no changes required).
  * Test suite:
  - Remove perlcritic Documentation::RequirePodLinksIncludeText suppression.
  - Clarify cppcheck va_list_usedBeforeStarted suppression.
  - Skip build directories from codespell check.
  - Update stopwords for codespell 1.16.0.
  - Suppress new bogus cppcheck 1.90 false positives.
  - libdpkg: Remove redundant assignment in t-ehandle unit test.
  - Skip backup files from codespell check.
  - Ignore python-3.8 runtime warnings in codespell.
  [ Updated programs translations ]
  * German (Sven Joachim).
  * Portuguese (Miguel Figueiredo). Closes: #935695
  * Simplified Chinese (Mo Zhou). Closes: #942195, #945776
  [ Updated dselect translations ]
  * German (Sven Joachim).
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * German (Helge Kreutzmann). Closes: #931135
- from version 1.19.7
  [ Guillem Jover ]
  * dpkg: Fix off-by-one error in dpkg --abort-error. Closes: #924886
    Thanks to Tom Goulet &lt;tomg@sentex.ca&gt;.
  * dpkg: Set the force defaults before loading the config file, otherwise we
    incorrectly override them. Regression introduced in dpkg 1.19.5.
    Closes: #928671
  * dpkg: Split the trigger dependtry into two, the second of which will be
    the one checking trigger cycles when deferring trigger processing due to
    unsatisfiable dependencies. Closes: #928429
  * dpkg-deb: Validate ar member magic before normalizing any of its fields.
  * dpkg-deb: Honor --nocheck when building packages with newlines in
    filenames. Regression introduced in dpkg 1.18.1. Closes: #929727
  * Documentation:
  - rootless-builds.txt: Expand what the builder means. Mention the
    dpkg-deb option to use to set the owner and group to root. And reword
    the prototyping section to be less confusing with what is currently
    implemented. Closes: #929019
  - README: Clarify when autopoint is needed. Closes: #929601
  - Fix typos in docs and output strings. Warned by codespell.
  [ Updated programs translations ]
  * Catalan (Guillem Jover).
  [ Updated dselect translations ]
  * Catalan (Guillem Jover).
  [ Updated scripts translations ]
  * Catalan (Guillem Jover).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #926665
  * French (Jean-Pierre Giraud). Closes: #929664
- from version 1.19.6
  [ Guillem Jover ]
  * libdpkg: Add a new TAR_FORMAT_UNKNOWN enum value.
  * libdpkg: Set tar_entry to zero on tar_entry_destroy(), to avoid double
    free()s and the subsequent crashes.
  * libdpkg: Handle non end-of-tape errors from tar_header_decode().
  * libdpkg: Use ERANGE instead of EINVAL for tar_atol8() out-of-range error.
  * dpkg-gencontrol: Check presence of package build dir before traversing it.
  * Perl modules:
  - Dpkg::Source::Package::V1: Change default build option style to -sa.
    Using -sA by default means the user might lose data on overwrite if
    there is already a directory with the same name laying around.
    Closes: #910737
  - Dpkg::Source::Package: Handle Format field being undefined. On source
    format 1.0, the default is for the debian/source/format file not being
    present, which means we'll start with an empty Format field name.
    Regression introduced in dpkg 1.19.3.
  * Packaging:
  - Update usertags.
  - Install a lintian profile for dpkg based on the debian profile, so that
    we can suppress Debian-specific tags, such as the controversial one on
    vendor-specific patch series files.
  - Add Breaks on lsb-base due to start-stop-daemon exposing breakage in
    the killproc function from /lib/lsb/init-functions. Closes: #923861
  * Test suite:
  - Stop requiring (pseudo-)root in the functional test suite.
  - Export and move TESTDATA definition close to the PATH definition.
  - Quote the 'yes' command to make a comment clearer.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #924776
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #924777
  * German (Helge Kreutzmann).
- from version 1.19.5
  [ Guillem Jover ]
  * start-stop-daemon: Make sure that we get a meaningful errno on
    parse_unsigned(), so that the error messages always make sense.
  * start-stop-daemon: Add new fatalv() and fatale() functions and use the
    latter for system errors, so that we are explicit on whether we want to
    use errno for error reporting or not.
  * start-stop-daemon: Always refuse to parse a world-writable pidfile,
    except when that is /dev/null.
  * dpkg: Print the current set of enabled force options on --force-help.
  * dpkg: Parse and set new DPKG_FORCE environment variable for subprocesses.
    Closes: #666147
  * dpkg-statoverride: Add support for --force-* options.
  * dpkg-statoverride: Switch from --force option to new --force-&lt;thing&gt;
    options. Deprecate --force option which will be considered an alias for
  - -force-all for now.
  * dpkg, dpkg-statoverride: Add new option --refuse-security-mac to control
    SELinux. See #811037.
  * dpkg: Clarify error on unknown system user/group in statoverride database.
    Closes: #920880
  * dpkg-buildpackage: Clarify the warning/error on short OpenPGP key IDs.
    Closes: #922039
  * dpkg-maintscript-helper: Restrict find for dir-to-symlink move to
  - maxdepth 1. Thanks to Ralf Treinen &lt;treinen@free.fr&gt;. Closes: #922799
  * dpkg-genbuildinfo: Add support for a new Build-Tainted-By field in
    .buildinfo files. Suggested by Alexander E. Patrakov &lt;patrakov@gmail.com&gt;.
  * libdpkg: Clarify field names in error and warning messages.
  * libdpkg: Optimize error handling. Move the error reporting outside the
    involved functions so that we do not need to call gettext if there is no
    error, which has a significant performance cost.
  * libdpkg: Merge nicknames table into fieldinfos, to stop penalizing the
    lookup of non-obsolete fieldnames.
  * libdpkg: Print a more accurate warning for Revision nicknames.
  * libdpkg: Increase the pkg-hash bins size to 65521, to improve hash table
    performance at the cost of a bit more memory usage.
  * libdpkg: Blank packages that are not-installed with unknown selection.
    Closes: #922410
  * libdpkg, dpkg: Print the dpkg database directory on access errors.
    Closes: #883700
  * Perl modules:
  - Dpkg::Vendor::Debian: Add support for merged-usr-via-symlinks tainted
    tag. Suggested by Alexander E. Patrakov &lt;patrakov@gmail.com&gt;.
  - Dpkg::Vendor::Debian: Add support for usr-local-has-* tainted tags.
  - Dpkg::Source::Package: Add a missing use Dpkg::Source::Format.
    Diagnosed by Ian Jackson &lt;ijackson@chiark.greenend.org.uk&gt;.
    Closes: #921031
  * Documentation:
  - start-stop-daemon(1): Document behavior of --pidfile security checks.
    Closes: #921557
  - dpkg(1): Document the unknown selection state. Closes: #922407
  * Code internals:
  - dpkg: Move SELinux fallback label to the SELinux specific code path.
  - dpkg: Simplify maintscript_set_exec_context().
  - dpkg: Move force options support into its own file.
  - dpkg: Do not hardcode the program name in the --force-help output.
  - dpkg: Switch force options from individual variables to bit fields.
  - dpkg: Switch from a char to an enum to track the force options types.
  - dpkg: Switch to set the default force option from the forceinfos array.
  - libdpkg: New benchmark programs and infrastructure.
  - libdpkg: Add new dpkg_error_move() function.
  - libdpkg: Add new dpkg_has_error() function.
  - libdpkg: Move status names from parse errors to arguments.
  - libdpkg: Use va_arg copy instead of the original on a vasprintf() call.
  - libdpkg: Include &lt;string.h&gt; in pager.c.
    Reported by Y &lt;sevener@cock.li&gt;. Closes: #922212
  - libdpkg: Use pkg_set_want() instead of a direct assignment.
  * Build system:
  - Check whether this dist is a release, based only on the version format.
    This will avoid having to do a two staged release to get a proper perl
    distribution tarball.
  * Packaging:
  - autopkgtest: Add file to Depends fields.
  - autopkgtest: Clarify behavior on root/non-root requirement.
  - Bump Standards-Version to 4.3.0 (no changes required).
  - Remove now unused assert usertag description.
  - Remove trailing whitespace from changelog.
  - Remove Origin and Bugs fields from control file.
  - Include a bug-script to report on tainted merged-usr-via-symlinks.
  * Test suite:
  - libdpkg: Fix unit test for file_slurp(). Closes: #920974
    Diagnosed by Frank Schaefer &lt;kelledin@gmail.com&gt;.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #921942
  * German (Sven Joachim).
  * Simplified Chinese (Zhou Mo). Closes: #920972
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #921943
  * French (Jean-Pierre Giraud). Closes: #920905
  * German (Helge Kreutzmann).
- from version 1.19.4
  * start-stop-daemon: Do not sanity check the pidfile when it is specified as
    /dev/null, as that implies the caller wants to start the program no matter
    what. Closes: #920242
  * Portability:
  - start-stop-daemon: Only use SO_PASSCRED if defined. Fixes build failure
    at least on GNU/Hurd.
  * Packaging:
  - autopkgtest: Pass --disable-nls and --disable-dselect to configure.
  - autopkgtest: Change Depends to «build-essential, autoconf, pkg-config».
- from version 1.19.3
  [ Guillem Jover ]
  * dpkg-source: Stop filtering @builddeps@ from Testsuite-Triggers field.
    Closes: #910734
  * dpkg-genchanges: Only reference binary packages being uploaded, which
    means that for a source-only upload, the Binary and Description fields
    should be empty. Closes: #818618
  * dpkg-scanpackages: Do not compute unnecessary checksums when using the
  - -hash argument. Based on a patch by Chris Lamb &lt;lamby@debian.org&gt;.
    Closes: #916456
  * dpkg-scanpackages: Emit a warning with the list of repeat packages.
    Prompted by Johannes Schauer &lt;josch@debian.org&gt;.
  * start-stop-daemon: Check whether standalone --pidfile use is secure.
    Prompted by Michael Orlitzky &lt;michael@orlitzky.com&gt;.
  * start-stop-daemon: Print complete verbose lines, instead of partial lines
    with no newlines and a final print with a newline.
  * start-stop-daemon: Add new --notify-await and --notify-timeout options,
    which implement the systemd readiness protocol for services.
    Closes: #910707
  * update-alternatives: Add new --debug option.
  * update-alternatives: Fix removal of obsolete slaves from the linked list.
    Reported by Andreas Beckmann &lt;anbe@debian.org&gt;. Closes: #916799
  * vendor.mk: Fix dpkg_vendor_derives_from macro documentation.
    Thanks to Colin Watson &lt;cjwatson@debian.org&gt;. Closes: #913816
  * vendor.mk: Add support for an improved dpkg_vendor_derives_from macro.
    Version the macros so that both can be used, and default the unversioned
    one to the version 0 macro.
  * dpkg: Mark the package we are giving up on a trigger cycle as "istobe"
    normal, so that the dependency checks know they cannot expect this package
    to be processed anymore. Otherwise we ended up never detecting that we
    were not making progress, as we expected to process this package at a later
    point, when that would never happen anymore. This then was causing asserts
    in the process queue loop. Closes: #901127, #910819
  * dpkg: Reset progress_bytrigproc once we have injected it into the current
    package process queue iteration, so that we do not keep trying to process
    it, which might end up generating artificial trigger cycles, if
    dependencies are not satisfied yet.
  * dpkg: Convert one trigger processing required type into the new try-queued
    one, so that we stop skipping unsatisfiable dependency checks.
  * dpkg: Move trigproc cycle reset inside try-deferred conditional. We should
    only reset the cycle detection in case we are not bailing out from the
    processing with an error, otherwise we could come back to this package and
    detect an artificial trigger cycle.
  * dpkg: Introduce a new dependency try level for trigger processing. This
    completely defers trigger processing until after the dependency cycle
    breaking level, so to avoid generating artificial trigger cycles, when we
    end up trying to process triggers with yet unsatisifiable dependencies.
    Closes: #810724, #854478, #911620
  * dpkg: Fix --help output, to clarify which arguments are optional.
  * libdpkg: Add proper tar error handling. This makes the tar extractor
    track and report back parse errors, so that we can give more descriptive
    messages.
  * libdpkg: Detect unsupported tar entry types to give better error messages.
  * libdpkg: Add new db-fsys:Files and db-fsys:Last-Modified virtual fields.
  * Perl modules:
  - Dpkg::Changelog::Debian: Preserve modelines at EOF. Closes: #916056
    Thanks to Chris Lamb &lt;lamby@debian.org&gt; for initial test cases.
  - Dpkg::File: Make file_slurp() also accept pathnames in addition to
    filehandles.
  - Dpkg::Vendor::Ubuntu: Fix buildflags override after default setting move.
    Based on a patch by Iain Lane &lt;laney@ubuntu.com&gt; and
    Adam Conrad &lt;adconrad@ubuntu.com&gt;. Closes: #915881
  - Dpkg::Shlibs::Objdump: Remove unused Dpkg::IPC import.
  - Dpkg::Shlibs::Objdump: Only select objdump program when going to use it.
  - Dpkg::Source::Package: Do not reinitialize fields member in constructor.
  - Dpkg::Source::Patch: Do not recommend --include-removal when not
    supported. Closes: #913012
  - Dpkg::Source::Package::V3::Bzr: Fix format name in output message.
  - Dpkg::Source::Package: Add a new format option to the new constructor.
    Prompted by James McCoy &lt;jamesan@debian.org&gt;.
  - Dpkg::Source::Package: Improve debian/source/format parsing and
    validation.
  - Dpkg::Source::Format: New public module.
    Prompted by Mattia Rizzolo &lt;mattia@debian.org&gt;.
  * Documentation:
  - dpkg(1): Clarify --remove action. Closes: #914478
  - dpkg-query(1): Clarify --list option behavior when no arguments are
    specified. Closes: #917098
  - deb-control(5): Clarify by adding a reference to deb-src-control(5) and
    removing an invalid comment in the example.
    Prompted by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  - dpkg(1): Clarify databases used by --yet-to-unpack and --predep-package.
    Prompted by Johannes Schauer &lt;josch@debian.org&gt;.
  - Clarify character classes for various formats in man pages, by
    explicitly listing the character ranges within parenthesis.
    Prompted by Ian Jackson &lt;ijackson@chiark.greenend.org.uk&gt;.
  - dpkg-query(1): Document the version introducing the -f option.
  - dpkg-architecture(1): Add reference to the TERMS section in the
    VARIABLES section. Prompted by Axel Beckert &lt;abe@debian.org&gt;.
  - Fix POD for Dpkg::Interface::Storable derived method implementations.
  - Dpkg::Deps::Simple(3): Fix POD signature for new constructor.
  * Code internals:
  - dpkg-maintscript-helper: Use an explicit escape instead of a literal
    backslash.
  - Quote shell variables. Reported by Johannes Schauer &lt;josch@debian.org&gt;.
  - Switch perl code to use the new Dpkg::Source::Format module.
  - dpkg-source: Move source format selection earlier in the build.
  - dpkg-source: Use new format argument for Dpkg::Source::Package-&gt;new().
  - dpkg-shlibdeps: Remove unused variable.
  - dpkg-scanpackages: Unroll a single iteration loop.
  - start-stop-daemon: Compare foundany against 0 instead of treating it
    like a boolean.
  - start-stop-daemon: Switch code to use new info() and debug() functions.
  - update-alternatives: Use enums for actions instead of strings.
  - update-alternatives: Switch verbose selection into an enum.
  - dpkg: Negate tortoise_not_in_hare() function name and return value.
  - dpkg: Initialize trigcyclenode's next member once.
  - dpkg: Use common pattern of assigning as an iterator.
  - dpkg: Factor trigproc_new_cyclenode() out from check_trigger_cycle().
  - dpkg: Switch dependtry from an int to an enum.
  - dpkg: Move dependtry description from deferred_configure() to its
    declaration.
  - dpkg: Split trigger processing types into required, try-queued and
    try-deferred.
  - dpkg-query: Rename variable to avoid shadowing a local function.
  - When allocating use the variable instead of the type in sizeof().
  - dselect: Rename variable r to pkgbin.
  - libdpkg, dpkg: Rename r variables to fnn.
  - libdpkg: Rename ret variable to next.
  - libdpkg: Cleanup fsys module symbol names.
  - libdpkg: Rename pkg_db symbols to pkg_hash.
  - libdpkg: Add new warning printer setter function.
    Prompted by Julian Andres Klode &lt;jak@debian.org&gt;.
  - libdpkg: Add new DPKG_ERROR_OBJECT macro.
  * Build system:
  - get-version: Use a format string with printf.
  - run-script: Use $() instead of deprecated ``.
  - run-script: Remove unused PERL_PROFILE variable, PERL5OPT can be used
    instead, and does not require leaving an unquoted variable around.
  - run-script: Add «set -e».
  - Build.PL: Set environment variables only for CPAN tests.
  - Build.PL: Set locale for CPAN tests to C. Fixes CPAN#127314.
  - configure: Split AM_INIT_AUTOMAKE arguments into different lines.
  * Packaging:
  - Bump Standards-Version to 4.2.1 (no changes needed).
  - Switch to debhelper compatibility level 11.
  - Create the log file in postinst only if it does not exist.
    Prompted by Johannes Schauer &lt;josch@debian.org&gt;.
  - Add superficial autopkgtest functional tests.
  * Test suite:
  - Add new shellcheck author test.
  - Add descriptions for the shellcheck exclude codes.
  - Update cppcheck suppressions.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #912023
  * German (Sven Joachim).
  * Italian (Milo Casagrande). Closes: #915610
  * Portuguese (Miguel Figueiredo). Closes: #917813
  * Simplified Chinese (Zhou Mo). Closes: #919040
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #912024
  * German (Helge Kreutzmann).
- from version 1.19.2
  [ Guillem Jover ]
  * dpkg: Fix --force-not-root for chown() and chmod() based syscalls, and
    give a more meaningful error message on chroot(). Closes: #614126
  * dpkg-divert, dpkg-statoverride: Add new --instdir and --root options,
    and make the commands honor the DPKG_ROOT environment variable.
    Closes: #487108
  * libdpkg: Call the pager with «$SHELL -c» to respect POSIX. Closes: #910009
  * libdpkg: Do not spawn a pager if we are going to call «cat».
  * libdpkg: Honor DPKG_PAGER when spawning a pager.
    Suggested by Craig Sanders &lt;cas@taz.net.au&gt;.
  * libdpkg: Set LESS to “-FRSXMQ” if not already set, when spawning a pager.
  * libdpkg: Ignore SIGPIPE when setting up a pager, and then ignore EPIPE
    errors when writing to stdout, otherwise if we quit the pager early, the
    program will exit with an error code.
  * libdpkg: Set stdout to be fully buffered when using a pager.
  * dpkg, dpkg-query: Add new --no-pager option. For dpkg this is also a
    configuration option. Closes: #909754
  * Perl modules:
  - Dpkg::OpenPGP: Ignore Version field in enarmored output.
    Fixes CPAN#127217.
  - Dpkg::OpenPGP: Do not read the gpg user configuration file.
  - Dpkg::Source::Functions: Reimplement is_binary() w/o using diff(1).
  - Dpkg::Source::Package::V2: Split the BinaryFiles module into its own
    file, and give it a more generic name (Dpkg::Source::BinaryFiles).
  - Dpkg::Source::Package::V2: Move binary file detection to BinaryFiles
    module.
  * Documentation:
  - dpkg-buildpackage(1): Clarify --build=source explanation.
  - dsc(5): Clarify what “flattened” means in Testsuite-Triggers.
    Prompted by Mattia Rizzolo &lt;mattia@debian.org&gt;.
  - dsc(5): Add a reference to where the source formats are described.
    Prompted by Manuel A. Fernandez Montecelo &lt;mafm@debian.org&gt;.
  - dpkg-source(1): Improve documentation on vendor-specific series files.
  - deb-control(5): Document Build-Ids field.
    Prompted by Stuart Prescott &lt;stuart@debian.org&gt;.
  - dpkg(1): Clarify which fields are affected by dependency options.
    Prompted by James Clarke &lt;jrtc27@debian.org&gt;.
  - dpkg-query(1): Document the PAGER environment variable usage.
  - Dpkg(1): Add POD documentation about the module hierarchy and API.
  * Code internals:
  - dpkg-split: Use nfstrnsave() instead of nfmalloc() + memcpy().
  - libdpkg: Add new fsys-dir module.
  - libdpkg: Pass the file contents to the pager instead of the filename.
  - libdpkg: Add a pager kill switch, so that it can be forcefully disabled.
  * Build system:
  - Distribute a LICENSE file on CPAN.
  - Do not make the Build.PL script executable.
  - Generalize PACKAGE_CPAN_SIGN by setting PACKAGE_DIST_IS_RELEASE instead.
  - Add a release_status key to the CPAN metadata.
  - Fix typo in CPAN recommends key.
  - Improve test and author CPAN dependencies.
  * Packaging:
  - Break libapt-pkg5.0 instead of apt. Closes: #909959
    Analysis by Sven Joachim &lt;svenjoac@gmx.de&gt;.
  * Test suite:
  - Skip version checks involving «dpkg --compare-versions» if not available.
    This is relevant on CPAN or on non-dpkg-based systems.
  [ Updated programs translations ]
  * Polish (Łukasz Dulny).
  [ Updated man pages translations ]
  * German (Helge Kreutzmann).
- from version 1.19.1
  [ Guillem Jover ]
  * Fix logic in dpkg-buildpackage to decide whether to run build targets,
    which broke tons of packages that are violating Debian policy MUSTs.
    Thanks to James Clarke &lt;jrtc27@debian.org&gt;. Closes: #878899
  * Do not try to recompute hashes for the .dsc file when signing binary-only
    builds in dpkg-buildpackage. Reported by Ximin Luo &lt;infinity0@debian.org&gt;.
  * Pass the correct source stanza to the dpkg-buildpackage code parsing the
    Rules-Requires-Root field. This meant the field was being ignored.
  * Run dpkg-source directly from the current working directory in
    dpkg-buildpackage, instead of changing directory back and forth.
  * Setup and check rootcommand in dpkg-buildpackage only if it is going to
    be needed. Reported by Niels Thykier &lt;niels@thykier.net&gt;.
  * Add color support to dpkg-maintscript-helper (a shell script).
  * Fix warning by including &lt;sys/sysmacros.h&gt; for makedev() in libdpkg.
  * Fix directory traversal with dpkg-deb --raw-extract, by guaranteeing
    that the DEBIAN pathname does not exist. Closes: #879982
    Reported by Jakub Wilk &lt;jwilk@jwilk.net&gt;.
  * Add new AS, STRIP, OBJCOPY, OBJDUMP, NM, AR and RANLIB buildtools
    variables to buildtools.mk. Prompted by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  * Restore rejecting negated architectures in Architecture field in
    dpkg-gencontrol and dpkg-genchanges. Regression introduced in dpkg 1.18.5.
  * Fix dpkg-gensymbols to print "error" instead of "warning" when these
    are fatal. Closes: #881488
  * Rename DPKG_GAIN_ROOT_CMD to DEB_GAIN_ROOT_CMD in the R³ support, as
    the variable is expected to be set by any builder, not just dpkg. And
    introduce ephemeral backwards compatibility even though there are no
    known users.
  * Do not set DEB_GAIN_ROOT_CMD in dpkg-buildpackage when the R³ value is
    &lt;implementations-keywords&gt;, following the specification.
  * Specify that DEB_GAIN_ROOT_CMD in R³ should preserve the environment.
    Proposed by Josh Triplett &lt;josh@joshtriplett.org&gt;.
  * Specify new DEB_RULES_REQUIRES_ROOT variable for R³ support.
  * Add new --rules-requires-root option to dpkg-buildpackage.
  * Declare R³ specification as "recommendation, stable" with version 1.0.
  * Export architecture variables by default from architecture.mk, as
    documented in dpkg-architecture(1). Closes: #888964
    Thanks to Jack Bates &lt;wdz7eo@nottheoilrig.com&gt;
  * Increment the line number on dpkg --set-selections on unknown packages.
    Reported by Heinz Repp &lt;heinz.repp@arcor.de&gt;. Closes: #888983
  * Switch a DEBIAN/conffile parsing assert() in dpkg due to empty lines
    into an ohshit(), because this is really a run-time error.
  * Fix assert() in dselect to expect the method lock file descriptor to be
    initialized, instead of non-zero.
  * Switch a fatal() call in start-stop-daemon into the new BUG() macro,
    because it is really an internal error.
  * Switch all assert() calls (except in update-alternatives) into internerr()
    or BUG() calls, to get way better reporting with variable contents and
    descriptions, and to make them always present independent of NDEBUG.
  * Add a new --no-rename option to dpkg-divert. This is the current default
    behavior, but it will make it possible to do a default switch in 1.20.x.
  * Warn when using dpkg-divert --add or --remove w/o --rename or --no-rename.
  * Warn when using dpkg-divert --rename on a file from an Essential package.
  * Use a single “struct filenamenode” definition for the entire code base.
    Closes: #746766
  * Add support for frontend locking. This makes it possible for frontends
    using this new protocol, to safely lock the dpkg database w/o risk of
    race conditions with other dpkg instances or frontends supporting the
    same protocol. Thanks to Julian Andres Klode &lt;jak@debian.org&gt;.
    Closes: #850417, #851984
  * Do not emit perl warnings in dpkg-source --help on source formats w/o
    options.
  * Make dpkg-buildpackage validate OpenPGP signing key IDs length. Error out
    for short key IDs and warn for long key IDs.
  * On the dpkg conffile prompt, print the set of environment variables setup
    for the conffile shell, for easier discoverability.
  * Fix dpkg-buildpackage option --rules-file parsing. It was trying to parse
    it as --rules-target, which due to the ordering was a no-op.
  * Only check for fallback build targets presence on binary builds in
    dpkg-buildpackage.
  * Only check required build dependencies for known targets specified with
    dpkg-buildpackage --rules-target option.
    Reported by Johannes Schauer &lt;josch@debian.org&gt;.
  * Track package status dirtiness in dpkg to only log and report in status-fd
    when it has changed, removing duplication in output. Closes: #365921
  * Use Synopsis instead of Summary for the short Description, to unify the
    nomenclature and to make it more descriptive. Add a new binary:Synopsis
    virtual field to dpkg-query show format.
  * Add new dpkg-buildpackage --no-post-clean option, to be able to explicitly
    select the current default behavior.
  * Dump database package records in alphabetical order. This will give
    reproducible status and available database files, and make it possible
    to output other deb822 formatted data in a deterministic way.
  * Require both standard input and output to be connected to a terminal to
    use a pager.
  * Run dpkg-query --list output through a pager if we are on a terminal,
    instead of truncating it, to avoid data loss. Closes: #898603
  * Fix use after free in dpkg maintainer script handling. Regression
    introduced in dpkg 1.19.0.
  * Flush output for dpkg-query --status, --print-avail and --listfiles at
    the end, instead of after each stanza.
  * Add support for dumping all dpkg-query --status and --print-avail records
    from the database when no arguments are specified. Closes: #616342
  * Add new dpkg-gensymbols -l option to avoid having to abuse LD_LIBRARY_PATH
    for cross-build paths.
  * Check that DPKG_MAINTSCRIPT_PACKAGE is defined in dpkg-maintscript-helper.
    Closes: #907772
  * Switch dpkg-gencontrol and dpkg-genchanges to track automatically
    generated artifacts by using the Auto-Built-Package field from the binary
    package instead of hardcoding package name patterns (such as «-dbgsym$»).
  * Add new --reverse option to dpkg-parsechangelog, to list the changelog
    entries in reverse order.
  * Architecture support:
  - Add support for riscv64 CPU. Closes: #822914
    Thanks to Manuel A. Fernandez Montecelo &lt;mafm@debian.org&gt;
  - Document the purpose and columns in the tupletable file.
  * Portability:
  - Add libcompat md5 module to the libcompat-test library, so that we
    always make sure it builds, even when we use an external implementation.
  - Convert libcompat md5 module to use C99 int types, instead of mapping
    them from the BSD types at configure time.
  - Use MD5_CTX instead of struct MD5Context, as the prevalent more portable
    type on system's &lt;md5.h&gt; headers.
  - Check for ldconfig command in dpkg only on platforms that do have it.
  - Fix file descriptor leak in start-stop-daemon on AIX.
  - libcompat: Add new strchrnul() implementation.
  * Perl modules:
  - Dpkg::Source::Package::V1: Check that $tarname is defined before use.
    Thanks to Christoph Biedl &lt;debian.axhn@manchmal.in-ulm.de&gt;.
    Closes: #879124
  - Dpkg::Vendor::Debian: Use proper %use_feature key. This was causing perl
    errors on paths not accepted for fixdebugpath.
    Reported by Mattia Rizzolo &lt;mattia@debian.org&gt;, on IRC. Closes: #881051
  - Dpkg::Changelog: Print versions for incorrect changelog range warnings.
    Thanks to Paul Wise &lt;pabs@debian.org&gt;.
  - Dpkg::Shlibs::SymbolFile: Check that $state-&gt;{seen} exists instead of
    $state being just defined. Fixes regression in dpkg-gensymbols symbols
    output. Thanks to Dmitry Shachnev &lt;mitya57@debian.org&gt;. Closes: #880166
  - Dpkg::Arch: Add new positive options argument to arch validators.
  - Dpkg::Vendor::Debian: Mark hurd-i386 as having gcc builtin PIE.
    Requested by Samuel Thibault &lt;sthibault@debian.org&gt;.
  - Dpkg::Source::Package::V2: Print one building line per existing tarball.
  - Dpkg::Source::Package: Print building lines for upstream tarball
    signatures. Closes: #888787
  - Dpkg::Deps: Turn virtualpkg tracking from an arrayyref into a hashref.
  - Dpkg::Vendor::Debian: Mark riscv64 as having gcc builtin PIE.
  - Dpkg::Shlibs::Objdump: Fix ELF program detection, for PIE binaries and
    executable libraries.
  - Dpkg::Version: Fix bool overload behavior back to be an is_valid()
    alias. Emit a specific perl warning until 1.20.x so that users can check
    whether the semantic change has any impact on the code, which can then
    be quiesced. Closes: #895004
  - Dpkg::Changelog::Parse: When detecting the changelog format, read the
    last 4KiB of the file instead of using «tail -n40», which should be
    both faster and more portable, as the default tail(1) is not POSIX
    compliant on all systems (c.f. Solaris).
  - Dpkg::Build::Types: Add new set_build_type_from_targets() function.
  - Dpkg::Shlibs::SymbolFile: Always assign a proper Dpkg::Version to the
    deprecated variable, otherwise the scalar value 0 can get confused
    on scalar context to denote it is *not* deprecated instead of being
    version 0.
  - Dpkg::Shlibs: Disable bool overload Dpkg::Version warnings.
  - Dpkg::Vendor::Debian: Inline _parse_feature_area() into
    _add_build_flags(), for a small speed up and line count reduction.
  - Dpkg::BuildFlags: Move default flags setting into the Dpkg::Vendor
    modules.
  - Dpkg::Gettext: Fix fallback textdomain() to honor its expected interface.
  - Dpkg::Deps: Split subpackages into their own separate modules.
  - Dpkg::Source: Do not change patch permissions if not necessary.
    Closes: #898010
  - Dpkg::Substvars: Reword used/unused warnings to clarify their meaning.
    Closes: #904258
  - Dpkg::Shlibs: Warn when using LD_LIBRARY_PATH with a private library
    directory which is a descendent of the current working directory.
  - Dpkg::Source::Package::V3::Quilt: Print series file used when applying
    patches.
  - Dpkg::OpenPGP: Return the destination path on successful ASCII armor
    conversion.
  - Dpkg::Control::Fields: Do not use &amp; sigil for function calls.
  - Dpkg::Shlibs: Ignore nonexistent directories present in LD_LIBRARY_PATH.
  - Dpkg::Deps::KnownFacts: Satisfy :native with arch:all packages too.
    These are treated as native packages everywhere else in the multi-arch
    design, this was the only exception, which has become a source of
    packaging problems as of late. This was apparently an oversight in
    the original implementation. Closes: #854438
  - Dpkg::Vendor::Debian: Add fixfilepath support to reproducible feature.
  - Dpkg::Dist::Files: Add support for file attributes.
  * Documentation:
  - Update gettext minimal version in README.
  - Add a missing dot on the dpkg-buildflags(1) «lfs» feature paragraph.
    Spotted by Helge Kreutzmann &lt;debian@helgefjell.de&gt;.
  - Document DPKG_COLORS environment variable for all programs using it.
  - Document DPKG_NLS environment variable for all programs using it.
  - Document the Testsuite and Testsuite-Triggers fields in
    deb-src-control(5). Prompted by Mattia Rizzolo &lt;mattia@debian.org&gt;.
  - Update git URLs for move away from alioth.debian.org.
  - Fix set_build_type_from_options() description in Dpkg::Build::Types.
  - Clarify PIE build flag feature semantics. Closes: #900088
  - Clarify dpkg-buildpackage pre and post-clean options and their default
    state.
  - Add --build option equivalents for dpkg-buildpackage short build type
    options in --help output.
  - Fold dpkg-buildpackage --[no-]check-builddeps in --help into both -D
    and -d option descriptions.
  - Mark profiles as a replaceable item in dpkg-buildpackage --help output.
  - Update test suite requirements in README.
  - Document textdomain() and ngettext() replacement functions in
    Dpkg::Gettext POD.
  - Clarify arch-qualified dependency simplification in Dpkg::Deps POD.
  - Improve Dpkg::Deps modules and methods documentation.
  - Fix typo in deb-changes(5). Closes: #902616
  - Clarify awaiting state for interest and activate directives.
    Closes: #904060
  - Fix man page markup. Closes: #900033, #900035, #900040
    Thanks to Bjarni Ingi Gislason &lt;bjarniig@rhi.hi.is&gt;.
  - Fix Doxygen comment for libdpkg dpkg_arch_find() function.
  - Document the dangers of using start-stop-daemon(8) only with --pidfile
    as matching option with the pid file owned by a non-privileged user.
  * Code internals:
  - Do not use stringy eval to define different sub implementations,
    just assign an anonymous sub to the typeglob.
  - Use memccpy() instead of strncpy() to quiesce a gcc-8 warning.
  - Change pkgbin_name_needs_arch() to never arch-qualify packages that
    have an empty or no architecture, which was already handled as part
    of varbuf_add_archqual().
  - libdpkg: Factor out cached arch-qualified package name generation into
    new pkgbin_name_archqual() function.
  - libdpkg: Add new pkg_name() and pkgbin_name() const variants.
  - libdpkg, dselect: Use new pkg_name_const() and pkgbin_name_const().
  - libdpkg: Rename struct pkginfo files member to archives.
  - dpkg: Call ensure_package_clientdata() defensively.
  - dpkg: For read-only state functions, check that clientdata is allocated
    before using it.
  - libdpkg: Move files list information from dpkg clientdata to pkginfo.
  - dpkg: Move ensure_package_clientdata() into its own file.
  - libdpkg: Move db-fsys code from src to lib/dpkg.
  - libdpkg: Rename pkg-db module to pkg-hash.
  - libdpkg: Simplify pkg_files_blank() by using a pointer to pointer to
    track the previous entry.
  - libdpkg: Factor out package files handling into its own module.
  - libdpkg: Switch to a new tiny struct to track file on-disk identity.
    This should reduce the run-time memory used.
  - libdpkg: Reset nfiles in files_db_reset().
  - libdpkg: Split push_cleanup() into push_cleanup_fallback().
  - Switch from strchr() + strlen() to strchrnul().
  - libdpkg: Change dpkg_error to track errno values.
  - libdpkg: Add new varbuf_new() and varbuf_free() functions.
  - libdpkg: Add new file_slurp() function.
  - libdpkg: Switch db-fsys to use the new file_slurp() function.
  - libdpkg: Add new pkg_infodb_reset_dir().
  - libdpkg: Add new m_dup() function.
  - libdpkg: Factor out package stanza printing into its own function.
  - libdpkg: Split pager specific code into its own module.
  - libdpkg: Add pager spawning and reaping support.
  - Use new pager spawning support instead of open-coding it, or piping it
    via a shell invocation, which required metacharacter escaping.
  - dpkg-query: Split enqperpackage() into each different action.
  * Build system:
  - Set distribution tarball format to ustar, instead of default v7 format.
  - Mark PO4A and POD2MAN as precious variables.
  - Automatically replace -Wno- with -W when testing compiler flags,
    instead of passing the positive form manually.
  - Enable clang -Wdocumentation warning if available.
  - Enable gcc-7 -Wregister warning if available.
  - Add CPAN distribution machinery for the perl modules. Closes: #821177
  - Add an autogen script to help people bootstrap the project.
  - Distribute the man.stamp from VPATH.
  - Preserve timestamps when distributing man pages.
  - Add a GitLab CI configuration file.
  - Disable C optimization levels when configuring for code coverage.
  * Packaging:
  - Install update-alternatives policykit-1 file.
  - Add Breaks to libdpkg-perl against pkg-kde-tools (&lt;&lt; 0.15.28~), as
    that package is using private modules with no API guarantees, that
    obviously broke due to recent changes in 1.19.0. Closes: #878919
  - Add Breaks on debhelper &lt;&lt; 10.10.1~ to dpkg-dev, so that debhelper users
    wanting to use R³ support do not need a versioned dependency on dpkg-dev.
  - Add Breaks dgit &lt;&lt; 3.13~ to libdpkg-perl, as older dgit versions assumed
    that Dpkg::Compression::Process was available, via implicit import
    from Dpkg::Source::Package.
    Reported by Ian Jackson &lt;ijackson@chiark.greenend.org.uk&gt;.
  - Bump Standards-Version to 4.1.1 (no changes needed).
  - Add bzip2 and xz-utils to Build-Depends, required by the functional test
    suite, but shadowed by dpkg-dev from the build system pulling those in.
  - Add versioned libncurses-dev as the first Build-Depends alternative.
    Thanks to Sven Joachim &lt;svenjoac@gmx.de&gt;.
  - Do not pass VERBOSE to test suite, as we are not using any automake
    test driver, so it does not get honored.
  - Rename maintainer-build DEB_BUILD_OPTIONS to new standardized terse.
  - Enable verbose test suite only in non-terse builds.
  - Add a Suggests on sensible-utils to libdpkg-perl.
  - Switch libdpkg-perl again to depend on perl:any, now that debootstrap
    in stable (stretch) supports arch-qualified dependencies.
  - Update libdpkg-perl public module list in package description.
  - Add Breaks on apt (&lt;&lt; 1.7~b) for --status-fd duplicate removals.
  * Test suite:
  - Skip Dpkg::OpenPGP test if gpg is not present.
  - Check POD in all perl scripts.
  - Consider *.PL also to be perl files.
  - Infer automatically the unit test data directory.
  - Infer automatically the unit test temp directory.
  - Add new po author test case (use i18nspector if available).
  - Add new test cases to clarify arch-qualified dependency simplification.
  - Add several TODO tests cases for dependency simplification.
  - Add new cppcheck author test.
  - Add support for new test_get_srcdir() test_get_builddir().
  - Add new unit tests for namevalue, fsys-hash and pkg-hash libdpkg modules.
  - Improve coverage of perl unit tests.
  - Delete fixup lines from i18nspector output instead of emptying them.
  - Add new codespell author test.
  - Add new test that the public libdpkg headers can be compiled with C++.
  [ Josh Triplett ]
  * Perl: Replace all calls to Cwd::cwd with Cwd::getcwd; the former calls
    /bin/pwd, while the latter uses the getcwd() syscall directly.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #881401
  * German (Sven Joachim).
  * Italian (Milo Casagrande). Closes: #883085
  * Polish (Łukasz Dulny).
  * Simplified Chinese (Zhou Mo, Boyuan Yang). Closes: #900547, #890806
  * Spanish (Javier Fernández-Sanguino).
  * Traditional Chinese (Buo-ren Lin). Closes: #905887
  * Turkish (Mert Dirik). Closes: #886252
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #881403
  * German (Helge Kreutzmann).
  * Simplified Chinese (Zhou Mo).</changelog>
  <changelog author="dcermak@suse.com" date="1641211200">- rebase patches:
  * update-alternatives.changes
  * update-alternatives.spec
  * update-alternatives-suse.patch
- New upstream release 1.21.1
  dpkg (1.21.1) unstable; urgency=medium
  [ Guillem Jover ]
  * dpkg-buildpackage: Remove duplicate command print for dpkg-genchanges.
  * dpkg-buildpackage: Fix build description due to improper multiline match.
  * dpkg-realpath: Remove spurious heading space from --help output.
  * update-alternatives: When initializing admindir from DPKG_ADMINDIR append
    "/alternatives". Closes: #1001198
  * Code internals:
  - Remove &lt;ar.h&gt; inclusions.
  * Packaging:
  - Install deb-md5sums(5) into dpkg-dev package.
  dpkg (1.21.0) unstable; urgency=medium
  [ Guillem Jover ]
  * dpkg-genchanges: Include orig tarball on source package renames.
    Closes: #980066
  * scripts: Consider SHA-1 and RIPEMD-160 weak algorithms in OpenPGP
    signatures.
  * dpkg: During unpack print a removal message due to Conflicts.
    Closes: #985401
  * scripts: Add zsh completions for dpkg-parsechangelog.
    Thanks to Daniel Shahaf &lt;danielsh@apache.org&gt;. Closes: #986103
  * dpkg-buildpackage: When printing build type match the extension exactly.
    Closes: #989824
  * dpkg-maintscript-helper: Use xargs -I argument instead of deprecated -i.
  * dpkg-maintscript-helper: Quote variable inside ${} to avoid pattern match.
  * libdpkg: Fix dpkg_fsys_get_path() to always strip leading / and ./.
  * libdpkg: Set the default database directory relative to the system root.
  * dpkg-divert, dpkg-statoverride: Set admindir after instdir.
  * update-alternatives: Fix admindir setting.
    Prompted by Johannes Schauer Marin Rodrigues &lt;josch@debian.org&gt;.
  * dselect: Honor DPKG_ADMINDIR environment variable.
  * dpkg-query, dpkg-trigger, dselect: Add support for setting the root
    directory.
  * dpkg-fsys-usrunmess: Move forced reconfiguration to the last step.
    See #991190.
  * dpkg-fsys-usrunmess: Install a local policy-rc.d to ignore service
    restarts. Closes: #991190
  * dpkg-fsys-usrunmess: Do not fail when removing lingering directories.
  * dpkg-fsys-usrunmess: Generate a regression prevention package.
  * dpkg-fsys-usrunmess: Fix typo in debug message.
  * dpkg: Distinguish deconfiguration message for installation and multi-arch
    syncs.
  * dpkg-buildpackage: Add new --changes-file option.
    Prompted by Niels Thykier &lt;niels@thykier.net&gt;.
  * dpkg-buildpackage: Add new --buildinfo-file option.
  * dpkg: Rework --assert-&lt;feature&gt; logic to be more robust.
    Prompted by Helmut Grohne &lt;helmut@subdivi.de&gt;.
    Prompted by David Kalnischkies &lt;donkult@debian.org&gt;.
  * dpkg: Improve --assert-&lt;feature&gt; descriptions.
  * dpkg: Add a new --assert-help option.
  * scripts/mk: Pass DEB_BUILD_PATH to dpkg-buildflags. See #985553.
  * dpkg-db-backup: New program factored out from Debian-specific daily cron.
  * dpkg-db-backup: Accept an option to override the number of rotation cycles.
  * dpkg-db-backup: Honor the admindir set at configure time.
  * update-alternatives: Fix --auto and --set-selections output progress.
  * update-alternatives: Print defaults for configuration and database
    pathnames.
  * scripts: Replace shebang in dpkg-error shell library with shellcheck
    directive.
  * dpkg-buildpackage: Add support for terse DEB_BUILD_OPTIONS.
  * dpkg-mergechangelogs: Add new --merge-unreleased option. Closes: #582921
  * dpkg: Restore fallback to "new-prerm failed-upgrade" for downgrades.
    Analysis by Ian Jackson &lt;ijackson@chiark.greenend.org.uk&gt;. Closes: #996959
  * dselect: Use safe temporary file creation in methods setup.
  * dselect: Remove bashism from update script in multicd method.
  * dpkg: Fix --verify to handle missing or inaccessible pathnames.
    Closes: #963087
  * dpkg: Add partial --verify support for mode checks.
  * Use «digest» instead of «hash» in output messages.
    Reported by Sven Joachim &lt;svenjoac@gmx.de&gt;.
  * dselect: use `grep -E` instead of `egrep`.
    Thanks to Ville Skyttä &lt;ville.skytta@iki.fi&gt;. Closes: #999600
  * libdpkg: Fix memory leak on End Of Tape condition in tar parser.
  * dpkg: Fix short lived memory leak with --recursive.
  * dpkg: Fix conffile removal-on-upgrade handling. Closes: #995387
  * dpkg-deb: Fix conffile name length tracking on remove-on-upgrade parsing.
    Reported by uau on IRC.
  * Architecture support:
  - Clarify that the regex columns need to be ordered to match first.
  - Add support for ARCv2 CPU. Closes: #980963
    Based on a patch by Alexey Brodkin &lt;Alexey.Brodkin@synopsys.com&gt;.
  * Portability:
  - start-stop-daemon: Define SOCK_NONBLOCK to 0 if not defined.
  - libdpkg: Add support for AIX to dpkg_get_progname().
  * Perl modules:
  - Dpkg::Source::Quilt: Add hint to check missing files on patch apply
    failures.
    Reported by Joseph Nahmias &lt;jello@debian.org&gt;.
  - Dpkg::Changelog::Parse: Require format plugins to inherit from
    Dpkg::Changelog.
  - Dpkg::OpenPGP: Refactor openpgp implementation execution into a new
    function.
  - Dpkg::Vendor::Debian: Refactor compiler flag names into an array.
  - Dpkg::Vendor::Debian: Add new lto feature in new optimize area.
    Closes: #940571
  - Test::Dpkg: Print actual error messages in test_neutralize_checksums().
  - Dpkg::Deps: Use current_sub feature for __SUB__.
  - Dpkg::BuildFlags: Add support for ASFLAGS.
    See https://salsa.debian.org/debian/debhelper/-/merge_requests/50.
  - Dpkg::Compression: Use gzip --rsyncable unconditionally.
  - Dpkg::Changelog::Entry::Debian: Fix full month misuse warning.
  - Dpkg::Shlibs::Symbol: Emit a warning on fully qualified symver patterns.
    Closes: #993991
  - Dpkg::Control::HashCore: Add new keep_duplicate option.
  - Dpkg::Control::FieldsCore: Add new field_parse_binary_source().
    Closes: #980527
  - Dpkg::Control::FieldsCore: Fix types allowed for
    field_parse_binary_source().
    Reported by Johannes Schauer Marin Rodrigues &lt;josch@debian.org&gt;.
  - Dpkg::Shlibs::Objdump: Fix apply_relocations to work with versioned
    symbols. Closes: #1000421
  - Dpkg::Vendor::Ubuntu: Update Maintainer field logic to include
    “canonical”. Based on a patch by
    William 'jawn-smith' Wilson &lt;william.wilson@canonical.com&gt;.
    Closes: #1000557
  - Dpkg::Source::Package::V2: Add hint about version matching source tree.
    Based on a patch by Samuel Henrique &lt;samueloph@debian.org&gt;.
    Closes: #996044
  * Documentation:
  - man: Itemize dpkg-gensymbols -c levels.
  - man: Add man page for deb-md5sums(5).
    Reported by Maxim Cournoyer (on IRC).
  - man: Switch the Architecture field in deb-control(5) to required.
    Reported by Maxim Cournoyer (on IRC).
  - man: Make clear that dpkg-query arguments accept multiple values.
    Prompted by Rémi Rampin &lt;remirampin@gmail.com&gt;. See #913781.
  - man: Document dpkg-query --search and --listfiles output formats.
  - doc: Fix incorrect use of ‘an’ article.
  - doc: Update coding style to document POD instead of troff.
  - doc: Update THANKS file.
  - doc: Annotate current maintainer start year.
  - doc: Sort maintenance information chronologically.
  - man: Add versions since features where introduced.
  - man: Further clarify when re-inclusions of excluded pathnames happen.
    Closes: #871420
  - doc: Update Doxygen configuration from version 1.9.1.
  - doc: Improve description of dpkg suite.
    Prompted by Fabrice Bauzac-Stehly &lt;noon@mykolab.com&gt;.
  - man: Add a reference to where the Installed-Size algorithm is described.
  - man: Improve dpkg --verify-format rpm format documentation.
  - man: Document in deb-substvars(5) what ${} is good for.
    Prompted by Paul Wise &lt;pabs@debian.org&gt;.
  - man: Document in dpkg-architecture(1) target being useful for emulators
    too. Prompted by Helmut Grohne &lt;helmut@subdivi.de&gt;.
  - man: Document in dpkg-query(1) full --search and --listfiles output
    format. Prompted by Johannes Schauer Marin Rodrigues &lt;josch@debian.org&gt;.
  * Code internals:
  - Remove irrelevant or obsolete FIXME markers.
  - Turn FIXME markers denoting pending actions into TODO markers.
  - Turn FIXME markers giving historic information into simple Notes.
  - update-alternatives: Turn FIXME for explicit behavior choice into an XXX.
  - Use localtime_r() instead of localtime().
  - libdpkg: Remove MDEBUG support from m_malloc() implementation.
  - libdpkg: Mark dpkg_arch_unmark() arch_remove argument as const.
  - libdpkg: Mark treewalk_open() func argument as const.
  - dpkg: Mark ignore_depends() pkg argument as const.
  - dpkg: Mark deb_parse_conffiles() pkg argument as const.
  - libcompat: Remove local setexecfilecon() and require libselinux 2.3.
  - libdpkg: Add missing DPKG_{BEGIN,END}_DECLS in header files.
  - dpkg: Move SE Linux function declarations into its own header file.
  - dpkg: Move the command action enum to its own header file.
  - dpkg: Switch from including "main.h" to "force.h".
  - dselect: Rename dme() to display_menu_entry().
  - dpkg: Split function handling deconfiguration due to install and removal.
  - libdpkg: Add new ACTION_MUX macro for continued options.
  - dpkg: Refactor --assert-&lt;feature&gt; handling to be data driven.
  - dpkg-fsys-usrunmess: Do not use interpolated strings for literals.
  - dpkg-db-backup: Add a license header comment.
  * Build system:
  - Fallback to $^X and 'perl' if $Config{perlpath} is unset or empty.
  - Bump minimal Perl version to 5.28.1.
  - Remove redundant localedir and pkgconfdir initializations.
  - Check for libsocket.
  - Do not set have_libmd on the found branch in AC_SEARCH_LIBS.
  - Switch DPKG_FUNC_C99_SNPRINTF from AC_LANG_SOURCE to AC_LANG_PROGRAM.
  - Check whether fsync(3) works on directories.
  - Remove obsolete AC_HEADER_STDC.
  - Detect appropriate sed program at configure time.
  - Rename DPKG_DEB_PROG_TAR to DPKG_PROG_TAR.
  - Parametrize the backups directory with a configure option.
  - Add a check for symlinks in the git repository.
  - Rename shell scripts to .sh.
  - Switch from hardcoded /run to parametrized runstatedir.
  - Use new Dpkg::Control keep_duplicate option in gen-changelog.
  - Use title-case for field in gen-changelog.
  - Execute run-script via CONFIG_SHELL.
    Reported by Larkin Nickle &lt;me@larbob.org&gt;.
  - Quote variables containing pathnames in m4 macros.
  - Add support for commit message fix up machinery in gen-changelog.
  * Packaging:
  - Use absolute pathnames in .install debhelper fragments.
  - Remove unused dh_installcron call for arch-indep targets.
  - Add support for a native systemd timer. Closes: #985444
  - Create auotpkgtest installation directory.
  - Bump Standards-Version to 4.6.0 (no changes needed).
  * Test suite:
  - Pass --ignore-builtin-builddeps to dpkg-buildpackage.
  - Use can_run() instead of find_command().
  - Add descriptions to makefile test runners.
  - Add unit tests for architecture bijective mapping property.
  - Suppress cppcheck constParameter check.
  - Suppress bogus cppcheck for nullPointerRedundantCheck.
  - Mark external sourced shell files for checking.
  - Ignore new shellcheck checks.
  - Remove shipped dpkg database.
  - Add re-inclusion of symlink case to t-filtering. See #871420.
  - Generate symlink during test build time.
  - Remove superfluous long filename.
  - Refactor parse_ctrl() from parse_dsc().
  - Update codespell stopwords.
  [ Helge Kreutzmann ]
  * deb-md5sums.pod: Fix typo.
  [ Add programs translations ]
  * Occitan (Quentin PAGÈS).
  [ Update dselect translations ]
  * German (Sven Joachim).
  [ Update man pages translations ]
  * German (Helge Kreutzmann).
  [ Update programs translations ]
  * German (Sven Joachim).
  * Polish (Marcin Owsiany, Łukasz Dulny).
  [ Update scripts translations ]
  * German (Helge Kreutzmann).</changelog>
  <changelog author="pgajdos@suse.com" date="1653652800">- version update to 1.21.8
  * fix CVE-2022-1664 [bsc#1199944], dpkg -- security update
  * lot of changes, see changelog
- modified patches
  % update-alternatives-suse.patch (refreshed)</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="adam.majer@suse.de" date="1689854400">- openssl.patch: use openssl library for MD5 calculation instead
  of relying on libmd. libmd is not in Ring0
- require Perl 5.28.1 or later</changelog>
  <changelog author="martin.schreiner@suse.com" date="1695038400">- Update to version 1.22.0.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.0
- Refresh openssl.patch so it works on 1.22.0.</changelog>
</package>
<package pkgid="f8d13c1f8439b0fc733c011e9d13f49382f8d402d55ebc9fc5a932bb2e3b9aab4da2c1d9f820c5b52c416cae83b5935f9a6059022da35e3e4c18125d3ff822f4" name="usbredir-debugsource" arch="aarch64">
  <version epoch="0" ver="0.13.0" rel="slfo.1.1_1.3"/>
  <changelog author="mkravec@suse.com" date="1455624000">- Update to version 0.7.1
  + usbredirfilter:
  - force check to device which had all interfaces skipped. This fix a bug
    which allow a KVM device to be redirect when it should not
  + usbredirparser:
  - allow missing capabilities from source host when loading a USB
    redirection stream during a qemu migration
  + usbredirhost:
  - new callback to drop isoc packets when application's pending writes buffer
    size is too big; The threshold calculation aims at 10fps as worst case to
    give at least 150ms of continuous data to application.</changelog>
  <changelog author="brogers@suse.com" date="1537185600">- Update to version 0.8.0
  + usbredirfilter:
  - Fix busy wait due endless recursion when interface_count is zero
  + usbredirhost:
  - Fix leak on error
  + usbredirserver:
  - Use 'busnum-devnum' instead of 'usbbus-usbaddr'
  - Add support for bind specific address -4 for ipv4, -6 for ipv6
  - Reject empty vendorid from command line
  - Enable TCP keepalive</changelog>
  <changelog author="brogers@suse.com" date="1617624000">- Update to version 0.9.0
  + Changes noted in ChangeLog.md:
    !2 Add usbredirect tool with feature parity with usbredirserver
    !6 Add fuzzer for usbredirparser
    !12 Add MSI installer for usbredirect tool
    !11 Add meson build: autotool will be removed in a future release
    !5 Limit packet's length to 65 kB
    !4 Fix wrong up-cast when checking for package's length
    Require LLVM's compiler-rt (optional: for fuzzer)
    Require glib2 &gt;= 2.44 (optional: for usbredirect)
    Deprecate usbredirserver in favor of usbredirect
  + Require libusb-1.0 &gt;= 1.22 due to libusb_set_option() usage
  + Require meson &gt;= 0.48 due to dictionary usage
  + Change docs to be in markdown format
  + add usbredir TCP client
  + add meson build support (which we now use to build package)
- Package the new usbredir TCP client: 'usbredirect'
- Fix meson include directory paths
  + meson-Fix-include-directories-needed-to-build.patch
- Fix pkgconfig data used in meson build
  + meson-Fix-pkgconfig-required-library-name-reference.patch</changelog>
  <changelog author="ro@suse.de" date="1629806400">- add patch usbredir-CVE-2021-3700.patch
  fix use-after-free in usbredirparser_serialize
  (CVE-2021-3700,bsc#1189491)</changelog>
  <changelog author="msuchanek@suse.de" date="1629806401">- Update to version 0.11.0
  - Avoid use-after-free in serialization (CVE-2021-3700, bsc#1189491)
  - Add local directory to include search path for meson
  - Fix generated by meson libusbredirhost.pc
- Remove upstreamed patches
  - meson-Fix-include-directories-needed-to-build.patch
  - meson-Fix-pkgconfig-required-library-name-reference.patch
  - usbredir-CVE-2021-3700.patch</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 0.12.0:
  * Implement dropping packets from isochronous devices
    when buffer is owned by usbredirparser library
  * Use packet size limit on deserialization
  * Fix possible bad state in deserialization logic
  * Fix possible memory leak in serialization logic
  * Fix (un)serialization with empty write buffers
  * Improvements to usbredirparserfuzz</changelog>
  <changelog author="dimstar@opensuse.org" date="1641384000">- Drop unknown llvm-fuzz meson paramerter: meson 0.60 is strict and
  fails when unknown parameters are being passed.</changelog>
  <changelog author="mliska@suse.cz" date="1649764800">- Add 0001-Use-D_FORTIFY_SOURCE-instead-of-Wp-D_FORTIFY_SOURCE.patch
  that enables future switch to -D_FORTIFY_SOURCE=3
  (gl#spice/usbredir#60).</changelog>
  <changelog author="dimstar@opensuse.org" date="1654689600">- Add upstream backported patches (boo#1199354):
  + 9426fdb1.patch: Check header length unserialising data.
  + dffc41c3.patch: usbredirect: fix leak on bad input.</changelog>
  <changelog author="dimstar@opensuse.org" date="1660046400">- Update to version 0.13.0:
  + Fix regression on unserialize data
  + Removes usbredirserver
  + Improved header length checks when unserialising data
  + Fix usage of command line argument in usbredirect
  + Fix small memory leak on usbredirect
- Drop 9426fdb1.patch and dffc41c3.patch: fixed upstream.
- Drop
  0001-Use-D_FORTIFY_SOURCE-instead-of-Wp-D_FORTIFY_SOURCE.patch:
  fixed upstream.
- Add keyring to validate source signature.</changelog>
</package>
<package pkgid="138790c4f6837e66db75bedfe367966799c70ce0bf43b532056da61de6ff08bdaf2dcb0bf4c7530a5c6d2c0e7aeacd45cc3230ca7ac43f0aaec490dc7b6a3d9e" name="usbutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="015" rel="slfo.1.1_1.2"/>
  <changelog author="sweet_f_a@gmx.de" date="1375185600">- update to usbutils 007
  * usb-devices: correctly quote driver path
  * lsusb: decode CDC MBIM descriptor
  * lsusb: decode CDC NCM functional descriptor
  * lsusb: decode CDC Command Set descriptor
  * usb-devices: avoid numbers being seen as octal by printf
  * lsusb: parse bmFormats inside UAC2 interface headers as hex
  * remove devtree logic
  * Fix lsusb -t potentially not listing all devices
  * lsusb-t: make sure that interfaces are added to lists only once
  * lsusb: Fix USB 3.0 link state reporting.
  * lsusb: Fix bug in USB 2.0 extended caps descriptor.
  * lsusb: Parse misplaced UAC1 AudioControl Endpoint Descriptor
  * lsusb: Support non-ASCII string descriptors.
- update usb.ids
- remove config-guess-sub-update.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1416657600">- Update to usbutils 008
  * most important change is that lsusb switched to use
  the udev hardware database instead of the usb.ids file
  * lsusb: Reports if USB2.0 port is on L1 state
  * lsusb: Reports devices that support BESL on USB2.0
  * dump_ccid_device: fix a typo
  * lsusb: fix incorrect printf() for CAPS
  * lsusb-t: handle problem if there is no usb bus list
  * Ignore invalid string descriptors
  * usb-devices: hexadecimal bInterfaceNumber handling</changelog>
  <changelog author="olaf@aepfle.de" date="1416830400">- BuildRequire at least libudev &gt;= 196</changelog>
  <changelog author="avindra@opensuse.org" date="1517659200">- Update to usbutils 009
  * usbreset: coding style
  * Don't use C99-ism
  * usbhid-dump: update submodule to latest version
  * add usbreset.c example program
  * update usbhid-dump to latest
  * lsusb.py: Don't dump a trace dump if usb.ids is not present
  * USB: usb-devices: Interface number can be a string
  * autogen.sh: checkout usbhid-dump
  * lsusb: add support for the Encoding Unit Desc for uvc 1.5
    device
  * lsusb: fix alignment for Video Streaming interface desc
  * lsusb: parse additional control fileds in USB video control
    interfaces for UVC1.5
  * lsusb: proper display hexadecimal value for UVC control
    interface
  * usbreset.c: import usability improvements from OpenWrt
  * Update lsusb.c
  * Un-indent bVariableSize for Frame-Based Format descriptors
  * Makefile: install pkgconfig file to arch-dependent location
  * lsusb: Allocate the BOS descriptor buffer dynamically
  * lsusb: Add support for the USB 3.1 SuperSpeedPlus device
    capability desc
  * lsusb: Fix issue with lengthy string descriptors
  * lsusb: Added support for Billboard Capability descriptor
  * Update usbhid-dump repo URL
  * Update usbhid-dump to v1.4
  * configure: remove summary about unused USE_ZLIB
  * drop unused input file for usb.ids update script
  * substitute usb.id location in lsusb Python script
  * lsusb: remove unused variable procbususb
  * lsusb: Report correct MaxPower for USB 3.0 devices
  * lsusb: Request proper descriptor type for USB 3.1
  * lsusb: Store link state descriptions without preceding
    space
  * build: Request at least libusb 1.0.9
  * Added support for Platform Device Capability descriptor
  * lsusb: change endianness of first three fields when printing
    UUID/GUIDs.
  * lsusb: Fix UVC STILL_IMAGE_FRAME descriptor
  * lsusb: Fix UVC VideoStreaming interface header descriptor
  * lsusb: Fix UVC OUTPUT_TERMINAL descriptor
  * lsusb: print WebUSB platform descriptor
  * travis-ci: add control files borrowed from libusb
  * travis-ci: cleanup before second run
  * travis-ci: rework travis-autogen.sh
- add fix-shebang.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1520942400">- Use usb ids from hwdata
- Modernise spec file with spec-cleaner
- Make building more verbose</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to usbutils 010
  * usbreset.c: add missing &lt;stdlib.h&gt; include
  * Do not create and install usbutils.pc
  * fix dump_videocontrol_interface for unitialized variable usage
  * Add correct SPDX license identifiers to all files
  * Add SPDX identifiers on files that did not have a specific license.
  * wTotalLength should be printed as a hex number
  * usbmisc: fix up some strncpy() issues
  * lsusb-t: fix up error with readlink()
  * lsusb.py.in: add proper SPDX license identifier
  * usb-devices: reword the copyright identifier
  * LICENSES: move the GPL 2 license to the LICENSES directory
  * LICENSES/GPL-3.0.txt: add the file
  * lsusb.h: add copyright notice
  * lsusb-t: add copyright info
  * bom.spdx: Add bill of materials file in SPDX format.
  * ChangeLog: remove it.
  * AUTHORS: remove file
  * do_release: drop file
  * NEWS: add SPDX header and comment
  * autogen.sh: add SPDX and copyright header
  * list.h: add copyright information
  * travis-autogen.sh: add SPDX and copyright information.
  * INSTALL: remove the file, it's boiler-plate
  * configure.ac: add SPDX and copyright
  * man pages: add SPDX and copyright information
  * Makefile.am: add SPDX and copyright information
  * .gitmodules: add SPDX and copyright lines
  * lsusb.py.in: fix up Copyright strings
  * usbreset.c: add Alan's copyright
  * .travis.yml: add correct SPDX and copyright notices
  * bom.spdx: update with latest copyright and SPDX identifier additions
  * README.md: move the README file to markdown
  * README.md: fix fomatting
  * bom.spdx: upate with README -&gt; README.md change
  * lsusb.py: convert to python3
  * lsusb: Split subtype mapping out of AudioControl interface handling.
  * lsusb: Add declarative definitions for UAC1 and UAC2 descriptors.
  * lsusb: Add code to dump descriptor data using descriptor definition.
  * lsusb: Switch to descriptor-definition based dump for UAC1 and UAC2.
  * lsusb: Add descriptor definitions for UAC3.
  * lsusb: Add initial support for USB Audio Device Class 3.
  * lsusb: Add descriptor definition for USB3 BOS Configuration Summary.
  * lsusb: Dump USB3 BOS Configuration Summary Descriptor.
  * lsusb: Squash Wpointer-compare warning.
  * lsusb: Remove unused function.
  * lsusb: Fix array entry count for variable sized entries.
  * Makefile.am: Include usbreset.c in the release tarball
  * lsusb: Dump UVC Stream based payload descriptor.</changelog>
  <changelog author="mpluskal@suse.com" date="1589284800">- Update to version 012:
  * Merge usbhid-dump into main usbutils repository
- Changes for version 011:
  * Add usbreset.c as noinst_PROGRAMS target.
  * lsusb: Read unkown names from sysfs device desc.
  * Remove a small hack that no longer has any effect.
  * Cleanup grammar
  * lsusb-t: Emit USB IDs and other handy info when verbosity is increased
  * Require newer version of libusb
  * lsusb.py: fix up Python 3 conversion
  * SPDX bill-of-material is supposed to be project_name.spdx
  * usbutils.spdx: rerun report, it is properly sorted.
  * desc-dump.c: fix compiler warning about unused variable
  * add usbreset to .gitignore
  * usbreset: fix some build warnings
  * usbhid-dump: update to latest version
  * fix up standard int types
  * update usbhid-dump git id
  * usbhid-dump: update to a newer version of usbhid-dump again.
  * usbutils.spdx: update with latest information
  * lsusb.py: Search multiple paths for usb.ids.
  * lsusb.py: Usb enum for parser state machine.
  * lsusb.py: Add driver names for usbhid.
  * lsusb.py: python2 compatibility
  * Makefile.am: add files with licenses to archive
  * lsusb.py: sort devices and interfaces numerically
  * lsusb.py: sort toplevel entries
  * lsusb.py: improve usage text
  * lsusb.py: replace fake deepcopy()
  * lsusb.py: remove -w (warn if usb.ids not sorted) option
  * lsusb.py: ensure all error messages are written to stderr
  * lsusb.py: support long options
  * lsusb.py: use regular print() instead of hand-rolling the same thing
  * lsusb.py: avoid shadowing Python's built-in 'str'
  * lsusb.py: replace usb.ids binary search with dict lookup
  * lsusb.py: remove now-unused bin_search()
  * lsusb.py: avoid manual calls to __foo__()
  * lsusb.py: replace __repr__() for USB IDs with __str__()
  * lsusb.py: insert class FF:FF:FF into usbclasses to avoid special casing
  * lsusb.py: entirely remove Usb* classes
  * lsusb.py: cosmetic - replace tuples-as-"immutable lists" with regular lists
  * lsusb.py: use 'elif' where suitable
  * lsusb.py: remove dead code
  * lsusb.py: move unrelated code out of try..except
  * lsusb.py: allow - as well as _ when matching hci module names
  * lsusb.py: use a constant for the magic class number 9
  * lsusb.py: Usb* classes: call read() automatically from constructor
  * lsusb.py: UsbEndpoint: indent is a class implementation detail
  * lsusb.py: a few cosmetic changes
  * lsusb.py: shorten find_usb_class()
  * lsusb.py: give all Usb* objects a .path attribute
  * lsusb.py: add an actual __repr__() to classes
  * lsusb.py: give all Usb* classes a superclass
  * lsusb.py: convert readattr() and readlink() to methods of the container
  * lsusb.py: use color by default
  * lsusb.py: rework output for more consistent indent of both columns
  * lsusb.py: fix endpoint interval spacing
  * lsusb.py: visually group USB-version-related fields
  * lsusb: Split out routine that fetches value for given field.
  * lsusb: Split out field name rendering.
  * lsusb: Add support for descriptor extensions.
  * lsusb: Add support for audio processing unit type-specific fields.
  * lsusb: Added support for Billboard Alternate Mode Capability descriptor
  * lsusb.py: Fix formatting of 10Gbps speeds
  * usb-devices: use /bin/sh hashbang
  * lsusb:  Add support for decoding IPP printer descriptors
  * Depend on libusb 1.0.14
  * man pages: add information on verbosity levels of -t option
  * fix typo
- Drop no longer needed fix-shebang.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1605873600">- Update to version 013:
  * lsusb.8.in: do not mention usb.ids
  * usb-devices.1: don't mention bash
  * usbhid-dump: move manpage to main directory out of subdir
  * usbhid-dump.8: add SPDX header
  * usbhid-dump.8: autogenerate it with the usbutils version number
  * usbhid-dump: add SPDX identifiers to all files.
  * usbhid-dump: remove libusb.h libusb_strerror() implementation
  * usbhid-dump: remove lib directory
  * usbhid-dump: move .h files into src/ directory
  * Makefile.am: add usbhid-dump.8 to distclean list
  * usbhid-dump: some autoconf cleanup
  * usbhid-dump: remove some dev_list functions that were never used
  * dump_audiostreaming_interface(): remove unused variable
  * usbmisc: initialize string buffer before reading from device.
  * lsusb.py: drop trailing space on non-hub devices
  * lsusb.py: strip whitespace from device strings
  * lsusb(8): fix formatting
  * lsusb(8): document --tree
  * lsusb.py: remove private paths for usb.ids
  * Additional device classes for usb-devices script
  * usbhid-dump: Do not use rindex
  * Move read_sysfs_prop() from names.c to its own file
  * sysfs: Don't return bogus data for devices under a hub
  * lsusb: Use vendor and product name fallback logic in -D mode too
  * lsusb: Get manufacturer, product, and serial from sysfs
  * bootstrap: change /bin/bash to /bin/sh
  * lsusb: fix two typos in UVC Extension Unit descriptor
  * usbhid-dump: Put back autoconf check for libusb_set_option()</changelog>
  <changelog author="mpluskal@suse.com" date="1630497600">- Update to version 014 (jira#SLE-19451):
  * Add Tx+Rx lanes to tree mode
  * lsusb(8): mention the udev's hardware database
  * lsusb: Fix typo in string output for iAdditionalInfoURL
  * lsusb-t: Add lower bound checks in read_sysfs_file_string
  * lsusb: remove unused RETRIES constant
  * lsusb: don't complain on EAGAIN
  * sysfs: add copyright notice taken from name.*
  * LICENSES: add symlink to handle "or-later" issue for GPL-2.0
  * LICENSES: put spdx headers on the license files
  * rename "GPL-2.0+" to "GPL-2.0-or-later"
  * LICENSE: rename GPL-3.0.txt -&gt; GPL-3.0-only.txt
  * usbhid-dump.8.in: add copyright information
  * usbhid-dump: add copyright and SPDX info
  * SPDX header cleanups from GPL-2.0 -&gt; GPL-2.0-only
  * usbutils.spdx: update with output of latest reuse tool
  * lsusb: Fix spelling of bEndpointAddress in UVC
  * lsusb: Decode endpoint addresses in UVC
  * lsusb.c: fix leak in dump_printer_device
  * usb-devices: do not use `local` in a POSIX shell script
  * desc-defs.c: fix possible out-of-bound read
  * Fix typos in lsusb.8.in
  * Fix locating endpoint when it's a directory rather than a symlink
  * Fix formatting of interface descriptors to match /sys/kernel/debug/usb/devices
  * Fix formatting of endpoint direction to match /sys/kernel/debug/usb/devices
  * Fix formatting of endpoint type to match /sys/kernel/debug/usb/devices
  * Fix formatting of max endpoint packet size to match /sys/kernel/debug/usb/devices
  * lsusb: Fix buffer size copy/paste error</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 015:
  * usb-devices: list the root devices in numerical order
  * usb-devices: use 'local' variable type to handle recursion
  * lsusb: remove unused wireless check
  * lsusb: remove wireless descriptor information
  * usb-devices: fix field width on device speed field
  * lsusb: fix up Midi Device specification devices
  * Fix an runtime error reported by undefind sanitizer
  * lsusb: Improve status display for SuperSpeedPlus hubs
  * lsusb-t: Fix recursive sorting on child devices.</changelog>
</package>
<package pkgid="1cd93827e930f7c697f63d3e2ab27b640e152ee149744d3207dff09b6065390d8f6ea380630f77b2ca7fa3e3125d0b1eb393df7a44f5d513141bd5cb558cdd85" name="usbutils-debugsource" arch="aarch64">
  <version epoch="0" ver="015" rel="slfo.1.1_1.2"/>
  <changelog author="sweet_f_a@gmx.de" date="1375185600">- update to usbutils 007
  * usb-devices: correctly quote driver path
  * lsusb: decode CDC MBIM descriptor
  * lsusb: decode CDC NCM functional descriptor
  * lsusb: decode CDC Command Set descriptor
  * usb-devices: avoid numbers being seen as octal by printf
  * lsusb: parse bmFormats inside UAC2 interface headers as hex
  * remove devtree logic
  * Fix lsusb -t potentially not listing all devices
  * lsusb-t: make sure that interfaces are added to lists only once
  * lsusb: Fix USB 3.0 link state reporting.
  * lsusb: Fix bug in USB 2.0 extended caps descriptor.
  * lsusb: Parse misplaced UAC1 AudioControl Endpoint Descriptor
  * lsusb: Support non-ASCII string descriptors.
- update usb.ids
- remove config-guess-sub-update.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1416657600">- Update to usbutils 008
  * most important change is that lsusb switched to use
  the udev hardware database instead of the usb.ids file
  * lsusb: Reports if USB2.0 port is on L1 state
  * lsusb: Reports devices that support BESL on USB2.0
  * dump_ccid_device: fix a typo
  * lsusb: fix incorrect printf() for CAPS
  * lsusb-t: handle problem if there is no usb bus list
  * Ignore invalid string descriptors
  * usb-devices: hexadecimal bInterfaceNumber handling</changelog>
  <changelog author="olaf@aepfle.de" date="1416830400">- BuildRequire at least libudev &gt;= 196</changelog>
  <changelog author="avindra@opensuse.org" date="1517659200">- Update to usbutils 009
  * usbreset: coding style
  * Don't use C99-ism
  * usbhid-dump: update submodule to latest version
  * add usbreset.c example program
  * update usbhid-dump to latest
  * lsusb.py: Don't dump a trace dump if usb.ids is not present
  * USB: usb-devices: Interface number can be a string
  * autogen.sh: checkout usbhid-dump
  * lsusb: add support for the Encoding Unit Desc for uvc 1.5
    device
  * lsusb: fix alignment for Video Streaming interface desc
  * lsusb: parse additional control fileds in USB video control
    interfaces for UVC1.5
  * lsusb: proper display hexadecimal value for UVC control
    interface
  * usbreset.c: import usability improvements from OpenWrt
  * Update lsusb.c
  * Un-indent bVariableSize for Frame-Based Format descriptors
  * Makefile: install pkgconfig file to arch-dependent location
  * lsusb: Allocate the BOS descriptor buffer dynamically
  * lsusb: Add support for the USB 3.1 SuperSpeedPlus device
    capability desc
  * lsusb: Fix issue with lengthy string descriptors
  * lsusb: Added support for Billboard Capability descriptor
  * Update usbhid-dump repo URL
  * Update usbhid-dump to v1.4
  * configure: remove summary about unused USE_ZLIB
  * drop unused input file for usb.ids update script
  * substitute usb.id location in lsusb Python script
  * lsusb: remove unused variable procbususb
  * lsusb: Report correct MaxPower for USB 3.0 devices
  * lsusb: Request proper descriptor type for USB 3.1
  * lsusb: Store link state descriptions without preceding
    space
  * build: Request at least libusb 1.0.9
  * Added support for Platform Device Capability descriptor
  * lsusb: change endianness of first three fields when printing
    UUID/GUIDs.
  * lsusb: Fix UVC STILL_IMAGE_FRAME descriptor
  * lsusb: Fix UVC VideoStreaming interface header descriptor
  * lsusb: Fix UVC OUTPUT_TERMINAL descriptor
  * lsusb: print WebUSB platform descriptor
  * travis-ci: add control files borrowed from libusb
  * travis-ci: cleanup before second run
  * travis-ci: rework travis-autogen.sh
- add fix-shebang.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1520942400">- Use usb ids from hwdata
- Modernise spec file with spec-cleaner
- Make building more verbose</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to usbutils 010
  * usbreset.c: add missing &lt;stdlib.h&gt; include
  * Do not create and install usbutils.pc
  * fix dump_videocontrol_interface for unitialized variable usage
  * Add correct SPDX license identifiers to all files
  * Add SPDX identifiers on files that did not have a specific license.
  * wTotalLength should be printed as a hex number
  * usbmisc: fix up some strncpy() issues
  * lsusb-t: fix up error with readlink()
  * lsusb.py.in: add proper SPDX license identifier
  * usb-devices: reword the copyright identifier
  * LICENSES: move the GPL 2 license to the LICENSES directory
  * LICENSES/GPL-3.0.txt: add the file
  * lsusb.h: add copyright notice
  * lsusb-t: add copyright info
  * bom.spdx: Add bill of materials file in SPDX format.
  * ChangeLog: remove it.
  * AUTHORS: remove file
  * do_release: drop file
  * NEWS: add SPDX header and comment
  * autogen.sh: add SPDX and copyright header
  * list.h: add copyright information
  * travis-autogen.sh: add SPDX and copyright information.
  * INSTALL: remove the file, it's boiler-plate
  * configure.ac: add SPDX and copyright
  * man pages: add SPDX and copyright information
  * Makefile.am: add SPDX and copyright information
  * .gitmodules: add SPDX and copyright lines
  * lsusb.py.in: fix up Copyright strings
  * usbreset.c: add Alan's copyright
  * .travis.yml: add correct SPDX and copyright notices
  * bom.spdx: update with latest copyright and SPDX identifier additions
  * README.md: move the README file to markdown
  * README.md: fix fomatting
  * bom.spdx: upate with README -&gt; README.md change
  * lsusb.py: convert to python3
  * lsusb: Split subtype mapping out of AudioControl interface handling.
  * lsusb: Add declarative definitions for UAC1 and UAC2 descriptors.
  * lsusb: Add code to dump descriptor data using descriptor definition.
  * lsusb: Switch to descriptor-definition based dump for UAC1 and UAC2.
  * lsusb: Add descriptor definitions for UAC3.
  * lsusb: Add initial support for USB Audio Device Class 3.
  * lsusb: Add descriptor definition for USB3 BOS Configuration Summary.
  * lsusb: Dump USB3 BOS Configuration Summary Descriptor.
  * lsusb: Squash Wpointer-compare warning.
  * lsusb: Remove unused function.
  * lsusb: Fix array entry count for variable sized entries.
  * Makefile.am: Include usbreset.c in the release tarball
  * lsusb: Dump UVC Stream based payload descriptor.</changelog>
  <changelog author="mpluskal@suse.com" date="1589284800">- Update to version 012:
  * Merge usbhid-dump into main usbutils repository
- Changes for version 011:
  * Add usbreset.c as noinst_PROGRAMS target.
  * lsusb: Read unkown names from sysfs device desc.
  * Remove a small hack that no longer has any effect.
  * Cleanup grammar
  * lsusb-t: Emit USB IDs and other handy info when verbosity is increased
  * Require newer version of libusb
  * lsusb.py: fix up Python 3 conversion
  * SPDX bill-of-material is supposed to be project_name.spdx
  * usbutils.spdx: rerun report, it is properly sorted.
  * desc-dump.c: fix compiler warning about unused variable
  * add usbreset to .gitignore
  * usbreset: fix some build warnings
  * usbhid-dump: update to latest version
  * fix up standard int types
  * update usbhid-dump git id
  * usbhid-dump: update to a newer version of usbhid-dump again.
  * usbutils.spdx: update with latest information
  * lsusb.py: Search multiple paths for usb.ids.
  * lsusb.py: Usb enum for parser state machine.
  * lsusb.py: Add driver names for usbhid.
  * lsusb.py: python2 compatibility
  * Makefile.am: add files with licenses to archive
  * lsusb.py: sort devices and interfaces numerically
  * lsusb.py: sort toplevel entries
  * lsusb.py: improve usage text
  * lsusb.py: replace fake deepcopy()
  * lsusb.py: remove -w (warn if usb.ids not sorted) option
  * lsusb.py: ensure all error messages are written to stderr
  * lsusb.py: support long options
  * lsusb.py: use regular print() instead of hand-rolling the same thing
  * lsusb.py: avoid shadowing Python's built-in 'str'
  * lsusb.py: replace usb.ids binary search with dict lookup
  * lsusb.py: remove now-unused bin_search()
  * lsusb.py: avoid manual calls to __foo__()
  * lsusb.py: replace __repr__() for USB IDs with __str__()
  * lsusb.py: insert class FF:FF:FF into usbclasses to avoid special casing
  * lsusb.py: entirely remove Usb* classes
  * lsusb.py: cosmetic - replace tuples-as-"immutable lists" with regular lists
  * lsusb.py: use 'elif' where suitable
  * lsusb.py: remove dead code
  * lsusb.py: move unrelated code out of try..except
  * lsusb.py: allow - as well as _ when matching hci module names
  * lsusb.py: use a constant for the magic class number 9
  * lsusb.py: Usb* classes: call read() automatically from constructor
  * lsusb.py: UsbEndpoint: indent is a class implementation detail
  * lsusb.py: a few cosmetic changes
  * lsusb.py: shorten find_usb_class()
  * lsusb.py: give all Usb* objects a .path attribute
  * lsusb.py: add an actual __repr__() to classes
  * lsusb.py: give all Usb* classes a superclass
  * lsusb.py: convert readattr() and readlink() to methods of the container
  * lsusb.py: use color by default
  * lsusb.py: rework output for more consistent indent of both columns
  * lsusb.py: fix endpoint interval spacing
  * lsusb.py: visually group USB-version-related fields
  * lsusb: Split out routine that fetches value for given field.
  * lsusb: Split out field name rendering.
  * lsusb: Add support for descriptor extensions.
  * lsusb: Add support for audio processing unit type-specific fields.
  * lsusb: Added support for Billboard Alternate Mode Capability descriptor
  * lsusb.py: Fix formatting of 10Gbps speeds
  * usb-devices: use /bin/sh hashbang
  * lsusb:  Add support for decoding IPP printer descriptors
  * Depend on libusb 1.0.14
  * man pages: add information on verbosity levels of -t option
  * fix typo
- Drop no longer needed fix-shebang.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1605873600">- Update to version 013:
  * lsusb.8.in: do not mention usb.ids
  * usb-devices.1: don't mention bash
  * usbhid-dump: move manpage to main directory out of subdir
  * usbhid-dump.8: add SPDX header
  * usbhid-dump.8: autogenerate it with the usbutils version number
  * usbhid-dump: add SPDX identifiers to all files.
  * usbhid-dump: remove libusb.h libusb_strerror() implementation
  * usbhid-dump: remove lib directory
  * usbhid-dump: move .h files into src/ directory
  * Makefile.am: add usbhid-dump.8 to distclean list
  * usbhid-dump: some autoconf cleanup
  * usbhid-dump: remove some dev_list functions that were never used
  * dump_audiostreaming_interface(): remove unused variable
  * usbmisc: initialize string buffer before reading from device.
  * lsusb.py: drop trailing space on non-hub devices
  * lsusb.py: strip whitespace from device strings
  * lsusb(8): fix formatting
  * lsusb(8): document --tree
  * lsusb.py: remove private paths for usb.ids
  * Additional device classes for usb-devices script
  * usbhid-dump: Do not use rindex
  * Move read_sysfs_prop() from names.c to its own file
  * sysfs: Don't return bogus data for devices under a hub
  * lsusb: Use vendor and product name fallback logic in -D mode too
  * lsusb: Get manufacturer, product, and serial from sysfs
  * bootstrap: change /bin/bash to /bin/sh
  * lsusb: fix two typos in UVC Extension Unit descriptor
  * usbhid-dump: Put back autoconf check for libusb_set_option()</changelog>
  <changelog author="mpluskal@suse.com" date="1630497600">- Update to version 014 (jira#SLE-19451):
  * Add Tx+Rx lanes to tree mode
  * lsusb(8): mention the udev's hardware database
  * lsusb: Fix typo in string output for iAdditionalInfoURL
  * lsusb-t: Add lower bound checks in read_sysfs_file_string
  * lsusb: remove unused RETRIES constant
  * lsusb: don't complain on EAGAIN
  * sysfs: add copyright notice taken from name.*
  * LICENSES: add symlink to handle "or-later" issue for GPL-2.0
  * LICENSES: put spdx headers on the license files
  * rename "GPL-2.0+" to "GPL-2.0-or-later"
  * LICENSE: rename GPL-3.0.txt -&gt; GPL-3.0-only.txt
  * usbhid-dump.8.in: add copyright information
  * usbhid-dump: add copyright and SPDX info
  * SPDX header cleanups from GPL-2.0 -&gt; GPL-2.0-only
  * usbutils.spdx: update with output of latest reuse tool
  * lsusb: Fix spelling of bEndpointAddress in UVC
  * lsusb: Decode endpoint addresses in UVC
  * lsusb.c: fix leak in dump_printer_device
  * usb-devices: do not use `local` in a POSIX shell script
  * desc-defs.c: fix possible out-of-bound read
  * Fix typos in lsusb.8.in
  * Fix locating endpoint when it's a directory rather than a symlink
  * Fix formatting of interface descriptors to match /sys/kernel/debug/usb/devices
  * Fix formatting of endpoint direction to match /sys/kernel/debug/usb/devices
  * Fix formatting of endpoint type to match /sys/kernel/debug/usb/devices
  * Fix formatting of max endpoint packet size to match /sys/kernel/debug/usb/devices
  * lsusb: Fix buffer size copy/paste error</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 015:
  * usb-devices: list the root devices in numerical order
  * usb-devices: use 'local' variable type to handle recursion
  * lsusb: remove unused wireless check
  * lsusb: remove wireless descriptor information
  * usb-devices: fix field width on device speed field
  * lsusb: fix up Midi Device specification devices
  * Fix an runtime error reported by undefind sanitizer
  * lsusb: Improve status display for SuperSpeedPlus hubs
  * lsusb-t: Fix recursive sorting on child devices.</changelog>
</package>
<package pkgid="f9d38ed0f59f2f63b62a2be92a19e96face2ba0f70b6c63f0272370a83264a8e7de80b736f13b09ec2045d5ff1e2a92aac79a29e4abce20a60d7862de192fe7d" name="userspace-rcu-debugsource" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="slfo.1.1_1.3"/>
  <changelog author="dmueller@suse.com" date="1443528000">- remove dependency on gpg-offline, is done by source validator
- drop userspace-rcu-ppc64le.patch, included in
  userspace-rcu-aarch64.patch</changelog>
  <changelog author="dvaleev@suse.com" date="1458043200">- userspace-rcu-ppc64le.patch use ppc for ppc64le
  http://git.lttng.org/?p=userspace-rcu.git;a=commit;h=61126bd9c901fa403315db71d8d5351d716717cb</changelog>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 0.10.0 for SLE15 (bsc#1055683)
  Drop patch: userspace-rcu-aarch64.patch (upstream v0.9.0~99)
  Drop patch: userspace-rcu-ppc64le.patch (upstream v0.9.0~24)
  Adjust library soname to 6
  Update keyring</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Add baselibs.conf: create liburcu6-32bit package as a dependency
  to liblttng-ust0-32bit.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 0.12.1:
  * Fix: tls-compat.h exposes compiler-dependent public configuration
  * Fix: tap array subscript has type char warning
  * tls-compat.h: introduce DEFINE_URCU_TLS_INIT
  * Use _umtx_op for futex on FreeBSD
  * Add FreeBSD, DragonFly to syscall-compat.h
  * urcu-bp: perform thread registration on urcu_bp_register_thread
  * Require automake &gt;= 1.12
  * cds_lfht_is_node_deleted parameter can be marked const
  * Fix: provide errno as argument to urcu_die()
  * Fix: rculfhash worker needs to unblock to SIGRCU
  * Cleanup: test_perthreadlock_timing: handle pthread mutex errors
  * Fix: SONAME bump to 6.1.0
  * Cleanup: remove unused variable from configure.ac check
  * Fix: urcu/futex.h: users of struct timespec should include time.h
  * Bump library version to 6:0:1
  * Cleanup: update code layout to fix old gcc warning
  * Fix: typo CPPLAGS in examples Makefile
  * Harmonize pprint macro across projects
  * Check for TLS support after CC detection
  * Update macros from the autotools archive
  * tap-driver.sh: flush stdout after each test result
  * Update dead link in lgpl-relicensing.txt
  * Add multiflavor compat identifiers
  * Cleanup: missing sign compare fixes
  * Cleanup: enable signed/unsigned compare compiler warning
  * Cleanup: compiler warning on 32-bit architectures
  * config.h.in: rename CONFIG_RCU_MULTIFLAVOR to CONFIG_RCU_HAVE_MULTIFLAVOR
  * rculfhash: implement iterator debugging config option
  * Fix: examples silent rules on Solaris
  * Add missing fall through annotations
  * Fix: symbol aliases with TLS compat
  * Port: no symbols aliases on MacOS
  * Add -Wextra to CFLAGS
  * Add silent mode to examples Makefiles
  * doc: update examples to API changes
  * test multiflavor single compile unit
  * Update README following API changes
  * Use new header locations for includes from urcu code
  * Update call-rcu.h and defer.h comments and include guards
  * rculfqueue.h: do not include urcu-call-rcu.h
  * rculfhash: support use with multiple flavors per compile unit
  * rculfhash: do not include urcu-call-rcu.h from public API
  * Refactor liburcu to support many flavors per compile unit
  * Fix: only wait if work queue is empty in real-time mode
  * Fix: don't wait after completion of a work queue job batch
  * Fix: don't wait after completion of job batch if work queue is empty
  * Fix: workqueue: struct urcu_work vs rcu_head mixup
  * Cleanup: workqueue: update comments referring to call-rcu
  * Fix: mixup between URCU_WORKQUEUE_RT and URCU_CALL_RCU_RT
  * test_rwlock: Add per-thread count to verbose output
  * Add *.exe to gitignore for Cygwin
  * Fix: pthread_rwlock initialization on Cygwin
  * Fix: compat_futex_noasync on Cygwin
  * wfcqueue: allow defining CDS_WFCQ_WAIT_SLEEP to override `poll'
  * Update documentation for call_rcu before/after fork
  * Add support for the RISC-V architecture
  * Tests: Add tap-driver.sh for automake &lt; 1.12
  * Tests: Replace prove by autotools tap runner
  * liburcu-bp: Use membarrier private expedited when available
  * liburcu: Use membarrier private expedited when available
  * rculfhash: improve error handling of mmap backend
  * Fix: don't use overlapping mmap mappings on Cygwin
  * Tests fix: errors in shell scripts
  * Revert "Use initial-exec tls model"
  * Use initial-exec tls model
  * Fix: don't use membarrier SHARED syscall command in liburcu-bp
  * Tests fix: add missing Cygwin thread id
  * Fix: assignment from incompatible pointer type warnings
  * Tests fix: unused variable warnings
  * Fix: add missing m68k headers to dist</changelog>
  <changelog author="dmueller@suse.com" date="1615204800">- update to 0.12.2:
  * fix: exclude clang from GCC version blacklists
  * aarch64: blacklist gcc prior to 5.1
  * Fix: configure: support Autoconf 2.70
  * fix: bump tests thread limit to 4096
  * cleanup: Improve wording of CONFIG_RCU_DEBUG description
  * fix: explicitly include urcu/config.h in files using CONFIG_RCU_ defines
  * Fix typo in README.md
  * fix: add -lurcu-common to pkg-config libs for each flavor
  * call_rcu: Fix race between rcu_barrier() and call_rcu_data_free()</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 0.13.0:
  * The Userspace RCU 0.13 release is mostly a library soname version bump
    to address an ABI incompatibility between the 0.10 and { 0.11, 0.12 }
    releases. see https://lists.lttng.org/pipermail/lttng-dev/2021-June/030023.html</changelog>
  <changelog author="dmueller@suse.com" date="1642939200">- update to 0.13.1:
  * fix: properly detect 'cmpxchg' on x86-32
  * fix: use urcu-tls compat with c++ compiler
  * fix: remove autoconf features default value in help message
  * fix: add missing pkgconfig file for memb flavour lib
  * Make temporary variable in _rcu_dereference non-const
  * Fix: x86 and s390: uatomic __hp() macro C++ support
  * Fix: x86 and s390: uatomic __hp() macro clang support
  * Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1660910400">- Update to version 0.13.2:
  * Revert "Fix: remove type constness in URCU_FORCE_CAST's C++
    version".
  * Fix: futex.h: include headers outside extern C.
  * Fix: add missing unused attribute to _rcu_dereference.
  * Fix: change method used by _rcu_dereference to strip type constness.
  * Fix: remove type constness in URCU_FORCE_CAST's C++ version.
  * Move extern "C" down in include/urcu/urcu-bp.h.
  * Fix: ifdef linux specific cpu count compat.
  * Set git-review branch to stable-0.13.
  * Fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id.
  * Fix: revise obsolete command in README.md.
  * Fix: workqueue: remove unused variable "ret".
  * Fix: futex wait: handle spurious futex wakeups.
  * Fix: Use %lu rather than %ld to print count.</changelog>
  <changelog author="dmueller@suse.com" date="1678276800">- update to 0.14.0:
  * Fix: urcu-bp: only teardown call-rcu worker in destructor
  * Fix: rculfhash: urcu_die() takes positive error value
  * Fix: call_rcu: teardown default call_rcu worker on
    application exit
  * Fix: join worker thread in call_rcu_data_free
  * Docs: clarify grace period polling API
  * Document grace period polling in rcu-api.md
  * Implement poll rcu stress test in rcutorture
  * urcu-memb,mb,signal: Implement grace period polling
  * Fix: auto-resize hash table destroy deadlock
  * Fix building on MSYS2
  * rculfhash: Include rculfhash-internal.h from local directory
  * Remove "Darwin" from "should also work on list"
  * Merge branch 'adah1972-improve-md'
  * Add semicolons at the end of function prototypes
  * Wrap a file name in backticks
  * Wrap command-line options in backticks
  * Fix a wrong format
  * Wrap URLs in angle brackets
  * Fix Markdown issues
  * Fix: Always check pthread_create for failures
  * Disable signals in URCU background threads
  * Fix: futex.h: include headers outside extern C
  * Fix: add missing unused attribute to _rcu_dereference
  * Fix: change method used by _rcu_dereference to strip type
    constness
  * Fix: remove type constness in URCU_FORCE_CAST's C++ version
  * Move extern "C" down in include/urcu/urcu-bp.h
  * fix: ifdef linux specific cpu count compat
  * Add unit tests for possible_cpus_array_len
  * fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu
    id
  * Fix: revise obsolete command in README.md
  * Fix: workqueue: remove unused variable "ret"
  * Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
  * Fix: urcu: futex wait: handle spurious futex wakeups
  * Fix: urcu-wait: futex wait: handle spurious futex wakeups
  * Fix: defer_rcu: futex wait: handle spurious futex wakeups
  * Fix: call_rcu: futex wait: handle spurious futex wakeups
  * Fix: workqueue: futex wait: handle spurious futex wakeups
  * Fix: Use %lu rather than %ld to print count
  * Update ABI definition files
  * Bump version current and age
  * alpha: allocate membarrier system call number
  * Bump version to 0.14.0-pre
  * Improved test framework
  * rculfhash: introduce cds_lfht_node_init_deleted
  * cleanup: i386 arch detection
  * fix: properly detect 'cmpxchg' on x86-32
  * fix: use urcu-tls compat with c++ compiler
  * Fix typo
  * fix: remove autoconf features default value in help message
  * fix: add missing pkgconfig file for memb flavour lib
  * Cleanup: Tests: Remove useless pre-C99 compatibility code
    from tap.h
  * Document C99 and C++11 requirement in README.md
  * Always use '__thread' for Thread local storage except on MSVC
  * Fix: powerpc32: transparent unions alter calling convention
  * fix: don't use C++ thread_local on MacOs
  * wfcqueue API: implement overloaded wrappers with templates
  * wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
  * wfstack C++ API: implement overloaded wrappers with templates
  * lfstack C++ API: implement overloaded wrappers with templates
  * wfstack: combine C++ API cds_wfs_stack_cast with overloading
  * lfstack: combine C++ API cds_lfs_stack_cast with overloading
  * fix: test_build tap plan
  * Test C++ build of list head init
  * Fix order of initializers in CDS_LIST_HEAD_INIT
  * unit tests: test wfcqueue, wfstack, lfstack empty check
    functions in C++
  * wfcqueue: implement C++ API based on function overloading
  * wfstack: implement C++ API based on function overloading
  * lfstack: implement C++ API based on function overloading
  * Fix tap.h: remove extra semicolon in pass/fail macros
  * Add C++ build tests
  * Build and run regression and unit tests as C++ programs
  * Add --enable-Werror configure switch
  * Add `urcu_posix_assert()` as `assert()` replacement
  * Rename `urcu_assert()` to `urcu_assert_debug()`
  * cleanup: spelling fixes in comments
  * Make temporary variable in _rcu_dereference non-const
  * (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
  * Fix: x86 and s390: uatomic __hp() macro clang support
  * Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11</changelog>
</package>
<package pkgid="d6181cb0d0a504546a180c2a56decab8385d59d40bf804b943c67c561599253d8f6bfc4062d7c5b8f2323cc2b3ed168e341aa472cbefd34a35556a57b23a7bd6" name="util-linux-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.40.4" rel="slfo.1.1_4.1"/>
  <changelog author="jslaby@suse.cz" date="1715860800">- add support for pidfs in kernel 6.9 (bsc#1224285)
  * 0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch
  * 0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch
  * 0003-lsfd-Support-pidfs.patch
  * 0004-lsfd-test-Adapt-test-cases-for-pidfs.patch</changelog>
  <changelog author="dmueller@suse.com" date="1718020800">- disable libmagic in more(1) for binary detection (bsc#1225197)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1721131200">- uncomment "autoreconf --install" to use the new version of automake</changelog>
  <changelog author="sbrabec@suse.com" date="1722859200">- Update to version 2.40.2:
  * cfdisk: fix possible integer overflow
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
    (obsoletes
    0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch,
    0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch,
    0003-lsfd-Support-pidfs.patch,
    0004-lsfd-test-Adapt-test-cases-for-pidfs.patch)
  * mkswap.8.adoc: update note regarding swapfile creation
  * setpgid: make -f work
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Enable kernel mountfd API, as it should be already stable
  (PED-9752).
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.</changelog>
  <changelog author="sbrabec@suse.com" date="1729512000">- Disable mountfd API again.
  (https://github.com/util-linux/util-linux/issues/3158)</changelog>
  <changelog author="sbrabec@suse.com" date="1731844800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).
- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
</package>
<package pkgid="6879f3dbc1e9d536c5aa597ac632fa502cdbc05d46dc64097b09ac8cacbd54198e82410137d9e59dced55246737365b62d1aab829db68b3fe2b325937752f88a" name="util-linux-debugsource" arch="aarch64">
  <version epoch="0" ver="2.40.4" rel="slfo.1.1_4.1"/>
  <changelog author="jslaby@suse.cz" date="1715860800">- add support for pidfs in kernel 6.9 (bsc#1224285)
  * 0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch
  * 0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch
  * 0003-lsfd-Support-pidfs.patch
  * 0004-lsfd-test-Adapt-test-cases-for-pidfs.patch</changelog>
  <changelog author="dmueller@suse.com" date="1718020800">- disable libmagic in more(1) for binary detection (bsc#1225197)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1721131200">- uncomment "autoreconf --install" to use the new version of automake</changelog>
  <changelog author="sbrabec@suse.com" date="1722859200">- Update to version 2.40.2:
  * cfdisk: fix possible integer overflow
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
    (obsoletes
    0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch,
    0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch,
    0003-lsfd-Support-pidfs.patch,
    0004-lsfd-test-Adapt-test-cases-for-pidfs.patch)
  * mkswap.8.adoc: update note regarding swapfile creation
  * setpgid: make -f work
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Enable kernel mountfd API, as it should be already stable
  (PED-9752).
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.</changelog>
  <changelog author="sbrabec@suse.com" date="1729512000">- Disable mountfd API again.
  (https://github.com/util-linux/util-linux/issues/3158)</changelog>
  <changelog author="sbrabec@suse.com" date="1731844800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).
- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
</package>
<package pkgid="7852d80b3bfe8f4712c3d52ecbea6ed63cbad4dea066a6845228994b7bda5c8c9dce7b5141f6403d3bb9c59edfb19342e8e5d26edcbb5d605a145ba28df723b8" name="util-linux-systemd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.40.4" rel="slfo.1.1_4.1"/>
  <changelog author="jslaby@suse.cz" date="1715860800">- add support for pidfs in kernel 6.9 (bsc#1224285)
  * 0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch
  * 0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch
  * 0003-lsfd-Support-pidfs.patch
  * 0004-lsfd-test-Adapt-test-cases-for-pidfs.patch</changelog>
  <changelog author="dmueller@suse.com" date="1718020800">- disable libmagic in more(1) for binary detection (bsc#1225197)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1721131200">- uncomment "autoreconf --install" to use the new version of automake</changelog>
  <changelog author="sbrabec@suse.com" date="1722859200">- Update to version 2.40.2:
  * cfdisk: fix possible integer overflow
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
    (obsoletes
    0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch,
    0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch,
    0003-lsfd-Support-pidfs.patch,
    0004-lsfd-test-Adapt-test-cases-for-pidfs.patch)
  * mkswap.8.adoc: update note regarding swapfile creation
  * setpgid: make -f work
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Enable kernel mountfd API, as it should be already stable
  (PED-9752).
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.</changelog>
  <changelog author="sbrabec@suse.com" date="1729512000">- Disable mountfd API again.
  (https://github.com/util-linux/util-linux/issues/3158)</changelog>
  <changelog author="sbrabec@suse.com" date="1731844800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).
- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
</package>
<package pkgid="ccf21665323f1401d4abcc608b921113d1a92fdbe4feac456b6d00a43b011265094d5220a043455f1b58145966ad709faf935681b2b559716a0b03b49f1fac1d" name="util-linux-systemd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.40.4" rel="slfo.1.1_4.1"/>
  <changelog author="jslaby@suse.cz" date="1715860800">- add support for pidfs in kernel 6.9 (bsc#1224285)
  * 0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch
  * 0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch
  * 0003-lsfd-Support-pidfs.patch
  * 0004-lsfd-test-Adapt-test-cases-for-pidfs.patch</changelog>
  <changelog author="dmueller@suse.com" date="1718020800">- disable libmagic in more(1) for binary detection (bsc#1225197)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1721131200">- uncomment "autoreconf --install" to use the new version of automake</changelog>
  <changelog author="sbrabec@suse.com" date="1722859200">- Update to version 2.40.2:
  * cfdisk: fix possible integer overflow
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
    (obsoletes
    0001-include-Include-unistd.h-in-pidfd-utils.h-for-syscal.patch,
    0002-lsfd-Refactor-the-pidfd-logic-into-lsfd-pidfd.c.patch,
    0003-lsfd-Support-pidfs.patch,
    0004-lsfd-test-Adapt-test-cases-for-pidfs.patch)
  * mkswap.8.adoc: update note regarding swapfile creation
  * setpgid: make -f work
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Enable kernel mountfd API, as it should be already stable
  (PED-9752).
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.</changelog>
  <changelog author="sbrabec@suse.com" date="1729512000">- Disable mountfd API again.
  (https://github.com/util-linux/util-linux/issues/3158)</changelog>
  <changelog author="sbrabec@suse.com" date="1731844800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).
- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
</package>
<package pkgid="515d9f818e62883a456d5c2712343a7c31b51513b492d640ad0b6ba32338d62121212c6638aa802dabe8298d4eac35a0a9e4a3de6b0845e058b4713a973f49f0" name="vde2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.3.2+svn587" rel="slfo.1.1_1.3"/>
  <changelog author="andrea@opensuse.org" date="1304856000">- New package</changelog>
  <changelog author="andrea@opensuse.org" date="1304942400">- clean up spec file, split out libraries and cryptcab package</changelog>
  <changelog author="andrea@opensuse.org" date="1305806400">- split out slirpvde to fix legal issues in bug bnc694822
- fixed descriptions on libraries subpackages</changelog>
  <changelog author="andrea@opensuse.org" date="1334577600">- new upstream version 2.3.2 (bug fix release)
- disabled paralled job that break build
- added python support</changelog>
  <changelog author="coolo@suse.com" date="1359892800">- update license to new format</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Drop README.SUSE we are better of with the online guides
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1500465601">- Add patch to build with our gcc checks:
  * vde2-buffer-overflow.patch
- Switch to svn checkout service in order to get something newer
  than 2011 tarball
- Update to version 2.3.2+svn587:
  * allow pipes on stdin for daemonized switches
  * vde_vxlan initial release
  * Add format string to fprintf calls.
  * Clean up unused variables.
  * In 2014, I think we can stop trying to outsmart the compiler. Remove
  * "register" storage class.
  * Add missing headers in vde_router Makefile.am.
  * Add missing format string in snprintf.
  * Add missing source files in vde_vxlan Makefile.am.
  * Enable vde_over_ns when header is present.
  * Remove unused variable in vde_over_ns.
  * vde_autolink: Add missing null entry in getopt_long array.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rename devel subpackages according to shared library guideline.
- Rectify RPM groups.</changelog>
  <changelog author="vcizek@suse.com" date="1505131200">- Patch for openssl 1.1 compatibility
  * add vde2-openssl_1.1_compatibility.patch from Debian</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Drop python2 from the buildrequirements
  * This means we lose python bindings but as the package is no
    longer developed there is 0 chance to obtain python3 bindings
    and the code is not compatible</changelog>
</package>
<package pkgid="34d497dd5d693a4fa8fea7affd451522262328255c035dbf7c12aeab0935cc382bfbb84bbe51624cb2472a33e32dc9a89210a4e7e2a1e92ebcf5debe82c22e2d" name="vim-debugsource" arch="aarch64">
  <version epoch="0" ver="9.2.0110" rel="slfo.1.1_1.1"/>
  <changelog author="mimi.vx@gmail.com" date="1683720000">- Updated to version 9.0.1538, fixes the following problems
- fixes boo#1211256 CVE-2023-2609
  * No error when calling remote_startserver() with an empty string.
  * Error when heredoc content looks like heredoc.
  * Line number not displayed when using 'smoothscroll'.
  * Assert message is confusing with boolean result.  assert_inrange()
  replaces message instead of adding it.
  * Catch does not work when lines are joined with a newline.
  * Error message lacks mentioning the erroneous argument.
  * Misleading variable name for error message.
  * Crash when using wrong arg types to assert_match().
  * Inserting lines when scrolling with 'smoothscroll' set.
  * Text scrolls unnecessarily when splitting and 'splitkeep' is not "cursor".
  * Test waits unnecessarily long before checking screendump.
  * reverse() does not work for a String.
  * Cannot use special keys in &lt;Cmd&gt; mapping.
  * Search stats not always visible when searching backwards.
  * Global 'filetype' is set when it is detected from the file content.
  * Completion for option name includes all bool options.
  * Failing redo of command with control characters.
  * Some functions give two error messages.
  * Some error messages are not marked for translation.
  * Passing -1 for bool is not always rejected.
  * 'smoothscroll' does not always work properly.
  * Condition is always true.
  * Crash when using negative value for term_cols.
  * Libsodium encryption is only used with "huge" features, even when manually
  enabled through configure. (Tony Mechelynck)
  * Code style test doesn't check for space after "if".
  * Cursor moves to wrong line when 'foldmethod' is "diff". (Rick Howe)
  * Crash when register contents ends up being invalid.
  * Crash when expanding "~" in substitute causes very long text.
  * Test for 'smoothscroll' is ineffective.
  * Test for expanding "~" in substitute takes too long.
  * Test commented out in a wrong way.
  * CI: sound dummy stopped working.
  * Message for opening the cmdline window is not translated.
  * :wqall does not trigger ExitPre. (Bart Libert)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1684670400">- Updated to version 9.0.1572, fixes the following problems
  * Typst filetype is not recognized.
  * reverse() on string doesn't work in compiled function.
  * CI: sound dummy is disabled.
  * Line not fully displayed if it doesn't fit in the screen.
  * Display errors when making topline shorter and 'smoothscroll'
    is set.
  * Recent glibc marks sigset() as a deprecated.
  * Text not scrolled when cursor moved with "g0" and "h".
  * Some commands for opening a file don't use 'switchbuf'.
  * Coveralls workflow on CI is commented out.
  * CI: check in sound-dummy module may throw an error.
  * USD filetype is not recognized.
  * In cmdline window S-Tab does not select previous completion.
  * Position of marker for 'smoothscroll' not computed correctly.
  * CI: sound-dummy module is not installed.
  * CI: using slightly outdated gcc version.
  * Code for handling 'switchbuf' is repeated.
  * setcharsearch() does not clear last searched char properly.
  * Vim9: error for missing "return" after "throw".
  * Test failures for unreachable code.
  * Wrong error for unreachable code after :throw.
  * Function argument types not always checked and using v:none may
    cause an error.
  * Win32: When 'encoding' is set $PATH has duplicate entries.
  * Mixing package managers is not a good idea.
  * GTK3: window manager resize hints are incomplete.
  * Display moves up and down with 'incsearch' and 'smoothscroll'.
  * Json lines files are not recognized.
  * Motif: GUI scrollbar test fails in 24 lines terminal.
  * Profiler calculation may be wrong on 32 bit builds.
  * With 'smoothscroll' cursor may move below botline.
  * Cannot use "this.member" in lambda in class method.
  * Some tests are slow.
  * RedrawingDisabled not used consistently.
  * Error messages are not translated.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1686830400">- Updated to version 9.0.1632, fixes the following problems
  * Error messages are not translated.
  * Error for function name has wrong line number.
  * "file N of M" message is not translated.
  * Users may not know what to do with an internal error.
  * SpellCap highlight not always updated when needed.
  * Some error messages are not translated.
  * CI: indent test hangs on FreeBSD.
  * Translation does not work for plural argument.
  * :stopinsert may not work in a popup close handler. (Ben Jackson)
  * Get E304 when using 'cryptmethod' "xchacha20v2". (Steve Mynott)
  * Not all meson files are recognized.
  * Weird use of static variables for spell checking.
  * Checking translations gives an error for using two messages with ngettext()
  that differ in "%" items.
  * Corn config files are not recognized.
  * Incsearch not triggered when pasting clipboard register on the command
  line.
  * Filetype test contains too many special characters.
  * Filetype test has trailing white space.
  * Some "gomod" files are not recognized.
  * Not all timer tests are marked as flaky.
  * MS-Windows: assert error when compiled with debug mode.
  * Some internal error messages are translated.
  * Line pointer becomes invalid when using spell checking.
  * :registers command does not work in sandbox.
  * Cursor ends up below the window after a put.
  * screenchar(), screenchars() and screenstring() do not work properly when
  'encoding' is set to a double-byte encoding.
  * Cursor not adjusted when near top or bottom of window and 'splitkeep'
  is not "cursor".
  * screenpos() does not take w_skipcol into account.
  * Filetype detection fails for *.conf file without comments. (Dmitrii
  Tcyganok)
  * Stray character is visible if 'smoothscroll' marker is displayed on top
  of a double-wide character.
  * Display wrong when scrolling multiple lines with 'smoothscroll' set.
  * Errors from the codestyle test are a bit confusing.
  * Crash when calling method on super in child constructor. (Israel Chauca
  Fuentes)
  * Using freed memory when 'foldcolumn' is set.
  * screenpos() returns wrong row with diff filler lines.
  * update_topline() is called twice.
  * Crash when an object indirectly references itself.
  * Display is wrong when 'smoothscroll' is set and scrolling multiple lines.
  * v:maxcol can be changed in a :for loop.
  * "skipcol" not reset when using multi-byte characters.
  * Some make output gets picked up by 'errorformat'.
  * strlen() called too often for :spellrepall.
  * URL shortcut files are not recognized.
  * Quickfix text field is truncated.
  * charidx() and utf16idx() result is not consistent with byteidx().
  * Trace32 files are not recognized.
  * The focus gained/lost escape sequences cause trouble for a terminal
  where Vim does not expect them.
  * Nix files are not recognized from the hashbang line.
  * FILETYPE_FILE is defined to the same value multiple times.  Same for a
  few similar macros.
  * Filetype name t32 is a bit obscure.
  * The program to filetype translation is not exported.
  * Crash when calling object constructor from legacy script. (Israel
  Chauca Fuentes)
  * "super" is not considered a reserved name.
  * Visual area not shown when using 'showbreak' and start of line is not
  visible. (Jaehwang Jung)
  * No generic mechanism to test syntax plugins.
  * Syntax tests fail on FreeBSD.
  * Having utf16idx() rounding up is inconvenient.
  * "make clean" at the toplevel fails.
  * Passing a wrong variable type to an option gives multiple errors.
  * Not all cabal config files are recognized.</changelog>
  <changelog author="badshah400@gmail.com" date="1688904000">- Use app icon generated from vimlogo.eps in source tarball; add
  higher res icons of sizes 128, 256, and 512px as png sources.
  Our current icons deviate from upstream flatpaks for example.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1694433600">- Updated to version 9.0.1894, fixes the following problems
- drop patches: disable-unreliable-tests.patch
    ignore-flaky-test-failure.patch
    vim-8.1.0297-dump3.patch
- fixes:
  + boo#1214922 - CVE-2023-4738
  + boo#1214925 - CVE-2023-4734
  + boo#1214924 - CVE-2023-4735
  + boo#1214921 - CVE-2023-4751
- droped %check - most of tests didn't work correctly in OBS
    and maitenace burden of this was getting too big
  * Not all cabal config files are recognized.
  * Duplicate code for converting float to string.
  * Message is cleared when removing mode message (Gary Johnson).
  * Error message is cleared when removing mode message.
  * Expanding a pattern interferes with command line completion.
  * Compiler warning for uninitialized variable.
  * crypt tests hang and cause memory errors
  * Build failure without the crypt feature.
  * Compiler warning for unused variables without the crypt feature.
  * The log file does not give information about window sizes.
  * Build failure with tiny features.
  * Filetype detection fails if file name ends in many '~'.
  * Not all filetype file name matches are tested.
  * zserio files are not recognized.
  * Insufficient testing for syntax plugins.
  * Result of syntax tests is hard to see.
  * Syntax test failure causes script to abort.
  * Unclear why syntax test fails on Mac.
  * Unclear why syntax test fails on Mac.
  * Syntax test fails when Vim window is not tall enough.
  * Syntax test fails when detected shell type differs.
  * One more syntax test depends on the system.
  * Autoload files for "zig" are not installed.
  * Termdebug: default highlight cleared when changing colorscheme.
  * Error for using matchfuzzy() in Vim9 script returning a list of dicts.
  * BUCK files are not recognized.
  * Crash when using a class member twice. (Christian J. Robinson)
  * Termdebug on MS-Windows: some file names are not recognized.
  * Divide by zero when scrolling with 'smoothscroll' set.
  * Empty CmdlineEnter autocommand causes errors in Ex mode.
  * Compiler may warn for uninitialized variable.
  * Regression test doesn't fail when fix is reverted.
  * PEM files are not recognized.
  * Crash syncing swapfile in new buffer when using sodium crypt. (James McCoy)
  * Resetting local option to global value is inconsistent.
  * Termdebug: error with more than 99 breakpoints.
  * Tabline highlight wrong after truncated double width label.
  * Cannot produce a status 418 or 503 message.
  * Help for builtin functions is not sorted properly.
  * Test may run into timeout when using valgrind.
  * Warning for buffer in use when exiting early.
  * Typo in syntax test input file.
  * Blade files are not recognized.</changelog>
  <changelog author="zbalogh@suse.com" date="1709208000">- Updated to version 9.1 with patch level 0111, fixes the following security problems
  * Fixing bsc#1217316 (CVE-2023-48231) - VUL-0: CVE-2023-48231: vim: Use-After-Free in win_close()
  * Fixing bsc#1217320 (CVE-2023-48232) - VUL-0: CVE-2023-48232: vim: Floating point Exception in adjust_plines_for_skipcol()
  * Fixing bsc#1217321 (CVE-2023-48233) - VUL-0: CVE-2023-48233: vim: overflow with count for :s command
  * Fixing bsc#1217324 (CVE-2023-48234) - VUL-0: CVE-2023-48234: vim: overflow in nv_z_get_count
  * Fixing bsc#1217326 (CVE-2023-48235) - VUL-0: CVE-2023-48235: vim: overflow in ex address parsing
  * Fixing bsc#1217329 (CVE-2023-48236) - VUL-0: CVE-2023-48236: vim: overflow in get_number
  * Fixing bsc#1217330 (CVE-2023-48237) - VUL-0: CVE-2023-48237: vim: overflow in shift_line
  * Fixing bsc#1217432 (CVE-2023-48706) - VUL-0: CVE-2023-48706: vim: heap-use-after-free in ex_substitute
  * Fixing bsc#1219581 (CVE-2024-22667) - VUL-0: CVE-2024-22667: vim: stack-based buffer overflow in did_set_langmap function in map.c
  * Fixing bsc#1215005 (CVE-2023-4750) - VUL-0: CVE-2023-4750: vim: Heap use-after-free in function bt_quickfix
  * Fixing bsc#1215940 (CVE-2023-5344) - VUL-0: CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969.
  * Fixing bsc#1216001 (CVE-2023-5441) - VUL-0: CVE-2023-5441: vim: segfault in exmode when redrawing
  * Fixing bsc#1216167 (CVE-2023-5535) - VUL-0: CVE-2023-5535: vim: use-after-free from buf_contents_changed()
  * Fixing bsc#1216696 (CVE-2023-46246) - VUL-0: CVE-2023-46246: vim: Integer Overflow in :history command
  * Fixing bsc#1215004 (CVE-2023-4733) - VUL-0: CVE-2023-4733: vim: use-after-free in function buflist_altfpos
  * Fixing bsc#1215006 (CVE-2023-4752) - VUL-0: CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp
  * Fixing bsc#1215033 (CVE-2023-4781) - VUL-0: CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1894...v9.1.0111</changelog>
  <changelog author="zbalogh@suse.com" date="1713787200">- Updated to version 9.1 with patch level 0330, fixes the following problems
  * Fixing bsc#1220763 - vim gets Segmentation fault after updating to version 9.1.0111-150500.20.9.1
- refreshed vim-7.3-filetype_spec.patch
- refreshed vim-7.3-filetype_ftl.patch
- Update spec.skeleton to use autosetup in place of setup macro.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.1.0111...v9.1.0330</changelog>
  <changelog author="martin.schreiner@suse.com" date="1755518400">- Add patches:
  * vim-9.1.1134-revert-putty-terminal-colors.patch
  * reorder-exit-raw-mode.patch
- Remove obsoleted patches:
  * vim-7.3-help_tags.patch
  * vim-7.4-highlight_fstab.patch
  * vim-7.3-mktemp_tutor.patch
- Refresh patches:
  * vim-7.3-sh_is_bash.patch
- Fix the following CVEs and bugs:
  * bsc#1246602 (CVE-2025-53906)
  * bsc#1246604 (CVE-2025-53905)
  * bsc#1247939 (CVE-2025-55158)
  * bsc#1247938 (CVE-2025-55157)
- Update to 9.1.1629:
  9.1.1629: Vim9: Not able to use more than 10 type arguments in a generic function
  9.1.1628: fuzzy.c has a few issues
  9.1.1627: fuzzy matching can be improved
  9.1.1626: cindent: does not handle compound literals
  9.1.1625: Autocompletion slow with include- and tag-completion
  9.1.1624: Cscope not enabled on MacOS
  9.1.1623: Buffer menu does not handle unicode names correctly
  9.1.1622: Patch v9.1.1432 causes performance regressions
  9.1.1621: flicker in popup menu during cmdline autocompletion
  9.1.1620: filetype: composer.lock and symfony.lock files not recognized
  9.1.1619: Incorrect E535 error message
  9.1.1618: completion: incorrect selected index returned from complete_info()
  9.1.1617: Vim9: some error messages can be improved
  9.1.1616: xxd: possible buffer overflow with bitwise output
  9.1.1615: diff format erroneously detected
  9.1.1614: Vim9: possible variable type change
  9.1.1613: tests: test_search leaves a few swapfiles behind
  9.1.1612: Ctrl-G/Ctrl-T do not ignore the end search delimiter
  9.1.1611: possible undefined behaviour in mb_decompose()
  9.1.1610: completion: hang or E684 when 'tagfunc' calls complete()
  9.1.1609: complete: Heap-buffer overflow with complete function
  9.1.1608: No command-line completion for :unsilent {command}
  9.1.1607: :apple command detected as :append
  9.1.1606: filetype: a few more files are not recognized
  9.1.1605: cannot specify scope for chdir()
  9.1.1604: completion: incsearch highlight might be lost
  9.1.1603: completion: cannot use autoloaded funcs in 'complete' F{func}
  9.1.1602: filetype: requirements-*.txt files are not recognized
  9.1.1601: Patch v8.1.0425 was wrong
  9.1.1600: using diff anchors with hidden buffers fails silently
  9.1.1599: :bnext doesn't go to unlisted help buffers
  9.1.1598: filetype: waybar config file is not recognized
  9.1.1597: CI reports leaks in libgtk3 library
  9.1.1596: tests: Test_search_wildmenu_iminsert() depends on help file
  9.1.1595: Wayland: non-portable use of select()
  9.1.1594: completion: search completion throws errors
  9.1.1593: Confusing error when compiling incomplete try block
  9.1.1592: Vim9: crash with classes and garbage collection
  9.1.1591: VMS support can be improved
  9.1.1590: cannot perform autocompletion
  9.1.1589: Cannot disable cscope interface using configure
  9.1.1588: Vim9: cannot split dict inside command block
  9.1.1587: Wayland: timeout not updated before select()
  9.1.1586: Vim9: can define an enum/interface in a function
  9.1.1585: Wayland: gvim still needs GVIM_ENABLE_WAYLAND
  9.1.1584: using ints as boolean type
  9.1.1583: gvim window lost its icons
  9.1.1582: style issue in vim9type.c and vim9generics.c
  9.1.1581: possible memory leak in vim9generics.c
  9.1.1580: possible memory leak in vim9type.c
  9.1.1579: Coverity complains about unchecked return value
  9.1.1578: configure: comment still mentions autoconf 2.71
  9.1.1577: Vim9: no generic support yet
  9.1.1576: cannot easily trigger wildcard expansion
  9.1.1575: tabpanel not drawn correctly with wrapped lines
  9.1.1574: Dead code in mbyte.c
  9.1.1573: Memory leak when pressing Ctrl-D in cmdline mode
  9.1.1572: expanding $var does not escape whitespace for 'path'
  9.1.1571: CmdlineChanged triggered to often
  9.1.1570: Copilot suggested some improvements in cmdexpand.c
  9.1.1569: tests: Vim9 tests can be improved
  9.1.1568: need a few more default highlight groups
  9.1.1567: crash when using inline diff mode
  9.1.1566: self-referenced enum may not get freed
  9.1.1565: configure: does not consider tiny version for wayland
  9.1.1564: crash when opening popup to closing buffer
  9.1.1563: completion: ruler may disappear
  9.1.1562: close button always visible in the 'tabline'
  9.1.1561: configure: wayland test can be improved
  9.1.1560: configure: uses $PKG_CONFIG before it is defined
  9.1.1559: tests: Test_popup_complete_info_01() fails when run alone
  9.1.1558: str2blob() treats NULL string and empty string differently
  9.1.1557: not possible to anchor specific lines in difff mode
  9.1.1556: string handling in cmdexpand.c can be improved
  9.1.1555: completion: repeated insertion of leader
  9.1.1554: crash when omni-completion opens command-line window
  9.1.1553: Vim9: crash when accessing a variable in if condition
  9.1.1552: [security]: path traversal issue in tar.vim
  9.1.1551: [security]: path traversal issue in zip.vim
  9.1.1550: defaults: 'showcmd' is not enabled in non-compatible mode on Unix
  9.1.1549: filetype: pkl files are not recognized
  9.1.1548: filetype: OpenFGA files are not recognized
  9.1.1547: Wayland: missing ifdef
  9.1.1546: Vim9: error with has() and short circuit evaluation
  9.1.1545: typo in os_unix.c
  9.1.1544: :retab cannot be limited to indentation only
  9.1.1543: Wayland: clipboard appears to not be working
  9.1.1542: Coverity complains about uninitialized variable
  9.1.1541: Vim9: error when last enum value ends with a comma
  9.1.1540: completion: menu state wrong on interruption
  9.1.1539: completion: messages don't respect 'shm' setting
  9.1.1537: helptoc: still some issues when markdown code blocks
  9.1.1536: tests: test_plugin_comment uses wrong :Check command
  9.1.1535: the maximum search count uses hard-coded value 99
  9.1.1534: unnecessary code in tabpanel.c
  9.1.1533: helptoc: does not handle code sections in markdown well
  9.1.1532: termdebug: not enough ways to configure breakpoints
  9.1.1531: confusing error with nested legacy function
  9.1.1530: Missing version change in v9.1.1529
  9.1.1529: Win32: the toolbar in the GUI is old and dated
  9.1.1528: completion: crash with getcompletion()
  9.1.1527: Vim9: Crash with string compound assignment
  9.1.1526: completion: search completion match may differ in case
  9.1.1525: tests: testdir/ is a bit messy
  9.1.1524: tests: too many imports in the test suite
  9.1.1523: tests: test_clipmethod fails in non X11 environment
  9.1.1522: tests: still some ANSI escape sequences in test output
  9.1.1521: completion: pum does not reset scroll pos on reopen with 'noselect'
  9.1.1520: completion: search completion doesn't handle 'smartcase' well
  9.1.1519: tests: Test_termdebug_decimal_breakpoints() may fail
  9.1.1518: getcompletiontype() may crash
  9.1.1517: filetype: autopkgtest files are not recognized
  9.1.1516: tests: no test that 'incsearch' is updated after search completion
  9.1.1515: Coverity complains about potential unterminated strings
  9.1.1514: Coverity complains about the use of tmpfile()
  9.1.1513: resizing Vim window causes unexpected internal window width
  9.1.1512: completion: can only complete from keyword characters
  9.1.1511: tests: two edit tests change v:testing from 1 to 0
  9.1.1510: Search completion may use invalid memory
  9.1.1509: patch 9.1.1505 was not good
  9.1.1508: string manipulation can be improved in cmdexpand.c
  9.1.1507: symlinks are resolved on :cd commands
  9.1.1506: tests: missing cleanup in Test_search_cmdline_incsearch_highlight()
  9.1.1505: not possible to return completion type for :ex command
  9.1.1504: filetype: numbat files are not recognized
  9.1.1503: filetype: haxe files are not recognized
  9.1.1502: filetype: quickbms files are not recognized
  9.1.1501: filetype: flix files are not recognized
  9.1.1500: if_python: typo in python error variable
  9.1.1499: MS-Windows: no indication of ARM64 architecture
  9.1.1498: completion: 'complete' funcs behave different to 'omnifunc'
  9.1.1497: Link error with shm_open()
  9.1.1496: terminal: still not highlighting empty cells correctly
  9.1.1495: Wayland: uses $XDG_SEAT to determine seat
  9.1.1494: runtime(tutor): no French translation for Chapter 2
  9.1.1493: manually comparing positions on buffer
  9.1.1492: tests: failure when Wayland compositor fails to start
  9.1.1491: missing out-of-memory checks in cmdexpand.c
  9.1.1490: 'wildchar' does not work in search contexts
  9.1.1489: terminal: no visual highlight of empty cols with empty 'listchars'
  9.1.1488: configure: using obsolete macro AC_PROG_GCC_TRADITIONAL
  9.1.1487: :cl doesn't invoke :clist
  9.1.1486: documentation issues with Wayland
  9.1.1485: missing Wayland clipboard support
  9.1.1484: tests: Turkish locale tests fails on Mac
  9.1.1483: not possible to translation position in buffer
  9.1.1482: scrolling with 'splitkeep' and line()
  9.1.1481: gcc complains about uninitialized variable
  9.1.1480: Turkish translation outdated
  9.1.1479: regression when displaying localized percentage position
  9.1.1478: Unused assignment in ex_uniq()
  9.1.1476: no easy way to deduplicate text
  9.1.1476: missing out-of-memory checks in cmdexpand.c
  9.1.1475: completion: regression when "nearest" in 'completeopt'
  9.1.1474: missing out-of-memory check in mark.c
  9.1.1473: inconsistent range arg for :diffget/diffput
  9.1.1472: if_python: PySequence_Fast_{GET_SIZE,GET_ITEM} removed
  9.1.1471: completion: inconsistent ordering with CTRL-P
  9.1.1470: use-after-free with popup callback on error
  9.1.1469: potential buffer-underflow with invalid hl_id
  9.1.1468: filetype: bright(er)script files are not recognized
  9.1.1467: too many strlen() calls
  9.1.1466: filetype: not all lex files are recognized
  9.1.1465: tabpanel: not correctly drawn with 'equalalways'
  9.1.1464: gv does not work in operator-pending mode
  9.1.1463: Integer overflow in getmarklist() after linewise operation
  9.1.1462: missing change from patch v9.1.1461
  9.1.1461: tabpanel: tabpanel vanishes with popup menu
  9.1.1460: MS-Windows: too many strlen() calls in os_win32.c
  9.1.1459: xxd: coloring output is inefficient
  9.1.1458: tabpanel: tabs not properly updated with 'stpl'
  9.1.1457: compile warning with tabpanelopt
  9.1.1456: comment plugin fails toggling if 'cms' contains \
  9.1.1455: Haiku: dailog objects created with no reference
  9.1.1454: tests: no test for pum at line break position
  9.1.1453: tests: Test_geometry() may fail
  9.1.1452: completion: redundant check for completion flags
  9.1.1451: tabpanel rendering artifacts when scrolling
  9.1.1450: Session has wrong arglist with :tcd and :arglocal
  9.1.1449: typo in pum_display()
  9.1.1448: tabpanel is not displayed correctly when msg_scrolled
  9.1.1447: completion: crash when backspacing with fuzzy completion
  9.1.1446: filetype: cuda-gdb config files are not recognized
  9.1.1445: negative matchfuzzy scores although there is a match
  9.1.1444: Unused assignment in set_fuzzy_score()
  9.1.1443: potential buffer underflow in insertchar()
  9.1.1442: tests: Test_diff_fold_redraw() is insufficient
  9.1.1441: completion: code can be improved
  9.1.1440: too many strlen() calls in os_win32.c
  9.1.1439: Last diff folds not merged
  9.1.1438: tests: Test_breakindent_list_split() fails
  9.1.1437: MS-Windows: internal compile error in uc_list()
  9.1.1436: GUI control code is displayed on the console on startup
  9.1.1435: completion: various flaws in fuzzy completion
  9.1.1434: MS-Windows: missing out-of-memory checks in os_win32.c
  9.1.1433: Unnecessary :if when writing session
  9.1.1432: GTK GUI: Buffer menu does not handle unicode correctly
  9.1.1431: Hit-Enter Prompt when loading session files
  9.1.1430: tabpanel may flicker in the GUI
  9.1.1429: dragging outside the tabpanel changes tabpagenr
  9.1.1428: completion: register completion needs cleanup
  9.1.1427: rendering artifacts with the tabpanel
  9.1.1426: completion: register contents not completed
  9.1.1425: tabpanel: there are still some problems with the tabpanel
  9.1.1424: PMenu selection broken with multi-line selection and limits
  9.1.1423: :tag command not working correctly using Vim9 Script
  9.1.1422: scheduling of complete function can be improved
  9.1.1421: tests: need a test for the new-style tutor.tutor
  9.1.1420: tests: could need some more tests for shebang lines
  9.1.1419: It is difficult to ignore all but some events
  9.1.1418: configures GUI auto detection favors GTK2
  9.1.1417: missing info about register completion in complete_info()
  9.1.1416: completion limits not respected for fuzzy completions
  9.1.1415: potential use-after free when there is an error in 'tabpanel'
  9.1.1414: MS-Windows: compile warnings in os_win32.c
  9.1.1413: spurious CursorHold triggered in GUI on startup
  9.1.1412: tests: Test_tabpanel_tabonly() fails on larger screens
  9.1.1411: crash when calling non-existing function for tabpanel
  9.1.1410: out-of-bounds access with 'completefunc'
  9.1.1409: using f-flag in 'complete' conflicts with Neovim
  9.1.1408: not easily possible to complete from register content
  9.1.1407: Can't use getpos('v') in OptionSet when using setbufvar()
  9.1.1406: crash when importing invalid tuple
  9.1.1405: tests: no test for mapping with special keys in session file
  9.1.1404: wrong link to Chapter 2 in new-tutor
  9.1.1403: expansion of 'tabpanelopt' value adds wrong values
  9.1.1402: multi-byte mappings not properly stored in session file
  9.1.1401: list not materialized in prop_list()
  9.1.1400: [security]: use-after-free when evaluating tuple fails
  9.1.1399: tests: test_codestyle fails for auto-generated files
  9.1.1398: completion: trunc does not follow Pmenu highlighting attributes
  9.1.1397: tabpanel not correctly updated on :tabonly
  9.1.1396: 'errorformat' is a global option
  9.1.1395: search_stat not reset when pattern differs in case
  9.1.1394: tabpanel not correctly redrawn on tabonly
  9.1.1393: missing test for switching buffers and reusing curbuf
  9.1.1392: missing patch number
  9.1.1391: Vim does not have a vertical tabpanel
  9.1.1390: style: more wrong indentation
  9.1.1389: completion: still some issue when 'isexpand' contains a space
  9.1.1388: Scrolling one line too far with 'nosmoothscroll' page scrolling
  9.1.1387: memory leak when buflist_new() fails to reuse curbuf
  9.1.1386: MS-Windows: some minor problems building on AARCH64
  9.1.1385: inefficient loop for 'nosmoothscroll' scrolling
  9.1.1384: still some problem with the new tutors filetype plugin
  9.1.1383: completion: 'isexpand' option does not handle space char correct
  9.1.1382: if_ruby: unused compiler warnings from ruby internals
  9.1.1381: completion: cannot return to original text
  9.1.1380: 'eventignorewin' only checked for current buffer
  9.1.1379: MS-Windows: error when running evim when space in path
  9.1.1378: sign without text overwrites number option
  9.1.1377: patch v9.1.1370 causes some GTK warning messages
  9.1.1376: quickfix dummy buffer may remain as dummy buffer
  9.1.1375: [security]: possible heap UAF with quickfix dummy buffer
  9.1.1374: completion: 'smartcase' not respected when filtering matches
  9.1.1373: 'completeopt' checking logic can be simplified
  9.1.1372: style: braces issues in various files
  9.1.1371: style: indentation and brace issues in insexpand.c
  9.1.1370: CI Tests favor GTK2 over GTK3
  9.1.1369: configure still using autoconf 2.71
  9.1.1368: GTK3 and GTK4 will drop numeric cursor support.
  9.1.1367: too many strlen() calls in gui.c
  9.1.1366: v9.1.1364 unintentionally changed sign.c and sound.c
  9.1.1365: MS-Windows: compile warnings and too many strlen() calls
  9.1.1364: style: more indentation issues
  9.1.1363: style: inconsistent indentation in various files
  9.1.1362: Vim9: type ignored when adding tuple to instance list var
  9.1.1361: [security]: possible use-after-free when closing a buffer
  9.1.1360: filetype: GNU Radio companion files are not recognized
  9.1.1359: filetype: GNU Radio config files are not recognized
  9.1.1358: if_lua: compile warnings with gcc15
  9.1.1357: Vim incorrectly escapes tags with "[" in a help buffer
  9.1.1356: Vim9: crash when unletting variable
  9.1.1355: The pum_redraw() function is too complex
  9.1.1354: tests: Test_terminalwinscroll_topline() fails on Windows
  9.1.1353: missing change from v9.1.1350
  9.1.1352: style: inconsistent indent in insexpand.c
  9.1.1351: Return value of getcmdline() inconsistent in CmdlineLeavePre
  9.1.1350: tests: typo in Test_CmdlineLeavePre_cabbr()
  9.1.1349: CmdlineLeavePre may trigger twice
  9.1.1348: still E315 with the terminal feature
  9.1.1347: small problems with gui_w32.c
  9.1.1346: missing out-of-memory check in textformat.c
  9.1.1345: tests: Test_xxd_color2() test failure dump diff is misleading
  9.1.1344: double free in f_complete_match() (after v9.1.1341)
  9.1.1343: filetype: IPython files are not recognized
  9.1.1342: Shebang filetype detection can be improved
  9.1.1341: cannot define completion triggers
  9.1.1340: cannot complete :filetype arguments
  9.1.1339: missing out-of-memory checks for enc_to_utf16()/utf16_to_enc()
  9.1.1338: Calling expand() interferes with cmdcomplete_info()
  9.1.1337: Undo corrupted with 'completeopt' "preinsert" when switching buffer
  9.1.1336: comment plugin does not support case-insensitive 'commentstring'
  9.1.1335: Coverity complains about Null pointer dereferences
  9.1.1334: Coverity complains about unchecked return value
  9.1.1333: Coverity: complains about unutilized variable
  9.1.1332: Vim9: segfault when using super within a lambda
  9.1.1331: Leaking memory with cmdcomplete()
  9.1.1330: may receive E315 in terminal
  9.1.1329: cannot get information about command line completion
  9.1.1328: too many strlen() calls in indent.c
  9.1.1327: filetype: nroff detection can be improved
  9.1.1326: invalid cursor position after 'tagfunc'
  9.1.1325: tests: not checking error numbers properly
  9.1.1324: undefined behaviour if X11 connection dies
  9.1.1323: b:undo_ftplugin not executed when re-using buffer
  9.1.1322: small delete register cannot paste multi-line correctly
  9.1.1321: filetype: MS ixx and mpp files are not recognized
  9.1.1320: filetype: alsoft config files are not recognized
  9.1.1319: Various typos in the code, issue with test_inst_complete.vim
  9.1.1318: tests: test_format fails
  9.1.1317: noisy error when restoring folds from session fails
  9.1.1316: missing memory allocation failure in os_mswin.c
  9.1.1315: completion: issue with fuzzy completion and 'completefuzzycollect'
  9.1.1314: max allowed string width too small
  9.1.1313: compile warning about uninitialized value
  9.1.1312: tests: Test_backupskip() fails when HOME is defined
  9.1.1311: completion: not possible to limit number of matches
  9.1.1310: completion: redundant check for preinsert effect
  9.1.1309: tests: no test for 'pummaxwidth' with non-truncated "kind"
  9.1.1308: completion: cannot order matches by distance to cursor
  9.1.1307: make syntax does not reliably detect different flavors
  9.1.1306: completion menu rendering can be improved
  9.1.1305: completion menu active after switching windows/tabs
  9.1.1304: filetype: some man files are not recognized
  9.1.1303: missing out-of-memory check in linematch.c
  9.1.1302: Coverity warns about using uninitialized value
  9.1.1301: completion: cannot configure completion functions with 'complete'
  9.1.1300: wrong detection of -inf
  9.1.1299: filetype: mbsyncrc files are not recognized
  9.1.1298: define_function() is too long
  9.1.1297: Ctrl-D scrolling can get stuck
  9.1.1296: completion: incorrect truncation logic
  9.1.1295: clientserver: does not handle :stopinsert correctly
  9.1.1294: gui tabline menu does not use confirm when closing tabs
  9.1.1293: comment plugin does not handle 'exclusive' selection for comment object
  9.1.1292: statusline not correctly evaluated
  9.1.1291: too many strlen() calls in buffer.c
  9.1.1290: tests: missing cleanup in test_filetype.vim
  9.1.1289: tests: no test for matchparen plugin with WinScrolled event
  9.1.1288: Using wrong window in ll_resize_stack()
  9.1.1287: quickfix code can be further improved
  9.1.1286: filetype: help files not detected when 'iskeyword' includes ":"
  9.1.1285: Vim9: no error message for missing method after "super."
  9.1.1284: not possible to configure pum truncation char
  9.1.1283: quickfix stack is limited to 10 items
  9.1.1282: Build and test failure without job feature
  9.1.1281: extra newline output when editing stdin
  9.1.1280: trailing additional semicolon in get_matches_in_str()
  9.1.1279: Vim9: null_object and null_class are no reserved names
  9.1.1278: Vim9: too long functions in vim9type.c
  9.1.1277: tests: trailing comment char in test_popupwin
  9.1.1276: inline word diff treats multibyte chars as word char
  9.1.1275: MS-Windows: Not possible to pass additional flags to Make_mvc
  9.1.1274: Vim9: no support for object&lt;type&gt; as variable type
  9.1.1273: Coverity warns about using uninitialized value
  9.1.1272: completion: in keyword completion Ctrl_P cannot go back after Ctrl_N
  9.1.1271: filetype: Power Query files are not recognized
  9.1.1270: missing out-of-memory checks in buffer.c
  9.1.1269: completion: compl_shown_match is updated when starting keyword completion
  9.1.1268: filetype: dax files are not recognized
  9.1.1267: Vim9: no support for type list/dict&lt;object&lt;any&gt;&gt;
  9.1.1266: MS-Windows: type conversion warnings
  9.1.1265: tests: no tests for typing normal char during completion
  9.1.1264: Vim9: error when comparing objects
  9.1.1263: string length wrong in get_last_inserted_save()
  9.1.1262: heap-buffer-overflow with narrow 'pummaxwidth' value
  9.1.1261: No test for 'pummaxwidth' non-truncated items
  9.1.1260: Hang when filtering buffer with NUL bytes
  9.1.1259: some issues with comment package and tailing spaces
  9.1.1258: regexp: max \U and \%U value is limited by INT_MAX
  9.1.1257: Mixing vim_strsize() with mb_ptr2cells() in pum_redraw()
  9.1.1256: if_python: duplicate tuple data entries
  9.1.1255: missing test condition for 'pummaxwidth' setting
  9.1.1254: need more tests for the comment plugin
  9.1.1253: abort when closing window with attached quickfix data
  9.1.1252: typos in code and docs related to 'diffopt' "inline:"
  9.1.1251: if_python: build error with tuples and dynamic python
  9.1.1250: cannot set the maximum popup menu width
  9.1.1249: tests: no test that 'listchars' "eol" doesn't affect "gM"
  9.1.1248: compile error when building without FEAT_QUICKFIX
  9.1.1247: fragile setup to get (preferred) keys from key_name_entry
  9.1.1246: coverity complains about some changes in v9.1.1243
  9.1.1245: need some more tests for curly braces evaluation
  9.1.1244: part of patch v9.1.1242 was wrong
  9.1.1243: diff mode is lacking for changes within lines
  9.1.1242: Crash when evaluating variable name
  9.1.1241: wrong preprocessort indentation in term.c
  9.1.1240: Regression with ic/ac text objects and comment plugin
  9.1.1239: if_python: no tuple data type support
  9.1.1238: wrong cursor column with 'set splitkeep=screen'
  9.1.1237: Compile error with C89 compiler in term.c
  9.1.1236: tests: test_comments leaves swapfiles around
  9.1.1235: cproto files are outdated
  9.1.1234: Compile error when SIZE_MAX is not defined
  9.1.1233: Coverity warns about NULL pointer when triggering WinResized
  9.1.1232: Vim script is missing the tuple data type
  9.1.1231: filetype: SPA JSON files are not recognized
  9.1.1230: inconsistent CTRL-C behaviour for popup windows
  9.1.1229: the comment plugin can be improved
  9.1.1228: completion: current position column wrong after got a match
  9.1.1227: no tests for the comment package
  9.1.1226: "shellcmdline" completion doesn't work with input()
  9.1.1225: extra NULL check in VIM_CLEAR()
  9.1.1224: cannot :put while keeping indent
  9.1.1223: wrong translation used for encoding failures
  9.1.1222: using wrong length for last inserted string
  9.1.1221: Wrong cursor pos when leaving Insert mode just after 'autoindent'
  9.1.1220: filetype: uv.lock file not recognized
  9.1.1219: Strange error with wrong type for matchfuzzy() "camelcase"
  9.1.1218: missing out-of-memory check in filepath.c
  9.1.1217: tests: typos in test_matchfuzzy.vim
  9.1.1216: Pasting the '.' register multiple times may not work
  9.1.1215: Patch 9.1.1213 has some issues
  9.1.1214: matchfuzzy() can be improved for camel case matches
  9.1.1213: cannot :put while keeping indent
  9.1.1212: too many strlen() calls in edit.c
  9.1.1212: filetype: logrotate'd pacmanlogs are not recognized
  9.1.1211: TabClosedPre is triggered just before the tab is being freed
  9.1.1210: translation(ru): missing Russian translation for the new tutor
  9.1.1209: colorcolumn not drawn after virtual text lines
  9.1.1208: MS-Windows: not correctly restoring alternate screen on Win 10
  9.1.1207: MS-Windows: build warning in filepath.c
  9.1.1206: tests: test_filetype fails when a file is a directory
  9.1.1205: completion: preinserted text not removed when closing pum
  9.1.1204: MS-Windows: crash when passing long string to expand()
  9.1.1203: matchparen keeps cursor on case label in sh filetype
  9.1.1202: Missing TabClosedPre autocommand
  9.1.1201: 'completefuzzycollect' does not handle dictionary correctly
  9.1.1200: cmdline pum not cleared for input() completion
  9.1.1199: gvim uses hardcoded xpm icon file
  9.1.1198: [security]: potential data loss with zip.vim
  9.1.1197: process_next_cpt_value() uses wrong condition
  9.1.1196: filetype: config files for container tools are not recognized
  9.1.1195: inside try-block: fn body executed with default arg undefined
  9.1.1194: filetype: false positive help filetype detection
  9.1.1193: Unnecessary use of STRCAT() in au_event_disable()
  9.1.1192: Vim crashes with term response debug logging enabled
  9.1.1191: tests: test for patch 9.1.1186 doesn't fail without the patch
  9.1.1190: C indentation does not detect multibyte labels
  9.1.1189: if_python: build error due to incompatible pointer types
  9.1.1188: runtime(tera): tera support can be improved
  9.1.1187: matchparen plugin wrong highlights shell case statement
  9.1.1186: filetype: help files in git repos are not detected
  9.1.1185: endless loop with completefuzzycollect and no match found
  9.1.1184: Unnecessary use of vim_tolower() in vim_strnicmp_asc()
  9.1.1083: "above" virtual text breaks cursorlineopt=number
  9.1.1182: No cmdline completion for 'completefuzzycollect'
  9.1.1181: Unnecessary STRLEN() calls in insexpand.c
  9.1.1180: short-description
  9.1.1179: too many strlen() calls in misc2.c
  9.1.1178: not possible to generate completion candidates using fuzzy matching
  9.1.1177: filetype: tera files not detected
  9.1.1176: wrong indent when expanding multiple lines
  9.1.1175: inconsistent behaviour with exclusive selection and motion commands
  9.1.1174: tests: Test_complete_cmdline() may fail
  9.1.1173: filetype: ABNF files are not detected
  9.1.1172: [security]: overflow with 'nostartofline' and Ex command in tag file
  9.1.1171: tests: wrong arguments passed to assert_equal()
  9.1.1170: wildmenu highlighting in popup can be improved
  9.1.1169: using global variable for get_insert()/get_lambda_name()
  9.1.1168: wrong flags passed down to nextwild()
  9.1.1167: mark '] wrong after copying text object
  9.1.1166: command-line auto-completion hard with wildmenu
  9.1.1165: diff: regression with multi-file diff blocks
  9.1.1164: [security]: code execution with tar.vim and special crafted tar files
  9.1.1163: $MYVIMDIR is set too late
  9.1.1162: completion popup not cleared in cmdline
  9.1.1161: preinsert requires bot "menu" and "menuone" to be set
  9.1.1160: Ctrl-Y does not work well with "preinsert" when completing items
  9.1.1159: $MYVIMDIR may not always be set
  9.1.1158: :verbose set has wrong file name with :compiler!
  9.1.1157: command completion wrong for input()
  9.1.1156: tests: No test for what patch 9.1.1152 fixes
  9.1.1155: Mode message not cleared after :silent message
  9.1.1154: Vim9: not able to use autoload class accross scripts
  9.1.1153: build error on Haiku
  9.1.1152: Patch v9.1.1151 causes problems
  9.1.1151: too many strlen() calls in getchar.c
  9.1.1150: :hi completion may complete to wrong value
  9.1.1149: Unix Makefile does not support Brazilian lang for the installer
  9.1.1148: Vim9: finding imported scripts can be further improved
  9.1.1147: preview-window does not scroll correctly
  9.1.1146: Vim9: wrong context being used when evaluating class member
  9.1.1145: multi-line completion has wrong indentation for last line
  9.1.1144: no way to create raw strings from a blob
  9.1.1143: illegal memory access when putting a register
  9.1.1142: tests: test_startup fails if $HOME/$XDG_CONFIG_HOME is defined
  9.1.1141: Misplaced comment in readfile()
  9.1.1140: filetype: m17ndb files are not detected
  9.1.1139: [fifo] is not displayed when editing a fifo
  9.1.1138: cmdline completion for :hi is too simplistic
  9.1.1137: ins_str() is inefficient by calling STRLEN()
  9.1.1136: Match highlighting marks a buffer region as changed
  9.1.1135: 'suffixesadd' doesn't work with multiple items
  9.1.1134: filetype: Guile init file not recognized
  9.1.1133: filetype: xkb files not recognized everywhere
  9.1.1132: Mark positions wrong after triggering multiline completion
  9.1.1131: potential out-of-memory issue in search.c
  9.1.1130: 'listchars' "precedes" is not drawn on Tabs.
  9.1.1129: missing out-of-memory test in buf_write()
  9.1.1128: patch 9.1.1119 caused a regression with imports
  9.1.1127: preinsert text is not cleaned up correctly
  9.1.1126: patch 9.1.1121 used a wrong way to handle enter
  9.1.1125: cannot loop through pum menu with multiline items
  9.1.1124: No test for 'listchars' "precedes" with double-width char
  9.1.1123: popup hi groups not falling back to defaults
  9.1.1122: too many strlen() calls in findfile.c
  9.1.1121: Enter does not insert newline with "noselect"
  9.1.1120: tests: Test_registers fails
  9.1.1119: Vim9: Not able to use an autoloaded class from another autoloaded script
  9.1.1118: tests: test_termcodes fails
  9.1.1117: there are a few minor style issues
  9.1.1116: Vim9: super not supported in lambda expressions
  9.1.1115: [security]: use-after-free in str_to_reg()
  9.1.1114: enabling termguicolors automatically confuses users
  9.1.1113: tests: Test_terminal_builtin_without_gui waits 2 seconds
  9.1.1112: Inconsistencies in get_next_or_prev_match()
  9.1.1111: Vim9: variable not found in transitive import
  9.1.1110: Vim tests are slow and flaky
  9.1.1109: cmdexpand.c hard to read
  9.1.1108: 'smoothscroll' gets stuck with 'listchars' "eol"
  9.1.1107: cannot loop through completion menu with fuzzy
  9.1.1106: tests: Test_log_nonexistent() causes asan failure
  9.1.1105: Vim9: no support for protected new() method
  9.1.1104: CI: using Ubuntu 22.04 Github runners
  9.1.1103: if_perl: still some compile errors with Perl 5.38
  9.1.1102: tests: Test_WinScrolled_Resized_eiw() uses wrong filename
  9.1.1101: insexpand.c hard to read
  9.1.1100: tests: Test_log_nonexistent only works on Linux
  9.1.1099: Vim9: import with extends may crash
  9.1.1098: leaking memory with completing multi lines
  9.1.1097: --log with non-existent path causes a crash
  9.1.1096: if_perl: Perl 5.38 adds new symbols causing link failure
  9.1.1095: tests: matchparen plugin test wrongly named
  9.1.1094: Vim9: problem finding implemented method in type hierarchy
  9.1.1093: tests: output of test ...win32_ctrl_z depends on python version
  9.1.1092: tests: fix expected return code for python 3.13 on Windows
  9.1.1091: tests: timeout might be a bit too small
  9.1.1090: tests: test_terminwscroll_topline2 unreliable
  9.1.1089: tests: No check when tests are run under Github actions
  9.1.1088: tests: plugin tests are named inconsistently
  9.1.1087: Vim9: import with extends may crash
  9.1.1086: completion doesn't work with multi lines
  9.1.1085: filetype: cmmt files are not recognized
  9.1.1084: Unable to persistently ignore events in a window and its buffers
  9.1.1083: setreg() doesn't correctly handle mbyte chars in blockwise mode
  9.1.1082: unexpected DCS responses may cause out of bounds reads
  9.1.1081: has('bsd') is true for GNU/Hurd
  9.1.1080: filetype: Mill files are not recognized
  9.1.1079: GUI late startup leads to uninitialized scrollbars
  9.1.1078: Terminal ansi colors off by one after tgc reset
  9.1.1077: included syntax items do not understand contains=TOP
  9.1.1076: vim_strnchr() is strange and unnecessary
  9.1.1075: Vim9: len variable not used in compile_load()
  9.1.1074: Strange error when heredoc marker starts with "trim"
  9.1.1073: tests: test_compiler fails on Windows without Maven
  9.1.1072: 'diffopt' "linematch" cannot be used with {n} less than 10
  9.1.1071: args missing after failing to redefine a function
  9.1.1070: Cannot control cursor positioning of getchar()
  9.1.1069: preinsert text completions not deleted with &lt;C-W&gt;/&lt;C-U&gt;
  9.1.1068: getchar() can't distinguish between C-I and Tab
  9.1.1067: tests: Test_termwinscroll_topline2 fails on MacOS
  9.1.1066: heap-use-after-free and stack-use-after-scope with :14verbose
  9.1.1065: no digraph for "Approaches the limit"
  9.1.1064: not possible to use plural forms with gettext()
  9.1.1063: too many strlen() calls in userfunc.c
  9.1.1062: terminal: E315 when dragging the terminal with the mouse
  9.1.1061: tests: test_glvs fails when unarchiver not available
  9.1.1060: Vim always enables 'termguicolors' in a terminal
  9.1.1059: completion: input text deleted with preinsert when adding leader
  9.1.1058: translation(sr): Missing Serbian translation for the tutor
  9.1.1057: Superfluous cleanup steps in test_ins_complete.vim
  9.1.1056: Vim doesn't highlight to be inserted text when completing
  9.1.1055: make install fails because of a missing dependency
  9.1.1054: Vim doesn't work well with TERM=xterm-direct
  9.1.1053: "nosort" enables fuzzy filtering even if "fuzzy" isn't in 'completeopt'
  9.1.1052: tests: off-by-one error in CheckCWD in test_debugger.vim
  9.1.1051: tests: no support for env variables when running Vim in terminal
  9.1.1050: too many strlen() calls in os_unix.c
  9.1.1049: insert-completed items are always sorted
  9.1.1048: crash after scrolling and pasting in silent Ex mode
  9.1.1047: Makefiles uses non-portable syntax
  9.1.1046: fuzzymatching doesn't prefer matching camelcase
  9.1.1045: filetype: N-Tripels and TriG files are not recognized
  9.1.1044: Vim9: Patch 9.1.1014 causes regressions
  9.1.1043: [security]: segfault in win_line()
  9.1.1042: filetype: just files are not recognized
  9.1.1041: Vim9: out-of-bound access when echoing an enum
  9.1.1040: Vim9: imported type cannot be used as func return type
  9.1.1039: Vim9: comments are outdated
  9.1.1038: tests: test_channel.py fails with IPv6
  9.1.1037: Vim9: confusing error when using abstract method via super
  9.1.1036: make install fails when using shadowdir
  9.1.1035: Vim9: memory leak with blob2str()
  9.1.1033: Vim9: compiling abstract method fails without return
  9.1.1033: tests: shaderslang was removed from test_filetype erroneously
  9.1.1032: link error when FEAT_SPELL not defined
  9.1.1031: Coverity complains about insecure data handling
  9.1.1030: filetype: setting bash filetype is backwards incompatible
  9.1.1029: the installer can be improved
  9.1.1028: too many strlen() calls in screen.c
  9.1.1027: no sanitize check when running linematch
  9.1.1026: filetype: swc configuration files are not recognized
  9.1.1025: wrong return type of blob2str()
  9.1.1024: blob2str/str2blob() do not support list of strings
  9.1.1023: Coverity complains about dereferencing NULL pointer
  9.1.1022: linematch option value not completed
  9.1.1021: string might be used without a trailing NUL
  9.1.1020: no way to get current selected item in a async context
  9.1.1019: filetype: fd ignore files are not recognized
  9.1.1018: v9.1.0743 causes regression with diff mode
  9.1.1017: Vim9: Patch 9.1.1013 causes a few problems
  9.1.1016: Not possible to convert string2blob and blob2string
  9.1.1015: Coverity complains about dereferencing NULL value
  9.1.1014: Vim9: variable not found in transitive import
  9.1.1013: Vim9: Regression caused by patch v9.1.0646
  9.1.1012: Vim9: class interface inheritance not correctly working
  9.1.1011: popupmenu internal error with some abbr in completion item
  9.1.1010: filetype: VisualCode setting file not recognized
  9.1.1009: diff feature can be improved
  9.1.1008: tests: test for patch 9.1.1006 doesn't fail without the patch
  9.1.1007: filetype: various ignore are not recognized
  9.1.1006: PmenuMatch completion highlight can be combined
  9.1.1005: completion text is highlighted even with no pattern found
  9.1.1004: tests: a few termdebug tests are flaky
  9.1.1003: [security]: heap-buffer-overflow with visual mode
  9.1.1002: Vim9: unknown func error with interface declaring func var
  9.1.1001: ComplMatchIns highlight hard to read on light background
  9.1.1000: tests: ruby tests fail with Ruby 3.4
  9.1.0999: Vim9: leaking finished exception
  9.1.0998: filetype: TI assembly files are not recognized
  9.1.0997: too many strlen() calls in drawscreen.c
  9.1.0996: ComplMatchIns may highlight wrong text
  9.1.0995: filetype: shaderslang files are not detected
  9.1.0994: Vim9: not able to use comment after opening curly brace
  9.1.0993: New 'cmdheight' behavior may be surprising
  9.1.0992: Vim9: double-free after v9.1.0988
  9.1.0991: v:stacktrace has wrong type in Vim9 script
  9.1.0990: Inconsistent behavior when changing cmdheight
  9.1.0989: Vim9: Whitespace after the final enum value causes a syntax error
  9.1.0988: Vim9: no error when using uninitialized var in new()
  9.1.0987: filetype: cake files are not recognized
  9.1.0986: filetype: 'jj' filetype is a bit imprecise
  9.1.0985: Vim9: some ex commands can be shortened
  9.1.0984: exception handling can be improved
  9.1.0983: not able to get the displayed items in complete_info()
  9.1.0982: TI linker files are not recognized
  9.1.0981: tests: typo in test_filetype.vim
  9.1.0980: no support for base64 en-/decoding functions in Vim Script
  9.1.0979: VMS: type warning with $XDG_VIMRC_FILE
  9.1.0978: GUI tests sometimes fail when setting 'scroll' options
  9.1.0977: filetype: msbuild filetypes are not recognized
  9.1.0976: Vim9: missing return statement with throw
  9.1.0975: Vim9: interpolated string expr not working in object methods
  9.1.0974: typo in change of commit v9.1.0873
  9.1.0973: too many strlen() calls in fileio.c
  9.1.0972: filetype: TI linker map files are not recognized
  9.1.0971: filetype: SLNX files are not recognized
  9.1.0970: VMS: build errors on VMS architecture
  9.1.0969: ghostty not using kitty protocol by default
  9.1.0968: tests: GetFileNameChecks() isn't fully sorted by filetype name
  9.1.0967: SpotBugs compiler setup can be further improved
  9.1.0966: Vim9: :enum command can be shortened
  9.1.0965: filetype: sh filetype set when detecting the use of bash
  9.1.0964: MS-Windows: sed error with MinGW
  9.1.0963: fuzzy-matching does not prefer full match
  9.1.0962: filetype: bun.lock file is not recognized
  9.1.0961: filetype: TI gel files are not recognized
  9.1.0960: filetype: hy history files are not recognized
  9.1.0959: Coverity complains about type conversion
  9.1.0958: filetype: supertux2 config files detected as lisp
  9.1.0957: MS-Windows: conversion warnings
  9.1.0956: completion may crash, completion highlight wrong with preview window
  9.1.0955: Vim9: vim9compile.c can be further improved
  9.1.0954: popupmenu.c can be improved
  9.1.0953: filetype: APKBUILD files not correctly detected
  9.1.0952: Vim9: missing type checking for any type assignment
  9.1.0951: filetype: jshell files are not recognized
  9.1.0950: filetype: fennelrc files are not recognized
  9.1.0949: popups inconsistently shifted to the left
  9.1.0948: Missing cmdline completion for :pbuffer
  9.1.0947: short-description
  9.1.0946: cross-compiling fails on osx-arm64
  9.1.0945: ComplMatchIns highlight doesn't end after inserted text
  9.1.0944: tests: test_registers fails when not run under X11
  9.1.0943: Vim9: vim9compile.c can be further improved
  9.1.0942: a few typos were found
  9.1.0941: ComplMatchIns doesn't work after multibyte chars
  9.1.0940: Wrong cursor shape with "gq" and 'indentexpr' executes :normal
  9.1.0939: make installtutor fails
  9.1.0938: exclusive selection not respected when re-selecting block mode
  9.1.0937: test_undolist() is flaky
  9.1.0936: cannot highlight completed text
  9.1.0935: SpotBugs compiler can be improved
  9.1.0934: hard to view an existing buffer in the preview window
  9.1.0933: Vim9: vim9compile.c can be further improved
  9.1.0932: new Italian tutor not installed
  9.1.0931: ml_get error in terminal buffer
  9.1.0930: tests: test_terminal2 may hang in GUI mode
  9.1.0929: filetype: lalrpop files are not recognized
  9.1.0928: tests: test_popupwin fails because the filter command fails
  9.1.0927: style issues in insexpand.c
  9.1.0926: filetype: Pixi lock files are not recognized
  9.1.0925: Vim9: expression compiled when not necessary
  9.1.0924: patch 9.1.0923 causes issues
  9.1.0923: too many strlen() calls in filepath.c
  9.1.0923: wrong MIN macro in popupmenu.c
  9.1.0921: popupmenu logic is a bit convoluted
  9.1.0920: Vim9: compile_assignment() too long
  9.1.0919: filetype: some assembler files are not recognized
  9.1.0918: tiny Vim crashes with fuzzy buffer completion
  9.1.0917: various vartabstop and shiftround bugs when shifting lines
  9.1.0916: messages.c is exceeding 80 columns
  9.1.0915: GVim: default font size a bit too small
  9.1.0914: Vim9: compile_assignment() is too long
  9.1.0913: no error check for neg values for 'messagesopt'
  9.1.0912: xxd: integer overflow with sparse files and -autoskip
  9.1.0911: Variable name for 'messagesopt' doesn't match short name
  9.1.0910: 'messagesopt' does not check max wait time
  9.1.0909: Vim9: crash when calling instance method
  9.1.0908: not possible to configure :messages
  9.1.0907: printoptions:portrait does not change postscript Orientation
  9.1.0906: filetype: Nvidia PTX files are not recognized
  9.1.0905: Missing information in CompleteDone event
  9.1.0904: Vim9: copy-paste error in class_defining_member()
  9.1.0903: potential overflow in spell_soundfold_wsal()
  9.1.0902: filetype: Conda configuration files are not recognized
  9.1.0901: MS-Windows: vimtutor batch script can be improved
  9.1.0900: Vim9: digraph_getlist() does not accept bool arg
  9.1.0899: default for 'backspace' can be set in C code
  9.1.0898: runtime(compiler): pytest compiler not included
  9.1.0897: filetype: pyrex files are not detected
  9.1.0896: completion list wrong after v9.1.0891
  9.1.0895: default history value is too small
  9.1.0894: No test for what the spotbug compiler parses
  9.1.0893: No test that undofile format does not regress
  9.1.0892: the max value of 'tabheight' is limited by other tabpages
  9.1.0891: building the completion list array is inefficient
  9.1.0890: %! item not allowed for 'rulerformat'
  9.1.0889: Possible unnecessary redraw after adding/deleting lines
  9.1.0888: leftcol property not available in getwininfo()
  9.1.0887: Wrong expression in sign.c
  9.1.0886: filetype: debian control file not detected
  9.1.0885: style of sign.c can be improved
  9.1.0884: gcc warns about uninitialized variable
  9.1.0883: message history cleanup is missing some tests
  9.1.0882: too many strlen() calls in insexpand.c
  9.1.0881: GUI: message dialog may not get focus
  9.1.0880: filetype: C3 files are not recognized
  9.1.0879: source is not consistently formatted
  9.1.0878: termdebug: cannot enable DEBUG mode
  9.1.0877: tests: missing test for termdebug + decimal signs
  9.1.0876: filetype: openCL files are not recognized
  9.1.0875: filetype: hyprlang detection can be improved
  9.1.0874: filetype: karel files are not detected
  9.1.0873: filetype: Vivado files are not recognized
  9.1.0872: No test for W23 message
  9.1.0871: getcellpixels() can be further improved
  9.1.0870: too many strlen() calls in eval.c
  9.1.0869: Problem: curswant not set on gm in folded line
  9.1.0868: the warning about missing clipboard can be improved
  9.1.0867: ins_compl_add() has too many args
  9.1.0866: filetype: LLVM IR files are not recognized
  9.1.0865: filetype: org files are not recognized
  9.1.0864: message history is fixed to 200
  9.1.0863: getcellpixels() can be further improved
  9.1.0862: 'wildmenu' not enabled by default in nocp mode
  9.1.0861: Vim9: no runtime check for object member access of any var
  9.1.0860: tests: mouse_shape tests use hard code sleep value
  9.1.0859: several problems with the GLVS plugin
  9.1.0858: Coverity complains about dead code
  9.1.0857: xxd: --- is incorrectly recognized as end-of-options
  9.1.0856: mouseshape might be wrong on r and gr
  9.1.0855: setting 'cmdheight' may cause hit-enter-prompt
  9.1.0854: cannot get terminal cell size
  9.1.0853: filetype: kubernetes config file not recognized
  9.1.0852: No warning when X11 registers are not available
  9.1.0851: too many strlen() calls in getchar.c
  9.1.0850: Vim9: cannot access nested object inside objects
  9.1.0849: there are a few typos in the source
  9.1.0848: if_lua: v:false/v:true are not evaluated to boolean
  9.1.0847: tests: test_popupwin fails because of updated help file
  9.1.0846: debug symbols for xxd are not cleaned in Makefile
  9.1.0845: vimtutor shell script can be improved
  9.1.0844: if_python: no way to pass local vars to python
  9.1.0843: too many strlen() calls in undo.c
  9.1.0842: not checking for the sync() systemcall
  9.1.0841: tests: still preferring python2 over python3
  9.1.0840: filetype: idris2 files are not recognized
  9.1.0839: filetype: leo files are not recognized
  9.1.0838: vimtutor is bash-specific
  9.1.0837: cross-compiling has some issues
  9.1.0836: The vimtutor can be improved
  9.1.0835: :setglobal doesn't work properly for 'ffu' and 'tsrfu'
  9.1.0834: tests: 2html test fails
  9.1.0833: CI: recent ASAN changes do not work for indent tests
  9.1.0832: :set doesn't work for 'cot' and 'bkc' after :setlocal
  9.1.0831: 'findexpr' can't be used as lambad or Funcref
  9.1.0830: using wrong highlight group for spaces for popupmenu
  9.1.0829: Vim source code uses a mix of tabs and spaces
  9.1.0828: string_T struct could be used more often
  9.1.0827: CI: tests can be improved
  9.1.0826: filetype: sway files are not recognized
  9.1.0825: compile error for non-diff builds
  9.1.0824: too many strlen() calls in register.c
  9.1.0823: filetype: Zephyr overlay files not recognized
  9.1.0822: topline might be changed in diff mode unexpectedly
  9.1.0821: 'findexpr' completion doesn't set v:fname to cmdline argument
  9.1.0820: tests: Mac OS tests are too flaky
  9.1.0819: tests: using findexpr and imported func not tested
  9.1.0818: some global functions are only used in single files
  9.1.0817: termdebug: cannot evaluate expr in a popup
  9.1.0816: tests: not clear what tests cause asan failures
  9.1.0815: "above" virtual text causes wrong 'colorcolumn' position
  9.1.0814: mapset() may remove unrelated mapping
  9.1.0813: no error handling with setglobal and number types
  9.1.0812: Coverity warns about dereferencing NULL ptr
  9.1.0811: :find expansion does not consider 'findexpr'
  9.1.0810: cannot easily adjust the |:find| command
  9.1.0809: filetype: petalinux config files not recognized
  9.1.0808: Terminal scrollback doesn't shrink when decreasing 'termwinscroll'
  9.1.0807: tests: having 'nolist' in modelines isn't always desired
  9.1.0806: tests: no error check when setting global 'briopt'
  9.1.0805: tests: minor issues in gen_opt_test.vim
  9.1.0804: tests: no error check when setting global 'cc'
  9.1.0803: tests: no error check when setting global 'isk'
  9.1.0802: tests: no error check when setting global 'fdm' to empty value
  9.1.0801: tests: no error check when setting global 'termwinkey'
  9.1.0800: tests: no error check when setting global 'termwinsize'
  9.1.0799: tests: gettwinvar()/gettabwinvar() tests are not comprehensive
  9.1.0798: too many strlen() calls in cmdhist.c
  9.1.0797: testing of options can be further improved
  9.1.0796: filetype: libtool files are not recognized
  9.1.0795: filetype: Vivado memory info file are not recognized
  9.1.0794: tests: tests may fail on Windows environment
  9.1.0793: xxd: -e does add one extra space
  9.1.0792: tests: Test_set_values() is not comprehensive enough
  9.1.0791: tests: errors in gen_opt_test.vim are not shown
  9.1.0790: Amiga: AmigaOS4 build should use default runtime (newlib)
  9.1.0789: tests: ':resize + 5' has invalid space after '+'
  9.1.0788: &lt;CSI&gt;27;&lt;mod&gt;u is not decoded to literal Escape in kitty/foot
  9.1.0787: cursor position changed when using hidden terminal
  9.1.0786: tests: quickfix update test does not test location list
  9.1.0785: cannot preserve error position when setting quickfix list
  9.1.0784: there are several problems with python 3.13
  9.1.0783: 'spell' option setting has problems
  9.1.0782: tests: using wrong neomuttlog file name
  9.1.0781: tests: test_filetype fails
  9.1.0780: MS-Windows: incorrect Win32 error checking
  9.1.0779: filetype: neomuttlog files are not recognized
  9.1.0778: filetype: lf config files are not recognized
  9.1.0777: filetype: Some upstream php files are not recognized
  9.1.0776: test_strftime may fail because of missing TZ data
  9.1.0775: tests: not enough tests for setting options
  9.1.0774: "shellcmdline" doesn't work with getcompletion()
  9.1.0773: filetype: some Apache files are not recognized
  9.1.0772: some missing changes from v9.1.0771
  9.1.0771: completion attribute hl_group is confusing
  9.1.0770: current command line completion is a bit limited
  9.1.0769: filetype: MLIR files are not recognized
  9.1.0768: MS-Windows: incorrect cursor position when restoring screen
  9.1.0767: A condition is always true in ex_getln.c
  9.1.0766: too many strlen() calls in ex_getln.c
  9.1.0765: No test for patches 6.2.418 and 7.3.489
  9.1.0764: [security]: use-after-free when closing a buffer
  9.1.0763: tests: cannot run single syntax tests
  9.1.0762: 'cedit', 'termwinkey' and 'wildchar' may not be parsed correctly
  9.1.0761: :cd completion fails on Windows with backslash in path
  9.1.0760: tests: no error reported, if gen_opt_test.vim fails
  9.1.0759: screenpos() may return invalid position
  9.1.0758: it's possible to set an invalid key to 'wildcharm'
  9.1.0757: tests: messages files contains ANSI escape sequences
  9.1.0756: missing change from patch v9.1.0754
  9.1.0755: quickfix list does not handle hardlinks well
  9.1.0754: fixed order of items in insert-mode completion menu
  9.1.0753: Wrong display when typing in diff mode with 'smoothscroll'
  9.1.0752: can set 'cedit' to an invalid value
  9.1.0751: Error callback for term_start() not used
  9.1.0750: there are some Win9x legacy references
  9.1.0749: filetype: http files not recognized
  9.1.0748: :keep* commmands are sometimes misidentified as :k
  9.1.0747: various typos in repo found
  9.1.0746: tests: Test_halfpage_longline() fails on large terminals
  9.1.0745: filetype: bun and deno history files not recognized
  9.1.0744: filetype: notmuch configs are not recognised
  9.1.0743: diff mode does not handle overlapping diffs correctly
  9.1.0742: getcmdprompt() implementation can be improved
  9.1.0741: No way to get prompt for input()/confirm()
  9.1.0740: incorrect internal diff with empty file
  9.1.0739: [security]: use-after-free in ex_getln.c
  9.1.0738: filetype: rapid files are not recognized
  9.1.0737: tests: screendump tests may require a bit more time
  9.1.0736: Unicode tables are outdated
  9.1.0735: filetype: salt files are not recognized
  9.1.0734: filetype: jinja files are not recognized
  9.1.0733: keyword completion does not work with fuzzy
  9.1.0732: xxd: cannot use -b and -i together
  9.1.0731: inconsistent case sensitive extension matching
  9.1.0730: Crash with cursor-screenline and narrow window
  9.1.0729: Wrong cursor-screenline when resizing window
  9.1.0728: [security]: heap-use-after-free in garbage collection with location list user data
  9.1.0727: too many strlen() calls in option.c
  9.1.0726: not using correct python3 API with dynamic linking
  9.1.0725: filetype: swiftinterface files are not recognized
  9.1.0724: if_python: link error with python 3.13 and stable ABI
  9.1.0723: if_python: dynamic linking fails with python3 &gt;= 3.13
  9.1.0722: crash with large id in text_prop interface
  9.1.0721: tests: test_mksession does not consider XDG_CONFIG_HOME
  9.1.0720: Wrong breakindentopt=list:-1 with multibyte or TABs
  9.1.0719: Resetting cell widths can make 'listchars' or 'fillchars' invalid
  9.1.0718: hard to know the users personal Vim Runtime Directory
  9.1.0717: Unnecessary nextcmd NULL checks in parse_command_modifiers()
  9.1.0716: resetting setcellwidth() doesn't update the screen
  9.1.0715: Not correctly parsing color names (after v9.1.0709)
  9.1.0714: tests: GuiEnter_Turkish test may fail
  9.1.0713: Newline causes E749 in Ex mode
  9.1.0712: tests: missing dependency of Test_gettext_makefile
  9.1.0711: tests: test_xxd may file when using different xxd
  9.1.0710: popup window may hide part of Command line
  9.1.0709: GUIEnter event not found in Turkish locale
  9.1.0708: Recursive window update does not account for reset skipcol
  9.1.0707: [security]: invalid cursor position may cause a crash
  9.1.0706: tests: test_gettext fails when using shadow dir
  9.1.0705: Sorting of fuzzy filename completion is not stable
  9.1.0704: inserting with a count is inefficient
  9.1.0703: crash with 2byte encoding and glob2regpat()
  9.1.0702: Patch 9.1.0700 broke CI
  9.1.0701: crash with NFA regex engine when searching for composing chars
  9.1.0700: crash with 2byte encoding and glob2regpat()
  9.1.0699: "dvgo" is not always an inclusive motion
  9.1.0698: tests: "Untitled" file not removed when running Test_crash1_3 alone
  9.1.0697: [security]: heap-buffer-overflow in ins_typebuf
  9.1.0696: installing runtime files fails when using SHADOWDIR
  9.1.0695: tests: test_crash leaves Untitled file around
  9.1.0694: matchparen is slow on a long line
  9.1.0693: Configure doesn't show result when not using python3 stable abi
  9.1.0692: Wrong patlen value in ex_substitute()
  9.1.0691: python3: stable-abi may cause segfault on Python 3.11
  9.1.0690: cannot set special highlight kind in popupmenu
  9.1.0689: [security]: buffer-overflow in do_search() with 'rightleft'
  9.1.0688: Vim9: dereferences NULL pointer in check_type_is_value()
  9.1.0687: Makefile may not install desktop files
  9.1.0686: zip-plugin has problems with special characters
  9.1.0685: too many strlen() calls in usercmd.c
  9.1.0684: completion is inserted on Enter with "noselect"
  9.1.0683: mode() returns wrong value with &lt;Cmd&gt; mapping
  9.1.0682: Vim9: Segfault with uninitialized funcref
  9.1.0681: tests: Analyzing failed screendumps is hard
  9.1.0680: VMS does not have defined uintptr_t
  9.1.0679: Rename from w_closing to w_locked is incomplete
  9.1.0678: [security]: use-after-free in alist_add()
  9.1.0677: :keepp does not retain the substitute pattern
  9.1.0676: style issues with man pages
  9.1.0675: Patch v9.1.0674 causes problems
  9.1.0674: Vim9: compiling abstract method fails because of missing return
  9.1.0673: Vim9: too recursive func calls when calling super-class method
  9.1.0672: marker folds may get corrupted on undo
  9.1.0670: po file encoding fails on *BSD during make
  9.1.0669: if_python: stable python ABI not used by default
  9.1.0668: build-error with python3.12 and stable ABI
  9.1.0667: Some other options reset curswant unnecessarily when set
  9.1.0666: assert_equal() doesn't show multibyte string correctly
  9.1.0665: Locked variable can be changed in a :for loop
  9.1.0664: MS-Windows: console vim did not switch back to main screen on exit
  9.1.0663: tests: zip test still resets 'shellslash' option
  9.1.0662: filecopy() may return wrong value when readlink() fails
  9.1.0661: the zip plugin is not tested.
  9.1.0660: MS-Windows: Shift-Insert does work on old conhost
  9.1.0659: MS-Windows: MSVC Makefile is a bit hard to read
  9.1.0658: Coverity warns about dereferencing NULL pointer.
  9.1.0657: MS-Windows: MSVC build time can be optimized
  9.1.0656: MS-Windows: MSVC Makefile CPU handling can be improved
  9.1.0655: filetype: goaccess config file not recognized
  9.1.0654: completion does not respect completeslash with fuzzy
  9.1.0653: Patch v9.1.0648 not completely right
  9.1.0652: too many strlen() calls in syntax.c
  9.1.0651: ex: trailing dot is optional for :g and :insert/:append
  9.1.0650: Coverity warning in cstrncmp()
  9.1.0649: Wrong comment for "len" argument of call_simple_func()
  9.1.0648: [security] double-free in dialog_changed()
  9.1.0647: [security] use-after-free in tagstack_clear_entry
  9.1.0646: Vim9: imported function may not be found
  9.1.0645: regex: wrong match when searching multi-byte char case-insensitive
  9.1.0644: Unnecessary STRLEN() when applying mapping
  9.1.0643: terminal: cursor may end up on invalid position
  9.1.0642: Check that mapping rhs starts with lhs fails if not simplified
  9.1.0641: MS-Windows: OLE enabled in console version
  9.1.0640: Mingw: Makefile can be improved
  9.1.0639: channel timeout may wrap around
  9.1.0638: E1510 may happen when formatting a message for smsg()
  9.1.0637: MS-Windows: Style issues in MSVC Makefile
  9.1.0636: filetype: ziggy files are not recognized
  9.1.0635: filetype: SuperHTML template files not recognized
  9.1.0634: Ctrl-P not working by default
  9.1.0633: Compilation warnings with `-Wunused-parameter`
  9.1.0632: MS-Windows: Compiler Warnings
  9.1.0631: wrong completion list displayed with non-existing dir + fuzzy completion
  9.1.0630: MS-Windows: build fails with VIMDLL and mzscheme
  9.1.0629: Rename of pum hl_group is incomplete
  9.1.0628: MinGW: coverage files are not cleaned up
  9.1.0627: MinGW: build-error when COVERAGE is enabled
  9.1.0626: Vim9: need more tests with null objects
  9.1.0625: tests: test output all translated messages for all translations
  9.1.0624: ex command modifiers not found
  9.1.0623: Mingw: errors when trying to delete non-existing files
  9.1.0622: MS-Windows: mingw-build can be optimized
  9.1.0621: MS-Windows: startup code can be improved
  9.1.0620: Vim9: segfauls with null objects
  9.1.0619: tests: test_popup fails
  9.1.0618: cannot mark deprecated attributes in completion menu
  9.1.0617: Cursor moves beyond first line of folded end of buffer
  9.1.0616: filetype: Make syntax highlighting off for MS Makefiles
  9.1.0615: Unnecessary STRLEN() in make_percent_swname()
  9.1.0614: tests: screendump tests fail due to recent syntax changes
  9.1.0613: tests: termdebug test may fail and leave file around
  9.1.0612: filetype: deno.lock file not recognized
  9.1.0611: ambiguous mappings not correctly resolved with modifyOtherKeys
  9.1.0610: filetype: OpenGL Shading Language files are not detected
  9.1.0609: outdated comments in Makefile
  9.1.0608: Coverity warns about a few potential issues
  9.1.0607: termdebug: uses inconsistent style
  9.1.0606: tests: generated files may cause failure in test_codestyle
  9.1.0605: internal error with fuzzy completion
  9.1.0604: popup_filter during Press Enter prompt seems to hang
  9.1.0603: filetype: use correct extension for Dracula
  9.1.0602: filetype: Prolog detection can be improved
  9.1.0601: Wrong cursor position with 'breakindent' when wide char doesn't fit
  9.1.0600: Unused function and unused error constants
  9.1.0599: Termdebug: still get E1023 when specifying arguments
  9.1.0598: fuzzy completion does not work with default completion
  9.1.0597: KeyInputPre cannot get the (unmapped typed) key
  9.1.0596: filetype: devscripts config files are not recognized
  9.1.0595: make errors out with the po Makefile
  9.1.0594: Unnecessary redraw when setting 'winfixbuf'
  9.1.0593: filetype: Asymptote files are not recognized
  9.1.0592: runtime: filetype: Mediawiki files are not recognized
  9.1.0591: filetype: *.wl files are not recognized
  9.1.0590: Vim9: crash when accessing getregionpos() return value
  9.1.0589: vi: d{motion} and cw work differently than expected
  9.1.0588: The maze program no longer compiles on newer clang
  9.1.0587: tests: Test_gui_lowlevel_keyevent is still flaky
  9.1.0586: ocaml runtime files are outdated
  9.1.0585: tests: test_cpoptions leaves swapfiles around
  9.1.0584: Warning about redeclaring f_id() non-static
  9.1.0583: filetype: *.pdf_tex files are not recognized
  9.1.0582: Printed line doesn't overwrite colon when pressing Enter in Ex mode
  9.1.0581: Various lines are indented inconsistently
  9.1.0580: :lmap mapping for keypad key not applied when typed in Select mode
  9.1.0579: Ex command is still executed after giving E1247
  9.1.0578: no tests for :Tohtml
  9.1.0577: Unnecessary checks for v:sizeoflong in test_put.vim
  9.1.0576: tests: still an issue with test_gettext_make
  9.1.0575: Wrong comments in alt_tabpage()
  9.1.0574: ex: wrong handling of commands after bar
  9.1.0573: ex: no implicit print for single addresses
  9.1.0572: cannot specify tab page closing behaviour
  9.1.0571: tests: Test_gui_lowlevel_keyevent is flaky
  9.1.0570: tests: test_gettext_make can be improved
  9.1.0569: fnamemodify() treats ".." and "../" differently
  9.1.0568: Cannot expand paths from 'cdpath' setting
  9.1.0567: Cannot use relative paths as findfile() stop directories
  9.1.0566: Stop dir in findfile() doesn't work properly w/o trailing slash
  9.1.0565: Stop directory doesn't work properly in 'tags'
  9.1.0564: id() can be faster
  9.1.0563: Cannot process any Key event
  9.1.0562: tests: inconsistency in test_findfile.vim
  9.1.0561: netbeans: variable used un-initialized (Coverity)
  9.1.0560: bindtextdomain() does not indicate an error
  9.1.0559: translation of vim scripts can be improved
  9.1.0558: filetype: prolog detection can be improved
  9.1.0557: moving in the buffer list doesn't work as documented
  9.1.0556: :bwipe doesn't remove file from jumplist of other tabpages
  9.1.0555: filetype: angular ft detection is still problematic
  9.1.0554: :bw leaves jumplist and tagstack data around
  9.1.0553: filetype: *.mcmeta files are not recognized
  9.1.0552: No test for antlr4 filetype
  9.1.0551: filetype: htmlangular files are not properly detected
  9.1.0550: filetype: antlr4 files are not recognized
  9.1.0549: fuzzycollect regex based completion not working as expected
  9.1.0548: it's not possible to get a unique id for some vars
  9.1.0547: No way to get the arity of a Vim function
  9.1.0546: vim-tiny fails on CTRL-X/CTRL-A
  9.1.0545: MSVC conversion warning
  9.1.0544: filetype: ldapconf files are not recognized
  9.1.0543: Behavior of CursorMovedC is strange
  9.1.0542: Vim9: confusing string() output for object functions
  9.1.0541: failing test with Vim configured without channel
  9.1.0540: Unused assignment in sign_define_cmd()
  9.1.0539: Not enough tests for what v9.1.0535 fixed
  9.1.0538: not possible to assign priority when defining a sign
  9.1.0537: signed number detection for CTRL-X/A can be improved
  9.1.0536: filetype: zone files are not recognized
  9.1.0535: newline escape wrong in ex mode
  9.1.0534: completion wrong with fuzzy when cycling back to original
  9.1.0533: Vim9: need more tests for nested objects equality
  9.1.0532: filetype: Cedar files not recognized
  9.1.0531: resource leak in mch_get_random()
  9.1.0530: xxd: MSVC warning about non-ASCII character
  9.1.0529: silent! causes following try/catch to not work
  9.1.0528: spell completion message still wrong in translations
  9.1.0527: inconsistent parameter in Makefiles for Vim executable
  9.1.0526: Unwanted cursor movement with pagescroll at start of buffer
  9.1.0525: Right release selects immediately when pum is truncated.
  9.1.0524: the recursive parameter in the *_equal functions can be removed
  9.1.0523: Vim9: cannot downcast an object
  9.1.0522: Vim9: string(object) hangs for recursive references
  9.1.0521: if_py: _PyObject_CallFunction_SizeT is dropped in Python 3.13
  9.1.0520: Vim9: incorrect type checking for modifying lists
  9.1.0519: MS-Windows: libvterm compilation can be optimized
  9.1.0518: initialize the random buffer can be improved
  9.1.0517: MS-Windows: too long lines in Make_mvc.mak
  9.1.0516: need more tests for nested dicts and list comparision
  9.1.0515: Vim9: segfault in object_equal()
  9.1.0514: Vim9: issue with comparing objects recursively
  9.1.0513: Vim9: segfault with object comparison
  9.1.0512: Mode message for spell completion doesn't match allowed keys
  9.1.0511: CursorMovedC triggered wrongly with setcmdpos()
  9.1.0510: CI: test_gettext fails on MacOS14 + MSVC Win
  9.1.0509: not possible to translate Vim script messages
  9.1.0508: termdebug plugin can be further improved
  9.1.0507: hard to detect cursor movement in the command line
  9.1.0506: filetype: .envrc &amp; .prettierignore not recognized
  9.1.0505: filetype: Faust files are not recognized
  9.1.0504: inner-tag textobject confused about "&gt;" in attributes
  9.1.0503: cannot use fuzzy keyword completion
  9.1.0502: MS-Windows: too much legacy code
  9.1.0501: too complicated mapping restore in termdebug
  9.1.0500: cannot switch buffer in a popup
  9.1.0499: MS-Windows: doesn't handle symlinks properly
  9.1.0498: getcmdcompltype() interferes with cmdline completion
  9.1.0497: termdebug can be further improved
  9.1.0496: matched text is highlighted case-sensitively
  9.1.0495: Matched text isn't highlighted in cmdline pum
  9.1.0494: Wrong matched text highlighted in pum with 'rightleft'
  9.1.0493: Test for patch 9.1.0489 doesn't fail without the fix
  9.1.0492: filetype: Vim-script files not detected by shebang line
  9.1.0491: Cmdline pum doesn't work properly with 'rightleft'
  9.1.0490: minor style problems with patch 9.1.0487
  9.1.0489: default completion may break with fuzzy
  9.1.0488: Wrong padding for pum "kind" with 'rightleft'
  9.1.0487: completed item not update on fuzzy completion
  9.1.0486: filetype: Snakemake files are not recognized
  9.1.0485: Matched text shouldn't be highlighted in "kind" and "menu"
  9.1.0484: Sorting of completeopt+=fuzzy is not stable
  9.1.0483: glob() not sufficiently tested
  9.1.0482: termdebug plugin needs more love
  9.1.0481: Vim9: term_getjob() throws an exception on error
  9.1.0480: fuzzy string matching executed when not needed
  9.1.0479: fuzzy_match_str_with_pos() does unnecessary list operations
  9.1.0478: potential deref of NULL pointer in fuzzy_match_str_with_pos
  9.1.0477: block_editing errors out when using &lt;enter&gt;
  9.1.0476: Cannot see matched text in popup menu
  9.1.0475: cmod_split modifier is always reset in term_start()
  9.1.0474: CI: Test_ColonEight() fails on github runners
  9.1.0473: term_start() does not clear vertical modifier
  9.1.0472: Inconsistencies between functions for option flags
  9.1.0471: Crash when using autocmd_get() after removing event inside autocmd
  9.1.0470: tests: Test_ColonEight_MultiByte() fails sporadically
  9.1.0469: Cannot have buffer-local value for 'completeopt'
  9.1.0468: GvimExt does not consult HKEY_CURRENT_USER
  9.1.0467: typos in some comments
  9.1.0466: Missing comments for fuzzy completion
  9.1.0465: missing filecopy() function
  9.1.0464: no whitespace padding in commentstring option in ftplugins
  9.1.0463: no fuzzy-matching support for insert-completion
  9.1.0462: eval5() and eval7 are too complex
  9.1.0461: too many strlen() calls in drawline.c
  9.1.0460: filetype: lintstagedrc files are not recognized
  9.1.0459: Vim9: import autoload does not work with symlink
  9.1.0458: Coverity complains about division by zero
  9.1.0457: tests: test_gui fails on Wayland
  9.1.0456: Left shift is incorrect with vartabstop and shiftwidth=0
  9.1.0455: MS-Windows: compiler warning for size_t to int conversion
  9.1.0454: minor issues in test_filetype with rasi test
  9.1.0453: filetype: rasi files are not recognized
  9.1.0452: Configure checks for libelf unnecessarily
  9.1.0451: No test for escaping '&lt;' with shellescape()
  9.1.0450: evalc. code too complex
  9.1.0449: MS-Windows: Compiler warnings
  9.1.0448: compiler warning in eval.c
  9.1.0447: completion may be wrong when deleting all chars
  9.1.0446: getregionpos() inconsistent for partly-selected multibyte char
  9.1.0445: Coverity warning after 9.1.0440
  9.1.0444: Not enough tests for getregion() with multibyte chars
  9.1.0443: Can't use blockwise selection with width for getregion()
  9.1.0442: hare runtime files outdated
  9.1.0441: getregionpos() can't properly indicate positions beyond eol
  9.1.0440: function get_lval() is too long
  9.1.0439: Cannot filter the history
  9.1.0438: Wrong Ex command executed when :g uses '?' as delimiter
  9.1.0437: Motif requires non-const char pointer for XPM  data
  9.1.0436: Crash when using '?' as separator for :s
  9.1.0435: filetype: cygport files are not recognized
  9.1.0434: make errors trying to access autoload/zig
  9.1.0433: Wrong yanking with exclusive selection and ve=all
  9.1.0432: Ancient XPM preprocessor hack may cause build errors
  9.1.0431: eval.c is too long
  9.1.0430: getregionpos() doesn't handle one char selection
  9.1.0429: Coverity complains about eval.c refactor
  9.1.0428: Tag guessing leaves wrong search history with very short names
  9.1.0427: tests: some issues with termdebug mapping test
  9.1.0426: too many strlen() calls in search.c
  9.1.0425: filetype: purescript files are not recognized
  9.1.0424: filetype: slint files are not recognized
  9.1.0423: getregionpos() wrong with blockwise mode and multibyte
  9.1.0422: function echo_string_core() is too long
  9.1.0421: filetype: hyprlang files are not recognized
  9.1.0420: :browse oldfiles prompts even with single entry
  9.1.0419: eval.c not sufficiently tested
  9.1.0418: Cannot move to previous/next rare word
  9.1.0417: if_py: find_module has been removed in Python 3.12.0a7
  9.1.0416: some screen dump tests can be improved
  9.1.0415: Some functions are not tested
  9.1.0414: Unable to leave long line with 'smoothscroll' and 'scrolloff'
  9.1.0413: smoothscroll may cause infinite loop
  9.1.0412: typo in regexp_bt.c in DEBUG code
  9.1.0411: too long functions in eval.c
  9.1.0410: warning about uninitialized variable
  9.1.0409: too many strlen() calls in the regexp engine
  9.1.0408: configure fails on Fedora when including perl
  9.1.0407: Stuck with long line and half-page scrolling
  9.1.0406: Divide by zero with getmousepos() and 'smoothscroll'
  9.1.0405: tests: xxd buffer overflow fails on 32-bit
  9.1.0404: [security] xxd: buffer-overflow with specific flags
  9.1.0403: Vim9: not able to import file from start dir
  9.1.0402: filetype: mdd files detected as zsh filetype
  9.1.0401: filetype: zsh module files are not recognized
  9.1.0400: Vim9: confusing error message for unknown type
  9.1.0399: block_editing errors out when using del
  9.1.0398: Vim9: imported vars are not properly type checked
  9.1.0397: Wrong display with 'smoothscroll' when changing quickfix list
  9.1.0396: filetype: jj files are not recognized
  9.1.0395: getregionpos() may leak memory on error
  9.1.0394: Cannot get a list of positions describing a region
  9.1.0393: 'viewdir' not respecting $XDG_CONFIG_HOME
  9.1.0392: tests: Vim9 debug tests may be flaky
  9.1.0391: Vim9: could improve testing
  9.1.0390: filetype: inko files are not recognized
  9.1.0389: filetype: templ files are not recognized
  9.1.0388: cursor() and getregion() don't handle v:maxcol well
  9.1.0387: Vim9: null value tests not sufficient
  9.1.0386: filetype: stylus files not recognized
  9.1.0385: Vim9: crash with null_class and null_object
  9.1.0384: tests: vt420 terminfo entry may not be found
  9.1.0383: filetype: .out files recognized as tex files
  9.1.0382: filetype: Kbuild files are not recognized
  9.1.0381: cbuffer and similar commands don't accept a range
  9.1.0380: Calculating line height for unnecessary amount of lines
  9.1.0379: There are a few typos
  9.1.0378: Vim9: no comments allowed after class vars
  9.1.0377: Formatting text wrong when 'breakindent' is set
  9.1.0376: Vim9: Trailing commands after class/enum keywords ignored
  9.1.0375: tests: 1-second delay after Test_BufEnter_botline()
  9.1.0374: wrong botline in BufEnter
  9.1.0373: ops.c code uses too many strlen() calls
  9.1.0372: Calling CLEAR_FIELD() on the same struct twice
  9.1.0371: Vim9: compile_def_function() still too long
  9.1.0370: MS-Windows: patch number is zero in installer
  9.1.0369: Vim9: problem when importing autoloaded scripts
  9.1.0368: MS-Windows: Hard to define the Vim Patchlevel with leading zeroes
  9.1.0367: compile_def_function is too long
  9.1.0366: filetype: ondir files are not recognized
  9.1.0365: Crash when typing many keys with D- modifier
  9.1.0364: tests: test_vim9_builtin is a bit slow
  9.1.0363: tests: test_winfixbuf is a bit slow
  9.1.0362: expanding rc config files does not work well
  9.1.0361: Vim9: vim9type.c is too complicated
  9.1.0360: Vim9: does not handle autoloaded variables well
  9.1.0359: MS-Windows: relative import in a script sourced from a buffer doesn't work
  9.1.0358: wrong drawing in GUI with setcellwidth()
  9.1.0357: Page scrolling should place cursor at window boundaries
  9.1.0356: MS-Windows: --remote may change working directory
  9.1.0355: filetype: flake.lock files are not recognized
  9.1.0354: runtime(uci): No support for uci file types
  9.1.0353: tests: Test_autoload_import_relative_compiled fails on Windows
  9.1.0352: Finding cmd modifiers and cmdline-specials is inefficient
  9.1.0351: No test that completing a partial mapping clears 'showcmd'
  9.1.0350: tests: test_vim9_dissamble may fail
  9.1.0349: Vim9: need static type for typealias
  9.1.0348: X11 does not ignore smooth scroll event
  9.1.0347: A few typos in test_xdg when testing gvimrc
  9.1.0346: Patch v9.1.0338 fixed sourcing a script with import
  9.1.0345: Problem: gvimrc not sourced from XDG_CONFIG_HOME
  9.1.0344: Cursor wrong after using setcellwidth() in terminal
  9.1.0343: 'showcmd' wrong for partial mapping with multibyte
  9.1.0342: tests: test_taglist fails when 'helplang' contains non-english
  9.1.0341: Problem: a few memory leaks are found
  9.1.0340: Problem: Error with matchaddpos() and empty list
  9.1.0339: tests: xdg test uses screen dumps
  9.1.0338: Vim9: import through symlinks not correctly handled
  9.1.0337: Missing entry for XDG vimrc file in :version
  9.1.0336: tests: typo in test_xdg
  9.1.0335: String interpolation fails for List type
  9.1.0334: No test for highlight behavior with 'ambiwidth'
  9.1.0333: tests: test_xdg fails on the appimage repo
  9.1.0332: tests: some assert_equal() calls have wrong order of args
  9.1.0331: make install does not install all files</changelog>
  <changelog author="martin.schreiner@suse.com" date="1772625600">* Update Vim to version 9.2.0045 (from 9.1.1629).
  * Fix bsc#1258229 CVE-2026-26269 as 9.2.0045 is not impacted (fixed
  upstream).
  * Fix bsc#1246602 CVE-2025-53906 as 9.2.0045 is not impacted (fixed
  upstream).
  * Drop obsolete or upstreamed patches:
  - vim-7.3-filetype_spec.patch
  - vim-7.4-filetype_apparmor.patch
  - vim-8.2.2411-globalvimrc.patch
  * Refresh the following patches:
  - vim-7.3-filetype_changes.patch
  - vim-7.3-filetype_ftl.patch
  - vim-7.3-sh_is_bash.patch
  - vim-9.1.1134-revert-putty-terminal-colors.patch
  * Remove autoconf from BuildRequires and drop the autoconf call in %build.
  * Package new Swedish (sv) man pages and clean up duplicate encodings
  (sv.ISO8859-1 and sv.UTF-8) during %install.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773230400">* Update Vim to version 9.2.0110 (from 9.2.0045).
  * Specifically, this fixes bsc#1259051 / CVE-2026-28417.</changelog>
</package>
<package pkgid="05140875957de43ed7e45437d2c52283759e9a82ddde5bbd54530fee501127dac16c36492bbc114211995f18ab2c0bfde8ab7eff4ffd8db61feb8f16bbb9fd0f" name="vim-small-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.2.0110" rel="slfo.1.1_1.1"/>
  <changelog author="mimi.vx@gmail.com" date="1683720000">- Updated to version 9.0.1538, fixes the following problems
- fixes boo#1211256 CVE-2023-2609
  * No error when calling remote_startserver() with an empty string.
  * Error when heredoc content looks like heredoc.
  * Line number not displayed when using 'smoothscroll'.
  * Assert message is confusing with boolean result.  assert_inrange()
  replaces message instead of adding it.
  * Catch does not work when lines are joined with a newline.
  * Error message lacks mentioning the erroneous argument.
  * Misleading variable name for error message.
  * Crash when using wrong arg types to assert_match().
  * Inserting lines when scrolling with 'smoothscroll' set.
  * Text scrolls unnecessarily when splitting and 'splitkeep' is not "cursor".
  * Test waits unnecessarily long before checking screendump.
  * reverse() does not work for a String.
  * Cannot use special keys in &lt;Cmd&gt; mapping.
  * Search stats not always visible when searching backwards.
  * Global 'filetype' is set when it is detected from the file content.
  * Completion for option name includes all bool options.
  * Failing redo of command with control characters.
  * Some functions give two error messages.
  * Some error messages are not marked for translation.
  * Passing -1 for bool is not always rejected.
  * 'smoothscroll' does not always work properly.
  * Condition is always true.
  * Crash when using negative value for term_cols.
  * Libsodium encryption is only used with "huge" features, even when manually
  enabled through configure. (Tony Mechelynck)
  * Code style test doesn't check for space after "if".
  * Cursor moves to wrong line when 'foldmethod' is "diff". (Rick Howe)
  * Crash when register contents ends up being invalid.
  * Crash when expanding "~" in substitute causes very long text.
  * Test for 'smoothscroll' is ineffective.
  * Test for expanding "~" in substitute takes too long.
  * Test commented out in a wrong way.
  * CI: sound dummy stopped working.
  * Message for opening the cmdline window is not translated.
  * :wqall does not trigger ExitPre. (Bart Libert)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1684670400">- Updated to version 9.0.1572, fixes the following problems
  * Typst filetype is not recognized.
  * reverse() on string doesn't work in compiled function.
  * CI: sound dummy is disabled.
  * Line not fully displayed if it doesn't fit in the screen.
  * Display errors when making topline shorter and 'smoothscroll'
    is set.
  * Recent glibc marks sigset() as a deprecated.
  * Text not scrolled when cursor moved with "g0" and "h".
  * Some commands for opening a file don't use 'switchbuf'.
  * Coveralls workflow on CI is commented out.
  * CI: check in sound-dummy module may throw an error.
  * USD filetype is not recognized.
  * In cmdline window S-Tab does not select previous completion.
  * Position of marker for 'smoothscroll' not computed correctly.
  * CI: sound-dummy module is not installed.
  * CI: using slightly outdated gcc version.
  * Code for handling 'switchbuf' is repeated.
  * setcharsearch() does not clear last searched char properly.
  * Vim9: error for missing "return" after "throw".
  * Test failures for unreachable code.
  * Wrong error for unreachable code after :throw.
  * Function argument types not always checked and using v:none may
    cause an error.
  * Win32: When 'encoding' is set $PATH has duplicate entries.
  * Mixing package managers is not a good idea.
  * GTK3: window manager resize hints are incomplete.
  * Display moves up and down with 'incsearch' and 'smoothscroll'.
  * Json lines files are not recognized.
  * Motif: GUI scrollbar test fails in 24 lines terminal.
  * Profiler calculation may be wrong on 32 bit builds.
  * With 'smoothscroll' cursor may move below botline.
  * Cannot use "this.member" in lambda in class method.
  * Some tests are slow.
  * RedrawingDisabled not used consistently.
  * Error messages are not translated.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1686830400">- Updated to version 9.0.1632, fixes the following problems
  * Error messages are not translated.
  * Error for function name has wrong line number.
  * "file N of M" message is not translated.
  * Users may not know what to do with an internal error.
  * SpellCap highlight not always updated when needed.
  * Some error messages are not translated.
  * CI: indent test hangs on FreeBSD.
  * Translation does not work for plural argument.
  * :stopinsert may not work in a popup close handler. (Ben Jackson)
  * Get E304 when using 'cryptmethod' "xchacha20v2". (Steve Mynott)
  * Not all meson files are recognized.
  * Weird use of static variables for spell checking.
  * Checking translations gives an error for using two messages with ngettext()
  that differ in "%" items.
  * Corn config files are not recognized.
  * Incsearch not triggered when pasting clipboard register on the command
  line.
  * Filetype test contains too many special characters.
  * Filetype test has trailing white space.
  * Some "gomod" files are not recognized.
  * Not all timer tests are marked as flaky.
  * MS-Windows: assert error when compiled with debug mode.
  * Some internal error messages are translated.
  * Line pointer becomes invalid when using spell checking.
  * :registers command does not work in sandbox.
  * Cursor ends up below the window after a put.
  * screenchar(), screenchars() and screenstring() do not work properly when
  'encoding' is set to a double-byte encoding.
  * Cursor not adjusted when near top or bottom of window and 'splitkeep'
  is not "cursor".
  * screenpos() does not take w_skipcol into account.
  * Filetype detection fails for *.conf file without comments. (Dmitrii
  Tcyganok)
  * Stray character is visible if 'smoothscroll' marker is displayed on top
  of a double-wide character.
  * Display wrong when scrolling multiple lines with 'smoothscroll' set.
  * Errors from the codestyle test are a bit confusing.
  * Crash when calling method on super in child constructor. (Israel Chauca
  Fuentes)
  * Using freed memory when 'foldcolumn' is set.
  * screenpos() returns wrong row with diff filler lines.
  * update_topline() is called twice.
  * Crash when an object indirectly references itself.
  * Display is wrong when 'smoothscroll' is set and scrolling multiple lines.
  * v:maxcol can be changed in a :for loop.
  * "skipcol" not reset when using multi-byte characters.
  * Some make output gets picked up by 'errorformat'.
  * strlen() called too often for :spellrepall.
  * URL shortcut files are not recognized.
  * Quickfix text field is truncated.
  * charidx() and utf16idx() result is not consistent with byteidx().
  * Trace32 files are not recognized.
  * The focus gained/lost escape sequences cause trouble for a terminal
  where Vim does not expect them.
  * Nix files are not recognized from the hashbang line.
  * FILETYPE_FILE is defined to the same value multiple times.  Same for a
  few similar macros.
  * Filetype name t32 is a bit obscure.
  * The program to filetype translation is not exported.
  * Crash when calling object constructor from legacy script. (Israel
  Chauca Fuentes)
  * "super" is not considered a reserved name.
  * Visual area not shown when using 'showbreak' and start of line is not
  visible. (Jaehwang Jung)
  * No generic mechanism to test syntax plugins.
  * Syntax tests fail on FreeBSD.
  * Having utf16idx() rounding up is inconvenient.
  * "make clean" at the toplevel fails.
  * Passing a wrong variable type to an option gives multiple errors.
  * Not all cabal config files are recognized.</changelog>
  <changelog author="badshah400@gmail.com" date="1688904000">- Use app icon generated from vimlogo.eps in source tarball; add
  higher res icons of sizes 128, 256, and 512px as png sources.
  Our current icons deviate from upstream flatpaks for example.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1694433600">- Updated to version 9.0.1894, fixes the following problems
- drop patches: disable-unreliable-tests.patch
    ignore-flaky-test-failure.patch
    vim-8.1.0297-dump3.patch
- fixes:
  + boo#1214922 - CVE-2023-4738
  + boo#1214925 - CVE-2023-4734
  + boo#1214924 - CVE-2023-4735
  + boo#1214921 - CVE-2023-4751
- droped %check - most of tests didn't work correctly in OBS
    and maitenace burden of this was getting too big
  * Not all cabal config files are recognized.
  * Duplicate code for converting float to string.
  * Message is cleared when removing mode message (Gary Johnson).
  * Error message is cleared when removing mode message.
  * Expanding a pattern interferes with command line completion.
  * Compiler warning for uninitialized variable.
  * crypt tests hang and cause memory errors
  * Build failure without the crypt feature.
  * Compiler warning for unused variables without the crypt feature.
  * The log file does not give information about window sizes.
  * Build failure with tiny features.
  * Filetype detection fails if file name ends in many '~'.
  * Not all filetype file name matches are tested.
  * zserio files are not recognized.
  * Insufficient testing for syntax plugins.
  * Result of syntax tests is hard to see.
  * Syntax test failure causes script to abort.
  * Unclear why syntax test fails on Mac.
  * Unclear why syntax test fails on Mac.
  * Syntax test fails when Vim window is not tall enough.
  * Syntax test fails when detected shell type differs.
  * One more syntax test depends on the system.
  * Autoload files for "zig" are not installed.
  * Termdebug: default highlight cleared when changing colorscheme.
  * Error for using matchfuzzy() in Vim9 script returning a list of dicts.
  * BUCK files are not recognized.
  * Crash when using a class member twice. (Christian J. Robinson)
  * Termdebug on MS-Windows: some file names are not recognized.
  * Divide by zero when scrolling with 'smoothscroll' set.
  * Empty CmdlineEnter autocommand causes errors in Ex mode.
  * Compiler may warn for uninitialized variable.
  * Regression test doesn't fail when fix is reverted.
  * PEM files are not recognized.
  * Crash syncing swapfile in new buffer when using sodium crypt. (James McCoy)
  * Resetting local option to global value is inconsistent.
  * Termdebug: error with more than 99 breakpoints.
  * Tabline highlight wrong after truncated double width label.
  * Cannot produce a status 418 or 503 message.
  * Help for builtin functions is not sorted properly.
  * Test may run into timeout when using valgrind.
  * Warning for buffer in use when exiting early.
  * Typo in syntax test input file.
  * Blade files are not recognized.</changelog>
  <changelog author="zbalogh@suse.com" date="1709208000">- Updated to version 9.1 with patch level 0111, fixes the following security problems
  * Fixing bsc#1217316 (CVE-2023-48231) - VUL-0: CVE-2023-48231: vim: Use-After-Free in win_close()
  * Fixing bsc#1217320 (CVE-2023-48232) - VUL-0: CVE-2023-48232: vim: Floating point Exception in adjust_plines_for_skipcol()
  * Fixing bsc#1217321 (CVE-2023-48233) - VUL-0: CVE-2023-48233: vim: overflow with count for :s command
  * Fixing bsc#1217324 (CVE-2023-48234) - VUL-0: CVE-2023-48234: vim: overflow in nv_z_get_count
  * Fixing bsc#1217326 (CVE-2023-48235) - VUL-0: CVE-2023-48235: vim: overflow in ex address parsing
  * Fixing bsc#1217329 (CVE-2023-48236) - VUL-0: CVE-2023-48236: vim: overflow in get_number
  * Fixing bsc#1217330 (CVE-2023-48237) - VUL-0: CVE-2023-48237: vim: overflow in shift_line
  * Fixing bsc#1217432 (CVE-2023-48706) - VUL-0: CVE-2023-48706: vim: heap-use-after-free in ex_substitute
  * Fixing bsc#1219581 (CVE-2024-22667) - VUL-0: CVE-2024-22667: vim: stack-based buffer overflow in did_set_langmap function in map.c
  * Fixing bsc#1215005 (CVE-2023-4750) - VUL-0: CVE-2023-4750: vim: Heap use-after-free in function bt_quickfix
  * Fixing bsc#1215940 (CVE-2023-5344) - VUL-0: CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969.
  * Fixing bsc#1216001 (CVE-2023-5441) - VUL-0: CVE-2023-5441: vim: segfault in exmode when redrawing
  * Fixing bsc#1216167 (CVE-2023-5535) - VUL-0: CVE-2023-5535: vim: use-after-free from buf_contents_changed()
  * Fixing bsc#1216696 (CVE-2023-46246) - VUL-0: CVE-2023-46246: vim: Integer Overflow in :history command
  * Fixing bsc#1215004 (CVE-2023-4733) - VUL-0: CVE-2023-4733: vim: use-after-free in function buflist_altfpos
  * Fixing bsc#1215006 (CVE-2023-4752) - VUL-0: CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp
  * Fixing bsc#1215033 (CVE-2023-4781) - VUL-0: CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1894...v9.1.0111</changelog>
  <changelog author="zbalogh@suse.com" date="1713787200">- Updated to version 9.1 with patch level 0330, fixes the following problems
  * Fixing bsc#1220763 - vim gets Segmentation fault after updating to version 9.1.0111-150500.20.9.1
- refreshed vim-7.3-filetype_spec.patch
- refreshed vim-7.3-filetype_ftl.patch
- Update spec.skeleton to use autosetup in place of setup macro.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.1.0111...v9.1.0330</changelog>
  <changelog author="martin.schreiner@suse.com" date="1755518400">- Add patches:
  * vim-9.1.1134-revert-putty-terminal-colors.patch
  * reorder-exit-raw-mode.patch
- Remove obsoleted patches:
  * vim-7.3-help_tags.patch
  * vim-7.4-highlight_fstab.patch
  * vim-7.3-mktemp_tutor.patch
- Refresh patches:
  * vim-7.3-sh_is_bash.patch
- Fix the following CVEs and bugs:
  * bsc#1246602 (CVE-2025-53906)
  * bsc#1246604 (CVE-2025-53905)
  * bsc#1247939 (CVE-2025-55158)
  * bsc#1247938 (CVE-2025-55157)
- Update to 9.1.1629:
  9.1.1629: Vim9: Not able to use more than 10 type arguments in a generic function
  9.1.1628: fuzzy.c has a few issues
  9.1.1627: fuzzy matching can be improved
  9.1.1626: cindent: does not handle compound literals
  9.1.1625: Autocompletion slow with include- and tag-completion
  9.1.1624: Cscope not enabled on MacOS
  9.1.1623: Buffer menu does not handle unicode names correctly
  9.1.1622: Patch v9.1.1432 causes performance regressions
  9.1.1621: flicker in popup menu during cmdline autocompletion
  9.1.1620: filetype: composer.lock and symfony.lock files not recognized
  9.1.1619: Incorrect E535 error message
  9.1.1618: completion: incorrect selected index returned from complete_info()
  9.1.1617: Vim9: some error messages can be improved
  9.1.1616: xxd: possible buffer overflow with bitwise output
  9.1.1615: diff format erroneously detected
  9.1.1614: Vim9: possible variable type change
  9.1.1613: tests: test_search leaves a few swapfiles behind
  9.1.1612: Ctrl-G/Ctrl-T do not ignore the end search delimiter
  9.1.1611: possible undefined behaviour in mb_decompose()
  9.1.1610: completion: hang or E684 when 'tagfunc' calls complete()
  9.1.1609: complete: Heap-buffer overflow with complete function
  9.1.1608: No command-line completion for :unsilent {command}
  9.1.1607: :apple command detected as :append
  9.1.1606: filetype: a few more files are not recognized
  9.1.1605: cannot specify scope for chdir()
  9.1.1604: completion: incsearch highlight might be lost
  9.1.1603: completion: cannot use autoloaded funcs in 'complete' F{func}
  9.1.1602: filetype: requirements-*.txt files are not recognized
  9.1.1601: Patch v8.1.0425 was wrong
  9.1.1600: using diff anchors with hidden buffers fails silently
  9.1.1599: :bnext doesn't go to unlisted help buffers
  9.1.1598: filetype: waybar config file is not recognized
  9.1.1597: CI reports leaks in libgtk3 library
  9.1.1596: tests: Test_search_wildmenu_iminsert() depends on help file
  9.1.1595: Wayland: non-portable use of select()
  9.1.1594: completion: search completion throws errors
  9.1.1593: Confusing error when compiling incomplete try block
  9.1.1592: Vim9: crash with classes and garbage collection
  9.1.1591: VMS support can be improved
  9.1.1590: cannot perform autocompletion
  9.1.1589: Cannot disable cscope interface using configure
  9.1.1588: Vim9: cannot split dict inside command block
  9.1.1587: Wayland: timeout not updated before select()
  9.1.1586: Vim9: can define an enum/interface in a function
  9.1.1585: Wayland: gvim still needs GVIM_ENABLE_WAYLAND
  9.1.1584: using ints as boolean type
  9.1.1583: gvim window lost its icons
  9.1.1582: style issue in vim9type.c and vim9generics.c
  9.1.1581: possible memory leak in vim9generics.c
  9.1.1580: possible memory leak in vim9type.c
  9.1.1579: Coverity complains about unchecked return value
  9.1.1578: configure: comment still mentions autoconf 2.71
  9.1.1577: Vim9: no generic support yet
  9.1.1576: cannot easily trigger wildcard expansion
  9.1.1575: tabpanel not drawn correctly with wrapped lines
  9.1.1574: Dead code in mbyte.c
  9.1.1573: Memory leak when pressing Ctrl-D in cmdline mode
  9.1.1572: expanding $var does not escape whitespace for 'path'
  9.1.1571: CmdlineChanged triggered to often
  9.1.1570: Copilot suggested some improvements in cmdexpand.c
  9.1.1569: tests: Vim9 tests can be improved
  9.1.1568: need a few more default highlight groups
  9.1.1567: crash when using inline diff mode
  9.1.1566: self-referenced enum may not get freed
  9.1.1565: configure: does not consider tiny version for wayland
  9.1.1564: crash when opening popup to closing buffer
  9.1.1563: completion: ruler may disappear
  9.1.1562: close button always visible in the 'tabline'
  9.1.1561: configure: wayland test can be improved
  9.1.1560: configure: uses $PKG_CONFIG before it is defined
  9.1.1559: tests: Test_popup_complete_info_01() fails when run alone
  9.1.1558: str2blob() treats NULL string and empty string differently
  9.1.1557: not possible to anchor specific lines in difff mode
  9.1.1556: string handling in cmdexpand.c can be improved
  9.1.1555: completion: repeated insertion of leader
  9.1.1554: crash when omni-completion opens command-line window
  9.1.1553: Vim9: crash when accessing a variable in if condition
  9.1.1552: [security]: path traversal issue in tar.vim
  9.1.1551: [security]: path traversal issue in zip.vim
  9.1.1550: defaults: 'showcmd' is not enabled in non-compatible mode on Unix
  9.1.1549: filetype: pkl files are not recognized
  9.1.1548: filetype: OpenFGA files are not recognized
  9.1.1547: Wayland: missing ifdef
  9.1.1546: Vim9: error with has() and short circuit evaluation
  9.1.1545: typo in os_unix.c
  9.1.1544: :retab cannot be limited to indentation only
  9.1.1543: Wayland: clipboard appears to not be working
  9.1.1542: Coverity complains about uninitialized variable
  9.1.1541: Vim9: error when last enum value ends with a comma
  9.1.1540: completion: menu state wrong on interruption
  9.1.1539: completion: messages don't respect 'shm' setting
  9.1.1537: helptoc: still some issues when markdown code blocks
  9.1.1536: tests: test_plugin_comment uses wrong :Check command
  9.1.1535: the maximum search count uses hard-coded value 99
  9.1.1534: unnecessary code in tabpanel.c
  9.1.1533: helptoc: does not handle code sections in markdown well
  9.1.1532: termdebug: not enough ways to configure breakpoints
  9.1.1531: confusing error with nested legacy function
  9.1.1530: Missing version change in v9.1.1529
  9.1.1529: Win32: the toolbar in the GUI is old and dated
  9.1.1528: completion: crash with getcompletion()
  9.1.1527: Vim9: Crash with string compound assignment
  9.1.1526: completion: search completion match may differ in case
  9.1.1525: tests: testdir/ is a bit messy
  9.1.1524: tests: too many imports in the test suite
  9.1.1523: tests: test_clipmethod fails in non X11 environment
  9.1.1522: tests: still some ANSI escape sequences in test output
  9.1.1521: completion: pum does not reset scroll pos on reopen with 'noselect'
  9.1.1520: completion: search completion doesn't handle 'smartcase' well
  9.1.1519: tests: Test_termdebug_decimal_breakpoints() may fail
  9.1.1518: getcompletiontype() may crash
  9.1.1517: filetype: autopkgtest files are not recognized
  9.1.1516: tests: no test that 'incsearch' is updated after search completion
  9.1.1515: Coverity complains about potential unterminated strings
  9.1.1514: Coverity complains about the use of tmpfile()
  9.1.1513: resizing Vim window causes unexpected internal window width
  9.1.1512: completion: can only complete from keyword characters
  9.1.1511: tests: two edit tests change v:testing from 1 to 0
  9.1.1510: Search completion may use invalid memory
  9.1.1509: patch 9.1.1505 was not good
  9.1.1508: string manipulation can be improved in cmdexpand.c
  9.1.1507: symlinks are resolved on :cd commands
  9.1.1506: tests: missing cleanup in Test_search_cmdline_incsearch_highlight()
  9.1.1505: not possible to return completion type for :ex command
  9.1.1504: filetype: numbat files are not recognized
  9.1.1503: filetype: haxe files are not recognized
  9.1.1502: filetype: quickbms files are not recognized
  9.1.1501: filetype: flix files are not recognized
  9.1.1500: if_python: typo in python error variable
  9.1.1499: MS-Windows: no indication of ARM64 architecture
  9.1.1498: completion: 'complete' funcs behave different to 'omnifunc'
  9.1.1497: Link error with shm_open()
  9.1.1496: terminal: still not highlighting empty cells correctly
  9.1.1495: Wayland: uses $XDG_SEAT to determine seat
  9.1.1494: runtime(tutor): no French translation for Chapter 2
  9.1.1493: manually comparing positions on buffer
  9.1.1492: tests: failure when Wayland compositor fails to start
  9.1.1491: missing out-of-memory checks in cmdexpand.c
  9.1.1490: 'wildchar' does not work in search contexts
  9.1.1489: terminal: no visual highlight of empty cols with empty 'listchars'
  9.1.1488: configure: using obsolete macro AC_PROG_GCC_TRADITIONAL
  9.1.1487: :cl doesn't invoke :clist
  9.1.1486: documentation issues with Wayland
  9.1.1485: missing Wayland clipboard support
  9.1.1484: tests: Turkish locale tests fails on Mac
  9.1.1483: not possible to translation position in buffer
  9.1.1482: scrolling with 'splitkeep' and line()
  9.1.1481: gcc complains about uninitialized variable
  9.1.1480: Turkish translation outdated
  9.1.1479: regression when displaying localized percentage position
  9.1.1478: Unused assignment in ex_uniq()
  9.1.1476: no easy way to deduplicate text
  9.1.1476: missing out-of-memory checks in cmdexpand.c
  9.1.1475: completion: regression when "nearest" in 'completeopt'
  9.1.1474: missing out-of-memory check in mark.c
  9.1.1473: inconsistent range arg for :diffget/diffput
  9.1.1472: if_python: PySequence_Fast_{GET_SIZE,GET_ITEM} removed
  9.1.1471: completion: inconsistent ordering with CTRL-P
  9.1.1470: use-after-free with popup callback on error
  9.1.1469: potential buffer-underflow with invalid hl_id
  9.1.1468: filetype: bright(er)script files are not recognized
  9.1.1467: too many strlen() calls
  9.1.1466: filetype: not all lex files are recognized
  9.1.1465: tabpanel: not correctly drawn with 'equalalways'
  9.1.1464: gv does not work in operator-pending mode
  9.1.1463: Integer overflow in getmarklist() after linewise operation
  9.1.1462: missing change from patch v9.1.1461
  9.1.1461: tabpanel: tabpanel vanishes with popup menu
  9.1.1460: MS-Windows: too many strlen() calls in os_win32.c
  9.1.1459: xxd: coloring output is inefficient
  9.1.1458: tabpanel: tabs not properly updated with 'stpl'
  9.1.1457: compile warning with tabpanelopt
  9.1.1456: comment plugin fails toggling if 'cms' contains \
  9.1.1455: Haiku: dailog objects created with no reference
  9.1.1454: tests: no test for pum at line break position
  9.1.1453: tests: Test_geometry() may fail
  9.1.1452: completion: redundant check for completion flags
  9.1.1451: tabpanel rendering artifacts when scrolling
  9.1.1450: Session has wrong arglist with :tcd and :arglocal
  9.1.1449: typo in pum_display()
  9.1.1448: tabpanel is not displayed correctly when msg_scrolled
  9.1.1447: completion: crash when backspacing with fuzzy completion
  9.1.1446: filetype: cuda-gdb config files are not recognized
  9.1.1445: negative matchfuzzy scores although there is a match
  9.1.1444: Unused assignment in set_fuzzy_score()
  9.1.1443: potential buffer underflow in insertchar()
  9.1.1442: tests: Test_diff_fold_redraw() is insufficient
  9.1.1441: completion: code can be improved
  9.1.1440: too many strlen() calls in os_win32.c
  9.1.1439: Last diff folds not merged
  9.1.1438: tests: Test_breakindent_list_split() fails
  9.1.1437: MS-Windows: internal compile error in uc_list()
  9.1.1436: GUI control code is displayed on the console on startup
  9.1.1435: completion: various flaws in fuzzy completion
  9.1.1434: MS-Windows: missing out-of-memory checks in os_win32.c
  9.1.1433: Unnecessary :if when writing session
  9.1.1432: GTK GUI: Buffer menu does not handle unicode correctly
  9.1.1431: Hit-Enter Prompt when loading session files
  9.1.1430: tabpanel may flicker in the GUI
  9.1.1429: dragging outside the tabpanel changes tabpagenr
  9.1.1428: completion: register completion needs cleanup
  9.1.1427: rendering artifacts with the tabpanel
  9.1.1426: completion: register contents not completed
  9.1.1425: tabpanel: there are still some problems with the tabpanel
  9.1.1424: PMenu selection broken with multi-line selection and limits
  9.1.1423: :tag command not working correctly using Vim9 Script
  9.1.1422: scheduling of complete function can be improved
  9.1.1421: tests: need a test for the new-style tutor.tutor
  9.1.1420: tests: could need some more tests for shebang lines
  9.1.1419: It is difficult to ignore all but some events
  9.1.1418: configures GUI auto detection favors GTK2
  9.1.1417: missing info about register completion in complete_info()
  9.1.1416: completion limits not respected for fuzzy completions
  9.1.1415: potential use-after free when there is an error in 'tabpanel'
  9.1.1414: MS-Windows: compile warnings in os_win32.c
  9.1.1413: spurious CursorHold triggered in GUI on startup
  9.1.1412: tests: Test_tabpanel_tabonly() fails on larger screens
  9.1.1411: crash when calling non-existing function for tabpanel
  9.1.1410: out-of-bounds access with 'completefunc'
  9.1.1409: using f-flag in 'complete' conflicts with Neovim
  9.1.1408: not easily possible to complete from register content
  9.1.1407: Can't use getpos('v') in OptionSet when using setbufvar()
  9.1.1406: crash when importing invalid tuple
  9.1.1405: tests: no test for mapping with special keys in session file
  9.1.1404: wrong link to Chapter 2 in new-tutor
  9.1.1403: expansion of 'tabpanelopt' value adds wrong values
  9.1.1402: multi-byte mappings not properly stored in session file
  9.1.1401: list not materialized in prop_list()
  9.1.1400: [security]: use-after-free when evaluating tuple fails
  9.1.1399: tests: test_codestyle fails for auto-generated files
  9.1.1398: completion: trunc does not follow Pmenu highlighting attributes
  9.1.1397: tabpanel not correctly updated on :tabonly
  9.1.1396: 'errorformat' is a global option
  9.1.1395: search_stat not reset when pattern differs in case
  9.1.1394: tabpanel not correctly redrawn on tabonly
  9.1.1393: missing test for switching buffers and reusing curbuf
  9.1.1392: missing patch number
  9.1.1391: Vim does not have a vertical tabpanel
  9.1.1390: style: more wrong indentation
  9.1.1389: completion: still some issue when 'isexpand' contains a space
  9.1.1388: Scrolling one line too far with 'nosmoothscroll' page scrolling
  9.1.1387: memory leak when buflist_new() fails to reuse curbuf
  9.1.1386: MS-Windows: some minor problems building on AARCH64
  9.1.1385: inefficient loop for 'nosmoothscroll' scrolling
  9.1.1384: still some problem with the new tutors filetype plugin
  9.1.1383: completion: 'isexpand' option does not handle space char correct
  9.1.1382: if_ruby: unused compiler warnings from ruby internals
  9.1.1381: completion: cannot return to original text
  9.1.1380: 'eventignorewin' only checked for current buffer
  9.1.1379: MS-Windows: error when running evim when space in path
  9.1.1378: sign without text overwrites number option
  9.1.1377: patch v9.1.1370 causes some GTK warning messages
  9.1.1376: quickfix dummy buffer may remain as dummy buffer
  9.1.1375: [security]: possible heap UAF with quickfix dummy buffer
  9.1.1374: completion: 'smartcase' not respected when filtering matches
  9.1.1373: 'completeopt' checking logic can be simplified
  9.1.1372: style: braces issues in various files
  9.1.1371: style: indentation and brace issues in insexpand.c
  9.1.1370: CI Tests favor GTK2 over GTK3
  9.1.1369: configure still using autoconf 2.71
  9.1.1368: GTK3 and GTK4 will drop numeric cursor support.
  9.1.1367: too many strlen() calls in gui.c
  9.1.1366: v9.1.1364 unintentionally changed sign.c and sound.c
  9.1.1365: MS-Windows: compile warnings and too many strlen() calls
  9.1.1364: style: more indentation issues
  9.1.1363: style: inconsistent indentation in various files
  9.1.1362: Vim9: type ignored when adding tuple to instance list var
  9.1.1361: [security]: possible use-after-free when closing a buffer
  9.1.1360: filetype: GNU Radio companion files are not recognized
  9.1.1359: filetype: GNU Radio config files are not recognized
  9.1.1358: if_lua: compile warnings with gcc15
  9.1.1357: Vim incorrectly escapes tags with "[" in a help buffer
  9.1.1356: Vim9: crash when unletting variable
  9.1.1355: The pum_redraw() function is too complex
  9.1.1354: tests: Test_terminalwinscroll_topline() fails on Windows
  9.1.1353: missing change from v9.1.1350
  9.1.1352: style: inconsistent indent in insexpand.c
  9.1.1351: Return value of getcmdline() inconsistent in CmdlineLeavePre
  9.1.1350: tests: typo in Test_CmdlineLeavePre_cabbr()
  9.1.1349: CmdlineLeavePre may trigger twice
  9.1.1348: still E315 with the terminal feature
  9.1.1347: small problems with gui_w32.c
  9.1.1346: missing out-of-memory check in textformat.c
  9.1.1345: tests: Test_xxd_color2() test failure dump diff is misleading
  9.1.1344: double free in f_complete_match() (after v9.1.1341)
  9.1.1343: filetype: IPython files are not recognized
  9.1.1342: Shebang filetype detection can be improved
  9.1.1341: cannot define completion triggers
  9.1.1340: cannot complete :filetype arguments
  9.1.1339: missing out-of-memory checks for enc_to_utf16()/utf16_to_enc()
  9.1.1338: Calling expand() interferes with cmdcomplete_info()
  9.1.1337: Undo corrupted with 'completeopt' "preinsert" when switching buffer
  9.1.1336: comment plugin does not support case-insensitive 'commentstring'
  9.1.1335: Coverity complains about Null pointer dereferences
  9.1.1334: Coverity complains about unchecked return value
  9.1.1333: Coverity: complains about unutilized variable
  9.1.1332: Vim9: segfault when using super within a lambda
  9.1.1331: Leaking memory with cmdcomplete()
  9.1.1330: may receive E315 in terminal
  9.1.1329: cannot get information about command line completion
  9.1.1328: too many strlen() calls in indent.c
  9.1.1327: filetype: nroff detection can be improved
  9.1.1326: invalid cursor position after 'tagfunc'
  9.1.1325: tests: not checking error numbers properly
  9.1.1324: undefined behaviour if X11 connection dies
  9.1.1323: b:undo_ftplugin not executed when re-using buffer
  9.1.1322: small delete register cannot paste multi-line correctly
  9.1.1321: filetype: MS ixx and mpp files are not recognized
  9.1.1320: filetype: alsoft config files are not recognized
  9.1.1319: Various typos in the code, issue with test_inst_complete.vim
  9.1.1318: tests: test_format fails
  9.1.1317: noisy error when restoring folds from session fails
  9.1.1316: missing memory allocation failure in os_mswin.c
  9.1.1315: completion: issue with fuzzy completion and 'completefuzzycollect'
  9.1.1314: max allowed string width too small
  9.1.1313: compile warning about uninitialized value
  9.1.1312: tests: Test_backupskip() fails when HOME is defined
  9.1.1311: completion: not possible to limit number of matches
  9.1.1310: completion: redundant check for preinsert effect
  9.1.1309: tests: no test for 'pummaxwidth' with non-truncated "kind"
  9.1.1308: completion: cannot order matches by distance to cursor
  9.1.1307: make syntax does not reliably detect different flavors
  9.1.1306: completion menu rendering can be improved
  9.1.1305: completion menu active after switching windows/tabs
  9.1.1304: filetype: some man files are not recognized
  9.1.1303: missing out-of-memory check in linematch.c
  9.1.1302: Coverity warns about using uninitialized value
  9.1.1301: completion: cannot configure completion functions with 'complete'
  9.1.1300: wrong detection of -inf
  9.1.1299: filetype: mbsyncrc files are not recognized
  9.1.1298: define_function() is too long
  9.1.1297: Ctrl-D scrolling can get stuck
  9.1.1296: completion: incorrect truncation logic
  9.1.1295: clientserver: does not handle :stopinsert correctly
  9.1.1294: gui tabline menu does not use confirm when closing tabs
  9.1.1293: comment plugin does not handle 'exclusive' selection for comment object
  9.1.1292: statusline not correctly evaluated
  9.1.1291: too many strlen() calls in buffer.c
  9.1.1290: tests: missing cleanup in test_filetype.vim
  9.1.1289: tests: no test for matchparen plugin with WinScrolled event
  9.1.1288: Using wrong window in ll_resize_stack()
  9.1.1287: quickfix code can be further improved
  9.1.1286: filetype: help files not detected when 'iskeyword' includes ":"
  9.1.1285: Vim9: no error message for missing method after "super."
  9.1.1284: not possible to configure pum truncation char
  9.1.1283: quickfix stack is limited to 10 items
  9.1.1282: Build and test failure without job feature
  9.1.1281: extra newline output when editing stdin
  9.1.1280: trailing additional semicolon in get_matches_in_str()
  9.1.1279: Vim9: null_object and null_class are no reserved names
  9.1.1278: Vim9: too long functions in vim9type.c
  9.1.1277: tests: trailing comment char in test_popupwin
  9.1.1276: inline word diff treats multibyte chars as word char
  9.1.1275: MS-Windows: Not possible to pass additional flags to Make_mvc
  9.1.1274: Vim9: no support for object&lt;type&gt; as variable type
  9.1.1273: Coverity warns about using uninitialized value
  9.1.1272: completion: in keyword completion Ctrl_P cannot go back after Ctrl_N
  9.1.1271: filetype: Power Query files are not recognized
  9.1.1270: missing out-of-memory checks in buffer.c
  9.1.1269: completion: compl_shown_match is updated when starting keyword completion
  9.1.1268: filetype: dax files are not recognized
  9.1.1267: Vim9: no support for type list/dict&lt;object&lt;any&gt;&gt;
  9.1.1266: MS-Windows: type conversion warnings
  9.1.1265: tests: no tests for typing normal char during completion
  9.1.1264: Vim9: error when comparing objects
  9.1.1263: string length wrong in get_last_inserted_save()
  9.1.1262: heap-buffer-overflow with narrow 'pummaxwidth' value
  9.1.1261: No test for 'pummaxwidth' non-truncated items
  9.1.1260: Hang when filtering buffer with NUL bytes
  9.1.1259: some issues with comment package and tailing spaces
  9.1.1258: regexp: max \U and \%U value is limited by INT_MAX
  9.1.1257: Mixing vim_strsize() with mb_ptr2cells() in pum_redraw()
  9.1.1256: if_python: duplicate tuple data entries
  9.1.1255: missing test condition for 'pummaxwidth' setting
  9.1.1254: need more tests for the comment plugin
  9.1.1253: abort when closing window with attached quickfix data
  9.1.1252: typos in code and docs related to 'diffopt' "inline:"
  9.1.1251: if_python: build error with tuples and dynamic python
  9.1.1250: cannot set the maximum popup menu width
  9.1.1249: tests: no test that 'listchars' "eol" doesn't affect "gM"
  9.1.1248: compile error when building without FEAT_QUICKFIX
  9.1.1247: fragile setup to get (preferred) keys from key_name_entry
  9.1.1246: coverity complains about some changes in v9.1.1243
  9.1.1245: need some more tests for curly braces evaluation
  9.1.1244: part of patch v9.1.1242 was wrong
  9.1.1243: diff mode is lacking for changes within lines
  9.1.1242: Crash when evaluating variable name
  9.1.1241: wrong preprocessort indentation in term.c
  9.1.1240: Regression with ic/ac text objects and comment plugin
  9.1.1239: if_python: no tuple data type support
  9.1.1238: wrong cursor column with 'set splitkeep=screen'
  9.1.1237: Compile error with C89 compiler in term.c
  9.1.1236: tests: test_comments leaves swapfiles around
  9.1.1235: cproto files are outdated
  9.1.1234: Compile error when SIZE_MAX is not defined
  9.1.1233: Coverity warns about NULL pointer when triggering WinResized
  9.1.1232: Vim script is missing the tuple data type
  9.1.1231: filetype: SPA JSON files are not recognized
  9.1.1230: inconsistent CTRL-C behaviour for popup windows
  9.1.1229: the comment plugin can be improved
  9.1.1228: completion: current position column wrong after got a match
  9.1.1227: no tests for the comment package
  9.1.1226: "shellcmdline" completion doesn't work with input()
  9.1.1225: extra NULL check in VIM_CLEAR()
  9.1.1224: cannot :put while keeping indent
  9.1.1223: wrong translation used for encoding failures
  9.1.1222: using wrong length for last inserted string
  9.1.1221: Wrong cursor pos when leaving Insert mode just after 'autoindent'
  9.1.1220: filetype: uv.lock file not recognized
  9.1.1219: Strange error with wrong type for matchfuzzy() "camelcase"
  9.1.1218: missing out-of-memory check in filepath.c
  9.1.1217: tests: typos in test_matchfuzzy.vim
  9.1.1216: Pasting the '.' register multiple times may not work
  9.1.1215: Patch 9.1.1213 has some issues
  9.1.1214: matchfuzzy() can be improved for camel case matches
  9.1.1213: cannot :put while keeping indent
  9.1.1212: too many strlen() calls in edit.c
  9.1.1212: filetype: logrotate'd pacmanlogs are not recognized
  9.1.1211: TabClosedPre is triggered just before the tab is being freed
  9.1.1210: translation(ru): missing Russian translation for the new tutor
  9.1.1209: colorcolumn not drawn after virtual text lines
  9.1.1208: MS-Windows: not correctly restoring alternate screen on Win 10
  9.1.1207: MS-Windows: build warning in filepath.c
  9.1.1206: tests: test_filetype fails when a file is a directory
  9.1.1205: completion: preinserted text not removed when closing pum
  9.1.1204: MS-Windows: crash when passing long string to expand()
  9.1.1203: matchparen keeps cursor on case label in sh filetype
  9.1.1202: Missing TabClosedPre autocommand
  9.1.1201: 'completefuzzycollect' does not handle dictionary correctly
  9.1.1200: cmdline pum not cleared for input() completion
  9.1.1199: gvim uses hardcoded xpm icon file
  9.1.1198: [security]: potential data loss with zip.vim
  9.1.1197: process_next_cpt_value() uses wrong condition
  9.1.1196: filetype: config files for container tools are not recognized
  9.1.1195: inside try-block: fn body executed with default arg undefined
  9.1.1194: filetype: false positive help filetype detection
  9.1.1193: Unnecessary use of STRCAT() in au_event_disable()
  9.1.1192: Vim crashes with term response debug logging enabled
  9.1.1191: tests: test for patch 9.1.1186 doesn't fail without the patch
  9.1.1190: C indentation does not detect multibyte labels
  9.1.1189: if_python: build error due to incompatible pointer types
  9.1.1188: runtime(tera): tera support can be improved
  9.1.1187: matchparen plugin wrong highlights shell case statement
  9.1.1186: filetype: help files in git repos are not detected
  9.1.1185: endless loop with completefuzzycollect and no match found
  9.1.1184: Unnecessary use of vim_tolower() in vim_strnicmp_asc()
  9.1.1083: "above" virtual text breaks cursorlineopt=number
  9.1.1182: No cmdline completion for 'completefuzzycollect'
  9.1.1181: Unnecessary STRLEN() calls in insexpand.c
  9.1.1180: short-description
  9.1.1179: too many strlen() calls in misc2.c
  9.1.1178: not possible to generate completion candidates using fuzzy matching
  9.1.1177: filetype: tera files not detected
  9.1.1176: wrong indent when expanding multiple lines
  9.1.1175: inconsistent behaviour with exclusive selection and motion commands
  9.1.1174: tests: Test_complete_cmdline() may fail
  9.1.1173: filetype: ABNF files are not detected
  9.1.1172: [security]: overflow with 'nostartofline' and Ex command in tag file
  9.1.1171: tests: wrong arguments passed to assert_equal()
  9.1.1170: wildmenu highlighting in popup can be improved
  9.1.1169: using global variable for get_insert()/get_lambda_name()
  9.1.1168: wrong flags passed down to nextwild()
  9.1.1167: mark '] wrong after copying text object
  9.1.1166: command-line auto-completion hard with wildmenu
  9.1.1165: diff: regression with multi-file diff blocks
  9.1.1164: [security]: code execution with tar.vim and special crafted tar files
  9.1.1163: $MYVIMDIR is set too late
  9.1.1162: completion popup not cleared in cmdline
  9.1.1161: preinsert requires bot "menu" and "menuone" to be set
  9.1.1160: Ctrl-Y does not work well with "preinsert" when completing items
  9.1.1159: $MYVIMDIR may not always be set
  9.1.1158: :verbose set has wrong file name with :compiler!
  9.1.1157: command completion wrong for input()
  9.1.1156: tests: No test for what patch 9.1.1152 fixes
  9.1.1155: Mode message not cleared after :silent message
  9.1.1154: Vim9: not able to use autoload class accross scripts
  9.1.1153: build error on Haiku
  9.1.1152: Patch v9.1.1151 causes problems
  9.1.1151: too many strlen() calls in getchar.c
  9.1.1150: :hi completion may complete to wrong value
  9.1.1149: Unix Makefile does not support Brazilian lang for the installer
  9.1.1148: Vim9: finding imported scripts can be further improved
  9.1.1147: preview-window does not scroll correctly
  9.1.1146: Vim9: wrong context being used when evaluating class member
  9.1.1145: multi-line completion has wrong indentation for last line
  9.1.1144: no way to create raw strings from a blob
  9.1.1143: illegal memory access when putting a register
  9.1.1142: tests: test_startup fails if $HOME/$XDG_CONFIG_HOME is defined
  9.1.1141: Misplaced comment in readfile()
  9.1.1140: filetype: m17ndb files are not detected
  9.1.1139: [fifo] is not displayed when editing a fifo
  9.1.1138: cmdline completion for :hi is too simplistic
  9.1.1137: ins_str() is inefficient by calling STRLEN()
  9.1.1136: Match highlighting marks a buffer region as changed
  9.1.1135: 'suffixesadd' doesn't work with multiple items
  9.1.1134: filetype: Guile init file not recognized
  9.1.1133: filetype: xkb files not recognized everywhere
  9.1.1132: Mark positions wrong after triggering multiline completion
  9.1.1131: potential out-of-memory issue in search.c
  9.1.1130: 'listchars' "precedes" is not drawn on Tabs.
  9.1.1129: missing out-of-memory test in buf_write()
  9.1.1128: patch 9.1.1119 caused a regression with imports
  9.1.1127: preinsert text is not cleaned up correctly
  9.1.1126: patch 9.1.1121 used a wrong way to handle enter
  9.1.1125: cannot loop through pum menu with multiline items
  9.1.1124: No test for 'listchars' "precedes" with double-width char
  9.1.1123: popup hi groups not falling back to defaults
  9.1.1122: too many strlen() calls in findfile.c
  9.1.1121: Enter does not insert newline with "noselect"
  9.1.1120: tests: Test_registers fails
  9.1.1119: Vim9: Not able to use an autoloaded class from another autoloaded script
  9.1.1118: tests: test_termcodes fails
  9.1.1117: there are a few minor style issues
  9.1.1116: Vim9: super not supported in lambda expressions
  9.1.1115: [security]: use-after-free in str_to_reg()
  9.1.1114: enabling termguicolors automatically confuses users
  9.1.1113: tests: Test_terminal_builtin_without_gui waits 2 seconds
  9.1.1112: Inconsistencies in get_next_or_prev_match()
  9.1.1111: Vim9: variable not found in transitive import
  9.1.1110: Vim tests are slow and flaky
  9.1.1109: cmdexpand.c hard to read
  9.1.1108: 'smoothscroll' gets stuck with 'listchars' "eol"
  9.1.1107: cannot loop through completion menu with fuzzy
  9.1.1106: tests: Test_log_nonexistent() causes asan failure
  9.1.1105: Vim9: no support for protected new() method
  9.1.1104: CI: using Ubuntu 22.04 Github runners
  9.1.1103: if_perl: still some compile errors with Perl 5.38
  9.1.1102: tests: Test_WinScrolled_Resized_eiw() uses wrong filename
  9.1.1101: insexpand.c hard to read
  9.1.1100: tests: Test_log_nonexistent only works on Linux
  9.1.1099: Vim9: import with extends may crash
  9.1.1098: leaking memory with completing multi lines
  9.1.1097: --log with non-existent path causes a crash
  9.1.1096: if_perl: Perl 5.38 adds new symbols causing link failure
  9.1.1095: tests: matchparen plugin test wrongly named
  9.1.1094: Vim9: problem finding implemented method in type hierarchy
  9.1.1093: tests: output of test ...win32_ctrl_z depends on python version
  9.1.1092: tests: fix expected return code for python 3.13 on Windows
  9.1.1091: tests: timeout might be a bit too small
  9.1.1090: tests: test_terminwscroll_topline2 unreliable
  9.1.1089: tests: No check when tests are run under Github actions
  9.1.1088: tests: plugin tests are named inconsistently
  9.1.1087: Vim9: import with extends may crash
  9.1.1086: completion doesn't work with multi lines
  9.1.1085: filetype: cmmt files are not recognized
  9.1.1084: Unable to persistently ignore events in a window and its buffers
  9.1.1083: setreg() doesn't correctly handle mbyte chars in blockwise mode
  9.1.1082: unexpected DCS responses may cause out of bounds reads
  9.1.1081: has('bsd') is true for GNU/Hurd
  9.1.1080: filetype: Mill files are not recognized
  9.1.1079: GUI late startup leads to uninitialized scrollbars
  9.1.1078: Terminal ansi colors off by one after tgc reset
  9.1.1077: included syntax items do not understand contains=TOP
  9.1.1076: vim_strnchr() is strange and unnecessary
  9.1.1075: Vim9: len variable not used in compile_load()
  9.1.1074: Strange error when heredoc marker starts with "trim"
  9.1.1073: tests: test_compiler fails on Windows without Maven
  9.1.1072: 'diffopt' "linematch" cannot be used with {n} less than 10
  9.1.1071: args missing after failing to redefine a function
  9.1.1070: Cannot control cursor positioning of getchar()
  9.1.1069: preinsert text completions not deleted with &lt;C-W&gt;/&lt;C-U&gt;
  9.1.1068: getchar() can't distinguish between C-I and Tab
  9.1.1067: tests: Test_termwinscroll_topline2 fails on MacOS
  9.1.1066: heap-use-after-free and stack-use-after-scope with :14verbose
  9.1.1065: no digraph for "Approaches the limit"
  9.1.1064: not possible to use plural forms with gettext()
  9.1.1063: too many strlen() calls in userfunc.c
  9.1.1062: terminal: E315 when dragging the terminal with the mouse
  9.1.1061: tests: test_glvs fails when unarchiver not available
  9.1.1060: Vim always enables 'termguicolors' in a terminal
  9.1.1059: completion: input text deleted with preinsert when adding leader
  9.1.1058: translation(sr): Missing Serbian translation for the tutor
  9.1.1057: Superfluous cleanup steps in test_ins_complete.vim
  9.1.1056: Vim doesn't highlight to be inserted text when completing
  9.1.1055: make install fails because of a missing dependency
  9.1.1054: Vim doesn't work well with TERM=xterm-direct
  9.1.1053: "nosort" enables fuzzy filtering even if "fuzzy" isn't in 'completeopt'
  9.1.1052: tests: off-by-one error in CheckCWD in test_debugger.vim
  9.1.1051: tests: no support for env variables when running Vim in terminal
  9.1.1050: too many strlen() calls in os_unix.c
  9.1.1049: insert-completed items are always sorted
  9.1.1048: crash after scrolling and pasting in silent Ex mode
  9.1.1047: Makefiles uses non-portable syntax
  9.1.1046: fuzzymatching doesn't prefer matching camelcase
  9.1.1045: filetype: N-Tripels and TriG files are not recognized
  9.1.1044: Vim9: Patch 9.1.1014 causes regressions
  9.1.1043: [security]: segfault in win_line()
  9.1.1042: filetype: just files are not recognized
  9.1.1041: Vim9: out-of-bound access when echoing an enum
  9.1.1040: Vim9: imported type cannot be used as func return type
  9.1.1039: Vim9: comments are outdated
  9.1.1038: tests: test_channel.py fails with IPv6
  9.1.1037: Vim9: confusing error when using abstract method via super
  9.1.1036: make install fails when using shadowdir
  9.1.1035: Vim9: memory leak with blob2str()
  9.1.1033: Vim9: compiling abstract method fails without return
  9.1.1033: tests: shaderslang was removed from test_filetype erroneously
  9.1.1032: link error when FEAT_SPELL not defined
  9.1.1031: Coverity complains about insecure data handling
  9.1.1030: filetype: setting bash filetype is backwards incompatible
  9.1.1029: the installer can be improved
  9.1.1028: too many strlen() calls in screen.c
  9.1.1027: no sanitize check when running linematch
  9.1.1026: filetype: swc configuration files are not recognized
  9.1.1025: wrong return type of blob2str()
  9.1.1024: blob2str/str2blob() do not support list of strings
  9.1.1023: Coverity complains about dereferencing NULL pointer
  9.1.1022: linematch option value not completed
  9.1.1021: string might be used without a trailing NUL
  9.1.1020: no way to get current selected item in a async context
  9.1.1019: filetype: fd ignore files are not recognized
  9.1.1018: v9.1.0743 causes regression with diff mode
  9.1.1017: Vim9: Patch 9.1.1013 causes a few problems
  9.1.1016: Not possible to convert string2blob and blob2string
  9.1.1015: Coverity complains about dereferencing NULL value
  9.1.1014: Vim9: variable not found in transitive import
  9.1.1013: Vim9: Regression caused by patch v9.1.0646
  9.1.1012: Vim9: class interface inheritance not correctly working
  9.1.1011: popupmenu internal error with some abbr in completion item
  9.1.1010: filetype: VisualCode setting file not recognized
  9.1.1009: diff feature can be improved
  9.1.1008: tests: test for patch 9.1.1006 doesn't fail without the patch
  9.1.1007: filetype: various ignore are not recognized
  9.1.1006: PmenuMatch completion highlight can be combined
  9.1.1005: completion text is highlighted even with no pattern found
  9.1.1004: tests: a few termdebug tests are flaky
  9.1.1003: [security]: heap-buffer-overflow with visual mode
  9.1.1002: Vim9: unknown func error with interface declaring func var
  9.1.1001: ComplMatchIns highlight hard to read on light background
  9.1.1000: tests: ruby tests fail with Ruby 3.4
  9.1.0999: Vim9: leaking finished exception
  9.1.0998: filetype: TI assembly files are not recognized
  9.1.0997: too many strlen() calls in drawscreen.c
  9.1.0996: ComplMatchIns may highlight wrong text
  9.1.0995: filetype: shaderslang files are not detected
  9.1.0994: Vim9: not able to use comment after opening curly brace
  9.1.0993: New 'cmdheight' behavior may be surprising
  9.1.0992: Vim9: double-free after v9.1.0988
  9.1.0991: v:stacktrace has wrong type in Vim9 script
  9.1.0990: Inconsistent behavior when changing cmdheight
  9.1.0989: Vim9: Whitespace after the final enum value causes a syntax error
  9.1.0988: Vim9: no error when using uninitialized var in new()
  9.1.0987: filetype: cake files are not recognized
  9.1.0986: filetype: 'jj' filetype is a bit imprecise
  9.1.0985: Vim9: some ex commands can be shortened
  9.1.0984: exception handling can be improved
  9.1.0983: not able to get the displayed items in complete_info()
  9.1.0982: TI linker files are not recognized
  9.1.0981: tests: typo in test_filetype.vim
  9.1.0980: no support for base64 en-/decoding functions in Vim Script
  9.1.0979: VMS: type warning with $XDG_VIMRC_FILE
  9.1.0978: GUI tests sometimes fail when setting 'scroll' options
  9.1.0977: filetype: msbuild filetypes are not recognized
  9.1.0976: Vim9: missing return statement with throw
  9.1.0975: Vim9: interpolated string expr not working in object methods
  9.1.0974: typo in change of commit v9.1.0873
  9.1.0973: too many strlen() calls in fileio.c
  9.1.0972: filetype: TI linker map files are not recognized
  9.1.0971: filetype: SLNX files are not recognized
  9.1.0970: VMS: build errors on VMS architecture
  9.1.0969: ghostty not using kitty protocol by default
  9.1.0968: tests: GetFileNameChecks() isn't fully sorted by filetype name
  9.1.0967: SpotBugs compiler setup can be further improved
  9.1.0966: Vim9: :enum command can be shortened
  9.1.0965: filetype: sh filetype set when detecting the use of bash
  9.1.0964: MS-Windows: sed error with MinGW
  9.1.0963: fuzzy-matching does not prefer full match
  9.1.0962: filetype: bun.lock file is not recognized
  9.1.0961: filetype: TI gel files are not recognized
  9.1.0960: filetype: hy history files are not recognized
  9.1.0959: Coverity complains about type conversion
  9.1.0958: filetype: supertux2 config files detected as lisp
  9.1.0957: MS-Windows: conversion warnings
  9.1.0956: completion may crash, completion highlight wrong with preview window
  9.1.0955: Vim9: vim9compile.c can be further improved
  9.1.0954: popupmenu.c can be improved
  9.1.0953: filetype: APKBUILD files not correctly detected
  9.1.0952: Vim9: missing type checking for any type assignment
  9.1.0951: filetype: jshell files are not recognized
  9.1.0950: filetype: fennelrc files are not recognized
  9.1.0949: popups inconsistently shifted to the left
  9.1.0948: Missing cmdline completion for :pbuffer
  9.1.0947: short-description
  9.1.0946: cross-compiling fails on osx-arm64
  9.1.0945: ComplMatchIns highlight doesn't end after inserted text
  9.1.0944: tests: test_registers fails when not run under X11
  9.1.0943: Vim9: vim9compile.c can be further improved
  9.1.0942: a few typos were found
  9.1.0941: ComplMatchIns doesn't work after multibyte chars
  9.1.0940: Wrong cursor shape with "gq" and 'indentexpr' executes :normal
  9.1.0939: make installtutor fails
  9.1.0938: exclusive selection not respected when re-selecting block mode
  9.1.0937: test_undolist() is flaky
  9.1.0936: cannot highlight completed text
  9.1.0935: SpotBugs compiler can be improved
  9.1.0934: hard to view an existing buffer in the preview window
  9.1.0933: Vim9: vim9compile.c can be further improved
  9.1.0932: new Italian tutor not installed
  9.1.0931: ml_get error in terminal buffer
  9.1.0930: tests: test_terminal2 may hang in GUI mode
  9.1.0929: filetype: lalrpop files are not recognized
  9.1.0928: tests: test_popupwin fails because the filter command fails
  9.1.0927: style issues in insexpand.c
  9.1.0926: filetype: Pixi lock files are not recognized
  9.1.0925: Vim9: expression compiled when not necessary
  9.1.0924: patch 9.1.0923 causes issues
  9.1.0923: too many strlen() calls in filepath.c
  9.1.0923: wrong MIN macro in popupmenu.c
  9.1.0921: popupmenu logic is a bit convoluted
  9.1.0920: Vim9: compile_assignment() too long
  9.1.0919: filetype: some assembler files are not recognized
  9.1.0918: tiny Vim crashes with fuzzy buffer completion
  9.1.0917: various vartabstop and shiftround bugs when shifting lines
  9.1.0916: messages.c is exceeding 80 columns
  9.1.0915: GVim: default font size a bit too small
  9.1.0914: Vim9: compile_assignment() is too long
  9.1.0913: no error check for neg values for 'messagesopt'
  9.1.0912: xxd: integer overflow with sparse files and -autoskip
  9.1.0911: Variable name for 'messagesopt' doesn't match short name
  9.1.0910: 'messagesopt' does not check max wait time
  9.1.0909: Vim9: crash when calling instance method
  9.1.0908: not possible to configure :messages
  9.1.0907: printoptions:portrait does not change postscript Orientation
  9.1.0906: filetype: Nvidia PTX files are not recognized
  9.1.0905: Missing information in CompleteDone event
  9.1.0904: Vim9: copy-paste error in class_defining_member()
  9.1.0903: potential overflow in spell_soundfold_wsal()
  9.1.0902: filetype: Conda configuration files are not recognized
  9.1.0901: MS-Windows: vimtutor batch script can be improved
  9.1.0900: Vim9: digraph_getlist() does not accept bool arg
  9.1.0899: default for 'backspace' can be set in C code
  9.1.0898: runtime(compiler): pytest compiler not included
  9.1.0897: filetype: pyrex files are not detected
  9.1.0896: completion list wrong after v9.1.0891
  9.1.0895: default history value is too small
  9.1.0894: No test for what the spotbug compiler parses
  9.1.0893: No test that undofile format does not regress
  9.1.0892: the max value of 'tabheight' is limited by other tabpages
  9.1.0891: building the completion list array is inefficient
  9.1.0890: %! item not allowed for 'rulerformat'
  9.1.0889: Possible unnecessary redraw after adding/deleting lines
  9.1.0888: leftcol property not available in getwininfo()
  9.1.0887: Wrong expression in sign.c
  9.1.0886: filetype: debian control file not detected
  9.1.0885: style of sign.c can be improved
  9.1.0884: gcc warns about uninitialized variable
  9.1.0883: message history cleanup is missing some tests
  9.1.0882: too many strlen() calls in insexpand.c
  9.1.0881: GUI: message dialog may not get focus
  9.1.0880: filetype: C3 files are not recognized
  9.1.0879: source is not consistently formatted
  9.1.0878: termdebug: cannot enable DEBUG mode
  9.1.0877: tests: missing test for termdebug + decimal signs
  9.1.0876: filetype: openCL files are not recognized
  9.1.0875: filetype: hyprlang detection can be improved
  9.1.0874: filetype: karel files are not detected
  9.1.0873: filetype: Vivado files are not recognized
  9.1.0872: No test for W23 message
  9.1.0871: getcellpixels() can be further improved
  9.1.0870: too many strlen() calls in eval.c
  9.1.0869: Problem: curswant not set on gm in folded line
  9.1.0868: the warning about missing clipboard can be improved
  9.1.0867: ins_compl_add() has too many args
  9.1.0866: filetype: LLVM IR files are not recognized
  9.1.0865: filetype: org files are not recognized
  9.1.0864: message history is fixed to 200
  9.1.0863: getcellpixels() can be further improved
  9.1.0862: 'wildmenu' not enabled by default in nocp mode
  9.1.0861: Vim9: no runtime check for object member access of any var
  9.1.0860: tests: mouse_shape tests use hard code sleep value
  9.1.0859: several problems with the GLVS plugin
  9.1.0858: Coverity complains about dead code
  9.1.0857: xxd: --- is incorrectly recognized as end-of-options
  9.1.0856: mouseshape might be wrong on r and gr
  9.1.0855: setting 'cmdheight' may cause hit-enter-prompt
  9.1.0854: cannot get terminal cell size
  9.1.0853: filetype: kubernetes config file not recognized
  9.1.0852: No warning when X11 registers are not available
  9.1.0851: too many strlen() calls in getchar.c
  9.1.0850: Vim9: cannot access nested object inside objects
  9.1.0849: there are a few typos in the source
  9.1.0848: if_lua: v:false/v:true are not evaluated to boolean
  9.1.0847: tests: test_popupwin fails because of updated help file
  9.1.0846: debug symbols for xxd are not cleaned in Makefile
  9.1.0845: vimtutor shell script can be improved
  9.1.0844: if_python: no way to pass local vars to python
  9.1.0843: too many strlen() calls in undo.c
  9.1.0842: not checking for the sync() systemcall
  9.1.0841: tests: still preferring python2 over python3
  9.1.0840: filetype: idris2 files are not recognized
  9.1.0839: filetype: leo files are not recognized
  9.1.0838: vimtutor is bash-specific
  9.1.0837: cross-compiling has some issues
  9.1.0836: The vimtutor can be improved
  9.1.0835: :setglobal doesn't work properly for 'ffu' and 'tsrfu'
  9.1.0834: tests: 2html test fails
  9.1.0833: CI: recent ASAN changes do not work for indent tests
  9.1.0832: :set doesn't work for 'cot' and 'bkc' after :setlocal
  9.1.0831: 'findexpr' can't be used as lambad or Funcref
  9.1.0830: using wrong highlight group for spaces for popupmenu
  9.1.0829: Vim source code uses a mix of tabs and spaces
  9.1.0828: string_T struct could be used more often
  9.1.0827: CI: tests can be improved
  9.1.0826: filetype: sway files are not recognized
  9.1.0825: compile error for non-diff builds
  9.1.0824: too many strlen() calls in register.c
  9.1.0823: filetype: Zephyr overlay files not recognized
  9.1.0822: topline might be changed in diff mode unexpectedly
  9.1.0821: 'findexpr' completion doesn't set v:fname to cmdline argument
  9.1.0820: tests: Mac OS tests are too flaky
  9.1.0819: tests: using findexpr and imported func not tested
  9.1.0818: some global functions are only used in single files
  9.1.0817: termdebug: cannot evaluate expr in a popup
  9.1.0816: tests: not clear what tests cause asan failures
  9.1.0815: "above" virtual text causes wrong 'colorcolumn' position
  9.1.0814: mapset() may remove unrelated mapping
  9.1.0813: no error handling with setglobal and number types
  9.1.0812: Coverity warns about dereferencing NULL ptr
  9.1.0811: :find expansion does not consider 'findexpr'
  9.1.0810: cannot easily adjust the |:find| command
  9.1.0809: filetype: petalinux config files not recognized
  9.1.0808: Terminal scrollback doesn't shrink when decreasing 'termwinscroll'
  9.1.0807: tests: having 'nolist' in modelines isn't always desired
  9.1.0806: tests: no error check when setting global 'briopt'
  9.1.0805: tests: minor issues in gen_opt_test.vim
  9.1.0804: tests: no error check when setting global 'cc'
  9.1.0803: tests: no error check when setting global 'isk'
  9.1.0802: tests: no error check when setting global 'fdm' to empty value
  9.1.0801: tests: no error check when setting global 'termwinkey'
  9.1.0800: tests: no error check when setting global 'termwinsize'
  9.1.0799: tests: gettwinvar()/gettabwinvar() tests are not comprehensive
  9.1.0798: too many strlen() calls in cmdhist.c
  9.1.0797: testing of options can be further improved
  9.1.0796: filetype: libtool files are not recognized
  9.1.0795: filetype: Vivado memory info file are not recognized
  9.1.0794: tests: tests may fail on Windows environment
  9.1.0793: xxd: -e does add one extra space
  9.1.0792: tests: Test_set_values() is not comprehensive enough
  9.1.0791: tests: errors in gen_opt_test.vim are not shown
  9.1.0790: Amiga: AmigaOS4 build should use default runtime (newlib)
  9.1.0789: tests: ':resize + 5' has invalid space after '+'
  9.1.0788: &lt;CSI&gt;27;&lt;mod&gt;u is not decoded to literal Escape in kitty/foot
  9.1.0787: cursor position changed when using hidden terminal
  9.1.0786: tests: quickfix update test does not test location list
  9.1.0785: cannot preserve error position when setting quickfix list
  9.1.0784: there are several problems with python 3.13
  9.1.0783: 'spell' option setting has problems
  9.1.0782: tests: using wrong neomuttlog file name
  9.1.0781: tests: test_filetype fails
  9.1.0780: MS-Windows: incorrect Win32 error checking
  9.1.0779: filetype: neomuttlog files are not recognized
  9.1.0778: filetype: lf config files are not recognized
  9.1.0777: filetype: Some upstream php files are not recognized
  9.1.0776: test_strftime may fail because of missing TZ data
  9.1.0775: tests: not enough tests for setting options
  9.1.0774: "shellcmdline" doesn't work with getcompletion()
  9.1.0773: filetype: some Apache files are not recognized
  9.1.0772: some missing changes from v9.1.0771
  9.1.0771: completion attribute hl_group is confusing
  9.1.0770: current command line completion is a bit limited
  9.1.0769: filetype: MLIR files are not recognized
  9.1.0768: MS-Windows: incorrect cursor position when restoring screen
  9.1.0767: A condition is always true in ex_getln.c
  9.1.0766: too many strlen() calls in ex_getln.c
  9.1.0765: No test for patches 6.2.418 and 7.3.489
  9.1.0764: [security]: use-after-free when closing a buffer
  9.1.0763: tests: cannot run single syntax tests
  9.1.0762: 'cedit', 'termwinkey' and 'wildchar' may not be parsed correctly
  9.1.0761: :cd completion fails on Windows with backslash in path
  9.1.0760: tests: no error reported, if gen_opt_test.vim fails
  9.1.0759: screenpos() may return invalid position
  9.1.0758: it's possible to set an invalid key to 'wildcharm'
  9.1.0757: tests: messages files contains ANSI escape sequences
  9.1.0756: missing change from patch v9.1.0754
  9.1.0755: quickfix list does not handle hardlinks well
  9.1.0754: fixed order of items in insert-mode completion menu
  9.1.0753: Wrong display when typing in diff mode with 'smoothscroll'
  9.1.0752: can set 'cedit' to an invalid value
  9.1.0751: Error callback for term_start() not used
  9.1.0750: there are some Win9x legacy references
  9.1.0749: filetype: http files not recognized
  9.1.0748: :keep* commmands are sometimes misidentified as :k
  9.1.0747: various typos in repo found
  9.1.0746: tests: Test_halfpage_longline() fails on large terminals
  9.1.0745: filetype: bun and deno history files not recognized
  9.1.0744: filetype: notmuch configs are not recognised
  9.1.0743: diff mode does not handle overlapping diffs correctly
  9.1.0742: getcmdprompt() implementation can be improved
  9.1.0741: No way to get prompt for input()/confirm()
  9.1.0740: incorrect internal diff with empty file
  9.1.0739: [security]: use-after-free in ex_getln.c
  9.1.0738: filetype: rapid files are not recognized
  9.1.0737: tests: screendump tests may require a bit more time
  9.1.0736: Unicode tables are outdated
  9.1.0735: filetype: salt files are not recognized
  9.1.0734: filetype: jinja files are not recognized
  9.1.0733: keyword completion does not work with fuzzy
  9.1.0732: xxd: cannot use -b and -i together
  9.1.0731: inconsistent case sensitive extension matching
  9.1.0730: Crash with cursor-screenline and narrow window
  9.1.0729: Wrong cursor-screenline when resizing window
  9.1.0728: [security]: heap-use-after-free in garbage collection with location list user data
  9.1.0727: too many strlen() calls in option.c
  9.1.0726: not using correct python3 API with dynamic linking
  9.1.0725: filetype: swiftinterface files are not recognized
  9.1.0724: if_python: link error with python 3.13 and stable ABI
  9.1.0723: if_python: dynamic linking fails with python3 &gt;= 3.13
  9.1.0722: crash with large id in text_prop interface
  9.1.0721: tests: test_mksession does not consider XDG_CONFIG_HOME
  9.1.0720: Wrong breakindentopt=list:-1 with multibyte or TABs
  9.1.0719: Resetting cell widths can make 'listchars' or 'fillchars' invalid
  9.1.0718: hard to know the users personal Vim Runtime Directory
  9.1.0717: Unnecessary nextcmd NULL checks in parse_command_modifiers()
  9.1.0716: resetting setcellwidth() doesn't update the screen
  9.1.0715: Not correctly parsing color names (after v9.1.0709)
  9.1.0714: tests: GuiEnter_Turkish test may fail
  9.1.0713: Newline causes E749 in Ex mode
  9.1.0712: tests: missing dependency of Test_gettext_makefile
  9.1.0711: tests: test_xxd may file when using different xxd
  9.1.0710: popup window may hide part of Command line
  9.1.0709: GUIEnter event not found in Turkish locale
  9.1.0708: Recursive window update does not account for reset skipcol
  9.1.0707: [security]: invalid cursor position may cause a crash
  9.1.0706: tests: test_gettext fails when using shadow dir
  9.1.0705: Sorting of fuzzy filename completion is not stable
  9.1.0704: inserting with a count is inefficient
  9.1.0703: crash with 2byte encoding and glob2regpat()
  9.1.0702: Patch 9.1.0700 broke CI
  9.1.0701: crash with NFA regex engine when searching for composing chars
  9.1.0700: crash with 2byte encoding and glob2regpat()
  9.1.0699: "dvgo" is not always an inclusive motion
  9.1.0698: tests: "Untitled" file not removed when running Test_crash1_3 alone
  9.1.0697: [security]: heap-buffer-overflow in ins_typebuf
  9.1.0696: installing runtime files fails when using SHADOWDIR
  9.1.0695: tests: test_crash leaves Untitled file around
  9.1.0694: matchparen is slow on a long line
  9.1.0693: Configure doesn't show result when not using python3 stable abi
  9.1.0692: Wrong patlen value in ex_substitute()
  9.1.0691: python3: stable-abi may cause segfault on Python 3.11
  9.1.0690: cannot set special highlight kind in popupmenu
  9.1.0689: [security]: buffer-overflow in do_search() with 'rightleft'
  9.1.0688: Vim9: dereferences NULL pointer in check_type_is_value()
  9.1.0687: Makefile may not install desktop files
  9.1.0686: zip-plugin has problems with special characters
  9.1.0685: too many strlen() calls in usercmd.c
  9.1.0684: completion is inserted on Enter with "noselect"
  9.1.0683: mode() returns wrong value with &lt;Cmd&gt; mapping
  9.1.0682: Vim9: Segfault with uninitialized funcref
  9.1.0681: tests: Analyzing failed screendumps is hard
  9.1.0680: VMS does not have defined uintptr_t
  9.1.0679: Rename from w_closing to w_locked is incomplete
  9.1.0678: [security]: use-after-free in alist_add()
  9.1.0677: :keepp does not retain the substitute pattern
  9.1.0676: style issues with man pages
  9.1.0675: Patch v9.1.0674 causes problems
  9.1.0674: Vim9: compiling abstract method fails because of missing return
  9.1.0673: Vim9: too recursive func calls when calling super-class method
  9.1.0672: marker folds may get corrupted on undo
  9.1.0670: po file encoding fails on *BSD during make
  9.1.0669: if_python: stable python ABI not used by default
  9.1.0668: build-error with python3.12 and stable ABI
  9.1.0667: Some other options reset curswant unnecessarily when set
  9.1.0666: assert_equal() doesn't show multibyte string correctly
  9.1.0665: Locked variable can be changed in a :for loop
  9.1.0664: MS-Windows: console vim did not switch back to main screen on exit
  9.1.0663: tests: zip test still resets 'shellslash' option
  9.1.0662: filecopy() may return wrong value when readlink() fails
  9.1.0661: the zip plugin is not tested.
  9.1.0660: MS-Windows: Shift-Insert does work on old conhost
  9.1.0659: MS-Windows: MSVC Makefile is a bit hard to read
  9.1.0658: Coverity warns about dereferencing NULL pointer.
  9.1.0657: MS-Windows: MSVC build time can be optimized
  9.1.0656: MS-Windows: MSVC Makefile CPU handling can be improved
  9.1.0655: filetype: goaccess config file not recognized
  9.1.0654: completion does not respect completeslash with fuzzy
  9.1.0653: Patch v9.1.0648 not completely right
  9.1.0652: too many strlen() calls in syntax.c
  9.1.0651: ex: trailing dot is optional for :g and :insert/:append
  9.1.0650: Coverity warning in cstrncmp()
  9.1.0649: Wrong comment for "len" argument of call_simple_func()
  9.1.0648: [security] double-free in dialog_changed()
  9.1.0647: [security] use-after-free in tagstack_clear_entry
  9.1.0646: Vim9: imported function may not be found
  9.1.0645: regex: wrong match when searching multi-byte char case-insensitive
  9.1.0644: Unnecessary STRLEN() when applying mapping
  9.1.0643: terminal: cursor may end up on invalid position
  9.1.0642: Check that mapping rhs starts with lhs fails if not simplified
  9.1.0641: MS-Windows: OLE enabled in console version
  9.1.0640: Mingw: Makefile can be improved
  9.1.0639: channel timeout may wrap around
  9.1.0638: E1510 may happen when formatting a message for smsg()
  9.1.0637: MS-Windows: Style issues in MSVC Makefile
  9.1.0636: filetype: ziggy files are not recognized
  9.1.0635: filetype: SuperHTML template files not recognized
  9.1.0634: Ctrl-P not working by default
  9.1.0633: Compilation warnings with `-Wunused-parameter`
  9.1.0632: MS-Windows: Compiler Warnings
  9.1.0631: wrong completion list displayed with non-existing dir + fuzzy completion
  9.1.0630: MS-Windows: build fails with VIMDLL and mzscheme
  9.1.0629: Rename of pum hl_group is incomplete
  9.1.0628: MinGW: coverage files are not cleaned up
  9.1.0627: MinGW: build-error when COVERAGE is enabled
  9.1.0626: Vim9: need more tests with null objects
  9.1.0625: tests: test output all translated messages for all translations
  9.1.0624: ex command modifiers not found
  9.1.0623: Mingw: errors when trying to delete non-existing files
  9.1.0622: MS-Windows: mingw-build can be optimized
  9.1.0621: MS-Windows: startup code can be improved
  9.1.0620: Vim9: segfauls with null objects
  9.1.0619: tests: test_popup fails
  9.1.0618: cannot mark deprecated attributes in completion menu
  9.1.0617: Cursor moves beyond first line of folded end of buffer
  9.1.0616: filetype: Make syntax highlighting off for MS Makefiles
  9.1.0615: Unnecessary STRLEN() in make_percent_swname()
  9.1.0614: tests: screendump tests fail due to recent syntax changes
  9.1.0613: tests: termdebug test may fail and leave file around
  9.1.0612: filetype: deno.lock file not recognized
  9.1.0611: ambiguous mappings not correctly resolved with modifyOtherKeys
  9.1.0610: filetype: OpenGL Shading Language files are not detected
  9.1.0609: outdated comments in Makefile
  9.1.0608: Coverity warns about a few potential issues
  9.1.0607: termdebug: uses inconsistent style
  9.1.0606: tests: generated files may cause failure in test_codestyle
  9.1.0605: internal error with fuzzy completion
  9.1.0604: popup_filter during Press Enter prompt seems to hang
  9.1.0603: filetype: use correct extension for Dracula
  9.1.0602: filetype: Prolog detection can be improved
  9.1.0601: Wrong cursor position with 'breakindent' when wide char doesn't fit
  9.1.0600: Unused function and unused error constants
  9.1.0599: Termdebug: still get E1023 when specifying arguments
  9.1.0598: fuzzy completion does not work with default completion
  9.1.0597: KeyInputPre cannot get the (unmapped typed) key
  9.1.0596: filetype: devscripts config files are not recognized
  9.1.0595: make errors out with the po Makefile
  9.1.0594: Unnecessary redraw when setting 'winfixbuf'
  9.1.0593: filetype: Asymptote files are not recognized
  9.1.0592: runtime: filetype: Mediawiki files are not recognized
  9.1.0591: filetype: *.wl files are not recognized
  9.1.0590: Vim9: crash when accessing getregionpos() return value
  9.1.0589: vi: d{motion} and cw work differently than expected
  9.1.0588: The maze program no longer compiles on newer clang
  9.1.0587: tests: Test_gui_lowlevel_keyevent is still flaky
  9.1.0586: ocaml runtime files are outdated
  9.1.0585: tests: test_cpoptions leaves swapfiles around
  9.1.0584: Warning about redeclaring f_id() non-static
  9.1.0583: filetype: *.pdf_tex files are not recognized
  9.1.0582: Printed line doesn't overwrite colon when pressing Enter in Ex mode
  9.1.0581: Various lines are indented inconsistently
  9.1.0580: :lmap mapping for keypad key not applied when typed in Select mode
  9.1.0579: Ex command is still executed after giving E1247
  9.1.0578: no tests for :Tohtml
  9.1.0577: Unnecessary checks for v:sizeoflong in test_put.vim
  9.1.0576: tests: still an issue with test_gettext_make
  9.1.0575: Wrong comments in alt_tabpage()
  9.1.0574: ex: wrong handling of commands after bar
  9.1.0573: ex: no implicit print for single addresses
  9.1.0572: cannot specify tab page closing behaviour
  9.1.0571: tests: Test_gui_lowlevel_keyevent is flaky
  9.1.0570: tests: test_gettext_make can be improved
  9.1.0569: fnamemodify() treats ".." and "../" differently
  9.1.0568: Cannot expand paths from 'cdpath' setting
  9.1.0567: Cannot use relative paths as findfile() stop directories
  9.1.0566: Stop dir in findfile() doesn't work properly w/o trailing slash
  9.1.0565: Stop directory doesn't work properly in 'tags'
  9.1.0564: id() can be faster
  9.1.0563: Cannot process any Key event
  9.1.0562: tests: inconsistency in test_findfile.vim
  9.1.0561: netbeans: variable used un-initialized (Coverity)
  9.1.0560: bindtextdomain() does not indicate an error
  9.1.0559: translation of vim scripts can be improved
  9.1.0558: filetype: prolog detection can be improved
  9.1.0557: moving in the buffer list doesn't work as documented
  9.1.0556: :bwipe doesn't remove file from jumplist of other tabpages
  9.1.0555: filetype: angular ft detection is still problematic
  9.1.0554: :bw leaves jumplist and tagstack data around
  9.1.0553: filetype: *.mcmeta files are not recognized
  9.1.0552: No test for antlr4 filetype
  9.1.0551: filetype: htmlangular files are not properly detected
  9.1.0550: filetype: antlr4 files are not recognized
  9.1.0549: fuzzycollect regex based completion not working as expected
  9.1.0548: it's not possible to get a unique id for some vars
  9.1.0547: No way to get the arity of a Vim function
  9.1.0546: vim-tiny fails on CTRL-X/CTRL-A
  9.1.0545: MSVC conversion warning
  9.1.0544: filetype: ldapconf files are not recognized
  9.1.0543: Behavior of CursorMovedC is strange
  9.1.0542: Vim9: confusing string() output for object functions
  9.1.0541: failing test with Vim configured without channel
  9.1.0540: Unused assignment in sign_define_cmd()
  9.1.0539: Not enough tests for what v9.1.0535 fixed
  9.1.0538: not possible to assign priority when defining a sign
  9.1.0537: signed number detection for CTRL-X/A can be improved
  9.1.0536: filetype: zone files are not recognized
  9.1.0535: newline escape wrong in ex mode
  9.1.0534: completion wrong with fuzzy when cycling back to original
  9.1.0533: Vim9: need more tests for nested objects equality
  9.1.0532: filetype: Cedar files not recognized
  9.1.0531: resource leak in mch_get_random()
  9.1.0530: xxd: MSVC warning about non-ASCII character
  9.1.0529: silent! causes following try/catch to not work
  9.1.0528: spell completion message still wrong in translations
  9.1.0527: inconsistent parameter in Makefiles for Vim executable
  9.1.0526: Unwanted cursor movement with pagescroll at start of buffer
  9.1.0525: Right release selects immediately when pum is truncated.
  9.1.0524: the recursive parameter in the *_equal functions can be removed
  9.1.0523: Vim9: cannot downcast an object
  9.1.0522: Vim9: string(object) hangs for recursive references
  9.1.0521: if_py: _PyObject_CallFunction_SizeT is dropped in Python 3.13
  9.1.0520: Vim9: incorrect type checking for modifying lists
  9.1.0519: MS-Windows: libvterm compilation can be optimized
  9.1.0518: initialize the random buffer can be improved
  9.1.0517: MS-Windows: too long lines in Make_mvc.mak
  9.1.0516: need more tests for nested dicts and list comparision
  9.1.0515: Vim9: segfault in object_equal()
  9.1.0514: Vim9: issue with comparing objects recursively
  9.1.0513: Vim9: segfault with object comparison
  9.1.0512: Mode message for spell completion doesn't match allowed keys
  9.1.0511: CursorMovedC triggered wrongly with setcmdpos()
  9.1.0510: CI: test_gettext fails on MacOS14 + MSVC Win
  9.1.0509: not possible to translate Vim script messages
  9.1.0508: termdebug plugin can be further improved
  9.1.0507: hard to detect cursor movement in the command line
  9.1.0506: filetype: .envrc &amp; .prettierignore not recognized
  9.1.0505: filetype: Faust files are not recognized
  9.1.0504: inner-tag textobject confused about "&gt;" in attributes
  9.1.0503: cannot use fuzzy keyword completion
  9.1.0502: MS-Windows: too much legacy code
  9.1.0501: too complicated mapping restore in termdebug
  9.1.0500: cannot switch buffer in a popup
  9.1.0499: MS-Windows: doesn't handle symlinks properly
  9.1.0498: getcmdcompltype() interferes with cmdline completion
  9.1.0497: termdebug can be further improved
  9.1.0496: matched text is highlighted case-sensitively
  9.1.0495: Matched text isn't highlighted in cmdline pum
  9.1.0494: Wrong matched text highlighted in pum with 'rightleft'
  9.1.0493: Test for patch 9.1.0489 doesn't fail without the fix
  9.1.0492: filetype: Vim-script files not detected by shebang line
  9.1.0491: Cmdline pum doesn't work properly with 'rightleft'
  9.1.0490: minor style problems with patch 9.1.0487
  9.1.0489: default completion may break with fuzzy
  9.1.0488: Wrong padding for pum "kind" with 'rightleft'
  9.1.0487: completed item not update on fuzzy completion
  9.1.0486: filetype: Snakemake files are not recognized
  9.1.0485: Matched text shouldn't be highlighted in "kind" and "menu"
  9.1.0484: Sorting of completeopt+=fuzzy is not stable
  9.1.0483: glob() not sufficiently tested
  9.1.0482: termdebug plugin needs more love
  9.1.0481: Vim9: term_getjob() throws an exception on error
  9.1.0480: fuzzy string matching executed when not needed
  9.1.0479: fuzzy_match_str_with_pos() does unnecessary list operations
  9.1.0478: potential deref of NULL pointer in fuzzy_match_str_with_pos
  9.1.0477: block_editing errors out when using &lt;enter&gt;
  9.1.0476: Cannot see matched text in popup menu
  9.1.0475: cmod_split modifier is always reset in term_start()
  9.1.0474: CI: Test_ColonEight() fails on github runners
  9.1.0473: term_start() does not clear vertical modifier
  9.1.0472: Inconsistencies between functions for option flags
  9.1.0471: Crash when using autocmd_get() after removing event inside autocmd
  9.1.0470: tests: Test_ColonEight_MultiByte() fails sporadically
  9.1.0469: Cannot have buffer-local value for 'completeopt'
  9.1.0468: GvimExt does not consult HKEY_CURRENT_USER
  9.1.0467: typos in some comments
  9.1.0466: Missing comments for fuzzy completion
  9.1.0465: missing filecopy() function
  9.1.0464: no whitespace padding in commentstring option in ftplugins
  9.1.0463: no fuzzy-matching support for insert-completion
  9.1.0462: eval5() and eval7 are too complex
  9.1.0461: too many strlen() calls in drawline.c
  9.1.0460: filetype: lintstagedrc files are not recognized
  9.1.0459: Vim9: import autoload does not work with symlink
  9.1.0458: Coverity complains about division by zero
  9.1.0457: tests: test_gui fails on Wayland
  9.1.0456: Left shift is incorrect with vartabstop and shiftwidth=0
  9.1.0455: MS-Windows: compiler warning for size_t to int conversion
  9.1.0454: minor issues in test_filetype with rasi test
  9.1.0453: filetype: rasi files are not recognized
  9.1.0452: Configure checks for libelf unnecessarily
  9.1.0451: No test for escaping '&lt;' with shellescape()
  9.1.0450: evalc. code too complex
  9.1.0449: MS-Windows: Compiler warnings
  9.1.0448: compiler warning in eval.c
  9.1.0447: completion may be wrong when deleting all chars
  9.1.0446: getregionpos() inconsistent for partly-selected multibyte char
  9.1.0445: Coverity warning after 9.1.0440
  9.1.0444: Not enough tests for getregion() with multibyte chars
  9.1.0443: Can't use blockwise selection with width for getregion()
  9.1.0442: hare runtime files outdated
  9.1.0441: getregionpos() can't properly indicate positions beyond eol
  9.1.0440: function get_lval() is too long
  9.1.0439: Cannot filter the history
  9.1.0438: Wrong Ex command executed when :g uses '?' as delimiter
  9.1.0437: Motif requires non-const char pointer for XPM  data
  9.1.0436: Crash when using '?' as separator for :s
  9.1.0435: filetype: cygport files are not recognized
  9.1.0434: make errors trying to access autoload/zig
  9.1.0433: Wrong yanking with exclusive selection and ve=all
  9.1.0432: Ancient XPM preprocessor hack may cause build errors
  9.1.0431: eval.c is too long
  9.1.0430: getregionpos() doesn't handle one char selection
  9.1.0429: Coverity complains about eval.c refactor
  9.1.0428: Tag guessing leaves wrong search history with very short names
  9.1.0427: tests: some issues with termdebug mapping test
  9.1.0426: too many strlen() calls in search.c
  9.1.0425: filetype: purescript files are not recognized
  9.1.0424: filetype: slint files are not recognized
  9.1.0423: getregionpos() wrong with blockwise mode and multibyte
  9.1.0422: function echo_string_core() is too long
  9.1.0421: filetype: hyprlang files are not recognized
  9.1.0420: :browse oldfiles prompts even with single entry
  9.1.0419: eval.c not sufficiently tested
  9.1.0418: Cannot move to previous/next rare word
  9.1.0417: if_py: find_module has been removed in Python 3.12.0a7
  9.1.0416: some screen dump tests can be improved
  9.1.0415: Some functions are not tested
  9.1.0414: Unable to leave long line with 'smoothscroll' and 'scrolloff'
  9.1.0413: smoothscroll may cause infinite loop
  9.1.0412: typo in regexp_bt.c in DEBUG code
  9.1.0411: too long functions in eval.c
  9.1.0410: warning about uninitialized variable
  9.1.0409: too many strlen() calls in the regexp engine
  9.1.0408: configure fails on Fedora when including perl
  9.1.0407: Stuck with long line and half-page scrolling
  9.1.0406: Divide by zero with getmousepos() and 'smoothscroll'
  9.1.0405: tests: xxd buffer overflow fails on 32-bit
  9.1.0404: [security] xxd: buffer-overflow with specific flags
  9.1.0403: Vim9: not able to import file from start dir
  9.1.0402: filetype: mdd files detected as zsh filetype
  9.1.0401: filetype: zsh module files are not recognized
  9.1.0400: Vim9: confusing error message for unknown type
  9.1.0399: block_editing errors out when using del
  9.1.0398: Vim9: imported vars are not properly type checked
  9.1.0397: Wrong display with 'smoothscroll' when changing quickfix list
  9.1.0396: filetype: jj files are not recognized
  9.1.0395: getregionpos() may leak memory on error
  9.1.0394: Cannot get a list of positions describing a region
  9.1.0393: 'viewdir' not respecting $XDG_CONFIG_HOME
  9.1.0392: tests: Vim9 debug tests may be flaky
  9.1.0391: Vim9: could improve testing
  9.1.0390: filetype: inko files are not recognized
  9.1.0389: filetype: templ files are not recognized
  9.1.0388: cursor() and getregion() don't handle v:maxcol well
  9.1.0387: Vim9: null value tests not sufficient
  9.1.0386: filetype: stylus files not recognized
  9.1.0385: Vim9: crash with null_class and null_object
  9.1.0384: tests: vt420 terminfo entry may not be found
  9.1.0383: filetype: .out files recognized as tex files
  9.1.0382: filetype: Kbuild files are not recognized
  9.1.0381: cbuffer and similar commands don't accept a range
  9.1.0380: Calculating line height for unnecessary amount of lines
  9.1.0379: There are a few typos
  9.1.0378: Vim9: no comments allowed after class vars
  9.1.0377: Formatting text wrong when 'breakindent' is set
  9.1.0376: Vim9: Trailing commands after class/enum keywords ignored
  9.1.0375: tests: 1-second delay after Test_BufEnter_botline()
  9.1.0374: wrong botline in BufEnter
  9.1.0373: ops.c code uses too many strlen() calls
  9.1.0372: Calling CLEAR_FIELD() on the same struct twice
  9.1.0371: Vim9: compile_def_function() still too long
  9.1.0370: MS-Windows: patch number is zero in installer
  9.1.0369: Vim9: problem when importing autoloaded scripts
  9.1.0368: MS-Windows: Hard to define the Vim Patchlevel with leading zeroes
  9.1.0367: compile_def_function is too long
  9.1.0366: filetype: ondir files are not recognized
  9.1.0365: Crash when typing many keys with D- modifier
  9.1.0364: tests: test_vim9_builtin is a bit slow
  9.1.0363: tests: test_winfixbuf is a bit slow
  9.1.0362: expanding rc config files does not work well
  9.1.0361: Vim9: vim9type.c is too complicated
  9.1.0360: Vim9: does not handle autoloaded variables well
  9.1.0359: MS-Windows: relative import in a script sourced from a buffer doesn't work
  9.1.0358: wrong drawing in GUI with setcellwidth()
  9.1.0357: Page scrolling should place cursor at window boundaries
  9.1.0356: MS-Windows: --remote may change working directory
  9.1.0355: filetype: flake.lock files are not recognized
  9.1.0354: runtime(uci): No support for uci file types
  9.1.0353: tests: Test_autoload_import_relative_compiled fails on Windows
  9.1.0352: Finding cmd modifiers and cmdline-specials is inefficient
  9.1.0351: No test that completing a partial mapping clears 'showcmd'
  9.1.0350: tests: test_vim9_dissamble may fail
  9.1.0349: Vim9: need static type for typealias
  9.1.0348: X11 does not ignore smooth scroll event
  9.1.0347: A few typos in test_xdg when testing gvimrc
  9.1.0346: Patch v9.1.0338 fixed sourcing a script with import
  9.1.0345: Problem: gvimrc not sourced from XDG_CONFIG_HOME
  9.1.0344: Cursor wrong after using setcellwidth() in terminal
  9.1.0343: 'showcmd' wrong for partial mapping with multibyte
  9.1.0342: tests: test_taglist fails when 'helplang' contains non-english
  9.1.0341: Problem: a few memory leaks are found
  9.1.0340: Problem: Error with matchaddpos() and empty list
  9.1.0339: tests: xdg test uses screen dumps
  9.1.0338: Vim9: import through symlinks not correctly handled
  9.1.0337: Missing entry for XDG vimrc file in :version
  9.1.0336: tests: typo in test_xdg
  9.1.0335: String interpolation fails for List type
  9.1.0334: No test for highlight behavior with 'ambiwidth'
  9.1.0333: tests: test_xdg fails on the appimage repo
  9.1.0332: tests: some assert_equal() calls have wrong order of args
  9.1.0331: make install does not install all files</changelog>
  <changelog author="martin.schreiner@suse.com" date="1772625600">* Update Vim to version 9.2.0045 (from 9.1.1629).
  * Fix bsc#1258229 CVE-2026-26269 as 9.2.0045 is not impacted (fixed
  upstream).
  * Fix bsc#1246602 CVE-2025-53906 as 9.2.0045 is not impacted (fixed
  upstream).
  * Drop obsolete or upstreamed patches:
  - vim-7.3-filetype_spec.patch
  - vim-7.4-filetype_apparmor.patch
  - vim-8.2.2411-globalvimrc.patch
  * Refresh the following patches:
  - vim-7.3-filetype_changes.patch
  - vim-7.3-filetype_ftl.patch
  - vim-7.3-sh_is_bash.patch
  - vim-9.1.1134-revert-putty-terminal-colors.patch
  * Remove autoconf from BuildRequires and drop the autoconf call in %build.
  * Package new Swedish (sv) man pages and clean up duplicate encodings
  (sv.ISO8859-1 and sv.UTF-8) during %install.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773230400">* Update Vim to version 9.2.0110 (from 9.2.0045).
  * Specifically, this fixes bsc#1259051 / CVE-2026-28417.</changelog>
</package>
<package pkgid="41aefa6de0443cc094e8d57bc7d734c95942850562b555fdbeb9e7f0be4d0ceb0e1d23d46f411cf6925f2f2ee0e46ec05bd2d2c9b5219a07070e65c3aaf4dfe2" name="virglrenderer-debugsource" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="slfo.1.1_1.2"/>
  <changelog author="brogers@suse.com" date="1574769600">- Update package to 0.8.0
  Note: not switching to meson build system yet since it would
  exclude distos with older meson (seems meson v0.49+ is required)
  Highlights include:
  + guest support for GL 4.3 on hosts with GLES 3.2 + certain
    extensions,
  + major performance improvements, and
  + lots of bug fixes.
- The shared object (SO) version changes from 0 to 1 with this
  package update</changelog>
  <changelog author="lma@suse.com" date="1577102400">- Add 5 security fixes
  * Check resource creation more thoroughly (CVE-2019-18388 bsc#1159479)
  0001-5d03711-vrend-Keep-the-max-texture-sizes-in-the-vrend_state.patch
  0002-0d9a2c8-vrend-Check-resource-creation-more-thoroughly.patch
  * check info formats in blits (CVE-2019-18390 bsc#1159478)
  0003-24f67de-vrend-check-info-formats-in-blits.patch
  * check transfer bounds for negative values too (CVE-2019-18389 bsc#1159482)
  0004-cbc8d8b-vrend-check-transfer-bounds-for-negative-values-too-.patch
  * check transfer iov holds enough data for the data upload (CVE-2019-18391 bsc#1159486)
  0005-2abeb18-vrend-check-that-the-transfer-iov-holds-enough-data-.patch
  * Add an assert for allocating the intermediate texture (CVE-2019-18392 bsc#1159454)
  0006-164d758-vrend-Add-an-assert-for-allocating-the-intermediate-.patch</changelog>
  <changelog author="brogers@suse.com" date="1578312000">- Update package to 0.8.1
  Requires very recent libepoxy, which is currently only available
  in Factory. Accordingly also switch to meson build, which also
  excludes older releases.
  Other highlights include:
  + support emulating planar image sampling
  + Add all formats to VIRGL_FORMAT that are referenced in Gallium
  + deprecation of the autotools build system
  + miscellaneous bug and performance fixes
  + drop the following patches, which are included in this release:
    0001-5d03711-vrend-Keep-the-max-texture-sizes-in-the-vrend_state.patch
    0002-0d9a2c8-vrend-Check-resource-creation-more-thoroughly.patch
    0003-24f67de-vrend-check-info-formats-in-blits.patch
    0004-cbc8d8b-vrend-check-transfer-bounds-for-negative-values-too-.patch
    0005-2abeb18-vrend-check-that-the-transfer-iov-holds-enough-data-.patch
    0006-164d758-vrend-Add-an-assert-for-allocating-the-intermediate-.patch</changelog>
  <changelog author="brogers@suse.com" date="1580817600">- Avoid potential DoS in texture allocation (CVE-2020-8003
  boo#1162521)
  vrend-Don-t-free-resource-struct-in-_resource_alloca.patch
- Avoid potential DoS if grid launched without prior Compute Shader
  (CVE-2020-8002 boo#1162519)
  vrend-Don-t-try-launching-a-grid-if-no-CS-is-availab.patch
- Avoid deleting wrong object, in use by others
  vrend-Use-the-original-context-to-delete-objects.patch
- Avoid potential use after free when deleting context
  vrend-Don-t-switch-to-ctx0-when-deleting-ctx0.patch</changelog>
  <changelog author="brogers@suse.com" date="1581508800">- Update package to 0.8.2
  Release is all bug fixes it seems. It includes these patches in
  the release tarball:
  vrend-Don-t-free-resource-struct-in-_resource_alloca.patch
  vrend-Don-t-try-launching-a-grid-if-no-CS-is-availab.patch
  vrend-Use-the-original-context-to-delete-objects.patch
  vrend-Don-t-switch-to-ctx0-when-deleting-ctx0.patch</changelog>
  <changelog author="brogers@suse.com" date="1617537600">- Update package to 0.9.0
  Highlights include:
  + multi-client support
  + supports newer glsl version
  + add ETC2 compressed formats
  + performance improvements
  + misc. bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1619697600">- Update to version 0.9.1:
  * Various small bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1642420800">- security update
- added patches
  fix CVE-2022-0175 [bsc#1194601], VUL-0: CVE-2022-0175: virglrenderer: Missing initialization of res-&gt;ptr
  + virglrenderer-CVE-2022-0175.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1642766400">- Pick up the full upstream patch for bsc#1194601, so we know from where it comes
  * No functional change intended</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- security update
  * Fix OOB in read_transfer_data() (CVE-2022-0135 bsc#1195389)
    Add virglrenderer-CVE-2022-0135.patch</changelog>
</package>
<package pkgid="ae861fd7d41f730725ace3332ba4ace7978c5e12fabd7d39a3cb32bf1b82c2479fd590c2d422ac79c56772fa70c9db255d85068f2f01a9395c4ddf655f0e582a" name="virt-top-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="slfo.1.1_1.1"/>
  <changelog author="mlatimer@suse.com" date="1441281600">- Add ia64 and s390/s390x to ExcludeArch</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Ignore also Warning: 52 to fix build with ocaml 4.03 (fate#320836)</changelog>
  <changelog author="mlatimer@suse.com" date="1471348800">- Updated source code location and format to match upstream</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Remove usage of ExcludeArch (bsc#1031359)</changelog>
  <changelog author="olaf@aepfle.de" date="1494331200">- Install also bytecode with virt-top.bytecode.patch (bsc#1031359)</changelog>
  <changelog author="olaf@aepfle.de" date="1572609600">- Require current dune macros
- Update to version 1.0.9, via _service file
- Remove virt-top-aarch64.patch
- Remove virt-top-no-immutable-warning.patch
- Remove virt-top.bytecode.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1575288000">- calendar, csv and xml-light are not optional</changelog>
  <changelog author="olaf@aepfle.de" date="1649073600">- New upstream version 1.1.1
- Use virt-top.patch to build with dune</changelog>
  <changelog author="ohering@suse.de" date="1677844800">- Require OCaml 4.8 or later for building</changelog>
  <changelog author="ohering@suse.de" date="1705406400">- Remove usage of dune.configurator because ocamlfind names which
  contain a dot are not considered valid anymore with dune 3.13</changelog>
</package>
<package pkgid="8228d384008476f3126ba84de264383dadb67a450855d1da156cd7e102f238955fd7f62df89c38099916b2e8bb2bc35d91cd3226dfc1354f1cdb29af42f7a2f4" name="virt-top-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="slfo.1.1_1.1"/>
  <changelog author="mlatimer@suse.com" date="1441281600">- Add ia64 and s390/s390x to ExcludeArch</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Ignore also Warning: 52 to fix build with ocaml 4.03 (fate#320836)</changelog>
  <changelog author="mlatimer@suse.com" date="1471348800">- Updated source code location and format to match upstream</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Remove usage of ExcludeArch (bsc#1031359)</changelog>
  <changelog author="olaf@aepfle.de" date="1494331200">- Install also bytecode with virt-top.bytecode.patch (bsc#1031359)</changelog>
  <changelog author="olaf@aepfle.de" date="1572609600">- Require current dune macros
- Update to version 1.0.9, via _service file
- Remove virt-top-aarch64.patch
- Remove virt-top-no-immutable-warning.patch
- Remove virt-top.bytecode.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1575288000">- calendar, csv and xml-light are not optional</changelog>
  <changelog author="olaf@aepfle.de" date="1649073600">- New upstream version 1.1.1
- Use virt-top.patch to build with dune</changelog>
  <changelog author="ohering@suse.de" date="1677844800">- Require OCaml 4.8 or later for building</changelog>
  <changelog author="ohering@suse.de" date="1705406400">- Remove usage of dune.configurator because ocamlfind names which
  contain a dot are not considered valid anymore with dune 3.13</changelog>
</package>
<package pkgid="332acf68493fe2463c41cfece2f7c3b27ae23cf1d4d2e16d344763a41232b3d35097c7a0b9db11e55fb553df1f55b56e14927c792c8dbab829f1697ab5ac5c0d" name="virt-what-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.25" rel="slfo.1.1_1.2"/>
  <changelog author="kkaempf@suse.com" date="1387800000">- Initial release 1.13</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1402056000">- Build version 1.14
  * Differentiate between vserver host and guest
  * Detect new Xen VMs (RHBZ#973663)
  * xen: Don't emit warning message if /proc/xen/capabilities file does not exist
  * Fix various typos and mistakes in comments</changelog>
  <changelog author="tampakrap@opensuse.org" date="1417089600">- cosmetics: run spec-cleaner, use 'make install'
- run tests
- install the license</changelog>
  <changelog author="dvaleev@suse.com" date="1440590400">- Require dmidecode only on intel and ARM architectures</changelog>
  <changelog author="tampakrap@opensuse.org" date="1447934400">- Version bump 1.15. No upstream changelog, see
  http://git.annexia.org/?p=virt-what.git;a=shortlog;h=refs/tags/1.15</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Add gpg signature
- Tiny spec file cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1579003200">- Version bump 1.20. No upstream changelog, see
  http://git.annexia.org/?p=virt-what.git;a=shortlog;h=refs/tags/v1.20</changelog>
  <changelog author="mardnh@gmx.de" date="1580126400">- Add "which" to Requires
  * Fixes boo#1161850, bsc#1176132</changelog>
  <changelog author="dmueller@suse.com" date="1620820800">- update to 1.21:
  * Nutanix Acropolis Hypervisor detection
  * podman detection</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 1.25:
  * detect AWS arm virtual instance as kvm
  * google-cloud: Print "kvm" fact on aarch64 instances
  * illumos-lx: Fix test so it works under virtualization
  * Detect Illumos (SmartOS/OmniOS) LX virtualization
  * Add detection of Red Hat's hypervisor
  * Display kvm/qemu fact for Nutanix AHV
  * Add support for Alibaba Cloud Linux
  * Add support for VMware ESXi on ARM
  * aws: Match multi-digit version number in BIOS information</changelog>
</package>
<package pkgid="18796c81c3891565e4b7471bdcc561b7fbba2bb739372578be515b2202fe5b7cb4c646f9bd9a90351c46fa86bee6723b83e7d19a2f962b1876f3b5821f5fb215" name="virt-what-debugsource" arch="aarch64">
  <version epoch="0" ver="1.25" rel="slfo.1.1_1.2"/>
  <changelog author="kkaempf@suse.com" date="1387800000">- Initial release 1.13</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1402056000">- Build version 1.14
  * Differentiate between vserver host and guest
  * Detect new Xen VMs (RHBZ#973663)
  * xen: Don't emit warning message if /proc/xen/capabilities file does not exist
  * Fix various typos and mistakes in comments</changelog>
  <changelog author="tampakrap@opensuse.org" date="1417089600">- cosmetics: run spec-cleaner, use 'make install'
- run tests
- install the license</changelog>
  <changelog author="dvaleev@suse.com" date="1440590400">- Require dmidecode only on intel and ARM architectures</changelog>
  <changelog author="tampakrap@opensuse.org" date="1447934400">- Version bump 1.15. No upstream changelog, see
  http://git.annexia.org/?p=virt-what.git;a=shortlog;h=refs/tags/1.15</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Add gpg signature
- Tiny spec file cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1579003200">- Version bump 1.20. No upstream changelog, see
  http://git.annexia.org/?p=virt-what.git;a=shortlog;h=refs/tags/v1.20</changelog>
  <changelog author="mardnh@gmx.de" date="1580126400">- Add "which" to Requires
  * Fixes boo#1161850, bsc#1176132</changelog>
  <changelog author="dmueller@suse.com" date="1620820800">- update to 1.21:
  * Nutanix Acropolis Hypervisor detection
  * podman detection</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 1.25:
  * detect AWS arm virtual instance as kvm
  * google-cloud: Print "kvm" fact on aarch64 instances
  * illumos-lx: Fix test so it works under virtualization
  * Detect Illumos (SmartOS/OmniOS) LX virtualization
  * Add detection of Red Hat's hypervisor
  * Display kvm/qemu fact for Nutanix AHV
  * Add support for Alibaba Cloud Linux
  * Add support for VMware ESXi on ARM
  * aws: Match multi-digit version number in BIOS information</changelog>
</package>
<package pkgid="052bd32529ae18e06583aa4e04043095a38ef64f817974584790631c511849f21fe6e856a66ead7a1e74837b85716001ef1620631e744ba2698d7d46b7fc2cb4" name="virtiofsd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10.1" rel="slfo.1.1_2.1"/>
  <changelog author="caleb.crane@suse.com" date="1684843200">- Initial release of virtiofsd v1.6.1</changelog>
  <changelog author="caleb.crane@suse.com" date="1685016000">- Remove exclusive arch, only disable for 32-bit archs (i586 and armv7l)
- Add package conflict with the previous implementation of virtiofsd inside
  older versions of the qemu-tools package (qemu-tools &lt; 8)</changelog>
  <changelog author="caleb.crane@suse.com" date="1685707200">- Add qemu config file to ensure qemu is aware of the virtiofsd executable
- https://www.reddit.com/r/suse/comments/13xmote/vm_with_virtiofs_does_not_start_unable_to_find_a/</changelog>
  <changelog author="caleb.crane@suse.com" date="1693483200">- Update to upstream version v1.7.2 (jsc#4980)
  - Add supplementary group extension support
  - Prevent EPERM failures with O_NOATIME
  - Fix cache timeouts
  - seccomp: Allow SYS_sched_yield
  - Allow to provide the same argument multiple times
  - Add the -V/--version options
- Upgrade vendored dependencies</changelog>
  <changelog author="caleb.crane@suse.com" date="1706616000">- Fix CVE-2023-50711: vmm-sys-util: out of bounds memory accesses (bsc#1218502, bsc#1218500)
- Update to version 1.10.1:
  * Bump version to v1.10.1
  * Fix mandatory user namespaces
  * Don't drop supplemental groups in unprivileged user namespace
  * Bump version to v1.10.0
  * Update rust-vmm dependencies (bsc#1218500)
  * Bump version to v1.9.0
- Spec: switch to using the upstream virtio-fs config file for qemu
- Spec: switch back to greedy cargo updates of vendored dependencies</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1772452800">- Add CVE-2026-25727.patch: Avoid denial of service when parsing
  Rfc2822(bsc#1257912 CVE-2026-25727).</changelog>
</package>
<package pkgid="91dc16ce47f663447d80c8ee00c7102245be4273170d002fdd86177a0723d09b85b9f64b241b88c98bac9a889b4079bfb64b23ddbddd515582b56f3efc95c1bb" name="virtiofsd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10.1" rel="slfo.1.1_2.1"/>
  <changelog author="caleb.crane@suse.com" date="1684843200">- Initial release of virtiofsd v1.6.1</changelog>
  <changelog author="caleb.crane@suse.com" date="1685016000">- Remove exclusive arch, only disable for 32-bit archs (i586 and armv7l)
- Add package conflict with the previous implementation of virtiofsd inside
  older versions of the qemu-tools package (qemu-tools &lt; 8)</changelog>
  <changelog author="caleb.crane@suse.com" date="1685707200">- Add qemu config file to ensure qemu is aware of the virtiofsd executable
- https://www.reddit.com/r/suse/comments/13xmote/vm_with_virtiofs_does_not_start_unable_to_find_a/</changelog>
  <changelog author="caleb.crane@suse.com" date="1693483200">- Update to upstream version v1.7.2 (jsc#4980)
  - Add supplementary group extension support
  - Prevent EPERM failures with O_NOATIME
  - Fix cache timeouts
  - seccomp: Allow SYS_sched_yield
  - Allow to provide the same argument multiple times
  - Add the -V/--version options
- Upgrade vendored dependencies</changelog>
  <changelog author="caleb.crane@suse.com" date="1706616000">- Fix CVE-2023-50711: vmm-sys-util: out of bounds memory accesses (bsc#1218502, bsc#1218500)
- Update to version 1.10.1:
  * Bump version to v1.10.1
  * Fix mandatory user namespaces
  * Don't drop supplemental groups in unprivileged user namespace
  * Bump version to v1.10.0
  * Update rust-vmm dependencies (bsc#1218500)
  * Bump version to v1.9.0
- Spec: switch to using the upstream virtio-fs config file for qemu
- Spec: switch back to greedy cargo updates of vendored dependencies</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1772452800">- Add CVE-2026-25727.patch: Avoid denial of service when parsing
  Rfc2822(bsc#1257912 CVE-2026-25727).</changelog>
</package>
<package pkgid="b6043139c47dff4f6c94293f1a07e2cd00ff18ef80927bde6ec99c7e288e68db281b2082a4c82df9c44e30f7d3ec5a841268ad8dfff07e70344ed7a7718301c7" name="vulkan-loader-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.290" rel="slfo.1.1_1.3"/>
  <changelog author="jengelh@inai.de" date="1680091200">- Update to release SDK-1.3.243.0
  * Log when VK_LAYER_PATH is ignored
  * Implement VK_LUNARG_direct_driver_loading</changelog>
  <changelog author="jengelh@inai.de" date="1681905600">- Update to 1.3.247
  * Make correct layer be used when duplicates are present
  * Fix ordering regression for VK_INSTANCE_LAYERS</changelog>
  <changelog author="jengelh@inai.de" date="1685448000">- Update to release SDK-1.3.250.0
  * No changes over 1.3.247 [SDK-250 is a branch of regular-243
    with some cherry-picks bringing it to roughly regular-247;
    there is little relation to regular-250]</changelog>
  <changelog author="jengelh@inai.de" date="1692705600">- Update to release SDK-1.3.261.0
  * Warn when ICD Manifest version differs from
    vkEnumerateInstanceVersion
  * Enable VK_KHR_maintenance_5 support</changelog>
  <changelog author="jengelh@inai.de" date="1698408000">- Update to release SDK-1.3.268.0
  * Add VK_LOADER_LAYERS_ALLOW environment variable.
  * Add Debug extension support to test layer</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Align the fallback XDG config dirs with SUSE spec in-case it
  can't read it from the environment</changelog>
  <changelog author="stigpro@outlook.fr" date="1705579200">- Update to release SDK-1.3.275.0
  * Instance extensions unsupported by physical devices now return
    ERROR_EXTENSION_NOT_PRESENT
  * Unload drivers which report 0 physical devices</changelog>
  <changelog author="jengelh@inai.de" date="1710936000">- Update to release SDK-1.3.280.0
  * Bugfixes for Windows</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release SDK-1.3.283.0
  * Bugfixes for Windows</changelog>
  <changelog author="jengelh@inai.de" date="1721736000">- Update to release SDK-1.3.290
  * Remove faulty fallback for unknown functions
  * tests: Allow test ICD to handle NULL pApplicationInfo
  * Fix preloaded ICDs being freed with custom allocators
  * Fix RegCloseKey exeption when double-closing hKeys</changelog>
</package>
<package pkgid="a0cbcccd000051842b3a800d7459745c6878cbc721be7b77ff1b2dfd655037c24c7b675f42a806dfecb2d6cc1e501d48d6ab174706d72a26766abbdae6d49b33" name="wayland-debugsource" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="slfo.1.1_2.1"/>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="llyyr.public@gmail.com" date="1680609600">- Update to release 1.22.0
  * This new release adds explicit events for the preferred buffer scale
    and transform, adds an event to indicate the pointer's physical scroll
    direction, adds a few new convenience functions, and includes various
    spec clarifications and bug fixes.</changelog>
</package>
<package pkgid="33cd7b1dbcada416df95cdde3452654fea62683c9f1bc8f49ca7902d512f3af11e14044baa15fdd560f4388d3078c5804fa0c5fc41a433c58ac6919241a08b2e" name="wb-cifs-idmap-plugin-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.0" rel="slfo.1.1_2.1"/>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="lnussel@suse.com" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts (bsc#1235788);</changelog>
</package>
<package pkgid="4ef9aaecf51d495c1f9d1eb9087ed8d874f178b1ffb229602c1d7352a8f21e35aa6343d41e84fbc64bd64bcac401820783430b5aa47af1ae420f0073adbd4041" name="wget-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.24.5" rel="slfo.1.1_2.1"/>
  <changelog author="josef.moellers@suse.com" date="1620648000">- If wget for an http URL is redirected to a different site (hostname
  parts of URLs differ), then any "Authenticate" and "Cookie" header
  entries are discarded.
  [bsc#1175551, wget-do-not-propagate-credentials.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620648001">- When running recursively, wget will verify the length of the whole
  URL when saving the files. This will make it overwrite files with
  truncated names, throwing the "The name is too long, ... trying to
  shorten" messages. The patch moves the length check code to a
  separate function and call it from the append_dir_structure() for each
  path element.
  [ bsc#1181173, 0001-src-main.c-Introduce-truncate_filename-option.patch]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- GNU wget 1.21.2:
  * Support for autoconf 2.71
  * Fix a double free in FTP when using an absolute path
  * --page-requisites will now also download links marked as
  "alternate stylesheet" or "icon"
- drop 0001-src-main.c-Introduce-truncate_filename-option.patch
  superseded by upstream changes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- GNU wget 1.21.3:
  * Fix computation of total bytes downloaded during FTP transfers
  * Add option to select TLS 1.3 on the command line
  * Fix HSTS build issues on some 64-bit big-endian systems
  * Hide password during status report in --no-verbose
  * Remove a sprurious print statement that showed up even during
  - -quiet</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1684238400">- GNU wget 1.21.4:
  * Document --retry-on-host-error in help text
  * Increase read buffer size to 64k.
    This should speed up downloads on gigabit and faster connections
  * Update deprecated option '--html-extension' to
    '--adjust-extension' in documentation</changelog>
  <changelog author="dimstar@opensuse.org" date="1686571200">- Update wget-libproxy.patch: ensure to properly use libproxy
  cflags from pkg-config. Fixes build against libproxy 0.5.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710072000">- GNU wget 1.24.5:
  * Fix how subdomain matches are checked for HSTS.
  * Wget will now also parse the srcset attribute in &lt;source&gt; HTML
    tags
  * Support reading fetchmail style "user" and "passwd" fields from
    netrc
  * In some cases, prevent the confusing "Cannot write to...
    (success)" error messages
  * Support extremely fast download speeds (TB/s)
  * Ensure that CSS URLs are corectly quoted
  * libproxy support is now upstream- drop wget-libproxy.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1718712000">- Fix mishandled semicolons in the userinfo subcomponent could lead to an
  insecure behavior in which data that was supposed to be in the userinfo
  subcomponent is misinterpreted to be part of the host subcomponent.
  [bsc#1226419, CVE-2024-38428, properly-re-implement-userinfo-parsing.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1732708800">- Drop support for shorthand URLs
  * Breaking change to fix CVE-2024-10524.
  [+ drop-support-for-shorthand-URLs.patch, bsc#1233773]</changelog>
</package>
<package pkgid="5fbc15de02613fe57e8d186998216826111a7219102a123f38b459bc0f405176f0ffefea33697be1f2fb4db2f471de3e26ae5f1ce4d0da854c920563c283faca" name="wget-debugsource" arch="aarch64">
  <version epoch="0" ver="1.24.5" rel="slfo.1.1_2.1"/>
  <changelog author="josef.moellers@suse.com" date="1620648000">- If wget for an http URL is redirected to a different site (hostname
  parts of URLs differ), then any "Authenticate" and "Cookie" header
  entries are discarded.
  [bsc#1175551, wget-do-not-propagate-credentials.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620648001">- When running recursively, wget will verify the length of the whole
  URL when saving the files. This will make it overwrite files with
  truncated names, throwing the "The name is too long, ... trying to
  shorten" messages. The patch moves the length check code to a
  separate function and call it from the append_dir_structure() for each
  path element.
  [ bsc#1181173, 0001-src-main.c-Introduce-truncate_filename-option.patch]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- GNU wget 1.21.2:
  * Support for autoconf 2.71
  * Fix a double free in FTP when using an absolute path
  * --page-requisites will now also download links marked as
  "alternate stylesheet" or "icon"
- drop 0001-src-main.c-Introduce-truncate_filename-option.patch
  superseded by upstream changes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- GNU wget 1.21.3:
  * Fix computation of total bytes downloaded during FTP transfers
  * Add option to select TLS 1.3 on the command line
  * Fix HSTS build issues on some 64-bit big-endian systems
  * Hide password during status report in --no-verbose
  * Remove a sprurious print statement that showed up even during
  - -quiet</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1684238400">- GNU wget 1.21.4:
  * Document --retry-on-host-error in help text
  * Increase read buffer size to 64k.
    This should speed up downloads on gigabit and faster connections
  * Update deprecated option '--html-extension' to
    '--adjust-extension' in documentation</changelog>
  <changelog author="dimstar@opensuse.org" date="1686571200">- Update wget-libproxy.patch: ensure to properly use libproxy
  cflags from pkg-config. Fixes build against libproxy 0.5.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710072000">- GNU wget 1.24.5:
  * Fix how subdomain matches are checked for HSTS.
  * Wget will now also parse the srcset attribute in &lt;source&gt; HTML
    tags
  * Support reading fetchmail style "user" and "passwd" fields from
    netrc
  * In some cases, prevent the confusing "Cannot write to...
    (success)" error messages
  * Support extremely fast download speeds (TB/s)
  * Ensure that CSS URLs are corectly quoted
  * libproxy support is now upstream- drop wget-libproxy.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1718712000">- Fix mishandled semicolons in the userinfo subcomponent could lead to an
  insecure behavior in which data that was supposed to be in the userinfo
  subcomponent is misinterpreted to be part of the host subcomponent.
  [bsc#1226419, CVE-2024-38428, properly-re-implement-userinfo-parsing.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1732708800">- Drop support for shorthand URLs
  * Breaking change to fix CVE-2024-10524.
  [+ drop-support-for-shorthand-URLs.patch, bsc#1233773]</changelog>
</package>
<package pkgid="340cf965082bc37bd9b185ec8bc02fe8d2a364aee8c6def31ce353f8b2e615072526d949976677f9ccb2bfa264705ee21c96bc0150364a7dcea32c1eb41e2858" name="which-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.21" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1358683200">- Split "which" off util-linux</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- GNU which 2.21:
  * Upgraded code from bash to version 4.3 (now uses eaccess).
  * Fixed a bug related to getgroups / sysconfig that caused Which
    not to see more than 64 groups for a single user
  * Build system maintenance.
- Update project and source URL to GNU project</changelog>
  <changelog author="mpluskal@suse.com" date="1441800000">- Cleanup spec file with spec-cleaner
- Correct usage of info scriplets</changelog>
  <changelog author="tchvatal@suse.com" date="1465300800">- Move installinfo scriptlet to preun so it won't fail</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1650369600">- https urls, added signature (but did not find the public key)</changelog>
</package>
<package pkgid="6acdda95ddd90cf5040885c50a51554b993066dd92dafdbf57aa6ac0c953ec219d66c8a903b015c3925f3add85d000d921e1b8ce7af0f0ab4bb701818edfd062" name="which-debugsource" arch="aarch64">
  <version epoch="0" ver="2.21" rel="slfo.1.1_1.4"/>
  <changelog author="jengelh@inai.de" date="1358683200">- Split "which" off util-linux</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- GNU which 2.21:
  * Upgraded code from bash to version 4.3 (now uses eaccess).
  * Fixed a bug related to getgroups / sysconfig that caused Which
    not to see more than 64 groups for a single user
  * Build system maintenance.
- Update project and source URL to GNU project</changelog>
  <changelog author="mpluskal@suse.com" date="1441800000">- Cleanup spec file with spec-cleaner
- Correct usage of info scriplets</changelog>
  <changelog author="tchvatal@suse.com" date="1465300800">- Move installinfo scriptlet to preun so it won't fail</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1650369600">- https urls, added signature (but did not find the public key)</changelog>
</package>
<package pkgid="3de233ed997ee596a8cb780e7c1d326bba11f07897102db0ff4785aef637c8d43def80f480644d5e54708e9f6688d340f0812269dae991ddb99d94046de97732" name="wireless-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="30.pre9" rel="slfo.1.1_1.2"/>
  <changelog author="rmilasan@suse.com" date="1360929600">- Move iwlwifi-led.sh to where udev is installed using pkg-config.
  Apply the same thing also for 99-iwlwifi-led.rules (only
  openSUSE 12.3 and up).</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385640000">- install udev rules in _udevrulesdir.</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- Remove superfluous iwlagn module config (bnc#831819)
- Fix build with openSUSE 12.2 and SLE11</changelog>
  <changelog author="ledest@gmail.com" date="1413633600">- fix bashisms in install_*_scripts</changelog>
  <changelog author="ledest@gmail.com" date="1413633601">- update URL in install_intersil_firmware script</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1516622400">- improved install scripts (using install instead of mv and using $UID:
  * install_acx100_firmware
  * install_intersil_firmware
- updated URL in install_acx100_firmware script (bnc#1004577)
- improved spec file
  * removed obsolete openSUSE Versions checks
  * replaced bash variables with macros
  * removed obsolete tags and macros
  * cleaned spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1575115200">- Convert wireless-tools.changes to proper UTF-8 format: new
  version of RPM are getting strict in interpreting files.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files in %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mwilck@suse.com" date="1646740800">- Fix URLs (wireless-tools home page has been migrated to github.io)</changelog>
</package>
<package pkgid="bd5a155a2356e0655cd3f0a05a552fa28c0f51a0b3a682d8d70b6b3f6d178b7ea5050da70bed9b3c9fac5bc6c843389d6627e9e265873c59944787f094eb18a8" name="wireless-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="30.pre9" rel="slfo.1.1_1.2"/>
  <changelog author="rmilasan@suse.com" date="1360929600">- Move iwlwifi-led.sh to where udev is installed using pkg-config.
  Apply the same thing also for 99-iwlwifi-led.rules (only
  openSUSE 12.3 and up).</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385640000">- install udev rules in _udevrulesdir.</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- Remove superfluous iwlagn module config (bnc#831819)
- Fix build with openSUSE 12.2 and SLE11</changelog>
  <changelog author="ledest@gmail.com" date="1413633600">- fix bashisms in install_*_scripts</changelog>
  <changelog author="ledest@gmail.com" date="1413633601">- update URL in install_intersil_firmware script</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1516622400">- improved install scripts (using install instead of mv and using $UID:
  * install_acx100_firmware
  * install_intersil_firmware
- updated URL in install_acx100_firmware script (bnc#1004577)
- improved spec file
  * removed obsolete openSUSE Versions checks
  * replaced bash variables with macros
  * removed obsolete tags and macros
  * cleaned spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1575115200">- Convert wireless-tools.changes to proper UTF-8 format: new
  version of RPM are getting strict in interpreting files.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files in %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mwilck@suse.com" date="1646740800">- Fix URLs (wireless-tools home page has been migrated to github.io)</changelog>
</package>
<package pkgid="c0dbe4a4ef264c7c39f905fa909d9d7761c0ea20b297bb5282c45f9f4ce5fd2398b667b790ec5c3002dde0d1d861f38084f032de7ca5bd43f16e0c97fc01a7f7" name="wpa_supplicant-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.11" rel="slfo.1.1_1.2"/>
  <changelog author="hpj@urpla.net" date="1644062400">- Apply Revert-DBus-Add-sae-to-interface-key_mgmt-capabilities.patch
  to fix connect with AVM FB, if WPA3 transition mode is activated,
  e.g. Wifi -&gt; Security: is WPA2 + WPA3, alt. switch to WPA2 (CCMP)
  (bsc#1195312)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Move the dbus-1 system.d file to /usr (bsc#1200342)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1655726400">- Remove Revert-DBus-Add-sae-to-interface-key_mgmt-capabilities.patch
  Fixed in NetworkManager (glfo#NetworkManager/NetworkManager#a0988868).
  Wifi cards, wich do not support PMF/BIP ciphers, should not use
  SAE as key management. (bsc#1195312)</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1655812801">- Removed %config flag for files in /usr directory.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1657022400">- Add dbus-Fix-property-DebugShowKeys-and-DebugTimestamp.patch
  (bsc#1201219)</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1684238400">- Change ctrl_interface from /var/run to %_rundir (/run)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1707998400">- Add CVE-2023-52160.patch - Bypassing WiFi Authentication (bsc#1219975)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1726056000">- update to v2.11:
  * Wi-Fi Easy Connect
  - add support for DPP release 3
  - allow Configurator parameters to be provided during config exchange
  * HE/IEEE 802.11ax/Wi-Fi 6
  - various fixes
  * EHT/IEEE 802.11be/Wi-Fi 7
  - add preliminary support
  * SAE: add support for fetching the password from a RADIUS server
  * support OpenSSL 3.0 API changes
  * support background radar detection and CAC with some additional
    drivers
  * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3)
  * EAP-SIM/AKA: support IMSI privacy
  * improve 4-way handshake operations
  - use Secure=1 in message 3 during PTK rekeying
  * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases
    to avoid interoperability issues
  * support new SAE AKM suites with variable length keys
  * support new AKM for 802.1X/EAP with SHA384
  * extend PASN support for secure ranging
  * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP)
  - this is based on additional details being added in the IEEE 802.11
    standard
  - the new implementation is not backwards compatible
  * improved ACS to cover additional channel types/bandwidths
  * extended Multiple BSSID support
  * fix beacon protection with FT protocol (incorrect BIGTK was provided)
  * support unsynchronized service discovery (USD)
  * add preliminary support for RADIUS/TLS
  * add support for explicit SSID protection in 4-way handshake
    (a mitigation for CVE-2023-52424; disabled by default for now, can be
    enabled with ssid_protection=1)
  * fix SAE H2E rejected groups validation to avoid downgrade attacks
  * use stricter validation for some RADIUS messages
  * a large number of other fixes, cleanup, and extensions
- refresh patches:
    wpa_supplicant-dump-certificate-as-PEM-in-debug-mode.diff
    wpa_supplicant-sigusr1-changes-debuglevel.patch
- drop patches:
    CVE-2023-52160.patch
    dbus-Fix-property-DebugShowKeys-and-DebugTimestamp.patch</changelog>
</package>
<package pkgid="eb52da2c5be754a90c7f43bc6639c5fa33332facd8ae39f53682ac3c44a249332cbbb30656df528915f8a6273e3a9f68c9709722679d058fcba6a182de017232" name="wpa_supplicant-debugsource" arch="aarch64">
  <version epoch="0" ver="2.11" rel="slfo.1.1_1.2"/>
  <changelog author="hpj@urpla.net" date="1644062400">- Apply Revert-DBus-Add-sae-to-interface-key_mgmt-capabilities.patch
  to fix connect with AVM FB, if WPA3 transition mode is activated,
  e.g. Wifi -&gt; Security: is WPA2 + WPA3, alt. switch to WPA2 (CCMP)
  (bsc#1195312)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Move the dbus-1 system.d file to /usr (bsc#1200342)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1655726400">- Remove Revert-DBus-Add-sae-to-interface-key_mgmt-capabilities.patch
  Fixed in NetworkManager (glfo#NetworkManager/NetworkManager#a0988868).
  Wifi cards, wich do not support PMF/BIP ciphers, should not use
  SAE as key management. (bsc#1195312)</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1655812801">- Removed %config flag for files in /usr directory.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1657022400">- Add dbus-Fix-property-DebugShowKeys-and-DebugTimestamp.patch
  (bsc#1201219)</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1684238400">- Change ctrl_interface from /var/run to %_rundir (/run)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1707998400">- Add CVE-2023-52160.patch - Bypassing WiFi Authentication (bsc#1219975)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1726056000">- update to v2.11:
  * Wi-Fi Easy Connect
  - add support for DPP release 3
  - allow Configurator parameters to be provided during config exchange
  * HE/IEEE 802.11ax/Wi-Fi 6
  - various fixes
  * EHT/IEEE 802.11be/Wi-Fi 7
  - add preliminary support
  * SAE: add support for fetching the password from a RADIUS server
  * support OpenSSL 3.0 API changes
  * support background radar detection and CAC with some additional
    drivers
  * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3)
  * EAP-SIM/AKA: support IMSI privacy
  * improve 4-way handshake operations
  - use Secure=1 in message 3 during PTK rekeying
  * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases
    to avoid interoperability issues
  * support new SAE AKM suites with variable length keys
  * support new AKM for 802.1X/EAP with SHA384
  * extend PASN support for secure ranging
  * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP)
  - this is based on additional details being added in the IEEE 802.11
    standard
  - the new implementation is not backwards compatible
  * improved ACS to cover additional channel types/bandwidths
  * extended Multiple BSSID support
  * fix beacon protection with FT protocol (incorrect BIGTK was provided)
  * support unsynchronized service discovery (USD)
  * add preliminary support for RADIUS/TLS
  * add support for explicit SSID protection in 4-way handshake
    (a mitigation for CVE-2023-52424; disabled by default for now, can be
    enabled with ssid_protection=1)
  * fix SAE H2E rejected groups validation to avoid downgrade attacks
  * use stricter validation for some RADIUS messages
  * a large number of other fixes, cleanup, and extensions
- refresh patches:
    wpa_supplicant-dump-certificate-as-PEM-in-debug-mode.diff
    wpa_supplicant-sigusr1-changes-debuglevel.patch
- drop patches:
    CVE-2023-52160.patch
    dbus-Fix-property-DebugShowKeys-and-DebugTimestamp.patch</changelog>
</package>
<package pkgid="3ea63c33eb765de8a4b9f7e97c77702ab0aeb636502e36b5c4b361798f5f696865464958f419f540c4352168c45e8f617620749b7f4dbf78d335a4ee4e6ed11b" name="wtmpdb-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.13.0+git.20240814" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.com" date="1691582400">- Update to version 0.8.0
  - wtmpdb boottime: print boot time</changelog>
  <changelog author="kukuk@suse.com" date="1692014400">- Update to version 0.9.0
  - Try to detect systemctl soft-reboot
  - Many conversation warning/error fixes</changelog>
  <changelog author="kukuk@suse.com" date="1692705600">- Fix last.1 manual page reference
- Update to version 0.9.1
  - Fix printf format specifier on 32bit</changelog>
  <changelog author="schubi@suse.com" date="1695124800">- Update to version 0.9.2
  - Set busy timeout for DB access: The process is waiting until
    5 seconds for DB connection if the DB is locked by another
    process.</changelog>
  <changelog author="kukuk@suse.com" date="1698321600">- Update to version 0.9.3
  - wtmpdb last: don't print date in the future if there is no
    db entry</changelog>
  <changelog author="kukuk@suse.com" date="1702468800">- Update to version 0.10.0
  - last: support matching for username and/or tty</changelog>
  <changelog author="kukuk@suse.com" date="1704715200">- Update to version 0.11.0
  - last: add support for time-format option</changelog>
  <changelog author="kukuk@suse.com" date="1715169600">- Update to version 0.12.0+git.20240508:
  - boot: Query systemd if soft-reboot was done</changelog>
  <changelog author="kukuk@suse.com" date="1721995200">- Update to version 0.13.0+git.20240726:
  * Release version 0.13.0
  * Fix variable overflow and check for it (#15)</changelog>
  <changelog author="kukuk@suse.com" date="1723636800">- Update to version 0.13.0+git.20240814:
  * wtmpdb-update-boot service requires dbus</changelog>
</package>
<package pkgid="a923d70519b4fc0773373e49348d2d5eb62d4b19b3a21cd203ba291bc1ebaa8b1e3cee49857e53917be1eb04804d994fde80aa2fc314f9757b3c41013db3a8a4" name="wtmpdb-debugsource" arch="aarch64">
  <version epoch="0" ver="0.13.0+git.20240814" rel="slfo.1.1_1.2"/>
  <changelog author="kukuk@suse.com" date="1691582400">- Update to version 0.8.0
  - wtmpdb boottime: print boot time</changelog>
  <changelog author="kukuk@suse.com" date="1692014400">- Update to version 0.9.0
  - Try to detect systemctl soft-reboot
  - Many conversation warning/error fixes</changelog>
  <changelog author="kukuk@suse.com" date="1692705600">- Fix last.1 manual page reference
- Update to version 0.9.1
  - Fix printf format specifier on 32bit</changelog>
  <changelog author="schubi@suse.com" date="1695124800">- Update to version 0.9.2
  - Set busy timeout for DB access: The process is waiting until
    5 seconds for DB connection if the DB is locked by another
    process.</changelog>
  <changelog author="kukuk@suse.com" date="1698321600">- Update to version 0.9.3
  - wtmpdb last: don't print date in the future if there is no
    db entry</changelog>
  <changelog author="kukuk@suse.com" date="1702468800">- Update to version 0.10.0
  - last: support matching for username and/or tty</changelog>
  <changelog author="kukuk@suse.com" date="1704715200">- Update to version 0.11.0
  - last: add support for time-format option</changelog>
  <changelog author="kukuk@suse.com" date="1715169600">- Update to version 0.12.0+git.20240508:
  - boot: Query systemd if soft-reboot was done</changelog>
  <changelog author="kukuk@suse.com" date="1721995200">- Update to version 0.13.0+git.20240726:
  * Release version 0.13.0
  * Fix variable overflow and check for it (#15)</changelog>
  <changelog author="kukuk@suse.com" date="1723636800">- Update to version 0.13.0+git.20240814:
  * wtmpdb-update-boot service requires dbus</changelog>
</package>
<package pkgid="bbd866d46e45cb5f47663e2374a97b7532a98862634c2607b924fe91852c99e15d5da220a6b58b6fc45fbd3e565ff3d4693fa11354a740258f37cd691f2fbca6" name="xauth-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.2" rel="slfo.1.1_1.2"/>
  <changelog author="vuntz@opensuse.org" date="1334318400">- Split xauth from xorg-x11. Initial version: 1.0.5.</changelog>
  <changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 1.0.7:
  + Remove alarm handler in get_hostname
  + Add const attributes to fix gcc -Wwrite-strings warnings
  + convert strlen/malloc/strcpy combo to strdup
- Changes from version 1.0.6:
  + auth_finalize: Attempt to rename() if link() fails
  + Error out and avoid a call to malloc(0) if given a bad hex
    string
  + Build system fixes.
- Rebase xauth-tolerant-hostname-changes.diff.</changelog>
  <changelog author="sndirsch@suse.com" date="1382702400">- Update to version 1.0.8
  * Fix a long standing problem that for ssh tunneled connections a
    display variable of the form: localhost:&lt;N&gt;.&lt;M&gt; leads to correct
    authorization when an X client is started but "xauth list $DISPLAY"
    returns nothing.
  * Fix for: If using GDM with XDMCP, then ssh is not able to start X11
    clients on the remote side. You get a "No xauth data; using fake
    authentication data for X11 forwarding." from SSH.
- obsoletes xauth-1.0.2.diff,
  u_xauth_Look-for-FamilyLocal-if-inet-or-inet6-addr.patch
- adjusted xauth-tolerant-hostname-changes.diff
- added new test_xauth tool to %files section</changelog>
  <changelog author="sndirsch@suse.com" date="1399464000">- Update to version 1.0.9
  * Add AC_USE_SYSTEM_EXTENSIONS to expose non-standard extensions
  * Do not install test_xauth during "make install" as it is
  * Fix warning about warn_unused_result triggered by WRITES.
  * Fixed missing EXTRA_DIST in tests. Extended README for releasing.</changelog>
  <changelog author="sndirsch@suse.com" date="1485950400">- Update to version 1.0.10
  * include POSIX-standard limits.h for PATH_MAX instead of sys/syslimits.h
  * autogen.sh: Honor NOCONFIGURE=1
  * Clarified RELEASING in README
  * Fix for xauth failing on ENOSPC (= disk full)
  * autogen.sh: use quoted string variables
  * Update DISPLAY parsing to work with new launchd paths in Yosemite
  * Fix !HAVE_STRLCPY case
  * Build xauth before running tests.
  * autogen: add default patch prefix
  * autogen.sh: stop using maintainer mode
  * autogen.sh: use exec instead of waiting for configure to finish
  * usage(): Print summary for the -n option</changelog>
  <changelog author="sndirsch@suse.com" date="1562932800">- Update to version 1.1
  * This release fixes a race condition where an existing
    authority file would be unlinked (possibly causing other
    clients to fail to connect), and fixes sorting and merging
    of authority file entries.</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- modernize spec file (move license to licensedir)</changelog>
  <changelog author="sndirsch@suse.com" date="1638187200">- update to version 1.1.1
  * This is a minor bugfix release, including fixes for reported
    crashes.</changelog>
  <changelog author="sndirsch@suse.com" date="1650456000">- update to version 1.1.2
  * tests: make tests work in out-of-tree builds
  * tests: Fix failure to make distcheck
  * tests: report failure if stderr has unexpected output
  * configure.ac: fail build if xtrans is not found
  * gitlab CI: add a basic build test
  * Build xz tarballs instead of bzip2
  * Fix off-by-one in quote-stripping routines
  * gitlab CI: stop requiring Signed-off-by in commits
  * Improve portability
  * Removed build requirement "cmdtest".
  * Fix warning -Wstringop-truncation for strncpy by using memcpy instead
  * Expand checks of socket file with S_ISSOCK</changelog>
</package>
<package pkgid="2ce74e788dcb0c155372debff2521b8818d709ac50c19eb09208be3d4811d1f2e873f62eed324adaa8a155495ec492650a8ca8c8d2e1674d8f3ebb76849ecd66" name="xauth-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.2" rel="slfo.1.1_1.2"/>
  <changelog author="vuntz@opensuse.org" date="1334318400">- Split xauth from xorg-x11. Initial version: 1.0.5.</changelog>
  <changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 1.0.7:
  + Remove alarm handler in get_hostname
  + Add const attributes to fix gcc -Wwrite-strings warnings
  + convert strlen/malloc/strcpy combo to strdup
- Changes from version 1.0.6:
  + auth_finalize: Attempt to rename() if link() fails
  + Error out and avoid a call to malloc(0) if given a bad hex
    string
  + Build system fixes.
- Rebase xauth-tolerant-hostname-changes.diff.</changelog>
  <changelog author="sndirsch@suse.com" date="1382702400">- Update to version 1.0.8
  * Fix a long standing problem that for ssh tunneled connections a
    display variable of the form: localhost:&lt;N&gt;.&lt;M&gt; leads to correct
    authorization when an X client is started but "xauth list $DISPLAY"
    returns nothing.
  * Fix for: If using GDM with XDMCP, then ssh is not able to start X11
    clients on the remote side. You get a "No xauth data; using fake
    authentication data for X11 forwarding." from SSH.
- obsoletes xauth-1.0.2.diff,
  u_xauth_Look-for-FamilyLocal-if-inet-or-inet6-addr.patch
- adjusted xauth-tolerant-hostname-changes.diff
- added new test_xauth tool to %files section</changelog>
  <changelog author="sndirsch@suse.com" date="1399464000">- Update to version 1.0.9
  * Add AC_USE_SYSTEM_EXTENSIONS to expose non-standard extensions
  * Do not install test_xauth during "make install" as it is
  * Fix warning about warn_unused_result triggered by WRITES.
  * Fixed missing EXTRA_DIST in tests. Extended README for releasing.</changelog>
  <changelog author="sndirsch@suse.com" date="1485950400">- Update to version 1.0.10
  * include POSIX-standard limits.h for PATH_MAX instead of sys/syslimits.h
  * autogen.sh: Honor NOCONFIGURE=1
  * Clarified RELEASING in README
  * Fix for xauth failing on ENOSPC (= disk full)
  * autogen.sh: use quoted string variables
  * Update DISPLAY parsing to work with new launchd paths in Yosemite
  * Fix !HAVE_STRLCPY case
  * Build xauth before running tests.
  * autogen: add default patch prefix
  * autogen.sh: stop using maintainer mode
  * autogen.sh: use exec instead of waiting for configure to finish
  * usage(): Print summary for the -n option</changelog>
  <changelog author="sndirsch@suse.com" date="1562932800">- Update to version 1.1
  * This release fixes a race condition where an existing
    authority file would be unlinked (possibly causing other
    clients to fail to connect), and fixes sorting and merging
    of authority file entries.</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- modernize spec file (move license to licensedir)</changelog>
  <changelog author="sndirsch@suse.com" date="1638187200">- update to version 1.1.1
  * This is a minor bugfix release, including fixes for reported
    crashes.</changelog>
  <changelog author="sndirsch@suse.com" date="1650456000">- update to version 1.1.2
  * tests: make tests work in out-of-tree builds
  * tests: Fix failure to make distcheck
  * tests: report failure if stderr has unexpected output
  * configure.ac: fail build if xtrans is not found
  * gitlab CI: add a basic build test
  * Build xz tarballs instead of bzip2
  * Fix off-by-one in quote-stripping routines
  * gitlab CI: stop requiring Signed-off-by in commits
  * Improve portability
  * Removed build requirement "cmdtest".
  * Fix warning -Wstringop-truncation for strncpy by using memcpy instead
  * Expand checks of socket file with S_ISSOCK</changelog>
</package>
<package pkgid="8bfd68a5113285db83278cd1046a5a47c70f5fbe63861533efd0fae14bf6592328d16a4f1a687cccd22d5c76c79fb4baccc839ff4b60710d57e5a3ae6697da1f" name="xfsprogs-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.5.0" rel="slfo.1.1_1.2"/>
  <changelog author="ailiop@suse.com" date="1652270400">- update to 5.16.0:
  - libxfs: remove kernel stubs from xfs_shared.h
  - debian: Generate .gitcensus instead of .census
  - libxfs changes merged from kernel 5.16
  - mkfs: increase the min log size to 64MB when possible
  - xfs_scrub: retry items that are ok except for XFAIL
  - xfs_scrub: fix xfrog_scrub_metadata error reporting
  - mkfs: enable inobtcount and bigtime by default
  - mkfs: prevent corruption of suboption string values
  - mkfs: document sample configuration file location
  - mkfs: add configuration files for a few LTS kernels
  - mkfs: add a config file for x86_64 pmem filesystems
  - xfs_quota: don't exit on "project" cmd failure
  - xfs_repair: don't guess about failure reason in phase6
  - xfs_repair: update 2ndary superblocks after upgrades
  - xfs_scrub: fix reporting if we can't open devices
  - xfs_scrub: report optional features in version
  - libxcmd: use emacs mode for command history editing
  - libfrog: always use the kernel GETFSMAP definitions
  - mkfs.xfs(8): fix default inode allocator description
  - xfs_quota(8): fix up dump and report documentation
  - xfs_quota(8): document units in limit command
  - misc: add a crc32c self test to mkfs and repair</changelog>
  <changelog author="ailiop@suse.com" date="1654776000">- update to 5.18.0:
  - xfsprogs: more autoconf modernisation
  - mkfs: Fix memory leak
  - mkfs: don't trample the gid set in the protofile
  - mkfs: various post-log-size-increase fixes
  - xfs_scrub: various enhancements and fixes
  - xfs_scrub: move to mallinfo2 when available
  - metadump: be careful zeroing corrupt inode forks
  - metadump: handle corruption errors without aborting
  - metadump: warn about suspicious finobt trees
  - xfs_repair: check ftype of . and . directory entries
  - xfs_repair: detect v5 feature mismatch in backup sb
  - xfs_repair: fix sizing of the incore rt space usage map calculation
  - xfs_repair: warn about bad btree levels in AG hdrs
  - xfs_io: add a quiet option to bulkstat
  - xfs_db: report maxlevels for each btree type
  - xfs_db: support computing btheight for all cursors
  - xfs_db: don't move cursor when switching types
  - docs: note the removal of XFS_IOC_FSSETDM
  - xfsprogs: autoconf modernisation
  - libxfs changes merged from kernels 5.17 and 5.18</changelog>
  <changelog author="ailiop@suse.com" date="1660392000">- update to 5.19.0:
  - xfs_repair: fix printf format specifiers on 32-bit
  - libxfs: Fix MAP_SYNC build failure on MIPS/musl
  - mkfs: stop allowing tiny filesystems
  - mkfs: complain about impossible log size constraints
  - mkfs: ignore stripe geometry for small filesystems
  - mkfs: update manpage of bigtime and inobtcount
  - mkfs: document large extent count in --help screen
  - mkfs: fix segfault with incorrect options
  - xfs_repair: Support upgrade to large extent counters
  - xfs_repair: check geometry before upgrades
  - xfs_repair: ignore empty xattr leaf blocks
  - xfs_repair: check rt summary/bitmap vs observations
  - xfs_repair: check free rt extent count
  - xfs_repair: detect/fix changed fields w/ nrext64
  - xfs_repair: clear DIFLAG2_NREXT64 w/o fs support
  - xfs_repair: ignore log_incompat inconsistencies
  - xfs_repair: rewrite secondary supers w/ needsrepair
  - xfs_db: id the minlogsize transaction reservation
  - mkfs: option to create with large extent counters
  - xfs_info: Report NREXT64 feature status
  - xfs_logprint: Log item printing for ATTRI &amp; ATTRD
  - libxfs changes merged from kernels 5.18 and 5.19-rc</changelog>
  <changelog author="ailiop@suse.com" date="1668600000">- update to 6.0.0:
  - libxfs: kernel sync
  - xfs_db: use preferable macro to seek offset for local dir3
  - xfs_quota: optimize -L/-U calls for dump/report</changelog>
  <changelog author="ailiop@suse.com" date="1672833600">- update to 6.1.0:
  - libxfs: kernel sync
  - libxfs: consume the xfs_warn mountpoint argument
  - misc: add static to various sourcefile-local functions
  - misc: add missing includes
  - xfs_{db,repair}: fix XFS_REFC_COW_START usage
  - xfs_repair: don't crash on unknown inode parents in dry run mode
  - xfs_repair: retain superblock buffer to avoid write hook deadlock
  - xfs_repair: Attempt log replay during boot time repair
  - xfs_repair: covscan fixes
  - xfs_db: create separate struct and field definitions for finobts
  - xfs_db: fix dir3 block magic check
  - xfs_db: fix octal conversion logic
  - xfs_db: fix printing of reverse mapping record blockcounts
  - xfs_io: don't display stripe alignment flags for rt files
  - xfs_db: fix dir3 block magic check
  - mkfs.xfs: add mkfs config file for the 6.1 LTS kernel</changelog>
  <changelog author="ailiop@suse.com" date="1674043200">- update to 6.1.1:
  - scrub: fix warnings/errors due to missing include
  - debian: Add missing pkg version to the changelog</changelog>
  <changelog author="ailiop@suse.com" date="1679659200">- update to 6.2.0:
  - xfs_repair: fix incorrect dabtree hashval comparison
  - mkfs: protofile can now create directories with spaces in their names
  - mkfs: check dirent names when reading protofile
  - xfs_io: fix bmap command not detecting realtime files with xattrs
  - xfs_io: set fs_path when opening files on foreign filesystems
  - xfs_scrub: fix broken realtime free blocks unit conversions
  - xfs_spaceman: fix broken -g behavior in freesp command
  - xfs_admin: correctly parse IO_OPTS parameters
  - Fix autoconf during debian package builds
  - xfs_admin: fsuuid cmd can now retrive UUID of mounted filesystems</changelog>
  <changelog author="ailiop@suse.com" date="1689854400">- update to 6.4.0:
  - xfs_db: expose the flag in rmapbt keys
  - xfs_repair: warn about unwritten bits set in rmap btree keys
  - xfs_repair: check low keys of rmap btrees
  - xfs_repair: always perform extended xattr checks on uncertain inodes
  - xfs_repair: fix messaging when fixing imap due to sparse cluster
  - xfs_repair: fix messaging in longform_dir2_entry_check_data
  - xfs_repair: fix messaging when shortform_dir2_junk is called
  - xfs_repair: don't log inode problems without printing resolution
  - xfs_repair: don't spray correcting imap all by itself
  - libxcmd: Fix crash due to missing return value check on add_command()
  - xfs_db: make the hash command print the dirent hash
  - xfs_db: Add new cmd to create dirents and xattrs that induce dahash collisions
  - mkfs: deprecate the ascii-ci feature
  - xfs_db: fix metadump name obfuscation for ascii-ci filesystems
  - libxfs: kernel sync</changelog>
  <changelog author="ailiop@suse.com" date="1696593600">- Drop 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  This was a fix for a regression that occurred in SLE12 SP1. We can
  safely drop this, as upgrading to SLE15 (and later) is only supported
  from SLE12-SP4.</changelog>
  <changelog author="ailiop@suse.com" date="1697198400">- update to 6.5.0
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer</changelog>
</package>
<package pkgid="83a61a7177624409929ff00bb94cda5b235b86197fbfb54fe6158f34871e37453e446c98a71a6402fc6038347e13b8ffff0612e20794275866f826d0b6b3d6d7" name="xfsprogs-debugsource" arch="aarch64">
  <version epoch="0" ver="6.5.0" rel="slfo.1.1_1.2"/>
  <changelog author="ailiop@suse.com" date="1652270400">- update to 5.16.0:
  - libxfs: remove kernel stubs from xfs_shared.h
  - debian: Generate .gitcensus instead of .census
  - libxfs changes merged from kernel 5.16
  - mkfs: increase the min log size to 64MB when possible
  - xfs_scrub: retry items that are ok except for XFAIL
  - xfs_scrub: fix xfrog_scrub_metadata error reporting
  - mkfs: enable inobtcount and bigtime by default
  - mkfs: prevent corruption of suboption string values
  - mkfs: document sample configuration file location
  - mkfs: add configuration files for a few LTS kernels
  - mkfs: add a config file for x86_64 pmem filesystems
  - xfs_quota: don't exit on "project" cmd failure
  - xfs_repair: don't guess about failure reason in phase6
  - xfs_repair: update 2ndary superblocks after upgrades
  - xfs_scrub: fix reporting if we can't open devices
  - xfs_scrub: report optional features in version
  - libxcmd: use emacs mode for command history editing
  - libfrog: always use the kernel GETFSMAP definitions
  - mkfs.xfs(8): fix default inode allocator description
  - xfs_quota(8): fix up dump and report documentation
  - xfs_quota(8): document units in limit command
  - misc: add a crc32c self test to mkfs and repair</changelog>
  <changelog author="ailiop@suse.com" date="1654776000">- update to 5.18.0:
  - xfsprogs: more autoconf modernisation
  - mkfs: Fix memory leak
  - mkfs: don't trample the gid set in the protofile
  - mkfs: various post-log-size-increase fixes
  - xfs_scrub: various enhancements and fixes
  - xfs_scrub: move to mallinfo2 when available
  - metadump: be careful zeroing corrupt inode forks
  - metadump: handle corruption errors without aborting
  - metadump: warn about suspicious finobt trees
  - xfs_repair: check ftype of . and . directory entries
  - xfs_repair: detect v5 feature mismatch in backup sb
  - xfs_repair: fix sizing of the incore rt space usage map calculation
  - xfs_repair: warn about bad btree levels in AG hdrs
  - xfs_io: add a quiet option to bulkstat
  - xfs_db: report maxlevels for each btree type
  - xfs_db: support computing btheight for all cursors
  - xfs_db: don't move cursor when switching types
  - docs: note the removal of XFS_IOC_FSSETDM
  - xfsprogs: autoconf modernisation
  - libxfs changes merged from kernels 5.17 and 5.18</changelog>
  <changelog author="ailiop@suse.com" date="1660392000">- update to 5.19.0:
  - xfs_repair: fix printf format specifiers on 32-bit
  - libxfs: Fix MAP_SYNC build failure on MIPS/musl
  - mkfs: stop allowing tiny filesystems
  - mkfs: complain about impossible log size constraints
  - mkfs: ignore stripe geometry for small filesystems
  - mkfs: update manpage of bigtime and inobtcount
  - mkfs: document large extent count in --help screen
  - mkfs: fix segfault with incorrect options
  - xfs_repair: Support upgrade to large extent counters
  - xfs_repair: check geometry before upgrades
  - xfs_repair: ignore empty xattr leaf blocks
  - xfs_repair: check rt summary/bitmap vs observations
  - xfs_repair: check free rt extent count
  - xfs_repair: detect/fix changed fields w/ nrext64
  - xfs_repair: clear DIFLAG2_NREXT64 w/o fs support
  - xfs_repair: ignore log_incompat inconsistencies
  - xfs_repair: rewrite secondary supers w/ needsrepair
  - xfs_db: id the minlogsize transaction reservation
  - mkfs: option to create with large extent counters
  - xfs_info: Report NREXT64 feature status
  - xfs_logprint: Log item printing for ATTRI &amp; ATTRD
  - libxfs changes merged from kernels 5.18 and 5.19-rc</changelog>
  <changelog author="ailiop@suse.com" date="1668600000">- update to 6.0.0:
  - libxfs: kernel sync
  - xfs_db: use preferable macro to seek offset for local dir3
  - xfs_quota: optimize -L/-U calls for dump/report</changelog>
  <changelog author="ailiop@suse.com" date="1672833600">- update to 6.1.0:
  - libxfs: kernel sync
  - libxfs: consume the xfs_warn mountpoint argument
  - misc: add static to various sourcefile-local functions
  - misc: add missing includes
  - xfs_{db,repair}: fix XFS_REFC_COW_START usage
  - xfs_repair: don't crash on unknown inode parents in dry run mode
  - xfs_repair: retain superblock buffer to avoid write hook deadlock
  - xfs_repair: Attempt log replay during boot time repair
  - xfs_repair: covscan fixes
  - xfs_db: create separate struct and field definitions for finobts
  - xfs_db: fix dir3 block magic check
  - xfs_db: fix octal conversion logic
  - xfs_db: fix printing of reverse mapping record blockcounts
  - xfs_io: don't display stripe alignment flags for rt files
  - xfs_db: fix dir3 block magic check
  - mkfs.xfs: add mkfs config file for the 6.1 LTS kernel</changelog>
  <changelog author="ailiop@suse.com" date="1674043200">- update to 6.1.1:
  - scrub: fix warnings/errors due to missing include
  - debian: Add missing pkg version to the changelog</changelog>
  <changelog author="ailiop@suse.com" date="1679659200">- update to 6.2.0:
  - xfs_repair: fix incorrect dabtree hashval comparison
  - mkfs: protofile can now create directories with spaces in their names
  - mkfs: check dirent names when reading protofile
  - xfs_io: fix bmap command not detecting realtime files with xattrs
  - xfs_io: set fs_path when opening files on foreign filesystems
  - xfs_scrub: fix broken realtime free blocks unit conversions
  - xfs_spaceman: fix broken -g behavior in freesp command
  - xfs_admin: correctly parse IO_OPTS parameters
  - Fix autoconf during debian package builds
  - xfs_admin: fsuuid cmd can now retrive UUID of mounted filesystems</changelog>
  <changelog author="ailiop@suse.com" date="1689854400">- update to 6.4.0:
  - xfs_db: expose the flag in rmapbt keys
  - xfs_repair: warn about unwritten bits set in rmap btree keys
  - xfs_repair: check low keys of rmap btrees
  - xfs_repair: always perform extended xattr checks on uncertain inodes
  - xfs_repair: fix messaging when fixing imap due to sparse cluster
  - xfs_repair: fix messaging in longform_dir2_entry_check_data
  - xfs_repair: fix messaging when shortform_dir2_junk is called
  - xfs_repair: don't log inode problems without printing resolution
  - xfs_repair: don't spray correcting imap all by itself
  - libxcmd: Fix crash due to missing return value check on add_command()
  - xfs_db: make the hash command print the dirent hash
  - xfs_db: Add new cmd to create dirents and xattrs that induce dahash collisions
  - mkfs: deprecate the ascii-ci feature
  - xfs_db: fix metadump name obfuscation for ascii-ci filesystems
  - libxfs: kernel sync</changelog>
  <changelog author="ailiop@suse.com" date="1696593600">- Drop 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  This was a fix for a regression that occurred in SLE12 SP1. We can
  safely drop this, as upgrading to SLE15 (and later) is only supported
  from SLE12-SP4.</changelog>
  <changelog author="ailiop@suse.com" date="1697198400">- update to 6.5.0
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer</changelog>
</package>
<package pkgid="3e0dd0ec61d7c50e296f6509b42264230ae2cee2f91edf57e594ab4bf56028380924783d46fe43bbdc77314b12862fa7c395df0a525e03890b6d898a10c200df" name="xmlsec1-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.40" rel="slfo.1.1_1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1662638400">- Add export CFLAGS/CXXFLAGS="-Wno-error=deprecated-declarations"
  inbefore configure. We pass --enable-werror to configure, and
  that leads to warnings about deprecations failing build. As
  deprecations is mainly a consern for upstream, stop failing on
  those.</changelog>
  <changelog author="pmonreal@suse.com" date="1667563200">- Update to 1.2.36:
  * Retired the XMLSec mailing list "xmlsec@aleksey.com" and the
    XMLSec Online Signature Verifier.
- Update to 1.2.35:
  * Migration to OpenSSL 3.0 API (based on PR by @snargit). Note
    that OpenSSL engines are disabled by default when XMLSec
    library is compiled against OpenSSL 3.0. To re-enable OpenSSL
    engines, use "--enable-openssl3-engines" configure flag (there
    will be a lot of deprecation warnings).
  * The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now
    deprecated and will be removed in the future versions of
    XMLSec Library.
  * Refactored all the integer casts to ensure cast-safety. Fixed
    all warnings and enabled "-Werror" and "-pedantic" flags on
    CI builds.
  * Added configure flag to use size_t for xmlSecSize (currently
    disabled by default for backward compatibility).
  * Moved all CI builds to GitHub actions.</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.2.37:
  Fixed two regressions from 1.2.36 release</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well</changelog>
  <changelog author="fstrba@suse.com" date="1691496000">- Added patch:
  * xmlsec1-ui_null.patch
    + fix build with older versions of openssl that don't have
    UI_null() method</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1701345600">- Make use of openSUSE build flags</changelog>
  <changelog author="fstrba@suse.com" date="1702641600">- Update to 1.2.38
  * Have a look at the changelog for the list of changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Added patch:
  * xmlsec1-gcc14.patch
    + add missing include and fix gcc14 build</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720785600">- Update to 1.2.40
  The legacy XML Security Library 1.2.40 release includes the following changes:
  * (xmlsec-core) Fixed functions deprecated in LibXML2 2.13.1 (including disabling HTTP support by default).
  * (xmlsec-nss) Increased keys size in all tests to support NSS 3.101.
  * (windows) Added "ftp" and "http" flags in 'configure.js' (both are disabled by default).
  * Several other small fixes (more details).
- Update to 1.2.39
  The legacy XML Security Library 1.2.39 release includes the following changes:
  * Added options to enable/disable local files, HTTP, and FTP support. FTP is disabled by default.
  * Several other small fixes (more details).
- Remove upstreamed xmlsec1-gcc14.patch</changelog>
</package>
<package pkgid="679df062b1e8d21ee54861c362dfd24ffcda3c05a1880f03c68fdd8c4365beec2458673ce7243747cd47c4e662eeab1bec83091de70bdc9d6455b93010fae083" name="xmlstarlet-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.1" rel="slfo.1.1_1.2"/>
  <changelog author="pascal.bleser@opensuse.org" date="1306929600">- update to 1.2.0:
  * implement ed --update --expr
  * use top-level namespace definitions from first input file, this should
    remove the need to define namespaces on the command line with -N in most
    cases
  * select exits with 0 only if result is non-empty (SF#3155702)
  * add -Q to select, like grep's -q
  * add column number to error messages
  * restore input context (lost in version 1.0.3) to error messages
    (SF#3305659)
  * print extra string information in error messages
  * use entity definitions from dtd (SF#3305659)
  * add --net option to c14n, ed, fo, and val (SF#1071398)
  * remove --catalog from tr --help message since it isn't actually supported
  * add --elif and --else to sel --help message</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1307016000">- add xmlstarlet-backport_libxml2_2_7_8_XML_SAVE_WSNONSIG.patch to fix builds
  on distros that use libxml2 versions prior to 2.7.8 and which hence don't
  support XML_SAVE_WSNONSIG</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1311336000">- update to 1.2.1:
  * check for NULL nodeset result (Bugs #3323189, #3323196)
  * "-" was being confused with --elif
  * generated XSLT should also have automatic namespaces
  * allow -N after other option (Bug #3325166)
  * namespace values were being registered as prefixes
  * avoid segfault when asked to move namespace nodes
  * missing newline in ed --help message
  * don't use XML_SAVE_WSNONSIG #if libxml &lt; 2.7.8 (Bug #3310475)
- dropped patch "xmlstarlet-backport_libxml2_2_7_8_XML_SAVE_WSNONSIG.patch",
  was merged upstream</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317556800">- update to 1.3.0:
  * avoid ASCII CRs in UTF-16/32 text
  * --value-of outputs concat values of all nodes (sf#2563866)
  * encode special chars for ed -u -x
  * allow use of exslt functions in ed -u -x
  * add --var to select (allow --var &lt;name&gt;=&lt;value&gt; as well as --var &lt;name&gt;
    &lt;value&gt; --break)
  * work around libxml bug that passes bogus data to error handler (sf#3362217)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1329825600">- update to 1.3.1:
  * handle multiple values for --value-of properly (sf#2563866)
  * substitute external entities (sf#3467320)
  * pyx output needs space between attribute name and value (sf#3440797)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1350561600">- update to 1.4.0:
  * ed subcommand:
  - relative XPaths are now handled correctly (Bug #3527850)
  - the last nodeset inserted by an edit operation can be
    accessed as the XPath variable $prev (or $xstar:prev)
  - add --var option to define XPath variables
  - allow ed -u -x to insert nodesets instead of converting to
    string
  - remove hard limit for number of edit operations (Bug
    [#3488240])
  * pyx now handles namespaces correctly</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1355659200">- update to 1.4.1:
  * avoid segfault when attempting to edit the document node</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1373284800">- update to 1.5.0:
  - Bugs:
  - avoid segfault on pyx non-existant file
  - fix unescaping of entities straddling 4K byte boundary (Bug #102)
  - Enhancements:
  - unescape hex entities (&amp;#xXX;)
  - give a helpful message if doc has default namespace and
    nothing matched
  - add "_" and "DEFAULT" as names for document's top-level
    default namespace
  - Adding a global quiet option
  - ed: Allow omitting value argument to create empty element.
  - use default attribute values in sel subcommand
- changes from 1.4.2:
  - pyx: avoid segfault on documents with multiple attributes (Bug
    [#3595212])</changelog>
  <changelog author="toms@opensuse.org" date="1413201600">- SPEC file changes
  - Added link from /usr/bin/xml to /usr/bin/xmlstarlet as other
    distributions do the same
  - Did the same for the manpage</changelog>
  <changelog author="mpluskal@suse.com" date="1462276800">- Update to 1.6.1:
  * handle unicode arguments under Windows
- Changes for 1.6.0:
  * get rid of "helpful" message about namespaces
  * update user guide
  * Enhancements:
    + add --stop option to val
    + add global option --no-doc-namespace
  * Build:
    + let the make install target succeed even if docs aren't
    built.
- Cleanup spec file with spec-cleaner
- Cleanup dependencies
- Refresh xmlstarlet-xml_depyx.c.diff</changelog>
</package>
<package pkgid="4695eab5f695d73d1d97a07dc3a7b1679c9c27a0dbbc974d40b3063c271639dd4a461bc614a6555162a8b8190d934b3d4e1ed2baf31d21211ef27c9e13227878" name="xmlstarlet-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.1" rel="slfo.1.1_1.2"/>
  <changelog author="pascal.bleser@opensuse.org" date="1306929600">- update to 1.2.0:
  * implement ed --update --expr
  * use top-level namespace definitions from first input file, this should
    remove the need to define namespaces on the command line with -N in most
    cases
  * select exits with 0 only if result is non-empty (SF#3155702)
  * add -Q to select, like grep's -q
  * add column number to error messages
  * restore input context (lost in version 1.0.3) to error messages
    (SF#3305659)
  * print extra string information in error messages
  * use entity definitions from dtd (SF#3305659)
  * add --net option to c14n, ed, fo, and val (SF#1071398)
  * remove --catalog from tr --help message since it isn't actually supported
  * add --elif and --else to sel --help message</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1307016000">- add xmlstarlet-backport_libxml2_2_7_8_XML_SAVE_WSNONSIG.patch to fix builds
  on distros that use libxml2 versions prior to 2.7.8 and which hence don't
  support XML_SAVE_WSNONSIG</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1311336000">- update to 1.2.1:
  * check for NULL nodeset result (Bugs #3323189, #3323196)
  * "-" was being confused with --elif
  * generated XSLT should also have automatic namespaces
  * allow -N after other option (Bug #3325166)
  * namespace values were being registered as prefixes
  * avoid segfault when asked to move namespace nodes
  * missing newline in ed --help message
  * don't use XML_SAVE_WSNONSIG #if libxml &lt; 2.7.8 (Bug #3310475)
- dropped patch "xmlstarlet-backport_libxml2_2_7_8_XML_SAVE_WSNONSIG.patch",
  was merged upstream</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317556800">- update to 1.3.0:
  * avoid ASCII CRs in UTF-16/32 text
  * --value-of outputs concat values of all nodes (sf#2563866)
  * encode special chars for ed -u -x
  * allow use of exslt functions in ed -u -x
  * add --var to select (allow --var &lt;name&gt;=&lt;value&gt; as well as --var &lt;name&gt;
    &lt;value&gt; --break)
  * work around libxml bug that passes bogus data to error handler (sf#3362217)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1329825600">- update to 1.3.1:
  * handle multiple values for --value-of properly (sf#2563866)
  * substitute external entities (sf#3467320)
  * pyx output needs space between attribute name and value (sf#3440797)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1350561600">- update to 1.4.0:
  * ed subcommand:
  - relative XPaths are now handled correctly (Bug #3527850)
  - the last nodeset inserted by an edit operation can be
    accessed as the XPath variable $prev (or $xstar:prev)
  - add --var option to define XPath variables
  - allow ed -u -x to insert nodesets instead of converting to
    string
  - remove hard limit for number of edit operations (Bug
    [#3488240])
  * pyx now handles namespaces correctly</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1355659200">- update to 1.4.1:
  * avoid segfault when attempting to edit the document node</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1373284800">- update to 1.5.0:
  - Bugs:
  - avoid segfault on pyx non-existant file
  - fix unescaping of entities straddling 4K byte boundary (Bug #102)
  - Enhancements:
  - unescape hex entities (&amp;#xXX;)
  - give a helpful message if doc has default namespace and
    nothing matched
  - add "_" and "DEFAULT" as names for document's top-level
    default namespace
  - Adding a global quiet option
  - ed: Allow omitting value argument to create empty element.
  - use default attribute values in sel subcommand
- changes from 1.4.2:
  - pyx: avoid segfault on documents with multiple attributes (Bug
    [#3595212])</changelog>
  <changelog author="toms@opensuse.org" date="1413201600">- SPEC file changes
  - Added link from /usr/bin/xml to /usr/bin/xmlstarlet as other
    distributions do the same
  - Did the same for the manpage</changelog>
  <changelog author="mpluskal@suse.com" date="1462276800">- Update to 1.6.1:
  * handle unicode arguments under Windows
- Changes for 1.6.0:
  * get rid of "helpful" message about namespaces
  * update user guide
  * Enhancements:
    + add --stop option to val
    + add global option --no-doc-namespace
  * Build:
    + let the make install target succeed even if docs aren't
    built.
- Cleanup spec file with spec-cleaner
- Cleanup dependencies
- Refresh xmlstarlet-xml_depyx.c.diff</changelog>
</package>
<package pkgid="9dc7fcce95a0d4440bd2a1a49b3b28f373b4ee925bb4dd61784e05600644294cf378eacef16a3c08c1dcbac21614aeb21dc2fcd6bc74a283007f653709c33113" name="xorriso-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="slfo.1.1_1.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to 1.4.2:
  * Bug fix: -backslash_codes "on" did not work outside quotes and
    with showing "\r"
  * New API calls isoburn_ropt_set_truncate_mode()
    isoburn_ropt_get_truncate_mode()
  * New options with isoburn_ropt_set_extensions():
    isoburn_ropt_map_*
  * New command -modesty_on_drive, new -as cdrecord -immed,
    minbuf=, modesty_on_drive=
  * New command -ecma119_map
  * New command -read_fs
  * New -boot_image action "replay"
  * New command -file_name_limit, -as mkisofs -file_name_limit
  * New -find test -name_limit_blocker.
  * Result of a Coverity audit: 50+ code changes, but no
    easy-to-trigger bugs</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: -as mkisofs did not unescape "\=" in the source part
    of pathspecs
  * Bug fix: -boot_image "any" "system_area=/dev/zero" did not
    zeroize loaded data
  * Bug fix: -pathspecs "on" did not properly handle "\\="
  * Bug fix: HFS+ production could cause MBR partition of type 0xEE
    without GPT
  * Bug fix: HFS+ directories could announce more children than
    they actually have
  * Bug fix: The HFS+ filesystem was not marked by in GPT of GRUB2
    hybrid layout
  * Bug fix: When reading an ISO filesystem, the presence of
  - -protective-msdos-label was not recognized if a partition is
    appended
  * Bug fix: xorrisofs option --protective-msdos-label did not work
    if no system area data were given by option -G or alike
  * Bug fix: -modesty_on_drive properties timeout_sec, min_usec,
    max_usec read wrong numbers from the parameter text
  * Letting -as mkisofs --norock revoke the special effect of -r
  * Letting -blank on overwritable media invalidate UDF extended
    descriptors
  * New -pathspecs mode "as_mkisofs"
  * New -boot_image setting mbr_force_bootable=, -as mkisofs
  - -mbr-force-bootable
  * New -boot_image bootspecs appended_part_as=apm,
    part_like_isohybrid=on
  * New -as mkisofs options -appended_part_as_apm,
  - part_like_isohybrid
  * New command -scsi_dev_family, new -as cdrecord option
    drive_scsi_dev_family=</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: The default setting of -compliance did not apply
    rec_mtime to Joliet and ISO:1999. mkisofs emulation was not
    affected by this bug.
  * Bug fix: -file_size_limit did not increase ISO level if
    necessary. Thanks Mattias Schlenker.
  * New API calls isoburn_igopt_set_gpt_guid(),
    isoburn_igopt_get_gpt_guid()
  * New command -use_immed_bit, new -as cdrecord option
    use_immed_bit=
  * New -volume_date mode "all_file_dates"
  * New -as mkisofs option --set_all_file_dates
  * New bootspec "gpt_disk_guid=", new -as mkisofs option
  - -gpt_disk_guid
  * New -report_system_area modes "gpt_disk_guid", "make_guid"
  * New environment variable SOURCE_DATE_EPOCH
  * New -find action "set_to_mtime"</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1487419200">- Added new build requirement libjte-devel for Tumbleweed and
  Leap &gt;= 42.3.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488024000">- Use sle_version &gt;= 120300 instead of leap_version &gt;= 420300
  (leap_version does not work).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: -as mkisofs -no-emul-boot without -boot-load-size
    defaulted to size 4, instead of full boot image size
  * Bug fix: -read_fs "norock" did not prevent reading of root Rock
    Ridge info
  * Bug fix: Mix of absolute and relative disk paths could cause
    SIGSEGV with pattern expansion
  * Bug fix: --mbr-force-bootable did not get into effect with
  - append_partition
  * Bug fix: Exit value of failed -mount command was reported as 0
  * Bug fix: -boot_image actions "keep" and "patch" did not work
    any more. Regression by libisofs 1.4.4.
  * New -find tests -maxdepth and -mindepth
  * New commands -update_lxi and -update_li
  * New API calls isoburn_igopt_set_iso_mbr_part_type(),
    isoburn_igopt_get_iso_mbr_part_type()
  * New -boot_image bootspec iso_mbr_part_type=
  * New -as mkisofs option -iso_mbr_part_type
  * New -as mkisofs option -eltorito-platform
  * Properly refusing on Pseudo Overwritable formatted BD-R</changelog>
  <changelog author="dimstar@opensuse.org" date="1522756800">- Split out xorriso-tcltk from xorriso: The frontend is advertised
  as proof-of-concept by upstream. Additionally, we can save a
  dependency on Tcl/Tk on the main xorriso package.
- Cleanup using spec-cleaner:
  + use SPDX3 license string.
  + Package licence files as license, not doc (boo#1082318).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1541073600">- Update to 1.5.0:
  * Bug fix: Multi-session emulation was not recognized with
    non-zero partition offset
  * New bit10 of isoburn_drive_aquire() to accept all xattr
    namespaces
  * New -xattr mode "any" to process all xattr namespaces of local
    filesystem
  * New -as mkisofs option --xattr-any
  * New -as mkisofs options -uid and -gid</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.5.2:
  * Bug fix: -disk_pattern on -add ./ -- mistook "./" for the root directory
  * Bug fix: -disk_pattern on -add "" -- yielded SIGSEGV
  * Bug fix: -osirrox "concat_split_on" worked only together with -split_size
  larger than 0. Thanks William Willems.
  * New API calls isoburn_igopt_set_part_type_guid(),
    isoburn_igopt_get_part_type_guid(), isoburn_igopt_set_iso_type_guid(),
    isoburn_igopt_get_iso_type_guid()
  * Enabled GPT type GUIDs with -append_partition,
  - boot_image any iso_mbr_part_type=, and -as mkisofs -iso_mbr_part_type
  * Made libisoburn and GNU xorriso ready for building out-of-source.
    Thanks Ross Burton.</changelog>
  <changelog author="dmueller@suse.com" date="1614081600">- update to 1.5.4:
  * Bug fix: -report_system_area as_mkisofs misrepresented GPT with appended
    partition and forced boot flag as -part_like_isohybrid
  * Bug fix: Boot catalog could get a wrong name if cat_path= is explicitely
    given but not containing a slash character
  * New helper script xorriso-dd-target
  * New command -truncate_overwritable
  * Switched to usage of libjte-2.0.0
  * New -jigdo parameters "checksum_algorithm", "demand_checksum", "-checksum-list"
  * New -as mkisofs options "-jigdo-checksum-algorithm", "-checksum-list", "-jigdo-force-checksum"
  * New -read_speed prefixes "soft_force:" and "soft_corr:"
  * New -check_media option data_to="-" for standard output
  * New -zisofs parameters version_2=, block_size_v2=, max_bpt=, max_bpt_f=,
    bpt_target=, bpt_free_ratio=, by_magic=v2, susp_z2=
  * New -as mkisofs options --zisofs-version-2, --zisofs2-susp-z2,
  - -zisofs2-susp-zf
  * Enabled recognition of zisofs by magic without zlib support
  * New -osirrox option sparse= controls extraction into sparse files
  * New libisoburn extension options isoburn_ropt_map_joliet_stripped and
    isoburn_ropt_map_joliet_unmapped
  * New command -joliet_map
  * New command -extract_boot_images
  * New API call isoburn_ropt_get_tree_loaded()</changelog>
</package>
<package pkgid="391ec2724deb6631491ed3f9a0e17058a1e844ee246d07419717cc36c9b47b367dfcdbf42b54ae40b9a3d55676e9594206e90d89a9cc3f2f8d7810133ce5621d" name="xtables-plugins-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.9" rel="slfo.1.1_2.1"/>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736164800">- Add iptables-1.8.9-fix-checking-existence-of-rule.patch
  * Fixes checking existence of rules. Fixes issues with rule creation
    with podman/netavark. (bsc#1235088, bsc#1234996)</changelog>
</package>
<package pkgid="ed049246464c8937c1b7bfcfb5cf39426cf48680b2803db3ff8f0ce60a39ef4cccc3599f15f773f66c270ee7c34acaeb44123c3dd9302cf363c1997aef4f1fdc" name="xz-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.4.3" rel="slfo.1.1_2.1"/>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to 5.2.8:
  * xz:
  - If xz cannot remove an input file when it should, this
    is now treated as a warning (exit status 2) instead of
    an error (exit status 1). This matches GNU gzip and it
    is more logical as at that point the output file has
    already been successfully closed.
  - Fix handling of .xz files with an unsupported check type.
    Previously such printed a warning message but then xz
    behaved as if an error had occurred (didn't decompress,
    exit status 1). Now a warning is printed, decompression
    is done anyway, and exit status is 2. This used to work
    slightly before 5.0.0. In practice this bug matters only
    if xz has been built with some check types disabled. As
    instructed in PACKAGERS, such builds should be done in
    special situations only.
  - Fix "xz -dc --single-stream tests/files/good-0-empty.xz"
    which failed with "Internal error (bug)". That is,
  - -single-stream was broken if the first .xz stream in
    the input file didn't contain any uncompressed data.
  - Fix displaying file sizes in the progress indicator when
    working in passthru mode and there are multiple input files.
    Just like "gzip -cdf", "xz -cdf" works like "cat" when the
    input file isn't a supported compressed file format. In
    this case the file size counters weren't reset between
    files so with multiple input files the progress indicator
    displayed an incorrect (too large) value.
  * liblzma:
  - API docs in lzma/container.h:
  * Update the list of decoder flags in the decoder
    function docs.
  * Explain LZMA_CONCATENATED behavior with .lzma files
    in lzma_auto_decoder() docs.
  - OpenBSD: Use HW_NCPUONLINE to detect the number of
    available hardware threads in lzma_physmem().
  - Fix use of wrong macro to detect x86 SSE2 support.
    __SSE2_MATH__ was used with GCC/Clang but the correct
    one is __SSE2__. The first one means that SSE2 is used
    for floating point math which is irrelevant here.
    The affected SSE2 code isn't used on x86-64 so this affects
    only 32-bit x86 builds that use -msse2 without -mfpmath=sse
    (there is no runtime detection for SSE2). It improves LZMA
    compression speed (not decompression).
  - Fix the build with Intel C compiler 2021 (ICC, not ICX)
    on Linux. It defines __GNUC__ to 10 but doesn't support
    the __symver__ attribute introduced in GCC 10.
  * Scripts: Ignore warnings from xz by using --quiet --no-warn.
  This is needed if the input .xz files use an unsupported
  check type.
  * Translations:
  - Updated Croatian and Turkish translations.
  - One new translations wasn't included because it needed
    technical fixes. It will be in upcoming 5.4.0. No new
    translations will be added to the 5.2.x branch anymore.
  - Renamed the French man page translation file from
    fr_FR.po to fr.po and thus also its install directory
    (like /usr/share/man/fr_FR -&gt; .../fr).
  - Man page translations for upcoming 5.4.0 are now handled
    in the Translation Project.
  * Update doc/faq.txt a little so it's less out-of-date.</changelog>
  <changelog author="jengelh@inai.de" date="1669896000">- Rename xz-static-devel -&gt; xz-devel-static to follow the general
  naming used in openSUSE.</changelog>
  <changelog author="dmueller@suse.com" date="1671278400">- update to 5.2.10:
  * xz: Don't modify argv[] when parsing the --memlimit* and
  - -block-list command line options. This fixes confusing
    arguments in process listing (like "ps auxf").
  * GNU/Linux only: Use __has_attribute(__symver__) to detect if
    that attribute is supported. This fixes build on Mandriva where
    Clang is patched to define __GNUC__ to 11 by default (instead
    of 4 as used by Clang upstream).
  * liblzma:
  - Fixed an infinite loop in LZMA encoder initialization
    if dict_size &gt;= 2 GiB.
  - Fixed two cases of invalid free() that can happen if
    a tiny allocation fails in encoder re-initialization
    or in lzma_filters_update(). These bugs had some
    similarities with the bug fixed in 5.2.7.
  - Fixed lzma_block_encoder() not allowing the use of
    LZMA_SYNC_FLUSH with lzma_code() even though it was
    documented to be supported. The sync-flush code in
    the Block encoder was already used internally via
    lzma_stream_encoder(), so this was just a missing flag
    in the lzma_block_encoder() API function.
  - GNU/Linux only: Don't put symbol versions into static
    liblzma as it breaks things in some cases (and even if
    it didn't break anything, symbol versions in static
    libraries are useless anyway). The downside of the fix
    is that if the configure options --with-pic or --without-pic
    are used then it's not possible to build both shared and
    static liblzma at the same time on GNU/Linux anymore;
    with those options --disable-static or --disable-shared
    must be used too.
- drop unused xz-devel-static which is no longer supported when using
  - -with-pic (which is needed for shared libs)</changelog>
  <changelog author="dmueller@suse.com" date="1672401600">- update to 5.4.0:
    This bumps the minor version of liblzma because new features were
    added. The API and ABI are still backward compatible with liblzma
    5.2.x and 5.0.x.
    Summary of new features added in the 5.3.x development releases:
  * liblzma:
  - Added threaded .xz decompressor lzma_stream_decoder_mt().
    It can use multiple threads with .xz files that have multiple
    Blocks with size information in Block Headers. The threaded
    encoder in xz has always created such files.
    Single-threaded encoder cannot store the size information in
    Block Headers even if one used LZMA_FULL_FLUSH to create
    multiple Blocks, so this threaded decoder cannot use multiple
    threads with such files.
    If there are multiple Streams (concatenated .xz files), one
    Stream will be decompressed completely before starting the
    next Stream.
  - A new decoder flag LZMA_FAIL_FAST was added. It makes the
    threaded decompressor report errors soon instead of first
    flushing all pending data before the error location.
  - New Filter IDs:
  * LZMA_FILTER_ARM64 is for ARM64 binaries.
  * LZMA_FILTER_LZMA1EXT is for raw LZMA1 streams that don't
    necessarily use the end marker.
  - Added lzma_str_to_filters(), lzma_str_from_filters(), and
    lzma_str_list_filters() to convert a preset or a filter chain
    string to a lzma_filter[] and vice versa. These should make
    it easier to write applications that allow users to specify
    custom compression options.
  - Added lzma_filters_free() which can be convenient for freeing
    the filter options in a filter chain (an array of lzma_filter
    structures).
  - lzma_file_info_decoder() to makes it a little easier to get
    the Index field from .xz files. This helps in getting the
    uncompressed file size but an easy-to-use random access
    API is still missing which has existed in XZ for Java for
    a long time.
  - Added lzma_microlzma_encoder() and lzma_microlzma_decoder().
    It is used by erofs-utils and may be used by others too.
    The MicroLZMA format is a raw LZMA stream (without end marker)
    whose first byte (always 0x00) has been replaced with
    bitwise-negation of the LZMA properties (lc/lp/pb). It was
    created for use in EROFS but may be used in other contexts
    as well where it is important to avoid wasting bytes for
    stream headers or footers. The format is also supported by
    XZ Embedded (the XZ Embedded version in Linux got MicroLZMA
    support in Linux 5.16).
    The MicroLZMA encoder API in liblzma can compress into a
    fixed-sized output buffer so that as much data is compressed
    as can be fit into the buffer while still creating a valid
    MicroLZMA stream. This is needed for EROFS.
  - Added lzma_lzip_decoder() to decompress the .lz (lzip) file
    format version 0 and the original unextended version 1 files.
    Also lzma_auto_decoder() supports .lz files.
  - lzma_filters_update() can now be used with the multi-threaded
    encoder (lzma_stream_encoder_mt()) to change the filter chain
    after LZMA_FULL_BARRIER or LZMA_FULL_FLUSH.
  - In lzma_options_lzma, allow nice_len = 2 and 3 with the match
    finders that require at least 3 or 4. Now it is internally
    rounded up if needed.
  - CLMUL-based CRC64 on x86-64 and E2K with runtime processor
    detection. On 32-bit x86 it currently isn't available unless
  - -disable-assembler is used which can make the non-CLMUL
    CRC64 slower; this might be fixed in the future.
  - Building with --disable-threads --enable-small
    is now thread-safe if the compiler supports
    __attribute__((__constructor__)).
  * xz:
  - Using -T0 (--threads=0) will now use multi-threaded encoder
    even on a single-core system. This is to ensure that output
    from the same xz binary is identical on both single-core and
    multi-core systems.
  - --threads=+1 or -T+1 is now a way to put xz into
    multi-threaded mode while using only one worker thread.
    The + is ignored if the number is not 1.
  - A default soft memory usage limit is now used for compression
    when -T0 is used and no explicit limit has been specified.
    This soft limit is used to restrict the number of threads
    but if the limit is exceeded with even one thread then xz
    will continue with one thread using the multi-threaded
    encoder and this limit is ignored. If the number of threads
    is specified manually then no default limit will be used;
    this affects only -T0.
    This change helps on systems that have very many cores and
    using all of them for xz makes no sense. Previously xz -T0
    could run out of memory on such systems because it attempted
    to reserve memory for too many threads.
    This also helps with 32-bit builds which don't have a large
    amount of address space that would be required for many
    threads. The default soft limit for -T0 is at most 1400 MiB
    on all 32-bit platforms.
  - Previously a low value in --memlimit-compress wouldn't cause
    xz to switch from multi-threaded mode to single-threaded mode
    if the limit cannot otherwise be met; xz failed instead. Now
    xz can switch to single-threaded mode and then, if needed,
    scale down the LZMA2 dictionary size too just like it already
    did when it was started in single-threaded mode.
  - The option --no-adjust no longer prevents xz from scaling down
    the number of threads as that doesn't affect the compressed
    output (only performance). Now --no-adjust only prevents
    adjustments that affect compressed output, that is, with
  - -no-adjust xz won't switch from multi-threaded mode to
    single-threaded mode and won't scale down the LZMA2
    dictionary size.
  - Added a new option --memlimit-mt-decompress=LIMIT. This is
    used to limit the number of decompressor threads (possibly
    falling back to single-threaded mode) but it will never make
    xz refuse to decompress a file. This has a system-specific
    default value because without any limit xz could end up
    allocating memory for the whole compressed input file, the
    whole uncompressed output file, multiple thread-specific
    decompressor instances and so on. Basically xz could
    attempt to use an insane amount of memory even with fairly
    common files. The system-specific default value is currently
    the same as the one used for compression with -T0.
    The new option works together with the existing option
  - -memlimit-decompress=LIMIT. The old option sets a hard limit
    that must not be exceeded (xz will refuse to decompress)
    while the new option only restricts the number of threads.
    If the limit set with --memlimit-mt-decompress is greater
    than the limit set with --memlimit-compress, then the latter
    value is used also for --memlimit-mt-decompress.
  - Added new information to the output of xz --info-memory and
    new fields to the output of xz --robot --info-memory.
  - In --lzma2=nice=NUMBER allow 2 and 3 with all match finders
    now that liblzma handles it.
  - Don't mention endianness for ARM and ARM-Thumb filters in
  - -long-help. The filters only work for little endian
    instruction encoding but modern ARM processors using
    big endian data access still use little endian
    instruction encoding. So the help text was misleading.
    In contrast, the PowerPC filter is only for big endian
    32/64-bit PowerPC code. Little endian PowerPC would need
    a separate filter.
  - Added decompression support for the .lz (lzip) file format
    version 0 and the original unextended version 1. It is
    autodetected by default. See also the option --format on
    the xz man page.
  - Sandboxing enabled by default:
  * Capsicum (FreeBSD)
  * pledge(2) (OpenBSD)
  * Scripts now support the .lz format using xz.
  * A few new tests were added.
  * The liblzma-specific tests are now supported in CMake-based
    builds too ("make test").</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- update to 5.4.1:
  * liblzma:
  - Fixed the return value of lzma_microlzma_encoder() if the
    LZMA options lc/lp/pb are invalid. Invalid lc/lp/pb options
    made the function return LZMA_STREAM_END without encoding
    anything instead of returning LZMA_OPTIONS_ERROR.
  * Tests:
  - Fixed test script compatibility with ancient /bin/sh
    versions. Now the five test_compress_* tests should
    no longer fail on Solaris 10.
  - Added and refactored a few tests.
  * Translations:
  - Updated the Catalan and Esperanto translations.
  - Added Korean and Ukrainian man page translations.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="mpluskal@suse.com" date="1679313600">- Update to version 5.4.2:
  * All fixes from 5.2.11 that were not included in 5.4.1.
  * If xz is built with support for the Capsicum sandbox but running
    in an environment that doesn't support Capsicum, xz now runs
    normally without sandboxing instead of exiting with an error.
  * liblzma:
  - Documentation was updated to improve the style, consistency,
    and completeness of the liblzma API headers.
  - The Doxygen-generated HTML documentation for the liblzma API
    header files is now included in the source release and is
    installed as part of "make install". All JavaScript is
    removed to simplify license compliance and to reduce the
    install size.
  - Fixed a minor bug in lzma_str_from_filters() that produced
    too many filters in the output string instead of reporting
    an error if the input array had more than four filters. This
    bug did not affect xz.
  * Build systems:
  - autogen.sh now invokes the doxygen tool via the new wrapper
    script doxygen/update-doxygen, unless the command line option
  - -no-doxygen is used.
  - Added microlzma_encoder.c and microlzma_decoder.c to the
    VS project files for Windows and to the CMake build. These
    should have been included in 5.3.2alpha.
  * Tests:
  - Added a test to the CMake build that was forgotten in the
    previous release.
  - Added and refactored a few tests.
  * Translations:
  - Updated the Brazilian Portuguese translation.
  - Added Brazilian Portuguese man page translation.</changelog>
  <changelog author="fcrozat@suse.com" date="1680782400">- Update license tag, there is GPL-3.0-or-later code too.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683288000">- Update to version 5.4.3:
  * Build system fixes
  * Translation updates: Croatian
- update signing key</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1750939200">- Fix CVE-2025-31115 (bsc#1240414)
  * CVE-2025-31115.patch</changelog>
</package>
<package pkgid="93868f1d2d395d25443561a5855a85ca44b947ab593f03296b1b7518588cd110525a58477534e101c66aedd547b41c03db8776ffd353c47b9c11097ff3a2b422" name="xz-debugsource" arch="aarch64">
  <version epoch="0" ver="5.4.3" rel="slfo.1.1_2.1"/>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to 5.2.8:
  * xz:
  - If xz cannot remove an input file when it should, this
    is now treated as a warning (exit status 2) instead of
    an error (exit status 1). This matches GNU gzip and it
    is more logical as at that point the output file has
    already been successfully closed.
  - Fix handling of .xz files with an unsupported check type.
    Previously such printed a warning message but then xz
    behaved as if an error had occurred (didn't decompress,
    exit status 1). Now a warning is printed, decompression
    is done anyway, and exit status is 2. This used to work
    slightly before 5.0.0. In practice this bug matters only
    if xz has been built with some check types disabled. As
    instructed in PACKAGERS, such builds should be done in
    special situations only.
  - Fix "xz -dc --single-stream tests/files/good-0-empty.xz"
    which failed with "Internal error (bug)". That is,
  - -single-stream was broken if the first .xz stream in
    the input file didn't contain any uncompressed data.
  - Fix displaying file sizes in the progress indicator when
    working in passthru mode and there are multiple input files.
    Just like "gzip -cdf", "xz -cdf" works like "cat" when the
    input file isn't a supported compressed file format. In
    this case the file size counters weren't reset between
    files so with multiple input files the progress indicator
    displayed an incorrect (too large) value.
  * liblzma:
  - API docs in lzma/container.h:
  * Update the list of decoder flags in the decoder
    function docs.
  * Explain LZMA_CONCATENATED behavior with .lzma files
    in lzma_auto_decoder() docs.
  - OpenBSD: Use HW_NCPUONLINE to detect the number of
    available hardware threads in lzma_physmem().
  - Fix use of wrong macro to detect x86 SSE2 support.
    __SSE2_MATH__ was used with GCC/Clang but the correct
    one is __SSE2__. The first one means that SSE2 is used
    for floating point math which is irrelevant here.
    The affected SSE2 code isn't used on x86-64 so this affects
    only 32-bit x86 builds that use -msse2 without -mfpmath=sse
    (there is no runtime detection for SSE2). It improves LZMA
    compression speed (not decompression).
  - Fix the build with Intel C compiler 2021 (ICC, not ICX)
    on Linux. It defines __GNUC__ to 10 but doesn't support
    the __symver__ attribute introduced in GCC 10.
  * Scripts: Ignore warnings from xz by using --quiet --no-warn.
  This is needed if the input .xz files use an unsupported
  check type.
  * Translations:
  - Updated Croatian and Turkish translations.
  - One new translations wasn't included because it needed
    technical fixes. It will be in upcoming 5.4.0. No new
    translations will be added to the 5.2.x branch anymore.
  - Renamed the French man page translation file from
    fr_FR.po to fr.po and thus also its install directory
    (like /usr/share/man/fr_FR -&gt; .../fr).
  - Man page translations for upcoming 5.4.0 are now handled
    in the Translation Project.
  * Update doc/faq.txt a little so it's less out-of-date.</changelog>
  <changelog author="jengelh@inai.de" date="1669896000">- Rename xz-static-devel -&gt; xz-devel-static to follow the general
  naming used in openSUSE.</changelog>
  <changelog author="dmueller@suse.com" date="1671278400">- update to 5.2.10:
  * xz: Don't modify argv[] when parsing the --memlimit* and
  - -block-list command line options. This fixes confusing
    arguments in process listing (like "ps auxf").
  * GNU/Linux only: Use __has_attribute(__symver__) to detect if
    that attribute is supported. This fixes build on Mandriva where
    Clang is patched to define __GNUC__ to 11 by default (instead
    of 4 as used by Clang upstream).
  * liblzma:
  - Fixed an infinite loop in LZMA encoder initialization
    if dict_size &gt;= 2 GiB.
  - Fixed two cases of invalid free() that can happen if
    a tiny allocation fails in encoder re-initialization
    or in lzma_filters_update(). These bugs had some
    similarities with the bug fixed in 5.2.7.
  - Fixed lzma_block_encoder() not allowing the use of
    LZMA_SYNC_FLUSH with lzma_code() even though it was
    documented to be supported. The sync-flush code in
    the Block encoder was already used internally via
    lzma_stream_encoder(), so this was just a missing flag
    in the lzma_block_encoder() API function.
  - GNU/Linux only: Don't put symbol versions into static
    liblzma as it breaks things in some cases (and even if
    it didn't break anything, symbol versions in static
    libraries are useless anyway). The downside of the fix
    is that if the configure options --with-pic or --without-pic
    are used then it's not possible to build both shared and
    static liblzma at the same time on GNU/Linux anymore;
    with those options --disable-static or --disable-shared
    must be used too.
- drop unused xz-devel-static which is no longer supported when using
  - -with-pic (which is needed for shared libs)</changelog>
  <changelog author="dmueller@suse.com" date="1672401600">- update to 5.4.0:
    This bumps the minor version of liblzma because new features were
    added. The API and ABI are still backward compatible with liblzma
    5.2.x and 5.0.x.
    Summary of new features added in the 5.3.x development releases:
  * liblzma:
  - Added threaded .xz decompressor lzma_stream_decoder_mt().
    It can use multiple threads with .xz files that have multiple
    Blocks with size information in Block Headers. The threaded
    encoder in xz has always created such files.
    Single-threaded encoder cannot store the size information in
    Block Headers even if one used LZMA_FULL_FLUSH to create
    multiple Blocks, so this threaded decoder cannot use multiple
    threads with such files.
    If there are multiple Streams (concatenated .xz files), one
    Stream will be decompressed completely before starting the
    next Stream.
  - A new decoder flag LZMA_FAIL_FAST was added. It makes the
    threaded decompressor report errors soon instead of first
    flushing all pending data before the error location.
  - New Filter IDs:
  * LZMA_FILTER_ARM64 is for ARM64 binaries.
  * LZMA_FILTER_LZMA1EXT is for raw LZMA1 streams that don't
    necessarily use the end marker.
  - Added lzma_str_to_filters(), lzma_str_from_filters(), and
    lzma_str_list_filters() to convert a preset or a filter chain
    string to a lzma_filter[] and vice versa. These should make
    it easier to write applications that allow users to specify
    custom compression options.
  - Added lzma_filters_free() which can be convenient for freeing
    the filter options in a filter chain (an array of lzma_filter
    structures).
  - lzma_file_info_decoder() to makes it a little easier to get
    the Index field from .xz files. This helps in getting the
    uncompressed file size but an easy-to-use random access
    API is still missing which has existed in XZ for Java for
    a long time.
  - Added lzma_microlzma_encoder() and lzma_microlzma_decoder().
    It is used by erofs-utils and may be used by others too.
    The MicroLZMA format is a raw LZMA stream (without end marker)
    whose first byte (always 0x00) has been replaced with
    bitwise-negation of the LZMA properties (lc/lp/pb). It was
    created for use in EROFS but may be used in other contexts
    as well where it is important to avoid wasting bytes for
    stream headers or footers. The format is also supported by
    XZ Embedded (the XZ Embedded version in Linux got MicroLZMA
    support in Linux 5.16).
    The MicroLZMA encoder API in liblzma can compress into a
    fixed-sized output buffer so that as much data is compressed
    as can be fit into the buffer while still creating a valid
    MicroLZMA stream. This is needed for EROFS.
  - Added lzma_lzip_decoder() to decompress the .lz (lzip) file
    format version 0 and the original unextended version 1 files.
    Also lzma_auto_decoder() supports .lz files.
  - lzma_filters_update() can now be used with the multi-threaded
    encoder (lzma_stream_encoder_mt()) to change the filter chain
    after LZMA_FULL_BARRIER or LZMA_FULL_FLUSH.
  - In lzma_options_lzma, allow nice_len = 2 and 3 with the match
    finders that require at least 3 or 4. Now it is internally
    rounded up if needed.
  - CLMUL-based CRC64 on x86-64 and E2K with runtime processor
    detection. On 32-bit x86 it currently isn't available unless
  - -disable-assembler is used which can make the non-CLMUL
    CRC64 slower; this might be fixed in the future.
  - Building with --disable-threads --enable-small
    is now thread-safe if the compiler supports
    __attribute__((__constructor__)).
  * xz:
  - Using -T0 (--threads=0) will now use multi-threaded encoder
    even on a single-core system. This is to ensure that output
    from the same xz binary is identical on both single-core and
    multi-core systems.
  - --threads=+1 or -T+1 is now a way to put xz into
    multi-threaded mode while using only one worker thread.
    The + is ignored if the number is not 1.
  - A default soft memory usage limit is now used for compression
    when -T0 is used and no explicit limit has been specified.
    This soft limit is used to restrict the number of threads
    but if the limit is exceeded with even one thread then xz
    will continue with one thread using the multi-threaded
    encoder and this limit is ignored. If the number of threads
    is specified manually then no default limit will be used;
    this affects only -T0.
    This change helps on systems that have very many cores and
    using all of them for xz makes no sense. Previously xz -T0
    could run out of memory on such systems because it attempted
    to reserve memory for too many threads.
    This also helps with 32-bit builds which don't have a large
    amount of address space that would be required for many
    threads. The default soft limit for -T0 is at most 1400 MiB
    on all 32-bit platforms.
  - Previously a low value in --memlimit-compress wouldn't cause
    xz to switch from multi-threaded mode to single-threaded mode
    if the limit cannot otherwise be met; xz failed instead. Now
    xz can switch to single-threaded mode and then, if needed,
    scale down the LZMA2 dictionary size too just like it already
    did when it was started in single-threaded mode.
  - The option --no-adjust no longer prevents xz from scaling down
    the number of threads as that doesn't affect the compressed
    output (only performance). Now --no-adjust only prevents
    adjustments that affect compressed output, that is, with
  - -no-adjust xz won't switch from multi-threaded mode to
    single-threaded mode and won't scale down the LZMA2
    dictionary size.
  - Added a new option --memlimit-mt-decompress=LIMIT. This is
    used to limit the number of decompressor threads (possibly
    falling back to single-threaded mode) but it will never make
    xz refuse to decompress a file. This has a system-specific
    default value because without any limit xz could end up
    allocating memory for the whole compressed input file, the
    whole uncompressed output file, multiple thread-specific
    decompressor instances and so on. Basically xz could
    attempt to use an insane amount of memory even with fairly
    common files. The system-specific default value is currently
    the same as the one used for compression with -T0.
    The new option works together with the existing option
  - -memlimit-decompress=LIMIT. The old option sets a hard limit
    that must not be exceeded (xz will refuse to decompress)
    while the new option only restricts the number of threads.
    If the limit set with --memlimit-mt-decompress is greater
    than the limit set with --memlimit-compress, then the latter
    value is used also for --memlimit-mt-decompress.
  - Added new information to the output of xz --info-memory and
    new fields to the output of xz --robot --info-memory.
  - In --lzma2=nice=NUMBER allow 2 and 3 with all match finders
    now that liblzma handles it.
  - Don't mention endianness for ARM and ARM-Thumb filters in
  - -long-help. The filters only work for little endian
    instruction encoding but modern ARM processors using
    big endian data access still use little endian
    instruction encoding. So the help text was misleading.
    In contrast, the PowerPC filter is only for big endian
    32/64-bit PowerPC code. Little endian PowerPC would need
    a separate filter.
  - Added decompression support for the .lz (lzip) file format
    version 0 and the original unextended version 1. It is
    autodetected by default. See also the option --format on
    the xz man page.
  - Sandboxing enabled by default:
  * Capsicum (FreeBSD)
  * pledge(2) (OpenBSD)
  * Scripts now support the .lz format using xz.
  * A few new tests were added.
  * The liblzma-specific tests are now supported in CMake-based
    builds too ("make test").</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- update to 5.4.1:
  * liblzma:
  - Fixed the return value of lzma_microlzma_encoder() if the
    LZMA options lc/lp/pb are invalid. Invalid lc/lp/pb options
    made the function return LZMA_STREAM_END without encoding
    anything instead of returning LZMA_OPTIONS_ERROR.
  * Tests:
  - Fixed test script compatibility with ancient /bin/sh
    versions. Now the five test_compress_* tests should
    no longer fail on Solaris 10.
  - Added and refactored a few tests.
  * Translations:
  - Updated the Catalan and Esperanto translations.
  - Added Korean and Ukrainian man page translations.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="mpluskal@suse.com" date="1679313600">- Update to version 5.4.2:
  * All fixes from 5.2.11 that were not included in 5.4.1.
  * If xz is built with support for the Capsicum sandbox but running
    in an environment that doesn't support Capsicum, xz now runs
    normally without sandboxing instead of exiting with an error.
  * liblzma:
  - Documentation was updated to improve the style, consistency,
    and completeness of the liblzma API headers.
  - The Doxygen-generated HTML documentation for the liblzma API
    header files is now included in the source release and is
    installed as part of "make install". All JavaScript is
    removed to simplify license compliance and to reduce the
    install size.
  - Fixed a minor bug in lzma_str_from_filters() that produced
    too many filters in the output string instead of reporting
    an error if the input array had more than four filters. This
    bug did not affect xz.
  * Build systems:
  - autogen.sh now invokes the doxygen tool via the new wrapper
    script doxygen/update-doxygen, unless the command line option
  - -no-doxygen is used.
  - Added microlzma_encoder.c and microlzma_decoder.c to the
    VS project files for Windows and to the CMake build. These
    should have been included in 5.3.2alpha.
  * Tests:
  - Added a test to the CMake build that was forgotten in the
    previous release.
  - Added and refactored a few tests.
  * Translations:
  - Updated the Brazilian Portuguese translation.
  - Added Brazilian Portuguese man page translation.</changelog>
  <changelog author="fcrozat@suse.com" date="1680782400">- Update license tag, there is GPL-3.0-or-later code too.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683288000">- Update to version 5.4.3:
  * Build system fixes
  * Translation updates: Croatian
- update signing key</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1750939200">- Fix CVE-2025-31115 (bsc#1240414)
  * CVE-2025-31115.patch</changelog>
</package>
<package pkgid="ca07097d51ab8cdeda25953c86775783254e9ed93dcf6157f138316c420c11399847c34651094791865ce065cf17375012c8897c8e99decd4d1efee0914ec174" name="yaml-cpp-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="slfo.1.1_1.3"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Update to 0.6.2:
  * Fix incorrect version numbering</changelog>
  <changelog author="mrostecki@opensuse.org" date="1576584000">- Update to 0.6.3:
  * bug fixes
  * CMake updates, now requiring 3.1
- Remove merged patch to fix PIE build:
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1630324800">- Update to 0.7.0:
  * Bazel support
  * CMake improvements
  * Adopts many modern C++ syntaxes
  * Bug fixes
  * Obsoletes yaml-cpp-CVE-2017-5950.patch (fixed by DepthGuard)</changelog>
  <changelog author="hpj@urpla.net" date="1630324801">- Adjust library dependency reference</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- add fix-cmake-export.patch  untabify-cmakelists.patch (bsc#1191137)</changelog>
  <changelog author="fcrozat@suse.com" date="1683806400">- Drop patches fix-cmake-export.patch  untabify-cmakelists.patch
  replacing them with pull-request 1077.patch which was
  merged (bsc#1191137).</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1692273600">- Update to 0.8.0:
  * Significant CMake changes, especially to Windows builds
  * Support for std::unordered_map, std::valarray, and std::string_view
  * Updated gtest dependency
  * Assorted bug fixes
- Drop 1077.patch, which is included in version 0.8.0</changelog>
</package>
<package pkgid="58860a801413956ac1784399405e79d68f3f32bc025adb79c440acf95eeeb1430eabeeab9020c31f061f490b84b873ec2cdd84871ecb015aeacca2b6fb179c14" name="zchunk-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="slfo.1.1_1.2"/>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="dmueller@suse.com" date="1641211200">- add zstd-1.5.1.patch (gh#zchunk/zchunk/57)</changelog>
  <changelog author="rpm@fthiessen.de" date="1649937600">- Update to version 1.2.1
  * Better error detection
  * Add support for specifying compression-format in zck
  * zck: add option to select chunk hash
  * Fix testsuite: Add expected sha256sums for zstd 1.5.1+
  * Fix memory leaks
  * Various bug fixes
- Drop upstream merged zstd-1.5.1.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1650628800">- Update to version 1.2.2
  * Turn off EOL handling for the *.zck test files.
  * Let the tests also pass with libzstd-1.4.10.</changelog>
  <changelog author="dmueller@suse.com" date="1666612800">- update to 1.2.3:
  * Remove meson deprecation warning
  * Add license scan report and status
  * test/zck_cmp_uncomp: fix printf format types
  * meson: add option to build without docs
  * zck: declare write_data as static</changelog>
  <changelog author="bwiedemann@suse.com" date="1676808000">- update to 1.2.4:
  * Update tests to handle zstd 1.5.4</changelog>
  <changelog author="dmueller@suse.com" date="1679918400">- update to 1.3.0:
  * Add ZCK_NO_WRITE option to disable writing to a file
  * meson: Use global function in argp check</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- update to 1.3.1:
  * Fix read off-by-one bug in compressed int function
  * Handle read-data errors correctly
  * Ensure memory is freed when zrealloc is called with size 0</changelog>
  <changelog author="dmueller@suse.com" date="1697284800">- update to 1.3.2:
  * Handle overflow errors in malformed zchunk files</changelog>
</package>
<package pkgid="bacda5d0755bc50198a337fef13de8fc0f840a3e2aa8656b2a33078fd54bfd457f87d7120378cbb8693fbca4e5aff623285fbbccd9f50df47f7707da6e8250ad" name="zeromq-debugsource" arch="aarch64">
  <version epoch="0" ver="4.3.5" rel="slfo.1.1_1.3"/>
  <changelog author="adam.majer@suse.de" date="1522065600">- New upstream version 4.2.5:
  * fix backward-incompatible change in the NULL auth
    mechanism that slipped in 4.2.3 and made connections
    with a ZAP domain set on a socket but without a working
    ZAP handler fail. See ZMQ_ZAP_ENFORCE_DOMAIN
  * clarify in zmq_close manpage that the operation will
    complete asynchronously.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- New upstream version 4.3.1:
  * CVE-2019-6250: A vulnerability has been found that would allow
    attackers to direct a peer to jump to and execute from an address
    indicated by the attacker. (bsc#1121717)
  * fixed race condition in ZMQ_PUSH when quickly disconnecting and
    reconnecting causes last part of multi-part message to get
    "stuck" and resent by mistake to the new socket.
  For complete set of changes, see,
  https://github.com/zeromq/libzmq/releases/tag/v4.3.1
  https://github.com/zeromq/libzmq/releases/tag/v4.3.0</changelog>
  <changelog author="vcizek@suse.com" date="1562673600">- New upstream version 4.3.2:
  * CVE-2019-13132: a remote, unauthenticated client connecting to a
    libzmq application, running with a socket listening with CURVE
    encryption/authentication enabled, may cause a stack overflow and
    overwrite the stack with arbitrary data, due to a buffer overflow in
    the library. Users running public servers with the above configuration
    are highly encouraged to upgrade as soon as possible, as there are no
    known mitigations. (bsc#1140255)
  * New DRAFT (see NEWS for 4.2.0) zmq_socket_monitor_versioned API that supports
    a versioned monitoring events protocol as a parameter. Passing 1 results in
    the same behaviour as zmq_socket_monitor.
  * New DRAFT (see NEWS for 4.2.0) zmq_socket_monitor_pipes_stats that triggers
    a new ZMQ_EVENT_PIPES_STATS to be delivered via zmq_socket_monitor_versioned
    v2 API, which contains the current status of all the queues owned by the
    monitored socket. See doc/zmq_socket_monitor_versioned.txt for details.
  * New DRAFT (see NEWS for 4.2.0) zmq_poller_fd that returns the FD of a thread
    safe socket.
  * New DRAFT (see NEWS for 4.2.0) socket options:
    ZMQ_XPUB_MANUAL_LAST_VALUE is similar to ZMQ_XPUB_MANUAL but allows to avoid
    duplicates when using last value caching.
    ZMQ_SOCKS_USERNAME and ZMQ_SOCKS_PASSWORD that implement SOCKS5 proxy
    authentication.
- For complete set of changes, see
  https://github.com/zeromq/libzmq/releases/tag/v4.3.2</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- New upstream version 4.3.3:
  * Denial-of-Service on CURVE/ZAP-protected servers by
    unauthenticated clients. (CVE-2020-15166, bsc#1176116)
    If a raw TCP socket is opened and connected to an endpoint that is fully
    configured with CURVE/ZAP, legitimate clients will not be able to exchange
    any message. Handshakes complete successfully, and messages are delivered to
    the library, but the server application never receives them.
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-25wp-cf8g-938m
  * Stack overflow on server running PUB/XPUB socket (CURVE disabled).
    The PUB/XPUB subscription store (mtrie) is traversed using recursive
    function calls. In the remove (unsubscription) case, the recursive calls are
    NOT tail calls, so even with optimizations the stack grows linearly with the
    length of a subscription topic. Topics are under the control of remote
    clients - they can send a subscription to arbitrary length topics. An
    attacker can thus cause a server to create an mtrie sufficiently large such
    that, when unsubscribing, traversal will cause a stack overflow. (bsc#1176258)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-qq65-x72m-9wr8
  * Memory leak in PUB server induced by malicious client(s) without CURVE/ZAP.
    Messages with metadata are never processed by PUB sockets, but the metadata
    is kept referenced in the PUB object and never freed. (bsc#1176257)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-4p5v-h92w-6wxw
  * Memory leak in client induced by malicious server(s) without CURVE/ZAP.
    When a pipe processes a delimiter and is already not in active state but
    still has an unfinished message, the message is leaked. (bsc#1176259)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-wfr2-29gj-5w87
  * Heap overflow when receiving malformed ZMTP v1 packets (CURVE disabled).
    By crafting a packet which is not valid ZMTP v2/v3, and which has two
    messages larger than 8192 bytes, the decoder can be tricked into changing
    the recorded size of the 8192 bytes static buffer, which then gets overflown
    by the next message. The content that gets written in the overflown memory
    is entirely decided by the sender. (bsc#1176256)
    For more information see the security advisory:
    https://github.com/zeromq/libzmq/security/advisories/GHSA-fc3w-qxf5-7hp6
  For complete list of changes, see
  https://github.com/zeromq/libzmq/releases/tag/v4.3.3</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 4.3.4:
  * ZMQ_PRIORITY will set the SO_PRIORITY socket option on the underlying
    sockets. Only supported on Linux.
  * Fixed compilation errors on kFreeBSD and GNU/Hurd
  * Fixed excessive amount of socket files left behind in Windows TMP
  * Fixed regression that breaks using IPv6 link-local addresses on Linux
  * Fixed compilation errors on Android
  * Fixed compilation error with ulibc and libbsd
  * Fixed stack overflow on Windows x64
  * Fixed various compilation errors on Windows ARM 32bit
  * Fixed various compilation warnings with XCode
  * Fixed return value of zmq_ctx_get changed unintentionally</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Explicit BR on python is not necessary.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- drop xmlto and asciidoc buildrequires, these are only needed
  for non-release builds which do not ship with prebuilt docs</changelog>
  <changelog author="schwab@suse.de" date="1674475200">- qemu-user.patch: Fix build with qemu linux-user emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1698148800">- update to 4.3.5:
  * Relicensing from LGPL-3.0+ (with custom exceptions) to MPL-2.0 is now complete.
    libzmq is now distributed under the Mozilla Public License 2.0. Relicensing
    grants have been collected from all relevant authors, and some functionality
    has been clean-room reimplemented where that was not possible. In layman terms,
    the new license provides the same rights and obligations as before. Source
    files are now tagged using the SPDX license identifier format.
    Details of the relicensing process can be seen at: #2376
    Relicensing grants have been archived at:
    https://github.com/rlenferink/libzmq-relicense
    A special thanks to everybody who helped with this long and difficult task,
    with the process, the reimplementations, the collections and everything else.
  * New DRAFT (see NEWS for 4.2.0) socket options:
    ZMQ_BUSY_POLL will set the SO_BUSY_POLL socket option on the underlying
    sockets, if it is supported.
    ZMQ_HICCUP_MSG will send a message when the peer has been disconnected.
    ZMQ_XSUB_VERBOSE_UNSUBSCRIBE will configure a socket to pass all
    unsubscription messages, including duplicated ones.
    ZMQ_TOPICS_COUNT will return the number of subscribed topics on a
    PUB/SUB socket.
    ZMQ_NORM_MODE, ZMQ_NORM_UNICAST_NACK, ZMQ_NORM_BUFFER_SIZE,
    ZMQ_NORM_SEGMENT_SIZE, ZMQ_NORM_BLOCK_SIZE, ZMQ_NORM_NUM_PARITY,
    ZMQ_NORM_NUM_AUTOPARITY and ZMQ_NORM_PUSH to control various aspect of
    NORM sockets.
    See doc/zmq_setsockopt.txt and doc/zmq_getsockopt.txt for details.
  * New DRAFT (see NEWS for 4.2.0) zmq_ppoll APIs was added that differs from
    zmq_poll in the same way that ppoll differs from poll.
    See doc/zmq_ppoll.txt for details.
  * Various bug fixes and performance improvements.
- qemu-user.patch: upstreamed, removed</changelog>
</package>
<package pkgid="95fcdde57ad50750da0828f1ee230d9196f4eff875b54ec433b60109483ade16b6018eb7277bfb6d45dcad0c15a05ccebba3740b1f9fd870aa6d143fcb4e812e" name="zisofs-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="slfo.1.1_1.2"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires</changelog>
  <changelog author="dimstar@opensuse.org" date="1266235200">- Update to version 1.0.8:
  + This release fixes the --sloppy option, which was documented
    but did not work.
- Spec cleanup.</changelog>
  <changelog author="jengelh@medozas.de" date="1288440000">- Use %_smp_mflags</changelog>
  <changelog author="mhrusecky@suse.com" date="1370520000">- require /usr/bin/mkisofs instead of mkisofs package</changelog>
  <changelog author="jengelh@inai.de" date="1412510400">- Use Source URLs and remove redundant %clean section</changelog>
  <changelog author="jkeil@suse.de" date="1446206400">- require mkisofs package instead of /usr/bin/mkisofs
  * Depending on the binary results in a conflict between
    the cdrkit-cdrtools-compat and mkisofs packages.
  * cdrkit-cdrtools-compat is to be replaced by cdrtools,
    which provides the mkisofs package</changelog>
  <changelog author="mpluskal@suse.com" date="1446897600">- Use macro for configure
- Cleanup spec file with spec-cleaner
- Don't ship INSTALL file</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- refresh spec file (update licensedir)</changelog>
  <changelog author="fcrozat@suse.com" date="1683806400">- Fix url and download to up to date location.
- Add autoconf as BuildRequires.</changelog>
</package>
<package pkgid="404af3aad8f5580c5d8528a5e98c21c329b91f313be9a9c586313edb6f153932bb1394c92cfeb1cf828cdbb7f3717d1bbbcc0706ea48fde65cca9fd543673d1a" name="zisofs-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="slfo.1.1_1.2"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires</changelog>
  <changelog author="dimstar@opensuse.org" date="1266235200">- Update to version 1.0.8:
  + This release fixes the --sloppy option, which was documented
    but did not work.
- Spec cleanup.</changelog>
  <changelog author="jengelh@medozas.de" date="1288440000">- Use %_smp_mflags</changelog>
  <changelog author="mhrusecky@suse.com" date="1370520000">- require /usr/bin/mkisofs instead of mkisofs package</changelog>
  <changelog author="jengelh@inai.de" date="1412510400">- Use Source URLs and remove redundant %clean section</changelog>
  <changelog author="jkeil@suse.de" date="1446206400">- require mkisofs package instead of /usr/bin/mkisofs
  * Depending on the binary results in a conflict between
    the cdrkit-cdrtools-compat and mkisofs packages.
  * cdrkit-cdrtools-compat is to be replaced by cdrtools,
    which provides the mkisofs package</changelog>
  <changelog author="mpluskal@suse.com" date="1446897600">- Use macro for configure
- Cleanup spec file with spec-cleaner
- Don't ship INSTALL file</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- refresh spec file (update licensedir)</changelog>
  <changelog author="fcrozat@suse.com" date="1683806400">- Fix url and download to up to date location.
- Add autoconf as BuildRequires.</changelog>
</package>
<package pkgid="e2e62009e76cdd4f63d67549f8816b4a84c72269ba2bde9cbba22bb23383327005682748e1605dac33a299797ce6e57cb8338ac6709dcac8350dc1ac4550573e" name="zlib-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.13" rel="slfo.1.1_2.1"/>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.2.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dmueller@suse.com" date="1677672000">- avoid buildcycle with krb5 (in sle15+ - jsc#PED-3641)
- skip hwcaps subpackage building for -static subpackage</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683288000">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1771416000">- Fix CVE-2026-27171, infinite loop via the crc32_combine64 and
  crc32_combine_gen64 functions due to missing checks for negative
  lengths (bsc#1258392)
  * CVE-2026-27171.patch</changelog>
</package>
<package pkgid="973177087b705b635e1dfab6afbe697f858cf5432a8ae284c70cb8fc884a8f2bcb6322c36676aa382ad545eb610ba3e390541cd0938a056880f523a379e26094" name="zstd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.5" rel="slfo.1.1_1.4"/>
  <changelog author="ismail@i10z.com" date="1620993600">- Update to version 1.5.0
  * https://github.com/facebook/zstd/releases/tag/v1.5.0
  * Improved Middle-Level Compression Speed
  * Improved High-Level Compression Ratio
  * Faster Decompression Speed
  * Dynamic Library Supports Multithreading by Default
- Drop zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 1.5.1:
  * perf: rebalanced compression levels, to better match the intended speed/level curve
  * perf: faster huffman decoder, using x64 assembly
  * perf: slightly faster high speed modes (strategies fast &amp; dfast)
  * perf: improved binary size and faster compilation times
  * perf: new row64 mode, used notably in level 12
  * perf: faster mid-level compression speed in presence of highly repetitive patterns
  * perf: minor compression ratio improvements for small data at high levels
  * perf: reduced stack usage (mostly useful for Linux Kernel)
  * perf: faster compression speed on incompressible data
  * perf: on-demand reduced ZSTD_DCtx state size, using build macro ZSTD_DECODER_INTERNAL_BUFFER, at a small cost of performance
  * build: allows hiding static symbols in the dynamic library, using build macro
  * build: support for m68k (Motorola 68000's)
  * build: improved AIX support
  * build: improved meson unofficial build
  * cli : custom memory limit when training dictionary (#2925)
  * cli : report advanced parameters information when compressing in very verbose mode (``-vv`)</changelog>
  <changelog author="dmueller@suse.com" date="1641211200">- fix pkgconfig pc file settings by passing in right prefix during build</changelog>
  <changelog author="dmueller@suse.com" date="1641384000">- add noexecstack.patch (bsc#1194337)</changelog>
  <changelog author="bwiedemann@suse.com" date="1642766400">- update to 1.5.2:
  * correct a performance regression
  * smaller improvements and fixes
  * See https://github.com/facebook/zstd/releases/tag/v1.5.2
- Refresh pzstd.1.patch
- Drop upstream noexecstack.patch</changelog>
  <changelog author="dmueller@suse.com" date="1643544000">- enable zlib/gzip compatible backend, as zlib is significantly
  (50%-100%) faster than gzip
- add zstd-gzip compatibility subpackage which can be used
  as a drop in compatible replacement for gzip
- small spec file cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1672747200">- add zcat in zstd-gzip (needed by for example the kernel scripts)</changelog>
  <changelog author="bwiedemann@suse.com" date="1676030400">- update to 1.5.4:
  * perf: +20% faster huffman decompression for targets that
    can't compile x64 assembly
  * perf: up to +10% faster streaming compression at levels 1-2
  * perf: +4-13% for levels 5-12 by optimizing function
    generation
  * pref: +3-11% compression speed for `arm` target
  * perf: +5-30% faster dictionary compression at levels 1-4
  * perf: +10-20% cold dict compression speed by prefetching
    CDict tables
  * perf: +1% faster compression by removing a branch in
    ZSTD_fast_noDict
  * perf: Small compression ratio improvements in high
    compression mode
  * perf: small speed improvement by better detecting
    `STATIC_BMI2` for `clang`
  * perf: Improved streaming performance when
    `ZSTD_c_stableInBuffer` is set
  * cli: Asynchronous I/O for improved cli speed
  * cli: Change `zstdless` behavior to align with `zless`
  * cli: Keep original file if `-c` or `--stdout` is given
  * cli: Keep original files when result is concatenated into a
    single output with `-o`
  * cli: Preserve Permissions and Ownership of regular files
  * cli: Print zlib/lz4/lzma library versions with `-vv`
  * cli: Print checksum value for single frame files with `-lv`
  * cli: Print `dictID` when present with `-lv`
  * cli: when `stderr` is *not* the console, disable status
    updates, but preserve final summary
  * cli: support `--best` and `--no-name` in `gzip` compatibility
    mode
  * cli: support for `posix` high resolution timer
    `clock_gettime()`, for improved benchmark accuracy
  * cli: improved help/usage (`-h`,  `-H`) formatting
  * cli: Fix better handling of bogus numeric values
  * cli: Fix input consists of multiple files _and_ `stdin`
  * cli: Fix tiny files passthrough
  * cli: Fix for `-r` on empty directory
  * cli: Fix empty string as argument for `--output-dir-*`
  * cli: Fix decompression memory usage reported by `-vv --long`
  * cli: Fix infinite loop when empty input is passed to trainer
  * cli: Fix `--adapt` doesn't work when `--no-progress` is also
    set
  * api: Support for Block-Level Sequence Producer
  * api: Support for in-place decompression
  * api: New  `ZSTD_CCtx_setCParams()`  function, set all
    parameters defined in a  `ZSTD_compressionParameters`
    structure
  * api: Streaming decompression detects incorrect header ID
    sooner
  * api: Window size resizing optimization for edge case
  * api: More accurate error codes for busy-loop scenarios
  * api: Fix limit overflow in `compressBound` and
    `decompressBound` (#3362, #3373, Cyan4973) reported by
    @nigeltao
  * api: Deprecate several advanced experimental functions:
    streaming (#3408, @embg), copy
  * bug: Fix corruption that rarely occurs in 32-bit mode with
    wlog=25
  * bug: Fix for block-splitter
  * bug: Fixes for Sequence Compression API
  * bug: Fix leaking thread handles on Windows
  * bug: Fix timing issues with cmake/meson builds
  * build: Allow user to select legacy level for cmake
  * build: Enable legacy support by default in cmake
  * build: Meson build script improvements
  * build: Add aarch64 to supported architectures for zstd_trace
  * build: support AIX architecture
  * build: Fix `ZSTD_LIB_MINIFY` build macro, which now reduces
    static library size by half
  * build: Fix Windows issues with Multithreading translation
    layer (#3364, #3380, @yoniko) and ARM64 target
  * build: Fix `cmake` script
  * doc: Updated man page, providing more details for `--train`
    mode
  * doc: Add decompressor errata document
  * misc: Enable Intel CET
  * misc: Fix `contrib/` seekable format
  * misc: Improve speed of the one-file library generator
- rebase pzstd.1.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dmueller@suse.com" date="1681387200">- update to 1.5.5:
  * fix: fix rare corruption bug affecting the high compression
    mode, reported by @danlark1
  * perf: improve mid-level compression speed
  * lib: deprecated bufferless block-level API (#3534) by
    @terrelln
  * cli: mmap large dictionaries to save memory, by
    @daniellerozenblit
  * cli: improve speed of --patch-from mode (~+50%) (#3545) by
    @daniellerozenblit
  * cli: improve i/o speed (~+10%) when processing lots of small
    files (#3479) by @felixhandte
  * cli: zstd no longer crashes when requested to write into
    write-protected directory (#3541) by @felixhandte
  * cli: fix decompression into block device using -o, reported
    by @georgmu
  * misc: improve seekable format ingestion speed (~+100%) for
    very small chunk sizes (#3544) by @Cyan4973
  * misc: tests/fullbench can benchmark multiple files (#3516) by
    @dloidolt</changelog>
</package>
<package pkgid="b91644c01edd4f9f0200fc56da3e3e6a1a055ccfc2c971e29477bb7778f55e90fed1b8944a9f40ff3d99715ef0b0883e5983afcc87fd4a1d03522e670ab6850a" name="zstd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.5" rel="slfo.1.1_1.4"/>
  <changelog author="ismail@i10z.com" date="1620993600">- Update to version 1.5.0
  * https://github.com/facebook/zstd/releases/tag/v1.5.0
  * Improved Middle-Level Compression Speed
  * Improved High-Level Compression Ratio
  * Faster Decompression Speed
  * Dynamic Library Supports Multithreading by Default
- Drop zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 1.5.1:
  * perf: rebalanced compression levels, to better match the intended speed/level curve
  * perf: faster huffman decoder, using x64 assembly
  * perf: slightly faster high speed modes (strategies fast &amp; dfast)
  * perf: improved binary size and faster compilation times
  * perf: new row64 mode, used notably in level 12
  * perf: faster mid-level compression speed in presence of highly repetitive patterns
  * perf: minor compression ratio improvements for small data at high levels
  * perf: reduced stack usage (mostly useful for Linux Kernel)
  * perf: faster compression speed on incompressible data
  * perf: on-demand reduced ZSTD_DCtx state size, using build macro ZSTD_DECODER_INTERNAL_BUFFER, at a small cost of performance
  * build: allows hiding static symbols in the dynamic library, using build macro
  * build: support for m68k (Motorola 68000's)
  * build: improved AIX support
  * build: improved meson unofficial build
  * cli : custom memory limit when training dictionary (#2925)
  * cli : report advanced parameters information when compressing in very verbose mode (``-vv`)</changelog>
  <changelog author="dmueller@suse.com" date="1641211200">- fix pkgconfig pc file settings by passing in right prefix during build</changelog>
  <changelog author="dmueller@suse.com" date="1641384000">- add noexecstack.patch (bsc#1194337)</changelog>
  <changelog author="bwiedemann@suse.com" date="1642766400">- update to 1.5.2:
  * correct a performance regression
  * smaller improvements and fixes
  * See https://github.com/facebook/zstd/releases/tag/v1.5.2
- Refresh pzstd.1.patch
- Drop upstream noexecstack.patch</changelog>
  <changelog author="dmueller@suse.com" date="1643544000">- enable zlib/gzip compatible backend, as zlib is significantly
  (50%-100%) faster than gzip
- add zstd-gzip compatibility subpackage which can be used
  as a drop in compatible replacement for gzip
- small spec file cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1672747200">- add zcat in zstd-gzip (needed by for example the kernel scripts)</changelog>
  <changelog author="bwiedemann@suse.com" date="1676030400">- update to 1.5.4:
  * perf: +20% faster huffman decompression for targets that
    can't compile x64 assembly
  * perf: up to +10% faster streaming compression at levels 1-2
  * perf: +4-13% for levels 5-12 by optimizing function
    generation
  * pref: +3-11% compression speed for `arm` target
  * perf: +5-30% faster dictionary compression at levels 1-4
  * perf: +10-20% cold dict compression speed by prefetching
    CDict tables
  * perf: +1% faster compression by removing a branch in
    ZSTD_fast_noDict
  * perf: Small compression ratio improvements in high
    compression mode
  * perf: small speed improvement by better detecting
    `STATIC_BMI2` for `clang`
  * perf: Improved streaming performance when
    `ZSTD_c_stableInBuffer` is set
  * cli: Asynchronous I/O for improved cli speed
  * cli: Change `zstdless` behavior to align with `zless`
  * cli: Keep original file if `-c` or `--stdout` is given
  * cli: Keep original files when result is concatenated into a
    single output with `-o`
  * cli: Preserve Permissions and Ownership of regular files
  * cli: Print zlib/lz4/lzma library versions with `-vv`
  * cli: Print checksum value for single frame files with `-lv`
  * cli: Print `dictID` when present with `-lv`
  * cli: when `stderr` is *not* the console, disable status
    updates, but preserve final summary
  * cli: support `--best` and `--no-name` in `gzip` compatibility
    mode
  * cli: support for `posix` high resolution timer
    `clock_gettime()`, for improved benchmark accuracy
  * cli: improved help/usage (`-h`,  `-H`) formatting
  * cli: Fix better handling of bogus numeric values
  * cli: Fix input consists of multiple files _and_ `stdin`
  * cli: Fix tiny files passthrough
  * cli: Fix for `-r` on empty directory
  * cli: Fix empty string as argument for `--output-dir-*`
  * cli: Fix decompression memory usage reported by `-vv --long`
  * cli: Fix infinite loop when empty input is passed to trainer
  * cli: Fix `--adapt` doesn't work when `--no-progress` is also
    set
  * api: Support for Block-Level Sequence Producer
  * api: Support for in-place decompression
  * api: New  `ZSTD_CCtx_setCParams()`  function, set all
    parameters defined in a  `ZSTD_compressionParameters`
    structure
  * api: Streaming decompression detects incorrect header ID
    sooner
  * api: Window size resizing optimization for edge case
  * api: More accurate error codes for busy-loop scenarios
  * api: Fix limit overflow in `compressBound` and
    `decompressBound` (#3362, #3373, Cyan4973) reported by
    @nigeltao
  * api: Deprecate several advanced experimental functions:
    streaming (#3408, @embg), copy
  * bug: Fix corruption that rarely occurs in 32-bit mode with
    wlog=25
  * bug: Fix for block-splitter
  * bug: Fixes for Sequence Compression API
  * bug: Fix leaking thread handles on Windows
  * bug: Fix timing issues with cmake/meson builds
  * build: Allow user to select legacy level for cmake
  * build: Enable legacy support by default in cmake
  * build: Meson build script improvements
  * build: Add aarch64 to supported architectures for zstd_trace
  * build: support AIX architecture
  * build: Fix `ZSTD_LIB_MINIFY` build macro, which now reduces
    static library size by half
  * build: Fix Windows issues with Multithreading translation
    layer (#3364, #3380, @yoniko) and ARM64 target
  * build: Fix `cmake` script
  * doc: Updated man page, providing more details for `--train`
    mode
  * doc: Add decompressor errata document
  * misc: Enable Intel CET
  * misc: Fix `contrib/` seekable format
  * misc: Improve speed of the one-file library generator
- rebase pzstd.1.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="dmueller@suse.com" date="1681387200">- update to 1.5.5:
  * fix: fix rare corruption bug affecting the high compression
    mode, reported by @danlark1
  * perf: improve mid-level compression speed
  * lib: deprecated bufferless block-level API (#3534) by
    @terrelln
  * cli: mmap large dictionaries to save memory, by
    @daniellerozenblit
  * cli: improve speed of --patch-from mode (~+50%) (#3545) by
    @daniellerozenblit
  * cli: improve i/o speed (~+10%) when processing lots of small
    files (#3479) by @felixhandte
  * cli: zstd no longer crashes when requested to write into
    write-protected directory (#3541) by @felixhandte
  * cli: fix decompression into block device using -o, reported
    by @georgmu
  * misc: improve seekable format ingestion speed (~+100%) for
    very small chunk sizes (#3544) by @Cyan4973
  * misc: tests/fullbench can benchmark multiple files (#3516) by
    @dloidolt</changelog>
</package>
<package pkgid="ccc4eb7e428d8e169fbc40dbfb36d7b69b81779ab757b91f81f8214b42d4c34fb9951d695319b424476502bc79572df6acfab649982f95229530544723536e67" name="zypper-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.95" rel="slfo.1.1_1.1"/>
  <changelog author="ma@suse.de" date="1740657600">- refresh: add --include-all-archs (fixes #598)
  Future multi-arch repos may allow to download only those metadata
  which refer to packages actually compatible with the systems
  architecture. Some tools however want zypp to provide the full
  metadata of a repository without filtering incompatible
  architectures.
- info,search: add option to search and list Enhances
  (bsc#1237949)
- version 1.14.86</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Package preloader that concurrently downloads files. It's not yet
  enabled per default. To enable the preview set ZYPP_CURL2=1 and
  ZYPP_PCK_PRELOAD=1 in the environment. (#104)
- BuildRequires:  libzypp-devel &gt;= 17.36.4.
- version 1.14.87</changelog>
  <changelog author="ma@suse.de" date="1741867200">- Do not double encode URL strings passed on the commandline
  (bsc#1237587)
  URLs passed on the commandline must have their special chars
  encoded already. We just want to check and encode forgotten
  unsafe chars like a blank. A '%' however must not be encoded
  again.
- version 1.14.88</changelog>
  <changelog author="ma@suse.de" date="1746014400">- Updated translations (bsc#1230267)
- version 1.14.89</changelog>
  <changelog author="ma@suse.de" date="1747915200">- BuildRequires:  libzypp-devel &gt;= 17.37.0.
- Use libzypp improvements for preload and mirror handling.
- xmlout.rnc: Update repo-element (bsc#1241463)
  Add the "metalink" attribute and reflect that the "url" elements
  list may in fact be empty, if no baseurls are defined in the
  .repo files.
- man: update --allow-unsigned-rpm description.
  Explain how to achieve the same for packages provided by
  repositories.
- version 1.14.90</changelog>
  <changelog author="ma@suse.de" date="1750248000">- BuildRequires:  libzypp-devel &gt;= 17.37.6.
  Enhancements regarding mirror handling during repo refresh. Adapt
  to libzypp API changes. (bsc#1230267)
- version 1.14.91</changelog>
  <changelog author="ma@suse.de" date="1751630400">- sh: Reset solver options after command (bsc#1245496)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
- version 1.14.92</changelog>
  <changelog author="ma@suse.de" date="1752840000">- Fix addrepo to handle explicit --check and --no-check requests
  (bsc#1246466)
- Accept "show" as alias for "info" (bsc#1245985)
- version 1.14.93</changelog>
  <changelog author="ma@suse.de" date="1758628800">- Fixed `bash-completion`: `zypper refresh` now ignores
  repository priority lines.
- Changes to support building against restructured libzypp in
  stack build (bsc#1230267)
- version 1.14.94</changelog>
  <changelog author="ma@suse.de" date="1772798400">- Report download progress for command line rpms (fixes #613)
- Hint to '-vv ref' to see the mirrors used to download the
  metadata (bsc#1257882)
- Service: Allow "zypper ls SERVICE ..." to test whether a
  service with this alias is defined (bsc#1252744)
  The command prints an abstract of all services passed on the
  command line. It returns 3-ZYPPER_EXIT_ERR_INVALID_ARGS if some
  argument does not name an existing service.
- Keep repo data when updating the service settings (bsc#1252744)
- info: Enhance pattern content table (bsc#1158038)
  Alternatives (multiple packages providing the same requirement)
  are now listed as a single entry in the content table. The entry
  shows either the installed package which satisfies the
  requirement or the requirement itself as type 'Provides'.
  Listing all potential alternatives was miss leading, especially
  if the alternatives were mutual exclusive. It looked like an
  installed pattern had not-installed requirements and it was not
  possible to install all requirements at the same time.
- version 1.14.95</changelog>
</package>
<package pkgid="829cdc98c882a17253c3bba0d9d50e7d6a946b732f24c980fe4d0deb2976b3d49428be5257d9222f2da7299dcdd1ea0493480ad858c23a555b068b2865eeef3e" name="zypper-debugsource" arch="aarch64">
  <version epoch="0" ver="1.14.95" rel="slfo.1.1_1.1"/>
  <changelog author="ma@suse.de" date="1740657600">- refresh: add --include-all-archs (fixes #598)
  Future multi-arch repos may allow to download only those metadata
  which refer to packages actually compatible with the systems
  architecture. Some tools however want zypp to provide the full
  metadata of a repository without filtering incompatible
  architectures.
- info,search: add option to search and list Enhances
  (bsc#1237949)
- version 1.14.86</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Package preloader that concurrently downloads files. It's not yet
  enabled per default. To enable the preview set ZYPP_CURL2=1 and
  ZYPP_PCK_PRELOAD=1 in the environment. (#104)
- BuildRequires:  libzypp-devel &gt;= 17.36.4.
- version 1.14.87</changelog>
  <changelog author="ma@suse.de" date="1741867200">- Do not double encode URL strings passed on the commandline
  (bsc#1237587)
  URLs passed on the commandline must have their special chars
  encoded already. We just want to check and encode forgotten
  unsafe chars like a blank. A '%' however must not be encoded
  again.
- version 1.14.88</changelog>
  <changelog author="ma@suse.de" date="1746014400">- Updated translations (bsc#1230267)
- version 1.14.89</changelog>
  <changelog author="ma@suse.de" date="1747915200">- BuildRequires:  libzypp-devel &gt;= 17.37.0.
- Use libzypp improvements for preload and mirror handling.
- xmlout.rnc: Update repo-element (bsc#1241463)
  Add the "metalink" attribute and reflect that the "url" elements
  list may in fact be empty, if no baseurls are defined in the
  .repo files.
- man: update --allow-unsigned-rpm description.
  Explain how to achieve the same for packages provided by
  repositories.
- version 1.14.90</changelog>
  <changelog author="ma@suse.de" date="1750248000">- BuildRequires:  libzypp-devel &gt;= 17.37.6.
  Enhancements regarding mirror handling during repo refresh. Adapt
  to libzypp API changes. (bsc#1230267)
- version 1.14.91</changelog>
  <changelog author="ma@suse.de" date="1751630400">- sh: Reset solver options after command (bsc#1245496)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
- version 1.14.92</changelog>
  <changelog author="ma@suse.de" date="1752840000">- Fix addrepo to handle explicit --check and --no-check requests
  (bsc#1246466)
- Accept "show" as alias for "info" (bsc#1245985)
- version 1.14.93</changelog>
  <changelog author="ma@suse.de" date="1758628800">- Fixed `bash-completion`: `zypper refresh` now ignores
  repository priority lines.
- Changes to support building against restructured libzypp in
  stack build (bsc#1230267)
- version 1.14.94</changelog>
  <changelog author="ma@suse.de" date="1772798400">- Report download progress for command line rpms (fixes #613)
- Hint to '-vv ref' to see the mirrors used to download the
  metadata (bsc#1257882)
- Service: Allow "zypper ls SERVICE ..." to test whether a
  service with this alias is defined (bsc#1252744)
  The command prints an abstract of all services passed on the
  command line. It returns 3-ZYPPER_EXIT_ERR_INVALID_ARGS if some
  argument does not name an existing service.
- Keep repo data when updating the service settings (bsc#1252744)
- info: Enhance pattern content table (bsc#1158038)
  Alternatives (multiple packages providing the same requirement)
  are now listed as a single entry in the content table. The entry
  shows either the installed package which satisfies the
  requirement or the requirement itself as type 'Provides'.
  Listing all potential alternatives was miss leading, especially
  if the alternatives were mutual exclusive. It looked like an
  installed pattern had not-installed requirements and it was not
  possible to install all requirements at the same time.
- version 1.14.95</changelog>
</package>
</otherdata>